Function at 0x140016bf0
Capabilities:
Enumerate processes

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
mov qword [rbp - 0x38], rcx
mov eax, dword [0x14006b318]
mov ecx, dword [0x14006b31c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 7]
cmp ecx, 0xa
setl byte [rbp + 6]
mov r14, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15d, 0xf672bbee
mov r13d, 0xf01d398d
mov r12d, 0x724408d4
mov eax, 0xaad9be8a
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2965a0c7
mov ecx, 0x8d841857
nop word cs:[rax + rax]
nop dword [rax]
cmove eax, ecx
cmp dword [0x14006b31c], 0xa
cmovl eax, ecx
cmp eax, 0xe02f6173
jle 0x140016ce0
cmp eax, 0x3ef2d7b1
jg 0x140016d50
cmp eax, 0x557f5b7
jg 0x140016dfc
cmp eax, 0xf672bbed
jg 0x140016f40
cmp eax, 0xee51cc87
jg 0x14001714e
cmp eax, 0xe49cd74b
jg 0x140017503
cmp eax, 0xe02f6174
je 0x140017b8a
cmp eax, 0xe2eef2db
jne 0x140016c7d
mov eax, 0x9c4d32a7
jmp 0x140016c7d
cmp eax, 0xb0e9e76b
jle 0x140016db0
cmp eax, 0xc545f19d
jg 0x140016e51
cmp eax, 0xb9db13dc
jg 0x140016f76
cmp eax, 0xb48573e8
jg 0x14001718d
cmp eax, 0xb2b60d38
jg 0x140017523
cmp eax, 0xb0e9e76c
je 0x140017ba3
cmp eax, 0xb19a2346
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x658761c1
mov ecx, 0xaf88bd08
jmp 0x140016c70
cmp eax, 0x5f3c82bc
jg 0x140016e96
cmp eax, 0x547f90d9
jg 0x140016fb8
cmp eax, 0x4bf75aa7
jg 0x1400171c2
cmp eax, 0x40b138aa
jg 0x140017557
cmp eax, 0x3ef2d7b2
je 0x140017bc1
cmp eax, 0x3f5f0c9c
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5f3c82bd
mov ecx, 0xd025794c
jmp 0x140016c70
cmp eax, 0xa0ad9ce1
jle 0x140016eeb
cmp eax, 0xa7fb6b00
jg 0x140016fee
cmp eax, 0xa5d47163
jg 0x140017201
cmp eax, 0xa57cefbc
jg 0x14001758b
cmp eax, 0xa0ad9ce2
je 0x140017bcb
cmp eax, 0xa4894146
jne 0x140016c7d
mov eax, 0x28850b04
jmp 0x140016c7d
cmp eax, 0x28850b03
jg 0x140017038
cmp eax, 0x1ea54c03
jg 0x140017240
cmp eax, 0x86cd42e
jg 0x1400175ab
cmp eax, 0x557f5b8
je 0x140017bd5
cmp eax, 0x5b442ec
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa4894146
mov ecx, 0x28850b04
jmp 0x140016c70
cmp eax, 0xd1340530
jg 0x140017072
cmp eax, 0xc7a236c9
jg 0x14001727f
cmp eax, 0xc5b3f914
jg 0x1400175cb
cmp eax, 0xc545f19e
je 0x140017be2
cmp eax, 0xc5773be3
jne 0x140016c7d
mov rax, qword [rbp - 8]
mov eax, 0xa57cefbd
jmp 0x140016c7d
cmp eax, 0x6ef35cb2
jg 0x1400170a8
cmp eax, 0x67d948fb
jg 0x1400172aa
cmp eax, 0x611f47da
jg 0x140017611
cmp eax, 0x5f3c82bd
je 0x140017bec
cmp eax, 0x60be3e97
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc1c9db45
mov ecx, 0x9464ceae
jmp 0x140016c70
cmp eax, 0x8ec3aac0
jle 0x140017104
cmp eax, 0x966fc5f1
jg 0x140017305
cmp eax, 0x939ae1c1
jg 0x140017640
cmp eax, 0x8ec3aac1
je 0x140017bf6
cmp eax, 0x925aa030
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3ef2d7b2
mov ecx, 0x5c51d808
jmp 0x140016c70
cmp eax, 0xfede8c74
jg 0x140017344
cmp eax, 0xf90dfcc5
jg 0x140017674
cmp eax, 0xf672bbee
je 0x140017c00
cmp eax, 0xf720de56
jne 0x140016c7d
mov eax, 0x22981974
jmp 0x140016c7d
cmp eax, 0xc1c9db44
jg 0x140017373
cmp eax, 0xbcf4aa36
jg 0x1400176a9
cmp eax, 0xb9db13dd
je 0x140017c0c
cmp eax, 0xba7445e0
jne 0x140016c7d
cmp byte [rbp + 5], 0
mov eax, 0xbdb9f055
mov ecx, 0x74033dd9
cmovne eax, ecx
jmp 0x140016c7d
cmp eax, 0x5871d8a8
jg 0x1400173b2
cmp eax, 0x56096e7b
jg 0x1400176d8
cmp eax, 0x547f90da
je 0x140017c3c
cmp eax, 0x5555742f
jne 0x140016c7d
mov eax, 0xdc95bb8b
jmp 0x140016c7d
cmp eax, 0xaa40efe5
jg 0x1400173dd
cmp eax, 0xa8bcdc7e
jg 0x140017710
cmp eax, 0xa7fb6b01
je 0x140017c5a
cmp eax, 0xa875827f
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf29b9e17
mov ecx, 0x60be3e97
jmp 0x140016c70
cmp eax, 0x315e8fc7
jg 0x14001741d
cmp eax, 0x2c33e540
jg 0x140017744
cmp eax, 0x28850b04
je 0x140017c70
cmp eax, 0x2965a0c7
jne 0x140016c7d
mov rax, qword [rbp - 0x20]
mov eax, 0x8d841857
jmp 0x140016c7d
cmp eax, 0xd8023168
jg 0x140017448
cmp eax, 0xd6fea446
jg 0x140017778
cmp eax, 0xd1340531
je 0x140017c8e
cmp eax, 0xd16b8248
jne 0x140016c7d
mov eax, 0xb967e813
jmp 0x140016c7d
cmp eax, 0x74033dd8
jle 0x140017473
cmp eax, 0x7e02dc65
jg 0x1400177ac
cmp eax, 0x74033dd9
je 0x140017cac
cmp eax, 0x7b9bf8b3
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6ef35cb3
mov ecx, 0xca26311c
cmovne eax, ecx
cmp dword [0x14006b31c], 0xa
mov ecx, 0x6ef35cb3
cmovl eax, ecx
jmp 0x140016c7d
cmp eax, 0x8858a9c6
jle 0x1400174c4
cmp eax, 0x8a49839d
jg 0x1400177ea
cmp eax, 0x8858a9c7
je 0x140017cd4
cmp eax, 0x89617bae
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa5fffe91
mov ecx, 0x7e3e1b6e
jmp 0x140016c70
cmp eax, 0xf01d398c
jg 0x140017822
cmp eax, 0xee51cc88
je 0x140017cf2
cmp eax, 0xef98ada3
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x658761c1
mov ecx, 0xec972f59
jmp 0x140016c70
cmp eax, 0xb5fd0479
jg 0x140017842
cmp eax, 0xb48573e9
je 0x140017d10
cmp eax, 0xb51a47a9
jne 0x140016c7d
mov eax, dword [rbp - 0x24]
cmp eax, 1
sete byte [rbp + 4]
mov eax, 0x5b442ec
jmp 0x140016c7d
cmp eax, 0x4e1a4015
jg 0x1400178a1
cmp eax, 0x4bf75aa8
je 0x140016c49
cmp eax, 0x4ce65a95
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x364ece0
mov ecx, 0x86cd42f
jmp 0x140016c70
cmp eax, 0xa7125c50
jg 0x1400178d5
cmp eax, 0xa5d47164
je 0x140017d1a
cmp eax, 0xa5fffe91
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb48573e9
mov ecx, 0x2d6fd668
jmp 0x140016c70
cmp eax, 0x25323e30
jg 0x14001791b
cmp eax, 0x1ea54c04
je 0x140017d38
cmp eax, 0x22981974
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf720de56
mov ecx, 0xc545f19e
jmp 0x140016c70
cmp eax, 0xcac38fc0
jg 0x140017964
cmp eax, 0xc7a236ca
je 0x140017d57
cmp eax, 0xca26311c
jne 0x140016c7d
mov eax, 0x6ef35cb3
jmp 0x140016c7d
cmp eax, 0x69e3d2be
jg 0x140017998
cmp eax, 0x67d948fc
je 0x140017d79
cmp eax, 0x6823a319
jne 0x140016c7d
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call sub.KERNEL32.dll_Process32FirstW
add rsp, 0x20
cmp eax, 1
sete byte [rbp + 5]
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfe28bafd
mov ecx, 0xba7445e0
jmp 0x140016c70
cmp eax, 0x9b778986
jg 0x1400179cc
cmp eax, 0x966fc5f2
je 0x140017d83
cmp eax, 0x98b75ac3
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd16b8248
mov ecx, 0xb967e813
jmp 0x140016c70
cmp eax, 0x30170aa
jg 0x140017a0c
cmp eax, 0xfede8c75
je 0x140017d8d
cmp eax, 0x2c0fc50
jne 0x140016c7d
mov rax, qword [rbp - 0x18]
mov eax, 0x580c9de3
jmp 0x140016c7d
cmp eax, 0xc3b8308e
jg 0x140017a2c
cmp eax, 0xc1c9db45
je 0x140017dab
cmp eax, 0xc240c35e
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x40b138ab
mov ecx, 0xaa40efe6
jmp 0x140016c70
cmp eax, 0x5ca2a71f
jg 0x140017a6d
cmp eax, 0x5871d8a9
je 0x140017db5
cmp eax, 0x5c51d808
jne 0x140016c7d
mov eax, 0x7e3e1b6e
jmp 0x140016c7d
cmp eax, 0xadece758
jg 0x140017ab3
cmp eax, 0xaa40efe6
je 0x140017df3
cmp eax, 0xaad9be8a
jne 0x140016c7d
movzx ecx, byte [rbp + 7]
cmp byte [rbp + 6], 0
mov eax, 0x30170ab
mov edx, 0x5871d8a9
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x140016c7d
cmp eax, 0x3459d371
jg 0x140017b0d
cmp eax, 0x315e8fc8
je 0x140017e2e
cmp eax, 0x32d88787
jne 0x140016c7d
mov eax, 0x5ca2a720
jmp 0x140016c7d
cmp eax, 0xdc95bb8a
jg 0x140017b2d
cmp eax, 0xd8023169
je 0x140017e5a
cmp eax, 0xdbfdc7a7
jne 0x140016c7d
mov eax, 0x7b9bf8b3
jmp 0x140016c7d
cmp eax, 0x716a5218
jle 0x140017b61
cmp eax, 0x716a5219
je 0x140017e64
cmp eax, 0x724408d4
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x862b9ddc
mov ecx, 0xa8bcdc7f
cmovne eax, ecx
cmp dword [0x14006b31c], 0xa
mov ecx, 0x862b9ddc
cmovl eax, ecx
jmp 0x140016c7d
cmp eax, 0x8198add5
je 0x140017e8c
cmp eax, 0x81fd90db
je 0x140017ec2
cmp eax, 0x862b9ddc
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa5fffe91
mov ecx, 0xdf0c1b97
jmp 0x140016c70
cmp eax, 0xe49cd74c
je 0x140017ecc
cmp eax, 0xec972f59
jne 0x140016c7d
mov eax, 0xa7fb6b01
jmp 0x140016c7d
cmp eax, 0xb2b60d39
je 0x140017ef9
cmp eax, 0xb31ba4c4
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67d948fc
mov ecx, 0xbcf4aa37
jmp 0x140016c70
cmp eax, 0x40b138ab
je 0x140017f03
cmp eax, 0x4ae7334a
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf90dfcc6
mov ecx, 0x2c33e541
jmp 0x140016c70
cmp eax, 0xa57cefbd
je 0x140017f21
cmp eax, 0xa5b18c5e
jne 0x140016c7d
mov eax, 0x4ae7334a
jmp 0x140016c7d
cmp eax, 0x86cd42f
je 0x140017f4b
cmp eax, 0x15825344
jne 0x140016c7d
mov eax, 0x5e9f4647
jmp 0x140016c7d
cmp eax, 0xc5b3f915
je 0x140017f7b
cmp eax, 0xc5eed399
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4ce65a95
mov ecx, 0x69e3d2bf
cmovne eax, ecx
cmp dword [0x14006b31c], 0xa
mov ecx, 0x4ce65a95
cmovl eax, ecx
jmp 0x140016c7d
cmp eax, 0x611f47db
je 0x140017f85
cmp eax, 0x658761c1
jne 0x140016c7d
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call r14
add rsp, 0x20
mov eax, 0xaf88bd08
jmp 0x140016c7d
cmp eax, 0x939ae1c2
je 0x140017fa7
cmp eax, 0x9464ceae
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa920e185
mov ecx, 0x8198add5
jmp 0x140016c70
cmp eax, 0xf90dfcc6
je 0x140017fbd
cmp eax, 0xfe28bafd
jne 0x140016c7d
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call sub.KERNEL32.dll_Process32FirstW
add rsp, 0x20
mov eax, 0x6823a319
jmp 0x140016c7d
cmp eax, 0xbcf4aa37
je 0x140017fcb
cmp eax, 0xbdb9f055
jne 0x140016c7d
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call r14
add rsp, 0x20
mov eax, 0xa5d47164
jmp 0x140016c7d
cmp eax, 0x56096e7c
je 0x140017fe9
cmp eax, 0x580c9de3
jne 0x140016c7d
mov rax, qword [rbp - 0x18]
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2c0fc50
mov ecx, 0xa5b18c5e
jmp 0x140016c70
cmp eax, 0xa8bcdc7f
je 0x140017ff3
cmp eax, 0xa920e185
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1ea54c04
mov ecx, 0x25eccab7
jmp 0x140016c70
cmp eax, 0x2c33e541
je 0x140017ffd
cmp eax, 0x2d6fd668
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb48573e9
mov ecx, 0x547f90da
jmp 0x140016c70
cmp eax, 0xd6fea447
je 0x140018036
cmp eax, 0xd71083f1
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb9db13dd
mov ecx, 0xdc95bb8b
jmp 0x140016c70
cmp eax, 0x7e02dc66
je 0x140018044
cmp eax, 0x7e3e1b6e
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa8bcdc7f
cmove eax, r12d
cmp dword [0x14006b31c], 0xa
cmovl eax, r12d
jmp 0x140016c7d
cmp eax, 0x8a49839e
je 0x14001804e
cmp eax, 0x8d841857
jne 0x140016c7d
mov rax, qword [rbp - 0x20]
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2965a0c7
mov ecx, 0x966fc5f2
jmp 0x140016c70
cmp eax, 0xf01d398d
je 0x140018058
cmp eax, 0xf29b9e17
jne 0x140016c7d
mov eax, 0xa875827f
jmp 0x140016c7d
cmp eax, 0xb5fd047a
je 0x140018076
cmp eax, 0xb967e813
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14006b31c], 0xa
setl cl
mov edx, ecx
and dl, al
xor cl, al
mov ebx, edx
xor bl, cl
test cl, cl
mov eax, 0xd16b8248
mov esi, 0x3459d372
cmovne eax, esi
test dl, dl
mov ecx, 0xd16b8248
cmove eax, ecx
test bl, bl
cmovne eax, esi
jmp 0x140016c7d
cmp eax, 0x4e1a4016
je 0x140018094
cmp eax, 0x51854d20
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7e02dc66
mov ecx, 0xadece759
jmp 0x140016c70
cmp eax, 0xa7125c51
je 0x1400180b2
cmp eax, 0xa74029ab
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfede8c75
mov ecx, 0x3cd542f8
cmovne eax, ecx
cmp dword [0x14006b31c], 0xa
mov ecx, 0xfede8c75
cmovl eax, ecx
jmp 0x140016c7d
cmp eax, 0x25323e31
je 0x1400180d0
cmp eax, 0x25eccab7
jne 0x140016c7d
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call sub.KERNEL32.dll_Process32NextW
add rsp, 0x20
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1ea54c04
mov ecx, 0x8ec3aac1
jmp 0x140016c70
cmp eax, 0xcac38fc1
je 0x140018100
cmp eax, 0xd025794c
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x15825344
mov ecx, 0xee51cc88
jmp 0x140016c70
cmp eax, 0x69e3d2bf
je 0x14001811e
cmp eax, 0x6c40558a
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd6fea447
mov ecx, 0x611f47db
jmp 0x140016c70
cmp eax, 0x9b778987
je 0x14001814e
cmp eax, 0x9c4d32a7
jne 0x140016c7d
mov rcx, qword [rbp - 0x40]
sub rsp, 0x20
mov rdx, qword [rbp - 0x38]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add rsp, 0x20
test eax, eax
mov eax, 0x74033dd9
mov ecx, 0xb19a2346
cmove eax, ecx
jmp 0x140016c7d
cmp eax, 0x30170ab
je 0x14001816c
cmp eax, 0x364ece0
jne 0x140016c7d
mov eax, 0x86cd42f
jmp 0x140016c7d
cmp eax, 0xc3b8308f
je 0x140018176
cmp eax, 0xc43e8253
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
cmp dword [0x14006b31c], 0xa
mov eax, 0x6c40558a
mov edx, 0x7b9bf8b3
cmovl eax, edx
test cl, 1
cmove eax, edx
jmp 0x140016c7d
cmp eax, 0x5ca2a720
je 0x140018180
cmp eax, 0x5e9f4647
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3f5f0c9c
mov ecx, 0x5f3c82bd
cmovne eax, ecx
cmp dword [0x14006b31c], 0xa
mov ecx, 0x3f5f0c9c
cmovl eax, ecx
jmp 0x140016c7d
cmp eax, 0xadece759
je 0x1400181b0
cmp eax, 0xaf88bd08
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14006b31c], 0xa
setl cl
mov edx, ecx
and dl, al
xor cl, al
mov eax, edx
xor al, cl
mov ebx, 0xe02f6174
mov esi, 0xe49cd74c
cmovne ebx, esi
test cl, cl
mov eax, ebx
cmovne eax, esi
test dl, dl
cmove eax, ebx
jmp 0x140016c7d
cmp eax, 0x3459d372
je 0x1400181ce
cmp eax, 0x3cd542f8
jne 0x140016c7d
mov eax, 0xfede8c75
jmp 0x140016c7d
cmp eax, 0xdc95bb8b
je 0x1400181ec
cmp eax, 0xdf0c1b97
jne 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb0e9e76c
mov ecx, 0x98b75ac3
jmp 0x140016c70
cmp eax, 0x6ef35cb3
jne 0x140018212
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xca26311c
mov ecx, 0xd1340531
jmp 0x140016c70
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call r14
add rsp, 0x20
mov eax, 0xe49cd74c
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd8023169
mov ecx, 0xcac38fc1
jmp 0x140016c70
mov eax, 0x925aa030
jmp 0x140016c7d
mov eax, 0x25323e31
jmp 0x140016c7d
mov eax, 0x70a57dbf
mov edi, dword [rbp - 0x28]
jmp 0x140016c7d
mov eax, 0xaa40efe6
jmp 0x140016c7d
mov eax, 0x3f5f0c9c
jmp 0x140016c7d
mov eax, 0x8198add5
jmp 0x140016c7d
mov eax, 0x70a57dbf
xor edi, edi
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc7a236ca
mov ecx, 0x4bf75aa8
cmovne eax, ecx
cmp dword [0x14006b31c], 0xa
mov ecx, 0xc7a236ca
cmovl eax, ecx
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x15825344
mov ecx, 0x5e9f4647
jmp 0x140016c70
mov rax, qword [rbp - 8]
add rax, 8
mov qword [rbp - 0x18], rax
mov eax, 0xc240c35e
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa4894146
mov ecx, 0xa74029ab
jmp 0x140016c70
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x69e3d2bf
mov ecx, 0x4ae7334a
jmp 0x140016c70
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc1c9db45
cmove eax, r13d
cmp dword [0x14006b31c], 0xa
cmovl eax, r13d
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x32d88787
mov ecx, 0x5ca2a720
jmp 0x140016c70
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3ef2d7b2
mov ecx, 0x925aa030
jmp 0x140016c70
mov eax, 0x2d6fd668
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc3b8308f
mov ecx, 0x716a5219
jmp 0x140016c70
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call sub.KERNEL32.dll_Process32NextW
add rsp, 0x20
mov eax, 0x25eccab7
jmp 0x140016c7d
mov rax, qword [rbp - 0x20]
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4bf75aa8
mov ecx, 0x5555742f
jmp 0x140016c70
mov eax, 0xb31ba4c4
jmp 0x140016c7d
mov eax, 0xc7a236ca
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3cd542f8
mov ecx, 0x89617bae
jmp 0x140016c70
mov eax, 0xf01d398d
jmp 0x140016c7d
mov eax, 0x240
call fcn.140066cf0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 8], rax
mov rax, qword [rbp - 8]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x30]
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x30170ab
mov ecx, 0xb2b60d39
jmp 0x140016c70
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
mov eax, 0x40b138ab
mov ebx, 0xc43e8253
cmove eax, ebx
cmp dword [0x14006b31c], 0xa
mov edx, 0x40b138ab
cmovge eax, edx
setge dl
xor dl, cl
cmove eax, ebx
jmp 0x140016c7d
mov rax, qword [rbp - 8]
mov dword [rax], 0x238
sub rsp, 0x20
mov ecx, 2
xor edx, edx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
add rsp, 0x20
mov qword [rbp - 0x10], rax
mov eax, 0x56096e7c
jmp 0x140016c7d
mov eax, 0xcac38fc1
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc3b8308f
cmove eax, r15d
cmp dword [0x14006b31c], 0xa
cmovl eax, r15d
jmp 0x140016c7d
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call sub.KERNEL32.dll_Process32NextW
add rsp, 0x20
mov dword [rbp - 0x24], eax
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa920e185
mov ecx, 0x81fd90db
jmp 0x140016c70
mov eax, 0xb51a47a9
jmp 0x140016c7d
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call r14
add rsp, 0x20
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe02f6174
mov ecx, 0xef98ada3
jmp 0x140016c70
mov eax, 0x315e8fc8
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf720de56
mov ecx, 0x22981974
jmp 0x140016c70
mov rax, qword [rbp - 8]
add rax, 0x2c
mov qword [rbp - 0x20], rax
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc5773be3
mov ecx, 0xb5fd047a
jmp 0x140016c70
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4e1a4016
mov ecx, 0x364ece0
cmovne eax, ecx
cmp dword [0x14006b31c], 0xa
mov ecx, 0x4e1a4016
cmovl eax, ecx
jmp 0x140016c7d
mov eax, 0x8858a9c7
jmp 0x140016c7d
mov rax, qword [rbp - 0x18]
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd6fea447
mov ecx, 0xdbfdc7a7
jmp 0x140016c70
cmp byte [rbp + 4], 0
mov eax, 0xbdb9f055
mov ecx, 0x9b778987
cmovne eax, ecx
jmp 0x140016c7d
mov rax, qword [rbp - 0x18]
mov eax, 0x2c33e541
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc5773be3
mov ecx, 0xa57cefbd
jmp 0x140016c70
mov eax, 0xa7125c51
jmp 0x140016c7d
mov eax, 0x724408d4
jmp 0x140016c7d
mov rax, qword [rbp - 0x18]
mov eax, dword [rax]
mov dword [rbp - 0x28], eax
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc5eed399
mov ecx, 0xf90dfcc6
cmovne eax, ecx
cmp dword [0x14006b31c], 0xa
mov ecx, 0xc5eed399
cmovl eax, ecx
jmp 0x140016c7d
mov rax, qword [rbp - 0x18]
mov eax, 0x611f47db
jmp 0x140016c7d
mov eax, 0xadece759
jmp 0x140016c7d
mov eax, 0x98b75ac3
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf29b9e17
mov ecx, 0xa875827f
jmp 0x140016c70
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa0ad9ce2
mov ecx, 0x25323e31
jmp 0x140016c70
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6c40558a
mov ecx, 0x51854d20
jmp 0x140016c70
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfe28bafd
mov ecx, 0x6823a319
jmp 0x140016c70
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc5b3f915
mov ecx, 0xa0ad9ce2
cmovne eax, ecx
cmp dword [0x14006b31c], 0xa
mov ecx, 0xc5b3f915
cmovl eax, ecx
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd8023169
mov ecx, 0x8a49839e
jmp 0x140016c70
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x580c9de3
mov ecx, 0x2c0fc50
cmovne eax, ecx
cmp dword [0x14006b31c], 0xa
mov ecx, 0x580c9de3
cmovl eax, ecx
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67d948fc
mov ecx, 0xb31ba4c4
jmp 0x140016c70
mov eax, 0x5871d8a9
jmp 0x140016c7d
mov eax, 0x716a5219
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd71083f1
mov ecx, 0x32d88787
cmovne eax, ecx
cmp dword [0x14006b31c], 0xa
mov ecx, 0xd71083f1
cmovl eax, ecx
jmp 0x140016c7d
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7e02dc66
mov ecx, 0x557f5b8
jmp 0x140016c70
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb0e9e76c
mov ecx, 0x939ae1c2
jmp 0x140016c70
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x40], rax
mov eax, dword [0x14006b318]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb9db13dd
mov ecx, 0xe2eef2db
jmp 0x140016c70
cmp eax, 0x70a57dbf
jne 0x140016c7d
mov rax, qword [rbp - 0x30]
mov eax, edi
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret