Function at 0x14000fc90
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x480]
sub rsp, 0x580
mov rax, qword [0x1400a6700]
xor rax, rsp
mov qword [rbp + 0x470], rax
mov r13, rdx
mov qword [rsp + 0x50], rdx
mov r14, rcx
mov qword [rbp - 0x30], rcx
xor eax, eax
mov r12d, eax
mov dword [rsp + 0x30], eax
xor edx, edx
lea ecx, [rax + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
mov qword [rbp - 0x60], rax
cmp rax, 0xffffffffffffffff
je 0x1400113c7
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x420], xmm1
mov ecx, 0x40
call fcn.140080720
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x420], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x458], xmm0
mov qword [rbp + 0x468], rax
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xb0], xmm1
lea r8d, [rax + 0x10]
lea rdx, str.aimbot_assistant
lea rcx, [rbp + 0xa0]
call fcn.14000e1b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xd0], xmm1
mov r8d, recv
lea rdx, str.oinkogjlklmngh
lea rcx, [rbp + 0xc0]
call fcn.14000e1b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf0], xmm1
mov r8d, 9
lea rdx, str.oinklovy
lea rcx, [rbp + 0xe0]
call fcn.14000e1b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x110], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.Aimbotdetector_
lea rcx, [rbp + 0x100]
call fcn.14000e1b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x130], xmm1
mov r8d, recv
lea rdx, str.Aimbotdetector
lea rcx, [rbp + 0x120]
call fcn.14000e1b0
nop
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x140]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x458]
call fcn.1400138e0
nop
lea r9, [fcn.1400147e0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x1b]
lea rcx, [rbp + 0xa0]
call fcn.14008075c
mov dword [rbp + 0x180], 0x238
lea rdx, [rbp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140011381
lea rdx, str.__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400170d0
lea rdx, [0x1400172a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x150], xmm1
mov r8d, 9
lea rdx, str.Chieftain
lea rcx, [rbp + 0x140]
call fcn.14000e1b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x170], xmm1
mov r8d, 5
lea rdx, str.NOXIS
lea rcx, [rbp + 0x160]
call fcn.14000e1b0
nop
lea rax, [rbp + 0x140]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x180]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.1400138e0
nop
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x3e0]
call fcn.14000d290
nop
lea rcx, [rbp - 0x58]
call fcn.140015a80
nop
lea r9, [fcn.1400147e0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x1e]
lea rcx, [rbp + 0x140]
call fcn.14008075c
mov rbx, qword [rbp + 0x3e0]
mov rdi, qword [rbp + 0x3e8]
cmp rbx, rdi
je 0x14000fffc
lea rdx, [0x140095ad8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400170d0
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14000ffa0
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.140019c10
lea rdx, [0x1400172a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [0x1400a7c08]
cmp rax, qword [0x1400a7c10]
je 0x14000ffe1
mov rdx, rbx
mov rcx, rax
call fcn.140014840
add qword [0x1400a7c08], 0x20
jmp 0x14000fff3
mov r8, rbx
mov rdx, rax
lea rcx, [0x1400a7c00]
call fcn.14001a9a0
add rbx, 0x20
cmp rbx, rdi
jne 0x14000ff80
lea rcx, [rbp + 0x3e0]
call fcn.140015a80
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3d0], xmm1
mov r8d, 8
lea rdx, str..crmgmod
lea rcx, [rbp + 0x3c0]
call fcn.14000e1b0
nop
lea rax, [rbp + 0x3c0]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.1400138e0
nop
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x3e0]
call fcn.14000d590
nop
lea rcx, [rbp - 0x58]
call fcn.140015a80
nop
lea r9, [fcn.1400147e0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x1f]
lea rcx, [rbp + 0x3c0]
call fcn.14008075c
mov rdi, qword [rbp + 0x3e8]
mov rbx, qword [rbp + 0x3e0]
cmp rbx, rdi
je 0x140010113
nop dword [rax + rax]
lea rdx, [0x140095b00]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400170d0
lea rdx, [0x1400172a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [0x1400a7c08]
cmp rax, qword [0x1400a7c10]
je 0x1400100f8
mov rdx, rbx
mov rcx, rax
call fcn.140014840
add qword [0x1400a7c08], 0x20
jmp 0x14001010a
mov r8, rbx
mov rdx, rax
lea rcx, [0x1400a7c00]
or eax, 0x97afb
call fcn.14001a9a0
add rbx, 0x20
cmp rbx, rdi
jne 0x1400100b0
lea rcx, [rbp + 0x3e0]
call fcn.140015a80
mov r9d, 0xa
movabs r8, 0x7fffffffffffffff
movabs rcx, 0x7ffffffffffffffe
mov r15, qword [r14]
mov qword [rbp - 0x38], r15
mov rax, qword [r14 + 8]
mov qword [rsp + 0x60], rax
cmp r15, rax
je 0x140010c55
cmp qword [r15 + 0x18], 0xf
jbe 0x14001016f
mov r14, qword [r15]
mov rdi, r14
add r14, qword [r15 + 0x10]
movabs rcx, 0x7ffffffffffffffe
jmp 0x140010179
mov r14, qword [r15 + 0x10]
add r14, r15
mov rdi, r15
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xor edx, edx
mov ebx, 7
mov esi, edx
mov qword [rbp - 0x70], rdx
mov qword [rbp - 0x68], rbx
cmp rdi, r14
jne 0x14001019f
mov word [rbp - 0x80], dx
jmp 0x140010287
mov rax, r14
sub rax, rdi
cmp rax, rcx
ja 0x1400113f7
cmp rax, rbx
jbe 0x140010240
mov rbx, rax
or rbx, 7
cmp rbx, rcx
jbe 0x1400101cc
mov rbx, rcx
lea rcx, [r8 + r8]
jmp 0x1400101ed
cmp rbx, 0xa
cmovb rbx, r9
lea rcx, [rbx + 1]
cmp rcx, r8
ja 0x1400113fd
add rcx, rcx
cmp rcx, 0x1000
jb 0x14001021e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400113fd
mov rcx, rax
call fcn.140080720
mov rcx, rax
test rax, rax
je 0x140010d82
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
xor edx, edx
jmp 0x14001022f
test rcx, rcx
je 0x14001022c
call fcn.140080720
xor edx, edx
jmp 0x14001022f
mov rax, rdx
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x68], rbx
nop word [rax + rax]
lea rcx, [rbp - 0x80]
cmp rbx, 7
cmova rcx, qword [rbp - 0x80]
movsx eax, byte [rdi]
mov word [rcx + rsi*2], ax
mov rsi, qword [rbp - 0x70]
inc rsi
mov qword [rbp - 0x70], rsi
inc rdi
cmp rdi, r14
je 0x14001026d
mov rbx, qword [rbp - 0x68]
jmp 0x140010240
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rax, qword [rbp - 0x80]
mov word [rax + rsi*2], dx
mov rbx, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], rdx
mov qword [rbp - 0x10], rdx
lea rax, [rbp + 0x1ac]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x1400102a4
lea rdx, [rbp + 0x1ac]
lea rcx, [rbp - 0x28]
call fcn.140017d10
lea rcx, [rbp - 0x80]
mov rdi, qword [rbp - 0x80]
cmp rbx, 7
cmova rcx, rdi
lea r8, [rbp - 0x28]
mov r9, qword [rbp - 0x28]
mov r10, qword [rbp - 0x10]
cmp r10, 7
cmova r8, r9
mov rdx, qword [rbp - 0x18]
cmp rdx, rsi
jne 0x14001030d
test rdx, rdx
je 0x140010308
sub r8, rcx
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x14001030d
add rcx, 2
sub rdx, 1
jne 0x1400102f4
mov sil, 1
jmp 0x140010310
xor sil, sil
cmp r10, 7
jbe 0x14001034c
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x140010343
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d7b
mov rcx, r9
call fcn.140080a74
nop
cmp rbx, 7
jbe 0x140010387
lea rdx, [rbx*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001037f
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d82
mov rcx, rdi
call fcn.140080a74
test sil, sil
je 0x140010c20
mov r8d, dword [rbp + 0x188]
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140010c20
xor eax, eax
mov esi, eax
mov qword [rsp + 0x40], rax
lea r9d, [rax + 0x30]
lea r8, [rbp + 0x140]
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
je 0x140010c08
nop dword [rax]
cmp dword [rbp + 0x160], 0x1000
jne 0x140010bd3
mov rdi, qword [rbp + 0x158]
test rdi, rdi
je 0x140010bda
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3e0], xmm0
xor r15d, r15d
mov qword [rbp + 0x3f0], r15
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x14001140f
cmp rdi, 0x1000
jb 0x14001045d
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x140011403
call fcn.140080720
mov rcx, rax
test rax, rax
je 0x140010d9e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140010465
mov rcx, rdi
call fcn.140080720
mov qword [rbp + 0x3e0], rax
lea rbx, [rax + rdi]
mov qword [rbp + 0x3f0], rbx
mov r8, rdi
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x3e8], rbx
lea rax, [rbp + 0x450]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x158]
mov r8, qword [rbp + 0x3e0]
mov rdx, qword [rbp + 0x140]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010b93
xorps xmm0, xmm0
movups xmmword [rbp + 0x430], xmm0
mov qword [rbp + 0x440], r15
mov qword [rbp + 0x448], r15
mov r8, qword [rbp + 0x450]
mov rdx, qword [rbp + 0x3e0]
lea rcx, [rbp + 0x430]
call fcn.14000e1b0
nop
mov rax, qword [r13]
mov qword [rsp + 0x38], rax
mov rcx, qword [r13 + 8]
mov qword [rsp + 0x58], rcx
cmp rax, rcx
je 0x140010b51
mov rsi, qword [rbp + 0x440]
mov rdi, qword [rax + 0x10]
mov r14, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140010523
mov r14, qword [rax]
lea r15, [rbp + 0x430]
cmp qword [rbp + 0x448], 0xf
cmova r15, qword [rbp + 0x430]
cmp rdi, rsi
ja 0x1400105c3
mov rax, rsi
sub rax, rdi
test rdi, rdi
jne 0x14001055b
xor r15d, r15d
mov ebx, r15d
mov rax, qword [rsp + 0x38]
jmp 0x1400105cd
lea r12, [r15 + rax]
movsx r13d, byte [r14]
lea r8, [r12 + 1]
sub r8, r15
mov edx, r13d
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400105b4
nop
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140010677
inc rbx
lea r8, [r12 + 1]
sub r8, rbx
mov edx, r13d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140010580
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x58]
mov r12d, dword [rsp + 0x30]
mov rbx, 0xffffffffffffffff
xor r15d, r15d
cmp rbx, 0xffffffffffffffff
je 0x1400109f5
mov r8, qword [rax + 0x10]
add r8, 0xa
xorps xmm0, xmm0
movups xmmword [rbp + 0x400], xmm0
mov qword [rbp + 0x410], r15
mov qword [rbp + 0x418], r15
cmp rsi, rbx
jb 0x140011409
sub rsi, rbx
cmp rsi, r8
cmovb r8, rsi
lea rdx, [rbp + 0x430]
cmp qword [rbp + 0x448], 0xf
cmova rdx, qword [rbp + 0x430]
add rdx, rbx
lea rcx, [rbp + 0x400]
call fcn.14000e1b0
or r12d, 1
mov dword [rsp + 0x30], r12d
lea r11, [rbp + 0x400]
mov r10, qword [rbp + 0x418]
cmp r10, 0xf
seta al
mov r9, qword [rbp + 0x400]
cmova r11, r9
mov rbx, qword [rbp + 0x410]
add r11, rbx
lea rcx, [rbp + 0x400]
test al, al
je 0x14001068e
mov r8, r9
lea rdx, [r9 + rbx]
jmp 0x140010699
sub rbx, r15
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x58]
mov r12d, dword [rsp + 0x30]
jmp 0x1400105ca
lea rdx, [rbx + rcx]
lea r8, [rbp + 0x400]
cmp r8, rdx
je 0x1400106f2
nop
movzx eax, byte [r8]
cmp al, 0x22
je 0x1400106b4
cmp al, 0x27
je 0x1400106b4
inc r8
cmp r8, rdx
jne 0x1400106a0
cmp r8, rdx
je 0x1400106f2
lea rax, [r8 + 1]
cmp rax, rdx
je 0x1400106f2
movzx ecx, byte [rax]
cmp cl, 0x22
je 0x1400106d5
cmp cl, 0x27
je 0x1400106d5
mov byte [r8], cl
inc r8
inc rax
cmp rax, rdx
jne 0x1400106c2
mov r10, qword [rbp + 0x418]
mov rbx, qword [rbp + 0x410]
mov r9, qword [rbp + 0x400]
lea rax, [rbp + 0x400]
cmp r10, 0xf
seta cl
cmova rax, r9
mov rdx, r8
sub rdx, rax
sub r11, r8
mov rax, rbx
sub rax, rdx
cmp rax, r11
cmovb r11, rax
lea rax, [rbp + 0x400]
test cl, cl
cmovne rax, r9
lea rcx, [rax + rdx]
sub rbx, r11
mov r8, rbx
sub r8, rdx
inc r8
lea rdx, [rcx + r11]
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x410], rbx
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x3c0]
call fcn.14000f590
nop
mov rbx, qword [rbp + 0x458]
mov r13, qword [rbp + 0x3d8]
mov rsi, qword [rbp + 0x3d0]
mov r14, qword [rbp + 0x3c0]
mov rdi, qword [rbp + 0x460]
cmp rbx, rdi
je 0x1400107d2
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x3c0]
cmp r13, 0xf
cmova rdx, r14
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1400107b0
mov rcx, qword [rbx]
cmp r8, rsi
jne 0x1400107be
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400107c9
add rbx, 0x20
cmp rbx, rdi
jne 0x140010790
jmp 0x1400107d2
cmp rbx, rdi
jne 0x140010a11
mov r12, qword [rbp + 0x420]
mov rbx, qword [r12 + 8]
mov r15, r12
cmp byte [rbx + 0x19], 0
jne 0x14001084d
nop word [rax + rax]
lea rcx, [rbx + 0x20]
lea rdx, [rbp + 0x3c0]
cmp r13, 0xf
cmova rdx, r14
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140010811
mov rcx, qword [rcx]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14001082a
jns 0x140010835
mov al, 0xff
jmp 0x140010837
cmp rdi, rsi
jae 0x140010833
mov al, 0xff
jmp 0x140010837
jbe 0x140010841
mov al, 1
test al, al
jns 0x140010841
mov rbx, qword [rbx + 0x10]
jmp 0x140010847
mov r15, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1400107f0
cmp byte [r15 + 0x19], 0
jne 0x1400108a8
lea rdx, [r15 + 0x20]
mov rbx, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140010866
mov rdx, qword [rdx]
lea rcx, [rbp + 0x3c0]
cmp r13, 0xf
cmova rcx, r14
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14001088e
jns 0x140010899
mov al, 0xff
jmp 0x14001089b
cmp rsi, rbx
jae 0x140010897
mov al, 0xff
jmp 0x14001089b
jbe 0x14001089f
mov al, 1
test al, al
js 0x1400108a8
cmp r15, r12
jne 0x140010aab
lea rdx, [0x140095ad8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400170d0
lea rdx, [rbp + 0x3c0]
cmp qword [rbp + 0x3d8], 0xf
cmova rdx, qword [rbp + 0x3c0]
mov r8, qword [rbp + 0x3d0]
mov rcx, rax
call fcn.140019c10
lea rdx, [0x1400172a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [0x1400a7c08]
cmp rax, qword [0x1400a7c10]
je 0x14001091a
lea rdx, [rbp + 0x3c0]
mov rcx, rax
call fcn.140014840
add qword [0x1400a7c08], 0x20
jmp 0x140010930
lea r8, [rbp + 0x3c0]
mov rdx, rax
lea rcx, [0x1400a7c00]
call fcn.14001a9a0
lea r8, [rbp + 0x3c0]
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x420]
call fcn.14001a380
nop
mov rdx, qword [rbp + 0x3d8]
cmp rdx, 0xf
jbe 0x140010989
inc rdx
mov rcx, qword [rbp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010984
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d89
call fcn.140080a74
xor eax, eax
mov qword [rbp + 0x3d0], rax
mov qword [rbp + 0x3d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3c0], al
mov rdx, qword [rbp + 0x418]
cmp rdx, 0xf
jbe 0x1400109e4
inc rdx
mov rcx, qword [rbp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400109df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d90
call fcn.140080a74
mov rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x38]
mov rsi, qword [rbp + 0x440]
add rax, 0x20
mov qword [rsp + 0x38], rax
mov r12d, dword [rsp + 0x30]
cmp rax, rcx
je 0x140010b42
jmp 0x140010512
cmp r13, 0xf
jbe 0x140010a48
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140010a40
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d89
mov rcx, r14
call fcn.140080a74
mov qword [rbp + 0x3d0], r15
mov qword [rbp + 0x3d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3c0], 0
mov rdx, qword [rbp + 0x418]
cmp rdx, 0xf
jbe 0x140010b42
inc rdx
mov rcx, qword [rbp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010aa1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d90
call fcn.140080a74
jmp 0x140010b42
cmp r13, 0xf
jbe 0x140010ae2
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140010ada
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d89
mov rcx, r14
call fcn.140080a74
xor eax, eax
mov qword [rbp + 0x3d0], rax
mov qword [rbp + 0x3d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3c0], al
mov rdx, qword [rbp + 0x418]
cmp rdx, 0xf
jbe 0x140010b3d
inc rdx
mov rcx, qword [rbp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010b38
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d90
call fcn.140080a74
mov r12d, dword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
mov r14, qword [rsp + 0x48]
mov r13, qword [rsp + 0x50]
mov rdx, qword [rbp + 0x448]
cmp rdx, 0xf
jbe 0x140010b93
inc rdx
mov rcx, qword [rbp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010b8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d97
call fcn.140080a74
nop
mov rcx, qword [rbp + 0x3e0]
test rcx, rcx
je 0x140010bd3
mov rdx, qword [rbp + 0x3f0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010bce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010d9e
call fcn.140080a74
mov rdi, qword [rbp + 0x158]
add rsi, rdi
mov qword [rsp + 0x40], rsi
mov r9d, Ordinal_50
lea r8, [rbp + 0x140]
mov rdx, rsi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
jne 0x1400103e0
mov r15, qword [rbp - 0x38]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, qword [rbp - 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140010c24
mov rsi, qword [rbp - 0x60]
add r15, 0x20
mov qword [rbp - 0x38], r15
cmp r15, qword [rsp + 0x60]
movabs rcx, 0x7ffffffffffffffe
movabs r8, 0x7fffffffffffffff
mov r9d, 0xa
jne 0x140010152
mov r14, qword [rbp - 0x30]
lea rdx, [rbp + 0x180]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x14001011f
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
xor edi, edi
mov qword [rbp + 0x3d0], rdi
mov qword [rbp + 0x3d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3c0], dil
mov r8, qword [0x1400a7c08]
mov rdx, qword [0x1400a7c00]
movzx eax, byte [rsp + 0x34]
mov byte [rsp + 0x20], al
lea r9, [rbp + 0x3c0]
lea rcx, [rbp - 8]
call fcn.140017470
mov rbx, rax
lea r12, [0x1400a67a8]
cmp r12, rax
je 0x140010d42
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x140010d05
mov rcx, qword [0x1400a67a8]
inc rdx
cmp rdx, 0x1000
jb 0x140010d00
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140010d74
mov rcx, r8
call fcn.140080a74
mov qword [0x1400a67b8], rdi
mov qword [reloc.WS2_32.dll_ntohs], 0xf
mov byte [0x1400a67a8], dil
movups xmm0, xmmword [rbx]
movups xmmword [0x1400a67a8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x1400a67b8], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], dil
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140010daa
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010da5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010da5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140080a74
cmp qword [0x1400a67b8], rdi
je 0x14001135c
lea rcx, [rbp + 0x140]
call fcn.14000e2b0
mov r13, rax
lea rcx, [rbp - 8]
call fcn.1400075b0
nop
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.1400041b0
mov rsi, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 4
jb 0x140010e70
lea rax, [r8 + 4]
mov qword [rsi + 0x10], rax
mov rbx, rsi
cmp rcx, 0xf
jbe 0x140010e07
mov rbx, qword [rsi]
lea rax, [0x140095b3c]
mov r15d, 4
lea r14, str.IP:
cmp rax, rbx
jbe 0x140010e36
lea rax, [rbx + r8]
cmp r14, rax
ja 0x140010e36
cmp rbx, r14
jbe 0x140010e39
mov rdi, rbx
sub rdi, r14
jmp 0x140010e39
mov rdi, r15
inc r8
lea rcx, [rbx + 4]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
sub r15, rdi
lea rdx, [r14 + 4]
add rdx, rdi
lea rcx, [rbx + rdi]
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
xor edi, edi
jmp 0x140010e95
mov r15d, 4
mov qword [rsp + 0x28], r15
lea r14, str.IP:
mov qword [rsp + 0x20], r14
mov edx, r15d
mov rcx, rsi
call fcn.14001b1b0
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov r8d, 7
lea rdx, str._nHWID:
lea rcx, [rsp + 0x60]
call fcn.140014760
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x68], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r13
lea r8, [rbp + 0x58]
lea rcx, [rbp + 0x18]
call fcn.140019570
nop
mov r8d, recv
lea rdx, str._nSteaminfo:
lea rcx, [rbp + 0x18]
call fcn.140014760
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [0x1400a7bc0]
cmp qword [0x1400a7bd8], 0xf
cmova rdx, qword [0x1400a7bc0]
mov r8, qword [0x1400a7bd0]
lea rcx, [rbp - 0x58]
call fcn.140014760
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3f0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x3e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x3f0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, 7
lea rdx, str._nfind:
lea rcx, [rbp + 0x3e0]
call fcn.140014760
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3d0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x3c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x3d0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova r12, qword [0x1400a67a8]
mov r8, qword [0x1400a67b8]
mov rdx, r12
lea rcx, [rbp + 0x3c0]
call fcn.140014760
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rbp + 0x38]
call fcn.14000f660
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x14001108e
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011088
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011088
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140080a74
nop
mov rdx, qword [rbp + 0x3d8]
cmp rdx, 0xf
jbe 0x1400110d2
inc rdx
mov rcx, qword [rbp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400110cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400110cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140080a74
movdqa xmm0, xmmword [0x140096ea0]
movdqu xmmword [rbp + 0x3d0], xmm0
mov byte [rbp + 0x3c0], 0
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 0xf
jbe 0x14001112d
inc rdx
mov rcx, qword [rbp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011128
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011128
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140080a74
movdqa xmm0, xmmword [0x140096ea0]
movdqu xmmword [rbp + 0x3f0], xmm0
mov byte [rbp + 0x3e0], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140011182
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001117d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001117d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140080a74
movdqa xmm0, xmmword [0x140096ea0]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x1400111d1
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400111cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400111cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140080a74
movdqa xmm0, xmmword [0x140096ea0]
movdqu xmmword [rbp + 0x28], xmm0
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x140011221
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001121b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001121b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140080a74
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140011261
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001125c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001125c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140080a74
movdqa xmm0, xmmword [0x140096ea0]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x1400112b5
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400112b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400112b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140080a74
movdqa xmm0, xmmword [0x140096ea0]
movdqu xmmword [rbp + 0x88], xmm0
mov byte [rbp + 0x78], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140011307
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011302
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011302
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140080a74
movdqa xmm0, xmmword [0x140096ea0]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x14001135c
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011357
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011357
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140080a74
lea rdx, str.___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400170d0
lea rdx, [0x1400172a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14001138b
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x458]
call fcn.140015a80
nop
mov r8, qword [rbp + 0x420]
mov r8, qword [r8 + 8]
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x420]
call fcn.14001a500
mov edx, 0x40
mov rcx, qword [rbp + 0x420]
call fcn.140080a74
mov rcx, qword [rbp + 0x470]
xor rcx, rsp
call fcn.140080700
lea r11, [rsp + 0x580]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400012e0
nop
call fcn.140001240
int3
call fcn.140001240
nop
call fcn.140016790
nop
call fcn.140016920
int3