Function at 0x140033b90
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6f0]
sub rsp, 0x7f0
mov rax, qword [0x14037da00]
xor rax, rsp
mov qword [rbp + 0x6e0], rax
mov r13d, r8d
mov r12, rdx
mov r15, rcx
xor esi, esi
mov byte [rsp + 0x40], sil
mov r14d, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x398], xmm0
mov qword [rbp + 0x3a8], rsi
mov qword [rbp + 0x3b0], 0xf
mov byte [rbp + 0x398], 0
movups xmmword [rbp + 0x3d8], xmm0
mov qword [rbp + 0x3e8], rsi
mov qword [rbp + 0x3f0], 0xf
mov byte [rbp + 0x3d8], 0
movups xmmword [rbp + 0x378], xmm0
mov qword [rbp + 0x388], rsi
mov qword [rbp + 0x390], 0xf
mov byte [rbp + 0x378], 0
xor dil, dil
lea r9, [rbp + 0x378]
lea r8, [rbp + 0x3d8]
lea rdx, [rbp + 0x398]
mov ecx, r14d
call fcn.14002bb30
test al, al
je 0x140033d45
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x140033c80
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x140033c80
mov rax, rsi
jmp 0x140033c90
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], dil
jne 0x140033c87
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rcx
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x260], xmm0
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0xa8]
call fcn.14008e300
nop
lea rdx, [rbp + 0xa8]
lea rcx, [rbp - 0x70]
call fcn.140042e70
nop
lea rcx, [rbp - 0x70]
call fcn.1400434e0
mov edx, 2
lea rcx, [rbp - 0x70]
call fcn.1400431e0
test al, al
je 0x140033d03
mov rdx, r12
lea rcx, [rbp - 0x70]
call fcn.140049d00
test rax, rax
jle 0x140033d03
mov dil, 1
jmp 0x140033d06
xor dil, dil
lea rcx, [rbp - 0x70]
call fcn.140044850
nop
lea rcx, [rbp - 0x70]
call fcn.140042f50
nop
mov rcx, qword [rbp + 0xa8]
test rcx, rcx
je 0x140033d45
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033d45
mov rcx, qword [rbp + 0xa8]
call fcn.14021b7f0
mov edx, 0x6f
lea rcx, [rbp + 0x270]
call fcn.140011160
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x140033d68
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140033d7a
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f740
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140033d9b
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140033d90
jmp 0x140033d9e
mov rax, rsi
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rcx
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x1b0], xmm0
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0xc0]
call fcn.14008e300
nop
mov r8d, esi
test dil, dil
setne r8b
mov dword [rsp + 0x20], esi
mov r9d, r14d
lea rdx, [rbp + 0xc0]
mov rcx, r15
call fcn.140032c80
nop
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x140033e13
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033e13
mov rcx, qword [rbp + 0xc0]
call fcn.14021b7f0
nop
mov rcx, qword [rbp + 0x270]
test rcx, rcx
je 0x140033e3e
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033e3e
mov rcx, qword [rbp + 0x270]
call fcn.14021b7f0
test dil, dil
jne 0x140034000
mov edx, 0xe1
lea rcx, [rbp + 0x288]
call fcn.140011160
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x140033e6a
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140033e7c
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f740
mov rdx, qword [rbx + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f8], xmm0
mov qword [rbp + 0x408], rsi
mov qword [rbp + 0x410], rsi
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140033ea0
lea rcx, [rbp + 0x3f8]
call fcn.140006ba0
nop
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x140033ed9
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x140033ed9
mov rax, rsi
jmp 0x140033ee9
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140033ee0
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rcx
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x240], xmm0
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0xd8]
call fcn.14008e300
nop
lea rdx, [rbp + 0xd8]
lea rcx, [rsp + 0x60]
call fcn.1400ab650
nop
mov rcx, qword [rbp + 0xd8]
test rcx, rcx
je 0x140033f4e
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140033f4e
mov rcx, qword [rbp + 0xd8]
call fcn.14021b7f0
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x60]
call fcn.1400aba20
nop
mov rcx, rax
call fcn.1400aa000
nop
lea rcx, [rbp - 0x60]
call fcn.1400a6a40
nop
lea rcx, [rsp + 0x60]
call fcn.1400ab8b0
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x410]
cmp rdx, 0xf
jbe 0x140033fc8
inc rdx
mov rcx, qword [rbp + 0x3f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033fc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400350a4
call fcn.140214330
nop
mov rcx, qword [rbp + 0x288]
test rcx, rcx
je 0x140034e5d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034e5d
mov rcx, qword [rbp + 0x288]
call fcn.14021b7f0
jmp 0x140034e5d
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x14003402d
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x14003402d
mov rax, rsi
jmp 0x14003403d
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140034034
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rcx
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0x1c0], xmm0
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0xf0]
call fcn.14008e300
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rsi
lea rdx, [rbp + 0xf0]
lea rcx, [rsp + 0x68]
call fcn.140042e70
nop
lea rcx, [rsp + 0x68]
call fcn.140043120
test al, al
je 0x140034179
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.1400431e0
test al, al
je 0x140034179
lea rdx, [rbp + 0x2a0]
lea rcx, [rsp + 0x68]
call fcn.1400487c0
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rax]
mov qword [rsp + 0x48], rcx
mov qword [rax], rdx
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x50], rcx
mov qword [rax + 8], rdx
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x58], rcx
mov qword [rax + 0x10], rdx
mov rcx, qword [rbp + 0x2a0]
test rcx, rcx
je 0x14003411e
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x14003411e
mov rcx, qword [rbp + 0x2a0]
call fcn.14021b7f0
lea rcx, [rsp + 0x68]
call fcn.140044850
cmp qword [rsp + 0x58], 0
setg bl
lea rcx, [rsp + 0x68]
call fcn.140042f50
test bl, bl
je 0x140034184
lea rdx, [r15 + 0x60]
lea rcx, [rsp + 0x48]
call fcn.14002b8f0
movzx edi, al
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x1400341ae
mov ecx, 0xffffffff
lock xadd dword [rdx], ecx
cmp ecx, 1
setne cl
test cl, cl
jne 0x1400341ae
mov rcx, qword [rsp + 0x48]
call fcn.14021b7f0
jmp 0x1400341ae
lea rcx, [rsp + 0x68]
call fcn.140042f50
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400341ab
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x1400341ab
mov rcx, qword [rsp + 0x48]
call fcn.14021b7f0
xor dil, dil
mov rcx, qword [rbp + 0xf0]
test rcx, rcx
je 0x1400341d9
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x1400341d9
mov rcx, qword [rbp + 0xf0]
call fcn.14021b7f0
mov edx, 0x70
lea rcx, [rbp + 0x2b8]
call fcn.140011160
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x1400341fc
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x14003420e
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f740
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14003422b
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140034220
jmp 0x14003422e
mov rax, rsi
mov qword [rbp], rax
mov qword [rbp + 8], rcx
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x1d0], xmm0
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x108]
call fcn.14008e300
nop
movzx r8d, dil
mov dword [rsp + 0x20], esi
mov r9d, r14d
lea rdx, [rbp + 0x108]
mov rcx, r15
call fcn.140032c80
nop
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x14003429d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x14003429d
mov rcx, qword [rbp + 0x108]
call fcn.14021b7f0
nop
mov rcx, qword [rbp + 0x2b8]
test rcx, rcx
je 0x1400342c8
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x1400342c8
mov rcx, qword [rbp + 0x2b8]
call fcn.14021b7f0
test dil, dil
jne 0x140034490
mov edx, 0xe2
lea rcx, [rbp + 0x2d0]
call fcn.140011160
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x1400342f4
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140034306
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f740
mov rdx, qword [rbx + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x418], xmm0
mov qword [rbp + 0x428], rsi
mov qword [rbp + 0x430], rsi
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140034330
lea rcx, [rbp + 0x418]
call fcn.140006ba0
nop
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x140034369
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x140034369
mov rax, rsi
jmp 0x140034379
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140034370
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rcx
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x1e0], xmm0
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x90]
call fcn.14008e300
nop
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x78]
call fcn.1400ab650
nop
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x1400343de
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x1400343de
mov rcx, qword [rbp + 0x90]
call fcn.14021b7f0
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x78]
call fcn.1400aba20
nop
mov rcx, rax
call fcn.1400aa000
nop
lea rcx, [rbp - 0x58]
call fcn.1400a6a40
nop
lea rcx, [rsp + 0x78]
call fcn.1400ab8b0
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x430]
cmp rdx, 0xf
jbe 0x140034458
inc rdx
mov rcx, qword [rbp + 0x418]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034452
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400350aa
call fcn.140214330
nop
mov rcx, qword [rbp + 0x2d0]
test rcx, rcx
je 0x140034e5d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034e5d
mov rcx, qword [rbp + 0x2d0]
call fcn.14021b7f0
jmp 0x140034e5d
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
cmova rcx, qword [rbp + 0x398]
mov dword [rsp + 0x28], 0x80
mov edx, 0xa0000000
call fcn.140025d50
mov rdi, rax
test rax, rax
je 0x1400344c9
mov rcx, rax
call fcn.140024fc0
mov edx, 0x71
lea rcx, [rbp + 0x2e8]
call fcn.140011160
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x1400344ec
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x1400344fe
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f740
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14003451b
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140034510
jmp 0x14003451e
mov rax, rsi
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rcx
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x1f0], xmm0
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x120]
call fcn.14008e300
nop
mov r8d, esi
test rdi, rdi
setne r8b
mov dword [rsp + 0x20], esi
mov r9d, r14d
lea rdx, [rbp + 0x120]
mov rcx, r15
call fcn.140032c80
nop
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x140034593
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034593
mov rcx, qword [rbp + 0x120]
call fcn.14021b7f0
nop
mov rcx, qword [rbp + 0x2e8]
test rcx, rcx
je 0x1400345be
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x1400345be
mov rcx, qword [rbp + 0x2e8]
call fcn.14021b7f0
test rdi, rdi
jne 0x14003477d
mov edx, 0xe3
lea rcx, [rbp + 0x300]
call fcn.140011160
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x1400345ea
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x1400345fc
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f740
mov rdx, qword [rbx + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x438], xmm0
mov qword [rbp + 0x448], rsi
mov qword [rbp + 0x450], rsi
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140034620
lea rcx, [rbp + 0x438]
call fcn.140006ba0
nop
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x140034659
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x140034659
mov rax, rsi
jmp 0x140034669
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140034660
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rcx
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x210], xmm0
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x138]
call fcn.14008e300
nop
lea rdx, [rbp + 0x138]
lea rcx, [rbp - 0x80]
call fcn.1400ab650
nop
mov rcx, qword [rbp + 0x138]
test rcx, rcx
je 0x1400346cd
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x1400346cd
mov rcx, qword [rbp + 0x138]
call fcn.14021b7f0
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x80]
call fcn.1400aba20
nop
mov rcx, rax
call fcn.1400aa000
nop
lea rcx, [rbp - 0x50]
call fcn.1400a6a40
nop
lea rcx, [rbp - 0x80]
call fcn.1400ab8b0
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x450]
cmp rdx, 0xf
jbe 0x140034745
inc rdx
mov rcx, qword [rbp + 0x438]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003473f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400350b0
call fcn.140214330
nop
mov rcx, qword [rbp + 0x300]
test rcx, rcx
je 0x140034e5d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034e5d
mov rcx, qword [rbp + 0x300]
call fcn.14021b7f0
jmp 0x140034e5d
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x14003479f
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x14003479f
mov rax, rsi
jmp 0x1400347af
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1400347a6
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rcx
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x220], xmm0
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x150]
call fcn.14008e300
nop
mov edx, r13d
lea rcx, [rbp + 0x150]
call fcn.1400350d0
mov rbx, rax
mov qword [rbp - 0x48], rax
mov rcx, qword [rbp + 0x150]
test rcx, rcx
je 0x140034818
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034818
mov rcx, qword [rbp + 0x150]
call fcn.14021b7f0
mov edx, 0x72
lea rcx, [rbp + 0x318]
call fcn.140011160
mov rdi, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x14003483b
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x14003484d
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rdi
call fcn.14003f740
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14003486b
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140034860
jmp 0x14003486e
mov rax, rsi
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rcx
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x230], xmm0
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x168]
call fcn.14008e300
nop
mov eax, dword [rbp - 0x44]
mov dword [rsp + 0x20], eax
mov r9d, r14d
mov r8d, ebx
lea rdx, [rbp + 0x168]
mov rcx, r15
call fcn.140032c80
nop
mov rcx, qword [rbp + 0x168]
test rcx, rcx
je 0x1400348df
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x1400348df
mov rcx, qword [rbp + 0x168]
call fcn.14021b7f0
nop
mov rcx, qword [rbp + 0x318]
test rcx, rcx
je 0x14003490a
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x14003490a
mov rcx, qword [rbp + 0x318]
call fcn.14021b7f0
test ebx, ebx
jne 0x140034acd
mov edx, 0xe4
lea rcx, [rbp + 0x330]
call fcn.140011160
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x140034935
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140034947
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f740
mov rdx, qword [rbx + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x458], xmm0
mov qword [rbp + 0x468], rsi
mov qword [rbp + 0x470], rsi
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140034970
lea rcx, [rbp + 0x458]
call fcn.140006ba0
nop
lea rcx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
jbe 0x1400349a9
mov rcx, qword [rbp + 0x398]
test rcx, rcx
jne 0x1400349a9
mov rax, rsi
jmp 0x1400349b9
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1400349b0
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rcx
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x200], xmm0
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x180]
call fcn.14008e300
nop
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x78]
call fcn.1400ab650
nop
mov rcx, qword [rbp + 0x180]
test rcx, rcx
je 0x140034a1d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034a1d
mov rcx, qword [rbp + 0x180]
call fcn.14021b7f0
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x78]
call fcn.1400aba20
nop
mov rcx, rax
call fcn.1400aa000
nop
lea rcx, [rbp - 0x40]
call fcn.1400a6a40
nop
lea rcx, [rbp - 0x78]
call fcn.1400ab8b0
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x470]
cmp rdx, 0xf
jbe 0x140034a95
inc rdx
mov rcx, qword [rbp + 0x458]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034a8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400350b6
call fcn.140214330
nop
mov rcx, qword [rbp + 0x330]
test rcx, rcx
je 0x140034e5d
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034e5d
mov rcx, qword [rbp + 0x330]
call fcn.14021b7f0
jmp 0x140034e5d
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [rbp + 0x388]
lea r8, [rbp + 0x378]
cmp qword [rbp + 0x390], 0xf
cmova r8, qword [rbp + 0x378]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, edi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b8], xmm0
mov qword [rbp + 0x3c8], rsi
mov qword [rbp + 0x3d0], rsi
mov r8, rbx
xor edx, edx
lea rcx, [rbp + 0x3b8]
call fcn.140035520
lea rcx, [rbp + 0x3b8]
cmp qword [rbp + 0x3d0], 7
cmova rcx, qword [rbp + 0x3b8]
lea r8, [rbp + 0x378]
cmp qword [rbp + 0x390], 0xf
cmova r8, qword [rbp + 0x378]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, edi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop
nop dword [rax]
nop word [rax + rax]
xor dil, dil
mov dword [rbp + 0x4a0], 0x238
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140034c1e
lea rdx, [rbp + 0x4a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x140034c11
nop word [rax + rax]
lea rcx, [rbp + 0x3b8]
cmp qword [rbp + 0x3d0], 7
cmova rcx, qword [rbp + 0x3b8]
lea rdx, [rbp + 0x4cc]
call fcn.140221a08
test eax, eax
je 0x140034c0e
lea rdx, [rbp + 0x4a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
je 0x140034bd0
jmp 0x140034c11
mov dil, 1
mov rcx, rbx
call fcn.140024fc0
test dil, dil
jne 0x140034c3b
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
add esi, 0x3e8
cmp esi, 0x4e20
jl 0x140034b90
mov edx, 0x73
lea rcx, [rbp + 0x348]
call fcn.140011160
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x140034c5e
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140034c70
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f740
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140034c8d
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140034c80
xor esi, esi
jmp 0x140034c91
xor esi, esi
mov eax, esi
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rcx
movaps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x250], xmm0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x198]
call fcn.14008e300
nop
mov r8d, esi
test dil, dil
setne r8b
mov dword [rsp + 0x20], esi
mov r9d, r14d
lea rdx, [rbp + 0x198]
mov rcx, r15
call fcn.140032c80
nop
mov rcx, qword [rbp + 0x198]
test rcx, rcx
je 0x140034d06
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034d06
mov rcx, qword [rbp + 0x198]
call fcn.14021b7f0
nop
mov rcx, qword [rbp + 0x348]
test rcx, rcx
je 0x140034d31
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034d31
mov rcx, qword [rbp + 0x348]
call fcn.14021b7f0
test dil, dil
jne 0x140034f4c
mov edx, 0xe5
lea rcx, [rbp + 0x360]
call fcn.140011160
mov rbx, rax
mov rcx, qword [rax]
test rcx, rcx
je 0x140034d5d
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x140034d6f
mov r8d, 1
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call fcn.14003f740
mov rdx, qword [rbx + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x478], xmm0
mov qword [rbp + 0x488], rsi
mov qword [rbp + 0x490], rsi
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140034d92
lea rcx, [rbp + 0x478]
call fcn.140006ba0
nop
lea rdx, [rbp + 0x398]
call fcn.140033ab0
nop
mov rdx, qword [rbp + 0x490]
cmp rdx, 0xf
jbe 0x140034df8
inc rdx
mov rcx, qword [rbp + 0x478]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034df2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400350bc
call fcn.140214330
nop
mov rcx, qword [rbp + 0x360]
test rcx, rcx
je 0x140034e24
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
setne al
test al, al
jne 0x140034e24
mov rcx, qword [rbp + 0x360]
call fcn.14021b7f0
nop
mov r8, qword [rbp + 0x3d0]
cmp r8, 7
jbe 0x140034e44
mov rdx, qword [rbp + 0x3b8]
lea rcx, [rbp + 0x3b8]
call fcn.140003d60
mov qword [rbp + 0x3c8], rsi
mov qword [rbp + 0x3d0], 7
mov word [rbp + 0x3b8], si
mov rdx, qword [rbp + 0x390]
cmp rdx, 0xf
jbe 0x140034e9e
mov rcx, qword [rbp + 0x378]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034e99
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400350c2
call fcn.140214330
mov qword [rbp + 0x388], rsi
mov qword [rbp + 0x390], 0xf
mov byte [rbp + 0x378], 0
mov rdx, qword [rbp + 0x3f0]
cmp rdx, 0xf
jbe 0x140034ef9
mov rcx, qword [rbp + 0x3d8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034ef3
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400350c8
call fcn.140214330
nop
mov rdx, qword [rbp + 0x3b0]
cmp rdx, 0xf
jbe 0x140034f3a
mov rcx, qword [rbp + 0x398]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034f35
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003509e
call fcn.140214330
inc r14d
cmp r14d, 3
jl 0x140033bd3
jmp 0x140035063
mov byte [rsp + 0x40], 1
mov r8, qword [rbp + 0x3d0]
cmp r8, 7
jbe 0x140034f71
mov rdx, qword [rbp + 0x3b8]
lea rcx, [rbp + 0x3b8]
call fcn.140003d60
mov qword [rbp + 0x3c8], rsi
mov qword [rbp + 0x3d0], 7
mov word [rbp + 0x3b8], si
mov rdx, qword [rbp + 0x390]
cmp rdx, 0xf
jbe 0x140034fcb
inc rdx
mov rcx, qword [rbp + 0x378]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034fc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400350c2
call fcn.140214330
mov qword [rbp + 0x388], rsi
mov qword [rbp + 0x390], 0xf
mov byte [rbp + 0x378], 0
mov rdx, qword [rbp + 0x3f0]
cmp rdx, 0xf
jbe 0x140035026
inc rdx
mov rcx, qword [rbp + 0x3d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035020
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400350c8
call fcn.140214330
nop
mov rdx, qword [rbp + 0x3b0]
cmp rdx, 0xf
jbe 0x140035063
inc rdx
mov rcx, qword [rbp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003505e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003509e
call fcn.140214330
lea rdx, [r15 + 0x80]
call fcn.140026650
movzx eax, byte [rsp + 0x40]
mov rcx, qword [rbp + 0x6e0]
xor rcx, rsp
call fcn.140214310
mov rbx, qword [rsp + 0x848]
add rsp, 0x7f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140221490
nop
call fcn.140221490
nop
call fcn.140221490
nop
call fcn.140221490
nop
call fcn.140221490
nop
call fcn.140221490
nop
call fcn.140221490
nop
call fcn.140221490
int3