Function at 0x14000e680
Capabilities:
Create process on windows
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x800]
sub rsp, 0x900
mov rax, qword [0x14004a058]
xor rax, rsp
mov qword [rbp + 0x7f0], rax
mov rdi, rcx
mov qword [rsp + 0x40], rcx
mov byte [rbp + 8], 0
lea r14, vtable.vmsCommandLine.0
mov qword [rbp], r14
xor r15d, r15d
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], r15w
mov qword [rbp + 0x30], r15
movdqa xmm0, xmmword [0x140034ce0]
movdqa xmmword [rbp + 0x40], xmm0
mov word [rbp + 0x30], r15w
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r15w
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x1c0]
call fcn.140014c80
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x3d0]
call fcn.140014c80
lea r8d, [r15 + 7]
lea rdx, str.http:__
mov rcx, rdi
call fcn.14001955c
test eax, eax
jne 0x14000e76b
movsd xmm0, qword [str.http]
movsd qword [rbp - 0x20], xmm0
movzx eax, word [0x1400350e8]
mov word [rbp - 0x18], ax
jmp 0x14000e7c7
mov r8d, 8
lea rdx, str.https:__
mov rcx, rdi
call fcn.14001955c
test eax, eax
jne 0x14000e79c
movsd xmm0, qword [str.https]
movsd qword [rbp - 0x20], xmm0
mov eax, dword [0x140035110]
mov dword [rbp - 0x18], eax
jmp 0x14000e7c7
mov r8d, 6
lea rdx, str.ftp:__
mov rcx, rdi
call fcn.14001955c
test eax, eax
jne 0x14000f2b5
movabs rax, 0x7000740066
mov qword [rbp - 0x20], rax
lea rcx, [rbp + 0x90]
call fcn.14000d2c0
nop
cmp dword [rbp + 0x9c], 6
jb 0x14000e9ab
lea rcx, [rbp + 0x1c0]
sub rcx, 2
nop dword [rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x14000e7f0
movaps xmm0, xmmword [str.SoftwareMicrosoftWindowsShellAssociationsUrlAssociations_]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x140035140]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x140035150]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x140035160]
movups xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [0x140035170]
movups xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [0x140035180]
movups xmmword [rcx + 0x50], xmm1
movaps xmm0, xmmword [0x140035190]
movups xmmword [rcx + 0x60], xmm0
movsd xmm1, qword [0x1400351a0]
movsd qword [rcx + 0x70], xmm1
mov eax, dword [0x1400351a8]
mov dword [rcx + 0x78], eax
movzx eax, word [0x1400351ac]
mov word [rcx + 0x7c], ax
lea rcx, [rbp + 0x1c0]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x14000e872
lea r8, [rbp - 0x20]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r8 + rdx*2]
mov word [rcx + rdx*2], ax
lea rdx, [rdx + 1]
test ax, ax
jne 0x14000e890
lea rax, [rbp + 0x1c0]
sub rax, 2
nop dword [rax]
lea rax, [rax + 2]
cmp word [rax], 0
jne 0x14000e8b0
movups xmm0, xmmword [str.UserChoice]
movups xmmword [rax], xmm0
movsd xmm1, qword [0x1400351c0]
movsd qword [rax + 0x10], xmm1
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x5e0]
call fcn.140014c80
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, [rbp + 0x1c0]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000f28e
mov dword [rsp + 0x30], 0x103
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x5e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.ProgId
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14000f283
mov eax, dword [rsp + 0x30]
add rax, rax
cmp rax, 0x208
jae 0x14000f3ae
mov word [rbp + rax + 0x5e0], r15w
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp word [rbp + 0x5e0], 0
je 0x14000f28e
mov rcx, r15
nop word [rax + rax]
movzx eax, word [rbp + rcx + 0x5e0]
mov word [rbp + rcx + 0x1c0], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14000e990
jmp 0x14000e9c6
mov rcx, r15
nop
movzx eax, word [rbp + rcx - 0x20]
mov word [rbp + rcx + 0x1c0], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14000e9b0
lea rax, [rbp + 0x1c0]
sub rax, 2
lea rax, [rax + 2]
cmp word [rax], 0
jne 0x14000e9d1
movups xmm0, xmmword [str._shellopencommand]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400351e8]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x1400351f8]
movsd qword [rax + 0x20], xmm0
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, [rbp + 0x1c0]
mov rcx, 0xffffffff80000000
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000f28e
mov dword [rsp + 0x30], 0x103
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x3d0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14000f283
mov eax, dword [rsp + 0x30]
add rax, rax
cmp rax, 0x208
jae 0x14000f3cc
mov word [rbp + rax + 0x3d0], r15w
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp word [rbp + 0x3d0], 0
je 0x14000f28e
xor r8d, r8d
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp]
call fcn.140008f30
lea rcx, [rbp + 0x3d0]
call fcn.1400198ec
lea rdx, str..exe
lea rcx, [rbp + 0x3d0]
call fcn.140014fbc
test rax, rax
je 0x14000f28e
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rdx, qword [rbp + 0x10]
mov r12, 0xffffffffffffffff
mov r8, r12
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000eaf0
lea rcx, [rbp - 0x40]
call fcn.140004ed0
lea r11, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae r11, qword [rbp - 0x40]
mov rax, qword [rbp - 0x30]
cmp rax, 2
jb 0x14000f0a1
dec rax
lea rbx, [r11 + rax*2]
mov rax, r11
lea rsi, [0x140035200]
mov rcx, rbx
sub rcx, rax
sar rcx, 1
mov rdx, r15
je 0x14000eb5b
cmp word [rax], 0x25
je 0x14000eb58
cmp rcx, 1
je 0x14000eb5b
dec rcx
add rax, 2
cmp word [rax], 0x25
jne 0x14000eb45
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x14000f0a1
mov r9d, 2
mov rcx, rsi
movzx edx, word [rdx]
mov r8d, 0x25
cmp dx, r8w
jb 0x14000eba7
mov r10, rax
sub r10, rsi
cmp dx, r8w
ja 0x14000eba7
cmp r9, 1
je 0x14000ebad
dec r9
add rcx, 2
movzx edx, word [rcx + r10]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x14000eb89
add rax, 2
jmp 0x14000eb31
sub rax, r11
sar rax, 1
cmp rax, r12
je 0x14000f0a1
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r15w
mov r8, r12
inc r8
cmp word [rdi + r8*2], 0
jne 0x14000ebd4
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.140004ed0
nop
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], 7
mov word [rbp + 0x50], r15w
mov r8d, 2
mov rdx, rsi
lea rcx, [rbp + 0x50]
call fcn.140004ed0
nop
mov r13, qword [rbp - 0x10]
mov r14, r13
mov qword [rsp + 0x48], r13
mov rbx, r15
mov rdi, qword [rbp + 0x60]
mov r15, qword [rbp + 0x50]
mov r12, qword [rbp + 0x68]
nop
lea r11, [rbp + 0x50]
cmp r12, 8
cmovae r11, r15
lea rsi, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rsi, qword [rbp - 0x40]
mov rax, qword [rbp - 0x30]
cmp rdi, rax
ja 0x14000ed31
sub rax, rdi
cmp rbx, rax
ja 0x14000ed31
test rdi, rdi
je 0x14000ecfd
lea r14, [rax + 1]
lea r14, [rsi + r14*2]
lea rbx, [rsi + rbx*2]
movzx r10d, word [r11]
nop dword [rax]
mov rax, r14
sub rax, rbx
sar rax, 1
mov ecx, 0
je 0x14000ecac
cmp word [rbx], r10w
je 0x14000eca9
cmp rax, 1
je 0x14000ecac
dec rax
add rbx, 2
cmp word [rbx], r10w
jne 0x14000ec96
mov rcx, rbx
mov rbx, rcx
test rcx, rcx
je 0x14000ed31
mov r8, rdi
mov rax, r11
movzx ecx, word [rcx]
movzx edx, r10w
cmp cx, r10w
jb 0x14000ecec
mov r9, rbx
sub r9, r11
cmp cx, dx
ja 0x14000ecec
cmp r8, 1
je 0x14000ecf2
dec r8
add rax, 2
movzx ecx, word [r9 + rax]
movzx edx, word [rax]
cmp cx, dx
jae 0x14000ecd0
add rbx, 2
jmp 0x14000ec80
sub rbx, rsi
sar rbx, 1
mov r14, qword [rsp + 0x48]
cmp rbx, 0xffffffffffffffff
je 0x14000ed31
lea r9, [rbp - 0x20]
cmp qword [rbp - 8], 8
cmovae r9, qword [rbp - 0x20]
mov qword [rsp + 0x20], r13
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.14000e200
add rbx, r14
mov r13, qword [rbp - 0x10]
jmp 0x14000ec30
cmp r12, 8
mov r12, 0xffffffffffffffff
jb 0x14000ed78
mov rdx, qword [rbp + 0x68]
lea rdx, [rdx*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x14000ed6f
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f3b4
mov rcx, r15
call fcn.1400124f4
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x14000edb8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000edb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f3ba
call fcn.1400124f4
lea r14, vtable.vmsCommandLine.0
xor r15d, r15d
mov rdi, qword [rsp + 0x40]
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rdx, qword [rbp - 0x40]
cmp word [rdx], 0x20
jne 0x14000edf0
nop dword [rax + rax]
add rdx, 2
cmp word [rdx], 0x20
je 0x14000ede0
nop word [rax + rax]
inc r12
cmp word [rdx + r12*2], 0
jne 0x14000edf0
mov r8, r12
lea rcx, [rbp + 0x10]
call fcn.140004ed0
mov r9, qword [rbp + 0x20]
test r9, r9
je 0x14000eead
nop dword [rax]
nop dword [rax + rax]
lea rax, [rbp + 0x10]
mov rcx, qword [rbp + 0x10]
mov r10, qword [rbp + 0x28]
cmp r10, 8
cmovae rax, rcx
cmp word [rax + r9*2 - 2], 0x20
jne 0x14000eead
lea r8, [rbp + 0x10]
cmp r10, 8
cmovae r8, rcx
add r8, 0xfffffffffffffffe
lea r8, [r8 + r9*2]
lea rax, [rbp + 0x10]
cmp r10, 8
cmovae rax, rcx
sub r8, rax
sar r8, 1
mov rax, r9
sub rax, r8
mov edx, 1
cmp rax, rdx
cmovb rdx, rax
lea rax, [rbp + 0x10]
cmp r10, 8
cmovae rax, rcx
lea rcx, [rax + r8*2]
sub r9, rdx
mov qword [rbp + 0x20], r9
sub r9, r8
lea r8, [r9*2 + 2]
lea rdx, [rcx + rdx*2]
call fcn.1400145d0
mov r9, qword [rbp + 0x20]
test r9, r9
jne 0x14000ee20
mov rax, qword [rbp]
mov dl, 1
lea rcx, [rbp]
call qword [rax + 0x18]
call fcn.14000dfe0
test al, al
je 0x14000f12e
call fcn.14000d650
test al, al
je 0x14000f12e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rax
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rax
lea rdx, [rbp + 0x50]
lea rcx, [rbp]
call fcn.14000e560
nop
xor edx, edx
lea rcx, [rbp + 0x50]
call fcn.14000e0a0
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rdx, qword [rbp + 0x50]
lea rax, [rbp - 0x20]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x1000000
xor r8d, r8d
xor ecx, ecx
call fcn.14000d730
nop
mov rdx, qword [rbp + 0x68]
test al, al
je 0x14000f0f2
cmp rdx, 8
jb 0x14000ef93
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ef8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f3c6
call fcn.1400124f4
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], 7
mov word [rbp + 0x50], r15w
lea rax, vtable.vmsOsVersionBase.0
mov qword [rbp + 0x90], rax
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x14000eff2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000efed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f3c0
call fcn.1400124f4
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r15w
mov qword [rbp], r14
mov rdx, qword [rbp + 0x48]
cmp rdx, 8
jb 0x14000f047
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f042
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f3a2
call fcn.1400124f4
movdqa xmm0, xmmword [0x140034ce0]
movdqa xmmword [rbp + 0x40], xmm0
mov word [rbp + 0x30], r15w
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14000f253
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f24e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f3a2
jmp 0x14000f24e
mov r8d, 2
lea rdx, [0x140035208]
lea rcx, [rbp - 0x40]
call fcn.140008b20
mov r8, r12
nop word [rax + rax]
inc r8
cmp word [rdi + r8*2], 0
jne 0x14000f0c0
mov rdx, rdi
lea rcx, [rbp - 0x40]
call fcn.140008b20
mov r8d, 1
lea rdx, [0x140034aa8]
lea rcx, [rbp - 0x40]
call fcn.140008b20
jmp 0x14000edc7
cmp rdx, 8
jb 0x14000f12e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f129
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f3c6
call fcn.1400124f4
mov qword [rbp + 0x88], r15
lea rax, [rbp + 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x40]
lea rcx, [rbp]
call fcn.140003050
test al, al
je 0x14000f28e
lea rax, vtable.vmsOsVersionBase.0
mov qword [rbp + 0x90], rax
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x14000f1ac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000f1a7
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f39c
call fcn.1400124f4
mov word [rbp - 0x40], r15w
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r15
mov rdx, qword [rbp + 0x48]
cmp rdx, 8
mov qword [rbp], r14
jb 0x14000f201
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000f1fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f3a8
call fcn.1400124f4
movdqa xmm0, xmmword [0x140034ce0]
movdqa xmmword [rbp + 0x40], xmm0
mov word [rbp + 0x30], r15w
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14000f253
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f24e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f3a8
call fcn.1400124f4
mov rcx, qword [rbp + 0x7f0]
xor rcx, rsp
call fcn.140012b20
lea r11, [rsp + 0x900]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8, rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x14000f15e
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x14000f2f5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f2f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f39c
call fcn.1400124f4
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r15w
mov qword [rbp], r14
mov rdx, qword [rbp + 0x48]
cmp rdx, 8
jb 0x14000f346
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f341
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f3a8
call fcn.1400124f4
movdqa xmm0, xmmword [0x140034ce0]
movdqa xmmword [rbp + 0x40], xmm0
mov word [rbp + 0x30], r15w
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14000f253
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f24e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f3a8
jmp 0x14000f24e
call fcn.1400190b8
nop
call fcn.1400190b8
int3
call fcn.1400190b8
nop
call fcn.140012c7c
nop
call fcn.1400190b8
nop
call fcn.1400190b8
nop
call fcn.1400190b8
nop
call fcn.1400190b8
int3
call fcn.140012c7c
int3