Function at 0x140003100
Capabilities:
Enumerate processes

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x170
mov rax, qword [0x140018040]
xor rax, rsp
mov qword [rsp + 0x160], rax
call qword [sym.imp.KERNEL32.dll_FreeConsole]
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor edi, edi
xor edx, edx
mov ecx, 2
mov ebx, edi
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x130
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rsp + 0x30]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1400031b6
nop
lea rdx, str.aow_exe.exe
lea rcx, [rsp + 0x5c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jne 0x1400031a4
mov eax, dword [rsp + 0x4c]
cmp eax, ebx
jle 0x1400031a4
mov edi, dword [rsp + 0x38]
mov ebx, eax
lea rdx, [rsp + 0x30]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140003180
mov edx, edi
call fcn.140003f20
mov rbx, qword [0x1400187a8]
mov edx, 0xe0c36e0
call fcn.140004570
call fcn.140001f90
mov dword [rbx + 0x40], eax
test eax, eax
je 0x140003230
mov edx, eax
call fcn.140004570
lea edx, [rax + 0x20]
call fcn.140004570
mov rcx, qword [0x1400187b0]
mov r9d, 0x40
lea edx, [rax + 0x200]
lea rbx, [rcx + 0x88]
mov r8, rbx
call fcn.140004160
mov rax, qword [0x1400187c0]
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movups xmm2, xmmword [rbx + 0x20]
movups xmm3, xmmword [rbx + 0x30]
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax + 0x20], xmm2
movups xmmword [rax + 0x30], xmm3
mov rcx, qword [0x1400187b8]
call fcn.140004ef0
mov rcx, qword [0x1400187b8]
add rcx, 0x10
call qword [sym.imp.sfml_window_2.dll_public:_bool___cdecl_sf::Window::isOpen_void_const___ptr64]
test al, al
je 0x1400033b0
mov qword [rsp + 0x190], rbp
movabs rsi, 0x4e94914f0000
mov qword [rsp + 0x198], r14
movabs rbp, 0x431bde82d7b634db
mov qword [rsp + 0x1a0], r15
movabs r14, 0x7fffffffffffffff
movabs r15, 0x7ffffffffd9da5ff
nop word [rax + rax]
mov rcx, qword [0x1400187b8]
mov rdx, qword [sym.imp.sfml_graphics_2.dll_class_sf::Color_const_sf::Color::Transparent]
add rcx, 0x48
call qword [sym.imp.sfml_graphics_2.dll_public:_void___cdecl_sf::RenderTarget::clear_class_sf::Color_const____ptr64____ptr64]
call fcn.140002150
mov rbx, qword [0x1400187a8]
cmp dword [rbx + 0x10], 0
jbe 0x1400032e8
add rbx, 0x48
mov edi, 0x200
mov rcx, rbx
call fcn.140001730
add rbx, 0x350
sub rdi, 1
jne 0x1400032d3
mov rcx, qword [0x1400187b8]
add rcx, 0x10
call qword [sym.imp.sfml_window_2.dll_public:_void___cdecl_sf::Window::display_void____ptr64]
lea rcx, [rsp + 0x28]
call fcn.140003020
mov rbx, qword [rsp + 0x28]
cmp rbx, r15
jge 0x140003316
add rbx, 0x2625a00
jmp 0x140003319
mov rbx, r14
lea rcx, [rsp + 0x20]
call fcn.140003020
mov rax, qword [rsp + 0x20]
cmp rax, rbx
jge 0x14000337f
nop dword [rax]
mov rcx, rbx
sub rcx, rax
cmp rcx, rsi
jle 0x140003342
mov edx, 0x5265c00
jmp 0x140003364
mov rax, rbp
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140003364
inc edx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
lea rcx, [rsp + 0x20]
call fcn.140003020
mov rax, qword [rsp + 0x20]
cmp rax, rbx
jl 0x140003330
mov rcx, qword [0x1400187b8]
add rcx, 0x10
call qword [sym.imp.sfml_window_2.dll_public:_bool___cdecl_sf::Window::isOpen_void_const___ptr64]
test al, al
jne 0x1400032a0
mov r15, qword [rsp + 0x1a0]
mov r14, qword [rsp + 0x198]
mov rbp, qword [rsp + 0x190]
xor eax, eax
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.1400051a0
add rsp, 0x170
pop rdi
pop rsi
pop rbx
ret