Function at 0x140032570
Capabilities:
Enumerate processes
Execute command
Terminate process
Terminate process by name

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r14
sub rsp, 0x4e0
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
mov edx, 2
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
xor r12d, r12d
lea rcx, str..IoControl
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov dword [rsp + 0x28], r12d
mov edx, 0xc0000000
mov r8d, 3
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1401c0880], rax
movabs rcx, 0xe70216aa9ee65d0d
mov qword [rsp + 0xa8], rcx
movabs r14, 0x25ffbda18f9eb78c
movabs rax, 0x6a6b0e83e583ade6
mov qword [rsp + 0x168], rcx
mov qword [rsp + 0x130], rax
movabs rsi, 0x5587f03261742265
movabs rax, 0xf2426e9447f6f3a7
mov qword [rsp + 0x120], r14
mov qword [rsp + 0x138], rax
xor edx, edx
movabs rax, 0x899ce1fdd6eeac40
mov qword [rsp + 0x128], rsi
mov qword [rsp + 0x140], rax
mov ecx, 2
movabs rax, 0x71f95caecd793ce9
mov qword [rsp + 0x148], rax
movabs rax, 0x1b4e219f9cff4fca
mov qword [rsp + 0x150], rax
movabs rax, 0x99d9f4000669b63b
mov qword [rsp + 0x158], rax
movabs rax, 0x2f433699f500cf34
mov qword [rsp + 0x160], rax
movabs rax, 0x258bbdd38ff1b7ca
mov qword [rsp + 0x60], rax
movabs rax, 0x55e2f046611d220b
mov qword [rsp + 0x68], rax
movabs rax, 0x6a0e0eeae5efada5
vmovdqu xmm0, xmmword [rsp + 0x60]
vpxor xmm0, xmm0, xmmword [rsp + 0x120]
mov qword [rsp + 0x70], rax
movabs rax, 0xf2156eb94782f3c9
mov qword [rsp + 0x78], rax
movabs rax, 0x89a8e1cbd680ac29
vmovdqu xmm1, xmmword [rsp + 0x70]
vpxor xmm1, xmm1, xmmword [rsp + 0x130]
mov qword [rsp + 0x80], rax
movabs rax, 0x71905cc6cd2a3cc4
mov qword [rsp + 0x88], rax
movabs rax, 0x1b2021f69c8f4fba
vmovdqu xmm2, xmmword [rsp + 0x80]
mov qword [rsp + 0x90], rax
movabs rax, 0x99a1f4650647b65c
mov qword [rsp + 0x98], rax
movabs rax, 0x2f433699f500cf51
vmovdqu xmm3, xmmword [rsp + 0x90]
vmovdqu xmmword [rsp + 0x60], xmm0
vpxor xmm0, xmm2, xmmword [rsp + 0x140]
mov qword [rsp + 0xa0], rax
vmovdqu xmm4, xmmword [rsp + 0xa0]
vmovdqu xmmword [rsp + 0x70], xmm1
vpxor xmm1, xmm3, xmmword [rsp + 0x150]
vmovdqu xmmword [rsp + 0x80], xmm0
vpxor xmm0, xmm4, xmmword [rsp + 0x160]
vmovdqu xmmword [rsp + 0xa0], xmm0
vmovdqu xmmword [rsp + 0x90], xmm1
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov ebx, r12d
cmp rax, 0xffffffffffffffff
je 0x14003285d
xor edx, edx
lea rcx, [rsp + 0x204]
mov r8d, 0x234
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x200]
mov dword [rsp + 0x200], 0x238
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140032854
lea rdx, [rsp + 0x22c]
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14003280d
mov ebx, dword [rsp + 0x208]
jmp 0x140032854
lea rdx, [rsp + 0x200]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x140032854
lea rdx, [rsp + 0x22c]
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
lea rdx, [rsp + 0x200]
mov rcx, rdi
test eax, eax
cmove ebx, dword [rsp + 0x208]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140032822
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.process_id___
mov dword [0x1401c0888], ebx
mov ebx, dword [0x1401c0a74]
call fcn.1400345f0
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x1400347b0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [0x1401c0a74], r12d
jne 0x1400328f8
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x50]
movabs rax, 0x25ffbda18feddbef
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x50], rax
vmovups xmm0, xmmword [rsp + 0x50]
mov qword [rsp + 0x198], rsi
vpxor xmm0, xmm0, xmmword [rsp + 0x190]
vmovdqu xmmword [rsp + 0x50], xmm0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [0x1401c0888]
lea r8, [rsp + 0x50]
mov rcx, qword [0x1401c0880]
mov r9d, 0x10
mov qword [rsp + 0x4d8], r13
mov edx, 0x2201c8
mov qword [rsp + 0x4d0], r15
vmovaps xmmword [rsp + 0x4c0], xmm6
vmovaps xmmword [rsp + 0x4b0], xmm7
vmovaps xmmword [rsp + 0x4a0], xmm8
vmovaps xmmword [rsp + 0x490], xmm9
vmovaps xmmword [rsp + 0x480], xmm10
vmovaps xmmword [rsp + 0x470], xmm11
mov qword [rsp + 0x38], r12
vmovaps xmmword [rsp + 0x460], xmm12
mov dword [rsp + 0x50], eax
lea rax, [rsp + 0x518]
mov qword [rsp + 0x30], r12
vmovaps xmmword [rsp + 0x450], xmm13
mov dword [rsp + 0x28], r12d
vmovaps xmmword [rsp + 0x440], xmm14
mov qword [rsp + 0x518], r12
mov dword [rsp + 0x54], r12d
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rsp + 0x518]
lea r8, [rsp + 0x50]
mov rcx, qword [0x1401c0880]
mov r9d, 0x10
mov qword [0x1401c0898], rax
mov edx, 0x2201cc
mov eax, dword [0x1401c0888]
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x50], eax
lea rax, [rsp + 0x518]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x518], r12
mov dword [rsp + 0x54], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdx, qword [rsp + 0x518]
mov rbx, r12
mov rcx, qword [0x1401c0898]
mov edi, 0x19
mov qword [0x1401c0890], rdx
lea rax, [rcx + 0x250]
mov qword [rsp + 0x38], r12
mov rcx, qword [0x1401c0880]
lea r8, [rsp + 0x60]
add rax, rbx
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rax
mov r9d, 0x28
mov eax, dword [0x1401c0888]
mov edx, 0x2201d4
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x518]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x518], r12d
mov dword [rsp + 0x74], r12d
mov qword [rsp + 0x80], 4
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [0x1401c0898]
add rbx, 0x1000
cmp dword [rsp + 0x518], 0x6f41c00
jne 0x140032acb
lea rax, [rbx + rcx]
mov qword [0x1401c08a0], rax
sub rdi, 1
je 0x140032add
mov rdx, qword [0x1401c0890]
jmp 0x140032a30
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.image_base___
call fcn.1400345f0
mov rdx, qword [0x1401c0898]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x1400347b0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.dtb___
call fcn.1400345f0
mov rdx, qword [0x1401c0890]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x1400347b0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
vmovdqu xmm13, xmmword [0x14011adc0]
vmovdqu xmm12, xmmword [0x14011ad90]
vmovdqu xmm11, xmmword [0x14011af20]
vmovdqu xmm10, xmmword [0x14011ae80]
vmovdqu xmm8, xmmword [0x14011ae30]
vmovdqu xmm9, xmmword [0x14011aea0]
movabs r13, 0x6db6db6db6db6db7
vxorps xmm14, xmm14, xmm14
vxorpd xmm7, xmm7, xmm7
mov rdi, qword [rsp + 0x510]
nop
mov rax, qword [0x1401c0890]
lea r8, [rsp + 0x60]
mov rcx, qword [0x1401c08a0]
mov r9d, 0x28
mov qword [rsp + 0x60], rax
add rcx, 0x11ecd148
mov eax, dword [0x1401c0888]
mov edx, 0x2201d4
mov qword [rsp + 0x38], r12
mov r15, r12
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x518]
vpxor xmm0, xmm0, xmm0
mov qword [rsp + 0x68], rcx
mov rcx, qword [0x1401c0880]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x78], rax
vmovdqu xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x520], r12
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x518], r12
mov dword [rsp + 0x74], r12d
mov qword [rsp + 0x80], 8
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [rsp + 0x518]
mov qword [rdi + 0xc8], rcx
test rcx, rcx
je 0x140032b90
mov rax, qword [0x1401c0890]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x60], rax
mov r9d, 0x28
lea rax, [rcx + 0x160]
mov qword [rsp + 0x38], r12
mov rcx, qword [0x1401c0880]
mov edx, 0x2201d4
mov qword [rsp + 0x68], rax
mov eax, dword [0x1401c0888]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x518]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x518], r12
mov dword [rsp + 0x74], r12d
mov qword [rsp + 0x80], 8
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rbx, qword [rsp + 0x518]
test rbx, rbx
je 0x140032b90
mov rcx, qword [rdi + 0xc8]
lea r8, [rsp + 0x60]
mov rax, qword [0x1401c0890]
mov r9d, 0x28
mov qword [rsp + 0x60], rax
mov edx, 0x2201d4
mov qword [rsp + 0x38], r12
lea rax, [rcx + 0x1d8]
mov qword [rsp + 0x30], r12
mov rcx, qword [0x1401c0880]
mov qword [rsp + 0x68], rax
mov eax, dword [0x1401c0888]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x518]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x518], r12
mov dword [rsp + 0x74], r12d
mov qword [rsp + 0x80], 8
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdx, qword [rsp + 0x518]
test rdx, rdx
je 0x140032b90
add rdx, 0x38
call fcn.1400342e0
test rax, rax
je 0x140032ded
mov rcx, qword [0x1401c0890]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x68], rax
mov r9d, 0x28
mov eax, dword [0x1401c0888]
mov edx, 0x2201d4
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x518]
mov qword [rsp + 0x60], rcx
mov rcx, qword [0x1401c0880]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x518], r12
mov dword [rsp + 0x74], r12d
mov qword [rsp + 0x80], 8
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [rsp + 0x518]
jmp 0x140032df0
mov rcx, r12
mov qword [rdi + 0xd0], rcx
lea r8, [rsp + 0x60]
mov rax, qword [0x1401c0890]
mov r9d, 0x28
mov qword [rsp + 0x60], rax
mov edx, 0x2201d4
lea rax, [rcx + 0x30]
mov qword [rsp + 0x38], r12
mov rcx, qword [0x1401c0880]
mov qword [rsp + 0x68], rax
mov eax, dword [0x1401c0888]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x518]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x518], r12
mov dword [rsp + 0x74], r12d
mov qword [rsp + 0x80], 8
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [rsp + 0x518]
lea r8, [rsp + 0x60]
mov qword [rdi + 0xd8], rcx
mov r9d, 0x28
mov rax, qword [0x1401c0890]
mov edx, 0x2201d4
mov qword [rsp + 0x60], rax
lea rax, [rcx + 0x338]
mov qword [rsp + 0x38], r12
mov rcx, qword [0x1401c0880]
mov qword [rsp + 0x68], rax
mov eax, dword [0x1401c0888]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x518]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x518], r12
mov dword [rsp + 0x74], r12d
mov qword [rsp + 0x80], 8
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [rsp + 0x518]
lea r8, [rsp + 0x60]
mov qword [rdi + 0xe8], rcx
mov r9d, 0x28
mov rax, qword [0x1401c0890]
mov edx, 0x2201d4
mov qword [rsp + 0x60], rax
lea rax, [rcx + 0x2b0]
mov qword [rsp + 0x38], r12
mov rcx, qword [0x1401c0880]
mov qword [rsp + 0x68], rax
mov eax, dword [0x1401c0888]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x518]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x518], r12
mov dword [rsp + 0x74], r12d
mov qword [rsp + 0x80], 8
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdx, qword [rsp + 0x518]
add rdx, 0x11d1
call fcn.1400343d0
lea rdx, [rbx + 0x2c8]
mov byte [rdi + 0xf8], al
call fcn.140031a00
mov rax, qword [0x1401c0890]
mov qword [rsp + 0x60], rax
lea rax, [rbx + 0x2a8]
mov qword [rsp + 0x68], rax
mov eax, dword [0x1401c0888]
vpxor xmm1, xmm1, xmm1
mov dword [rsp + 0x70], eax
vmovaps xmm6, xmm0
vmovups xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x74], r12d
mov rcx, qword [0x1401c0880]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x38], r12
lea r8, [rsp + 0x60]
mov qword [rsp + 0x30], r12
mov r9d, 0x28
mov dword [rsp + 0x28], r12d
mov edx, 0x2201d4
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 0x10
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
vucomiss xmm6, xmm14
lea r14, [rdi + 0x108]
mov qword [rsp + 0xe0], r14
mov rcx, r14
jne 0x14003303c
mov al, 1
jmp 0x14003303e
xor al, al
mov byte [rcx], al
mov ebx, r12d
cmp dword [rsp + 0x58], 0
mov dword [rsp + 0x518], ebx
jbe 0x1400339cd
cmp dword [rsp + 0x5c], 0
je 0x1400339b0
vpxor xmm0, xmm0, xmm0
vpxor xmm1, xmm1, xmm1
xor eax, eax
mov qword [rsp + 0x168], r12
mov esi, 0xf
mov qword [rsp + 0x140], rax
vmovups xmmword [rsp + 0x158], xmm1
vmovups xmmword [rsp + 0xf8], xmm0
lea edx, [rbx*8]
mov byte [rsp + 0x158], al
add rdx, qword [rsp + 0x50]
mov r15, r12
mov byte [rsp + 0xf8], al
mov r13d, esi
vmovsd qword [rsp + 0x178], xmm7
vmovups ymmword [rsp + 0x120], ymm0
vmovups xmmword [rsp + 0x148], xmm0
mov qword [rsp + 0x170], rsi
vmovupd xmmword [rsp + 0x180], xmm0
vmovups xmmword [rsp + 0xe8], xmm1
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x110], rsi
vzeroupper
call fcn.1400342e0
mov rcx, qword [0x1401c0890]
lea r8, [rsp + 0x60]
xor edx, edx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x38], rdx
mov r12, rax
lea rcx, [rax + 0x308]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x68], rcx
mov r9d, 0x28
mov ecx, dword [0x1401c0888]
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x190], rax
lea rax, [rsp + 0x528]
mov dword [rsp + 0x70], ecx
mov rcx, qword [0x1401c0880]
mov qword [rsp + 0x528], rdx
mov dword [rsp + 0x74], edx
mov qword [rsp + 0x20], rdx
mov edx, 0x2201d4
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 8
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp byte [r14], 0
jne 0x140033911
cmp byte [0x1401c07f1], 0
jne 0x1400331a2
cmp byte [0x14012d0f5], 0
je 0x140033911
vmovups xmm0, xmmword [0x1401c08d8]
lea rax, [r12 - 0x400001]
movabs rcx, 0x7fffffffffbffffe
vmovups xmmword [0x1401c08e8], xmm0
cmp rax, rcx
ja 0x140033911
mov rax, qword [0x1401c0890]
lea r8, [rsp + 0x60]
mov r14, qword [rsp + 0x528]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov r9d, 0x28
mov qword [rsp + 0x60], rax
mov edx, 0x2201d4
mov qword [rsp + 0x30], rcx
lea rax, [r14 + 0x9d8]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x68], rax
mov eax, dword [0x1401c0888]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x74], ecx
mov qword [rsp + 0x20], rcx
mov rcx, qword [0x1401c0880]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 8
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdx, qword [rsp + 0x40]
movabs rcx, 0x7fffffffffbffffe
mov qword [rdi + 0xf0], rdx
lea rax, [rdx - 0x400001]
cmp rax, rcx
ja 0x140033911
add rdx, 0xeec
lea rcx, [0x1401c0880]
call fcn.140034360
mov rdx, qword [rdi + 0xf0]
lea rcx, [0x1401c0880]
add rdx, 0x1c8
mov dword [rsp + 0xe8], eax
mov r12d, eax
call fcn.140034360
mov rdx, qword [rdi + 0xf0]
lea r8, [rsp + 0x60]
mov rcx, qword [0x1401c0890]
xor esi, esi
mov qword [rsp + 0x60], rcx
mov r9d, 0x28
mov qword [rsp + 0x38], rsi
lea rcx, [rdx + 0x510]
mov dword [rsp + 0xec], eax
mov qword [rsp + 0x68], rcx
lea rax, [rsp + 0x40]
mov ecx, dword [0x1401c0888]
mov edx, 0x2201d4
mov dword [rsp + 0x70], ecx
mov rcx, qword [0x1401c0880]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x74], esi
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 8
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rbx, qword [rsp + 0x40]
movabs rcx, 0x7fffffffffbffffe
lea rax, [rbx - 0x400001]
cmp rax, rcx
ja 0x1400338a8
lea rdx, [rbx + 0x9a]
call fcn.1400343d0
movzx eax, al
mov byte [rsp + 0xf0], al
cmp eax, 6
ja case.default.0x140033371
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x33f38]
add rcx, rdx
jmp rcx
vmovups xmmword [0x1401c08e8], xmm8
jmp case.default.0x140033371
vmovups xmmword [0x1401c08e8], xmm9
jmp case.default.0x140033371
vmovups xmmword [0x1401c08e8], xmm10
jmp case.default.0x140033371
vmovups xmmword [0x1401c08e8], xmm11
jmp case.default.0x140033371
vmovups xmmword [0x1401c08e8], xmm12
jmp case.default.0x140033371
vmovups xmmword [0x1401c08e8], xmm13
mov rax, qword [0x1401c0890]
lea r8, [rsp + 0x60]
mov rcx, qword [0x1401c0880]
mov r9d, 0x28
mov qword [rsp + 0x60], rax
mov edx, 0x2201d4
lea rax, [rbx + 0x40]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x68], rax
mov eax, dword [0x1401c0888]
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x74], esi
mov qword [rsp + 0x80], 8
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rbx, qword [rsp + 0x40]
movabs rcx, 0x7fffffffffbffffe
lea rax, [rbx - 0x400001]
cmp rax, rcx
ja 0x1400338a8
lea rdx, [rbx + 0x28]
call fcn.1400342e0
lea rdx, [rbx + 0x30]
mov rdi, rax
lea rcx, [0x1401c0880]
call fcn.140034360
test eax, eax
jle 0x1400338a0
cmp eax, 0x32
jge 0x1400338a0
movsxd rbx, eax
mov rcx, 0xffffffffffffffff
mov eax, 2
mul rbx
cmovb rax, rcx
mov rcx, rax
call fcn.1400ef3c4
mov rcx, qword [0x1401c0890]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x60], rcx
mov rsi, rax
mov ecx, dword [0x1401c0888]
xor eax, eax
mov qword [rsp + 0x38], rax
mov r9d, 0x28
mov dword [rsp + 0x70], ecx
mov edx, 0x2201d4
mov qword [rsp + 0x30], rax
lea rcx, [rbx + rbx]
mov qword [rsp + 0x80], rcx
mov rcx, qword [0x1401c0880]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x74], eax
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdx, rsi
lea rcx, [rsp + 0x1d8]
call fcn.140033fd0
cmp qword [rsp + 0x1f0], 7
lea rdx, [rsp + 0x1d8]
mov rax, qword [rsp + 0x1e8]
lea rcx, [rsp + 0x60]
cmova rdx, qword [rsp + 0x1d8]
lea r8, [rdx + rax*2]
lea rdx, [rsp + 0x1d8]
cmova rdx, qword [rsp + 0x1d8]
call fcn.1400347f0
lea rcx, [rsp + 0xf8]
cmp rcx, rax
je 0x14003357b
vmovups ymm1, ymmword [rax]
vextractf128 xmm0, ymm1, 1
vmovups ymmword [rsp + 0xf8], ymm1
vextractf128 xmm1, ymm1, 1
mov qword [rax + 0x18], r13
vmovq r15, xmm1
mov qword [rax + 0x10], 0
mov byte [rax], 0
vpextrq r13, xmm0, 1
mov r8, qword [rsp + 0x78]
cmp r8, 0xf
jbe 0x140033593
mov rdx, qword [rsp + 0x60]
vzeroupper
call fcn.1400024d0
mov rdi, qword [rsp + 0x510]
cmp r14, qword [rdi + 0xe8]
jne 0x1400335f0
lea rcx, [rdi + 0x160]
lea rax, [rsp + 0xf8]
cmp rcx, rax
je 0x1400335f0
cmp r13, 0xf
lea rdx, [rsp + 0xf8]
mov r8, r15
cmova rdx, qword [rsp + 0xf8]
vzeroupper
call fcn.140030920
mov r13, qword [rsp + 0x110]
mov r15, qword [rsp + 0x108]
mov r12d, dword [rsp + 0xe8]
mov rcx, rsi
vzeroupper
call fcn.1400ef390
cmp byte [0x14012d0cc], 0
je 0x140033865
lea rdx, [rdi + 0x160]
lea rcx, [rsp + 0x1b8]
call fcn.1400341c0
mov rbx, qword [rsp + 0x1d0]
lea rcx, [rsp + 0x1b8]
mov rdi, qword [rsp + 0x1b8]
lea rdx, str.Nemesis_AR
cmp rbx, 0xf
cmova rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140033811
cmp rbx, 0xf
lea rcx, [rsp + 0x1b8]
lea rdx, str.Striker_AR
cmova rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140033811
cmp rbx, 0xf
lea rcx, [rsp + 0x1b8]
lea rdx, str.Enforcer_AR
cmova rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140033811
mov rax, qword [rsp + 0x1c8]
lea rsi, [rsp + 0x1b8]
cmp rbx, 0xf
cmova rsi, rdi
cmp rax, 5
jb 0x140033701
lea r14, [rax + rsi]
mov edx, 0x6f
lea r8, [r14 - 4]
mov rcx, rsi
sub r8, rsi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140033701
cmp dword [rax], 0x7567746f
jne 0x1400336e5
cmp byte [rax + 4], 0x6e
je 0x140033784
inc rax
lea r8, [r14 - 4]
sub r8, rax
mov rcx, rax
mov edx, 0x6f
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x1400336d3
cmp rbx, 0xf
lea rcx, [rsp + 0x1b8]
lea rdx, str.Thunder_Burst_SMG
cmova rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400337f9
cmp rbx, 0xf
lea rcx, [rsp + 0x1b8]
lea rdx, str.Hyper_SMG
cmova rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400337f9
cmp rbx, 0xf
lea rcx, [rsp + 0x1b8]
lea rdx, str.Ranger_Pistol
cmova rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1400337a9
vmovss xmm0, dword [0x14012d11c]
vmovss xmm1, dword [0x14012d0d4]
mov eax, dword [0x14012d114]
jmp 0x140033827
sub rax, rsi
cmp rax, 0xffffffffffffffff
je 0x140033701
vmovss xmm0, dword [0x14012d124]
vmovss xmm1, dword [0x14012d0dc]
mov eax, dword [0x1401c07e4]
jmp 0x140033827
cmp rbx, 0xf
lea rcx, [rsp + 0x1b8]
lea rdx, str.Reaper_Sniper_Rifle
cmova rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1400337e1
vmovss xmm0, dword [0x14012d10c]
vmovss xmm1, dword [0x14012d108]
mov eax, dword [0x1401c07ec]
jmp 0x140033827
vmovss xmm0, dword [0x14012d0e0]
vmovss xmm1, dword [0x14012d0f8]
mov eax, dword [0x14012d0ec]
jmp 0x140033827
vmovss xmm0, dword [0x14012d0e4]
vmovss xmm1, dword [0x14012d0c8]
mov eax, dword [0x14012d120]
jmp 0x140033827
vmovss xmm0, dword [0x14012d0d0]
vmovss xmm1, dword [0x14012d0c4]
mov eax, dword [0x14012d100]
mov dword [0x1401c08f8], eax
vmovss dword [0x14012d390], xmm1
vmovss dword [0x14012d378], xmm0
cmp rbx, 0xf
jbe 0x14003384e
mov r8, rbx
mov rdx, rdi
call fcn.1400024d0
mov rdi, qword [rsp + 0x510]
lea rcx, [rsp + 0x1d8]
call fcn.140033f60
jmp 0x1400338a8
vmovss xmm0, dword [0x14012d0e0]
vmovss xmm1, dword [0x14012d0f8]
mov eax, dword [0x14012d0ec]
lea rcx, [rsp + 0x1d8]
vmovss dword [0x14012d378], xmm0
vmovss dword [0x14012d390], xmm1
mov dword [0x1401c08f8], eax
call fcn.140033f60
jmp 0x1400338a8
mov rdi, qword [rsp + 0x510]
mov eax, dword [rsp + 0xec]
lea rdx, [rsp + 0xf8]
cmp r13, 0xf
mov dword [rsp + 0x14c], eax
movzx eax, byte [rsp + 0xf0]
lea rcx, [rsp + 0x158]
cmova rdx, qword [rsp + 0xf8]
mov r8, r15
mov byte [rsp + 0x150], al
mov dword [rsp + 0x148], r12d
call fcn.140030920
mov rsi, qword [rsp + 0x170]
mov r13, qword [rsp + 0x110]
mov r12, qword [rsp + 0x190]
mov ebx, dword [rsp + 0x518]
mov r14, qword [rsp + 0x528]
cmp r14, qword [rdi + 0xe8]
jne 0x140033a8c
cmp r13, 0xf
jbe 0x140033962
mov rcx, qword [rsp + 0xf8]
lea rdx, [r13 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003395d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f0f
call fcn.1400ef390
cmp rsi, 0xf
jbe 0x14003399e
mov rcx, qword [rsp + 0x158]
lea rdx, [rsi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033999
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f0f
call fcn.1400ef390
lea r14, [rdi + 0x108]
mov r15, qword [rsp + 0x520]
xor r12d, r12d
inc ebx
mov dword [rsp + 0x518], ebx
cmp ebx, dword [rsp + 0x58]
jb 0x140033055
movabs r13, 0x6db6db6db6db6db7
mov rbx, qword [0x1401bfb40]
mov rsi, qword [0x1401bfb48]
cmp rbx, rsi
je 0x140033a07
lea rdi, [rbx + 0x38]
mov rcx, rdi
call fcn.140002430
add rbx, 0x70
add rdi, 0x70
cmp rbx, rsi
jne 0x1400339e4
mov rbx, qword [0x1401bfb40]
mov qword [0x1401bfb48], rbx
mov rdi, qword [rsp + 0x510]
lea rcx, [rdi + 0x110]
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
jne 0x140033f2a
mov eax, dword [rdi + 0x15c]
cmp eax, 0x7fffffff
je 0x140033f16
mov rsi, qword [rsp + 0x1a0]
mov r14, qword [rsp + 0x1a8]
mov rbx, rsi
cmp rsi, r14
je 0x140033e3a
mov rdx, qword [0x1401bfb48]
nop dword [rax + rax]
cmp rdx, qword [0x1401bfb50]
mov r8, rbx
je 0x140033e1a
call fcn.140034b50
mov rdx, qword [0x1401bfb48]
add rdx, 0x70
mov qword [0x1401bfb48], rdx
jmp 0x140033e2d
mov rax, qword [0x1401c0890]
lea r8, [rsp + 0x60]
xor ecx, ecx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x38], rcx
lea rax, [r14 + 0x310]
mov qword [rsp + 0x30], rcx
mov r9d, 0x28
mov qword [rsp + 0x68], rax
mov edx, 0x2201d4
mov eax, dword [0x1401c0888]
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x70], eax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x74], ecx
mov qword [rsp + 0x20], rcx
mov rcx, qword [0x1401c0880]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 8
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdi, qword [rsp + 0x40]
lea rdx, [rdi + 0x570]
call fcn.1400342e0
mov rbx, rax
test rax, rax
jne 0x140033bc8
lea rdx, [rdi + 0x580]
call fcn.1400342e0
mov rbx, rax
test rax, rax
jne 0x140033bc8
cmp r13, 0xf
jbe 0x140033b70
mov rcx, qword [rsp + 0xf8]
lea rdx, [r13 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033b6b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f0f
call fcn.1400ef390
cmp rsi, 0xf
jbe 0x140033bac
mov rcx, qword [rsp + 0x158]
lea rdx, [rsi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033ba7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f0f
call fcn.1400ef390
mov ebx, dword [rsp + 0x518]
mov rdi, qword [rsp + 0x510]
mov r14, qword [rsp + 0xe0]
jmp 0x1400339a5
lea rdx, [r12 + 0x29a]
mov qword [rsp + 0x120], r14
mov qword [rsp + 0x128], rdi
mov qword [rsp + 0x130], r12
call fcn.1400343d0
movzx esi, al
lea rdx, [r14 + 0x8f2]
sar sil, 3
and sil, 1
mov byte [rsp + 0x142], sil
call fcn.1400343d0
mov rdx, qword [rsp + 0x528]
movzx r14d, al
sar r14b, 4
add rdx, 0x6d0
and r14b, 1
mov byte [rsp + 0x140], r14b
call fcn.1400343d0
movzx r15d, al
lea rdx, [r12 + 0x11d1]
sar r15b, 4
and r15b, 1
mov byte [rsp + 0x141], r15b
call fcn.1400343d0
mov r9d, 0x6e
mov byte [rsp + 0x143], al
mov r8, rbx
mov qword [rsp + 0x138], rbx
lea rdx, [rsp + 0x60]
mov rcx, rdi
movzx r12d, al
call fcn.1400320d0
vmovups xmm0, xmmword [rsp + 0xc0]
mov rax, qword [rsp + 0x1a8]
vmovups xmmword [rsp + 0x178], xmm0
vmovsd xmm0, qword [rsp + 0xd0]
vmovsd qword [rsp + 0x188], xmm0
cmp rax, qword [rsp + 0x520]
je 0x140033d57
mov rcx, qword [rsp + 0x528]
lea rdx, [rsp + 0x158]
mov qword [rax + 8], rdi
mov rdi, rax
mov qword [rax], rcx
mov rax, qword [rsp + 0x190]
mov qword [rdi + 0x10], rax
lea rcx, [rdi + 0x38]
movzx eax, byte [rsp + 0x144]
mov byte [rdi + 0x24], al
mov eax, dword [rsp + 0x148]
mov dword [rdi + 0x28], eax
mov eax, dword [rsp + 0x14c]
mov dword [rdi + 0x2c], eax
movzx eax, byte [rsp + 0x150]
mov byte [rdi + 0x30], al
mov qword [rdi + 0x18], rbx
mov byte [rdi + 0x20], r14b
mov byte [rdi + 0x21], r15b
mov byte [rdi + 0x22], sil
mov byte [rdi + 0x23], r12b
call fcn.1400341c0
vmovups xmm0, xmmword [rsp + 0x178]
vmovsd xmm1, qword [rsp + 0x188]
mov r15, qword [rsp + 0x520]
vmovups xmmword [rdi + 0x58], xmm0
vmovsd qword [rdi + 0x68], xmm1
add rdi, 0x70
mov qword [rsp + 0x1a8], rdi
jmp 0x140033d7f
lea r8, [rsp + 0x120]
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.140034920
mov r15, qword [rsp + 0x1b0]
mov qword [rsp + 0x520], r15
cmp r13, 0xf
jbe 0x140033dbb
mov rcx, qword [rsp + 0xf8]
lea rdx, [r13 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033db6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f0f
call fcn.1400ef390
mov rdx, qword [rsp + 0x170]
cmp rdx, 0xf
jbe 0x140033dfe
mov rcx, qword [rsp + 0x158]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033df9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f0f
call fcn.1400ef390
mov ebx, dword [rsp + 0x518]
mov rdi, qword [rsp + 0x510]
mov r14, qword [rsp + 0xe0]
jmp 0x1400339ad
lea rcx, [0x1401bfb40]
call fcn.140034920
mov rdx, qword [0x1401bfb48]
add rbx, 0x70
cmp rbx, r14
jne 0x140033a60
lea rcx, [rdi + 0x110]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
lea rcx, [rsp + 0x518]
mov qword [rsp + 0x518], 0x12c
call fcn.140034450
mov rdi, qword [rsp + 0x510]
test rsi, rsi
je 0x140032b90
cmp rsi, r14
je 0x140033ed2
lea rbx, [rsi + 0x50]
nop word [rax + rax]
mov rdx, qword [rbx]
cmp rdx, 0xf
jbe 0x140033eb6
mov rcx, qword [rbx - 0x18]
inc rdx
cmp rdx, 0x1000
jb 0x140033eb1
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140033f0f
mov rcx, r8
call fcn.1400ef390
mov qword [rbx - 8], r12
mov qword [rbx], 0xf
mov byte [rbx - 0x18], 0
add rbx, 0x70
lea rax, [rbx - 0x50]
cmp rax, r14
jne 0x140033e80
sub r15, rsi
mov rax, rsi
sar r15, 4
imul r15, r13
imul rdx, r15, 0x70
cmp rdx, 0x1000
jb 0x140033f02
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f0f
mov rcx, rsi
call fcn.1400ef390
jmp 0x140032b86
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
dec eax
mov ecx, 6
mov dword [rdi + 0x15c], eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3