Function at 0x1400078f0
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x5f0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1402e6100]
xor rax, rsp
mov qword [rbp + 0x5a0], rax
movabs r15, 0x40fca161da9ee67e
movabs r9, 0xf990987733336398
mov qword [rbp], r9
movabs r11, 0xf9f19812335b63fb
mov rax, qword [rbp]
movabs r8, 0xecabc78181fdfef8
mov qword [rbp + 0x4e0], rax
movabs r13, 0xecccc7ef8198fe8c
mov qword [rbp], r8
movabs rdx, 0xe874cad1013d3bd4
mov rax, qword [rbp]
movabs r12, 0xe859cab401533bbd
mov qword [rbp + 0x4e8], rax
movabs rcx, 0x40a3a157daa6e606
mov qword [rbp], rdx
movabs r14, 0x4d89577679fa31ff
mov rax, qword [rbp]
movabs rsi, 0x1bc60f83c4a709d0
mov qword [rbp + 0x4f0], rax
movabs r10, 0xe859cad1012b3bd8
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
movabs rax, 0x4dec575879ce31c9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
movabs rax, 0x1bc60f83c4c209a8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x4a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4e0]
vmovdqa xmm2, xmmword [rbp + 0x500]
mov qword [rbp + 0x4c8], rax
lea rax, [rbp + 0x4e0]
vxorps xmm2, xmm2, xmmword [rbp + 0x4c0]
mov qword [rbp + 0x520], rax
movabs rax, 0xf988987e33376394
vmovdqa ymmword [rbp + 0x4e0], ymm1
vmovdqa xmmword [rbp + 0x500], xmm2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xece2c78881fafee8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
movabs rdi, 0xf9c79873333f6392
mov qword [rbp + 0x4f8], rax
movabs rbx, 0xecb4c78a81b6feb8
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
vmovdqu ymmword [rbp + 0x4a0], ymm1
lea rax, [rbp + 0x4a0]
mov qword [rbp + 0x528], rax
movabs rax, 0xf9df9873333f6392
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
movabs rax, 0xecccc78a81e0fee9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r11
movabs r11, 0xe859cab401533bd8
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
vmovdqa xmm0, xmmword [rbp + 0x4e0]
mov qword [rbp + 0x4a8], rax
lea rax, [rbp + 0x4e0]
vxorps xmm0, xmm0, xmmword [rbp + 0x4a0]
mov qword [rbp + 0x530], rax
vmovdqa xmmword [rbp + 0x4e0], xmm0
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movabs rax, 0xf9f19812335b63fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
lea rax, [rbp + 0x4a0]
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
mov qword [rbp + 0x538], rax
movabs rax, 0xf9909876333a6389
vmovdqu ymmword [rbp + 0x4a0], ymm1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xece2c7dd81fdfefe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movabs rax, 0xf9f19812335b63fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
lea rax, [rbp + 0x4a0]
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
mov qword [rbp + 0x540], rax
movabs rax, 0xf9959826336d6383
vmovdqu ymmword [rbp + 0x4a0], ymm1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xeca9c7c181fffeee
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
movabs rax, 0xe859cab401363bc5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movabs rax, 0xf9f19812335b63fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
lea rax, [rbp + 0x4a0]
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
mov qword [rbp + 0x548], rax
vmovdqu ymmword [rbp + 0x4a0], ymm1
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], r8
movabs r8, 0xf9f19812335b63fb
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], rcx
movabs rcx, 0x1238e7451aeb5c92
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movabs rax, 0x4dda575b79ce31c9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
movabs rax, 0x1beb0fb7c4e20983
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
movabs rax, 0x7d228170be709ec0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x4d8], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
movabs rax, 0x7d108128be269e81
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
vmovdqu ymm0, ymmword [rbp + 0x4c0]
mov qword [rbp + 0x518], rax
lea rax, [rbp + 0x4a0]
mov qword [rbp + 0x550], rax
movabs rax, 0xf9a8985e331763b4
vmovdqa ymmword [rbp + 0x4a0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x500]
vmovdqa ymmword [rbp + 0x4c0], ymm1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xece2c7a881dafec8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
movabs rax, 0xe859caf1010b3bf8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
lea rax, [rbp + 0x4a0]
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
mov qword [rbp + 0x558], rax
movabs rax, 0xf9839873333363b8
vmovdqu ymmword [rbp + 0x4a0], ymm1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xece2c79c81fdfee0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
movabs rcx, 0x4d895776799f3187
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
vmovdqu ymmword [rbp + 0x4a0], ymm1
lea rax, [rbp + 0x4a0]
mov qword [rbp + 0x560], rax
movabs rax, 0xf9949860333263ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xecbec78e81f0feff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
movabs rax, 0xe821cad1017d3bd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
movabs rax, 0x40fca161da9ee61b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
lea rax, [rbp + 0x4a0]
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
mov qword [rbp + 0x568], rax
movabs rax, 0xf9a19846330f63b3
vmovdqu ymmword [rbp + 0x4a0], ymm1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
movabs rax, 0xecb9c78d81fdfec8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movabs rax, 0xe82bcad101343bda
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
movabs rax, 0x4099a14fdad7e62b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x4a0]
mov qword [rbp + 0x4c8], rax
vpxor ymm1, ymm0, ymmword [rbp + 0x4e0]
vmovdqa xmm2, xmmword [rbp + 0x500]
lea rax, [rbp + 0x4e0]
vxorps xmm2, xmm2, xmmword [rbp + 0x4c0]
mov qword [rbp + 0x570], rax
vmovdqa ymmword [rbp + 0x4e0], ymm1
vmovdqa xmmword [rbp + 0x500], xmm2
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
lea rax, [rbp + 0x4a0]
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
mov qword [rbp + 0x578], rax
movabs rax, 0xf9849856332863b0
vmovdqu ymmword [rbp + 0x4a0], ymm1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
movabs rax, 0xecbec78a81e8fee1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movabs rax, 0xe83ccadd013f3bfe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
movabs rax, 0x4099a14fdaeae610
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x4a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4e0]
vmovdqa xmm2, xmmword [rbp + 0x500]
mov qword [rbp + 0x4c8], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x4c0]
vmovdqa ymmword [rbp + 0x4e0], ymm1
vmovdqa xmmword [rbp + 0x500], xmm2
lea rax, [rbp + 0x4e0]
mov qword [rbp + 0x580], rax
movabs rdx, 0xf99d986b333863a8
movabs rax, 0xf992987d332963ab
movabs rcx, 0xecb4c7b081f9fee0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
movabs rax, 0xec84c79c81ebfee9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movabs rax, 0xe83ccadf01303bdc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
movabs rax, 0x4084a104dab0e60c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
movabs rax, 0x4d89577679fa319a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x4a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4e0]
vmovdqa xmm2, xmmword [rbp + 0x500]
mov qword [rbp + 0x4c8], rax
lea rax, [rbp + 0x4e0]
vxorps xmm2, xmm2, xmmword [rbp + 0x4c0]
mov qword [rbp + 0x588], rax
vmovdqa ymmword [rbp + 0x4e0], ymm1
vmovdqa xmmword [rbp + 0x500], xmm2
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
movabs rax, 0xe859cab401653b85
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
vmovdqu ymmword [rbp + 0x4a0], ymm1
lea rax, [rbp + 0x4a0]
mov qword [rbp + 0x590], rax
mov qword [rbp], rdx
xor edx, edx
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], rcx
lea rcx, [rbp + 0x254]
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
movabs rax, 0xe859cab401673b8b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
mov qword [rbp], r8
mov r8d, 0x234
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
lea rax, [rbp + 0x4a0]
vmovdqu ymm0, ymmword [rbp + 0x4e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
vmovdqu ymmword [rbp + 0x4a0], ymm1
mov qword [rbp + 0x598], rax
vzeroupper
call fcn.1400c80a0
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
xor edx, edx
mov dword [rbp + 0x10], 0x238
mov r8d, 0x234
lea rcx, [rbp + 0x14]
mov rdi, rax
call fcn.1400c80a0
lea rcx, [rbp + 0x250]
mov edx, 4
lea rax, [rbp + 0x10]
nop
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140008760
movups xmm0, xmmword [rax]
lea rdx, [rbp + 0x250]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rax + 0x20]
mov rax, qword [rax + 0x30]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx + 0x20], xmm0
mov qword [rcx + 0x30], rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
jne 0x140008860
movabs rax, 0xf9f1b6665a3743b2
lea rcx, [rbp + 0x4e0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movabs rax, 0xf9f19812335b63fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x4e0]
mov qword [rbp + 0x4a8], rax
xorps xmm0, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x4e0], xmm0
call fcn.140005390
jmp 0x1400088a3
lea rbx, [rbp + 0x520]
nop word [rax + rax]
mov rcx, qword [rbx]
lea rdx, [rbp + 0x27c]
call fcn.14009fcc8
lea rax, [rbp + 0x5a0]
add rbx, 8
cmp rbx, rax
jne 0x140008870
lea rdx, [rbp + 0x250]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140008860
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x5a0]
xor rcx, rsp
call fcn.1400998e0
lea r11, [rsp + 0x5f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret