Function at 0x1400f6530
Capabilities:
Enumerate processes

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x180
mov rax, qword [0x1402b5380]
xor rax, rsp
mov qword [rsp + 0x178], rax
lea r15, [rsp + 0x64]
mov eax, 0x344ec7fe
lea rsi, [rsp + 0x74]
lea rdi, [rsp + 0x48]
lea rbx, str.HD_Player.exe
jmp 0x1400f6580
cmp edx, 0xffffffff
cmovne eax, r8d
cmp ecx, 0xa
cmovge eax, r8d
nop
cmp eax, 0xd498eef
jle 0x1400f6600
cmp eax, 0x3dce055f
jle 0x1400f6650
cmp eax, 0x53c8a6e3
jg 0x1400f66f1
cmp eax, 0x4a22d408
jg 0x1400f6807
cmp eax, 0x3dce0560
je 0x1400f6a40
cmp eax, 0x46e79d19
je 0x1400f6a78
cmp eax, 0x4948548d
jne 0x1400f6580
mov eax, dword [0x1402b5ae8]
lea edx, [rax + 1]
imul edx, eax
mov r9d, edx
xor r9d, 0xfffffffe
mov ecx, 0x1fa8686d
mov eax, 0x879251f9
mov r8d, 0x1fa8686d
test r9d, edx
sete dl
je 0x1400f6c4f
mov r8d, 0x879251f9
jmp 0x1400f6c4f
cmp eax, 0xc12d333f
jle 0x1400f66a0
cmp eax, 0xe15f5a77
jg 0x1400f6727
cmp eax, 0xd690b6cd
jg 0x1400f686d
cmp eax, 0xc12d3340
je 0x1400f6aaa
cmp eax, 0xcb778257
je 0x1400f6ae4
cmp eax, 0xceaafe9c
jne 0x1400f6580
mov dword [rsp + 0x34], ebp
mov eax, 0xf6e6c166
jmp 0x1400f6580
cmp eax, 0x344ec7fd
jle 0x1400f675d
cmp eax, 0x3b19c54c
jg 0x1400f68e8
cmp eax, 0x344ec7fe
je 0x1400f6af2
cmp eax, 0x370f8f15
je 0x1400f6b37
cmp eax, 0x3abc31cc
jne 0x1400f6580
mov eax, 0xdb80a886
mov r12d, dword [rsp + 0x2c]
jmp 0x1400f6580
cmp eax, 0x9ac0e073
jle 0x1400f67cc
cmp eax, 0xab36c084
jg 0x1400f694d
cmp eax, 0x9ac0e074
je 0x1400f6b41
cmp eax, 0xa3001f53
je 0x1400f6b5c
cmp eax, 0xa56c20df
jne 0x1400f6580
cmp byte [rsp + 0x23], 0
mov eax, 0x4a22d409
jne 0x1400f6580
mov eax, 0x4e1a92fc
jmp 0x1400f6580
cmp eax, 0x728ead7f
jg 0x1400f69b1
cmp eax, 0x53c8a6e4
je 0x1400f6b76
cmp eax, 0x6798eaf9
je 0x1400f6b80
cmp eax, 0x6cbd70c9
jne 0x1400f6580
mov eax, 0x21822f6d
jmp 0x1400f6580
cmp eax, 0xf6e6c165
jle 0x1400f69dc
cmp eax, 0xf6e6c166
je 0x1400f6b8a
cmp eax, 0xfb710e82
je 0x1400f6bd5
cmp eax, 0x3ee37f8
jne 0x1400f6580
mov eax, 0x370f8f15
jmp 0x1400f6580
cmp eax, 0x183a9114
jle 0x1400f69fc
cmp eax, 0x183a9115
je 0x1400f6bec
cmp eax, 0x1fa8686d
je 0x1400f6c05
cmp eax, 0x21822f6d
jne 0x1400f6580
mov eax, dword [0x1402b5ae8]
mov ecx, dword [0x1402b5aec]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov eax, 0x3ee37f8
mov r8d, 0x3ee37f8
jne 0x1400f6570
mov r8d, 0x6cbd70c9
jmp 0x1400f6570
cmp eax, 0x8ada2b6e
jle 0x1400f6a20
cmp eax, 0x8ada2b6f
je 0x1400f6c0f
cmp eax, 0x932ee82e
je 0x1400f6c19
cmp eax, 0x96dda396
jne 0x1400f6580
mov qword [rsp + 0x40], r15
mov eax, 0xfb710e82
jmp 0x1400f6580
cmp eax, 0x4a22d409
je 0x1400f6c69
cmp eax, 0x4aa7b6d4
je 0x1400f6c7b
cmp eax, 0x4e1a92fc
jne 0x1400f6580
mov eax, dword [0x1402b5ae8]
mov ecx, dword [0x1402b5aec]
lea edx, [rax + 1]
imul edx, eax
mov r8d, edx
xor r8d, 0xfffffffe
test r8d, edx
sete al
cmp ecx, 0xa
setl r9b
xor r9b, al
mov eax, 0x21822f6d
mov r9d, 0x21822f6d
jne 0x1400f6dcb
mov r9d, 0x6cbd70c9
jmp 0x1400f6dcb
cmp eax, 0xd690b6ce
je 0x1400f6cac
cmp eax, 0xd8062455
je 0x1400f6cb6
cmp eax, 0xdb80a886
jne 0x1400f6580
mov eax, dword [0x1402b5ae8]
mov ecx, dword [0x1402b5aec]
lea edx, [rax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov eax, 0x53c8a6e4
mov r8d, 0x53c8a6e4
jne 0x1400f68c8
mov r8d, 0x3abc31cc
cmp edx, 0xffffffff
cmovne eax, r8d
cmp ecx, 0xa
mov r12d, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x50]
mov dword [rsp + 0x30], ecx
cmovge eax, r8d
jmp 0x1400f6580
cmp eax, 0x3b19c54d
je 0x1400f6cf9
cmp eax, 0x3dcad83f
je 0x1400f6d3c
cmp eax, 0x3dcd2e3e
jne 0x1400f6580
cmp dword [rsp + 0x28], 0
sete byte [rsp + 0x22]
mov eax, dword [0x1402b5ae8]
lea edx, [rax + 1]
imul edx, eax
mov r9d, edx
xor r9d, 0xfffffffe
mov ecx, 0x6798eaf9
mov eax, 0xe15f5a78
mov r8d, 0x6798eaf9
test r9d, edx
sete dl
je 0x1400f6c4f
mov r8d, 0xe15f5a78
jmp 0x1400f6c4f
cmp eax, 0xab36c085
je 0x1400f6d8f
cmp eax, 0xab4d4584
je 0x1400f6dde
cmp eax, 0xad2e2087
jne 0x1400f6580
mov eax, dword [0x1402b5ae8]
mov ecx, dword [0x1402b5aec]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov eax, 0x3dcad83f
mov r8d, 0x3dcad83f
jne 0x1400f6570
mov r8d, 0xdf7f4c2
jmp 0x1400f6570
cmp eax, 0x728ead80
je 0x1400f6de8
cmp eax, 0x75ada49d
je 0x1400f6e02
cmp eax, 0x7aa4e1a8
jne 0x1400f6580
mov eax, 0xab36c085
jmp 0x1400f6580
cmp eax, 0xe15f5a78
je 0x1400f6e45
cmp eax, 0xedc281b3
jne 0x1400f6eb4
mov eax, 0x46e79d19
jmp 0x1400f6580
cmp eax, 0xd498ef0
je 0x1400f6e53
cmp eax, 0xdf7f4c2
jne 0x1400f6580
mov eax, 0x3dcad83f
mov ebp, dword [rsp + 0x30]
jmp 0x1400f6580
cmp eax, 0x844d1122
je 0x1400f6e5d
cmp eax, 0x879251f9
jne 0x1400f6580
mov eax, 0x4948548d
jmp 0x1400f6580
mov eax, dword [0x1402b5ae8]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
mov ecx, 0x932ee82e
mov eax, 0x8ada2b6f
mov r8d, 0x932ee82e
cmp edx, 0xffffffff
sete dl
je 0x1400f6bbb
mov r8d, 0x8ada2b6f
jmp 0x1400f6bbb
mov eax, dword [0x1402b5ae8]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
mov ecx, 0xab4d4584
mov eax, 0xedc281b3
mov r8d, 0xab4d4584
cmp edx, 0xffffffff
sete dl
jne 0x1400f6bb5
jmp 0x1400f6bbb
mov eax, dword [0x1402b5ae8]
lea edx, [rax + 1]
imul edx, eax
mov r9d, edx
xor r9d, 0xfffffffe
mov ecx, 0x844d1122
mov eax, 0xcb778257
mov r8d, 0x844d1122
test r9d, edx
sete dl
je 0x1400f6bbb
mov r8d, 0xcb778257
jmp 0x1400f6bbb
mov eax, dword [rsp + 0x24]
mov eax, 0x844d1122
jmp 0x1400f6580
mov eax, dword [0x1402b5ae8]
mov ecx, dword [0x1402b5aec]
lea edx, [rax + 1]
imul edx, eax
mov r8d, edx
xor r8d, 0xfffffffe
test r8d, edx
sete al
cmp ecx, 0xa
setl r9b
xor r9b, al
mov eax, 0x4948548d
mov r9d, 0x4948548d
jne 0x1400f6dcb
mov r9d, 0x879251f9
jmp 0x1400f6dcb
mov eax, 0x3dce0560
jmp 0x1400f6580
mov rcx, qword [rsp + 0x38]
mov rdx, rdi
call sub.KERNEL32.dll_Process32Next
mov dword [rsp + 0x24], eax
mov eax, 0xc12d3340
jmp 0x1400f6580
cmp byte [rsp + 0x21], 0
mov eax, 0x183a9115
jne 0x1400f6580
mov eax, 0xceaafe9c
jmp 0x1400f6580
mov eax, 0xad2e2087
jmp 0x1400f6580
mov eax, 0x75ada49d
jmp 0x1400f6580
mov eax, dword [0x1402b5ae8]
lea edx, [rax + 1]
imul edx, eax
mov r9d, edx
xor r9d, 0xfffffffe
mov ecx, 0x46e79d19
mov eax, 0xedc281b3
mov r8d, 0x46e79d19
test r9d, edx
sete dl
je 0x1400f6bbb
mov r8d, 0xedc281b3
cmp dword [0x1402b5aec], 0xa
cmovl eax, r8d
setl r8b
xor r8b, dl
cmovne eax, ecx
jmp 0x1400f6580
mov rax, qword [rsp + 0x40]
cmp dword [rax], r12d
setg byte [rsp + 0x23]
mov eax, 0xa56c20df
jmp 0x1400f6580
mov rcx, rsi
mov rdx, rbx
call fcn.1400f6ef0
mov dword [rsp + 0x28], eax
mov eax, 0xd8062455
jmp 0x1400f6580
mov eax, 0x4aa7b6d4
jmp 0x1400f6580
mov eax, 0x932ee82e
jmp 0x1400f6580
mov qword [rsp + 0x38], r14
mov eax, dword [0x1402b5ae8]
lea edx, [rax + 1]
imul edx, eax
mov r9d, edx
xor r9d, 0xfffffffe
mov ecx, 0xd498ef0
mov eax, 0x8ada2b6f
mov r8d, 0xd498ef0
test r9d, edx
sete dl
je 0x1400f6c4f
mov r8d, 0x8ada2b6f
cmp dword [0x1402b5aec], 0xa
cmovl eax, r8d
setl r8b
xor dl, r8b
cmovne eax, ecx
jmp 0x1400f6580
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x2c], eax
mov eax, 0x3b19c54d
jmp 0x1400f6580
xor ebp, ebp
mov ecx, 2
xor edx, edx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov r14, rax
mov dword [rsp + 0x48], 0x130
mov rcx, rax
mov rdx, rdi
call sub.KERNEL32.dll_Process32First
mov eax, 0x3dce0560
xor r12d, r12d
jmp 0x1400f6580
mov eax, 0x4e1a92fc
jmp 0x1400f6580
mov eax, dword [0x1402b5ae8]
mov ecx, dword [0x1402b5aec]
lea edx, [rax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov eax, 0x3dcd2e3e
mov r8d, 0x3dcd2e3e
jne 0x1400f6570
mov r8d, 0xe15f5a78
jmp 0x1400f6570
mov eax, dword [0x1402b5ae8]
mov ecx, dword [0x1402b5aec]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov eax, 0xdb80a886
mov r8d, 0xdb80a886
jne 0x1400f6570
mov r8d, 0x3abc31cc
jmp 0x1400f6570
mov eax, dword [0x1402b5ae8]
mov ecx, dword [0x1402b5aec]
lea edx, [rax + 1]
imul edx, eax
mov r8d, edx
xor r8d, 0xfffffffe
test r8d, edx
sete al
cmp ecx, 0xa
setl r9b
xor r9b, al
mov eax, 0xd690b6ce
mov r9d, 0xd690b6ce
jne 0x1400f6d78
mov r9d, 0xdf7f4c2
test r8d, edx
cmovne eax, r9d
cmp ecx, 0xa
mov ebp, dword [rsp + 0x30]
cmovge eax, r9d
jmp 0x1400f6580
mov eax, dword [0x1402b5ae8]
mov ecx, dword [0x1402b5aec]
lea edx, [rax + 1]
imul edx, eax
mov r8d, edx
xor r8d, 0xfffffffe
test r8d, edx
sete al
cmp ecx, 0xa
setl r9b
xor r9b, al
mov eax, 0x728ead80
mov r9d, 0x728ead80
jne 0x1400f6dcb
mov r9d, 0x7aa4e1a8
test r8d, edx
cmovne eax, r9d
cmp ecx, 0xa
cmovge eax, r9d
jmp 0x1400f6580
mov eax, 0xe1a85e55
jmp 0x1400f6580
cmp byte [rsp + 0x22], 0
mov eax, 0x96dda396
jne 0x1400f6580
mov eax, 0x370f8f15
jmp 0x1400f6580
mov eax, dword [0x1402b5ae8]
mov ecx, dword [0x1402b5aec]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov eax, 0xab36c085
mov r8d, 0xab36c085
jne 0x1400f6570
mov r8d, 0x7aa4e1a8
jmp 0x1400f6570
mov eax, dword [rsp + 0x28]
mov eax, 0x3dcd2e3e
jmp 0x1400f6580
mov eax, 0x9ac0e074
jmp 0x1400f6580
mov eax, dword [0x1402b5ae8]
mov ecx, dword [0x1402b5aec]
lea edx, [rax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl r8b
xor r8b, al
mov eax, 0xa3001f53
mov r8d, 0xa3001f53
jne 0x1400f6e97
mov r8d, 0xcb778257
cmp edx, 0xffffffff
cmovne eax, r8d
cmp ecx, 0xa
cmovge eax, r8d
cmp dword [rsp + 0x24], 0
setne byte [rsp + 0x21]
jmp 0x1400f6580
cmp eax, 0xe1a85e55
jne 0x1400f6580
mov esi, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x178]
xor rcx, rsp
call fcn.1402388f0
mov eax, esi
add rsp, 0x180
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret