Function at 0x140001430
Capabilities:
Enumerate process modules

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
mov eax, 0x13c8
call fcn.14002bb90
sub rsp, rax
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x1330], xmm13
movdqa xmmword [rbp + 0x1320], xmm12
movdqa xmmword [rbp + 0x1310], xmm11
movdqa xmmword [rbp + 0x1300], xmm10
movdqa xmmword [rbp + 0x12f0], xmm9
movdqa xmmword [rbp + 0x12e0], xmm8
movdqa xmmword [rbp + 0x12d0], xmm7
movdqa xmmword [rbp + 0x12c0], xmm6
mov qword [rbp + 0x12b8], 0xfffffffffffffffe
mov r12, rdx
mov qword [rbp + 0x1298], rcx
xor esi, esi
lea rbx, [rbp - 0x50]
mov r8d, 0x1000
mov rcx, rbx
xor edx, edx
call fcn.1400386a0
mov dword [rbp + 0x1294], 0
lea r8, [rbp + 0x1294]
mov rcx, rbx
mov edx, 0x1000
call sub.PSAPI.DLL_EnumProcesses
test eax, eax
je 0x14000234e
mov eax, dword [rbp + 0x1294]
mov ecx, eax
shr ecx, 2
cmp eax, 0x1004
jae 0x14000249a
lea rax, [rcx*4 - 0x50]
add rax, rbp
mov qword [rbp + 0x11b8], rax
lea rax, [r12 - 1]
mov qword [rbp + 0x11f0], rax
mov rax, r12
sub rax, 4
mov ecx, 0
cmovae rcx, rax
mov qword [rbp + 0x11c0], rcx
lea rax, [r12 + 0xf]
mov qword [rbp + 0x1200], rax
mov rax, qword [rbp + 0x1298]
inc rax
mov qword [rbp + 0x11f8], rax
lea rax, [r12 + 0x3f]
mov qword [rbp + 0x11d8], rax
lea rax, [r12 + 0x7f]
mov qword [rbp + 0x11c8], rax
lea rax, [r12 + 0x1f]
mov qword [rbp + 0x11d0], rax
mov qword [rbp + 0x12a8], r12
jmp 0x14000158d
mov rcx, qword [rbp + 0x11e8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rbx, qword [rbp + 0x11b8]
je 0x1400023bd
mov esi, dword [rbx]
add rbx, 4
test esi, esi
je 0x14000158d
mov ecx, 0x410
xor edx, edx
mov r8d, esi
call sub.KERNEL32.dll_OpenProcess
test rax, rax
je 0x14000158d
mov dword [rbp + 0x120c], esi
mov r8d, 0x208
lea rsi, [rbp + 0xfb0]
mov rdi, rax
mov rcx, rsi
xor edx, edx
call fcn.1400386a0
mov qword [rbp + 0x11e8], rdi
mov rcx, rdi
xor edx, edx
mov r8, rsi
mov r9d, 0x104
call sub.PSAPI.DLL_GetModuleFileNameExW
test eax, eax
je 0x140001580
mov qword [rbp + 0x1220], 0
mov qword [rbp + 0x1228], 1
mov qword [rbp + 0x1230], 0
mov r8d, 0x82
lea rcx, [rbp + 0x1220]
xor edx, edx
call fcn.140039300
xor r13d, r13d
xor r15d, r15d
jmp 0x140001663
mov rcx, qword [rbp + 0x1228]
add rcx, rdi
lea rdx, [rbp + 0x12b4]
mov r8, rsi
call fcn.140038a60
add rdi, rsi
mov qword [rbp + 0x1230], rdi
test r15w, r15w
je 0x1400016a0
mov eax, r14d
mov ecx, eax
and ecx, 0xf800
cmp ecx, 0xd800
jne 0x1400016ca
movzx ecx, ax
cmp ecx, 0xdbff
jbe 0x140001800
xor r15d, r15d
jmp 0x140001920
cmp r13, 0x208
je 0x140001997
movzx eax, word [rbp + r13 + 0xfb0]
add r13, 2
mov ecx, eax
and ecx, 0xf800
cmp ecx, 0xd800
je 0x14000167c
shl eax, 0x10
mov rdi, rax
shr rdi, 0x10
cmp edi, 0x7f
ja 0x140001880
mov rsi, qword [rbp + 0x1230]
cmp rsi, qword [rbp + 0x1220]
jne 0x140001700
lea rcx, [rbp + 0x1220]
call fcn.140005120
nop dword [rax]
mov rcx, qword [rbp + 0x1228]
mov byte [rcx + rsi], dil
inc rsi
mov qword [rbp + 0x1230], rsi
cmp r13, 0x208
je 0x1400019a0
lea r8, [r13 + 2]
movzx edx, word [rbp + r13 + 0xfb0]
movzx eax, dx
mov r9d, edx
and r9d, 0xf800
cmp r9d, 0xd800
jne 0x1400017c0
cmp eax, 0xdbff
ja 0x140001909
cmp r8, 0x208
je 0x140001809
movzx eax, word [rbp + r13 + 0xfb2]
add r13, 4
mov r8d, eax
add r8d, 0x2000
movzx r8d, r8w
cmp r8d, 0xfc00
jb 0x140001911
movzx eax, ax
and edx, 0x3ff
and eax, 0x3ff
shl rdx, 0x1a
shl eax, 0x10
or rax, rdx
movabs rdx, 0x100000000
add rax, rdx
mov rdi, rax
shr rdi, 0x10
cmp edi, 0x80
jb 0x1400017d9
jmp 0x140001880
shl eax, 0x10
mov r13, r8
mov rdi, rax
shr rdi, 0x10
cmp edi, 0x80
jae 0x140001880
cmp rsi, qword [rbp + 0x1220]
jne 0x140001707
lea rcx, [rbp + 0x1220]
call fcn.140005120
jmp 0x140001700
cmp r13, 0x208
jne 0x140001817
mov r13d, 0x208
xor r15d, r15d
jmp 0x140001920
movzx ecx, word [rbp + r13 + 0xfb0]
add r13, 2
mov edx, ecx
add edx, 0x2000
movzx edx, dx
mov r15w, 1
cmp edx, 0xfc00
jae 0x140001844
mov r14d, ecx
jmp 0x140001920
movzx ecx, cx
and eax, 0x3ff
and ecx, 0x3ff
shl rax, 0x1a
shl ecx, 0x10
or rcx, rax
movabs rax, 0x100000000
add rcx, rax
mov rax, rcx
mov rdi, rax
shr rdi, 0x10
cmp edi, 0x7f
jbe 0x1400016dd
nop dword [rax]
mov dword [rbp + 0x12b4], 0
cmp edi, 0x800
jae 0x1400018b3
shr eax, 0x16
or al, 0xc0
mov byte [rbp + 0x12b4], al
and dil, 0x3f
or dil, 0x80
mov byte [rbp + 0x12b5], dil
mov esi, 2
jmp 0x140001904
cmp edi, 0x10000
jae 0x1400018c0
xor r15d, r15d
jmp 0x14000192f
mov rcx, rax
shr rcx, 0x22
or cl, 0xf0
mov byte [rbp + 0x12b4], cl
mov rcx, rax
shr rcx, 0x1c
and cl, 0x3f
or cl, 0x80
mov byte [rbp + 0x12b5], cl
shr eax, 0x16
and al, 0x3f
or al, 0x80
mov byte [rbp + 0x12b6], al
and dil, 0x3f
or dil, 0x80
mov byte [rbp + 0x12b7], dil
mov esi, 4
xor r15d, r15d
jmp 0x14000195f
xor r15d, r15d
mov r13, r8
jmp 0x140001920
mov r15w, 1
mov r14d, eax
nop dword [rax]
mov dword [rbp + 0x12b4], 0
mov edi, 0xfffd
mov eax, edi
shr eax, 0xc
or al, 0xe0
mov byte [rbp + 0x12b4], al
mov eax, edi
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [rbp + 0x12b5], al
and dil, 0x3f
or dil, 0x80
mov byte [rbp + 0x12b6], dil
mov esi, 3
mov rax, qword [rbp + 0x1220]
mov rdi, qword [rbp + 0x1230]
sub rax, rdi
cmp rax, rsi
jae 0x140001640
lea rcx, [rbp + 0x1220]
mov rdx, rdi
mov r8, rsi
call fcn.140039300
mov rdi, qword [rbp + 0x1230]
jmp 0x140001640
mov rsi, qword [rbp + 0x1230]
nop
mov r15, qword [rbp + 0x1220]
mov r14, qword [rbp + 0x1228]
jmp 0x1400019bd
dec rsi
movzx eax, al
sub rsi, r14
test eax, eax
jne 0x140001a28
test rsi, rsi
je 0x140001a26
mov rdi, rsi
add rsi, r14
movzx eax, byte [rsi - 1]
test al, al
jns 0x1400019b0
movzx ecx, byte [rsi - 2]
cmp cl, 0xc0
jge 0x1400019fb
movzx edx, byte [rsi - 3]
cmp dl, 0xc0
jge 0x140001a04
movzx r8d, byte [rsi - 4]
add rsi, 0xfffffffffffffffc
and r8d, 7
shl r8d, 6
and edx, 0x3f
or edx, r8d
jmp 0x140001a0b
add rsi, 0xfffffffffffffffe
and ecx, 0x1f
jmp 0x140001a13
add rsi, 0xfffffffffffffffd
and edx, 0xf
shl edx, 6
and ecx, 0x3f
or ecx, edx
shl ecx, 6
and al, 0x3f
movzx eax, al
or eax, ecx
sub rsi, r14
test eax, eax
je 0x1400019bd
jmp 0x140001a28
xor edi, edi
test r12, r12
je 0x14000238c
cmp rdi, r12
jbe 0x140001a77
cmp r12, 1
jne 0x140001a9d
mov rax, qword [rbp + 0x1298]
movzx eax, byte [rax]
cmp rdi, 0xf
ja 0x140001ae8
xor ecx, ecx
nop word cs:[rax + rax]
cmp byte [r14 + rcx], al
je 0x14000238c
inc rcx
cmp rdi, rcx
jne 0x140001a60
jmp 0x14000232e
mov qword [rbp + 0x1210], r15
jne 0x140001ae0
mov rcx, qword [rbp + 0x1298]
mov rdx, r14
mov r8, r12
call fcn.1400390e0
test eax, eax
sete r13b
jmp 0x140002322
cmp r12, 0x21
mov qword [rbp + 0x1210], r15
jae 0x140001bf4
mov rax, qword [rbp + 0x1298]
movzx eax, byte [rax]
cmp r12, 2
jne 0x140001b70
cmp rdi, 0x11
jb 0x140001bb6
mov rcx, qword [rbp + 0x11f8]
movzx ecx, byte [rcx]
mov esi, 1
jmp 0x140001e09
xor r13d, r13d
jmp 0x140002322
lea rcx, [r14 + 7]
and rcx, 0xfffffffffffffff8
sub rcx, r14
jne 0x140001c9e
lea rdx, [rdi - 0x10]
xor ecx, ecx
movzx r8d, al
movabs r9, 0x101010101010101
imul r8, r9
nop word cs:[rax + rax]
mov r9, qword [r14 + rcx]
xor r9, r8
movabs r11, 0xfefefefefefefeff
lea r10, [r9 + r11]
not r9
and r9, r10
mov r10, qword [r14 + rcx + 8]
xor r10, r8
add r11, r10
not r10
and r10, r11
or r10, r9
movabs r9, 0x8080808080808080
test r10, r9
jne 0x140001ccf
add rcx, 0x10
cmp rcx, rdx
jbe 0x140001b20
jmp 0x140001ccf
mov rdx, r12
nop word cs:[rax + rax]
cmp qword [rbp + 0x11c0], rdx
jae 0x140001bf4
lea rsi, [rdx - 1]
cmp rsi, r12
jae 0x140002431
mov rcx, qword [rbp + 0x1298]
movzx ecx, byte [rcx + rdx - 1]
mov rdx, rsi
cmp cl, al
je 0x140001b80
cmp qword [rbp + 0x1200], rdi
jbe 0x140001e09
mov r15, r14
mov rsi, r14
nop dword [rax]
mov r14, rdi
cmp rdi, r12
jb 0x140001be5
mov rcx, rsi
mov rdx, qword [rbp + 0x1298]
mov r8, r12
call fcn.1400390e0
inc rsi
lea rdi, [r14 - 1]
test eax, eax
jne 0x140001bc0
cmp r14, r12
setae r13b
mov r14, r15
jmp 0x140002322
mov qword [rsp + 0x20], r12
lea rcx, [rbp + 0x1220]
mov qword [rbp + 0x12a0], r14
mov rdx, r14
mov r8, rdi
mov r9, qword [rbp + 0x1298]
call fcn.1400082d0
cmp qword [rbp + 0x1220], 0
je 0x140001dbe
mov rdi, qword [rbp + 0x1258]
mov r8, qword [rbp + 0x1268]
mov rax, qword [rbp + 0x1280]
lea r11, [rax - 1]
mov rdx, qword [rbp + 0x1270]
mov rsi, qword [rbp + 0x1278]
cmp rdi, 0xffffffffffffffff
je 0x140001ff0
mov r10, qword [rbp + 0x1248]
lea rcx, [r10 + r11]
cmp rcx, rdx
jae 0x140002029
mov qword [rbp + 0x1288], r11
mov r11, qword [rbp + 0x1240]
mov r15, qword [rbp + 0x1228]
mov r9, qword [rbp + 0x1238]
mov r14, rax
mov qword [rbp + 0x1218], r9
sub r14, r9
mov qword [rbp + 0x11e0], r14
jmp 0x140001d0f
cmp rcx, rdi
cmovae rcx, rdi
xor edx, edx
nop word [rax + rax]
cmp byte [r14 + rdx], al
je 0x14000238c
inc rdx
cmp rcx, rdx
jne 0x140001cb0
lea rdx, [rdi - 0x10]
cmp rcx, rdx
jbe 0x140001aff
cmp rcx, rdi
je 0x14000232e
nop dword [rax + rax]
cmp byte [r14 + rcx], al
je 0x14000238c
inc rcx
cmp rdi, rcx
jne 0x140001ce0
jmp 0x14000232e
add r10, rax
xor edi, edi
mov rcx, qword [rbp + 0x1288]
add rcx, r10
cmp rcx, rdx
jae 0x140002029
movzx ecx, byte [r8 + rcx]
bt r11, rcx
jae 0x140001cf7
cmp r15, rdi
mov r13, rdi
cmova r13, r15
lea r9, [r8 + r10]
mov rcx, r13
nop dword [rax + rax]
cmp rcx, rax
jae 0x140001d68
mov r12, rcx
add rcx, r10
cmp rcx, rdx
jae 0x140002413
lea rcx, [r12 + 1]
movzx r14d, byte [rsi + r12]
cmp r14b, byte [r9 + r12]
je 0x140001d30
sub r10, r15
add r10, r12
inc r10
xor edi, edi
mov r12, qword [rbp + 0x12a8]
jmp 0x140001cfc
mov rcx, r15
nop dword [rax + rax]
cmp rdi, rcx
mov r12, qword [rbp + 0x12a8]
jae 0x1400020fa
dec rcx
cmp rcx, rax
jae 0x140002467
lea r9, [rcx + r10]
cmp r9, rdx
jae 0x140002478
movzx r12d, byte [rsi + rcx]
cmp r12b, byte [r8 + r9]
je 0x140001d70
add r10, qword [rbp + 0x1218]
mov rdi, qword [rbp + 0x11e0]
mov r12, qword [rbp + 0x12a8]
jmp 0x140001cfc
cmp byte [rbp + 0x123a], 0
jne 0x140002029
mov r8, qword [rbp + 0x1228]
mov rcx, qword [rbp + 0x1268]
mov rdx, qword [rbp + 0x1270]
movzx eax, byte [rbp + 0x1238]
test r8, r8
je 0x1400021fe
cmp r8, rdx
jae 0x1400021f8
cmp byte [rcx + r8], 0xc0
jge 0x1400021fe
jmp 0x1400024ab
movzx eax, al
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm6, xmm0, 0
movzx eax, cl
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm7, xmm0, 0
mov qword [rbp + 0x1220], r14
mov qword [rbp + 0x1228], rdi
mov rax, qword [rbp + 0x11f8]
mov qword [rbp + 0x1230], rax
mov rax, qword [rbp + 0x11f0]
mov qword [rbp + 0x1238], rax
cmp qword [rbp + 0x11d8], rdi
mov qword [rbp + 0x12a0], r14
jae 0x140002102
lea r15, [r14 + 0x30]
lea r12, [r14 + rsi]
add r12, 0x30
xor r14d, r14d
xor r13d, r13d
nop word cs:[rax + rax]
movdqu xmm0, xmmword [r15 + r14 - 0x30]
movdqu xmm12, xmmword [r15 + r14 - 0x20]
movdqu xmm10, xmmword [r15 + r14 - 0x10]
movdqu xmm8, xmmword [r15 + r14]
pcmpeqb xmm0, xmm6
movdqu xmm1, xmmword [r12 + r14 - 0x30]
movdqu xmm13, xmmword [r12 + r14 - 0x20]
movdqu xmm11, xmmword [r12 + r14 - 0x10]
movdqu xmm9, xmmword [r12 + r14]
pcmpeqb xmm1, xmm7
pand xmm1, xmm0
pmovmskb r8d, xmm1
test r8d, r8d
jne 0x140001f61
pcmpeqb xmm12, xmm6
pcmpeqb xmm13, xmm7
pand xmm13, xmm12
pmovmskb r8d, xmm13
test r8w, r8w
jne 0x140001f84
pcmpeqb xmm10, xmm6
pcmpeqb xmm11, xmm7
pand xmm11, xmm10
pmovmskb r8d, xmm11
test r8w, r8w
jne 0x140001fa8
pcmpeqb xmm8, xmm6
pcmpeqb xmm9, xmm7
pand xmm9, xmm8
pmovmskb r8d, xmm9
test r8w, r8w
jne 0x140001fcc
mov rax, qword [rbp + 0x11c8]
add rax, r14
add r14, 0x40
cmp rax, rdi
jae 0x140002108
mov eax, r13d
and al, 1
je 0x140001e90
jmp 0x140002108
mov r9d, r13d
and r9b, 1
lea rcx, [rbp + 0x1220]
mov rdx, r14
call fcn.140039240
or al, r13b
and al, 1
mov r13d, eax
jmp 0x140001ee0
lea rdx, [r14 + 0x10]
mov r9d, r13d
and r9b, 1
lea rcx, [rbp + 0x1220]
call fcn.140039240
or al, r13b
and al, 1
mov r13d, eax
jmp 0x140001efe
lea rdx, [r14 + 0x20]
mov r9d, r13d
and r9b, 1
lea rcx, [rbp + 0x1220]
call fcn.140039240
or al, r13b
and al, 1
mov r13d, eax
jmp 0x140001f1c
lea rdx, [r14 + 0x30]
mov r9d, r13d
and r9b, 1
lea rcx, [rbp + 0x1220]
call fcn.140039240
or al, r13b
and al, 1
mov r13d, eax
jmp 0x140001f3a
mov rcx, qword [rbp + 0x1248]
lea r9, [rcx + r11]
cmp r9, rdx
jae 0x140002029
mov r14, qword [rbp + 0x1240]
mov r10, qword [rbp + 0x1228]
mov rdi, qword [rbp + 0x1238]
mov qword [rbp + 0x1218], rdi
lea rdi, [r10 - 1]
mov qword [rbp + 0x1288], rdi
jmp 0x140002044
xor r13d, r13d
jmp 0x14000231b
add rcx, rax
lea r9, [rcx + r11]
xor r13d, r13d
cmp r9, rdx
jae 0x14000231b
movzx r9d, byte [r8 + r9]
bt r14, r9
jae 0x140002031
lea r9, [r8 + rcx]
mov rdi, r10
nop word cs:[rax + rax]
cmp rdi, rax
jae 0x140002096
mov r12, rdi
add rdi, rcx
cmp rdi, rdx
jae 0x14000244f
lea rdi, [r12 + 1]
movzx r15d, byte [rsi + r12]
cmp r15b, byte [r9 + r12]
je 0x140002060
sub rcx, r10
add rcx, r12
inc rcx
mov r12, qword [rbp + 0x12a8]
jmp 0x140002034
cmp qword [rbp + 0x1288], rax
jae 0x140002308
lea r12, [rcx - 1]
lea r13, [r8 + rcx]
dec r13
mov rdi, r10
mov r15, r10
nop word cs:[rax + rax]
sub r15, 1
jb 0x1400021a1
lea r9, [r12 + rdi]
cmp r9, rdx
jae 0x140002489
movzx r9d, byte [rsi + rdi - 1]
cmp r9b, byte [r13 + rdi]
mov rdi, r15
je 0x1400020c0
add rcx, qword [rbp + 0x1218]
mov r12, qword [rbp + 0x12a8]
jmp 0x140002034
mov r13b, 1
jmp 0x14000231b
xor r13d, r13d
xor r14d, r14d
mov rax, qword [rbp + 0x1200]
add rax, r14
mov r9d, r13d
and r9b, 1
cmp rax, rdi
jae 0x1400021b0
test r9b, r9b
mov r12, qword [rbp + 0x12a8]
jne 0x1400021b7
mov rax, qword [rbp + 0x12a0]
lea r15, [rax + rsi]
nop dword [rax]
mov rax, qword [rbp + 0x12a0]
movdqu xmm0, xmmword [rax + r14]
movdqu xmm1, xmmword [r15 + r14]
pcmpeqb xmm0, xmm6
pcmpeqb xmm1, xmm7
pand xmm1, xmm0
pmovmskb r8d, xmm1
test r8d, r8d
jne 0x14000218a
mov rax, qword [rbp + 0x11d0]
add rax, r14
mov r9d, r13d
and r9b, 1
cmp rax, rdi
jae 0x1400021b7
add r14, 0x10
test r9b, r9b
je 0x140002140
jmp 0x1400021b7
lea rcx, [rbp + 0x1220]
mov rdx, r14
xor r9d, r9d
call fcn.140039240
mov r13d, eax
jmp 0x140002169
mov r13b, 1
mov r12, qword [rbp + 0x12a8]
jmp 0x14000231b
mov r12, qword [rbp + 0x12a8]
sub rdi, qword [rbp + 0x11f0]
mov r14, qword [rbp + 0x12a0]
lea rax, [r14 + rdi]
add rax, 0xfffffffffffffff0
movdqu xmm0, xmmword [r14 + rdi - 0x10]
movdqu xmm1, xmmword [rsi + rax]
pcmpeqb xmm0, xmm6
pcmpeqb xmm1, xmm7
pand xmm1, xmm0
pmovmskb r8d, xmm1
test r8d, r8d
jne 0x14000226e
and r13b, 1
jmp 0x140002322
jne 0x1400024ab
cmp r8, rdx
jne 0x14000220e
test al, al
setne r13b
jmp 0x14000231b
movzx r11d, byte [rcx + r8]
movzx r10d, r11b
test r10b, r10b
js 0x140002224
mov r9d, r10d
jmp 0x1400022a7
mov r9d, r10d
and r9d, 0x1f
movzx esi, byte [rcx + r8 + 1]
and esi, 0x3f
cmp r10b, 0xe0
jb 0x140002297
movzx r10d, byte [rcx + r8 + 2]
shl esi, 6
and r10d, 0x3f
or r10d, esi
cmp r11b, 0xf0
jb 0x1400022a0
movzx r11d, byte [rcx + r8 + 3]
and r9d, 7
shl r9d, 0x12
shl r10d, 6
and r11d, 0x3f
or r11d, r10d
or r9d, r11d
jmp 0x1400022a7
add rdi, 0xfffffffffffffff0
test r9b, r9b
setne sil
lea rcx, [rbp + 0x1220]
mov rdx, rdi
call fcn.140039240
mov r13d, eax
or r13b, sil
and r13b, 1
jmp 0x140002322
shl r9d, 6
or r9d, esi
jmp 0x1400022a7
shl r9d, 0xc
or r9d, r10d
mov r13b, 1
test al, al
jne 0x14000231b
mov eax, 1
cmp r9d, 0x80
jb 0x1400022da
mov eax, 2
cmp r9d, 0x800
jb 0x1400022da
cmp r9d, 0x10000
mov eax, 4
sbb rax, 0
add r8, rax
je 0x1400022f6
cmp r8, rdx
jae 0x1400022f0
cmp byte [rcx + r8], 0xbf
jg 0x1400022f6
jmp 0x1400024ab
jne 0x1400024ab
cmp r8, rdx
je 0x14000231b
movzx eax, byte [rcx + r8]
test al, al
jns 0x14000231b
cmp al, 0xe0
jmp 0x14000231b
mov r13b, 1
test r10, r10
mov r12, qword [rbp + 0x12a8]
jne 0x1400024c1
mov r14, qword [rbp + 0x12a0]
test r13b, r13b
mov r15, qword [rbp + 0x1210]
jne 0x14000238c
test r15, r15
je 0x140001580
mov rcx, qword [0x140052c20]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140001580
lea rax, str.Failed_to_enumerate_processes_n
mov qword [rbp + 0xfb0], rax
mov qword [rbp + 0xfb8], 1
mov qword [rbp + 0xfc0], 8
pxor xmm0, xmm0
movdqu xmmword [rbp + 0xfc8], xmm0
lea rcx, [rbp + 0xfb0]
call fcn.14001a3c0
jmp 0x1400023bf
mov rcx, qword [rbp + 0x11e8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r15, r15
je 0x1400023b0
mov rcx, qword [0x140052c20]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov esi, 1
mov edx, dword [rbp + 0x120c]
jmp 0x1400023bf
xor esi, esi
mov eax, esi
movaps xmm6, xmmword [rbp + 0x12c0]
movaps xmm7, xmmword [rbp + 0x12d0]
movaps xmm8, xmmword [rbp + 0x12e0]
movaps xmm9, xmmword [rbp + 0x12f0]
movaps xmm10, xmmword [rbp + 0x1300]
movaps xmm11, xmmword [rbp + 0x1310]
movaps xmm12, xmmword [rbp + 0x1320]
movaps xmm13, xmmword [rbp + 0x1330]
add rsp, 0x13c8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
add r13, r10
cmp rdx, r13
cmova r13, rdx
lea r8, [0x14003e5b0]
mov rcx, r13
call fcn.140039530
jmp 0x1400024d7
mov qword [rbp + 0x12a0], r14
lea r8, [0x14003e568]
mov rcx, rsi
mov rdx, r12
call fcn.140039530
jmp 0x1400024d7
add rcx, r10
cmp rdx, rcx
cmova rcx, rdx
lea r8, [0x14003e5b0]
call fcn.140039530
jmp 0x1400024d7
lea r8, [0x14003e580]
mov rdx, rax
call fcn.140039530
jmp 0x1400024d7
lea r8, [0x14003e598]
mov rcx, r9
call fcn.140039530
jmp 0x1400024d7
lea r8, [0x14003e598]
mov rcx, r9
call fcn.140039530
jmp 0x1400024d7
lea r8, str.src_main.rs
mov edx, 0x400
call fcn.1400395a0
lea rax, [0x14003efc8]
mov qword [rsp + 0x20], rax
mov r9, rdx
call fcn.140039a50
jmp 0x1400024d7
lea r8, [0x14003e580]
mov rcx, qword [rbp + 0x1288]
mov rdx, rax
call fcn.140039530
ud2