Function at 0x140005210
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2b0
mov rax, qword [0x140041040]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
mov r15, rcx
mov qword [rsp + 0x50], rcx
xor r13d, r13d
mov ecx, 2
xor edx, edx
mov dword [rsp + 0x28], r13d
mov r12d, r13d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
mov qword [rsp + 0x38], rax
call fcn.140004ae0
movsx ebp, al
call fcn.140002d60
movsx r14d, al
mov r9d, r14d
imul r9d, ebp
call fcn.140004b10
movsx r10d, al
lea edx, [r9 + r9*2]
movsx eax, byte [0x140041239]
mov ebx, 5
movsx ecx, byte [0x140041238]
add eax, r10d
lea eax, [rax + rdx*2]
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005555
movsx eax, byte [0x14004123a]
cmp rsi, 0xffffffffffffffff
lea esi, [r9 + r10]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
mov eax, r13d
sete al
xor edx, edx
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm1, xmm0
movsd qword [rsp + 0x20], xmm1
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, esi
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005367
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*2]
add r8d, r8d
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
je 0x140005367
mov r11d, ebx
jmp 0x1400053db
movsx r8d, byte [0x140041239]
lea ecx, [r9 + r10]
lea eax, [rcx + r9*2]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400053d6
movsx r8d, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
xorps xmm0, xmm0
imul eax, r9d, 7
add eax, r10d
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si r11d, xmm0
jmp 0x1400053db
mov r11d, dword [rsp + 0x20]
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
imul edi, r9d, 7
add edi, r10d
add eax, edi
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, r11d
test r8d, r8d
je 0x140005550
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, r10d
xorps xmm2, xmm2
lea eax, [rax + r9*8]
div ecx
xor edx, edx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm2, rax
movsx eax, byte [0x14004123a]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x20], xmm1
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, esi
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400054cf
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*2]
add r8d, r8d
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
jne 0x140005549
call fcn.140004b10
movsx r8d, al
xor edx, edx
mov ecx, ebp
imul ecx, r14d
lea eax, [rcx + rcx*2]
add r8d, eax
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005540
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, edi
div ecx
xorps xmm0, xmm0
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si eax, xmm0
jmp 0x140005544
mov eax, dword [rsp + 0x20]
cmp r13d, eax
jge 0x140005550
xor eax, eax
jmp 0x140006471
mov rsi, qword [rsp + 0x38]
xor edx, edx
lea rcx, [rsp + 0x64]
mov r8d, 0x234
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x60], 0x238
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edi, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add edi, ecx
movsx ecx, byte [0x140041238]
add eax, edi
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400062d9
lea rdx, [rsp + 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
mov rcx, r13
xorps xmm2, xmm2
cmp eax, 1
movsx eax, byte [0x14004123a]
sete cl
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtsi2sd xmm2, rcx
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x20], xmm1
call fcn.140004ae0
movsx esi, al
call fcn.140002d60
movsx ecx, al
imul esi, ecx
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add esi, ecx
movsx ecx, byte [0x140041238]
add eax, esi
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005688
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*2]
add r8d, r8d
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
je 0x140005688
mov r9d, ebx
jmp 0x14000570c
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, edi
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005707
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
imul r8d, edx, 7
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
xorps xmm0, xmm0
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si r9d, xmm0
jmp 0x14000570c
mov r9d, dword [rsp + 0x20]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r10d, [rcx + rdx*4]
movsx ecx, byte [0x140041238]
add eax, r10d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, r9d
test r8d, r8d
je 0x1400062d9
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, r10d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400062d9
lea rdx, [rsp + 0x8c]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, r13
xorps xmm2, xmm2
test eax, eax
movsx eax, byte [0x14004123a]
sete cl
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtsi2sd xmm2, rcx
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x20], xmm1
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, esi
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005839
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*2]
add r8d, r8d
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
je 0x140005839
mov r9d, ebx
jmp 0x1400058e0
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea r8d, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400058db
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
imul r8d, edx, 7
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
xorps xmm0, xmm0
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si r9d, xmm0
jmp 0x1400058e0
mov r9d, dword [rsp + 0x20]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea r8d, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, r9d
test r8d, r8d
je 0x140005937
mov r12d, dword [rsp + 0x68]
jmp 0x1400062d9
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*8]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400062d9
call fcn.140004af0
movsx r14d, al
mov r10d, r14d
call fcn.140004b20
movsx r12d, al
call fcn.140004b00
movsx ecx, byte [0x140044398]
xorps xmm2, xmm2
movsx r13d, al
movsx eax, byte [0x14004123c]
imul ecx, r14d
lea edx, [rcx + rcx*2]
sub edx, r12d
add edx, r13d
add eax, edx
cvtsi2sd xmm2, rax
movsx eax, byte [0x14004123a]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x20], xmm1
call fcn.140004ae0
movsx r8d, al
call fcn.140002d60
movsx ecx, al
imul r8d, ecx
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005a5e
movsx ecx, byte [0x140044398]
imul ecx, r10d
lea edx, [rcx + rcx*2]
movsx ecx, byte [0x14004123c]
add edx, edx
sub edx, r12d
add edx, r13d
add ecx, edx
je 0x140005a5e
mov r9d, ebx
jmp 0x140005b05
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea r8d, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005b00
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
imul r8d, edx, 7
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
xorps xmm0, xmm0
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si r9d, xmm0
jmp 0x140005b05
mov r9d, dword [rsp + 0x20]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*8]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
add ecx, edx
add eax, ecx
mov dword [rsp + 0x40], ecx
movsx ecx, byte [0x140041238]
xor edx, edx
div ecx
mov r8d, eax
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx esi, al
call fcn.140004b10
movsx ebp, al
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, r9d
test r8d, r8d
je 0x140005fb8
movsx eax, byte [0x14004123a]
mov r8d, edx
imul r8d, esi
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, qword [0x140037d58]
movsd qword [rsp + 0x20], xmm1
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, r8d
add eax, ebp
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005bf1
movsx ecx, byte [0x140044398]
imul ecx, r10d
lea edx, [rcx + rcx*2]
movsx ecx, byte [0x14004123c]
add edx, edx
sub edx, r12d
add edx, r13d
add ecx, edx
jne 0x140005c52
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea r8d, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005c52
movzx eax, byte [0x140041239]
movzx eax, byte [0x140041238]
movzx eax, byte [0x14004123b]
movsd xmm0, qword [rsp + 0x20]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400062d1
call fcn.140004ae0
movsx r8d, al
call fcn.140002d60
movsx ecx, al
imul r8d, ecx
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
xorps xmm2, xmm2
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm2, rax
movsx eax, byte [0x14004123a]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x20], xmm1
call fcn.140004ae0
movsx r8d, al
call fcn.140002d60
movsx ecx, al
imul r8d, ecx
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005d99
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*2]
add r8d, r8d
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
jne 0x140005e3e
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea r8d, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005e3a
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
imul r8d, edx, 7
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
xorps xmm0, xmm0
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si ebx, xmm0
jmp 0x140005e3e
mov ebx, dword [rsp + 0x20]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
imul r8d, edx, 7
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, ebx
test r8d, r8d
je 0x1400062d1
movsx eax, byte [0x14004123a]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, qword [0x140037d60]
movsd qword [rsp + 0x20], xmm1
call fcn.140004ae0
movsx r8d, al
call fcn.140002d60
movsx ecx, al
imul r8d, ecx
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005f46
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*2]
add r8d, r8d
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
jne 0x1400062d1
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea r8d, [rdx + rdx*2]
call fcn.140004b10
mov r12d, dword [rsp + 0x28]
xor edx, edx
movsx ecx, al
xor r13d, r13d
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400062d9
movzx eax, byte [0x140041239]
movzx eax, byte [0x140041238]
movzx eax, byte [0x14004123b]
movsd xmm0, qword [rsp + 0x20]
jmp 0x1400062d9
mov ecx, edx
imul ecx, esi
lea eax, [rcx + rcx*4]
add eax, ebp
mov dword [rsp + 0x20], eax
call fcn.140002d60
movsx edx, al
call fcn.140004ae0
movsx ecx, al
imul edx, ecx
call fcn.140004b10
movsx eax, al
mov r15d, r14d
add eax, edx
mov dword [rsp + 0x2c], eax
call fcn.140002d60
movsx edx, al
call fcn.140004ae0
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.140004b10
movsx eax, al
add eax, edx
mov dword [rsp + 0x30], eax
call fcn.140002d60
movsx edi, al
call fcn.140004ae0
movsx ecx, al
imul edi, ecx
call fcn.140004b10
mov esi, dword [rsp + 0x20]
mov ebp, dword [rsp + 0x20]
movsx r14d, al
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
xor ecx, ecx
xorps xmm2, xmm2
cmp eax, 1
movsx eax, byte [0x14004123a]
sete cl
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtsi2sd xmm2, rcx
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x48], xmm1
movsx eax, byte [0x140041239]
add eax, dword [rsp + 0x2c]
movsx ecx, byte [0x140041238]
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400060da
movsx ecx, byte [0x140044398]
imul ecx, r15d
lea edx, [rcx + rcx*2]
movsx ecx, byte [0x14004123c]
add edx, edx
sub edx, r12d
add edx, r13d
add ecx, edx
je 0x1400060da
mov esi, ebx
jmp 0x14000613d
movsx eax, byte [0x140041239]
xor edx, edx
add eax, dword [rsp + 0x30]
movsx ecx, byte [0x140041238]
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x14000613d
movsx r8d, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
xorps xmm0, xmm0
imul eax, edi, 7
add eax, r14d
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x48]
cvttsd2si esi, xmm0
movsx eax, byte [0x140041239]
xor edx, edx
add eax, dword [rsp + 0x40]
movsx ecx, byte [0x140041238]
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, esi
test r8d, r8d
je 0x1400062d1
movsx eax, byte [0x140041239]
xor edx, edx
add eax, dword [rsp + 0x20]
movsx ecx, byte [0x140041238]
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140006040
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0x8c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
xor ecx, ecx
xorps xmm2, xmm2
test eax, eax
movsx eax, byte [0x14004123a]
sete cl
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtsi2sd xmm2, rcx
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x48], xmm1
movsx eax, byte [0x140041239]
add eax, dword [rsp + 0x2c]
movsx ecx, byte [0x140041238]
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140006232
movsx ecx, byte [0x140044398]
imul ecx, r15d
lea edx, [rcx + rcx*2]
movsx ecx, byte [0x14004123c]
add edx, edx
sub edx, r12d
add edx, r13d
add ecx, edx
je 0x140006232
mov ebp, ebx
jmp 0x140006295
movsx eax, byte [0x140041239]
xor edx, edx
add eax, dword [rsp + 0x30]
movsx ecx, byte [0x140041238]
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140006295
movsx r8d, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
xorps xmm0, xmm0
imul eax, edi, 7
add eax, r14d
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x48]
cvttsd2si ebp, xmm0
movsx eax, byte [0x140041239]
lea edx, [rdi + rdi*4]
movsx ecx, byte [0x140041238]
add eax, r14d
lea eax, [rax + rdx*2]
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, ebp
test r8d, r8d
je 0x140006040
mov r12d, dword [rsp + 0x68]
jmp 0x1400062d6
mov r12d, dword [rsp + 0x28]
xor r13d, r13d
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
imul r9d, edx, 7
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r9d, ecx
movsx ecx, byte [0x140041238]
add eax, r9d
div ecx
xorps xmm2, xmm2
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm2, rax
movsx eax, byte [0x14004123a]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x50], xmm1
call fcn.140004ae0
movsx r8d, al
call fcn.140002d60
movsx ecx, al
imul r8d, ecx
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400063e6
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*2]
add r8d, r8d
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
jne 0x14000646e
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea r8d, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140006465
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, r9d
div ecx
xorps xmm0, xmm0
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si eax, xmm0
jmp 0x140006469
mov eax, dword [rsp + 0x20]
cmp r13d, eax
jge 0x140006471
mov eax, r12d
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.1400196e0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret