Function at 0x180002080
Capabilities:
Enumerate processes
Enumerate threads
Get system information on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x210
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rax, qword [0x180045028]
xor rax, rsp
mov qword [rbp + 0xe0], rax
mov r12, rdx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x50], rdx
lea rcx, [0x18003dfb0]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800020e8
lea rcx, [0x18003dfb0]
call fcn.180001120
lea rcx, [0x18003dfb0]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002105
lea rcx, [0x18003dfb0]
call fcn.180001120
lea rcx, str.Ich_bin_die_Auferstehung_und_das_Leben._Wer_an_mich_glaubt__wird_leben__auch_wenn_er_stirbt._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002122
lea rcx, str.Ich_bin_die_Auferstehung_und_das_Leben._Wer_an_mich_glaubt__wird_leben__auch_wenn_er_stirbt._n
call fcn.180001120
xor r14d, r14d
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], r14b
lea rcx, str.Sum_of__d_and__d_is__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002162
lea edx, [r14 + 5]
lea r9d, [r14 + 8]
lea r8d, [r14 + 3]
lea rcx, str.Sum_of__d_and__d_is__d_n
call fcn.180001120
lea rcx, str.Eu_sou_o_caminho__a_verdade_e_a_vida._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000217f
lea rcx, str.Eu_sou_o_caminho__a_verdade_e_a_vida._n
call fcn.180001120
lea rcx, [0x18003e030]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000219c
lea rcx, [0x18003e030]
call fcn.180001120
mov r8, r12
cmp qword [r12 + 0x18], 0x10
jb 0x1800021ab
mov r8, qword [r12]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r15, 0xffffffffffffffff
mov r9d, r15d
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edi, eax
xor edx, edx
lea ecx, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, r15
jne 0x1800021f2
lea rcx, str.Error_creating_thread_snapshot
call fcn.180013b6c
jmp 0x18000227e
mov dword [rsp + 0x58], 0x1c
lea rdx, [rsp + 0x58]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Thread32First]
test eax, eax
jne 0x180002221
lea rcx, str.Error_getting_first_thread
call fcn.180013b6c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.Thread_ID:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002242
mov edx, dword [rsp + 0x60]
lea rcx, str.Thread_ID:__lu_n
call fcn.180001120
lea rcx, str.Owner_Process_ID:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002263
mov edx, dword [rsp + 0x64]
lea rcx, str.Owner_Process_ID:__lu_n
call fcn.180001120
lea rdx, [rsp + 0x58]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Thread32Next]
test eax, eax
jne 0x180002221
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, r15
jne 0x1800022a2
lea rcx, str.Error_creating_process_snapshot
call fcn.180013b6c
jmp 0x18000234b
mov dword [rbp - 0x50], 0x130
lea rdx, [rbp - 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
jne 0x1800022d0
lea rcx, str.Error_getting_first_process
call fcn.180013b6c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, str.Process_ID:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800022f0
mov edx, dword [rbp - 0x48]
lea rcx, str.Process_ID:__lu_n
call fcn.180001120
lea rcx, str.Parent_Process_ID:__lu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002310
mov edx, dword [rbp - 0x30]
lea rcx, str.Parent_Process_ID:__lu_n
call fcn.180001120
lea rcx, str.Process_Name:__s_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002331
lea rdx, [rbp - 0x24]
lea rcx, str.Process_Name:__s_n
call fcn.180001120
lea rdx, [rbp - 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1800022d0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.Dihargai_orang_orang_berdosa__karena_mereka_akan_mendapatkan_berkah._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002368
lea rcx, str.Dihargai_orang_orang_berdosa__karena_mereka_akan_mendapatkan_berkah._n
call fcn.180001120
lea edx, [rdi + 1]
mov eax, 2
mul rdx
cmovo rax, r15
mov rcx, rax
call fcn.18000eb44
mov rsi, rax
mov qword [rsp + 0x40], rax
lea rcx, str.A_paz_esteja_com_vocs._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800023a4
lea rcx, str.A_paz_esteja_com_vocs._n
call fcn.180001120
lea rcx, [0x18003e030]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800023c1
lea rcx, [0x18003e030]
call fcn.180001120
lea rcx, str.__._______._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800023de
lea rcx, str.__._______._n
call fcn.180001120
lea rcx, str.Ma_io_vi_dico:_Amate_i_vostri_nemici_e_pregate_per_quelli_che_vi_perseguitano._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800023fb
lea rcx, str.Ma_io_vi_dico:_Amate_i_vostri_nemici_e_pregate_per_quelli_che_vi_perseguitano._n
call fcn.180001120
lea rcx, str.Dihargai_orang_orang_berdosa__karena_mereka_akan_mendapatkan_berkah._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002418
lea rcx, str.Dihargai_orang_orang_berdosa__karena_mereka_akan_mendapatkan_berkah._n
call fcn.180001120
lea rcx, str.Unsigned_short_integer:__hu_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000243a
mov edx, 0xffff
lea rcx, str.Unsigned_short_integer:__hu_n
call fcn.180001120
mov r8, r12
cmp qword [r12 + 0x18], 0x10
jb 0x180002449
mov r8, qword [r12]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rsi
mov r9d, r15d
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebx, eax
lea rcx, [0x18003e6e0]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002481
lea rcx, [0x18003e6e0]
call fcn.180001120
lea rcx, str.Perch_se_perdonate_agli_uomini_le_loro_colpe__anche_il_Padre_vostro_celeste_perdoner_a_voi._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000249e
lea rcx, str.Perch_se_perdonate_agli_uomini_le_loro_colpe__anche_il_Padre_vostro_celeste_perdoner_a_voi._n
call fcn.180001120
lea rcx, [0x18003e2c0]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800024bb
lea rcx, [0x18003e2c0]
call fcn.180001120
mov word [rsi + rbx*2], r14w
lea rcx, [0x18003e358]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800024dd
lea rcx, [0x18003e358]
call fcn.180001120
lea rcx, str.Y_he_aqu__yo_estoy_con_vosotros_todos_los_das__hasta_el_fin_del_mundo._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800024fa
lea rcx, str.Y_he_aqu__yo_estoy_con_vosotros_todos_los_das__hasta_el_fin_del_mundo._n
call fcn.180001120
xorps xmm0, xmm0
movsd xmm1, qword [0x18003f170]
ucomisd xmm0, xmm1
ja 0x180002511
sqrtpd xmm7, xmm1
jmp 0x18000251c
movaps xmm0, xmm1
call fcn.18002d2cc
movaps xmm7, xmm0
movsd xmm6, qword [0x18003f158]
addsd xmm7, xmm6
mulsd xmm7, qword [0x18003f148]
lea rcx, str.The_golden_ratio_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002555
movaps xmm1, xmm7
movq rdx, xmm7
lea rcx, str.The_golden_ratio_is:__lf_n
call fcn.180001120
call qword [sym.imp.KERNEL32.dll_GetACP]
mov ecx, eax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, r15d
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r13d, eax
lea rcx, str.No_es_lo_que_entra_en_la_boca_lo_que_contamina_al_hombre__sino_lo_que_sale_de_la_boca__esto_contamina_al_hombre._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000259f
lea rcx, str.No_es_lo_que_entra_en_la_boca_lo_que_contamina_al_hombre__sino_lo_que_sale_de_la_boca__esto_contamina_al_hombre._n
call fcn.180001120
lea rcx, str.I_am_the_light_of_the_world._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800025bc
lea rcx, str.I_am_the_light_of_the_world._n
call fcn.180001120
lea rcx, str.The_volume_of_the_cylinder_with_radius__lf_and_height__lf_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800025f6
movsd xmm3, qword [0x18003f160]
movq r9, xmm3
movaps xmm2, xmm6
movq r8, xmm6
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, str.The_volume_of_the_cylinder_with_radius__lf_and_height__lf_is:__lf_n
call fcn.180001120
lea ecx, [r13 + 1]
call fcn.18000eb44
mov r14, rax
mov edi, 1
nop word [rax + rax]
mov ebx, 1
mov esi, edi
nop word [rax + rax]
lea rcx, str._d___d___d
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002645
mov r9d, esi
mov r8d, edi
mov edx, ebx
lea rcx, str._d___d___d
call fcn.180001120
inc ebx
add esi, edi
cmp ebx, edi
jle 0x180002620
lea rcx, [0x18003e6e0]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000266a
lea rcx, [0x18003e6e0]
call fcn.180001120
inc edi
cmp edi, 9
jle 0x180002610
lea rcx, [0x18003dc50]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000268e
lea rcx, [0x18003dc50]
call fcn.180001120
xor esi, esi
mov ebx, esi
lea rcx, str._d:__c_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800026b4
mov r8d, ebx
mov edx, ebx
lea rcx, str._d:__c_n
call fcn.180001120
inc ebx
cmp ebx, 0x80
jl 0x180002692
call qword [sym.imp.KERNEL32.dll_GetACP]
mov ecx, eax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r14
mov r9d, r15d
mov rdi, qword [rsp + 0x40]
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ebx, eax
movaps xmm0, xmm6
call fcn.18002c960
movaps xmm6, xmm0
lea rcx, str.The_value_of_the_natural_logarithm_e_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000271f
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, str.The_value_of_the_natural_logarithm_e_is:__lf_n
call fcn.180001120
lea rcx, str._c_is_a_lowercase_letter._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002741
mov edx, 0x65
lea rcx, str._c_is_a_lowercase_letter._n
call fcn.180001120
lea rcx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
call fcn.18000a9a0
movzx ecx, word [rsp + 0x58]
test ecx, ecx
je 0x1800027d1
sub ecx, 5
je 0x1800027b7
sub ecx, 1
je 0x18000279d
cmp ecx, 3
je 0x180002783
lea rcx, str.Unknown_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800027ee
lea rcx, str.Unknown_n
jmp 0x1800027e9
lea rcx, str.x64_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800027ee
lea rcx, str.x64_n
jmp 0x1800027e9
lea rcx, str.IA64_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800027ee
lea rcx, str.IA64_n
jmp 0x1800027e9
lea rcx, str.ARM_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800027ee
lea rcx, str.ARM_n
jmp 0x1800027e9
lea rcx, str.x86_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800027ee
lea rcx, str.x86_n
call fcn.180001120
lea rcx, str.Number_of_Processors:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x18000280f
mov edx, dword [rsp + 0x78]
lea rcx, str.Number_of_Processors:__d_n
call fcn.180001120
lea rcx, str.Processor_Type:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002830
mov edx, dword [rsp + 0x7c]
lea rcx, str.Processor_Type:__d_n
call fcn.180001120
lea rcx, str.Processor_Level:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002851
movzx edx, word [rbp - 0x7c]
lea rcx, str.Processor_Level:__d_n
call fcn.180001120
lea rcx, str.Processor_Revision:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002872
movzx edx, word [rbp - 0x7a]
lea rcx, str.Processor_Revision:__d_n
call fcn.180001120
mov byte [rbx + r14], sil
lea rcx, str.Bonjour_le_monde__n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002893
lea rcx, str.Bonjour_le_monde__n
call fcn.180001120
lea rcx, [0x18003e2c0]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800028b0
lea rcx, [0x18003e2c0]
call fcn.180001120
lea rcx, str.__._______._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800028cd
lea rcx, str.__._______._n
call fcn.180001120
lea rcx, str.La_paz_est_con_ustedes._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800028ea
lea rcx, str.La_paz_est_con_ustedes._n
call fcn.180001120
lea rcx, str.___________n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002907
lea rcx, str.___________n
call fcn.180001120
lea rcx, str.__________________n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002924
lea rcx, str.__________________n
call fcn.180001120
inc r15
cmp byte [r14 + r15], sil
jne 0x180002924
mov r8, r15
mov rdx, r14
lea rcx, [rbp - 0x78]
call fcn.18000a770
lea rcx, str.Ma_io_vi_dico:_Amate_i_vostri_nemici_e_pregate_per_quelli_che_vi_perseguitano._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002959
lea rcx, str.Ma_io_vi_dico:_Amate_i_vostri_nemici_e_pregate_per_quelli_che_vi_perseguitano._n
call fcn.180001120
lea rcx, [0x18003de30]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002976
lea rcx, [0x18003de30]
call fcn.180001120
lea rcx, str.Em_verdade__em_verdade_vos_digo_que_quem_no_nascer_de_novo_no_pode_ver_o_Reino_de_Deus._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002993
lea rcx, str.Em_verdade__em_verdade_vos_digo_que_quem_no_nascer_de_novo_no_pode_ver_o_Reino_de_Deus._n
call fcn.180001120
mov rcx, r14
call fcn.18000eb00
lea rcx, [0x18003e6e0]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800029b8
lea rcx, [0x18003e6e0]
call fcn.180001120
lea rcx, [0x18003ea40]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x1800029d5
lea rcx, [0x18003ea40]
call fcn.180001120
movsd xmm0, qword [0x18003f150]
call fcn.18002cd60
movaps xmm6, xmm0
lea rcx, str.Sine_Value:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002a0a
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, str.Sine_Value:__lf_n
call fcn.180001120
mov rcx, rdi
call fcn.18000eb00
lea rcx, str.Difference_of__d_and__d_is:__d_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002a3d
mov edx, 0x1e
mov r9d, 0xf
mov r8d, r9d
lea rcx, str.Difference_of__d_and__d_is:__d_n
call fcn.180001120
lea rcx, str.A_paz_eu_deixo_com_vocs__a_minha_paz_eu_dou_a_vocs._n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002a5a
lea rcx, str.A_paz_eu_deixo_com_vocs__a_minha_paz_eu_dou_a_vocs._n
call fcn.180001120
lea rcx, str.The_golden_ratio_is:__lf_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jns 0x180002a7f
movaps xmm1, xmm7
movq rdx, xmm7
lea rcx, str.The_golden_ratio_is:__lf_n
call fcn.180001120
mov rbx, qword [rsp + 0x48]
movups xmm0, xmmword [rbp - 0x78]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x68]
movups xmmword [rbx + 0x10], xmm1
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x180002acb
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x180002ac6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180002b15
mov rcx, r8
call fcn.18000eb00
mov qword [r12 + 0x10], rsi
mov qword [r12 + 0x18], 0xf
mov byte [r12], 0
mov rax, rbx
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.18000eae0
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800142d0
int3