Function at 0x140033230
Capabilities:
Enumerate processes

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x710
vmovaps xmmword [rax - 0x48], xmm6
vmovaps xmmword [rax - 0x58], xmm7
vmovaps xmmword [rax - 0x68], xmm8
vmovaps xmmword [rax - 0x78], xmm9
vmovaps xmmword [rax - 0x88], xmm10
vmovaps xmmword [rax - 0x98], xmm11
vmovaps xmmword [rax - 0xa8], xmm12
vmovaps xmmword [rax - 0xb8], xmm13
vmovaps xmmword [rax - 0xc8], xmm14
mov r14, rcx
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
mov edx, 2
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
xor r12d, r12d
lea rcx, str..f8241d69_4464_47e6_8627_b3bcce202271
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x14025ce00], rax
movabs rcx, 0x14df7e85945483eb
mov qword [rsp + 0x158], rcx
xor edx, edx
movabs rax, 0xae1d945232ebce76
mov qword [rsp + 0x1d8], rcx
mov qword [rsp + 0x190], rax
mov ecx, 2
movabs rax, 0x399be0ada6c42263
mov qword [rsp + 0x198], rax
movabs rax, 0x6c362ee4b697e7b8
mov qword [rsp + 0x1a0], rax
movabs rax, 0xac16d707de0e6b1d
mov qword [rsp + 0x1a8], rax
movabs rax, 0xc17dda2e6f030b5a
mov qword [rsp + 0x1b0], rax
movabs rax, 0x818e9899e0b682a7
mov qword [rsp + 0x1b8], rax
movabs rax, 0xa9b90c0c24a995c
mov qword [rsp + 0x1c0], rax
movabs rax, 0x23acb6539d0c6b21
mov qword [rsp + 0x1c8], rax
movabs rax, 0x372f944aff60a9de
mov qword [rsp + 0x1d0], rax
movabs rax, 0xae6994203284ce30
mov qword [rsp + 0x110], rax
movabs rax, 0x39fee0d9a6ad220d
mov qword [rsp + 0x118], rax
movabs rax, 0x6c532e8db6fbe7fb
vmovdqu xmm0, xmmword [rsp + 0x110]
vpxor xmm0, xmm0, xmmword [rsp + 0x190]
mov qword [rsp + 0x120], rax
movabs rax, 0xac41d72ade7a6b73
mov qword [rsp + 0x128], rax
movabs rax, 0xc149da186f6d0b33
vmovdqu xmm1, xmmword [rsp + 0x120]
vpxor xmm1, xmm1, xmmword [rsp + 0x1a0]
mov qword [rsp + 0x130], rax
movabs rax, 0x81e798f1e0e5828a
mov qword [rsp + 0x138], rax
movabs rax, 0xaf590a9c23a992c
vmovdqu xmm2, xmmword [rsp + 0x130]
mov qword [rsp + 0x140], rax
movabs rax, 0x23d4b6369d226b46
mov qword [rsp + 0x148], rax
movabs rax, 0x372f944aff60a9bb
vmovdqu xmm3, xmmword [rsp + 0x140]
vmovdqu xmmword [rsp + 0x110], xmm0
vpxor xmm0, xmm2, xmmword [rsp + 0x1b0]
mov qword [rsp + 0x150], rax
vmovdqu xmm4, xmmword [rsp + 0x150]
vmovdqu xmmword [rsp + 0x120], xmm1
vpxor xmm1, xmm3, xmmword [rsp + 0x1c0]
vmovdqu xmmword [rsp + 0x130], xmm0
vpxor xmm0, xmm4, xmmword [rsp + 0x1d0]
vmovdqu xmmword [rsp + 0x150], xmm0
vmovdqu xmmword [rsp + 0x140], xmm1
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov ebx, r12d
cmp rax, 0xffffffffffffffff
je 0x140033598
xor edx, edx
lea rcx, [rsp + 0x444]
mov r8d, 0x234
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x440]
mov dword [rsp + 0x440], 0x238
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140033585
lea rdx, [rsp + 0x46c]
lea rcx, [rsp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14003352d
mov ebx, dword [rsp + 0x448]
jmp 0x140033585
lea rdx, [rsp + 0x440]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x140033585
nop dword [rax]
nop word [rax + rax]
lea rdx, [rsp + 0x46c]
lea rcx, [rsp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
lea rdx, [rsp + 0x440]
mov rcx, rdi
test eax, eax
cmove ebx, dword [rsp + 0x448]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140033550
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140033598
mov dword [0x14025ca88], ebx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.process_id___
call fcn.140001d80
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140001f40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, dword [0x14025ca88]
xor r9d, r9d
mov rcx, qword [0x14025ce00]
xor r8d, r8d
mov dword [rsp + 0x60], eax
xor edx, edx
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
lea rax, [rsp + 0x60]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x50]
mov dword [rsp + 0x38], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xf8]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x64], r12d
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov dword [rsp + 0x50], r12d
mov dword [rsp + 0x54], 2
call fcn.14008d640
mov rax, qword [rsp + 0x68]
mov ecx, ebx
mov qword [0x14025ce08], rax
call fcn.1400019c0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.image_base___
mov qword [0x14025ca28], rax
call fcn.140001d80
mov rdx, qword [0x14025ce08]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140001f40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.dtb___
call fcn.140001d80
mov rdx, qword [0x14025ca28]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x140001f40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edi, r12d
mov esi, r12d
nop dword [rax + rax]
movsxd rcx, esi
add rcx, qword [0x14025ce08]
mov qword [0x14025cfe0], rcx
add rcx, 0x11fd3d78
call fcn.140035060
mov rbx, rax
lea rcx, [rax + 0x30]
call fcn.140035060
test rbx, rbx
je 0x140033714
test rax, rax
je 0x140033714
lea rcx, [rax + 0xc0]
call fcn.140035060
cmp rax, rbx
je 0x140033724
inc edi
add esi, 0x1000
cmp edi, 0x7fffffff
jl 0x1400336d0
mov rdx, qword [0x14025cfe0]
lea rcx, str.va_text:_0x_llx_n
call fcn.140032560
mov rdx, qword [0x14025cfe0]
lea rcx, str.va_text___base:_0x_llx_n
sub rdx, qword [0x14025ce08]
call fcn.140032560
vmovdqu xmm13, xmmword [0x14019c1d0]
vmovdqu xmm12, xmmword [0x14019c1a0]
vmovdqu xmm11, xmmword [0x14019c330]
vmovdqu xmm10, xmmword [0x14019c290]
vmovdqu xmm8, xmmword [0x14019c240]
vmovdqu xmm9, xmmword [0x14019c2b0]
movabs r13, 0x7fffffffee1e5cff
vxorps xmm14, xmm14, xmm14
vxorpd xmm7, xmm7, xmm7
jmp 0x1400337b0
mov r14, qword [rsp + 0x750]
nop dword [rax + rax]
mov eax, dword [0x14025ca88]
xor r9d, r9d
mov rcx, qword [0x14025cfe0]
xor r8d, r8d
mov dword [rsp + 0x60], eax
add rcx, 0x11fd3d78
mov rax, qword [0x14025ca28]
xor edx, edx
mov qword [rsp + 0x70], rax
mov r15, r12
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
lea rax, [rsp + 0x758]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x200], rax
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x1f8]
mov dword [rsp + 0x38], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3a0]
vpxor xmm0, xmm0, xmm0
mov qword [rsp + 0x68], rcx
mov rcx, qword [0x14025ce00]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rax
vmovdqu xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x768], r12
mov qword [rsp + 0x1f0], r12
mov qword [rsp + 0x758], r12
mov dword [rsp + 0x64], r12d
mov qword [rsp + 0x80], 8
mov dword [rsp + 0x1f8], r12d
mov dword [rsp + 0x1fc], 4
call fcn.14008d640
mov rdx, qword [rsp + 0x758]
mov qword [r14 + 0xc8], rdx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, reloc.WS2_32.dll_ioctlsocket
call fcn.140001d80
mov rcx, qword [r14 + 0xc8]
test rcx, rcx
je 0x1400337b0
mov eax, dword [0x14025ca88]
xor r9d, r9d
mov dword [rsp + 0x328], eax
xor r8d, r8d
mov rax, qword [0x14025ca28]
xor edx, edx
mov qword [rsp + 0x338], rax
lea rax, [rcx + 0x160]
mov rcx, qword [0x14025ce00]
mov qword [rsp + 0x330], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x340], rax
lea rax, [rsp + 0x328]
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
mov qword [rsp + 0x210], rax
lea rax, [rsp + 0x208]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x208]
mov dword [rsp + 0x38], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3b0]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xc8], r12
mov dword [rsp + 0x32c], r12d
mov qword [rsp + 0x348], 8
mov dword [rsp + 0x208], r12d
mov dword [rsp + 0x20c], 4
call fcn.14008d640
mov rbx, qword [rsp + 0xc8]
test rbx, rbx
je 0x1400337b0
mov rcx, qword [r14 + 0xc8]
xor r9d, r9d
mov eax, dword [0x14025ca88]
xor r8d, r8d
mov dword [rsp + 0x350], eax
xor edx, edx
mov rax, qword [0x14025ca28]
mov qword [rsp + 0x360], rax
lea rax, [rcx + 0x1d8]
mov rcx, qword [0x14025ce00]
mov qword [rsp + 0x358], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x368], rax
lea rax, [rsp + 0x350]
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
mov qword [rsp + 0x220], rax
lea rax, [rsp + 0x218]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x218]
mov dword [rsp + 0x38], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3c0]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xd0], r12
mov dword [rsp + 0x354], r12d
mov qword [rsp + 0x370], 8
mov dword [rsp + 0x218], r12d
mov dword [rsp + 0x21c], 4
call fcn.14008d640
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x1400337b0
add rcx, 0x38
call fcn.140035060
test rax, rax
je 0x140033b66
mov ecx, dword [0x14025ca88]
xor r9d, r9d
mov qword [rsp + 0x380], rax
xor r8d, r8d
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x390], rax
xor edx, edx
mov dword [rsp + 0x378], ecx
lea rax, [rsp + 0x378]
mov rcx, qword [0x14025ca28]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x228]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x228]
mov dword [rsp + 0x38], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3d0]
mov qword [rsp + 0x388], rcx
mov rcx, qword [0x14025ce00]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xd8], r12
mov dword [rsp + 0x37c], r12d
mov qword [rsp + 0x398], 8
mov dword [rsp + 0x228], r12d
mov dword [rsp + 0x22c], 4
call fcn.14008d640
mov rcx, qword [rsp + 0xd8]
jmp 0x140033b69
mov rcx, r12
mov eax, dword [0x14025ca88]
xor r9d, r9d
mov dword [rsp + 0x60], eax
xor r8d, r8d
mov rax, qword [0x14025ca28]
xor edx, edx
mov qword [rsp + 0x70], rax
lea rax, [rcx + 0x30]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x758]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x60]
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
mov qword [rsp + 0x240], rax
lea rax, [rsp + 0x238]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x238]
mov dword [rsp + 0x38], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3e0]
mov qword [r14 + 0xd0], rcx
mov rcx, qword [0x14025ce00]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x758], r12
mov dword [rsp + 0x64], r12d
mov qword [rsp + 0x80], 8
mov dword [rsp + 0x238], r12d
mov dword [rsp + 0x23c], 4
call fcn.14008d640
mov rcx, qword [rsp + 0x758]
xor r9d, r9d
mov eax, dword [0x14025ca88]
xor r8d, r8d
mov dword [rsp + 0x190], eax
xor edx, edx
mov rax, qword [0x14025ca28]
mov qword [rsp + 0x1a0], rax
lea rax, [rcx + 0x338]
mov qword [rsp + 0x198], rax
lea rax, [rsp + 0x760]
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0x190]
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
mov qword [rsp + 0x250], rax
lea rax, [rsp + 0x248]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x248]
mov dword [rsp + 0x38], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3f0]
mov qword [r14 + 0xd8], rcx
mov rcx, qword [0x14025ce00]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x760], r12
mov dword [rsp + 0x194], r12d
mov qword [rsp + 0x1b0], 8
mov dword [rsp + 0x248], r12d
mov dword [rsp + 0x24c], 4
call fcn.14008d640
mov rcx, qword [rsp + 0x760]
mov eax, dword [0x14025ca88]
mov dword [rsp + 0x110], eax
mov rax, qword [0x14025ca28]
mov qword [rsp + 0x120], rax
lea rax, [rcx + 0x2b0]
mov qword [rsp + 0x118], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x110]
mov qword [rsp + 0x260], rax
lea rax, [rsp + 0x258]
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
mov qword [rsp + 0x40], rax
mov qword [r14 + 0xe8], rcx
mov qword [rsp + 0x88], r12
mov dword [rsp + 0x114], r12d
mov qword [rsp + 0x130], 8
mov dword [rsp + 0x258], r12d
mov dword [rsp + 0x25c], 4
mov rcx, qword [0x14025ce00]
lea rax, [rsp + 0x258]
mov dword [rsp + 0x38], reloc.WS2_32.dll_recv
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
lea rax, [rsp + 0x400]
mov dword [rsp + 0x28], r12d
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.14008d640
mov rcx, qword [rsp + 0x88]
add rcx, 0x1201
call fcn.140001cd0
lea rcx, [rbx + 0x2c8]
mov byte [r14 + 0xf8], al
call fcn.140032450
mov eax, dword [0x14025ca88]
xor r9d, r9d
mov rcx, qword [0x14025ce00]
xor r8d, r8d
mov dword [rsp + 0x110], eax
xor edx, edx
mov rax, qword [0x14025ca28]
mov qword [rsp + 0x120], rax
lea rax, [rbx + 0x2a8]
mov qword [rsp + 0x118], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x110]
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
mov qword [rsp + 0x270], rax
lea rax, [rsp + 0x268]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x268]
mov dword [rsp + 0x38], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x410]
vpxor xmm1, xmm1, xmm1
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rax
vmovaps xmm6, xmm0
vmovups xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x114], r12d
mov qword [rsp + 0x130], reloc.WS2_32.dll_recv
mov dword [rsp + 0x268], r12d
mov dword [rsp + 0x26c], 4
call fcn.14008d640
vucomiss xmm6, xmm14
jne 0x140033ed6
mov al, 1
jmp 0x140033ed8
xor al, al
mov byte [r14 + 0x108], al
mov ebx, r12d
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x760], ebx
test eax, eax
je 0x1400346dd
cmp dword [rsp + 0x5c], 0
je 0x1400346c2
vpxor xmm0, xmm0, xmm0
vpxor xmm1, xmm1, xmm1
xor eax, eax
mov qword [rsp + 0x2d8], r12
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x2b0], rax
vmovups xmmword [rsp + 0x2c8], xmm1
vmovups xmmword [rsp + 0xa8], xmm0
lea ecx, [rbx*8]
mov byte [rsp + 0x2c8], al
add rcx, qword [rsp + 0x50]
mov esi, edi
mov byte [rsp + 0xa8], al
vmovsd qword [rsp + 0x2e8], xmm7
vmovups ymmword [rsp + 0x290], ymm0
vmovups xmmword [rsp + 0x2b8], xmm0
mov qword [rsp + 0x2e0], rdi
vmovupd xmmword [rsp + 0x2f0], xmm0
vmovups xmmword [rsp + 0x98], xmm1
mov qword [rsp + 0xb8], r12
mov qword [rsp + 0xc0], rdi
vzeroupper
call fcn.140035060
mov ecx, dword [0x14025ca88]
mov r13, rax
mov qword [rsp + 0x300], rax
xor edx, edx
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
xor r9d, r9d
mov dword [rsp + 0x110], ecx
xor r8d, r8d
mov rcx, qword [0x14025ca28]
mov qword [rsp + 0x120], rcx
lea rcx, [rax + 0x308]
lea rax, [rsp + 0x88]
mov qword [rsp + 0x118], rcx
mov rcx, qword [0x14025ce00]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x110]
mov qword [rsp + 0x280], rax
lea rax, [rsp + 0x278]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x278]
mov dword [rsp + 0x38], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x420]
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x88], rdx
mov dword [rsp + 0x114], edx
mov qword [rsp + 0x130], 8
mov dword [rsp + 0x278], edx
mov dword [rsp + 0x27c], 4
call fcn.14008d640
cmp byte [r14 + 0x108], 0
mov r15, qword [rsp + 0x88]
jne 0x14003462e
cmp byte [0x14025cf11], 0
jne 0x140034098
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14003462e
vmovups xmm0, xmmword [0x14025cfd0]
lea rax, [r13 - 0x400001]
movabs rcx, 0x7fffffffffbffffe
vmovups xmmword [0x14025cfe8], xmm0
cmp rax, rcx
ja 0x14003462e
lea rcx, [r15 + 0x9d8]
mov qword [rsp + 0xe0], 0
mov r8d, 8
lea rdx, [rsp + 0xe0]
call fcn.140001a40
mov rcx, qword [rsp + 0xe0]
movabs rdx, 0x7fffffffffbffffe
mov qword [r14 + 0xf0], rcx
lea rax, [rcx - 0x400001]
cmp rax, rdx
ja 0x14003462e
add rcx, 0xeec
call fcn.140035100
mov rcx, qword [r14 + 0xf0]
mov r13d, eax
add rcx, 0x1c8
mov dword [rsp + 0x98], eax
call fcn.140035100
mov rcx, qword [r14 + 0xf0]
lea rdx, [rsp + 0xe8]
xor edi, edi
mov dword [rsp + 0x9c], eax
add rcx, 0x510
mov qword [rsp + 0xe8], rdi
mov r8d, 8
call fcn.140001a40
mov rbx, qword [rsp + 0xe8]
movabs rax, 0x7fffffffffbffffe
lea rcx, [rbx - 0x400001]
cmp rcx, rax
ja 0x1400345c5
lea rcx, [rbx + 0x9a]
call fcn.140001cd0
movzx eax, al
mov byte [rsp + 0xa0], al
cmp eax, 6
ja case.default.0x1400341ba
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x34c30]
add rcx, rdx
jmp rcx
vmovups xmmword [0x14025cfe8], xmm8
jmp case.default.0x1400341ba
vmovups xmmword [0x14025cfe8], xmm9
jmp case.default.0x1400341ba
vmovups xmmword [0x14025cfe8], xmm10
jmp case.default.0x1400341ba
vmovups xmmword [0x14025cfe8], xmm11
jmp case.default.0x1400341ba
vmovups xmmword [0x14025cfe8], xmm12
jmp case.default.0x1400341ba
vmovups xmmword [0x14025cfe8], xmm13
lea rcx, [rbx + 0x40]
mov qword [rsp + 0xf0], rdi
mov r8d, 8
lea rdx, [rsp + 0xf0]
call fcn.140001a40
mov rbx, qword [rsp + 0xf0]
movabs rcx, 0x7fffffffffbffffe
lea rax, [rbx - 0x400001]
cmp rax, rcx
ja 0x1400345c5
lea rcx, [rbx + 0x28]
call fcn.140035060
lea rcx, [rbx + 0x30]
mov r14, rax
call fcn.140035100
test eax, eax
jle 0x1400345bd
cmp eax, 0x32
jge 0x1400345bd
movsxd rbx, eax
mov rcx, 0xffffffffffffffff
mov eax, 2
mul rbx
cmovb rax, rcx
mov rcx, rax
call fcn.14015ec68
lea r8, [rbx + rbx]
mov rdx, rax
mov rcx, r14
mov rdi, rax
call fcn.140001a40
mov rdx, rdi
lea rcx, [rsp + 0x308]
call fcn.140034cc0
cmp qword [rsp + 0x320], 7
lea rdx, [rsp + 0x308]
mov rax, qword [rsp + 0x318]
lea r9, [rsp + 0x758]
cmova rdx, qword [rsp + 0x308]
lea rcx, [rsp + 0x60]
lea r8, [rdx + rax*2]
lea rdx, [rsp + 0x308]
cmova rdx, qword [rsp + 0x308]
call fcn.140035230
lea rcx, [rsp + 0xa8]
cmp rcx, rax
je 0x140034326
vmovups ymm1, ymmword [rax]
vextractf128 xmm0, ymm1, 1
vmovups ymmword [rsp + 0xa8], ymm1
vextractf128 xmm1, ymm1, 1
mov qword [rax + 0x18], rsi
vmovq r12, xmm1
mov qword [rax + 0x10], 0
mov byte [rax], 0
vpextrq rsi, xmm0, 1
mov r8, qword [rsp + 0x78]
cmp r8, 0xf
jbe 0x140034343
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x60]
vzeroupper
call fcn.140001c50
mov r14, qword [rsp + 0x750]
cmp r15, qword [r14 + 0xe8]
jne 0x1400343a0
lea rcx, [r14 + 0x160]
lea rax, [rsp + 0xa8]
cmp rcx, rax
je 0x1400343a0
cmp rsi, 0xf
lea rdx, [rsp + 0xa8]
mov r8, r12
cmova rdx, qword [rsp + 0xa8]
vzeroupper
call fcn.140031340
mov rsi, qword [rsp + 0xc0]
mov r12, qword [rsp + 0xb8]
mov r13d, dword [rsp + 0x98]
mov rcx, rdi
vzeroupper
call fcn.14015ebf8
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140034582
lea rdx, [r14 + 0x160]
lea rcx, [rsp + 0x60]
call fcn.140034f40
mov rdi, qword [rsp + 0x78]
lea rcx, [rsp + 0x60]
mov rbx, qword [rsp + 0x60]
lea rdx, str.Nemesis_AR
cmp rdi, 0xf
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x14003453d
cmp rdi, 0xf
lea rcx, [rsp + 0x60]
lea rdx, str.Striker_AR
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x14003453d
cmp rdi, 0xf
lea rcx, [rsp + 0x60]
lea rdx, str.Enforcer_AR
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x14003453d
lea rcx, [rsp + 0x60]
call fcn.140034e10
cmp rax, 0xffffffffffffffff
je 0x140034461
vmovss xmm0, dword [0x1401b61a4]
vmovss xmm1, dword [0x1401b615c]
mov eax, dword [0x14025cf04]
jmp 0x140034553
cmp rdi, 0xf
lea rcx, [rsp + 0x60]
lea rdx, str.Thunder_Burst_SMG
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140034525
cmp rdi, 0xf
lea rcx, [rsp + 0x60]
lea rdx, str.Hyper_SMG
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140034525
cmp rdi, 0xf
lea rcx, [rsp + 0x60]
lea rdx, str.Ranger_Pistol
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1400344d8
vmovss xmm0, dword [0x1401b619c]
vmovss xmm1, dword [0x1401b6154]
mov eax, dword [reloc.WS2_32.dll_accept]
jmp 0x140034553
cmp rdi, 0xf
lea rcx, [rsp + 0x60]
lea rdx, str.Reaper_Sniper_Rifle
cmova rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14003450d
vmovss xmm0, dword [0x1401b618c]
vmovss xmm1, dword [0x1401b6188]
mov eax, dword [0x14025cf0c]
jmp 0x140034553
vmovss xmm0, dword [0x1401b6160]
vmovss xmm1, dword [0x1401b6178]
mov eax, dword [reloc.WS2_32.dll_accept]
jmp 0x140034553
vmovss xmm0, dword [0x1401b6164]
vmovss xmm1, dword [0x1401b6148]
mov eax, dword [reloc.WS2_32.dll_bind]
jmp 0x140034553
vmovss xmm0, dword [0x1401b6150]
vmovss xmm1, dword [0x1401b6144]
mov eax, dword [reloc.WS2_32.dll_accept]
lea rcx, [rsp + 0x60]
mov dword [0x14025cff8], eax
vmovss dword [0x1401b6410], xmm1
vmovss dword [0x1401b63f8], xmm0
call fcn.140001bb0
lea rcx, [rsp + 0x308]
call fcn.140034c50
jmp 0x1400345c5
vmovss xmm0, dword [0x1401b6160]
vmovss xmm1, dword [0x1401b6178]
mov eax, dword [reloc.WS2_32.dll_accept]
lea rcx, [rsp + 0x308]
vmovss dword [0x1401b63f8], xmm0
vmovss dword [0x1401b6410], xmm1
mov dword [0x14025cff8], eax
call fcn.140034c50
jmp 0x1400345c5
mov r14, qword [rsp + 0x750]
mov eax, dword [rsp + 0x9c]
lea rdx, [rsp + 0xa8]
cmp rsi, 0xf
mov dword [rsp + 0x2bc], eax
movzx eax, byte [rsp + 0xa0]
lea rcx, [rsp + 0x2c8]
cmova rdx, qword [rsp + 0xa8]
mov r8, r12
mov byte [rsp + 0x2c0], al
mov dword [rsp + 0x2b8], r13d
call fcn.140031340
mov rdi, qword [rsp + 0x2e0]
mov rsi, qword [rsp + 0xc0]
mov r13, qword [rsp + 0x300]
mov ebx, dword [rsp + 0x760]
cmp r15, qword [r14 + 0xe8]
jne 0x14003478c
cmp rsi, 0xf
jbe 0x140034677
mov rcx, qword [rsp + 0xa8]
lea rdx, [rsi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034672
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034c09
call fcn.14015ebf8
cmp rdi, 0xf
jbe 0x1400346b3
mov rcx, qword [rsp + 0x2c8]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400346ae
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034c09
call fcn.14015ebf8
xor r12d, r12d
mov r15, qword [rsp + 0x768]
mov eax, dword [rsp + 0x58]
inc ebx
mov dword [rsp + 0x760], ebx
cmp ebx, eax
jb 0x140033ef5
movabs r13, 0x7fffffffee1e5cff
mov rbx, qword [0x14025b7a0]
mov rsi, qword [0x14025b7a8]
cmp rbx, rsi
je 0x140034717
lea rdi, [rbx + 0x38]
mov rcx, rdi
call fcn.140001bb0
add rbx, 0x70
add rdi, 0x70
cmp rbx, rsi
jne 0x1400346f4
mov rbx, qword [0x14025b7a0]
mov qword [0x14025b7a8], rbx
lea rdi, [r14 + 0x110]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
jne 0x140034c21
mov eax, dword [rdi + 0x4c]
cmp eax, 0x7fffffff
je 0x140034c10
mov rsi, qword [rsp + 0x1e0]
mov r14, qword [rsp + 0x1e8]
mov rbx, rsi
cmp rsi, r14
je 0x140034af8
mov rdx, qword [0x14025b7a8]
cmp rdx, qword [0x14025b7b0]
mov r8, rbx
je 0x140034ab8
call fcn.140035820
mov rdx, qword [0x14025b7a8]
add rdx, 0x70
mov qword [0x14025b7a8], rdx
jmp 0x140034acb
mov eax, dword [0x14025ca88]
xor r12d, r12d
mov rcx, qword [0x14025ce00]
xor r9d, r9d
mov dword [rsp + 0x190], eax
xor r8d, r8d
mov rax, qword [0x14025ca28]
xor edx, edx
mov qword [rsp + 0x1a0], rax
lea rax, [r15 + 0x310]
mov qword [rsp + 0x198], rax
lea rax, [rsp + 0x758]
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0x190]
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
mov qword [rsp + 0x100], rax
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0xf8]
mov dword [rsp + 0x38], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x430]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x758], r12
mov dword [rsp + 0x194], r12d
mov qword [rsp + 0x1b0], 8
mov dword [rsp + 0xf8], r12d
mov dword [rsp + 0xfc], 4
call fcn.14008d640
mov r14, qword [rsp + 0x758]
lea rcx, [r14 + 0x570]
call fcn.140035060
mov rbx, rax
test rax, rax
jne 0x14003491d
lea rcx, [r14 + 0x580]
call fcn.140035060
mov rbx, rax
test rax, rax
jne 0x14003491d
cmp rsi, 0xf
jbe 0x1400348cd
mov rcx, qword [rsp + 0xa8]
lea rdx, [rsi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400348c8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034c09
call fcn.14015ebf8
cmp rdi, 0xf
jbe 0x140034909
mov rcx, qword [rsp + 0x2c8]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034904
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034c09
call fcn.14015ebf8
mov r14, qword [rsp + 0x750]
mov ebx, dword [rsp + 0x760]
jmp 0x1400346b6
lea rcx, [r13 + 0x29a]
mov qword [rsp + 0x290], r15
mov qword [rsp + 0x298], r14
mov qword [rsp + 0x2a0], r13
call fcn.140001cd0
sar al, 3
lea rcx, [r15 + 0x8f2]
and al, 1
mov byte [rsp + 0x2b2], al
call fcn.140001cd0
sar al, 4
lea rcx, [r15 + 0x6d0]
and al, 1
mov byte [rsp + 0x2b0], al
call fcn.140001cd0
sar al, 4
lea rcx, [r13 + 0x1201]
and al, 1
mov byte [rsp + 0x2b1], al
call fcn.140001cd0
mov r9d, WSAGetLastError
mov byte [rsp + 0x2b3], al
mov r8, rbx
mov qword [rsp + 0x2a8], rbx
lea rdx, [rsp + 0x110]
mov rcx, r14
call fcn.140032c10
vmovups xmm0, xmmword [rsp + 0x170]
mov rbx, qword [rsp + 0x1e8]
lea r8, [rsp + 0x290]
mov r15, qword [rsp + 0x768]
mov rdx, rbx
vmovups xmmword [rsp + 0x2e8], xmm0
vmovsd xmm0, qword [rsp + 0x180]
vmovsd qword [rsp + 0x2f8], xmm0
cmp rbx, r15
je 0x140034a08
call fcn.140035820
add rbx, 0x70
mov qword [rsp + 0x1e8], rbx
jmp 0x140034a25
lea rcx, [rsp + 0x1e0]
call fcn.1400355f0
mov r15, qword [rsp + 0x1f0]
mov qword [rsp + 0x768], r15
cmp rsi, 0xf
jbe 0x140034a61
mov rcx, qword [rsp + 0xa8]
lea rdx, [rsi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034a5c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034c09
call fcn.14015ebf8
mov rdx, qword [rsp + 0x2e0]
cmp rdx, 0xf
jbe 0x140034aa4
mov rcx, qword [rsp + 0x2c8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034a9f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034c09
call fcn.14015ebf8
mov r14, qword [rsp + 0x750]
mov ebx, dword [rsp + 0x760]
jmp 0x1400346be
lea rcx, [0x14025b7a0]
call fcn.1400355f0
mov rdx, qword [0x14025b7a8]
add rbx, 0x70
cmp rbx, r14
jne 0x140034760
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
lea rcx, [rsp + 0x90]
call fcn.140032980
mov rax, qword [rsp + 0x90]
jmp 0x140034b1e
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
lea rcx, [rsp + 0x90]
call fcn.140032980
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x758], rax
cmp rax, r13
je 0x140034b3c
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x140034b3c
add rax, 0x11e1a300
jmp 0x140034b46
movabs rax, 0x7fffffffffffffff
lea rcx, [rsp + 0x758]
mov qword [rsp + 0x758], rax
call fcn.140035490
test rsi, rsi
je 0x1400337a0
cmp rsi, r14
je 0x140034bc2
lea rbx, [rsi + 0x50]
nop dword [rax]
mov rdx, qword [rbx]
cmp rdx, 0xf
jbe 0x140034ba6
mov rcx, qword [rbx - 0x18]
inc rdx
cmp rdx, 0x1000
jb 0x140034ba1
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140034c09
mov rcx, r8
call fcn.14015ebf8
mov qword [rbx - 8], r12
mov qword [rbx], reloc.WS2_32.dll_ntohs
mov byte [rbx - 0x18], 0
add rbx, 0x70
lea rax, [rbx - 0x50]
cmp rax, r14
jne 0x140034b70
sub r15, rsi
movabs rax, 0x6db6db6db6db6db7
sar r15, 4
imul r15, rax
mov rax, rsi
imul rdx, r15, 0x70
cmp rdx, 0x1000
jb 0x140034bfc
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034c09
mov rcx, rsi
call fcn.14015ebf8
jmp 0x1400337a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
dec eax
mov ecx, 6
mov dword [rdi + 0x4c], eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3