Function at 0x140066590
Capabilities:
Enumerate processes
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x500]
sub rsp, 0x600
mov rax, qword [0x1403285b0]
xor rax, rsp
mov qword [rbp + 0x4f0], rax
xor r12d, r12d
lea rcx, str.Squid_Client
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rax, str.ollydbg.exe
mov qword [rbp + 0x450], rax
lea rax, str.x64dbg.exe
mov qword [rbp + 0x458], rax
lea rax, str.windbg.exe
mov qword [rbp + 0x460], rax
lea rax, str.cheatengine_x86_64.exe
mov qword [rbp + 0x468], rax
lea rax, str.cheatengine_x86.exe
mov qword [rbp + 0x470], rax
lea rax, str.idaq.exe
mov qword [rbp + 0x478], rax
lea rax, str.idaq64.exe
mov qword [rbp + 0x480], rax
lea rax, str.gdb.exe
mov qword [rbp + 0x488], rax
lea rax, str.lldb.exe
mov qword [rbp + 0x490], rax
lea rax, str.radare2.exe
mov qword [rbp + 0x498], rax
lea rax, str.immunitydbg.exe
mov qword [rbp + 0x4a0], rax
lea rax, str.processhacker.exe
mov qword [rbp + 0x4a8], rax
lea rax, str.procmon.exe
mov qword [rbp + 0x4b0], rax
lea rax, str.procexp.exe
mov qword [rbp + 0x4b8], rax
lea rax, str.ghidra.exe
mov qword [rbp + 0x4c0], rax
lea rax, str.devenv.exe
mov qword [rbp + 0x4c8], rax
lea rax, str.qtcreator.exe
mov qword [rbp + 0x4d0], rax
lea rax, str.codeblocks.exe
mov qword [rbp + 0x4d8], rax
lea rax, str.dbx.exe
mov qword [rbp + 0x4e0], rax
lea rsi, [rbp + 0x450]
mov r14d, 2
mov rdi, qword [rsi]
mov dword [rbp + 0x210], 0x238
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140066778
lea rdx, [rbp + 0x210]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14006676f
nop word [rax + rax]
lea rcx, [rbp + 0x23c]
mov r8, rdi
sub r8, rcx
nop dword [rax]
movzx edx, word [rcx]
movzx eax, word [rcx + r8]
sub edx, eax
jne 0x140066753
add rcx, r14
test eax, eax
jne 0x140066740
mov rcx, rbx
test edx, edx
je 0x140066815
lea rdx, [rbp + 0x210]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140066730
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsi, 8
lea rax, [rbp + 0x4e8]
cmp rsi, rax
jne 0x1400666f0
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14006681b
call fcn.1400662c0
movzx ebx, al
lea rdx, str._n_nConnecting...
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n_Check__Debogueur
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
mov ecx, 0xfffffff5
test bl, bl
je 0x1400668d0
mov ebx, 4
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n_Check__Machine_virtuelle
jmp 0x140066856
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400662c0
lea rdx, str._n_nConnecting...
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov ebx, 4
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n_Check__Debogueur
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
mov ebx, 7
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movzx edx, bx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov qword [rsp + 0x60], 3
lea rcx, [rsp + 0x60]
call fcn.14006df10
mov rax, 0xffffffffffffffff
mov rcx, qword [rbp + 0x4f0]
xor rcx, rsp
call fcn.14021a5c0
lea r11, [rsp + 0x600]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r14w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._n_Check__Machine_virtuelle.
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rcx, [0x140332750]
call fcn.140062670
mov qword [rsp + 0x60], r14
lea rcx, [rsp + 0x60]
call fcn.14006df10
lea rcx, [0x1402fc6e8]
call fcn.140234cac
lea rdx, str._n____________________________________________________________________________________________n________________________________________________________________________________n___________________________________________________________________________________n_________________________________________________________________________n____________________________________________________________________________n____________________________________________________________________________n_________________________________________________________________________n_________________________________________________________________________________n________________________________________________________________________________n___________________________________________________________________________________________n___________________________________________________________________________________________n__________________________________________________________________________________________n
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._n_n__1__Licence_uniquement_n_n
lea rcx, [0x140330a30]
call fcn.14006d6f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
movdqa xmm1, xmmword [0x1402fed70]
movdqu xmmword [rbp - 0x68], xmm1
mov byte [rbp - 0x78], r12b
lea rdx, str._n_Entrez_la_licence_:
lea rcx, [0x140330a30]
call fcn.14006d6f0
lea rdx, [rbp - 0x78]
call fcn.14006e0a0
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x20]
call fcn.140068e90
mov rdx, rax
lea rcx, [0x140332750]
call fcn.140063810
mov qword [rsp + 0x60], r14
lea rcx, [rsp + 0x60]
call fcn.14006df10
lea rcx, [0x1402fc6e8]
call fcn.140234cac
lea rdx, str._n____________________________________________________________________________________________n________________________________________________________________________________n___________________________________________________________________________________n_________________________________________________________________________n____________________________________________________________________________n____________________________________________________________________________n_________________________________________________________________________n_________________________________________________________________________________n________________________________________________________________________________n___________________________________________________________________________________________n___________________________________________________________________________________________n__________________________________________________________________________________________n
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str.Selectionnez_une_option_:_n_n
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._1__Xray
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._2__Reach
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x68], eax
lea rdx, [rsp + 0x68]
call fcn.14006e370
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
movdqa xmm1, xmmword [0x1402fed70]
movdqu xmmword [rbp - 0x48], xmm1
mov byte [rbp - 0x58], 0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov rbx, r12
mov qword [rbp - 0x80], rbx
mov ecx, dword [rsp + 0x68]
mov rdi, 0xffffffffffffffff
sub ecx, 1
je 0x14006731c
cmp ecx, 1
je 0x140066a9e
lea rdx, str.Option_invalide.
lea rcx, [0x140330cf0]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
jmp 0x140067604
lea rcx, [0x1402fc6e8]
call fcn.140234cac
lea rdx, str._n____________________________________________________________________________________________n________________________________________________________________________________n___________________________________________________________________________________n_________________________________________________________________________n____________________________________________________________________________n____________________________________________________________________________n_________________________________________________________________________n_________________________________________________________________________________n________________________________________________________________________________n___________________________________________________________________________________________n___________________________________________________________________________________________n__________________________________________________________________________________________n
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._0__Reach_3.0
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._1__Reach_3.05
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._2__Reach_3.1
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._3__Reach_3.2
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._4__Reach_3.3
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._5__Reach_3.4
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._6__Reach_3.5
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._7__Reach_3.8
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._8__Reach_3.15
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
lea rdx, str._9__Reach_6.0
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
mov dword [rsp + 0x68], r14d
lea rdx, [rsp + 0x68]
call fcn.14006e370
movsxd rax, dword [rsp + 0x68]
cmp eax, 9
ja case.default.0x140066c01
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x676cc]
add rcx, rdx
jmp rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov r8d, 6
lea rdx, str.365969
lea rcx, [rsp + 0x20]
call fcn.14006e990
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [0x140332750]
call fcn.140064b40
lea rcx, [rsp + 0x70]
cmp rcx, rax
je 0x140066c70
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400673c2
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400673bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067683
jmp 0x1400673bd
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov r8d, 6
lea rdx, str.146621
lea rcx, [rsp + 0x20]
call fcn.14006e990
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [0x140332750]
call fcn.140064b40
lea rcx, [rsp + 0x70]
cmp rcx, rax
je 0x140066d21
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400673c2
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400673bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067689
jmp 0x1400673bd
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov r8d, 6
lea rdx, str.363099
lea rcx, [rsp + 0x20]
call fcn.14006e990
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [0x140332750]
call fcn.140064b40
lea rcx, [rsp + 0x70]
cmp rcx, rax
je 0x140066dd2
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400673c2
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400673bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006768f
jmp 0x1400673bd
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov r8d, 6
lea rdx, str.966806
lea rcx, [rsp + 0x20]
call fcn.14006e990
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [0x140332750]
call fcn.140064b40
lea rcx, [rsp + 0x70]
cmp rcx, rax
je 0x140066e83
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400673c2
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400673bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140067695
jmp 0x1400673bd
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov r8d, 6
lea rdx, str.235580
lea rcx, [rsp + 0x20]
call fcn.14006e990
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [0x140332750]
call fcn.140064b40
lea rcx, [rsp + 0x70]
cmp rcx, rax
je 0x140066f34
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400673c2
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400673bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006769b
jmp 0x1400673bd
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov r8d, 6
lea rdx, str.531925
lea rcx, [rsp + 0x20]
call fcn.14006e990
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [0x140332750]
call fcn.140064b40
lea rcx, [rsp + 0x70]
cmp rcx, rax
je 0x140066fe5
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400673c2
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400673bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676a1
jmp 0x1400673bd
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov r8d, 6
lea rdx, str.224590
lea rcx, [rsp + 0x20]
call fcn.14006e990
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [0x140332750]
call fcn.140064b40
lea rcx, [rsp + 0x70]
cmp rcx, rax
je 0x140067096
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400673c2
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400673bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676a7
jmp 0x1400673bd
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov r8d, 6
lea rdx, str.213021
lea rcx, [rsp + 0x20]
call fcn.14006e990
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [0x140332750]
call fcn.140064b40
lea rcx, [rsp + 0x70]
cmp rcx, rax
je 0x140067147
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400673c2
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400673bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676ad
jmp 0x1400673bd
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov r8d, 6
lea rdx, str.890851
lea rcx, [rsp + 0x20]
call fcn.14006e990
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [0x140332750]
call fcn.140064b40
lea rcx, [rsp + 0x70]
cmp rcx, rax
je 0x1400671f8
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400673c2
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400673bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676b3
jmp 0x1400673bd
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov r8d, 6
lea rdx, str.686154
lea rcx, [rsp + 0x20]
call fcn.14006e990
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [0x140332750]
call fcn.140064b40
lea rcx, [rsp + 0x70]
cmp rcx, rax
je 0x1400672a9
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400673c2
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400673bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676b9
jmp 0x1400673bd
lea rdx, str.Erreur_:_Le_chiffre_que_vous_avez_entr
lea rcx, [0x140330cf0]
call fcn.14006d6f0
mov rcx, rax
call fcn.14006de80
mov qword [rsp + 0x60], r14
lea rcx, [rsp + 0x60]
call fcn.14006df10
jmp 0x1400673c2
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov r8d, 6
lea rdx, str.490288
lea rcx, [rsp + 0x20]
call fcn.14006e990
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [0x140332750]
call fcn.140064b40
lea rcx, [rsp + 0x70]
cmp rcx, rax
je 0x140067386
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rax + 8]
mov qword [rsp + 0x78], rcx
mov rbx, qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400673c2
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400673bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676bf
call fcn.14021a5e0
mov qword [rsp + 0x28], r12
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14021a6dc
mov rsi, rax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], 8
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [str.java.exe]
movups xmmword [rax], xmm0
mov word [rax + 0x10], r12w
mov dword [rbp - 0x30], 0x238
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r14, rax
cmp rax, rdi
jne 0x140067423
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rsi
call fcn.14021a5e0
jmp 0x140067494
mov r15d, r12d
lea rdx, [rbp - 0x30]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140067479
lea rcx, [rbp - 4]
mov rax, rdi
nop
inc rax
cmp word [rcx + rax*2], r12w
jne 0x140067440
cmp rax, 8
jne 0x1400674b8
mov rdx, rax
lea rcx, [rbp - 4]
lea rax, [rbp - 4]
mov r8, rsi
sub r8, rax
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x1400674b8
add rcx, 2
sub rdx, 1
jne 0x140067461
mov r15d, dword [rbp - 0x28]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rsi
call fcn.14021a5e0
test r15d, r15d
jne 0x1400674ca
lea rdx, str.Processus_non_trouv
lea rcx, [0x140330a30]
call fcn.14006d6f0
lea rcx, str.pause
call fcn.140234cac
jmp 0x140067604
lea rdx, [rbp - 0x30]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Process32NextW]
jmp 0x140067433
lea rdx, str.Processus_PID_:
lea rcx, [0x140330a30]
call fcn.14006d6f0
mov edx, r15d
mov rcx, rax
call fcn.140067bf0
mov rcx, rax
call fcn.14006de80
mov r8d, r15d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
jne 0x140067532
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.OpenProcess_failed:_0x_X_n
call fcn.14005b410
lea rcx, str.PAUSE
call fcn.140234cac
mov edi, 0xfffffffe
jmp 0x140067604
mov dword [rsp + 0x60], r12d
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
jne 0x14006755f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Cant_confirm_target_process_architecture:_0x_X_n
call fcn.14005b410
jmp 0x140067582
mov dword [rsp + 0x68], r12d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
mov eax, dword [rsp + 0x68]
cmp dword [rsp + 0x60], eax
je 0x1400675aa
lea rcx, str.Invalid_Process_Architecture._n
call fcn.14005b410
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.PAUSE
call fcn.140234cac
mov edi, 0xfffffffd
jmp 0x140067604
lea rcx, str.Mapping..._n
call fcn.14005b410
mov rdx, qword [rsp + 0x70]
mov rcx, rdi
call fcn.14005b460
mov rcx, rdi
test al, al
jne 0x1400675ef
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.Error_while_mapping._n
call fcn.14005b410
lea rcx, str.PAUSE
call fcn.140234cac
mov edi, 0xfffffffc
jmp 0x140067604
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x1402fd218]
call fcn.14005b410
mov edi, r12d
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14006763f
sub rbx, rcx
mov rax, rcx
cmp rbx, 0x1000
jb 0x140067636
add rbx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400676c5
mov rdx, rbx
call fcn.14021a5e0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140067676
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067671
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006767d
call fcn.14021a5e0
mov eax, edi
jmp 0x1400668a0
call fcn.140234c34
nop
call fcn.140234c34
int3
call fcn.140234c34
int3
call fcn.140234c34
int3
call fcn.140234c34
int3
call fcn.140234c34
int3
call fcn.140234c34
int3
call fcn.140234c34
int3
call fcn.140234c34
int3
call fcn.140234c34
int3
call fcn.140234c34
int3
call fcn.140234c34
nop
call fcn.140234c34
int3