Function at 0x1400338d0
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6f0]
sub rsp, 0x7f0
mov rax, qword [0x14038d940]
xor rax, rsp
mov qword [rbp + 0x6e0], rax
mov r13d, r8d
mov r12, rdx
mov r15, rcx
xor esi, esi
mov byte [rsp + 0x40], sil
mov r14d, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x398], xmm0
mov qword [rbp + 0x3a8], rsi
mov qword [rbp + 0x3b0], 0xf
mov byte [rbp + 0x398], 0
movups xmmword [rbp + 0x3d8], xmm0
mov qword [rbp + 0x3e8], rsi
mov qword [rbp + 0x3f0], 0xf
mov byte [rbp + 0x3d8], 0
movups xmmword [rbp + 0x378], xmm0
mov qword [rbp + 0x388], rsi
mov qword [rbp + 0x390], 0xf
mov byte [rbp + 0x378], 0
xor dil, dil
lea r9, [rbp + 0x378]
lea r8, [rbp + 0x3d8]
lea rdx, [rbp + 0x398]
mov ecx, r14d
call fcn.14002b950
test al, al
je 0x140033a85
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x1400339c0
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x1400339c0
mov rax, rsi
jmp 0x1400339d0
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], dil
jne 0x1400339c7
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rcx
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x260], xmm0
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0xa8]
call fcn.14008d7e0
nop
lea rdx, [rbp + 0xa8]
lea rcx, [rbp - 0x70]
call fcn.140042d40
nop
lea rcx, [rbp - 0x70]
call fcn.1400433b0
mov edx, 2
lea rcx, [rbp - 0x70]
call fcn.1400430b0
test al, al
je 0x140033a43
mov rdx, r12
lea rcx, [rbp - 0x70]
call fcn.140049bd0
test rax, rax
jle 0x140033a43
mov dil, 1
jmp 0x140033a46
xor dil, dil
lea rcx, [rbp - 0x70]
call fcn.140044720
nop
lea rcx, [rbp - 0x70]
call fcn.140042e20
nop
mov rcx, qword [rbp + 0xa8]
test rcx, rcx
je 0x140033a85
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033a85
mov rcx, qword [rbp + 0xa8]
call fcn.1402275a0
mov edx, 0x6f
lea rcx, [rbp + 0x270]
call fcn.1400111e0
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x140033aa8
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140033aba
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f690
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140033adb
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140033ad0
jmp 0x140033ade
mov rax, rsi
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x1b0], xmm0
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0xc0]
call fcn.14008d7e0
nop
mov r8d, esi
test dil, dil
setne r8b
mov dword [rsp + 0x20], esi
mov r9d, r14d
lea rdx, [rbp + 0xc0]
mov rcx, r15
call fcn.1400329c0
nop
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x140033b53
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033b53
mov rcx, qword [rbp + 0xc0]
call fcn.1402275a0
nop
mov rcx, qword [rbp + 0x270]
test rcx, rcx
je 0x140033b7e
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033b7e
mov rcx, qword [rbp + 0x270]
call fcn.1402275a0
test dil, dil
jne 0x140033d40
mov edx, 0xe3
lea rcx, [rbp + 0x288]
call fcn.1400111e0
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x140033baa
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140033bbc
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f690
mov rdx, qword [rbx + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f8], xmm0
mov qword [rbp + 0x408], rsi
mov qword [rbp + 0x410], rsi
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140033be0
lea rcx, [rbp + 0x3f8]
call fcn.140006bb0
nop
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x140033c19
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x140033c19
mov rax, rsi
jmp 0x140033c29
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140033c20
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rcx
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x240], xmm0
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0xd8]
call fcn.14008d7e0
nop
lea rdx, [rbp + 0xd8]
lea rcx, [rsp + 0x60]
call fcn.1400aab30
nop
mov rcx, qword [rbp + 0xd8]
test rcx, rcx
je 0x140033c8e
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033c8e
mov rcx, qword [rbp + 0xd8]
call fcn.1402275a0
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x60]
call fcn.1400aaf00
nop
mov rcx, rax
call fcn.1400a94e0
nop
lea rcx, [rbp - 0x60]
call fcn.1400a6650
nop
lea rcx, [rsp + 0x60]
call fcn.1400aad90
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x410]
cmp rdx, 0xf
jbe 0x140033d08
inc rdx
mov rcx, qword [rbp + 0x3f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033d02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034de4
call fcn.1402200d0
nop
mov rcx, qword [rbp + 0x288]
test rcx, rcx
je 0x140034b9d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034b9d
mov rcx, qword [rbp + 0x288]
call fcn.1402275a0
jmp 0x140034b9d
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x140033d6d
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x140033d6d
mov rax, rsi
jmp 0x140033d7d
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140033d74
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rcx
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0x1c0], xmm0
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0xf0]
call fcn.14008d7e0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rsi
lea rdx, [rbp + 0xf0]
lea rcx, [rsp + 0x68]
call fcn.140042d40
nop
lea rcx, [rsp + 0x68]
call fcn.140042ff0
test al, al
je 0x140033eb9
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400430b0
test al, al
je 0x140033eb9
lea rdx, [rbp + 0x2a0]
lea rcx, [rsp + 0x68]
call fcn.140048690
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rax]
mov qword [rsp + 0x48], rcx
mov qword [rax], rdx
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x50], rcx
mov qword [rax + 8], rdx
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x58], rcx
mov qword [rax + 0x10], rdx
mov rcx, qword [rbp + 0x2a0]
test rcx, rcx
je 0x140033e5e
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033e5e
mov rcx, qword [rbp + 0x2a0]
call fcn.1402275a0
lea rcx, [rsp + 0x68]
call fcn.140044720
cmp qword [rsp + 0x58], 0
setg bl
lea rcx, [rsp + 0x68]
call fcn.140042e20
test bl, bl
je 0x140033ec4
lea rdx, [r15 + 0x60]
lea rcx, [rsp + 0x48]
call fcn.14002b710
movzx edi, al
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x140033eee
mov ecx, 0xffffffff
lock xadd dword [rdx], ecx
cmp ecx, 1
setne cl
test cl, cl
jne 0x140033eee
mov rcx, qword [rsp + 0x48]
call fcn.1402275a0
jmp 0x140033eee
lea rcx, [rsp + 0x68]
call fcn.140042e20
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140033eeb
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033eeb
mov rcx, qword [rsp + 0x48]
call fcn.1402275a0
xor dil, dil
mov rcx, qword [rbp + 0xf0]
test rcx, rcx
je 0x140033f19
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033f19
mov rcx, qword [rbp + 0xf0]
call fcn.1402275a0
mov edx, 0x70
lea rcx, [rbp + 0x2b8]
call fcn.1400111e0
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x140033f3c
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140033f4e
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f690
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140033f6b
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140033f60
jmp 0x140033f6e
mov rax, rsi
mov qword [rbp], rax
mov qword [rbp + 8], rcx
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x1d0], xmm0
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x108]
call fcn.14008d7e0
nop
movzx r8d, dil
mov dword [rsp + 0x20], esi
mov r9d, r14d
lea rdx, [rbp + 0x108]
mov rcx, r15
call fcn.1400329c0
nop
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x140033fdd
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033fdd
mov rcx, qword [rbp + 0x108]
call fcn.1402275a0
nop
mov rcx, qword [rbp + 0x2b8]
test rcx, rcx
je 0x140034008
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034008
mov rcx, qword [rbp + 0x2b8]
call fcn.1402275a0
test dil, dil
jne 0x1400341d0
mov edx, 0xe4
lea rcx, [rbp + 0x2d0]
call fcn.1400111e0
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x140034034
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140034046
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f690
mov rdx, qword [rbx + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x418], xmm0
mov qword [rbp + 0x428], rsi
mov qword [rbp + 0x430], rsi
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140034070
lea rcx, [rbp + 0x418]
call fcn.140006bb0
nop
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x1400340a9
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x1400340a9
mov rax, rsi
jmp 0x1400340b9
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1400340b0
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rcx
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x1e0], xmm0
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x90]
call fcn.14008d7e0
nop
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x78]
call fcn.1400aab30
nop
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x14003411e
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x14003411e
mov rcx, qword [rbp + 0x90]
call fcn.1402275a0
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x78]
call fcn.1400aaf00
nop
mov rcx, rax
call fcn.1400a94e0
nop
lea rcx, [rbp - 0x58]
call fcn.1400a6650
nop
lea rcx, [rsp + 0x78]
call fcn.1400aad90
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x430]
cmp rdx, 0xf
jbe 0x140034198
inc rdx
mov rcx, qword [rbp + 0x418]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034192
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034dea
call fcn.1402200d0
nop
mov rcx, qword [rbp + 0x2d0]
test rcx, rcx
je 0x140034b9d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034b9d
mov rcx, qword [rbp + 0x2d0]
call fcn.1402275a0
jmp 0x140034b9d
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
cmova rcx, qword [rbp + 0x398]
mov dword [rsp + 0x28], 0x80
mov edx, 0xa0000000
call fcn.140025ba0
mov rdi, rax
test rax, rax
je 0x140034209
mov rcx, rax
call fcn.140024e10
mov edx, 0x71
lea rcx, [rbp + 0x2e8]
call fcn.1400111e0
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x14003422c
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x14003423e
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f690
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14003425b
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140034250
jmp 0x14003425e
mov rax, rsi
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rcx
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x1f0], xmm0
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x120]
call fcn.14008d7e0
nop
mov r8d, esi
test rdi, rdi
setne r8b
mov dword [rsp + 0x20], esi
mov r9d, r14d
lea rdx, [rbp + 0x120]
mov rcx, r15
call fcn.1400329c0
nop
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x1400342d3
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x1400342d3
mov rcx, qword [rbp + 0x120]
call fcn.1402275a0
nop
mov rcx, qword [rbp + 0x2e8]
test rcx, rcx
je 0x1400342fe
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x1400342fe
mov rcx, qword [rbp + 0x2e8]
call fcn.1402275a0
test rdi, rdi
jne 0x1400344bd
mov edx, 0xe5
lea rcx, [rbp + 0x300]
call fcn.1400111e0
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x14003432a
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x14003433c
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f690
mov rdx, qword [rbx + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x438], xmm0
mov qword [rbp + 0x448], rsi
mov qword [rbp + 0x450], rsi
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140034360
lea rcx, [rbp + 0x438]
call fcn.140006bb0
nop
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x140034399
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x140034399
mov rax, rsi
jmp 0x1400343a9
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1400343a0
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rcx
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x210], xmm0
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x138]
call fcn.14008d7e0
nop
lea rdx, [rbp + 0x138]
lea rcx, [rbp - 0x80]
call fcn.1400aab30
nop
mov rcx, qword [rbp + 0x138]
test rcx, rcx
je 0x14003440d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x14003440d
mov rcx, qword [rbp + 0x138]
call fcn.1402275a0
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x80]
call fcn.1400aaf00
nop
mov rcx, rax
call fcn.1400a94e0
nop
lea rcx, [rbp - 0x50]
call fcn.1400a6650
nop
lea rcx, [rbp - 0x80]
call fcn.1400aad90
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x450]
cmp rdx, 0xf
jbe 0x140034485
inc rdx
mov rcx, qword [rbp + 0x438]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003447f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034df0
call fcn.1402200d0
nop
mov rcx, qword [rbp + 0x300]
test rcx, rcx
je 0x140034b9d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034b9d
mov rcx, qword [rbp + 0x300]
call fcn.1402275a0
jmp 0x140034b9d
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x1400344df
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x1400344df
mov rax, rsi
jmp 0x1400344ef
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1400344e6
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rcx
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x220], xmm0
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x150]
call fcn.14008d7e0
nop
mov edx, r13d
lea rcx, [rbp + 0x150]
call fcn.140034e10
mov rbx, rax
mov qword [rbp - 0x48], rax
mov rcx, qword [rbp + 0x150]
test rcx, rcx
je 0x140034558
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034558
mov rcx, qword [rbp + 0x150]
call fcn.1402275a0
mov edx, 0x72
lea rcx, [rbp + 0x318]
call fcn.1400111e0
mov rdi, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x14003457b
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x14003458d
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rdi
call fcn.14003f690
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400345ab
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400345a0
jmp 0x1400345ae
mov rax, rsi
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rcx
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x230], xmm0
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x168]
call fcn.14008d7e0
nop
mov eax, dword [rbp - 0x44]
mov dword [rsp + 0x20], eax
mov r9d, r14d
mov r8d, ebx
lea rdx, [rbp + 0x168]
mov rcx, r15
call fcn.1400329c0
nop
mov rcx, qword [rbp + 0x168]
test rcx, rcx
je 0x14003461f
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x14003461f
mov rcx, qword [rbp + 0x168]
call fcn.1402275a0
nop
mov rcx, qword [rbp + 0x318]
test rcx, rcx
je 0x14003464a
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x14003464a
mov rcx, qword [rbp + 0x318]
call fcn.1402275a0
test ebx, ebx
jne 0x14003480d
mov edx, 0xe6
lea rcx, [rbp + 0x330]
call fcn.1400111e0
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x140034675
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140034687
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f690
mov rdx, qword [rbx + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x458], xmm0
mov qword [rbp + 0x468], rsi
mov qword [rbp + 0x470], rsi
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400346b0
lea rcx, [rbp + 0x458]
call fcn.140006bb0
nop
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x1400346e9
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x1400346e9
mov rax, rsi
jmp 0x1400346f9
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1400346f0
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rcx
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x200], xmm0
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x180]
call fcn.14008d7e0
nop
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x78]
call fcn.1400aab30
nop
mov rcx, qword [rbp + 0x180]
test rcx, rcx
je 0x14003475d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x14003475d
mov rcx, qword [rbp + 0x180]
call fcn.1402275a0
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x78]
call fcn.1400aaf00
nop
mov rcx, rax
call fcn.1400a94e0
nop
lea rcx, [rbp - 0x40]
call fcn.1400a6650
nop
lea rcx, [rbp - 0x78]
call fcn.1400aad90
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x470]
cmp rdx, 0xf
jbe 0x1400347d5
inc rdx
mov rcx, qword [rbp + 0x458]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400347cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034df6
call fcn.1402200d0
nop
mov rcx, qword [rbp + 0x330]
test rcx, rcx
je 0x140034b9d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034b9d
mov rcx, qword [rbp + 0x330]
call fcn.1402275a0
jmp 0x140034b9d
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [rbp + 0x388]
lea r8, [rbp + 0x378]
cmp qword [rbp + 0x390], 0xf
cmova r8, qword [rbp + 0x378]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, edi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b8], xmm0
mov qword [rbp + 0x3c8], rsi
mov qword [rbp + 0x3d0], rsi
mov r8, rbx
xor edx, edx
lea rcx, [rbp + 0x3b8]
call fcn.140035260
lea rcx, [rbp + 0x3b8]
cmp qword [rbp + 0x3d0], 7
cmova rcx, qword [rbp + 0x3b8]
lea r8, [rbp + 0x378]
cmp qword [rbp + 0x390], 0xf
cmova r8, qword [rbp + 0x378]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, edi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop
nop dword [rax]
nop word [rax + rax]
xor dil, dil
mov dword [rbp + 0x4a0], 0x238
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14003495e
lea rdx, [rbp + 0x4a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x140034951
nop word [rax + rax]
lea rcx, [rbp + 0x3b8]
cmp qword [rbp + 0x3d0], 7
cmova rcx, qword [rbp + 0x3b8]
lea rdx, [rbp + 0x4cc]
call fcn.14022d8c8
test eax, eax
je 0x14003494e
lea rdx, [rbp + 0x4a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
je 0x140034910
jmp 0x140034951
mov dil, 1
mov rcx, rbx
call fcn.140024e10
test dil, dil
jne 0x14003497b
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
add esi, 0x3e8
cmp esi, 0x4e20
jl 0x1400348d0
mov edx, 0x73
lea rcx, [rbp + 0x348]
call fcn.1400111e0
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x14003499e
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x1400349b0
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f690
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400349cd
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1400349c0
xor esi, esi
jmp 0x1400349d1
xor esi, esi
mov eax, esi
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rcx
movaps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x250], xmm0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x198]
call fcn.14008d7e0
nop
mov r8d, esi
test dil, dil
setne r8b
mov dword [rsp + 0x20], esi
mov r9d, r14d
lea rdx, [rbp + 0x198]
mov rcx, r15
call fcn.1400329c0
nop
mov rcx, qword [rbp + 0x198]
test rcx, rcx
je 0x140034a46
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034a46
mov rcx, qword [rbp + 0x198]
call fcn.1402275a0
nop
mov rcx, qword [rbp + 0x348]
test rcx, rcx
je 0x140034a71
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034a71
mov rcx, qword [rbp + 0x348]
call fcn.1402275a0
test dil, dil
jne 0x140034c8c
mov edx, 0xe7
lea rcx, [rbp + 0x360]
call fcn.1400111e0
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x140034a9d
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140034aaf
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f690
mov rdx, qword [rbx + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x478], xmm0
mov qword [rbp + 0x488], rsi
mov qword [rbp + 0x490], rsi
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140034ad2
lea rcx, [rbp + 0x478]
call fcn.140006bb0
nop
lea rdx, [rbp + 0x398]
call fcn.1400337f0
nop
mov rdx, qword [rbp + 0x490]
cmp rdx, 0xf
jbe 0x140034b38
inc rdx
mov rcx, qword [rbp + 0x478]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034b32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034dfc
call fcn.1402200d0
nop
mov rcx, qword [rbp + 0x360]
test rcx, rcx
je 0x140034b64
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034b64
mov rcx, qword [rbp + 0x360]
call fcn.1402275a0
nop
mov r8, qword [rbp + 0x3d0]
cmp r8, 7
jbe 0x140034b84
mov rdx, qword [rbp + 0x3b8]
lea rcx, [rbp + 0x3b8]
call fcn.140003d70
mov qword [rbp + 0x3c8], rsi
mov qword [rbp + 0x3d0], 7
mov word [rbp + 0x3b8], si
mov rdx, qword [rbp + 0x390]
cmp rdx, 0xf
jbe 0x140034bde
mov rcx, qword [rbp + 0x378]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034bd9
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034e02
call fcn.1402200d0
mov qword [rbp + 0x388], rsi
mov qword [rbp + 0x390], 0xf
mov byte [rbp + 0x378], 0
mov rdx, qword [rbp + 0x3f0]
cmp rdx, 0xf
jbe 0x140034c39
mov rcx, qword [rbp + 0x3d8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034c33
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034e08
call fcn.1402200d0
nop
mov rdx, qword [rbp + 0x3b0]
cmp rdx, 0xf
jbe 0x140034c7a
mov rcx, qword [rbp + 0x398]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034c75
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034dde
call fcn.1402200d0
inc r14d
cmp r14d, 3
jl 0x140033913
jmp 0x140034da3
mov byte [rsp + 0x40], 1
mov r8, qword [rbp + 0x3d0]
cmp r8, 7
jbe 0x140034cb1
mov rdx, qword [rbp + 0x3b8]
lea rcx, [rbp + 0x3b8]
call fcn.140003d70
mov qword [rbp + 0x3c8], rsi
mov qword [rbp + 0x3d0], 7
mov word [rbp + 0x3b8], si
mov rdx, qword [rbp + 0x390]
cmp rdx, 0xf
jbe 0x140034d0b
inc rdx
mov rcx, qword [rbp + 0x378]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034d06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034e02
call fcn.1402200d0
mov qword [rbp + 0x388], rsi
mov qword [rbp + 0x390], 0xf
mov byte [rbp + 0x378], 0
mov rdx, qword [rbp + 0x3f0]
cmp rdx, 0xf
jbe 0x140034d66
inc rdx
mov rcx, qword [rbp + 0x3d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034d60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034e08
call fcn.1402200d0
nop
mov rdx, qword [rbp + 0x3b0]
cmp rdx, 0xf
jbe 0x140034da3
inc rdx
mov rcx, qword [rbp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034d9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034dde
call fcn.1402200d0
lea rdx, [r15 + 0x80]
call fcn.140026470
movzx eax, byte [rsp + 0x40]
mov rcx, qword [rbp + 0x6e0]
xor rcx, rsp
call fcn.1402200b0
mov rbx, qword [rsp + 0x848]
add rsp, 0x7f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14022d354
nop
call fcn.14022d354
nop
call fcn.14022d354
nop
call fcn.14022d354
nop
call fcn.14022d354
nop
call fcn.14022d354
nop
call fcn.14022d354
nop
call fcn.14022d354
int3