Function at 0x14008d1b0
Capabilities:
Enumerate gui resources
Enumerate processes

Disassembly:
xchg rsi, rax
mov rsi, rsp
xchg rsi, rax
xchg rbx, r8
mov qword [rax + 8], r8
xchg r8, rbx
jmp 0x14008d312
xchg rsi, rax
xchg r15, rdx
mov qword [rbp - 0x58], r15
xchg rdx, r15
xor edx, edx
mov dword [rsp - 0x40], edx
lea ecx, [rdx + 2]
jmp 0x14008d2fc
neg rsp
xchg r10, rax
movaps xmmword [r10 - 0x38], xmm6
xchg r10, rax
movaps xmmword [rax - 0x48], xmm7
xchg rcx, rax
jmp 0x14008d2e9
mov dword [rsp - 0x44], 0x667054d8
mov byte [rsp + 0x20], recv
add byte [rsp + 0x20], 0x32
add byte [rsp + 0x20], 0x24
sub byte [rsp + 0x20], 0x5d
xor byte [rsp + 0x20], 0x33
sub byte [rsp + 0x20], 0x36
jmp 0x14008d479
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movsxd rcx, dword [rbp + 0x38]
cmp ecx, eax
mov r10, r10
jmp 0x14008d236
je 0x14008e5ca
mov qword [rbp + 0x160], rcx
xorps xmm0, xmm0
xchg rbp, r12
movdqu xmmword [r12 + 0x168], xmm0
xchg rbp, r12
mov qword [rbp + 0x178], rdi
jmp 0x14008d321
mov dword [rsp - 0xc], ebp
xor edi, edi
lea r12, [rdi - 1]
nop
xchg rbx, rbx
jmp 0x14008d222
sar rax, 3
lea rdx, [rax*8]
mov r15, r15
jmp 0x14008d3c2
sub rax, 8
mov r15, r15
cmp rax, 0x1f
ja 0x14008efdc
call fcn.1400e9e50
mov dword [rsp - 0x44], 0x5b08316f
jmp 0x14008e5ca
cmp rdx, 0x1000
mov r15, r15
jb 0x14008d29b
jmp 0x14008d397
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [rbp + 0x168]
mov dword [rsp - 0x14], edi
test eax, eax
jne 0x14008d4a3
test rcx, rcx
je 0x14008e5ca
jmp 0x14008d3f9
movaps xmmword [rcx - 0x58], xmm8
xchg rcx, rax
mov rax, qword [0x1402567f0]
jmp 0x14008d41f
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
xchg r14, rax
mov qword [rsp + 0x78], r14
xchg r14, rax
test rax, rax
jmp 0x14008d3ce
xchg rsi, rbp
mov qword [rax + 0x18], rbp
xchg rsi, rbp
jmp 0x14008d3b2
lea rdx, [rbp + 0x160]
mov dword [rsp - 0x24], 0x5234c1be
lea rcx, [0x14008d070]
jmp 0x14008d2c2
xor r8d, 0x6024efa
xor r8d, 0x2e4014e7
lea rcx, [rbp + 0x34]
call fcn.1400ec6c0
mov rbp, rbp
jmp 0x14008d35b
mov dword [rbp + 0x30], 0x12b397ac
add dword [rbp + 0x30], 0x645de9ea
sub dword [rbp + 0x30], 0x595e87fa
xor dword [rbp + 0x30], 0x1a39f4d2
jmp 0x14008d434
push 0x15c5f8b1
mov qword [rsp], rbp
push r12
nop
mov qword [rsp - 8], r13
sub rsp, 8
nop
jmp 0x14008d40f
nop
add rdx, 0x1ef0ef0f
sub rdx, 0x1ef0eee8
mov rcx, qword [rcx - 8]
sub rax, rcx
jmp 0x14008d28a
xchg rdi, r10
mov qword [rax + 0x20], r10
xchg rdi, r10
nop
jmp 0x14008d37c
xchg r15, rax
mov r15, rcx
xchg r15, rax
jmp 0x14008d2ad
xchg rbx, rbx
je 0x14008e0aa
xor edx, edx
mov r8d, 0x5f58c086
sub r8d, 0x2e297e2d
sub r8d, 0x20b958f7
xor r8d, 0x3837b253
jmp 0x14008d33c
xchg r11, r11
xchg rcx, rax
mov rcx, qword [rbp + 0x178]
xchg rcx, rax
sub rax, rcx
jmp 0x14008d276
mov qword [rsp - 8], r14
sub rsp, 8
push r15
jmp 0x14008d48a
xor rax, rsp
mov dword [rsp - 0x14], ebx
xchg rsi, rax
mov qword [rbp + 0x1a8], rsi
jmp 0x14008d1c6
xor dword [rbp + 0x30], 0x558dc4e1
xor dword [rbp + 0x30], 0x5206c89f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp - 0x10], 0x694fcb8f
mov ecx, eax
lea rdx, [rbp + 0x1a4]
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
jmp 0x14008d1f7
xchg rcx, rsi
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x14008e9f3
jmp 0x14008d262
lea rdx, [rbp + 0x30]
xchg rsi, rcx
mov rsi, qword [rsp + 0x78]
jmp 0x14008d464
lea rbp, [rax - 0x208]
xchg r9, r9
neg rsp
sub rsp, 0xfffffffffffffd20
jmp 0x14008d1e0
mov rbx, qword [rbp + 0x170]
xchg r11, r11
sub rbx, rcx
sar rbx, 3
test rcx, rcx
mov dword [rsp - 0xc], 0x270fd4a
jmp 0x14008d545
cmp dword [rbp + 0x1a0], 0
mov dword [rsp - 0xc], ebx
jne 0x14008eeb8
mov qword [rbp + 0x180], rdi
xchg rdi, r9
mov qword [rbp + 0x190], r9
xchg rdi, r9
jmp 0x14008d588
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
xchg r14, r14
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
jmp 0x14008d95a
mov rsi, qword [rbp + 0x180]
xchg r15, rbx
mov rbx, qword [rbp + 0x198]
xchg rbx, r15
jmp 0x14008d5c4
xchg rbp, rdx
movups xmmword [rdx - 0x80], xmm0
xchg rbp, rdx
psrldq xmm0, 0xf
mov r12, r12
jmp 0x14008d5ae
je 0x14008daa3
mov rax, qword [rbp + 0x178]
sub rax, rcx
mov dword [rsp - 0x44], 0x6430bab5
sar rax, 3
lea rdx, [rax*8]
jmp 0x14008da3e
sub r14d, 0x30ee2bc6
add r14d, 0x550bac84
xor r14d, 0x78b16f90
jmp 0x14008dab0
mov qword [rbp + 0x198], 0xc66d5d8
xor qword [rbp + 0x198], 0x5587b19e
sub qword [rbp + 0x198], 0x473cf938
jmp 0x14008d6ba
movd eax, xmm0
xor edi, edi
mov ebx, dword [0x1402567d0]
xchg r14, r14
test al, al
jmp 0x14008dadc
cmp r15, 0x10
cmovae rdi, rsi
mov rdx, rdx
lea rcx, [rbp + 0x180]
cmovae rcx, rsi
mov r14, qword [rbp + 0x190]
jmp 0x14008d9d2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
mov dword [rsp - 0x38], ecx
pmulld xmm0, xmm7
jmp 0x14008d4ee
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
mov r10, r10
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
mov rdx, rdx
jmp 0x14008d5e6
xor qword [rbp + 0x178], 0x427ba064
add qword [rbp + 0x178], 0x1178501
xor qword [rbp + 0x178], 0x5a5de0d1
lea rax, [rbp + 0x5c]
xchg r8, r12
mov r12, r8
jmp 0x14008d925
sub eax, 0x341d5402
sub eax, 0x396fc835
sub eax, 0xcc1f9c9
add eax, 0x659e215c
sub eax, 0x6b004f5b
movd xmm8, eax
jmp 0x14008d97c
xchg rsp, rsp
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
mov dword [rsp - 0x38], edx
jmp 0x14008d768
sub rdx, 0x65ab9505
mov rcx, qword [rcx - 8]
mov dword [rsp - 0x14], esp
sub rax, rcx
nop
add rax, 0xfffffffff8db025a
sub rax, 0xfffffffff8db0262
jmp 0x14008db92
sub qword [rbp + 0x198], 0x1f4f83b
xor qword [rbp + 0x198], 0x1675e600
xor qword [rbp + 0x198], 0x6da94dc
mov byte [rbp + 0x180], bl
lea rax, [rbp + 0x5c]
jmp 0x14008da53
paddd xmm3, xmm5
movdqa xmm1, xmm3
mov dword [rsp - 0x3c], 0x213bf5bc
punpckldq xmm1, xmm3
jmp 0x14008d605
mov qword [rbp + 0x170], r13
xchg rdi, r13
mov qword [rbp + 0x178], 0x4a10617d
sub qword [rbp + 0x178], 0x3d1dcfce
add qword [rbp + 0x178], 0xa5cd257
add qword [rbp + 0x178], 0x26a22ea5
xor qword [rbp + 0x178], 0x26cc6912
jmp 0x14008d626
lea rcx, [0x1402593e1]
mov dword [rsp - 0x14], 0xb7105ea
call fcn.14008cda0
cmp eax, 1
setg bl
jmp 0x14008d8f1
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
jmp 0x14008d8d8
cmp byte [rax + r8], 0
jne 0x14008d928
lea rdx, [rbp + 0x5c]
mov dword [rsp - 0x14], edi
lea rcx, [rbp + 0x160]
call fcn.140019700
lea rdx, [rbp + 0x160]
jmp 0x14008d749
cmp rbx, r14
je 0x14008db83
mov dword [rsp - 0x14], 0x38bcaa42
jmp 0x14008d80e
movdqa xmm5, xmmword [0x140119390]
mov edx, edi
movdqa xmm4, xmmword [0x14011b290]
jmp 0x14008d8b5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
xchg rcx, rcx
jmp 0x14008d85c
je 0x14008e5ca
lea rdx, [rbp + 0x1a0]
mov rcx, rax
mov dword [rsp - 0xc], 0x1ed48366
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
je 0x14008eeb8
jmp 0x14008d4c4
sub rdi, rbx
movsx ecx, byte [rbx]
call fcn.1400b68f0
mov dword [rsp - 0x18], esp
mov byte [rbx + rdi], al
inc rbx
cmp rbx, r14
jmp 0x14008d90f
xor ecx, 0x613223f0
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r13, rax
mov rcx, rcx
cmp rax, 0xffffffffffffffff
jmp 0x14008d7e3
movd xmm3, eax
mov dword [rsp - 0x20], 0x3fe5e8f5
pshufd xmm3, xmm3, 0
jmp 0x14008d6ea
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
mov dword [rsp - 0x40], 0x5dbf5c34
jmp 0x14008db29
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008efdc
jmp 0x14008da9b
call fcn.140019700
nop
xchg r12, r12
lea rdi, [rbp + 0x180]
jmp 0x14008d515
inc rdx
xchg r13, r13
xchg rcx, rsp
jmp 0x14008da1f
xchg rbp, rbp
mov r14d, 0x692e08ad
xor r14d, 0x230a535e
add r14d, 0x1251df0e
sub r14d, 0x1e4f8127
jmp 0x14008d56e
mov dword [rsp - 0x44], 0x70c8d800
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
jmp 0x14008d9a6
mov dword [rsp - 0x3c], 0x5283de06
mov rdx, qword [rbp + 0x178]
cmp rdx, 0x10
jb 0x14008dba9
jmp 0x14008d8a7
jne 0x14008d811
mov dword [rsp - 0x24], 0x7320a786
xchg r15, r14
jmp 0x14008db6c
xchg r12, r8
inc r8
mov dword [rsp - 0x20], 0x144114aa
jmp 0x14008d77a
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14008dba4
mov rsp, rsp
nop
add rdx, 0x65ab952c
jmp 0x14008d696
mov rbx, rbx
movd xmm0, r8d
paddb xmm2, xmm0
jmp 0x14008d96b
movd xmm0, dword [rcx]
mov dword [rsp - 0x20], edi
pxor xmm2, xmm0
jmp 0x14008da0b
xchg r11, r11
movdqa xmm0, xmmword [str.2222222222222222]
xchg r15, rbp
movdqa xmmword [r15 + 0x160], xmm0
xchg rbp, r15
lea rcx, [rbp - 0x7c]
mov r8d, dword [rbp + 0x160]
jmp 0x14008d9f4
psrld xmm0, xmm8
mov dword [rsp - 0x18], edi
paddd xmm0, xmm1
pmulld xmm0, xmm7
jmp 0x14008d7d2
xchg rdi, r14
mov qword [rbp + 0x160], r14
xchg rdi, r14
xchg rdi, r13
jmp 0x14008d703
mov dword [rsp - 0x34], 0x595595d6
add r14, rcx
lea rbx, [rbp + 0x180]
cmp r15, 0x10
xchg r12, r12
cmovae rbx, rsi
jmp 0x14008d7a5
mov dword [rsp - 0x2c], 0x1c8314a8
nop
movd xmm2, edx
pshufd xmm2, xmm2, 0
jmp 0x14008d679
movd dword [rcx], xmm2
neg edx
add edx, 0xfffffff8
neg edx
lea rcx, [rcx + 8]
jmp 0x14008daf6
mov rsp, qword [rbp + 0x160]
xchg rsp, rcx
xchg rcx, rax
jmp 0x14008d938
mov rsi, rsi
mov r8d, dword [rbp + 0x38]
xor edx, edx
jmp 0x14008da6d
xchg rcx, r9
mov rax, r9
xchg rcx, r9
cmp rdx, 0x1000
jmp 0x14008db08
xchg r8, r12
mov r12, r8
xchg r12, r8
nop dword [rax + rax]
mov dword [rsp - 0x34], esi
jmp 0x14008db4b
mov ecx, 0x2f949353
add ecx, 0x26ed1734
sub ecx, 0x1cfa4c07
add ecx, 0x266f6296
sub ecx, 0x34cff739
add ecx, 0x325b5825
add ecx, 0x3abba0d
jmp 0x14008d82b
mov rdi, rdi
call fcn.1400e9e50
test ebx, ebx
je 0x14008e5ca
jmp 0x14008d9bd
xor r14d, 0x1af55509
movd xmm6, r14d
mov dword [rsp - 0x18], ebx
movdqa xmm7, xmmword [0x14011b270]
mov eax, 0x187ab8d3
xor eax, 0x3bb1d522
xor eax, 0x5c7a29ef
jmp 0x14008d656
je 0x14008de5b
mov r8d, edi
cmp ebx, 2
mov rcx, rcx
jl 0x14008dbb6
jmp 0x14008d7bb
mov dword [rsp - 0x1c], ebx
cmp edx, 0x10
jl 0x14008d9fd
jmp 0x14008dc1e
xchg r11, r11
jb 0x14008da9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
mov dword [rsp - 0x18], 0x76ef21d6
jmp 0x14008d87f
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
mov r10, r10
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
jmp 0x14008d846
inc r8
cmp byte [rax + r8], 0
jne 0x14008db4b
mov rdi, rdi
lea rdx, [rbp + 0x5c]
lea rcx, [rbp + 0x180]
jmp 0x14008d892
mov r14, qword [rbp + 0x198]
xchg r14, r15
xchg r11, rsi
mov r11, qword [rbp + 0x180]
xchg r11, rsi
movups xmm0, xmmword [str.EWZXCYPTN]
mov r11, r11
jmp 0x14008d52e
cmp rax, 0x1f
mov dword [rsp - 0x30], 0xd760f68
ja 0x14008efef
call fcn.1400e9e50
test bl, bl
jne 0x14008e5ca
jmp 0x14008da30
lea r9, [rbp - 0x80]
nop word [rax + rax]
mov dword [rsp - 0x20], 0x64f2cdad
jmp 0x14008dc5c
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
mov rdx, rdx
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
jmp 0x14008dcd1
sub r14d, 0x1bf481d6
xor r14d, 0x14fcc66b
add r14d, 0x285d8f44
xor r14d, 0x6c57ffc2
add r14d, 0x45039690
sub r14d, 0x5bc59e8d
xor r8d, r8d
jmp 0x14008dca3
xchg r8, r8
psrad xmm1, xmm6
movdqa xmm0, xmm1
jmp 0x14008dd60
paddd xmm2, xmm5
movdqa xmm1, xmm2
mov dword [rsp - 0x38], edx
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
mov dword [rsp - 0x3c], 0x357bf026
jmp 0x14008dd23
mov eax, 0x2280c119
xor eax, 0x20f31b0f
xor eax, 0x7d8dc423
sub eax, 0x20e17da
jmp 0x14008df0c
xchg r13, r13
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
jmp 0x14008dd12
paddd xmm3, xmm5
mov dword [rsp - 0x10], 0x30fc5b80
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
jmp 0x14008dc75
lea rdx, [rbp - 0x80]
mov dword [rsp - 0x24], edx
lea rcx, [rbp + 0x180]
call fcn.1400919e0
cmp rax, 0xffffffffffffffff
jmp 0x14008df51
je 0x14008eb75
mov r8d, edi
cmp ebx, 2
jmp 0x14008dd40
pshuflw xmm0, xmm3, 0xd8
mov r13, r13
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
jmp 0x14008de2f
mov dword [rsp - 0x14], ebp
movd xmm6, r14d
movdqa xmm7, xmmword [0x14011b270]
mov eax, 0x3e0c7015
sub eax, 0x19568be4
add eax, 0x104a7ec
xor eax, 0x2d6f826c
jmp 0x14008df28
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
xchg rbp, rbp
jmp 0x14008dbd2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x14008dc26
jl 0x14008dead
jmp 0x14008eb75
mov rsi, rsi
jl 0x14008df6e
movdqa xmm5, xmmword [0x140119390]
mov edx, edi
movdqa xmm4, xmmword [0x14011b290]
jmp 0x14008dce8
psrld xmm0, xmm8
paddd xmm0, xmm1
mov dword [rsp - 0x3c], 0x1bbc1b6e
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
mov r14, r14
jmp 0x14008de18
mov r15, r15
nop
add edx, 0x5e84c656
sub edx, 0x5e84c64e
lea rcx, [rcx + 8]
xchg r10, r10
cmp edx, 0x18
jmp 0x14008dd35
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
mov dword [rsp - 0x20], 0x60b06af7
movd xmm3, eax
pshufd xmm3, xmm3, 0
jmp 0x14008dc85
add eax, edx
mov dword [rsp - 0x24], esi
shr eax, 1
shr eax, 2
shr eax, 2
jmp 0x14008defe
xchg r10, rbp
movsd qword [r10 - 0x40], xmm1
xchg r10, rbp
cmp byte [0x14011d36f], 0
xchg rdx, rdx
jmp 0x14008dcc0
mov dword [rsp - 0x38], 0x46ec102a
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
mov r12, r12
movd xmm0, dword [rcx - 4]
jmp 0x14008dda6
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
jmp 0x14008ddf6
pand xmm2, xmmword [0x1401193d0]
mov dword [rsp - 0x1c], ebx
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
jmp 0x14008debe
jl 0x14008dc5c
mov dword [rsp - 0x3c], 0x38bee896
mov r14d, 0x77290fc4
sub r14d, 0x6cc0561f
add r14d, 0x585076c4
jmp 0x14008dbf4
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jmp 0x14008de4d
xchg rbp, r12
movdqa xmmword [r12 + 0x160], xmm0
xchg rbp, r12
lea rcx, [rbp - 0x4c]
jmp 0x14008de9d
mov rdi, rdi
mov r8d, dword [rbp + 0x160]
nop word [rax + rax]
movd xmm2, edx
mov rbx, rbx
pshufd xmm2, xmm2, 0
jmp 0x14008dc36
mov dword [rsp - 0xc], ecx
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
jmp 0x14008dd87
movups xmmword [r15 - 0x50], xmm0
xchg rbp, r15
movsd xmm1, qword [0x14011d368]
jmp 0x14008dddb
movzx eax, r8b
sub al, cl
sub al, 5
add al, 0x37
xor byte [r9], al
mov dword [rsp - 0x28], esp
jmp 0x14008de74
movsx eax, al
mov rbp, rbp
imul ecx, eax, 0x37
jmp 0x14008dee8
sub eax, 0x2a934c4e
sub eax, 0x2978a76e
mul r8d
xchg r11, r11
mov eax, r8d
sub eax, edx
shr eax, 1
jmp 0x14008ddc8
xor eax, 0x42a16027
xor eax, 0x5213125
sub eax, 0x4f555f54
movd xmm8, eax
movdqa xmm0, xmmword [str.2222222222222222]
mov dword [rsp - 0x10], 0x66e35f4a
jmp 0x14008de84
jne 0x14008ee42
mov dword [rsp - 0x28], 0x1e13719c
movups xmm0, xmmword [0x14011d358]
xchg rbp, r15
jmp 0x14008ded3
lea r9, [rbp - 0x50]
mov r13, r13
nop word [rax + rax]
mov eax, 0x4366ca
add eax, 0x4458b18
jmp 0x14008edb4
add eax, 0xbbf73f3
xor eax, 0x1eedec87
movd xmm5, eax
movdqa xmm2, xmmword [0x140119390]
mov dword [rsp - 0x3c], edi
jmp 0x14008e305
jne 0x14008e382
lea rdx, [rsp + 0x28]
mov r14, r14
lea rcx, [rbp - 0x30]
call fcn.140019700
jmp 0x14008e001
lea rcx, [rax + 0x60]
mov qword [rbp + 0x170], rcx
xchg rbp, rbp
lea rax, [rbp + 0x160]
jmp 0x14008e4e8
nop
movsd xmm0, qword [str.VKS_]
mov rbx, rbx
xchg rsp, rdx
movsd qword [rdx + 0x48], xmm0
xchg rdx, rsp
jmp 0x14008ea62
mov word [rsp + 0x30], ax
cmp byte [0x14011d399], 0
je 0x14008e740
mov rsi, rsi
jmp 0x14008e783
mov rsp, rsp
movdqa xmm0, xmm1
psrld xmm0, xmm5
jmp 0x14008edf3
xchg r15, r15
jne 0x14008ee42
movsd xmm0, qword [str.AEW_YDL]
xchg rsp, r12
jmp 0x14008e2f0
xchg rdi, r12
mov qword [rbp - 0x20], r12
xchg rdi, r12
mov qword [rbp - 0x18], 0x4fa1e0ca
sub qword [rbp - 0x18], 0xd44968d
add qword [rbp - 0x18], 0x3cd00c11
jmp 0x14008e6f5
mov eax, dword [str.2222222222222222]
movd xmm0, eax
paddb xmm2, xmm0
mov dword [rsp - 0x14], ebp
movd xmm1, dword [str.AEW_YDL]
pxor xmm2, xmm1
jmp 0x14008e154
mov rcx, qword [rbp + 0x1a8]
xor rcx, rsp
mov dword [rsp - 0x1c], 0x559d9b2b
call fcn.1400e9f70
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x30]
jmp 0x14008e431
xchg rdi, rbp
xchg rbx, r11
movaps xmm6, xmmword [rbx - 0x10]
jmp 0x14008e71e
mov dword [rsp - 0xc], esp
movdqa xmm0, xmm1
psrld xmm0, xmm5
jmp 0x14008e38f
pshufd xmm2, xmm1, 0xd8
mov r10, r10
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
mov eax, dword [str.2222222222222222]
movd xmm0, eax
mov rbp, rbp
jmp 0x14008ea78
movsx eax, al
imul ecx, eax, 0x37
movzx eax, r8b
xchg rcx, rcx
sub al, cl
neg al
jmp 0x14008e2da
movd dword [rsp + 0x58], xmm2
movdqa xmm3, xmmword [0x1401193a0]
xchg r14, r14
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
xchg r12, r12
jmp 0x14008e90a
xchg r12, r14
mov r8, r14
xchg r14, r12
nop dword [rax + rax]
inc r8
jmp 0x14008ea10
cmp byte [rax + r8], 0
jne 0x14008ed1c
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x10]
mov dword [rsp - 0x30], 0x7e0cc2ef
call fcn.140019700
nop
jmp 0x14008e53d
cmp ebx, 2
jl 0x14008e8e9
mov rsi, rsi
jmp 0x14008e220
mov dword [rsp + 0x60], eax
cmp byte [0x14011d38b], 0
mov r12, r12
je 0x14008e62b
jmp 0x14008e407
movdqa xmm4, xmmword [0x14011b290]
movd xmm6, r14d
mov eax, 0xa9bf1b8
xor eax, 0x235e6dcd
jmp 0x14008e64b
add qword [rbp + 8], 0x600ce35f
sub qword [rbp + 8], 0x627b1f8a
add qword [rbp + 8], 0x316e6630
xor qword [rbp + 8], 0x4af510c7
mov byte [rbp - 0x10], 0x4c
add byte [rbp - 0x10], 0x1b
xor byte [rbp - 0x10], 0x5e
jmp 0x14008e9c4
xor byte [rsp + 0x38], 0x7f
sub byte [rsp + 0x38], 0x42
add byte [rsp + 0x38], 0x2a
xor byte [rsp + 0x39], 0x33
mov dword [rsp - 0x44], 0x68a21484
xor byte [rsp + 0x3a], 0x34
xor byte [rsp + 0x3b], 0x35
jmp 0x14008e476
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
mov dword [rsp - 0x1c], 0x639768e9
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
jmp 0x14008e0e1
add al, 0xce
neg al
xor byte [r9], al
inc r8d
mov rdx, rdx
lea r9, [r9 + 1]
jmp 0x14008eb6b
movsd qword [r12 + 0x58], xmm0
xchg r12, rsp
mov eax, dword [0x14011d388]
jmp 0x14008e1cb
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
jmp 0x14008e340
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x14008e3c3
jmp 0x14008eaec
xchg rbp, r11
mov qword [rbp - 0x70], rbx
mov rbp, rbp
xchg rbx, rcx
mov qword [rbp - 0x68], rcx
jmp 0x14008e684
movdqa xmm0, xmm2
mov dword [rsp - 0x10], 0x79ebc662
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x14008ed98
xchg r12, rdi
mov r8, rdi
xchg r12, rdi
nop
mov r13, r13
inc r8
cmp byte [rax + r8], 0
jmp 0x14008dfae
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14011b270]
mov dword [rsp - 0x24], 0x212ec508
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x14008e0f2
add r9, rax
nop word [rax + rax]
mov eax, 0x250d7b0a
xor eax, 0x78b07b76
sub eax, 0x8866e98
xor eax, 0xec01ac4
jmp 0x14008e447
xor byte [rsp + 0x2a], 0x34
xor byte [rsp + 0x2b], 0x35
mov dword [rsp - 0x20], 0x12ae1fa
xor byte [rsp + 0x2c], 0x36
xor byte [rsp + 0x2d], 0x37
xor byte [rsp + 0x2e], 0x38
xor byte [rsp + 0x2f], 0x39
jmp 0x14008e733
mov r8d, edi
cmp ebx, 2
xchg r14, r14
jl 0x14008e7e2
jmp 0x14008e5a4
xchg rcx, rsi
mov rcx, qword [r11 + 0x40]
xchg rcx, rsi
xchg rbp, rdi
mov rbp, qword [r11 + 0x48]
jmp 0x14008e0d2
xor eax, 0x7c577d77
sub eax, 0x1e52d5c2
imul r8d
jmp 0x14008e92c
mov dword [rsp - 0x24], ebx
mov r8d, 0x6b1581f9
sub r8d, 0x2b07770
add r8d, 0x127f6d2f
jmp 0x14008edd2
xor byte [rsp + 0x3c], 0x36
xor byte [rsp + 0x3d], 0x37
mov rsp, rsp
jmp 0x14008e895
add edx, eax
mov dword [rsp - 0x1c], 0x623c4976
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
xchg r9, r9
jmp 0x14008e6a8
mov rdi, rdi
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
mov rcx, rcx
jmp 0x14008e087
xchg rbx, rdi
mov qword [rbp + 0x10], rbx
xchg rdi, rbx
xchg r11, rdi
jmp 0x14008ed7c
xor byte [r9], al
inc r8d
mov dword [rsp - 0x28], ecx
jmp 0x14008e317
xchg r14, rax
mov qword [rbp - 0x80], r14
xchg r14, rax
lea rdi, [rbp - 0x30]
xorps xmm0, xmm0
xchg rbp, r11
movups xmmword [r11 - 0x70], xmm0
jmp 0x14008e32a
movzx eax, byte [0x14011d3ba]
mov byte [rsp + 0x38], 0x4a
xor byte [rsp + 0x38], 0x11
sub byte [rsp + 0x38], 8
sub byte [rsp + 0x38], 0x29
sub byte [rsp + 0x38], 0x27
jmp 0x14008e288
sub byte [rsp + 0x48], 0x2d
sub byte [rsp + 0x48], 0x1d
xor byte [rsp + 0x48], 0x14
jmp 0x14008ebbc
xorps xmm0, xmm0
xchg rbp, rsi
movdqu xmmword [rsi + 0x160], xmm0
xchg rbp, rsi
mov qword [rbp + 0x170], rdi
mov ecx, 0x2e1acb8
jmp 0x14008ea34
nop dword [rax]
mov dword [rsp - 0x40], ebx
mov eax, 0x3e0a4c5c
jmp 0x14008e590
xor eax, 0x1f590672
xor eax, 0x38243fa1
imul r8d
mov rdi, rdi
sar edx, 1
mov eax, edx
shr eax, 0x1a
jmp 0x14008eafc
add eax, 0x1ee3491c
add eax, 0x196f48bb
sub eax, 0x482ac4ed
jmp 0x14008e574
movdqa xmm4, xmmword [0x14011b290]
movd xmm6, r14d
mov eax, 0x45940bb5
xor eax, 0xf006cc
sub eax, 0x41ada8d3
xor eax, 0x10981c03
jmp 0x14008df8f
lea rdx, [rbp + 0x30]
mov rcx, qword [rsp + 0x78]
xchg r9, r9
call sub.KERNEL32.dll_Process32Next
test eax, eax
jmp 0x14008e9ed
mov rdi, rdi
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
mov r13, r13
sub al, 0xce
jmp 0x14008e4d9
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
jmp 0x14008e037
xor byte [rbp - 0x30], 0x63
sub byte [rbp - 0x30], 0x3f
add byte [rbp - 0x30], 0x36
sub byte [rbp - 0x30], 0x1a
sub byte [rbp - 0x30], 0x4f
lea rax, [rsp + 0x28]
mov rdx, rdx
jmp 0x14008e374
xor r8d, r8d
mov r13, r13
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x180]
call fcn.1400919e0
cmp rax, 0xffffffffffffffff
jmp 0x14008e83e
add eax, 0x2177e710
add eax, 0x328032a8
xor eax, 0x1a97aad
xor eax, 0x3eb306db
xor eax, 0xd01af6a
sub eax, 0x4fa66512
movd xmm5, eax
jmp 0x14008ecfc
xchg rcx, rcx
cmp r8d, 0xc
jl 0x14008e56a
jmp 0x14008e62b
xchg rbx, rcx
lea rax, [rbp + 0x160]
mov qword [rbp - 0x60], rax
mov dword [rsp - 0x30], 0x786c10e
nop word [rax + rax]
xchg rdi, rcx
jmp 0x14008eba3
sub al, 0xce
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
jmp 0x14008e672
add qword [rbp + 0x28], 0x79d9abf3
xor qword [rbp + 0x28], 0x7c24c317
mov byte [rbp + 0x10], 0x76
sub byte [rbp + 0x10], 0x47
jmp 0x14008eabe
movd dword [rsp + 0x5c], xmm2
mov r8d, 0x21f7500b
add r8d, 0x5651571e
sub r8d, 0x69bc3c04
jmp 0x14008ec1e
sub qword [rbp - 0x18], 0x2cee1823
xor qword [rbp - 0x18], 0x8f1c7b4
sub qword [rbp - 0x18], 0x5acef990
mov byte [rbp - 0x30], recv
add byte [rbp - 0x30], 0x47
xor byte [rbp - 0x30], 0x44
jmp 0x14008e60a
xchg r11, rbx
xchg r11, rbx
movaps xmm7, xmmword [rbx - 0x20]
xchg r11, rbx
xchg r11, r14
jmp 0x14008ee0c
mov r12, r12
xor byte [rsp + 0x30], 0x3a
xor byte [rsp + 0x31], 0x3b
mov qword [rbp - 0x30], rdi
mov dword [rsp - 0x28], ebx
jmp 0x14008e060
movdqa xmm0, xmm1
psrld xmm0, xmm5
xchg rbx, rbx
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14011b270]
psubd xmm3, xmm0
xchg rbp, rbp
jmp 0x14008ec46
add eax, edx
mov dword [rsp - 0x1c], esp
shr eax, 3
shr eax, 1
shr eax, 1
jmp 0x14008e118
mov byte [rsp + 0x28], 0x40
sub byte [rsp + 0x28], 0x1e
add byte [rsp + 0x28], 0x2b
jmp 0x14008ed54
add rsp, 8
pop rbp
mov r11, r11
ret
mov qword [rbp], rbx
xchg rdi, rbx
mov qword [rbp + 8], 0x20a824ef
xor qword [rbp + 8], 0x3c44bf2b
add qword [rbp + 8], 0x19e07269
sub qword [rbp + 8], 0x1ad8276a
jmp 0x14008e257
mov eax, r8d
mov dword [rsp - 0x2c], esp
lea r9, [rsp + 0x58]
add r9, rax
jmp 0x14008e55f
shr eax, 0xc
shr eax, 9
shr eax, 1
shr eax, 1
add edx, eax
movsx eax, dl
jmp 0x14008e5e2
xchg rbp, rbp
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x5c]
pxor xmm2, xmm1
mov r12, r12
jmp 0x14008e6d6
mov qword [rbp + 0x160], rax
mov dword [rsp - 0x18], 0x21c578f4
mov qword [rbp + 0x168], rax
jmp 0x14008dfca
mov dword [rsp - 0x10], ebx
jne 0x14008ee42
movsd xmm0, qword [0x14011d390]
movsd qword [rsp + 0x28], xmm0
movzx eax, word [0x14011d398]
mov rdi, rdi
jmp 0x14008e01d
mov dword [rsp - 0x2c], 0x4c8b6da1
xchg rbx, rsp
mov rsp, rax
xchg rsp, rbx
jmp 0x14008e823
xor byte [rsp + 0x4f], 0x39
mov rsi, rsi
xor al, 0x3a
mov byte [rsp + 0x50], al
mov qword [rbp - 0x10], rdi
xchg rbx, rdi
jmp 0x14008e7b6
xor byte [rsp + 0x3e], 0x38
xor byte [rsp + 0x3f], 0x39
xor byte [rsp + 0x40], 0x3a
xor byte [rsp + 0x41], 0x3b
jmp 0x14008eb7d
movdqa xmm1, xmm3
mov dword [rsp - 0x10], 0x497c5281
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
jmp 0x14008e8f9
sub r8d, 0x2e6c9f01
sub r8d, 0x417dbfc1
mov eax, r8d
lea r9, [rsp + 0x68]
mov rbp, rbp
jmp 0x14008e3b7
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
mov dword [rsp - 0x44], ecx
jmp 0x14008e5f8
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
mov dword [rsp - 0xc], 0x63004a09
psrad xmm1, xmm6
jmp 0x14008e74d
mov dword [rsp - 0x18], 0x63261721
sar edx, 1
mov eax, edx
shr eax, 8
jmp 0x14008e7f6
pmulld xmm0, xmmword [0x14011b270]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
jmp 0x14008e4a6
xor byte [rsp + 0x4c], 0x36
xor byte [rsp + 0x4d], 0x37
xor byte [rsp + 0x4e], 0x38
jmp 0x14008e87b
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
mov r12, r12
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
jmp 0x14008eb4b
sub byte [rbp + 0x10], 0x36
sub byte [rbp + 0x10], 0x27
sub byte [rbp + 0x10], 7
lea rax, [rsp + 0x38]
mov dword [rsp - 0x44], 0x16c98d88
xchg r12, rbx
jmp 0x14008ed14
add byte [rbp - 0x10], 0x1b
xor byte [rbp - 0x10], 0x22
sub byte [rbp - 0x10], 0x76
lea rax, [rsp + 0x48]
jmp 0x14008e17a
mov r15, qword [rsp - 8]
nop
mov r14, qword [rsp]
add rsp, 8
jmp 0x14008ece9
jne 0x14008d222
mov rcx, qword [rsp + 0x78]
mov dword [rsp - 0x18], 0x1f39719e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, byte [rsp + 0x20]
jmp 0x14008e0aa
mov dword [rsp - 0x1c], 0x4d14a8b4
cmp byte [rax + r8], 0
jne 0x14008e18b
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x10]
xchg rcx, rcx
jmp 0x14008ecbb
add ecx, 0x7af0a90b
sub ecx, 0x54653897
add ecx, 0x3434b12d
add ecx, 0xabec159
xor ecx, 0x69250106
sub ecx, 0x1458e54
call fcn.1400e9e14
jmp 0x14008e865
movzx eax, byte [0x14011d3a8]
mov byte [rsp + 0x48], 0x31
add byte [rsp + 0x48], 0x1a
jmp 0x14008e529
paddb xmm2, xmm0
movd xmm1, dword [0x14011d370]
pxor xmm2, xmm1
mov dword [rsp - 0x24], 0x70036a8e
movd dword [rsp + 0x68], xmm2
movdqa xmm3, xmmword [0x1401193a0]
jmp 0x14008e8c1
add byte [rbp + 0x10], 0x26
sub byte [rbp + 0x10], 0x30
xor byte [rbp + 0x10], 0x43
xor byte [rbp + 0x10], 2
jmp 0x14008e9a3
mov dword [rsp - 0x38], edx
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x180]
call fcn.1400919e0
jmp 0x14008ee25
xor r8d, r8d
xchg rsi, rsi
lea rdx, [rsp + 0x68]
jmp 0x14008eb36
shr eax, 3
shr eax, 1
shr eax, 1
jmp 0x14008e488
lea rcx, [rbp + 0x180]
call fcn.1400919e0
cmp rax, 0xffffffffffffffff
jmp 0x14008e047
movd xmm0, eax
xchg r8, r8
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x6c]
pxor xmm2, xmm1
movd dword [rsp + 0x6c], xmm2
jmp 0x14008e459
cmp r8d, 0x18
jl 0x14008df80
xor r8d, r8d
jmp 0x14008ead3
mov dword [rsp - 0x1c], ebp
xor al, 0x3c
mov byte [rsp + 0x42], al
jmp 0x14008e4c7
xor byte [rsp + 0x48], 0x58
sub byte [rsp + 0x48], 0x10
xor byte [rsp + 0x48], 0x59
xor byte [rsp + 0x49], 0x33
xor byte [rsp + 0x4a], 0x34
xor byte [rsp + 0x4b], 0x35
mov dword [rsp - 0x10], ebx
jmp 0x14008e96c
movsd qword [r8 + 0x68], xmm0
xchg r8, rsp
mov eax, dword [0x14011d378]
mov dword [rsp + 0x70], eax
mov rdx, rdx
movzx eax, word [0x14011d37c]
mov word [rsp + 0x74], ax
jmp 0x14008ec6d
xor r8d, 0x3439dd09
xor r8d, 0x529d363d
sub r8d, 0x4ea7d003
xor r8d, 0x65ba34b7
sub r8d, 0x7c3a84b1
jmp 0x14008e7e2
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
xchg r11, r11
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
movd xmm0, eax
jmp 0x14008e80a
cmp byte [0x14011d37d], 0
je 0x14008eaec
mov dword [rsp - 0x3c], ebx
mov r8d, edi
jmp 0x14008e1ba
xchg rdi, rsp
movsd qword [rdi + 0x38], xmm0
xchg rdi, rsp
movzx eax, word [0x14011d3b8]
mov word [rsp + 0x40], ax
mov dword [rsp - 0x38], 0x6e008bc0
jmp 0x14008e504
call fcn.140019700
nop
movsd xmm0, qword [str.VDYTF]
mov dword [rsp - 0x10], 0x76a368a6
jmp 0x14008ec97
mul r8d
mov dword [rsp - 0x40], ebx
mov eax, r8d
sub eax, edx
shr eax, 1
jmp 0x14008e771
nop
mov r13, qword [rsp]
add rsp, 8
nop
mov r12, qword [rsp]
jmp 0x14008e797
movdqa xmm2, xmmword [0x140119390]
mov rsi, rsi
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
jmp 0x14008e2b3
mov r8, rbx
xchg r12, rbx
nop
inc r8
xchg r15, r15
jmp 0x14008e193
add qword [rbp + 0x28], 0xe440569
sub qword [rbp + 0x28], 0x16656ee4
sub qword [rbp + 0x28], 0x6f8c6d5
add qword [rbp + 0x28], 0x3f1bb34a
sub qword [rbp + 0x28], 0x495e5400
jmp 0x14008e6b9
add byte [rsp + 0x28], 0x25
xor byte [rsp + 0x28], 0x36
xor byte [rsp + 0x28], 0x24
sub byte [rsp + 0x28], 0x55
xor byte [rsp + 0x28], 0x16
add byte [rsp + 0x28], 0x47
xor byte [rsp + 0x29], 0x33
jmp 0x14008e3dc
mov qword [rbp + 0x20], r11
xchg rdi, r11
mov qword [rbp + 0x28], 0x459fc9b
add qword [rbp + 0x28], 0x174deb90
jmp 0x14008ed27
psrad xmm1, xmm6
mov dword [rsp - 0x44], ebp
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
xchg r10, r10
jmp 0x14008e940
add eax, 0x67858dee
sub eax, 0x49849bab
add eax, 0x36d85643
xor eax, 0x293f6f2f
sub eax, 0x467942a8
jmp 0x14008ecd6
xor r8d, 0x5ae6a227
xor r8d, 0x26829989
xor r8d, 0x71a493
add r8d, 0x68f87645
jmp 0x14008e8db
paddd xmm0, xmm1
mov r11, r11
pmulld xmm0, xmmword [0x14011b270]
psubd xmm3, xmm0
jmp 0x14008e980
movaps xmm8, xmmword [r14 - 0x30]
xchg r11, r14
mov rsp, r11
mov dword [rsp - 0x18], esi
nop
add rsp, 8
jmp 0x14008e9da
cmp rax, 0xffffffffffffffff
xchg rsi, rsi
jne 0x14008ee42
movsd xmm0, qword [0x14011d370]
xchg rsp, r8
jmp 0x14008ebe3
cmp r15, 0x10
xchg r10, r10
jb 0x14008e5ca
lea rdx, [r15 + 1]
mov rax, rsi
mov dword [rsp - 0x24], 0x60f95510
cmp rdx, 0x1000
jmp 0x14008ee6a
jb 0x14008ee98
sub rdx, 0xffffffffffffffd9
mov rsi, qword [rsi - 8]
mov dword [rsp - 0x14], edi
sub rax, rsi
neg rax
add rax, 8
jmp 0x14008ee8b
neg rax
cmp rax, 0x1f
ja 0x14008efef
xchg rsp, rsi
mov rcx, rsp
xchg rsi, rsp
jmp 0x14008eea6
call fcn.1400e9e50
mov dword [rsp - 0x34], 0x2705820a
jmp 0x14008e5ca
xchg r14, rcx
mov r14, r13
xchg r14, rcx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsp, rsp
jmp 0x14008e5ca
call fcn.1400f0b0c
int3
call fcn.1400f0b0c
int3