Function at 0x140032560
Capabilities:
Enumerate processes

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x700
vmovaps xmmword [rax - 0x48], xmm6
vmovaps xmmword [rax - 0x58], xmm7
vmovaps xmmword [rax - 0x68], xmm8
vmovaps xmmword [rax - 0x78], xmm9
vmovaps xmmword [rax - 0x88], xmm10
vmovaps xmmword [rax - 0x98], xmm11
vmovaps xmmword [rax - 0xa8], xmm12
vmovaps xmmword [rax - 0xb8], xmm13
vmovaps xmmword [rax - 0xc8], xmm14
mov rsi, rcx
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
mov edx, 2
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
xor r13d, r13d
lea rcx, str..f8241d69_4464_47e6_8627_b3bcce202271
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x1401d82d8], rax
movabs rcx, 0x1c300cc178cf9ec7
mov qword [rsp + 0x168], rcx
xor edx, edx
movabs rax, 0x2274a1aa6fda4076
mov qword [rsp + 0x1e8], rcx
mov qword [rsp + 0x1a0], rax
mov ecx, 2
movabs rax, 0x3cdb8549a19d79df
mov qword [rsp + 0x1a8], rax
movabs rax, 0xa1dc66e81c0d3078
mov qword [rsp + 0x1b0], rax
movabs rax, 0x71c409ef83f573d1
mov qword [rsp + 0x1b8], rax
movabs rax, 0xd8494a611c769ba
mov qword [rsp + 0x1c0], rax
movabs rax, 0x433131e52e746ef3
mov qword [rsp + 0x1c8], rax
movabs rax, 0x6dafa6b4e78e083c
mov qword [rsp + 0x1d0], rax
movabs rax, 0xd03c4edb08767f45
mov qword [rsp + 0x1d8], rax
movabs rax, 0x983cfdc2e73b5d5e
mov qword [rsp + 0x1e0], rax
movabs rax, 0x2200a1d86fb54030
mov qword [rsp + 0x120], rax
movabs rax, 0x3cbe853da1f479b1
mov qword [rsp + 0x128], rax
movabs rax, 0xa1b966811c61303b
vmovdqu xmm0, xmmword [rsp + 0x120]
vpxor xmm0, xmm0, xmmword [rsp + 0x1a0]
mov qword [rsp + 0x130], rax
movabs rax, 0x719309c2838173bf
mov qword [rsp + 0x138], rax
movabs rax, 0xdb0949011a969d3
vmovdqu xmm1, xmmword [rsp + 0x130]
vpxor xmm1, xmm1, xmmword [rsp + 0x1b0]
mov qword [rsp + 0x140], rax
movabs rax, 0x4358318d2e276ede
mov qword [rsp + 0x148], rax
movabs rax, 0x6dc1a6dde7fe084c
vmovdqu xmm2, xmmword [rsp + 0x140]
mov qword [rsp + 0x150], rax
movabs rax, 0xd0444ebe08587f22
mov qword [rsp + 0x158], rax
movabs rax, 0x983cfdc2e73b5d3b
vmovdqu xmm3, xmmword [rsp + 0x150]
vmovdqu xmmword [rsp + 0x120], xmm0
vpxor xmm0, xmm2, xmmword [rsp + 0x1c0]
mov qword [rsp + 0x160], rax
vmovdqu xmm4, xmmword [rsp + 0x160]
vmovdqu xmmword [rsp + 0x130], xmm1
vpxor xmm1, xmm3, xmmword [rsp + 0x1d0]
vmovdqu xmmword [rsp + 0x140], xmm0
vpxor xmm0, xmm4, xmmword [rsp + 0x1e0]
vmovdqu xmmword [rsp + 0x160], xmm0
vmovdqu xmmword [rsp + 0x150], xmm1
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov ebx, r13d
cmp rax, 0xffffffffffffffff
je 0x1400328be
xor edx, edx
lea rcx, [rsp + 0x434]
mov r8d, 0x234
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x430]
mov dword [rsp + 0x430], 0x238
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1400328b5
lea rdx, [rsp + 0x45c]
lea rcx, [rsp + 0x120]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14003285d
mov ebx, dword [rsp + 0x438]
jmp 0x1400328b5
lea rdx, [rsp + 0x430]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x1400328b5
nop dword [rax]
nop word [rax + rax]
lea rdx, [rsp + 0x45c]
lea rcx, [rsp + 0x120]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
lea rdx, [rsp + 0x430]
mov rcx, rdi
test eax, eax
cmove ebx, dword [rsp + 0x438]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140032880
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.process_id___
mov dword [0x1401d82f0], ebx
call fcn.1400015e0
mov edx, dword [0x1401d82f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x1400017a0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, dword [0x1401d8288]
xor r9d, r9d
mov rcx, qword [0x1401d82d8]
xor r8d, r8d
mov dword [rsp + 0x50], eax
xor edx, edx
mov dword [rsp + 0x48], 0x10
lea rax, [rsp + 0x50]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x80]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xf8]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x54], r13d
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x80], r13d
mov dword [rsp + 0x84], 2
call fcn.14008af30
mov rax, qword [rsp + 0x58]
mov qword [0x1401d82e8], rax
call fcn.140001230
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.image_base___
mov qword [0x1401d82f8], rax
call fcn.1400015e0
mov rdx, qword [0x1401d82e8]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x1400017a0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.dtb___
call fcn.1400015e0
mov rdx, qword [0x1401d82f8]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x1400017a0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x4e20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x1401d82e8]
mov rax, r13
mov edi, 0x19
nop dword [rax]
lea rbx, [rax + 0x1000]
add rax, 0x250
add rcx, rax
call fcn.140034380
mov rcx, qword [0x1401d82e8]
cmp eax, 0x1215c178
jne 0x140032a4e
lea rax, [rbx + rcx]
mov qword [0x1401d82b8], rax
mov rax, rbx
sub rdi, 1
jne 0x140032a20
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
vmovdqu xmm13, xmmword [0x14011f3f0]
vmovdqu xmm12, xmmword [0x14011f3c0]
vmovdqu xmm11, xmmword [0x14011f550]
vmovdqu xmm10, xmmword [0x14011f4b0]
vmovdqu xmm8, xmmword [0x14011f460]
vmovdqu xmm9, xmmword [0x14011f4d0]
movabs r12, 0x6db6db6db6db6db7
vxorps xmm14, xmm14, xmm14
vxorpd xmm7, xmm7, xmm7
nop word [rax + rax]
mov eax, dword [0x1401d8288]
xor r9d, r9d
mov rcx, qword [0x1401d82b8]
xor r8d, r8d
mov dword [rsp + 0x50], eax
add rcx, 0x12300468
mov rax, qword [0x1401d8280]
xor edx, edx
mov qword [rsp + 0x60], rax
mov r15, r13
mov dword [rsp + 0x48], 0x10
lea rax, [rsp + 0x748]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x268], rax
lea rax, [rsp + 0x260]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x260]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x390]
vpxor xmm0, xmm0, xmm0
mov qword [rsp + 0x58], rcx
mov rcx, qword [0x1401d82d8]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
vmovdqu xmmword [rsp + 0x108], xmm0
mov qword [rsp + 0x750], r13
mov qword [rsp + 0x118], r13
mov qword [rsp + 0x748], r13
mov dword [rsp + 0x54], r13d
mov qword [rsp + 0x70], 8
mov dword [rsp + 0x260], r13d
mov dword [rsp + 0x264], 4
call fcn.14008af30
mov rcx, qword [rsp + 0x748]
mov qword [rsi + 0xc8], rcx
test rcx, rcx
je 0x140032ab0
mov eax, dword [0x1401d8288]
xor r9d, r9d
mov dword [rsp + 0x318], eax
xor r8d, r8d
mov rax, qword [0x1401d8280]
xor edx, edx
mov qword [rsp + 0x328], rax
lea rax, [rcx + 0x160]
mov rcx, qword [0x1401d82d8]
mov qword [rsp + 0x320], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x330], rax
lea rax, [rsp + 0x318]
mov dword [rsp + 0x48], 0x10
mov qword [rsp + 0x278], rax
lea rax, [rsp + 0x270]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x270]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3a0]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xc0], r13
mov dword [rsp + 0x31c], r13d
mov qword [rsp + 0x338], 8
mov dword [rsp + 0x270], r13d
mov dword [rsp + 0x274], 4
call fcn.14008af30
mov rbx, qword [rsp + 0xc0]
test rbx, rbx
je 0x140032ab0
mov rcx, qword [rsi + 0xc8]
xor r9d, r9d
mov eax, dword [0x1401d8288]
xor r8d, r8d
mov dword [rsp + 0x340], eax
xor edx, edx
mov rax, qword [0x1401d8280]
mov qword [rsp + 0x350], rax
lea rax, [rcx + 0x1d8]
mov rcx, qword [0x1401d82d8]
mov qword [rsp + 0x348], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x358], rax
lea rax, [rsp + 0x340]
mov dword [rsp + 0x48], 0x10
mov qword [rsp + 0x288], rax
lea rax, [rsp + 0x280]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x280]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3b0]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xc8], r13
mov dword [rsp + 0x344], r13d
mov qword [rsp + 0x360], 8
mov dword [rsp + 0x280], r13d
mov dword [rsp + 0x284], 4
call fcn.14008af30
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x140032ab0
add rcx, 0x38
call fcn.1400342e0
test rax, rax
je 0x140032e40
mov ecx, dword [0x1401d8288]
xor r9d, r9d
mov qword [rsp + 0x370], rax
xor r8d, r8d
mov dword [rsp + 0x48], 0x10
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x380], rax
xor edx, edx
mov dword [rsp + 0x368], ecx
lea rax, [rsp + 0x368]
mov rcx, qword [0x1401d8280]
mov qword [rsp + 0x298], rax
lea rax, [rsp + 0x290]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x290]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3c0]
mov qword [rsp + 0x378], rcx
mov rcx, qword [0x1401d82d8]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xd0], r13
mov dword [rsp + 0x36c], r13d
mov qword [rsp + 0x388], 8
mov dword [rsp + 0x290], r13d
mov dword [rsp + 0x294], 4
call fcn.14008af30
mov rcx, qword [rsp + 0xd0]
jmp 0x140032e43
mov rcx, r13
mov eax, dword [0x1401d8288]
xor r9d, r9d
mov dword [rsp + 0x50], eax
xor r8d, r8d
mov rax, qword [0x1401d8280]
xor edx, edx
mov qword [rsp + 0x60], rax
lea rax, [rcx + 0x30]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x748]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x50]
mov dword [rsp + 0x48], 0x10
mov qword [rsp + 0x2a8], rax
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x2a0]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3d0]
mov qword [rsi + 0xd0], rcx
mov rcx, qword [0x1401d82d8]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x748], r13
mov dword [rsp + 0x54], r13d
mov qword [rsp + 0x70], 8
mov dword [rsp + 0x2a0], r13d
mov dword [rsp + 0x2a4], 4
call fcn.14008af30
mov rcx, qword [rsp + 0x748]
xor r9d, r9d
mov eax, dword [0x1401d8288]
xor r8d, r8d
mov dword [rsp + 0x1a0], eax
xor edx, edx
mov rax, qword [0x1401d8280]
mov qword [rsp + 0x1b0], rax
lea rax, [rcx + 0x338]
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0x758]
mov qword [rsp + 0x1b8], rax
lea rax, [rsp + 0x1a0]
mov dword [rsp + 0x48], 0x10
mov qword [rsp + 0x2b8], rax
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x2b0]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3e0]
mov qword [rsi + 0xd8], rcx
mov rcx, qword [0x1401d82d8]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x758], r13
mov dword [rsp + 0x1a4], r13d
mov qword [rsp + 0x1c0], 8
mov dword [rsp + 0x2b0], r13d
mov dword [rsp + 0x2b4], 4
call fcn.14008af30
mov rcx, qword [rsp + 0x758]
mov eax, dword [0x1401d8288]
mov dword [rsp + 0x120], eax
mov rax, qword [0x1401d8280]
mov qword [rsp + 0x130], rax
lea rax, [rcx + 0x2b0]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x138], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x2c8], rax
lea rax, [rsp + 0x2c0]
mov dword [rsp + 0x48], 0x10
mov qword [rsp + 0x40], rax
mov qword [rsi + 0xe8], rcx
mov qword [rsp + 0x78], r13
mov dword [rsp + 0x124], r13d
mov qword [rsp + 0x140], 8
mov dword [rsp + 0x2c0], r13d
mov dword [rsp + 0x2c4], 4
mov rcx, qword [0x1401d82d8]
lea rax, [rsp + 0x2c0]
mov dword [rsp + 0x38], 0x10
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
lea rax, [rsp + 0x3f0]
mov dword [rsp + 0x28], r13d
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.14008af30
mov rcx, qword [rsp + 0x78]
add rcx, 0x11d1
call fcn.140001530
lea rcx, [rbx + 0x2c8]
mov byte [rsi + 0xf8], al
call fcn.1400318a0
mov eax, dword [0x1401d8288]
xor r9d, r9d
mov rcx, qword [0x1401d82d8]
xor r8d, r8d
mov dword [rsp + 0x120], eax
xor edx, edx
mov rax, qword [0x1401d8280]
mov qword [rsp + 0x130], rax
lea rax, [rbx + 0x2a8]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x138], rax
lea rax, [rsp + 0x120]
mov dword [rsp + 0x48], 0x10
mov qword [rsp + 0x2d8], rax
lea rax, [rsp + 0x2d0]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x2d0]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x400]
vpxor xmm1, xmm1, xmm1
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
vmovaps xmm6, xmm0
vmovups xmmword [rsp + 0x80], xmm1
mov dword [rsp + 0x124], r13d
mov qword [rsp + 0x140], 0x10
mov dword [rsp + 0x2d0], r13d
mov dword [rsp + 0x2d4], 4
call fcn.14008af30
vucomiss xmm6, xmm14
jne 0x1400331a9
mov al, 1
jmp 0x1400331ab
xor al, al
mov byte [rsi + 0x108], al
cmp dword [rsp + 0x88], 0
mov rdi, qword [rsp + 0x110]
mov dword [rsp + 0x748], r13d
jbe 0x140033996
mov eax, r13d
cmp dword [rsp + 0x8c], 0
je 0x140033976
vpxor xmm0, xmm0, xmm0
xor ecx, ecx
mov qword [rsp + 0x238], r13
vpxor xmm1, xmm1, xmm1
mov r15d, 0xf
mov qword [rsp + 0x210], rcx
vmovups xmmword [rsp + 0x228], xmm1
vmovups xmmword [rsp + 0xa0], xmm0
mov byte [rsp + 0x228], cl
mov r12, r13
mov byte [rsp + 0xa0], cl
mov r14d, r15d
lea ecx, [rax*8]
mov qword [rsp + 0x240], r15
add rcx, qword [rsp + 0x80]
vmovsd qword [rsp + 0x248], xmm7
vmovups ymmword [rsp + 0x1f0], ymm0
vmovups xmmword [rsp + 0x218], xmm0
vmovupd xmmword [rsp + 0x250], xmm0
vmovups xmmword [rsp + 0x90], xmm1
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0xb8], r15
vzeroupper
call fcn.1400342e0
mov ecx, dword [0x1401d8288]
mov rbx, rax
mov qword [rsp + 0x758], rax
xor r9d, r9d
mov dword [rsp + 0x48], 0x10
xor r8d, r8d
mov dword [rsp + 0x120], ecx
xor edx, edx
mov rcx, qword [0x1401d8280]
mov qword [rsp + 0x130], rcx
lea rcx, [rax + 0x308]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x128], rcx
mov rcx, qword [0x1401d82d8]
mov qword [rsp + 0x138], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x2e8], rax
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x2e0]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x410]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x78], r13
mov dword [rsp + 0x124], r13d
mov qword [rsp + 0x140], 8
mov dword [rsp + 0x2e0], r13d
mov dword [rsp + 0x2e4], 4
call fcn.14008af30
cmp byte [rsi + 0x108], 0
mov r13, qword [rsp + 0x78]
mov qword [rsp + 0x2f0], r13
jne 0x1400338dd
cmp byte [0x1401d8401], 0
jne 0x140033381
cmp byte [0x1401320f5], 0
je 0x1400338dd
vmovups xmm0, xmmword [0x1401d84c0]
lea rax, [rbx - 0x400001]
movabs rcx, 0x7fffffffffbffffe
xor ebx, ebx
vmovups xmmword [0x1401d84d0], xmm0
cmp rax, rcx
ja 0x1400338df
lea rcx, [r13 + 0x9d8]
mov qword [rsp + 0xd8], rbx
mov r8d, 8
lea rdx, [rsp + 0xd8]
call fcn.1400012b0
mov rcx, qword [rsp + 0xd8]
movabs rdx, 0x7fffffffffbffffe
mov qword [rsi + 0xf0], rcx
lea rax, [rcx - 0x400001]
cmp rax, rdx
ja 0x1400338df
add rcx, 0xeec
call fcn.140034380
mov rcx, qword [rsi + 0xf0]
add rcx, 0x1c8
mov dword [rsp + 0x90], eax
call fcn.140034380
mov rcx, qword [rsi + 0xf0]
lea rdx, [rsp + 0xe0]
add rcx, 0x510
mov dword [rsp + 0x94], eax
mov r8d, 8
mov qword [rsp + 0xe0], rbx
call fcn.1400012b0
mov rbx, qword [rsp + 0xe0]
movabs r15, 0x7fffffffffbffffe
lea rcx, [rbx - 0x400001]
cmp rcx, r15
ja 0x14003387d
lea rcx, [rbx + 0x9a]
call fcn.140001530
movzx eax, al
mov byte [rsp + 0x98], al
cmp eax, 6
ja case.default.0x14003349c
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x33f40]
add rcx, rdx
jmp rcx
vmovups xmmword [0x1401d84d0], xmm8
jmp case.default.0x14003349c
vmovups xmmword [0x1401d84d0], xmm9
jmp case.default.0x14003349c
vmovups xmmword [0x1401d84d0], xmm10
jmp case.default.0x14003349c
vmovups xmmword [0x1401d84d0], xmm11
jmp case.default.0x14003349c
vmovups xmmword [0x1401d84d0], xmm12
jmp case.default.0x14003349c
vmovups xmmword [0x1401d84d0], xmm13
lea rcx, [rbx + 0x40]
mov qword [rsp + 0xe8], 0
mov r8d, 8
lea rdx, [rsp + 0xe8]
call fcn.1400012b0
mov rbx, qword [rsp + 0xe8]
lea rax, [rbx - 0x400001]
cmp rax, r15
ja 0x14003387d
lea rcx, [rbx + 0x28]
call fcn.1400342e0
lea rcx, [rbx + 0x30]
mov r15, rax
call fcn.140034380
test eax, eax
jle 0x14003387d
cmp eax, 0x32
jge 0x14003387d
movsxd rbx, eax
mov rcx, 0xffffffffffffffff
mov eax, 2
mul rbx
cmovb rax, rcx
mov rcx, rax
call fcn.1400f3abc
lea r8, [rbx + rbx]
mov rdx, rax
mov rcx, r15
mov rsi, rax
call fcn.1400012b0
mov rdx, rsi
lea rcx, [rsp + 0x2f8]
call fcn.140033fd0
cmp qword [rsp + 0x310], 7
lea rdx, [rsp + 0x2f8]
mov rax, qword [rsp + 0x308]
lea rcx, [rsp + 0x50]
cmova rdx, qword [rsp + 0x2f8]
lea r8, [rdx + rax*2]
lea rdx, [rsp + 0x2f8]
cmova rdx, qword [rsp + 0x2f8]
call fcn.1400345c0
lea rcx, [rsp + 0xa0]
cmp rcx, rax
je 0x1400335fa
vmovups ymm1, ymmword [rax]
vextractf128 xmm0, ymm1, 1
vmovups ymmword [rsp + 0xa0], ymm1
vextractf128 xmm1, ymm1, 1
mov qword [rax + 0x18], r14
vmovq r12, xmm1
mov qword [rax + 0x10], 0
mov byte [rax], 0
vpextrq r14, xmm0, 1
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x140033612
mov rdx, qword [rsp + 0x50]
vzeroupper
call fcn.1400014b0
mov rbx, qword [rsp + 0x740]
cmp r13, qword [rbx + 0xe8]
jne 0x140033667
lea rcx, [rbx + 0x160]
lea rax, [rsp + 0xa0]
cmp rcx, rax
je 0x140033667
cmp r14, 0xf
lea rdx, [rsp + 0xa0]
mov r8, r12
cmova rdx, qword [rsp + 0xa0]
vzeroupper
call fcn.1400308c0
mov r14, qword [rsp + 0xb8]
mov r12, qword [rsp + 0xb0]
mov rcx, rsi
vzeroupper
call fcn.1400f3a4c
cmp byte [0x1401320cc], 0
je 0x14003383c
lea rdx, [rbx + 0x160]
lea rcx, [rsp + 0x50]
call fcn.1400341c0
mov rsi, qword [rsp + 0x68]
lea rcx, [rsp + 0x50]
mov rbx, qword [rsp + 0x50]
lea rdx, str.Nemesis_AR
cmp rsi, 0xf
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140033804
cmp rsi, 0xf
lea rcx, [rsp + 0x50]
lea rdx, str.Striker_AR
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140033804
cmp rsi, 0xf
lea rcx, [rsp + 0x50]
lea rdx, str.Enforcer_AR
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140033804
lea rcx, [rsp + 0x50]
call fcn.140034120
cmp rax, 0xffffffffffffffff
je 0x140033728
vmovss xmm0, dword [0x140132124]
vmovss xmm1, dword [0x1401320dc]
mov eax, dword [0x1401d83f4]
jmp 0x14003381a
cmp rsi, 0xf
lea rcx, [rsp + 0x50]
lea rdx, str.Thunder_Burst_SMG
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400337ec
cmp rsi, 0xf
lea rcx, [rsp + 0x50]
lea rdx, str.Hyper_SMG
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400337ec
cmp rsi, 0xf
lea rcx, [rsp + 0x50]
lea rdx, str.Ranger_Pistol
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14003379f
vmovss xmm0, dword [0x14013211c]
vmovss xmm1, dword [0x1401320d4]
mov eax, dword [0x140132114]
jmp 0x14003381a
cmp rsi, 0xf
lea rcx, [rsp + 0x50]
lea rdx, str.Reaper_Sniper_Rifle
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1400337d4
vmovss xmm0, dword [0x14013210c]
vmovss xmm1, dword [0x140132108]
mov eax, dword [0x1401d83fc]
jmp 0x14003381a
vmovss xmm0, dword [0x1401320e0]
vmovss xmm1, dword [0x1401320f8]
mov eax, dword [0x1401320ec]
jmp 0x14003381a
vmovss xmm0, dword [0x1401320e4]
vmovss xmm1, dword [0x1401320c8]
mov eax, dword [0x140132120]
jmp 0x14003381a
vmovss xmm0, dword [0x1401320d0]
vmovss xmm1, dword [0x1401320c4]
mov eax, dword [0x140132100]
lea rcx, [rsp + 0x50]
mov dword [0x1401d84e0], eax
vmovss dword [0x140132390], xmm1
vmovss dword [0x140132378], xmm0
call fcn.140001410
jmp 0x140033868
vmovss xmm0, dword [0x1401320e0]
vmovss xmm1, dword [0x1401320f8]
mov eax, dword [0x1401320ec]
vmovss dword [0x140132378], xmm0
vmovss dword [0x140132390], xmm1
mov dword [0x1401d84e0], eax
lea rcx, [rsp + 0x2f8]
call fcn.140033f60
mov rsi, qword [rsp + 0x740]
mov eax, dword [rsp + 0x90]
lea rdx, [rsp + 0xa0]
mov dword [rsp + 0x218], eax
lea rcx, [rsp + 0x228]
mov eax, dword [rsp + 0x94]
cmp r14, 0xf
mov dword [rsp + 0x21c], eax
mov r8, r12
movzx eax, byte [rsp + 0x98]
cmova rdx, qword [rsp + 0xa0]
mov byte [rsp + 0x220], al
call fcn.1400308c0
mov r15, qword [rsp + 0x240]
mov r14, qword [rsp + 0xb8]
xor ebx, ebx
cmp r13, qword [rsi + 0xe8]
jne 0x140033a4c
cmp r14, 0xf
jbe 0x140033928
mov rcx, qword [rsp + 0xa0]
lea rdx, [r14 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033923
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f17
call fcn.1400f3a4c
cmp r15, 0xf
jbe 0x140033964
mov rcx, qword [rsp + 0x228]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003395f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f17
call fcn.1400f3a4c
mov r15, qword [rsp + 0x750]
mov eax, dword [rsp + 0x748]
xor r13d, r13d
inc eax
mov dword [rsp + 0x748], eax
cmp eax, dword [rsp + 0x88]
jb 0x1400331d2
movabs r12, 0x6db6db6db6db6db7
mov rbx, qword [0x1401d7720]
mov r14, qword [0x1401d7728]
cmp rbx, r14
je 0x1400339d3
lea rsi, [rbx + 0x38]
nop dword [rax]
mov rcx, rsi
call fcn.140001410
add rbx, 0x70
add rsi, 0x70
cmp rbx, r14
jne 0x1400339b0
mov rbx, qword [0x1401d7720]
mov qword [0x1401d7728], rbx
mov rsi, qword [rsp + 0x740]
lea rcx, [rsi + 0x110]
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
jne 0x140033f32
mov eax, dword [rsi + 0x15c]
cmp eax, 0x7fffffff
je 0x140033f1e
mov r14, qword [rsp + 0x108]
mov rbx, r14
cmp r14, rdi
je 0x140033e3d
mov rdx, qword [0x1401d7728]
nop dword [rax]
cmp rdx, qword [0x1401d7730]
mov r8, rbx
je 0x140033e1d
call fcn.140034920
mov rdx, qword [0x1401d7728]
add rdx, 0x70
mov qword [0x1401d7728], rdx
jmp 0x140033e30
mov eax, dword [0x1401d8288]
xor r9d, r9d
mov rcx, qword [0x1401d82d8]
xor r8d, r8d
mov dword [rsp + 0x1a0], eax
xor edx, edx
mov rax, qword [0x1401d8280]
mov qword [rsp + 0x1b0], rax
lea rax, [r13 + 0x310]
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x1b8], rax
lea rax, [rsp + 0x1a0]
mov dword [rsp + 0x48], 0x10
mov qword [rsp + 0x100], rax
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0xf8]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x420]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xf0], rbx
mov dword [rsp + 0x1a4], ebx
mov qword [rsp + 0x1c0], 8
mov dword [rsp + 0xf8], ebx
mov dword [rsp + 0xfc], 4
call fcn.14008af30
mov rsi, qword [rsp + 0xf0]
lea rcx, [rsi + 0x570]
call fcn.1400342e0
mov rbx, rax
test rax, rax
jne 0x140033bd0
lea rcx, [rsi + 0x580]
call fcn.1400342e0
mov rbx, rax
test rax, rax
jne 0x140033bd0
cmp r14, 0xf
jbe 0x140033b87
mov rcx, qword [rsp + 0xa0]
lea rdx, [r14 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033b82
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f17
call fcn.1400f3a4c
cmp r15, 0xf
jbe 0x140033bc3
mov rcx, qword [rsp + 0x228]
lea rdx, [r15 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033bbe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f17
call fcn.1400f3a4c
mov rsi, qword [rsp + 0x740]
jmp 0x140033964
mov rax, qword [rsp + 0x758]
mov qword [rsp + 0x1f0], r13
mov qword [rsp + 0x1f8], rsi
mov qword [rsp + 0x200], rax
lea rcx, [rax + 0x29a]
call fcn.140001530
movzx r15d, al
lea rcx, [r13 + 0x8f2]
sar r15b, 3
and r15b, 1
mov byte [rsp + 0x212], r15b
call fcn.140001530
movzx r12d, al
lea rcx, [r13 + 0x6d0]
sar r12b, 4
and r12b, 1
mov byte [rsp + 0x210], r12b
call fcn.140001530
mov rcx, qword [rsp + 0x758]
movzx r13d, al
sar r13b, 4
add rcx, 0x11d1
and r13b, 1
mov byte [rsp + 0x211], r13b
call fcn.140001530
mov r9d, 0x6e
mov byte [rsp + 0x213], al
mov r8, rbx
mov qword [rsp + 0x208], rbx
lea rdx, [rsp + 0x120]
mov rcx, rsi
call fcn.140031fa0
vmovups xmm0, xmmword [rsp + 0x180]
vmovups xmmword [rsp + 0x248], xmm0
vmovsd xmm0, qword [rsp + 0x190]
vmovsd qword [rsp + 0x258], xmm0
cmp rdi, qword [rsp + 0x750]
je 0x140033d61
mov rax, qword [rsp + 0x2f0]
lea rcx, [rdi + 0x38]
mov qword [rdi], rax
lea rdx, [rsp + 0x228]
mov rax, qword [rsp + 0x758]
mov qword [rdi + 0x10], rax
movzx eax, byte [rsp + 0x213]
mov byte [rdi + 0x23], al
movzx eax, byte [rsp + 0x214]
mov byte [rdi + 0x24], al
mov eax, dword [rsp + 0x218]
mov dword [rdi + 0x28], eax
mov eax, dword [rsp + 0x21c]
mov dword [rdi + 0x2c], eax
movzx eax, byte [rsp + 0x220]
mov byte [rdi + 0x30], al
mov qword [rdi + 8], rsi
mov qword [rdi + 0x18], rbx
mov byte [rdi + 0x20], r12b
mov byte [rdi + 0x21], r13b
mov byte [rdi + 0x22], r15b
call fcn.1400341c0
vmovups xmm0, xmmword [rsp + 0x248]
vmovsd xmm1, qword [rsp + 0x258]
mov r15, qword [rsp + 0x750]
vmovups xmmword [rdi + 0x58], xmm0
vmovsd qword [rdi + 0x68], xmm1
add rdi, 0x70
mov qword [rsp + 0x110], rdi
jmp 0x140033d91
lea r8, [rsp + 0x1f0]
mov rdx, rdi
lea rcx, [rsp + 0x108]
call fcn.1400346f0
mov r15, qword [rsp + 0x118]
mov rdi, qword [rsp + 0x110]
mov qword [rsp + 0x750], r15
cmp r14, 0xf
jbe 0x140033dcd
mov rcx, qword [rsp + 0xa0]
lea rdx, [r14 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033dc8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f17
call fcn.1400f3a4c
mov rdx, qword [rsp + 0x240]
cmp rdx, 0xf
jbe 0x140033e10
mov rcx, qword [rsp + 0x228]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033e0b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f17
call fcn.1400f3a4c
mov rsi, qword [rsp + 0x740]
jmp 0x14003396c
lea rcx, [0x1401d7720]
call fcn.1400346f0
mov rdx, qword [0x1401d7728]
add rbx, 0x70
cmp rbx, rdi
jne 0x140033a20
lea rcx, [rsi + 0x110]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
lea rcx, [rsp + 0x748]
mov qword [rsp + 0x748], 0x12c
call fcn.140034420
mov rsi, qword [rsp + 0x740]
test r14, r14
je 0x140032ab0
cmp r14, rdi
je 0x140033ed2
lea rbx, [r14 + 0x50]
nop dword [rax]
mov rdx, qword [rbx]
cmp rdx, 0xf
jbe 0x140033eb6
mov rcx, qword [rbx - 0x18]
inc rdx
cmp rdx, 0x1000
jb 0x140033eb1
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140033f17
mov rcx, r8
call fcn.1400f3a4c
mov qword [rbx - 8], r13
mov qword [rbx], 0xf
mov byte [rbx - 0x18], 0
add rbx, 0x70
lea rax, [rbx - 0x50]
cmp rax, rdi
jne 0x140033e80
sub r15, r14
mov rax, r14
sar r15, 4
imul r15, r12
imul rdx, r15, 0x70
cmp rdx, 0x1000
jb 0x140033f02
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033f17
mov rcx, r14
call fcn.1400f3a4c
mov rsi, qword [rsp + 0x740]
jmp 0x140032ab0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
dec eax
mov ecx, 6
mov dword [rsi + 0x15c], eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3