Function at 0x1400471b1
Capabilities:
Enumerate processes

Disassembly:
push rax
pushf
mov eax, 0x64ee4404
pushf
not eax
add eax, 0x83bd8543
xor eax, 0xc3474265
rol eax, 3
popf
pushf
not eax
add eax, 0xce270878
xor eax, 0xe1e6ed99
rol eax, 0x67
popf
cmp eax, 0x29
jne 0x1400471ee
popf
pop rax
jmp 0x140048d42
cmp eax, 0
jne 0x1400471fd
popf
pop rax
jmp 0x1400474a0
cmp eax, 3
jne 0x14004720c
popf
pop rax
jmp 0x140047732
cmp eax, 1
jne 0x14004721b
popf
pop rax
jmp 0x140047603
cmp eax, 0xd
jne 0x14004722a
popf
pop rax
jmp 0x140047dbe
cmp eax, 0x1a
jne 0x140047239
popf
pop rax
jmp 0x1400485d4
cmp eax, 0xe
jne 0x140047248
popf
pop rax
jmp 0x140047e66
cmp eax, 0xb
jne 0x140047257
popf
pop rax
jmp 0x140047c7e
cmp eax, 0x19
jne 0x140047266
popf
pop rax
jmp 0x140048494
cmp eax, 8
jne 0x140047275
popf
pop rax
jmp 0x140047a8a
cmp eax, 0x2a
jne 0x140047284
popf
pop rax
jmp 0x140048e19
cmp eax, 0x17
jne 0x140047293
popf
pop rax
jmp 0x1400483db
cmp eax, 0x1c
jne 0x1400472a2
popf
pop rax
jmp 0x1400486d9
cmp eax, 0x2e
jne 0x1400472b1
popf
pop rax
jmp 0x14004901a
cmp eax, 0x18
jne 0x1400472c0
popf
pop rax
jmp 0x14004841d
cmp eax, 0x2b
jne 0x1400472cf
popf
pop rax
jmp 0x140048ebb
cmp eax, 0x1b
jne 0x1400472de
popf
pop rax
jmp 0x14004865c
cmp eax, 0x2d
jne 0x1400472ed
popf
pop rax
jmp 0x140048fbc
cmp eax, 0x23
jne 0x1400472fc
popf
pop rax
jmp 0x140048a38
cmp eax, 0x25
jne 0x14004730b
popf
pop rax
jmp 0x140048aad
cmp eax, 0xf
jne 0x14004731a
popf
pop rax
jmp 0x140047ecb
cmp eax, 0x13
jne 0x140047329
popf
pop rax
jmp 0x14004821b
cmp eax, 0x15
jne 0x140047338
popf
pop rax
jmp 0x14004831d
cmp eax, 0x24
jne 0x140047347
popf
pop rax
jmp 0x140048a73
cmp eax, 0x1e
jne 0x140047356
popf
pop rax
jmp 0x14004880b
cmp eax, 0xc
jne 0x140047365
popf
pop rax
jmp 0x140047d39
cmp eax, 0x26
jne 0x140047374
popf
pop rax
jmp 0x140048b30
cmp eax, 0x27
jne 0x140047383
popf
pop rax
jmp 0x140048bc2
cmp eax, 0x1f
jne 0x140047392
popf
pop rax
jmp 0x140048869
cmp eax, 0x10
jne 0x1400473a1
popf
pop rax
jmp 0x140048089
cmp eax, 0x2c
jne 0x1400473b0
popf
pop rax
jmp 0x140048f6f
cmp eax, 9
jne 0x1400473bf
popf
pop rax
jmp 0x140047b57
cmp eax, 4
jne 0x1400473ce
popf
pop rax
jmp 0x1400477c4
cmp eax, 0x16
jne 0x1400473dd
popf
pop rax
jmp 0x140048377
cmp eax, 0x28
jne 0x1400473ec
popf
pop rax
jmp 0x140048cad
cmp eax, 0xa
jne 0x1400473fb
popf
pop rax
jmp 0x140047bf8
cmp eax, 0x22
jne 0x14004740a
popf
pop rax
jmp 0x1400489d3
cmp eax, 0x14
jne 0x140047419
popf
pop rax
jmp 0x1400482d0
cmp eax, 7
jne 0x140047428
popf
pop rax
jmp 0x140047990
cmp eax, 5
jne 0x140047437
popf
pop rax
jmp 0x14004786d
cmp eax, 2
jne 0x140047446
popf
pop rax
jmp 0x140047678
cmp eax, 0x20
jne 0x140047455
popf
pop rax
jmp 0x1400488d0
cmp eax, 0x1d
jne 0x140047464
popf
pop rax
jmp 0x140048780
cmp eax, 0x11
jne 0x140047473
popf
pop rax
jmp 0x1400480f8
cmp eax, 6
jne 0x140047482
popf
pop rax
jmp 0x140047932
cmp eax, 0x21
jne 0x140047491
popf
pop rax
jmp 0x14004893b
cmp eax, 0x12
jne 0x1400474a0
popf
pop rax
jmp 0x140048201
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x630]
sub rsp, 0x730
mov rax, qword [0x140019040]
xor rax, rsp
mov qword [rbp + 0x620], rax
mov ebx, ecx
xor r15d, r15d
mov esi, r15d
mov dword [rbp + 0x190], r15d
xor edx, edx
mov r8d, 0xfb622fc4
pushf
not r8d
add r8d, 0x908465e8
xor r8d, 0xf86bdc42
rol r8d, 0x90
popf
pushf
not r8d
add r8d, 0xcc3d9699
xor r8d, 0xe2fe776f
rol r8d, 0xfc
popf
pushf
not r8d
add r8d, 0xae58629c
xor r8d, 0xae263b79
rol r8d, 0x5d
popf
lea rcx, [rbp + 0x1e0]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x1e0]
call fcn.14004ebcc
nop
xor edx, edx
lea ecx, [rdx + 2]
jmp 0x140047555
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400475aa
push rax
pushf
mov eax, 0x2f6c159e
pushf
not eax
add eax, 0xb8e5db42
xor eax, 0xa4efe8f7
rol eax, 6
popf
pushf
not eax
add eax, 0xe56da56c
xor eax, 0x832d5fe0
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xf8849a19
xor eax, 0xfae67b17
rol eax, 0x86
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0xd92665b6
pushf
not eax
add eax, 0xb560c4b0
xor eax, 0xd5072a20
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xf81c4e94
xor eax, 0x8cdbe6a8
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xf1d897ce
xor eax, 0x99881e87
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x987b1c06
xor eax, 0xd6067f69
rol eax, 0x8c
popf
jmp 0x1400471df
lea rdx, [0x192b05efe]
pushf
sub rdx, 0x52af60f6
popf
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14004bfd9
lea rdx, [0x18cb1c80f]
pushf
sub rdx, 0x4cb1234f
popf
mov rcx, rax
jmp 0x140047637
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ebx, r15d
jmp 0x140049033
mov dword [rsp + 0x50], 0x238
lea rdx, [rsp + 0x50]
mov rcx, rdi
jmp 0x140047689
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x1400476ec
push rax
pushf
mov eax, 0x56ff9d86
pushf
not eax
add eax, 0x9346e7b7
xor eax, 0x943c698c
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xa5028475
xor eax, 0xb0d752e7
rol eax, 0x93
popf
pushf
not eax
add eax, 0xa44e2d38
xor eax, 0xe3891039
rol eax, 0x91
popf
pushf
not eax
add eax, 0xbb517384
xor eax, 0xafd033e5
rol eax, 0x68
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0xcbbf59b6
pushf
not eax
add eax, 0xe48ce404
xor eax, 0xf4de0345
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x805aca94
xor eax, 0xe657fb88
rol eax, 0x99
popf
pushf
not eax
add eax, 0xd654d5ca
xor eax, 0xe14bb784
rol eax, 0x3a
popf
jmp 0x1400471df
lea rdx, [0x189b6669b]
pushf
sub rdx, 0x49b56863
popf
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14004bfd9
lea rdx, [0x1926fa550]
pushf
sub rdx, 0x526f0090
popf
mov rcx, rax
jmp 0x140047766
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x140047770
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, r15
jmp 0x140049033
mov r8d, dword [rsp + 0x58]
cmp r8d, ebx
je 0x140047814
push rax
pushf
mov eax, 0x7009cde2
pushf
not eax
add eax, 0xf73ddafc
xor eax, 0xbb3210df
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xae4ec131
xor eax, 0xf23e4398
rol eax, 0x18
popf
pushf
not eax
add eax, 0xce5dad08
xor eax, 0xf3c55c34
rol eax, 0x8f
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x27f38fb4
pushf
not eax
add eax, 0xc7bc88df
xor eax, 0x9e606abe
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xbf6c18ee
xor eax, 0xca71a31c
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x98a25ce3
xor eax, 0xb7b72111
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xea2752e5
xor eax, 0xed24b60c
rol eax, 0x35
popf
jmp 0x1400471df
lea rdx, [rsp + 0x50]
mov rcx, rdi
jmp 0x140047876
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400478d9
push rax
pushf
mov eax, 0xad26bf6e
pushf
not eax
add eax, 0xfce2b492
xor eax, 0xe5113e48
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x818e6783
xor eax, 0xa1535396
rol eax, 0xb
popf
pushf
not eax
add eax, 0xc55d462f
xor eax, 0xfa5acfae
rol eax, 0x85
popf
pushf
not eax
add eax, 0xe5bb0948
xor eax, 0xf4fea14f
rol eax, 0x33
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0xf79e133a
pushf
not eax
add eax, 0xa6f006b4
xor eax, 0xe79e02d0
rol eax, 0x22
popf
pushf
not eax
add eax, 0xaf7eada1
xor eax, 0x9d9de6ff
rol eax, 0xff
popf
pushf
not eax
add eax, 0x8d888031
xor eax, 0xc1f6b7bb
rol eax, 0x92
popf
pushf
not eax
add eax, 0xa777b9fa
xor eax, 0xc122a4f3
rol eax, 0xe7
popf
jmp 0x1400471df
jmp 0x140048494
xor edx, edx
mov ecx, 0x55354320
pushf
not ecx
add ecx, 0xa70b85ea
xor ecx, 0x8550fb8b
rol ecx, 0x4c
popf
pushf
not ecx
add ecx, 0x8087494b
xor ecx, 0xfaa6886e
rol ecx, 0xc8
popf
pushf
not ecx
add ecx, 0xeeb18830
xor ecx, 0xe93272c7
rol ecx, 0xb9
popf
pushf
not ecx
add ecx, 0xc07c6680
xor ecx, 0xb78c07ac
rol ecx, 0x50
popf
jmp 0x1400479ec
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
test rax, rax
je 0x140047a57
push rax
pushf
mov eax, 0x16b32c11
pushf
not eax
add eax, 0xf402e2e9
xor eax, 0xdf633985
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xef071d35
xor eax, 0xdc305bfb
rol eax, 0x66
popf
pushf
not eax
add eax, 0xd343be03
xor eax, 0xe1968492
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x9b15f394
xor eax, 0xae06c95d
rol eax, 0x3c
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x99510b2a
pushf
not eax
add eax, 0xca3a877c
xor eax, 0xcf438f80
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xf4b538fc
xor eax, 0xb4bfdb01
rol eax, 0xfc
popf
jmp 0x1400471df
mov dword [rbp + 0x190], r15d
lea rcx, [0x19c5614f6]
pushf
sub rcx, 0x5c55168e
popf
jmp 0x140047aa4
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, [0x1bd8199e6]
pushf
sub rdx, 0x7d809fce
popf
jmp 0x140047ac0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140047afe
push rax
pushf
mov eax, 0x93028d22
pushf
not eax
add eax, 0x845829d2
xor eax, 0xe8393fe4
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x9e5caed9
xor eax, 0xdd27fd42
rol eax, 0x48
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x7a3c440
pushf
not eax
add eax, 0x9fa4e7de
xor eax, 0xbfec291f
rol eax, 0x11
popf
pushf
not eax
add eax, 0xf7c92190
xor eax, 0xe0de7eab
rol eax, 0x93
popf
pushf
not eax
add eax, 0x8fb8e6f1
xor eax, 0xd2f97520
rol eax, 0xde
popf
pushf
not eax
add eax, 0xeda47bac
xor eax, 0xfc98139d
rol eax, 0xbb
popf
jmp 0x1400471df
lea rdx, [rbp + 0x190]
mov rcx, r14
jmp 0x140047b62
call rax
test eax, eax
je 0x140047bc5
push rax
pushf
mov eax, 0xa7cac1d2
pushf
not eax
add eax, 0x89ded31a
xor eax, 0xef5a431f
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xef12395e
xor eax, 0xdffd257c
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xc97585aa
xor eax, 0x9897facf
rol eax, 0xce
popf
pushf
not eax
add eax, 0x9fa7eeff
xor eax, 0xbffb8f60
rol eax, 0x16
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0xe135aa5b
pushf
not eax
add eax, 0xbb28509c
xor eax, 0x9bf1a41b
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xfcf54504
xor eax, 0xa3ed38fa
rol eax, 0xe7
popf
jmp 0x1400471df
cmp dword [rbp + 0x190], 0
jne 0x140047c38
push rax
pushf
mov eax, 0xc5373321
pushf
not eax
add eax, 0xb135ead4
xor eax, 0xf190393a
rol eax, 0x81
popf
pushf
not eax
add eax, 0xc286a574
xor eax, 0x8da98363
rol eax, 0xd8
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x647385ca
pushf
not eax
add eax, 0x882cf80c
xor eax, 0xafbe0059
rol eax, 0x75
popf
pushf
not eax
add eax, 0xbd2e3c2f
xor eax, 0xe87cb740
rol eax, 0x10
popf
pushf
not eax
add eax, 0xfe3196ff
xor eax, 0xf0f1049e
rol eax, 0x8b
popf
jmp 0x1400471df
mov dword [rbp + 0x190], 0x104
lea r9, [rbp + 0x190]
lea r8, [rbp + 0x410]
xor edx, edx
mov rcx, r14
jmp 0x140047c9c
call qword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameW]
mov rbx, 0xffffffffffffffff
test eax, eax
je 0x140047cf3
push rax
pushf
mov eax, 0xb3b6b25c
pushf
not eax
add eax, 0xdd5eb2af
xor eax, 0xe32c166d
rol eax, 0xec
popf
pushf
not eax
add eax, 0xc0472d1f
xor eax, 0xff5d1dd4
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xd28f8947
xor eax, 0xbb7e4867
rol eax, 0x2c
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0xc41a2ac4
pushf
not eax
add eax, 0x96089d80
xor eax, 0xe96fe5cd
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xd9c5292b
xor eax, 0xf7dcf88b
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x834e22ff
xor eax, 0xb348b334
rol eax, 0xed
popf
jmp 0x1400471df
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x300]
mov qword [rsp + 0x20], rax
mov r9d, ebx
lea r8, [rbp + 0x410]
xor edx, edx
xor ecx, ecx
jmp 0x140047d66
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rbp + 0x1c8], r15
mov qword [rbp + 0x1d0], r15
lea rax, [rbp + 0x300]
push rax
pushf
mov eax, 0x73921f08
pushf
not eax
add eax, 0xd1798b27
xor eax, 0xb3046476
rol eax, 0x62
popf
pushf
not eax
add eax, 0xb2da6abe
xor eax, 0xf74e48ba
rol eax, 0xbb
popf
jmp 0x1400471df
inc rbx
cmp byte [rax + rbx], 0
jne 0x140047e0d
push rax
pushf
mov eax, 0xa7ef85d
pushf
not eax
add eax, 0x9216db06
xor eax, 0x8dedc0b7
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xe1274691
xor eax, 0xeed75add
rol eax, 0xab
popf
pushf
not eax
add eax, 0xb5a6a87d
xor eax, 0xd60ffabe
rol eax, 0x63
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0xfad06d9b
pushf
not eax
add eax, 0xb65a8aab
xor eax, 0xd7ae2a5d
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x83fa6db1
xor eax, 0xdfe80d4d
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xc64d69a4
xor eax, 0x94937651
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa42d9ea9
xor eax, 0xf1b7af15
rol eax, 0x6a
popf
jmp 0x1400471df
lea rdx, [rbp + 0x300]
jmp 0x1400480fd
movabs rax, 0x5139c027f367a930
pushf
not rax
add rax, 0x400832d0
xor rax, 0x7c37fc75
rol rax, 4
popf
pushf
not rax
add rax, 0x6f2eb45a
xor rax, 0x638894e3
rol rax, 0xad
popf
pushf
not rax
add rax, 0x7bc33207
xor rax, 0x441f43f1
rol rax, 0x72
popf
pushf
not rax
add rax, 0x776aa8d6
xor rax, 0x7e471657
rol rax, 0x2b
popf
mov qword [rsp + 0x40], rax
movabs rax, 0x18011fa71c507c00
pushf
not rax
add rax, 0x5c440b39
xor rax, 0x53993dd1
rol rax, 0x71
popf
pushf
not rax
add rax, 0x7253496c
xor rax, 0x43fdaa34
rol rax, 0x6b
popf
mov qword [rsp + 0x48], rax
movabs rax, 0x5e5ca19b4b549ae7
pushf
not rax
add rax, 0x64225297
xor rax, 0x6b983f60
rol rax, 0x75
popf
pushf
not rax
add rax, 0x4284a983
xor rax, 0x78c4be30
rol rax, 3
popf
pushf
not rax
add rax, 0x725354a4
xor rax, 0x4f71488c
rol rax, 0xa9
popf
pushf
not rax
add rax, 0x4fa4eaba
xor rax, 0x68741f8d
rol rax, 9
popf
mov qword [rbp + 0x2e0], rax
movabs rax, 0xa84b11323861398d
pushf
not rax
add rax, 0x54c789a3
xor rax, 0x72f82ffd
rol rax, 0x22
popf
pushf
not rax
add rax, 0x58ea8a9f
xor rax, 0x49ad9b36
rol rax, 0xe6
popf
mov qword [rbp + 0x2e8], rax
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rsp + 0x40], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rbp + 0x1c8], r15
mov qword [rbp + 0x1d0], r15
lea rax, [rsp + 0x40]
nop dword [rax]
push rax
pushf
mov eax, 0x7dd4fdd2
pushf
not eax
add eax, 0xc26defb8
xor eax, 0xc5d57a9b
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xc4567dd0
xor eax, 0xfe973d69
rol eax, 0x9e
popf
jmp 0x1400471df
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400480c5
push rax
pushf
mov eax, 0xa6672c6
pushf
not eax
add eax, 0xe7fc4a60
xor eax, 0xcc36439f
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xc7cb340e
xor eax, 0xf6893105
rol eax, 0x8d
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x7df9f5d7
pushf
not eax
add eax, 0xfa76e1e5
xor eax, 0x950baad2
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x877a941c
xor eax, 0xaa4f1476
rol eax, 0x30
popf
jmp 0x1400471df
lea rdx, [rsp + 0x40]
mov r8, rbx
lea rcx, [rbp + 0x1b8]
call fcn.1400610eb
mov esi, 0x634efddd
pushf
not esi
add esi, 0xc53207da
xor esi, 0x9ba1a9e9
rol esi, 0x32
popf
pushf
not esi
add esi, 0xbdb7ace4
xor esi, 0x8a4efa52
rol esi, 0x88
popf
pushf
not esi
add esi, 0xa2c407f0
xor esi, 0x918a7e38
rol esi, 0x79
popf
lea rdx, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 0xf
cmova rdx, qword [rbp + 0x1b8]
mov r8, qword [rbp + 0x1c8]
lea rcx, [rbp + 0x1f0]
call fcn.140050871
nop
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 0xf
jbe 0x1400481ce
push rax
pushf
mov eax, 0x5a9e21b9
pushf
not eax
add eax, 0xc8c409c9
xor eax, 0xcf4135e5
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xb2a6015e
xor eax, 0xca55d49d
rol eax, 0x31
popf
pushf
not eax
add eax, 0xc15d47c0
xor eax, 0xaadd09e2
rol eax, 0x2e
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x1cda5a7
pushf
not eax
add eax, 0xd4b8cdc9
xor eax, 0xc7515f6a
rol eax, 0x50
popf
pushf
not eax
add eax, 0xffd310ea
xor eax, 0x8887ec2f
rol eax, 0x78
popf
jmp 0x1400471df
inc rdx
mov rcx, qword [rbp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004831d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140048289
push rax
pushf
mov eax, 0x28947199
pushf
not eax
add eax, 0xa6c0359c
xor eax, 0x9203474f
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x8b261235
xor eax, 0xfa8b16c0
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x8d502aec
xor eax, 0xb071648b
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xcaab41b2
xor eax, 0xdf51efeb
rol eax, 0x78
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0xca676b2
pushf
not eax
add eax, 0xc732fd08
xor eax, 0x8ad37b9f
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x8ac687f3
xor eax, 0x801c4310
rol eax, 0x45
popf
pushf
not eax
add eax, 0xfe1d5079
xor eax, 0xa3b9cee7
rol eax, 0xdb
popf
jmp 0x1400471df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004fd7d
mov rcx, r14
jmp 0x140048326
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140048494
lea rdx, [0x1bb1c9de4]
pushf
sub rdx, 0x7b1b9f2c
popf
lea rcx, [rbp + 0x1f0]
call fcn.14004bfd9
push rax
pushf
mov eax, 0xa2a8a7a3
pushf
not eax
add eax, 0xebceedce
xor eax, 0x86f8e3ed
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x8e61abff
xor eax, 0xc7f5f552
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xad4dd0c7
xor eax, 0xb7190ff4
rol eax, 0xfa
popf
jmp 0x1400471df
mov rcx, r14
jmp 0x1400483df
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140048494
lea rdx, [0x1a2d5093e]
pushf
sub rdx, 0x62d40a5e
popf
lea rcx, [rbp + 0x1f0]
call fcn.14004bfd9
push rax
pushf
mov eax, 0xcbd0c23f
pushf
not eax
add eax, 0xe4f215ce
xor eax, 0xed401735
rol eax, 0x64
popf
pushf
not eax
add eax, 0xe9531ba7
xor eax, 0xc3ce569f
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x9b7cc006
xor eax, 0xe66ae1a0
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x8db6c58d
xor eax, 0x8611f457
rol eax, 7
popf
jmp 0x1400471df
mov rcx, rdi
jmp 0x140048498
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x198], xmm0
mov qword [rbp + 0x1a8], r15
mov ecx, 0x438367c3
pushf
not ecx
add ecx, 0xd339cebf
xor ecx, 0xee619814
rol ecx, 0x51
popf
pushf
not ecx
add ecx, 0xbded7dbb
xor ecx, 0x99ee138f
rol ecx, 0x6f
popf
pushf
not ecx
add ecx, 0xb8b5bd8c
xor ecx, 0xe97ac454
rol ecx, 0
popf
pushf
not ecx
add ecx, 0xa795b510
xor ecx, 0x9d0c6047
rol ecx, 0xa1
popf
mov qword [rbp + 0x1b0], rcx
mov byte [rbp + 0x198], 0
or esi, 2
mov dword [rbp + 0x190], esi
movups xmmword [rbp + 0x2e0], xmm0
mov edx, dword [rbp + 0x268]
mov eax, edx
and al, 0x22
cmp al, 2
je 0x14004857b
push rax
pushf
mov eax, 0xa811e932
pushf
not eax
add eax, 0xed2498e7
xor eax, 0xe780720a
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x84f6fd65
xor eax, 0xf6e35668
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x94501bb2
xor eax, 0x9132ce4a
rol eax, 0x5c
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x9bd0eae9
pushf
not eax
add eax, 0x8541f980
xor eax, 0xa66577a5
rol eax, 0x44
popf
pushf
not eax
add eax, 0xfe625534
xor eax, 0xfd2fda28
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xa8d16249
xor eax, 0xa933f9be
rol eax, 0x25
popf
pushf
not eax
add eax, 0xafb929cc
xor eax, 0xa7691079
rol eax, 0x32
popf
jmp 0x1400471df
mov rax, qword [rbp + 0x238]
mov rbx, qword [rax]
test rbx, rbx
je 0x140048629
push rax
pushf
mov eax, 0x6c1b0c3c
pushf
not eax
add eax, 0xfb92f4c3
xor eax, 0xdd7ee8e2
rol eax, 4
popf
pushf
not eax
add eax, 0xdf112253
xor eax, 0xb695d10a
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xbee7eb8a
xor eax, 0x8b7bcb36
rol eax, 0xc
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0xd33201f2
pushf
not eax
add eax, 0xc9a9edf3
xor eax, 0x888e2555
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x9757ddd1
xor eax, 0x9f89ab25
rol eax, 0x17
popf
jmp 0x1400471df
mov rax, qword [rbp + 0x218]
mov r9, qword [rax]
cmp rbx, qword [rbp + 0x260]
cmovb rbx, qword [rbp + 0x260]
sub rbx, r9
mov rax, rbx
jmp 0x1400488d0
mov rax, r15
test dl, 4
jne 0x14004873a
push rax
pushf
mov eax, 0x76abf703
pushf
not eax
add eax, 0xb52febdf
xor eax, 0xb21e0ad2
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x82f38e5c
xor eax, 0xf2887560
rol eax, 2
popf
pushf
not eax
add eax, 0x91c37991
xor eax, 0xb7e6336a
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xffb13f15
xor eax, 0xec410da9
rol eax, 0x9f
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x64d2cac4
pushf
not eax
add eax, 0xb562f725
xor eax, 0xe921bd35
rol eax, 0x44
popf
pushf
not eax
add eax, 0xad3d5726
xor eax, 0xf715e434
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xbcb37caf
xor eax, 0xe9b40a6a
rol eax, 0x5e
popf
jmp 0x1400471df
mov rax, qword [rbp + 0x230]
mov rdx, qword [rax]
mov rax, r15
test rdx, rdx
je 0x1400487d8
push rax
pushf
mov eax, 0xfe6716dd
pushf
not eax
add eax, 0x89c34879
xor eax, 0xec08d09c
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xad1f346a
xor eax, 0xd972e140
rol eax, 0x71
popf
pushf
not eax
add eax, 0x8cbff593
xor eax, 0x83b810cd
rol eax, 0xf2
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x6128fed9
pushf
not eax
add eax, 0x94d396be
xor eax, 0xf8436ca3
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x9fbd9b5c
xor eax, 0xf7d07c12
rol eax, 0x3f
popf
jmp 0x1400471df
mov rax, qword [rbp + 0x210]
mov r9, qword [rax]
mov rax, qword [rbp + 0x248]
movsxd rbx, dword [rax]
push rdx
not rdx
sub rbx, rdx
pop rdx
sub rbx, 1
sub rbx, r9
mov rax, rbx
jmp 0x1400488d0
mov rbx, qword [rbp + 0x2e8]
mov r9, qword [rbp + 0x2e0]
push rax
pushf
mov eax, 0x707f345f
pushf
not eax
add eax, 0xc413e180
xor eax, 0xb2db9882
rol eax, 0x38
popf
pushf
not eax
add eax, 0xc42f0679
xor eax, 0x8742ef3f
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x87f825fa
xor eax, 0xe30e8395
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xa04ae3d4
xor eax, 0xbd4d33b9
rol eax, 0xa4
popf
jmp 0x1400471df
test r9, r9
je 0x140048908
push rax
pushf
mov eax, 0x64813fa2
pushf
not eax
add eax, 0xaaeb683d
xor eax, 0xf06b36f4
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xf3fbbedc
xor eax, 0xb2dd502d
rol eax, 0xc2
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0xc0ee3d1a
pushf
not eax
add eax, 0xe69b92c9
xor eax, 0xd8bcbf3e
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xfb45b439
xor eax, 0xbdf3b196
rol eax, 0xf8
popf
jmp 0x1400471df
cmp rax, rcx
lea rcx, [rbp + 0x198]
ja 0x14004897a
push rax
pushf
mov eax, 0xbf0e6fee
pushf
not eax
add eax, 0xfe90704e
xor eax, 0x949a62dc
rol eax, 0x85
popf
pushf
not eax
add eax, 0xf88f01cd
xor eax, 0x9582b113
rol eax, 0x1f
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x27a4647f
pushf
not eax
add eax, 0xc332db8a
xor eax, 0xab192bbb
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x95579380
xor eax, 0xe8f83bce
rol eax, 0x85
popf
pushf
not eax
add eax, 0x89507ff0
xor eax, 0x8768d704
rol eax, 0xea
popf
pushf
not eax
add eax, 0xd766bb36
xor eax, 0x948909f9
rol eax, 0xf5
popf
jmp 0x1400471df
mov qword [rbp + 0x1a8], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x198], 0
jmp 0x140048a73
mov rdx, rbx
call fcn.1400620c4
push rax
pushf
mov eax, 0xf57912b1
pushf
not eax
add eax, 0xa2a2d6ed
xor eax, 0xec04db0d
rol eax, 0x43
popf
pushf
not eax
add eax, 0xc4ff3e7d
xor eax, 0xbb9644d8
rol eax, 0xc1
popf
jmp 0x1400471df
mov rcx, qword [rbp + 0x1b0]
push rax
pushf
mov eax, 0xb3df2a
pushf
not eax
add eax, 0xaae9db89
xor eax, 0xe3b0b135
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x82405aa0
xor eax, 0x9ed729f6
rol eax, 0x67
popf
jmp 0x1400471df
cmp qword [rbp + 0x1a8], 0
jne 0x140048afd
push rax
pushf
mov eax, 0xe0924a86
pushf
not eax
add eax, 0xb82bf494
xor eax, 0xe1add335
rol eax, 0x99
popf
pushf
not eax
add eax, 0xafdbb685
xor eax, 0x91f81889
rol eax, 0x85
popf
pushf
not eax
add eax, 0xd23d8f21
xor eax, 0xff508bab
rol eax, 0x54
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x2ce04e99
pushf
not eax
add eax, 0x9e70f4b8
xor eax, 0x9f7fa71d
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xf2f5438b
xor eax, 0xf7398363
rol eax, 0xc0
popf
jmp 0x1400471df
cmp rcx, 0x12
jb 0x140048b69
push rax
pushf
mov eax, 0xbb4ff606
pushf
not eax
add eax, 0xd8340103
xor eax, 0xacf1bae0
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xb13d659b
xor eax, 0xada76278
rol eax, 0x1e
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x8859d360
pushf
not eax
add eax, 0xa9a83a9e
xor eax, 0xd8c6f3b9
rol eax, 0x48
popf
pushf
not eax
add eax, 0xcef70042
xor eax, 0xc328aeec
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xdc43e912
xor eax, 0x80ae36fa
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x81370b19
xor eax, 0xdb4cb5f5
rol eax, 0x52
popf
jmp 0x1400471df
lea rbx, [rbp + 0x198]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x198]
mov qword [rbp + 0x1a8], 0x12
mov r8d, 0x7762fae7
pushf
not r8d
add r8d, 0xf1f9062e
xor r8d, 0x8d3b77e7
rol r8d, 0x18
popf
pushf
not r8d
add r8d, 0xc8df35f6
xor r8d, 0xb677e3a7
rol r8d, 0xa9
popf
pushf
not r8d
add r8d, 0xd4af4647
xor r8d, 0xb3d5c925
rol r8d, 0x53
popf
lea rdx, [0x198f5b528]
pushf
sub rdx, 0x58f4b6a8
popf
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x12], 0
jmp 0x140048d42
lea r9, [0x1a5c08fc3]
pushf
sub r9, 0x65bf9143
popf
mov edx, 0xc92fd669
pushf
not edx
add edx, 0xdbd5097b
xor edx, 0xdbeed62d
rol edx, 0x80
popf
pushf
not edx
add edx, 0xcbb76564
xor edx, 0xe1170c7c
rol edx, 0xbf
popf
pushf
not edx
add edx, 0xbab62a3b
xor edx, 0xc8f6c40d
rol edx, 0x34
popf
lea rcx, [rbp + 0x198]
call fcn.1400620c4
push rax
pushf
mov eax, 0xb6f5fdc6
pushf
not eax
add eax, 0xa6f62b59
xor eax, 0xddb54b1f
rol eax, 0x84
popf
pushf
not eax
add eax, 0x8bd8f157
xor eax, 0xb08282c4
rol eax, 0x3a
popf
jmp 0x1400471df
mov rcx, qword [rbp + 0x1a8]
inc rcx
call fcn.1400783d9
mov rbx, rax
lea r8, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 0xf
cmova r8, qword [rbp + 0x198]
mov rdx, qword [rbp + 0x1a8]
inc rdx
mov rcx, rax
jmp 0x140048d79
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x140048de6
push rax
pushf
mov eax, 0x5ed02740
pushf
not eax
add eax, 0xa2ca440a
xor eax, 0xf36108da
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xc69795d2
xor eax, 0xcc6aba32
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xcd89d262
xor eax, 0xcd6646ff
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xc245c655
xor eax, 0x895d1c02
rol eax, 0x4f
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x8b93b5bf
pushf
not eax
add eax, 0xf601f5c5
xor eax, 0xab90c900
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xff3d7b53
xor eax, 0x94ba9a53
rol eax, 0xe8
popf
jmp 0x1400471df
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048e75
push rax
pushf
mov eax, 0xda2f7926
pushf
not eax
add eax, 0xb4113845
xor eax, 0xe72a2d14
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xb73edb13
xor eax, 0xd486b2fe
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x9a5e0074
xor eax, 0xf16867e3
rol eax, 0x7b
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x4a012f1e
pushf
not eax
add eax, 0xcbe2ef50
xor eax, 0x80a053b3
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x99f3be78
xor eax, 0x9aa4a86c
rol eax, 0xca
popf
pushf
not eax
add eax, 0xb8f8ae21
xor eax, 0x849471d3
rol eax, 0x73
popf
jmp 0x1400471df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140048f15
push rax
pushf
mov eax, 0x45ae61e7
pushf
not eax
add eax, 0xd5f36ffa
xor eax, 0xcff440a6
rol eax, 0x42
popf
pushf
not eax
add eax, 0xe6f02c1f
xor eax, 0xecd67a4f
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xd084e81f
xor eax, 0xba7fde33
rol eax, 1
popf
jmp 0x1400471df
push rax
pushf
mov eax, 0x93a0a6ef
pushf
not eax
add eax, 0xbd5e55e0
xor eax, 0xcaa07ceb
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xafc46394
xor eax, 0xe000b95a
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x9d5f51e6
xor eax, 0xf8e210e6
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x9d022a2f
xor eax, 0xda270c4d
rol eax, 0xb2
popf
jmp 0x1400471df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004fd7d
push rax
pushf
mov eax, 0xcf6cb87d
pushf
not eax
add eax, 0xd41af6b5
xor eax, 0x83dbb2cc
rol eax, 0x46
popf
pushf
not eax
add eax, 0xb5d4e7ae
xor eax, 0xa9a286a3
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xf6c34836
xor eax, 0xf2d77258
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xd7cd7048
xor eax, 0xf9b6a52c
rol eax, 0xcd
popf
jmp 0x1400471df
mov qword [rbp + 0x1a8], r15
mov qword [rbp + 0x1b0], 0xf
mov byte [rbp + 0x198], 0
mov rcx, qword [rbp + 0x1e0]
movsxd rdx, dword [rcx + 4]
lea rax, [0x18652028f]
pushf
sub rax, 0x465100b7
popf
mov qword [rbp + rdx + 0x1e0], rax
mov rcx, qword [rbp + 0x1e0]
movsxd rdx, dword [rcx + 4]
lea r8d, [rdx - 0x98]
mov dword [rbp + rdx + 0x1dc], r8d
lea rcx, [rbp + 0x1f8]
call fcn.14007f94c
lea rcx, [rbp + 0x200]
jmp 0x140049085
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x278]
jmp 0x140049093
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rax, rbx
mov rcx, qword [rbp + 0x620]
xor rcx, rsp
call fcn.14006545d
lea r11, [rsp + 0x730]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret