0
:
011
> ub System_Management_Automation_ni
+
0x1099e37
L10
System_Management_Automation_ni
+
0x1099df1
:
00007ffa
`
109c9df1
488975c0
mov qword ptr [rbp
-
40h
],rsi
00007ffa
`
109c9df5
4c8d4e0c
lea r9,[rsi
+
0Ch
]
00007ffa
`
109c9df9
4c897db8
mov qword ptr [rbp
-
48h
],r15
00007ffa
`
109c9dfd
4c8b5db0
mov r11,qword ptr [rbp
-
50h
]
00007ffa
`
109c9e01
4d8b5b20
mov r11,qword ptr [r11
+
20h
]
00007ffa
`
109c9e05
498b03
mov rax,qword ptr [r11]
00007ffa
`
109c9e08
488b7530
mov rsi,qword ptr [rbp
+
30h
]
00007ffa
`
109c9e0c
4889742420
mov qword ptr [rsp
+
20h
],rsi
00007ffa
`
109c9e11
4c897c2428
mov qword ptr [rsp
+
28h
],r15
00007ffa
`
109c9e16
41bb10000000
mov r11d,
10h
00007ffa
`
109c9e1c
4c8b55b0
mov r10,qword ptr [rbp
-
50h
]
00007ffa
`
109c9e20
4c895588
mov qword ptr [rbp
-
78h
],r10
00007ffa
`
109c9e24
4c8d150c000000
lea r10,[System_Management_Automation_ni
+
0x1099e37
(
00007ffa
`
109c9e37
)]
00007ffa
`
109c9e2b
4c8955a0
mov qword ptr [rbp
-
60h
],r10
00007ffa
`
109c9e2f
41c644240c00
mov byte ptr [r12
+
0Ch
],
0
00007ffa
`
109c9e35
ffd0 call rax