Function at 0x403340
Capabilities:
Contain obfuscated stackstrings
Enumerate processes

Disassembly:
mov r11, rsp
sub rsp, 0x2e8
mov qword [rsp + 0xd8], 0xfffffffffffffffe
mov qword [r11 + 0x20], rbx
mov qword [r11 - 8], rbp
mov qword [r11 - 0x10], rsi
mov qword [r11 - 0x18], rdi
mov qword [r11 - 0x20], r12
mov qword [r11 - 0x28], r13
mov qword [r11 - 0x30], r14
mov rax, qword [0x0041c040]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
mov rsi, r8
mov r13, rdx
mov r12, rcx
mov qword [r11 - 0x190], r8
xor r14d, r14d
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], r14
mov word [rsp + 0x40], 0x4e
lea rax, [rsp + 0x48]
mov qword [r11 - 0x58], rax
mov qword [r11 - 0x50], r14
movaps xmm0, xmmword [r11 - 0x58]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x40]
lea r8d, [r14 + 1]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x48]
call fcn.0040a640
mov rbx, qword [rsp + 0x50]
mov rdi, rbx
mov rdx, qword [rsp + 0x58]
cmp rbx, rdx
jbe 0x4033fe
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
cmp rdi, rdx
ja 0x403408
cmp rdi, rbx
jae 0x403417
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov word [rsp + 0x40], 0x78
test rbx, rbx
je 0x403454
mov rcx, rdx
sub rcx, rbx
sar rcx, 1
mov rax, qword [rsp + 0x60]
sub rax, rbx
sar rax, 1
cmp rcx, rax
jae 0x403454
mov word [rdx], 0x78
add rdx, 2
mov qword [rsp + 0x58], rdx
mov rbx, qword [rsp + 0x50]
jmp 0x403503
mov rdi, rdx
cmp rbx, rdx
jbe 0x40346b
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
test rbx, rbx
je 0x40349c
mov rax, rdx
sub rax, rbx
sar rax, 1
je 0x40349c
cmp rbx, rdx
jbe 0x403494
call fcn.0040bf80
sub rdi, rbx
sar rdi, 1
jmp 0x40349f
mov rdi, r14
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x40]
mov r8d, 1
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x48]
call fcn.0040a640
mov rbx, qword [rsp + 0x50]
mov rbp, rbx
mov rdx, qword [rsp + 0x58]
cmp rbx, rdx
jbe 0x4034e5
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rbp + rdi*2]
cmp rax, rdx
ja 0x4034f4
cmp rax, rbx
jae 0x403503
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov word [rsp + 0x40], 0x68
test rbx, rbx
je 0x403540
mov rcx, rdx
sub rcx, rbx
sar rcx, 1
mov rax, qword [rsp + 0x60]
sub rax, rbx
sar rax, 1
cmp rcx, rax
jae 0x403540
mov word [rdx], 0x68
add rdx, 2
mov qword [rsp + 0x58], rdx
mov rbx, qword [rsp + 0x50]
jmp 0x4035ef
mov rdi, rdx
cmp rbx, rdx
jbe 0x403557
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
test rbx, rbx
je 0x403588
mov rax, rdx
sub rax, rbx
sar rax, 1
je 0x403588
cmp rbx, rdx
jbe 0x403580
call fcn.0040bf80
sub rdi, rbx
sar rdi, 1
jmp 0x40358b
mov rdi, r14
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x40]
mov r8d, 1
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x48]
call fcn.0040a640
mov rbx, qword [rsp + 0x50]
mov rbp, rbx
mov rdx, qword [rsp + 0x58]
cmp rbx, rdx
jbe 0x4035d1
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rbp + rdi*2]
cmp rax, rdx
ja 0x4035e0
cmp rax, rbx
jae 0x4035ef
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov word [rsp + 0x40], 0x4c
test rbx, rbx
je 0x40362c
mov rcx, rdx
sub rcx, rbx
sar rcx, 1
mov rax, qword [rsp + 0x60]
sub rax, rbx
sar rax, 1
cmp rcx, rax
jae 0x40362c
mov word [rdx], 0x4c
add rdx, 2
mov qword [rsp + 0x58], rdx
mov rbx, qword [rsp + 0x50]
jmp 0x4036db
mov rdi, rdx
cmp rbx, rdx
jbe 0x403643
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
test rbx, rbx
je 0x403674
mov rax, rdx
sub rax, rbx
sar rax, 1
je 0x403674
cmp rbx, rdx
jbe 0x40366c
call fcn.0040bf80
sub rdi, rbx
sar rdi, 1
jmp 0x403677
mov rdi, r14
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x40]
mov r8d, 1
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x48]
call fcn.0040a640
mov rbx, qword [rsp + 0x50]
mov rbp, rbx
mov rdx, qword [rsp + 0x58]
cmp rbx, rdx
jbe 0x4036bd
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rbp + rdi*2]
cmp rax, rdx
ja 0x4036cc
cmp rax, rbx
jae 0x4036db
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov word [rsp + 0x40], 0x6f
test rbx, rbx
je 0x403718
mov rcx, rdx
sub rcx, rbx
sar rcx, 1
mov rax, qword [rsp + 0x60]
sub rax, rbx
sar rax, 1
cmp rcx, rax
jae 0x403718
mov word [rdx], 0x6f
add rdx, 2
mov qword [rsp + 0x58], rdx
mov rbx, qword [rsp + 0x50]
jmp 0x4037c7
mov rdi, rdx
cmp rbx, rdx
jbe 0x40372f
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
test rbx, rbx
je 0x403760
mov rax, rdx
sub rax, rbx
sar rax, 1
je 0x403760
cmp rbx, rdx
jbe 0x403758
call fcn.0040bf80
sub rdi, rbx
sar rdi, 1
jmp 0x403763
mov rdi, r14
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x40]
mov r8d, 1
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x48]
call fcn.0040a640
mov rbx, qword [rsp + 0x50]
mov rbp, rbx
mov rdx, qword [rsp + 0x58]
cmp rbx, rdx
jbe 0x4037a9
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rbp + rdi*2]
cmp rax, rdx
ja 0x4037b8
cmp rax, rbx
jae 0x4037c7
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov word [rsp + 0x40], 0x75
test rbx, rbx
je 0x403804
mov rcx, rdx
sub rcx, rbx
sar rcx, 1
mov rax, qword [rsp + 0x60]
sub rax, rbx
sar rax, 1
cmp rcx, rax
jae 0x403804
mov word [rdx], 0x75
add rdx, 2
mov qword [rsp + 0x58], rdx
mov rbx, qword [rsp + 0x50]
jmp 0x4038b3
mov rdi, rdx
cmp rbx, rdx
jbe 0x40381b
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
test rbx, rbx
je 0x40384c
mov rax, rdx
sub rax, rbx
sar rax, 1
je 0x40384c
cmp rbx, rdx
jbe 0x403844
call fcn.0040bf80
sub rdi, rbx
sar rdi, 1
jmp 0x40384f
mov rdi, r14
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x40]
mov r8d, 1
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x48]
call fcn.0040a640
mov rbx, qword [rsp + 0x50]
mov rbp, rbx
mov rdx, qword [rsp + 0x58]
cmp rbx, rdx
jbe 0x403895
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rbp + rdi*2]
cmp rax, rdx
ja 0x4038a4
cmp rax, rbx
jae 0x4038b3
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov word [rsp + 0x40], 0x73
test rbx, rbx
je 0x4038f0
mov rcx, rdx
sub rcx, rbx
sar rcx, 1
mov rax, qword [rsp + 0x60]
sub rax, rbx
sar rax, 1
cmp rcx, rax
jae 0x4038f0
mov word [rdx], 0x73
add rdx, 2
mov qword [rsp + 0x58], rdx
mov rbx, qword [rsp + 0x50]
jmp 0x40399f
mov rdi, rdx
cmp rbx, rdx
jbe 0x403907
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
test rbx, rbx
je 0x403938
mov rax, rdx
sub rax, rbx
sar rax, 1
je 0x403938
cmp rbx, rdx
jbe 0x403930
call fcn.0040bf80
sub rdi, rbx
sar rdi, 1
jmp 0x40393b
mov rdi, r14
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x40]
mov r8d, 1
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x48]
call fcn.0040a640
mov rbx, qword [rsp + 0x50]
mov rbp, rbx
mov rdx, qword [rsp + 0x58]
cmp rbx, rdx
jbe 0x403981
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rbp + rdi*2]
cmp rax, rdx
ja 0x403990
cmp rax, rbx
jae 0x40399f
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov word [rsp + 0x40], 0x4d
test rbx, rbx
je 0x4039dc
mov rcx, rdx
sub rcx, rbx
sar rcx, 1
mov rax, qword [rsp + 0x60]
sub rax, rbx
sar rax, 1
cmp rcx, rax
jae 0x4039dc
mov word [rdx], 0x4d
add rdx, 2
mov qword [rsp + 0x58], rdx
mov rbx, qword [rsp + 0x50]
jmp 0x403a8b
mov rdi, rdx
cmp rbx, rdx
jbe 0x4039f3
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
test rbx, rbx
je 0x403a24
mov rax, rdx
sub rax, rbx
sar rax, 1
je 0x403a24
cmp rbx, rdx
jbe 0x403a1c
call fcn.0040bf80
sub rdi, rbx
sar rdi, 1
jmp 0x403a27
mov rdi, r14
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x40]
mov r8d, 1
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x48]
call fcn.0040a640
mov rbx, qword [rsp + 0x50]
mov rbp, rbx
mov rdx, qword [rsp + 0x58]
cmp rbx, rdx
jbe 0x403a6d
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rbp + rdi*2]
cmp rax, rdx
ja 0x403a7c
cmp rax, rbx
jae 0x403a8b
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov word [rsp + 0x40], 0x67
test rbx, rbx
je 0x403ac8
mov rcx, rdx
sub rcx, rbx
sar rcx, 1
mov rax, qword [rsp + 0x60]
sub rax, rbx
sar rax, 1
cmp rcx, rax
jae 0x403ac8
mov word [rdx], 0x67
add rdx, 2
mov qword [rsp + 0x58], rdx
mov rbx, qword [rsp + 0x50]
jmp 0x403b77
mov rdi, rdx
cmp rbx, rdx
jbe 0x403adf
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
test rbx, rbx
je 0x403b10
mov rax, rdx
sub rax, rbx
sar rax, 1
je 0x403b10
cmp rbx, rdx
jbe 0x403b08
call fcn.0040bf80
sub rdi, rbx
sar rdi, 1
jmp 0x403b13
mov rdi, r14
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x40]
mov r8d, 1
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x48]
call fcn.0040a640
mov rbx, qword [rsp + 0x50]
mov rbp, rbx
mov rdx, qword [rsp + 0x58]
cmp rbx, rdx
jbe 0x403b59
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rbp + rdi*2]
cmp rax, rdx
ja 0x403b68
cmp rax, rbx
jae 0x403b77
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov word [rsp + 0x40], 0x74
test rbx, rbx
je 0x403baf
mov rcx, rdx
sub rcx, rbx
sar rcx, 1
mov rax, qword [rsp + 0x60]
sub rax, rbx
sar rax, 1
cmp rcx, rax
jae 0x403baf
mov word [rdx], 0x74
lea rax, [rdx + 2]
mov qword [rsp + 0x58], rax
jmp 0x403c53
mov rdi, rdx
cmp rbx, rdx
jbe 0x403bc6
call fcn.0040bf80
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdi
test rbx, rbx
je 0x403bf7
mov rax, rdx
sub rax, rbx
sar rax, 1
je 0x403bf7
cmp rbx, rdx
jbe 0x403bef
call fcn.0040bf80
sub rdi, rbx
sar rdi, 1
jmp 0x403bfa
mov rdi, r14
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x40]
mov r8d, 1
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x48]
call fcn.0040a640
mov r11, qword [rsp + 0x50]
mov rbx, r11
mov rax, qword [rsp + 0x58]
cmp r11, rax
jbe 0x403c40
call fcn.0040bf80
mov rax, qword [rsp + 0x58]
mov r11, qword [rsp + 0x50]
lea rcx, [rbx + rdi*2]
cmp rcx, rax
ja 0x403c4e
cmp rcx, r11
jae 0x403c53
call fcn.0040bf80
mov word [rsp + 0x40], 0x68
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.00409bd0
mov word [rsp + 0x40], 0x56
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.00409bd0
mov word [rsp + 0x40], 0x7a
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.00409bd0
mov word [rsp + 0x40], 0x72
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.00409bd0
mov word [rsp + 0x40], 0x78
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.00409bd0
mov word [rsp + 0x40], 0x63
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.00409bd0
mov word [rsp + 0x40], 0x6a
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.00409bd0
mov word [rsp + 0x40], 0x69
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.00409bd0
mov word [rsp + 0x290], 0x72
mov word [rsp + 0x292], 0x50
mov word [rsp + 0x294], 0x75
mov word [rsp + 0x296], 0x45
mov word [rsp + 0x298], 0x56
mov word [rsp + 0x29a], 0x62
mov word [rsp + 0x29c], 0x64
mov word [rsp + 0x29e], 0x59
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x70]
call fcn.00409a40
mov r9d, 8
lea r8, [rsp + 0x290]
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.00401270
nop
mov qword [rsp + 0x98], r14
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0xa8], r14
mov word [rsp + 0x40], 0x4c
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x90]
call fcn.00409bd0
mov word [rsp + 0x40], 0x44
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x90]
call fcn.00409bd0
mov word [rsp + 0x40], 0x51
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x90]
call fcn.00409bd0
mov word [rsp + 0x290], 0x46
mov word [rsp + 0x292], 0x7a
mov word [rsp + 0x294], 0x58
mov word [rsp + 0x296], 0x47
mov word [rsp + 0x298], 0x66
mov word [rsp + 0x29a], 0x69
mov word [rsp + 0x29c], 0x63
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0xb0]
call fcn.00409a40
mov r9d, 7
lea r8, [rsp + 0x290]
mov rdx, rax
lea rcx, [rsp + 0xe0]
call fcn.00401270
nop
lea rbx, [rsp + 0xe8]
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [rsp + 0x100]
cmp rdx, 0x10
cmovae rbx, rcx
mov r8, qword [rsp + 0xf8]
add rbx, r8
je 0x403eb8
lea rax, [rsp + 0xe8]
cmp rdx, 0x10
cmovae rax, rcx
cmp rax, rbx
ja 0x403eb8
lea rax, [rsp + 0xe8]
cmp rdx, 0x10
cmovae rax, rcx
add rax, r8
cmp rbx, rax
jbe 0x403ed5
call fcn.0040bf80
mov rdx, qword [rsp + 0x100]
mov r8, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0xe8]
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
cmp rdx, 0x10
jb 0x403ef7
mov rbx, rcx
test rcx, rcx
je 0x403f2c
jmp 0x403eff
lea rbx, [rsp + 0xe8]
lea rax, [rsp + 0xe8]
cmp rdx, 0x10
cmovae rax, rcx
cmp rax, rbx
ja 0x403f2c
lea rax, [rsp + 0xe8]
cmp rdx, 0x10
cmovae rax, rcx
add rax, r8
cmp rbx, rax
jbe 0x403f31
call fcn.0040bf80
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x298], rbx
mov qword [rsp + 0x128], 7
mov qword [rsp + 0x120], r14
mov word [rsp + 0x110], 0
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movaps xmm1, xmmword [rsp + 0x290]
movdqa xmmword [rsp + 0x290], xmm1
movzx r9d, byte [rsp + 0x40]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x108]
call fcn.0040b3a0
nop
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x403ff4
mov dword [rsp + 0x160], 0x130
lea rdx, [rsp + 0x160]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x403ff4
nop
nop
nop
lea rdx, [rsp + 0x160]
mov rcx, rbx
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x403fe0
mov qword [rsp + 0xd0], 0xf
mov qword [rsp + 0xc8], r14
mov byte [rsp + 0xb8], 0
mov r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xb0]
call fcn.00409ed0
cmp qword [rsi + 0x20], 8
jb 0x40403f
lea rdi, [rsi + 8]
mov rbp, qword [rdi]
jmp 0x404046
lea rdi, [rsi + 8]
mov rbp, rdi
lea rbx, [rsp + 0x110]
cmp qword [rsp + 0x128], 8
cmovae rbx, qword [rsp + 0x110]
lea rdx, [rsp + 0xb0]
mov rcx, r13
call fcn.00401b00
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8, rbp
mov rdx, rbx
mov rcx, r12
call rax
mov rbx, rax
cmp qword [rsp + 0x128], 8
jb 0x4040a8
mov rcx, qword [rsp + 0x110]
call fcn.0040bb10
mov qword [rsp + 0x128], 7
mov qword [rsp + 0x120], r14
mov word [rsp + 0x110], 0
cmp qword [rsp + 0x100], 0x10
jb 0x4040de
mov rcx, qword [rsp + 0xe8]
call fcn.0040bb10
mov qword [rsp + 0x100], 0xf
mov qword [rsp + 0xf8], r14
mov byte [rsp + 0xe8], 0
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x40410c
call fcn.0040bb10
mov qword [rsp + 0x98], r14
mov qword [rsp + 0xa0], r14
mov qword [rsp + 0xa8], r14
cmp qword [rsp + 0x150], 0x10
jb 0x40413c
mov rcx, qword [rsp + 0x138]
call fcn.0040bb10
mov qword [rsp + 0x150], 0xf
mov qword [rsp + 0x148], r14
mov byte [rsp + 0x138], 0
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x404167
call fcn.0040bb10
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], r14
cmp qword [rsi + 0x20], 8
jb 0x404185
mov rcx, qword [rdi]
call fcn.0040bb10
mov qword [rsi + 0x20], 7
mov qword [rsi + 0x18], r14
mov word [rdi], 0
mov rax, rbx
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.0040b8c0
mov rbx, qword [rsp + 0x308]
mov rbp, qword [rsp + 0x2e0]
mov rsi, qword [rsp + 0x2d8]
mov rdi, qword [rsp + 0x2d0]
mov r12, qword [rsp + 0x2c8]
mov r13, qword [rsp + 0x2c0]
mov r14, qword [rsp + 0x2b8]
add rsp, 0x2e8
ret