Function at 0x140022e10
Capabilities:
Enumerate processes
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5540]
mov eax, 0x5640
call fcn.140072d00
sub rsp, rax
mov ecx, 0x1000
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
jne 0x14002532f
lea r8, [rbp + 0x5580]
mov edx, 0x4000
lea rcx, [rbp + 0x1540]
call sub.KERNEL32.dll_K32EnumDeviceDrivers
xor r12d, r12d
lea rsi, [r12 - 1]
movabs rbx, 0x9f4f5e1d9aa825d5
movabs r14, 0x5b444c88d35ea9d6
test eax, eax
je 0x14002318e
mov eax, dword [rbp + 0x5580]
cmp eax, 0x4000
jae 0x14002318e
mov r13d, eax
shr r13, 3
test r13, r13
je 0x14002318e
mov r15d, r12d
movabs rdi, 0x7fffffffffffffff
mov r8d, 0x800
lea rdx, [rbp + 0xd40]
mov rcx, qword [rbp + r15*8 + 0x1540]
call sub.KERNEL32.dll_K32GetDeviceDriverBaseNameA
test eax, eax
je 0x140023182
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], r12
lea rax, [rbp + 0xd40]
mov rbx, rsi
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140022ef0
cmp rbx, rdi
ja 0x1400254d3
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
cmp rbx, 0x10
jae 0x140022f2e
mov qword [rbp - 0x20], rbx
mov r8, rbx
lea rdx, [rbp + 0xd40]
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx - 0x30], 0
jmp 0x140022f92
mov r14, rbx
or r14, 0xf
cmp r14, rdi
jbe 0x140022f3f
mov r14, rdi
jmp 0x140022f4c
cmp r14, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb r14, rax
lea rdx, [r14 + 1]
lea rcx, [rbp - 0x30]
call fcn.140009aa0
mov rdi, rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], r14
mov r8, rbx
lea rdx, [rbp + 0xd40]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
movabs rdi, 0x7fffffffffffffff
movabs r14, 0x5b444c88d35ea9d6
movabs rax, 0xec3c3b7ef5da55be
mov qword [rbp + 0x50], rax
movabs rax, 0x5b443eedb83dc8be
mov qword [rbp + 0x58], rax
movabs rbx, 0x9f4f5e1d9aa825d5
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], r14
movdqu xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x40], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x30]
call fcn.140022d10
cmp rax, 0xffffffffffffffff
jne 0x140024fdf
movabs rax, 0xea2d3b59eadc519d
mov qword [rbp + 0x70], rax
movabs rax, 0x5b444c88d35ea9b1
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], r14
movdqu xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x40], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x30]
call fcn.140022d10
cmp rax, 0xffffffffffffffff
jne 0x140024c8c
movabs rax, 0x9f4f5e1d9ace55bb
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], r14
movdqu xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x40], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x30]
call fcn.140022d10
cmp rax, 0xffffffffffffffff
jne 0x1400249a7
movabs rax, 0xfb261673fbdc4c81
mov qword [rbp + 0xb0], rax
movabs rax, 0x5b444c88d35ea9b3
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0xc0], rbx
mov qword [rbp + 0xc8], r14
movdqu xmm0, xmmword [rbp + 0xb0]
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x40], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x30]
call fcn.140022d10
cmp rax, 0xffffffffffffffff
jne 0x140024705
movabs rax, 0xc00b116de8c94d86
mov qword [rbp + 0xd0], rax
movabs rax, 0x5b444c88d328db92
mov qword [rbp + 0xd8], rax
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
movdqu xmm0, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x40], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x30]
call fcn.140022d10
cmp rax, 0xffffffffffffffff
jne 0x140024463
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140023182
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002317d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400246fe
call fcn.140072cdc
inc r15
cmp r15, r13
jl 0x140022eb2
movabs rax, 0xb1283c79e3c449ba
mov qword [rsp + 0x30], rax
movabs r15, 0x5b444c88d33bd1b3
mov qword [rsp + 0x38], r15
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x190], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x1400231e3
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x180]
call fcn.140016f10
nop
movabs rax, 0xe7103f71f6d14686
mov qword [rsp + 0x30], rax
movabs rax, 0x5b4429f0b6709de0
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023254
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x1a0]
call fcn.140016f10
nop
movabs rax, 0xfa61397ffe9c13ad
mov qword [rsp + 0x30], rax
movabs r13, 0x5b444c88d35eccae
mov qword [rsp + 0x38], r13
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1d0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x1400232c5
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x1c0]
call fcn.140016f10
nop
movabs rax, 0xfa61397ffe9a16ad
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r13
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140023330
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x1e0]
call fcn.140016f10
nop
movabs rax, 0x9f2a2678b4cd4cb1
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r14
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x210], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400233a0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x200]
call fcn.140016f10
nop
movabs rax, 0xb1383b74ecd846a1
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r15
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x230], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140023410
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x220]
call fcn.140016f10
nop
movabs rdi, 0xec212b6ff5dc50b4
mov qword [rsp + 0x30], rdi
movabs rax, 0x5b444c88b626ccf8
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x250], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023481
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x240]
call fcn.140016f10
nop
mov qword [rsp + 0x30], rdi
movabs rax, 0x5b444cedab3b87b5
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x270], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400234f0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x260]
call fcn.140016f10
nop
movabs rax, 0xb1213170ffc44cb3
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r15
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x290], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140023560
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x280]
call fcn.140016f10
nop
movabs rax, 0xb1213170f9c757a5
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r15
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2b0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400235d0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x2a0]
call fcn.140016f10
nop
movabs rax, 0xfa613072f7cf40a7
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r13
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2d0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140023640
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x2c0]
call fcn.140016f10
nop
movabs rax, 0xb13f2678f9c757a5
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r15
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2f0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400236b0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x2e0]
call fcn.140016f10
nop
movabs rax, 0xfa373b33ebc941bc
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r14
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x300], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x310], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140023720
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x300]
call fcn.140016f10
nop
movabs rax, 0xfa616a2bebc941bc
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r13
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x320], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x330], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140023790
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x320]
call fcn.140016f10
nop
movabs rax, 0x9f2a2678b4c941bc
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r14
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x350], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140023800
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x340]
call fcn.140016f10
nop
movabs rax, 0xe72a7029acc941bc
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444c88d35ea9b3
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x360], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x370], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023871
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x360]
call fcn.140016f10
nop
movabs rax, 0xe63b3773efc5489c
mov qword [rsp + 0x40], rax
movabs rax, 0x29212befa63ccc92
mov qword [rsp + 0x48], rax
movabs rax, 0xdef099f3a67c7b59
mov qword [rsp + 0x50], rax
movabs rdi, 0x16a3c9966ce6e578
mov qword [rsp + 0x58], rdi
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], r14
movabs rbx, 0xdef099f3c3041e77
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x380], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x390], xmm1
lea rax, [rsp + 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023924
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x380]
call fcn.140016f10
nop
movabs rax, 0xed2e366effda4c82
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444cedab3b87bd
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movabs r15, 0x9f4f5e1d9aa825d5
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3b0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400239a0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x3a0]
call fcn.140016f10
nop
movabs r13, 0xb13f3f7eeac550b1
mov qword [rsp + 0x30], r13
movabs rax, 0x5b444c88d33bd1b3
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3d0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023a11
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x3c0]
call fcn.140016f10
nop
movabs rax, 0xf33f2658f1c74a9d
mov qword [rsp + 0x40], rax
movabs rax, 0x3e3c29a6a13bdbb9
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3f0], xmm1
lea rax, [rsp + 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023aa6
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x3e0]
call fcn.140016f10
nop
movabs rax, 0xda1d2a6ff5d8489c
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444cedab3b8795
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x400], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x410], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140023b20
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x400]
call fcn.140016f10
nop
movabs rax, 0xb13c3272f5fc6085
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444c88d33bd1b3
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x420], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x430], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023b91
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x420]
call fcn.140016f10
nop
movabs rax, 0xfa611b4dfeda4a99
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444c88d35eccae
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x440], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x450], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023c02
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x440]
call fcn.140016f10
nop
mov qword [rsp + 0x30], r13
movabs r13, 0x5b444c88d33bd1b3
mov qword [rsp + 0x38], r13
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x460], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x470], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140023c70
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x460]
call fcn.140016f10
nop
movabs rax, 0xfa3f2d73d3db5c86
mov qword [rsp + 0x40], rax
movabs rax, 0x3e3c29a6a131ddb5
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x480], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x490], xmm1
lea rax, [rsp + 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023d05
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x480]
call fcn.140016f10
nop
movabs rax, 0xfe213f42f9c757a5
mov qword [rsp + 0x40], rax
movabs rax, 0x232162fab624d0ba
mov qword [rsp + 0x48], rax
movabs rax, 0xdef099f3c3041e12
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rdi
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x4a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4b0], xmm1
lea rax, [rsp + 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023da4
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x4a0]
call fcn.140016f10
nop
movabs rax, 0xe6233f73dbdb5ca6
mov qword [rsp + 0x30], rax
movabs rax, 0x5b2134edfd2cccac
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x4c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4d0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023e15
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x4c0]
call fcn.140016f10
nop
movabs rax, 0xf627017bfcc14ba6
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444cedab3b87a2
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x4e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4f0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140023e86
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x4e0]
call fcn.140016f10
nop
movabs rax, 0xfa61397ffec64ca2
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444c88d35eccae
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x500], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x510], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140023f00
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x500]
call fcn.140016f10
nop
movabs rax, 0xf02c2672f8cd4abf
mov qword [rsp + 0x40], rax
movabs rax, 0x232162e4bc2cddb8
mov qword [rsp + 0x48], rax
movabs rax, 0xdef099f3c3041e12
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rdi
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x520], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x530], xmm1
lea rax, [rsp + 0x60]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140023fa0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x520]
call fcn.140016f10
nop
movabs rax, 0xfa3c2672f8cd4abf
mov qword [rsp + 0x40], rax
movabs rax, 0x3e3c29a6a13bdfa4
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x540], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x550], xmm1
lea rax, [rsp + 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140024035
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x540]
call fcn.140016f10
nop
movabs rax, 0xb13d3b71fecc4cb3
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r13
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x560], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x570], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400240a0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x560]
call fcn.140016f10
nop
movabs rax, 0xfa616c2eedf753a1
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444c88d35eccae
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x580], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x590], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140024111
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x580]
call fcn.140016f10
nop
movabs rax, 0xfa616a2be2f753a1
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444c88d35eccae
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5b0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140024182
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x5a0]
call fcn.140016f10
nop
movabs rax, 0xb13c3b71e8c94d96
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r13
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5d0], xmm1
lea rax, [rsp + 0x30]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400241f0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x5c0]
call fcn.140016f10
nop
movabs rax, 0xfa3b3274dcdc40bb
mov qword [rsp + 0x40], rax
movabs rax, 0x3e2725fea13bfaa4
mov qword [rsp + 0x48], rax
movabs rax, 0xdef099f3a67c7b59
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rdi
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x5e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5f0], xmm1
lea rax, [rsp + 0x60]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140024290
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x5e0]
call fcn.140016f10
nop
movabs rax, 0xf32e305ccafc719d
mov qword [rsp + 0x40], rax
movabs rax, 0xd2038dba13bd3af
mov qword [rsp + 0x48], rax
movabs rax, 0xdef09996bb613040
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rdi
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x600], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x610], xmm1
lea rax, [rsp + 0x60]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140024330
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x600]
call fcn.140016f10
nop
movabs rax, 0xd73c2d78f9c75785
mov qword [rsp + 0x40], rax
movabs rax, 0x232162fab635cab7
mov qword [rsp + 0x48], rax
movabs rax, 0xdef099f3c3041e12
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rdi
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x620], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x630], xmm1
lea rax, [rsp + 0x60]
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400243d0
mov r8, rsi
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x620]
call fcn.140016f10
nop
mov r14, r12
lea rsi, [rbp + 0x180]
nop dword [rax + rax]
mov rbx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x14002440d
mov rbx, qword [rsi]
lea rdi, [rbp + 0x6a0]
xor eax, eax
mov ecx, 0x130
rep stosb byte [rdi], al
xor edx, edx
lea ecx, [rax + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400253c4
mov dword [rbp + 0x6a0], 0x130
lea rdx, [rbp + 0x6a0]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
test eax, eax
jne 0x14002534c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400253c4
movabs rax, 0xcc6f3b6bf5c54087
mov qword [rbp - 0x80], rax
movabs rax, 0x7b6808c7a32cc8be
mov qword [rbp - 0x78], rax
movabs rax, 0xb2d0fc81ac627b15
mov qword [rbp - 0x70], rax
movabs rax, 0x71cda0fe0f889019
mov qword [rbp - 0x68], rax
movabs rax, 0xfebfa20d17d93f69
mov qword [rbp - 0x60], rax
movabs rax, 0xef6e5e04129640ea
mov qword [rbp - 0x58], rax
movabs rax, 0x7b78984fa1629eaf
mov qword [rbp - 0x50], rax
movabs rax, 0xa14f58bc52b7c65e
mov qword [rbp - 0x48], rax
movups xmm0, xmmword [rbp - 0x80]
movups xmm1, xmmword [rbp - 0x70]
movups xmm2, xmmword [rbp - 0x60]
movups xmm3, xmmword [rbp - 0x50]
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], r14
movabs rbx, 0xdef099f3c3041e77
mov qword [rbp - 0x70], rbx
movabs rdi, 0x16a3c9966ce6e578
mov qword [rbp - 0x68], rdi
movabs rcx, 0xd0cdc76976b65349
mov qword [rbp - 0x60], rcx
movabs rcx, 0x9c0b2c2476f801ca
mov qword [rbp - 0x58], rcx
movabs rcx, 0xe17e16fd510ffdb
mov qword [rbp - 0x50], rcx
movabs rcx, 0xa14f589211e7e62c
mov qword [rbp - 0x48], rcx
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x10], xmm0
xorps xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp], xmm1
xorps xmm2, xmmword [rbp - 0x60]
movdqa xmmword [rbp + 0x10], xmm2
xorps xmm3, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x20], xmm3
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x660]
call fcn.140008b20
mov rdi, rax
mov qword [rbp + 0x5588], rax
movabs rax, 0xeb372a33e9cf4ab9
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r14
movaps xmm0, xmmword [rsp + 0x30]
movabs r15, 0x9f4f5e1d9aa825d5
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x130], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x7d0]
call fcn.14001ec70
nop
cmp qword [rbp + 0x858], 0
je 0x14002465e
movabs rax, 0xbf3d316fe8cd058e
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444c88f373898b
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x7d0]
call fcn.140016cb0
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x140024641
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140016fd0
lea rdx, [0x1400173c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x7d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x7d0], rax
mov rax, qword [rbp + 0x7d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x7cc], edx
lea rcx, [rbp + 0x7d8]
call fcn.14001d920
lea rcx, [rbp + 0x7e0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x878]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rcx, rdi
call fcn.140008ac0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14002532f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002532a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002532a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movabs rax, 0xcb6f3b69ffc44091
mov qword [rbp - 0x80], rax
movabs rax, 0x3e2025c0bd3fddbf
mov qword [rbp - 0x78], rax
movabs rax, 0xbb82f695a6663e5b
mov qword [rbp - 0x70], rax
movabs rax, 0x7fcbaaf819878958
mov qword [rbp - 0x68], rax
movabs rax, 0xb5a9a6061a963427
mov qword [rbp - 0x60], rax
movabs rax, 0xee2b484a37d82fb8
mov qword [rbp - 0x58], rax
movabs rax, 0x7737951db4648cbe
mov qword [rbp - 0x50], rax
movabs rax, 0xa1611bc231959343
mov qword [rbp - 0x48], rax
movups xmm0, xmmword [rbp - 0x80]
movups xmm1, xmmword [rbp - 0x70]
movups xmm2, xmmword [rbp - 0x60]
movups xmm3, xmmword [rbp - 0x50]
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], r14
movabs rbx, 0xdef099f3c3041e77
mov qword [rbp - 0x70], rbx
movabs rdi, 0x16a3c9966ce6e578
mov qword [rbp - 0x68], rdi
movabs rcx, 0xd0cdc76976b65349
mov qword [rbp - 0x60], rcx
movabs rcx, 0x9c0b2c2476f801ca
mov qword [rbp - 0x58], rcx
movabs rcx, 0xe17e16fd510ffdb
mov qword [rbp - 0x50], rcx
movabs rcx, 0xa14f589211e7e62c
mov qword [rbp - 0x48], rcx
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x10], xmm0
xorps xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp], xmm1
xorps xmm2, xmmword [rbp - 0x60]
movdqa xmmword [rbp + 0x10], xmm2
xorps xmm3, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x20], xmm3
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x680]
call fcn.140008b20
mov rdi, rax
mov qword [rbp + 0x5588], rax
movabs rax, 0xeb372a33e9cf4ab9
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r14
movaps xmm0, xmmword [rsp + 0x30]
movabs r15, 0x9f4f5e1d9aa825d5
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x150], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x8e0]
call fcn.14001ec70
nop
cmp qword [rbp + 0x968], 0
je 0x140024900
movabs rax, 0xbf3d316fe8cd058e
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444c88f373898b
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x160], xmm0
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x8e0]
call fcn.140016cb0
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x1400248e3
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140016fd0
lea rdx, [0x1400173c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x8e0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x8e0], rax
mov rax, qword [rbp + 0x8e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x8dc], edx
lea rcx, [rbp + 0x8e8]
call fcn.14001d920
lea rcx, [rbp + 0x8f0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x988]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rcx, rdi
call fcn.140008ac0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14002532f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002532a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002532a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movabs rax, 0xc86f3b69ffc44091
mov qword [rbp - 0x80], rax
movabs rax, 0x30362de0a03bdbbf
mov qword [rbp - 0x78], rax
movabs rax, 0xbb82f695a6663e5b
mov qword [rbp - 0x70], rax
movabs rax, 0x7fcbaaf819878958
mov qword [rbp - 0x68], rax
movabs rax, 0xb5a9a6061a963427
mov qword [rbp - 0x60], rax
movabs rax, 0xee2b484a37d82fb8
mov qword [rbp - 0x58], rax
movabs rax, 0x7737951db4648cbe
mov qword [rbp - 0x50], rax
movabs rax, 0xa1611bc231959343
mov qword [rbp - 0x48], rax
movups xmm0, xmmword [rbp - 0x80]
movups xmm1, xmmword [rbp - 0x70]
movups xmm2, xmmword [rbp - 0x60]
movups xmm3, xmmword [rbp - 0x50]
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], r14
movabs rbx, 0xdef099f3c3041e77
mov qword [rbp - 0x70], rbx
movabs rdi, 0x16a3c9966ce6e578
mov qword [rbp - 0x68], rdi
movabs rcx, 0xd0cdc76976b65349
mov qword [rbp - 0x60], rcx
movabs rcx, 0x9c0b2c2476f801ca
mov qword [rbp - 0x58], rcx
movabs rcx, 0xe17e16fd510ffdb
mov qword [rbp - 0x50], rcx
movabs rcx, 0xa14f589211e7e62c
mov qword [rbp - 0x48], rcx
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x10], xmm0
xorps xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp], xmm1
xorps xmm2, xmmword [rbp - 0x60]
movdqa xmmword [rbp + 0x10], xmm2
xorps xmm3, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x20], xmm3
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x640]
call fcn.140008b20
mov rdi, rax
mov qword [rbp + 0x5588], rax
movabs rax, 0xeb372a33e9cf4ab9
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r14
movaps xmm0, xmmword [rsp + 0x30]
movabs r15, 0x9f4f5e1d9aa825d5
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x170], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x9f0]
call fcn.14001ec70
nop
cmp qword [rbp + 0xa78], 0
je 0x140024ba2
movabs rax, 0xbf3d316fe8cd058e
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444c88f373898b
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0xe0], xmm0
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x9f0]
call fcn.140016cb0
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x140024b85
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.140016fd0
lea rdx, [0x1400173c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x9f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x9f0], rax
mov rax, qword [rbp + 0x9f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x9ec], edx
lea rcx, [rbp + 0x9f8]
call fcn.14001d920
lea rcx, [rbp + 0xa00]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xa98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x140024c31
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140024c2c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140024c85
mov rcx, r8
call fcn.140072cdc
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14002532f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002532a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002532a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movabs rax, 0xd76f3b69ffc44091
mov qword [rbp - 0x10], rax
movabs rax, 0x2e2629ccf30efd82
mov qword [rbp - 8], rax
movabs rax, 0xbb92b9dfb1617910
mov qword [rbp], rax
movabs rax, 0x63c2a5b609948a1e
mov qword [rbp + 8], rax
movabs rax, 0xbceda0071fde3027
mov qword [rbp + 0x10], rax
movabs rax, 0xdd2b0256139c60a5
mov qword [rbp + 0x18], rax
movabs rax, 0x6f63920aa7309bb5
mov qword [rbp + 0x20], rax
movabs rax, 0x813d2dfd68c7925e
mov qword [rbp + 0x28], rax
movabs rax, 0xad02dc6532dbc72d
mov qword [rbp + 0x30], rax
movabs rax, 0xd1936b7021a71c3e
mov qword [rbp + 0x38], rax
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], r14
movabs rbx, 0xdef099f3c3041e77
mov qword [rbp - 0x70], rbx
movabs rdi, 0x16a3c9966ce6e578
mov qword [rbp - 0x68], rdi
movabs rcx, 0xd0cdc76976b65349
mov qword [rbp - 0x60], rcx
movabs rcx, 0x9c0b2c2476f801ca
mov qword [rbp - 0x58], rcx
movabs rcx, 0xe17e16fd510ffdb
mov qword [rbp - 0x50], rcx
movabs rcx, 0xa14f589211e7e62c
mov qword [rbp - 0x48], rcx
movabs rcx, 0xad02dc6532f5847d
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x38], rax
movdqa xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [rbp]
xorps xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
lea rax, [rbp - 0x10]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140024de2
mov r8, rsi
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x60]
call fcn.140016f10
lea rax, [rsp + 0x60]
mov qword [rbp + 0x5588], rax
movabs rax, 0xeb372a33e9cf4ab9
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r14
movaps xmm0, xmmword [rsp + 0x30]
movabs r15, 0x9f4f5e1d9aa825d5
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0xf0], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0xb00]
call fcn.14001ec70
nop
cmp qword [rbp + 0xb88], 0
je 0x140024eee
movabs rax, 0xbf3d316fe8cd058e
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444c88f373898b
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0xb00]
call fcn.140016cb0
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
mov rcx, rax
call fcn.140016fd0
lea rdx, [0x1400173c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0xb00]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xb00], rax
mov rax, qword [rbp + 0xb00]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xafc], edx
lea rcx, [rbp + 0xb08]
call fcn.14001d920
lea rcx, [rbp + 0xb10]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xba8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140024f87
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024f82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024f82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140072cdc
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14002532f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002532a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002532a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movabs rax, 0xcf6f3b69ffc44091
mov qword [rbp - 0x10], rax
movabs rax, 0x13643ffbb63dc6a4
mov qword [rbp - 8], rax
movabs rax, 0xbcd0b581a66f7d16
mov qword [rbp], rax
movabs rax, 0x77cfe9f31e89831d
mov qword [rbp + 8], rax
movabs rax, 0xf0aaa9001ed53d3c
mov qword [rbp + 0x10], rax
movabs rax, 0xbc255e4112996ea6
mov qword [rbp + 0x18], rax
movabs rax, 0x7a64841df574919a
mov qword [rbp + 0x20], rax
movabs rax, 0xd33a37eb3193944d
mov qword [rbp + 0x28], rax
movabs rax, 0xad02dc651cb6d45d
mov qword [rbp + 0x30], rax
movabs rax, 0xd1936b7021a71c3e
mov qword [rbp + 0x38], rax
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], r14
movabs rbx, 0xdef099f3c3041e77
mov qword [rbp - 0x70], rbx
movabs rdi, 0x16a3c9966ce6e578
mov qword [rbp - 0x68], rdi
movabs rcx, 0xd0cdc76976b65349
mov qword [rbp - 0x60], rcx
movabs rcx, 0x9c0b2c2476f801ca
mov qword [rbp - 0x58], rcx
movabs rcx, 0xe17e16fd510ffdb
mov qword [rbp - 0x50], rcx
movabs rcx, 0xa14f589211e7e62c
mov qword [rbp - 0x48], rcx
movabs rcx, 0xad02dc6532f5847d
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x38], rax
movdqa xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [rbp]
xorps xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [rbp + 0x20]
xorps xmm1, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp - 0x10]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140025135
mov r8, rsi
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x40]
call fcn.140016f10
lea rax, [rsp + 0x40]
mov qword [rbp + 0x5588], rax
movabs rax, 0xeb372a33e9cf4ab9
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], r14
movaps xmm0, xmmword [rsp + 0x30]
movabs r15, 0x9f4f5e1d9aa825d5
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x110], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x36]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x6a0]
call fcn.14001ec70
nop
cmp qword [rbp + 0x728], 0
je 0x140025245
movabs rax, 0xbf3d316fe8cd058e
mov qword [rsp + 0x30], rax
movabs rax, 0x5b444c88f373898b
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r14
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x6a0]
call fcn.140016cb0
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, rax
call fcn.140016fd0
lea rdx, [0x1400173c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x6a0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x6a0], rax
mov rax, qword [rbp + 0x6a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x69c], edx
lea rcx, [rbp + 0x6a8]
call fcn.14001d920
lea rcx, [rbp + 0x6b0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x748]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400252de
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400252d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400252d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140072cdc
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14002532f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002532a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002532a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140072cdc
mov al, 1
mov rbx, qword [rsp + 0x5690]
add rsp, 0x5640
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rdx, rbx
lea rcx, [rbp + 0x6cc]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1400253b2
lea rdx, [rbp + 0x6a0]
mov rcx, rdi
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x1400253a7
nop dword [rax]
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rbp + 0x6cc]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1400253b2
lea rdx, [rbp + 0x6a0]
mov rcx, rdi
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x140025380
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400253c4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rbp + 0x6a8], 0
jne 0x1400253fb
inc r12d
inc r14
add rsi, 0x20
cmp r14, 0x26
jl 0x140024400
lea r9, [fcn.140008ac0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx + 6]
lea rcx, [rbp + 0x180]
call fcn.140073178
xor al, al
jmp 0x140025331
movsxd rax, r12d
shl rax, 5
lea rbx, [rbp + 0x180]
add rbx, rax
cmp qword [rbx + 0x18], 0x10
jb 0x140025416
mov rbx, qword [rbx]
xor edx, edx
lea ecx, [rdx + 0xf]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rsi, rax
mov dword [rbp + 0xc10], 0x130
lea rdx, [rbp + 0xc10]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x1400254a8
lea rcx, [rbp + 0xc3c]
mov rdi, rbx
sub rdi, rcx
nop dword [rax]
movzx edx, byte [rcx]
movzx eax, byte [rcx + rdi]
sub edx, eax
jne 0x140025462
inc rcx
test eax, eax
jne 0x140025450
test edx, edx
jne 0x140025495
mov r8d, dword [rbp + 0xc18]
lea ecx, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x140025495
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0xc10]
mov rcx, rsi
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x140025440
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea r9, [fcn.140008ac0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx + 6]
lea rcx, [rbp + 0x180]
call fcn.140073178
jmp 0x14002532f
call fcn.140001980
int3