Function at 0x140005210
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x2a0
mov rax, qword [0x140041040]
xor rax, rsp
mov qword [rsp + 0x290], rax
mov r14, rcx
mov qword [rsp + 0x40], rcx
xor r12d, r12d
mov ecx, 2
xor edx, edx
mov dword [rsp + 0x2c], r12d
mov r15d, r12d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r10, rax
mov qword [rsp + 0x30], rax
call fcn.140004ae0
movsx esi, al
call fcn.140002d60
movsx ebp, al
mov r9d, ebp
imul r9d, esi
call fcn.140004b10
movsx r8d, byte [0x140041239]
xor edx, edx
movsx ebx, al
mov edi, 4
lea ecx, [r9 + rbx]
lea eax, [rcx + r9*4]
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x14000555d
movsx eax, byte [0x14004123a]
cmp r10, 0xffffffffffffffff
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
mov eax, r12d
sete al
xor edx, edx
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
lea eax, [r9 + r9*4]
lea r11d, [rbx + rax*2]
mulsd xmm1, xmm0
movsd qword [rsp + 0x20], xmm1
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, r11d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005363
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*8]
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
je 0x140005363
mov r10d, edi
jmp 0x1400053cc
movsx eax, byte [0x140041239]
lea edx, [r9 + r9*2]
movsx ecx, byte [0x140041238]
add eax, ebx
lea eax, [rax + rdx*2]
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400053c7
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, r11d
div ecx
xorps xmm0, xmm0
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si r10d, xmm0
jmp 0x1400053cc
mov r10d, dword [rsp + 0x20]
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, r11d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, r10d
test r8d, r8d
je 0x14000555d
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, r9d
add eax, ebx
xorps xmm2, xmm2
div ecx
xor edx, edx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm2, rax
movsx eax, byte [0x14004123a]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x20], xmm1
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, r11d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400054ba
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*8]
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
jne 0x140005556
call fcn.140004b10
movsx edx, al
mov ecx, ebp
imul ecx, esi
lea eax, [rcx + rcx*2]
lea r8d, [rdx + rax*2]
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x14000554d
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
xorps xmm0, xmm0
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si eax, xmm0
jmp 0x140005551
mov eax, dword [rsp + 0x20]
cmp r12d, eax
jge 0x14000555d
xor eax, eax
jmp 0x140006449
xor edx, edx
lea rcx, [rsp + 0x54]
mov r8d, 0x234
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x50], 0x238
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400062d4
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
mov rcx, r12
xorps xmm2, xmm2
cmp eax, 1
movsx eax, byte [0x14004123a]
sete cl
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtsi2sd xmm2, rcx
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x20], xmm1
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea ebx, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, ebx
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005693
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*8]
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
je 0x140005693
mov r9d, edi
jmp 0x140005717
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005712
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, ebx
div ecx
xorps xmm0, xmm0
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si r9d, xmm0
jmp 0x140005717
mov r9d, dword [rsp + 0x20]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
imul esi, edx, 7
call fcn.140004b10
movsx r8d, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
movsx eax, al
add eax, esi
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, r9d
test r8d, r8d
je 0x1400062d4
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea r8d, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400062d4
lea rdx, [rsp + 0x7c]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, r12
xorps xmm2, xmm2
test eax, eax
movsx eax, byte [0x14004123a]
sete cl
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtsi2sd xmm2, rcx
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x20], xmm1
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, ebx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005862
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*8]
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
je 0x140005862
mov r9d, edi
jmp 0x140005909
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005904
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
xorps xmm0, xmm0
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si r9d, xmm0
jmp 0x140005909
mov r9d, dword [rsp + 0x20]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*8]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, r9d
test r8d, r8d
je 0x14000595d
mov r15d, dword [rsp + 0x58]
jmp 0x1400062d4
call fcn.140004b10
movsx r8d, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
movsx eax, al
add eax, esi
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400062d4
call fcn.140004af0
movsx r14d, al
mov r10d, r14d
call fcn.140004b20
movsx r15d, al
call fcn.140004b00
movsx ecx, byte [0x140044398]
xorps xmm2, xmm2
movsx ebx, al
mov byte [rsp + 0x28], al
movsx eax, byte [0x14004123c]
imul ecx, r14d
lea edx, [rcx + rcx*2]
add edx, edx
sub edx, r15d
add edx, ebx
add eax, edx
cvtsi2sd xmm2, rax
movsx eax, byte [0x14004123a]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x20], xmm1
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005a73
movsx ecx, byte [0x140044398]
imul ecx, r10d
lea edx, [rcx + rcx*8]
movsx ecx, byte [0x14004123c]
sub edx, r15d
add edx, ebx
add ecx, edx
je 0x140005a73
mov r9d, edi
jmp 0x140005b1a
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005b15
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
xorps xmm0, xmm0
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si r9d, xmm0
jmp 0x140005b1a
mov r9d, dword [rsp + 0x20]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx esi, al
call fcn.140004b10
movsx ebp, al
mov ecx, edx
movsx eax, byte [0x14004123b]
sub r8d, eax
imul ecx, esi
imul r8d, r9d
test r8d, r8d
je 0x140005fc5
movsx eax, byte [0x14004123a]
lea edx, [rcx + rcx*4]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, qword [0x140037d58]
movsd qword [rsp + 0x20], xmm1
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
lea eax, [rax + rdx*2]
xor edx, edx
add eax, ebp
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005c00
movsx ecx, byte [0x140044398]
imul ecx, r10d
lea edx, [rcx + rcx*8]
movsx ecx, byte [0x14004123c]
sub edx, r15d
add edx, ebx
add ecx, edx
jne 0x140005c61
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005c61
movzx eax, byte [0x140041239]
movzx eax, byte [0x140041238]
movzx eax, byte [0x14004123b]
movsd xmm0, qword [rsp + 0x20]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea r8d, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
xor edx, edx
movsx eax, byte [0x140041239]
add r8d, ecx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400062bf
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
xorps xmm2, xmm2
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm2, rax
movsx eax, byte [0x14004123a]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x20], xmm1
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005dac
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*8]
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
jne 0x140005e51
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005e4d
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
xorps xmm0, xmm0
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x20]
cvttsd2si edi, xmm0
jmp 0x140005e51
mov edi, dword [rsp + 0x20]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, edi
test r8d, r8d
je 0x1400062bf
movsx eax, byte [0x14004123a]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, qword [0x140037d70]
movsd qword [rsp + 0x20], xmm1
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140005f58
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*8]
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
jne 0x1400062bf
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
mov r15d, r12d
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400062d4
movzx eax, byte [0x140041239]
movzx eax, byte [0x140041238]
movzx eax, byte [0x14004123b]
movsd xmm0, qword [rsp + 0x20]
jmp 0x1400062d4
lea edx, [rcx*8]
mov qword [rsp + 0x2d8], r13
add edx, ebp
mov r12d, r14d
mov dword [rsp + 0x20], edx
mov r13d, r15d
call fcn.140002d60
movsx edx, al
call fcn.140004ae0
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
lea esi, [rcx + rdx*2]
call fcn.140002d60
movsx ebx, al
call fcn.140004ae0
movsx ecx, al
imul ebx, ecx
call fcn.140004b10
mov ebp, dword [rsp + 0x20]
mov r14d, dword [rsp + 0x20]
movsx r15d, al
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
xor ecx, ecx
xorps xmm2, xmm2
cmp eax, 1
movsx eax, byte [0x14004123a]
sete cl
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtsi2sd xmm2, rcx
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x38], xmm1
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, esi
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400060ca
movsx ecx, byte [0x140044398]
imul ecx, r12d
lea edx, [rcx + rcx*8]
movsx ecx, byte [rsp + 0x28]
sub edx, r13d
add edx, ecx
movsx ecx, byte [0x14004123c]
add ecx, edx
je 0x1400060ca
mov ebp, edi
jmp 0x14000612a
movsx eax, byte [0x140041239]
lea edx, [rbx + rbx*2]
movsx ecx, byte [0x140041238]
add eax, r15d
lea eax, [rax + rdx*2]
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x14000612a
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, esi
div ecx
xorps xmm0, xmm0
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x38]
cvttsd2si ebp, xmm0
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
mov r9d, dword [rsp + 0x20]
add eax, r9d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, ebp
test r8d, r8d
je 0x1400062c4
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, r9d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140006030
mov rcx, qword [rsp + 0x40]
lea rdx, [rsp + 0x7c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
xor ecx, ecx
xorps xmm2, xmm2
test eax, eax
movsx eax, byte [0x14004123a]
sete cl
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtsi2sd xmm2, rcx
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x38], xmm1
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, esi
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140006220
movsx ecx, byte [0x140044398]
imul ecx, r12d
lea edx, [rcx + rcx*8]
movsx ecx, byte [rsp + 0x28]
sub edx, r13d
add edx, ecx
movsx ecx, byte [0x14004123c]
add ecx, edx
je 0x140006220
mov r14d, edi
jmp 0x140006281
movsx eax, byte [0x140041239]
lea edx, [rbx + rbx*2]
movsx ecx, byte [0x140041238]
add eax, r15d
lea eax, [rax + rdx*2]
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x140006281
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, esi
div ecx
xorps xmm0, xmm0
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x38]
cvttsd2si r14d, xmm0
movsx r8d, byte [0x140041239]
lea ecx, [rbx + r15]
lea eax, [rcx + rbx*8]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
imul r8d, r14d
test r8d, r8d
je 0x140006030
mov r15d, dword [rsp + 0x58]
jmp 0x1400062c9
mov r15d, r12d
jmp 0x1400062d4
mov r15d, dword [rsp + 0x2c]
mov r13, qword [rsp + 0x2d8]
xor r12d, r12d
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.140004b10
movsx ecx, al
xorps xmm2, xmm2
movsx eax, byte [0x140041239]
lea r9d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r9d
xor edx, edx
div ecx
xor edx, edx
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm2, rax
movsx eax, byte [0x14004123a]
movd xmm1, eax
movsx eax, byte [0x14004123c]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x40], xmm1
movsx eax, byte [0x140041239]
movsx ecx, byte [0x140041238]
add eax, r9d
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x1400063be
call fcn.140004af0
movsx edx, al
movsx eax, byte [0x140044398]
imul edx, eax
lea r8d, [rdx + rdx*8]
call fcn.140004b20
movsx ecx, al
sub r8d, ecx
call fcn.140004b00
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14004123c]
add ecx, r8d
jne 0x140006446
call fcn.140004ae0
movsx edx, al
call fcn.140002d60
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.140004b10
movsx ecx, al
movsx eax, byte [0x140041239]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x140041238]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14004123b]
cmp r8d, eax
je 0x14000643d
movsx eax, byte [0x140041239]
xor edx, edx
movsx ecx, byte [0x140041238]
add eax, r9d
div ecx
xorps xmm0, xmm0
mov r8d, eax
movsx eax, byte [0x14004123b]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x40]
cvttsd2si eax, xmm0
jmp 0x140006441
mov eax, dword [rsp + 0x20]
cmp r12d, eax
jge 0x140006449
mov eax, r15d
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.140019b90
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret