Function at 0x180023870
Capabilities:
Enumerate processes

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x860]
sub rsp, 0x960
mov qword [rbp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x9b0], rbx
mov rax, qword [0x180168908]
xor rax, rsp
mov qword [rbp + 0x858], rax
mov r13, rdx
mov qword [rsp + 0x58], rcx
xor r12d, r12d
mov dword [rsp + 0x30], r12d
lea rcx, [rsp + 0x51]
call fcn.180022e60
mov qword [rbp + 0x70], rax
mov rdx, rax
lea rcx, [rbp + 0x630]
call fcn.1800088c0
nop
lea rdx, [0x180113f10]
lea rcx, [rbp + 0x638]
call fcn.1800088c0
nop
mov dword [rbp + 0x7d0], 0x640063
mov dword [rbp + 0x7d4], 0x2e0062
mov dword [rbp + 0x7d8], 0x780065
mov dword [rbp + 0x7dc], 0x65
lea r8d, [r12 + 9]
lea rdx, [0x180176c60]
mov rcx, rdx
lea r9, [rbp + 0x7d0]
sub r9, rdx
nop
lea rax, [r8 + 0x7ffffff5]
test rax, rax
je 0x180023953
movzx eax, word [rcx + r9]
test ax, ax
je 0x180023953
mov word [rcx], ax
add rcx, 2
sub r8, 1
jne 0x180023930
lea rax, [rcx - 2]
test r8, r8
cmovne rax, rcx
mov word [rax], r12w
lea rcx, [rbp + 0x640]
call fcn.1800088c0
nop
lea rdx, [0x180113f18]
lea rcx, [rbp + 0x648]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x52]
call fcn.180022ce0
mov qword [rbp - 0x28], rax
mov rdx, rax
lea rcx, [rbp + 0x650]
call fcn.1800088c0
nop
lea rdx, [0x180113f20]
lea rcx, [rbp + 0x658]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x40]
call fcn.180022fc0
mov qword [rbp - 0x20], rax
mov rdx, rax
lea rcx, [rbp + 0x660]
call fcn.1800088c0
nop
lea rdx, [0x180113f28]
lea rcx, [rbp + 0x668]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x41]
call fcn.180023410
mov qword [rbp - 0x18], rax
mov rdx, rax
lea rcx, [rbp + 0x670]
call fcn.1800088c0
nop
lea rdx, [0x180113f30]
lea rcx, [rbp + 0x678]
call fcn.1800088c0
nop
mov dword [rbp + 0x828], 0x700073
mov dword [rbp + 0x82c], 0x780079
mov dword [rbp + 0x830], 0x2e0078
mov dword [rbp + 0x834], 0x780065
mov dword [rbp + 0x838], 0x65
mov edi, ntohs
mov r8d, edi
lea rdx, [0x180176cd0]
mov rcx, rdx
lea r9, [rbp + 0x828]
sub r9, rdx
nop word [rax + rax]
lea rax, [r8 + 0x7ffffff3]
test rax, rax
je 0x180023a93
movzx eax, word [rcx + r9]
test ax, ax
je 0x180023a93
mov word [rcx], ax
add rcx, 2
sub r8, 1
jne 0x180023a70
lea rax, [rcx - 2]
test r8, r8
cmovne rax, rcx
mov word [rax], r12w
lea rcx, [rbp + 0x680]
call fcn.1800088c0
nop
lea rdx, [0x180113f38]
lea rcx, [rbp + 0x688]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x42]
call fcn.180022c20
mov qword [rbp - 0x10], rax
mov rdx, rax
lea rcx, [rbp + 0x690]
call fcn.1800088c0
nop
lea rdx, [0x180113f38]
lea rcx, [rbp + 0x698]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x43]
call fcn.180023130
mov qword [rbp - 8], rax
mov rdx, rax
lea rcx, [rbp + 0x6a0]
call fcn.1800088c0
nop
lea rdx, [0x180113f40]
lea rcx, [rbp + 0x6a8]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x44]
call fcn.1800234c0
mov qword [rbp], rax
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.1800088c0
nop
lea rdx, [0x180113f48]
lea rcx, [rbp + 0x6b8]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x45]
call fcn.180023290
mov qword [rbp + 8], rax
mov rdx, rax
lea rcx, [rbp + 0x6c0]
call fcn.1800088c0
nop
lea rdx, [0x180113f50]
lea rcx, [rbp + 0x6c8]
call fcn.1800088c0
nop
mov dword [rbp + 0x7e0], 0x640069
mov dword [rbp + 0x7e4], 0x670061
mov dword [rbp + 0x7e8], 0x65002e
mov dword [rbp + 0x7ec], 0x650078
mov word [rbp + 0x7f0], r12w
mov ebx, 0xa
mov r8d, ebx
lea rdx, [0x180176d78]
mov rcx, rdx
lea r9, [rbp + 0x7e0]
sub r9, rdx
nop word [rax + rax]
lea rax, [r8 + 0x7ffffff4]
test rax, rax
je 0x180023c03
movzx eax, word [rcx + r9]
test ax, ax
je 0x180023c03
mov word [rcx], ax
add rcx, 2
sub r8, 1
jne 0x180023be0
lea rax, [rcx - 2]
test r8, r8
cmovne rax, rcx
mov word [rax], r12w
lea rcx, [rbp + 0x6d0]
call fcn.1800088c0
nop
lea rdx, [0x180113f58]
lea rcx, [rbp + 0x6d8]
call fcn.1800088c0
nop
mov dword [rbp + 0x7f8], 0x640069
mov dword [rbp + 0x7fc], 0x710061
mov dword [rbp + 0x800], 0x65002e
mov dword [rbp + 0x804], 0x650078
mov word [rbp + 0x808], r12w
mov r8, rbx
lea rdx, [0x180176d90]
mov rcx, rdx
lea r9, [rbp + 0x7f8]
sub r9, rdx
nop word [rax + rax]
lea rax, [r8 + 0x7ffffff4]
test rax, rax
je 0x180023ca3
movzx eax, word [rcx + r9]
test ax, ax
je 0x180023ca3
mov word [rcx], ax
add rcx, 2
sub r8, 1
jne 0x180023c80
lea rax, [rcx - 2]
test r8, r8
cmovne rax, rcx
mov word [rax], r12w
lea rcx, [rbp + 0x6e0]
call fcn.1800088c0
nop
lea rdx, [0x180113f58]
lea rcx, [rbp + 0x6e8]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x46]
call fcn.180022f10
mov qword [rbp + 0x10], rax
mov rdx, rax
lea rcx, [rbp + 0x6f0]
call fcn.1800088c0
nop
lea rdx, [0x180113f60]
lea rcx, [rbp + 0x6f8]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x47]
call fcn.1800236f0
mov qword [rbp + 0x18], rax
mov rdx, rax
lea rcx, [rbp + 0x700]
call fcn.1800088c0
nop
lea rdx, [0x180113f68]
lea rcx, [rbp + 0x708]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x48]
call fcn.180023580
mov qword [rbp + 0x20], rax
mov rdx, rax
lea rcx, [rbp + 0x710]
call fcn.1800088c0
nop
lea rdx, [0x180113f70]
lea rcx, [rbp + 0x718]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x49]
call fcn.1800231e0
mov qword [rbp + 0x28], rax
mov rdx, rax
lea rcx, [rbp + 0x720]
call fcn.1800088c0
nop
lea rdx, [0x180113f78]
lea rcx, [rbp + 0x728]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x4a]
call fcn.180022b70
mov qword [rbp + 0x30], rax
mov rdx, rax
lea rcx, [rbp + 0x730]
call fcn.1800088c0
nop
lea rdx, [0x180113f70]
lea rcx, [rbp + 0x738]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x4b]
call fcn.180022ab0
mov qword [rbp + 0x38], rax
mov rdx, rax
lea rcx, [rbp + 0x740]
call fcn.1800088c0
nop
lea rdx, [0x180113f78]
lea rcx, [rbp + 0x748]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x4c]
call fcn.180023630
mov qword [rbp + 0x40], rax
mov rdx, rax
lea rcx, [rbp + 0x750]
call fcn.1800088c0
nop
lea rdx, [0x180113f80]
lea rcx, [rbp + 0x758]
call fcn.1800088c0
nop
mov dword [rbp + 0x810], 0x6f0063
mov dword [rbp + 0x814], 0x650064
mov dword [rbp + 0x818], 0x65002e
mov dword [rbp + 0x81c], 0x650078
mov word [rbp + 0x820], r12w
lea rdx, [0x180176e88]
mov rcx, rdx
lea r8, [rbp + 0x810]
sub r8, rdx
nop word [rax + rax]
lea rax, [rbx + 0x7ffffff4]
test rax, rax
je 0x180023ea3
movzx eax, word [rcx + r8]
test ax, ax
je 0x180023ea3
mov word [rcx], ax
add rcx, 2
sub rbx, 1
jne 0x180023e80
lea rax, [rcx - 2]
test rbx, rbx
cmovne rax, rcx
mov word [rax], r12w
lea rcx, [rbp + 0x760]
call fcn.1800088c0
nop
lea rdx, [0x180113f88]
lea rcx, [rbp + 0x768]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x4d]
call fcn.180023070
mov qword [rbp + 0x48], rax
mov rdx, rax
lea rcx, [rbp + 0x770]
call fcn.1800088c0
nop
lea rdx, [0x180113f10]
lea rcx, [rbp + 0x778]
call fcn.1800088c0
nop
mov dword [rbp + 0x840], 0x73006d
mov dword [rbp + 0x844], 0x730074
mov dword [rbp + 0x848], 0x2e0063
mov dword [rbp + 0x84c], 0x780065
mov dword [rbp + 0x850], 0x65
lea rdx, [0x180176ec0]
mov rcx, rdx
lea r8, [rbp + 0x840]
sub r8, rdx
nop dword [rax + rax]
lea rax, [rdi + 0x7ffffff3]
test rax, rax
je 0x180023f73
movzx eax, word [rcx + r8]
test ax, ax
je 0x180023f73
mov word [rcx], ax
add rcx, 2
sub rdi, 1
jne 0x180023f50
lea rax, [rcx - 2]
test rdi, rdi
cmovne rax, rcx
mov word [rax], r12w
lea rcx, [rbp + 0x780]
call fcn.1800088c0
nop
lea rdx, [0x180113f90]
lea rcx, [rbp + 0x788]
call fcn.1800088c0
nop
lea rcx, [rsp + 0x4e]
call fcn.180022d90
mov qword [rbp + 0x50], rax
mov rdx, rax
lea rcx, [rbp + 0x790]
call fcn.1800088c0
nop
lea rdx, [0x180113f98]
lea rcx, [rbp + 0x798]
call fcn.1800088c0
nop
mov dword [rbp + 0x7b0], 0x740078
mov dword [rbp + 0x7b4], 0x65002e
mov dword [rbp + 0x7b8], 0x650078
mov word [rbp + 0x7bc], r12w
mov esi, 8
mov r8d, esi
lea rdx, [0x180176f00]
mov rcx, rdx
lea r9, [rbp + 0x7b0]
sub r9, rdx
nop word [rax + rax]
lea rax, [r8 + 0x7ffffff6]
test rax, rax
je 0x180024043
movzx eax, word [rcx + r9]
test ax, ax
je 0x180024043
mov word [rcx], ax
add rcx, 2
sub r8, 1
jne 0x180024020
lea rax, [rcx - 2]
test r8, r8
cmovne rax, rcx
mov word [rax], r12w
lea rcx, [rbp + 0x7a0]
call fcn.1800088c0
nop
lea rdx, [0x180113fa0]
lea rcx, [rbp + 0x7a8]
call fcn.1800088c0
nop
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call fcn.1800261d0
mov rbx, rax
mov qword [rbp - 0x70], rax
lea rdi, [rbp + 0x630]
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.1800219f0
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp + 0x58]
lea rcx, [rbp - 0x70]
call fcn.1800221a0
add rdi, 0x10
lea rax, [rbp + 0x7b0]
cmp rdi, rax
je 0x1800240cd
mov rbx, qword [rbp - 0x70]
jmp 0x180024092
lea r9, [fcn.180022950]
mov edx, 0x10
lea r8d, [rdx + 8]
lea rcx, [rbp + 0x630]
call fcn.1800a4b8c
mov rdi, qword [rsp + 0x58]
mov dword [rdi + 0x10], r12d
lea r15, [rdi + 0x18]
lea rdx, [0x18010e038]
mov r14, 0xffffffffffffffff
mov rax, r14
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x180024110
mov r8d, eax
mov rcx, r15
call fcn.180009210
mov dword [rbp + 0x7c0], 0x510051
mov dword [rbp + 0x7c4], 0x65002e
mov dword [rbp + 0x7c8], 0x650078
mov word [rbp + 0x7cc], r12w
lea rbx, [0x180176f10]
mov rcx, rbx
lea rdx, [rbp + 0x7c0]
sub rdx, rbx
nop
lea rax, [rsi + 0x7ffffff6]
test rax, rax
je 0x180024182
movzx eax, word [rcx + rdx]
test ax, ax
je 0x180024182
mov word [rcx], ax
add rcx, 2
sub rsi, 1
jne 0x180024160
lea rax, [rcx - 2]
test rsi, rsi
cmovne rax, rcx
xor esi, esi
mov word [rax], si
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x180024d37
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
cmp rbx, 0x10000
jae 0x1800241c8
movzx edx, bx
lea rcx, [rbp - 0x78]
call fcn.180012580
jmp 0x1800241ea
mov rax, r14
nop dword [rax + rax]
inc rax
cmp word [rbx + rax*2], 0
jne 0x1800241d0
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x78]
call fcn.180009210
nop
lea rcx, [rsp + 0x4f]
call fcn.180023340
mov rbx, rax
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x180024d42
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
test rbx, rbx
je 0x180024241
cmp rbx, 0x10000
jae 0x180024232
movzx edx, bx
lea rcx, [rbp - 0x80]
call fcn.180012580
jmp 0x180024253
mov rax, r14
inc rax
cmp word [rbx + rax*2], 0
jne 0x180024235
jmp 0x180024243
mov eax, esi
mov r8d, eax
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.180009210
nop
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x1800242a5
xor edx, edx
mov r8d, 0x234
lea rcx, [rbp + 0x334]
call fcn.1800d4600
mov dword [rbp + 0x330], 0x238
lea rdx, [rbp + 0x330]
mov rcx, r12
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
jne 0x18002432f
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800242c4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
sub r14d, 1
jg 0x1800242e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov r9, qword [rbp - 0x70]
mov r8, qword [r9]
lea rdx, [rbp + 0x68]
lea rcx, [rbp - 0x70]
call fcn.180026860
mov edx, 0x30
mov rcx, qword [rbp - 0x70]
call fcn.1800a4c5c
nop
mov rcx, qword [rbp + 0x858]
xor rcx, rsp
call fcn.1800a5130
mov rbx, qword [rsp + 0x9b0]
add rsp, 0x960
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rbx, str.grapgp
lea rdx, [rbp + 0x35c]
mov rcx, qword [rbp - 0x78]
call fcn.1800dce44
test eax, eax
jne 0x18002458f
mov rdx, qword [r13]
mov rbx, rdx
mov rax, qword [rdx + 8]
cmp byte [rax + 0x19], 0
jne 0x180024386
mov ecx, dword [rbp + 0x338]
cmp dword [rax + 0x1c], ecx
jae 0x180024370
mov rax, qword [rax + 0x10]
jmp 0x180024376
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x180024365
cmp rbx, rdx
je 0x180024386
cmp ecx, dword [rbx + 0x1c]
jae 0x1800243c5
lea rax, [rbp + 0x338]
mov qword [rbp - 0x48], rax
lea r9, [rsp + 0x50]
lea r8, [rbp - 0x48]
lea rdx, [0x180113a48]
mov rcx, r13
call fcn.180021a70
lea r9, [rax + 0x1c]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp - 0x40]
mov rcx, r13
call fcn.180021fb0
mov rbx, qword [rbp - 0x40]
mov dword [rbx + 0x20], 1
call fcn.18007dd60
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x180024588
mov qword [rbp + 0x5e0], rsi
mov qword [rbp + 0x5e8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x5d0], 0
mov r8d, 0x69
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12_grab_versionhookhomepage_1145configgrapswitch.cpp
lea rcx, [rbp + 0x5d0]
call fcn.18000a3d0
nop
mov qword [rbp + 0x580], rsi
mov qword [rbp + 0x588], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x570], 0
mov r8d, 3
lea rdx, [0x180112978]
lea rcx, [rbp + 0x570]
call fcn.18000a3d0
nop
call fcn.18007dd60
mov rdi, rax
mov r9d, dword [rbp + 0x338]
lea r8, str.pe32.th32ProcessID_lu
mov edx, 1
lea rcx, [rbp - 0x58]
call fcn.18007d7e0
or dword [rsp + 0x30], 1
mov r9d, 0x10d
lea r8, [rbp + 0x5d0]
lea rdx, [rbp + 0x570]
lea rcx, [rbp + 0x78]
call fcn.18000dda0
mov rbx, rax
mov rcx, qword [rbp - 0x58]
lea rdx, [0x1801126b0]
test rcx, rcx
cmovne rdx, rcx
mov rcx, rax
call fcn.18000c590
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x78]
call fcn.18000f5c0
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1800244e8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x588]
cmp rdx, 0x10
jb 0x180024529
inc rdx
mov rcx, qword [rbp + 0x570]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024524
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024d4d
call fcn.1800a4c5c
mov qword [rbp + 0x580], rsi
mov qword [rbp + 0x588], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x570], 0
mov rdx, qword [rbp + 0x5e8]
cmp rdx, 0x10
jb 0x180024583
inc rdx
mov rcx, qword [rbp + 0x5d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002457e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024d53
call fcn.1800a4c5c
mov rdi, qword [rsp + 0x58]
lea rbx, str.grapgp
lea rdx, [rbp + 0x35c]
mov rcx, qword [rbp - 0x80]
call fcn.1800dce44
test eax, eax
jne 0x18002469b
mov dword [rdi + 0x10], 1
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x180024d64
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rax, [0x180112bac]
lea rcx, [rsp + 0x68]
cmp rax, 0x10000
jae 0x1800245ec
movzx edx, ax
call fcn.180012580
jmp 0x1800245fb
mov r8d, 1
mov rdx, rax
call fcn.180009210
nop
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x180024d59
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x60]
cmp rbx, 0x10000
jae 0x180024633
movzx edx, bx
call fcn.180012580
jmp 0x180024642
mov r8d, 6
mov rdx, rbx
call fcn.180009210
nop
call fcn.1800103b0
mov r9, qword [rax]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [r9 + 0x28]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002467c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002469b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x180024d2c
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x35c]
cmp rax, 0x10000
jae 0x1800246e0
lea rax, [rbp + 0x35c]
movzx edx, ax
lea rcx, [rsp + 0x38]
call fcn.180012580
jmp 0x18002470f
lea rcx, [rbp + 0x35c]
mov rax, r14
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1800246f0
mov r8d, eax
lea rdx, [rbp + 0x35c]
lea rcx, [rsp + 0x38]
call fcn.180009210
nop
mov r9, qword [rbp - 0x70]
mov rdi, r9
mov rdx, qword [r9 + 8]
mov rbx, qword [rsp + 0x38]
cmp byte [rdx + 0x19], 0
jne 0x1800247b2
nop dword [rax]
test rbx, rbx
je 0x180024d7a
mov rax, qword [rdx + 0x20]
mov r8, rbx
sub r8, rax
movzx ecx, word [rax]
cmp cx, word [rax + r8]
jne 0x18002475a
add rax, 2
test cx, cx
jne 0x180024743
mov eax, esi
jmp 0x18002475f
sbb eax, eax
or eax, 1
shr eax, 0x1f
test al, al
je 0x18002476c
mov rdx, qword [rdx + 0x10]
jmp 0x180024772
mov rdi, rdx
mov rdx, qword [rdx]
cmp byte [rdx + 0x19], 0
je 0x180024730
cmp rdi, r9
je 0x1800247b2
mov rdx, qword [rdi + 0x20]
test rdx, rdx
je 0x180024d6f
mov rax, rbx
sub rdx, rbx
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x1800247a6
add rax, 2
test cx, cx
jne 0x180024790
mov eax, esi
jmp 0x1800247ab
sbb eax, eax
or eax, 1
shr eax, 0x1f
test al, al
je 0x1800247b5
mov rdi, r9
cmp rdi, r9
je 0x180024a25
mov rdx, qword [rdi + 0x28]
lea rcx, [rdx - 0x18]
mov rsi, qword [r15]
sub rsi, 0x18
cmp rcx, rsi
je 0x18002481c
cmp dword [rsi + 0x10], 0
jl 0x180024810
mov rax, qword [rsi]
cmp qword [rcx], rax
jne 0x180024810
call fcn.180008df0
mov rbx, rax
mov ecx, r14d
lock xadd dword [rsi + 0x10], ecx
sub ecx, 1
jg 0x180024802
mov rcx, qword [rsi]
mov r8, qword [rcx]
mov rdx, rsi
call qword [r8 + 8]
lea rax, [rbx + 0x18]
mov qword [r15], rax
mov rbx, qword [rsp + 0x38]
jmp 0x18002481c
mov r8d, dword [rdx - 0x10]
mov rcx, r15
call fcn.180009210
call fcn.18007dd60
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x180024a23
xor ebx, ebx
mov qword [rbp + 0x600], rbx
mov qword [rbp + 0x608], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x5f0], bl
lea r8d, [rbx + 0x69]
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12_grab_versionhookhomepage_1145configgrapswitch.cpp
lea rcx, [rbp + 0x5f0]
call fcn.18000a3d0
nop
mov qword [rbp + 0x5a0], rbx
mov qword [rbp + 0x5a8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x590], bl
lea r8d, [rbx + 3]
lea rdx, [0x180112978]
lea rcx, [rbp + 0x590]
call fcn.18000a3d0
nop
call fcn.18007dd60
mov rsi, rax
mov rcx, qword [rdi + 0x20]
sub rcx, 0x18
call fcn.180008df0
lea rcx, [rax + 0x18]
mov qword [rbp - 0x60], rcx
lea rax, [rbp - 0x60]
mov qword [rbp - 0x30], rax
mov qword [rsp + 0x20], rcx
mov r9d, dword [rbp + 0x338]
lea r8, str.pe32.th32ProcessID_lu__s
lea edx, [rbx + 2]
lea rcx, [rbp - 0x38]
call fcn.18007d7e0
mov rdi, rax
or dword [rsp + 0x30], 2
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov ecx, r14d
lock xadd dword [rdx + 0x10], ecx
sub ecx, 1
jg 0x180024905
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
mov r9d, 0x119
lea r8, [rbp + 0x5f0]
lea rdx, [rbp + 0x590]
lea rcx, [rbp + 0x160]
call fcn.18000dda0
mov rbx, rax
mov rcx, qword [rdi]
lea rdx, [0x1801126b0]
test rcx, rcx
cmovne rdx, rcx
mov rcx, rax
call fcn.18000c590
mov r8, qword [rsi]
mov rdx, rbx
mov rcx, rsi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x160]
call fcn.18000f5c0
and dword [rsp + 0x30], 0xfffffffd
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18002497f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x5a8]
cmp rdx, 0x10
jb 0x1800249c0
inc rdx
mov rcx, qword [rbp + 0x590]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800249bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024d85
call fcn.1800a4c5c
xor esi, esi
mov qword [rbp + 0x5a0], rsi
mov qword [rbp + 0x5a8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x590], sil
mov rdx, qword [rbp + 0x608]
cmp rdx, 0x10
jb 0x180024a1c
inc rdx
mov rcx, qword [rbp + 0x5f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024a17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024d8b
call fcn.1800a4c5c
mov rbx, qword [rsp + 0x38]
jmp 0x180024a25
xor esi, esi
mov rdi, qword [rsp + 0x58]
cmp dword [rdi + 0x10], 0
jne 0x180024a3d
mov rax, qword [r15]
cmp dword [rax - 0x10], 0
je 0x180024ceb
call fcn.18007dd60
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x180024bf5
mov qword [rbp + 0x620], rsi
mov qword [rbp + 0x628], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x610], 0
mov r8d, 0x69
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12_grab_versionhookhomepage_1145configgrapswitch.cpp
lea rcx, [rbp + 0x610]
call fcn.18000a3d0
nop
mov qword [rbp + 0x5c0], rsi
mov qword [rbp + 0x5c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x5b0], 0
mov r8d, 3
lea rdx, [0x180112978]
lea rcx, [rbp + 0x5b0]
call fcn.18000a3d0
nop
call fcn.18007dd60
mov rdi, rax
lea r8, str.reset_gp
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.18007d7e0
or dword [rsp + 0x30], 4
mov r9d, 0x11d
lea r8, [rbp + 0x610]
lea rdx, [rbp + 0x5b0]
lea rcx, [rbp + 0x248]
call fcn.18000dda0
mov rbx, rax
mov rcx, qword [rbp - 0x50]
lea rdx, [0x1801126b0]
test rcx, rcx
cmovne rdx, rcx
mov rcx, rax
call fcn.18000c590
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rbp + 0x248]
call fcn.18000f5c0
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180024b55
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x5c8]
cmp rdx, 0x10
jb 0x180024b96
inc rdx
mov rcx, qword [rbp + 0x5b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024b91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024d91
call fcn.1800a4c5c
mov qword [rbp + 0x5c0], rsi
mov qword [rbp + 0x5c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x5b0], 0
mov rdx, qword [rbp + 0x628]
cmp rdx, 0x10
jb 0x180024bf0
inc rdx
mov rcx, qword [rbp + 0x610]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024beb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024d97
call fcn.1800a4c5c
mov rdi, qword [rsp + 0x58]
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x180024d21
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rax, [0x180114034]
lea rcx, [rsp + 0x78]
cmp rax, 0x10000
jae 0x180024c33
movzx edx, ax
call fcn.180012580
jmp 0x180024c42
mov r8d, 1
mov rdx, rax
call fcn.180009210
nop
call fcn.180009090
mov rcx, rax
test rax, rax
je 0x180024d9d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, str.grapgp
lea rcx, [rsp + 0x70]
cmp rdx, 0x10000
jae 0x180024c81
movzx edx, dx
call fcn.180012580
jmp 0x180024c8d
mov r8d, 6
call fcn.180009210
nop
call fcn.1800103b0
mov r9, qword [rax]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x70]
mov rcx, rax
call qword [r9 + 0x28]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180024cc7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180024ce6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rsp + 0x38]
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180024d05
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rdx, [rbp + 0x330]
mov rcx, r12
call sub.KERNEL32.dll_Process32NextW
test eax, eax
je 0x18002429b
jmp 0x18002432f
mov ecx, 0x80004005
call fcn.180008c20
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
mov ecx, 0x80004005
call fcn.180008c20
nop
mov ecx, 0x80004005
call fcn.180008c20
int3
mov ecx, 0x80004005
call fcn.180008c20
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
mov ecx, 0x80004005
call fcn.180008c20
int3