Function at 0x14008cee0
Capabilities:
Authenticate hmac
Enumerate gui resources
Enumerate processes

Disassembly:
xchg rsp, rax
mov rsp, rax
xchg rsp, rax
xchg rbx, r12
mov qword [rax + 8], r12
jmp 0x14008d19e
xchg rsp, rax
mov rsp, qword [rbp + 0x178]
xchg rsp, rax
jmp 0x14008d16c
lea rdx, [rbp + 0x160]
lea rcx, [0x14008cdb0]
mov dword [rsp - 0x44], edx
call qword [sym.imp.USER32.dll_EnumWindows]
jmp 0x14008d087
xchg rdx, rcx
xor edx, edx
lea ecx, [rdx + 2]
jmp 0x14008d0a7
xor dword [rbp + 0x30], 0x7832eab0
xor dword [rbp + 0x30], 0x37431505
sub dword [rbp + 0x30], 0x15df6622
xor dword [rbp + 0x30], 0x2b20903f
sub dword [rbp + 0x30], 0x1f851d76
sub dword [rbp + 0x30], 0x414bce41
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
jmp 0x14008d0e5
cmp rax, 0x1f
mov dword [rsp - 0x1c], 0x612ef0de
ja 0x14008ed92
call fcn.1400e9d60
jmp 0x14008e8fe
movaps xmmword [rcx - 0x38], xmm6
xchg rcx, rax
xchg r13, rax
jmp 0x14008d190
xchg rdx, rax
xchg rcx, rdx
mov qword [rbp - 0x58], rcx
jmp 0x14008cf20
mov qword [rsp - 8], r14
sub rsp, 8
nop
mov qword [rsp - 8], r15
sub rsp, 8
lea rbp, [rax - 0x208]
neg rsp
jmp 0x14008d0d4
test rax, rax
je 0x14008df4d
xor edx, edx
xchg rcx, rcx
mov r8d, 0x463d359a
sub r8d, 0x2e7eba
jmp 0x14008d1d6
je 0x14008deae
xchg r12, r12
xor edi, edi
lea r12, [rdi - 1]
nop
mov dword [rsp - 0x10], edi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
jmp 0x14008d012
sub rdx, 0x480289a0
mov rcx, qword [rcx - 8]
mov dword [rsp - 0x1c], ecx
sub rax, rcx
jmp 0x14008d0c2
movsxd rcx, dword [rbp + 0x38]
cmp ecx, eax
mov dword [rsp - 0x44], 0x28255164
je 0x14008e8fe
mov qword [rbp + 0x160], rcx
jmp 0x14008d14c
movaps xmmword [r15 - 0x58], xmm8
xchg r15, rax
mov rax, qword [0x1402567f0]
xor rax, rsp
xchg rdx, rax
mov qword [rbp + 0x1a8], rdx
jmp 0x14008cf8b
mov qword [rsp], r12
push r10
mov qword [rsp], r13
nop
jmp 0x14008cf99
sub rsp, 8
mov qword [rsp], rbp
nop
sub rsp, 8
jmp 0x14008d051
sub byte [rsp + 0x20], 0x20
sub byte [rsp + 0x20], 2
sub byte [rsp + 0x20], 0x31
jmp 0x14008d1b8
mov rcx, qword [rbp + 0x168]
test eax, eax
jne 0x14008d20c
xchg r10, r10
test rcx, rcx
je 0x14008e8fe
jmp 0x14008cef3
mov dword [rsp - 0x44], 0xce611d4
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
xchg rcx, rax
mov qword [rsp + 0x78], rcx
xchg rcx, rax
jmp 0x14008cfbb
nop
add rax, 0xffffffffb270a3ab
sub rax, 0xffffffffb270a3b3
jmp 0x14008cf62
sub rsp, 0xfffffffffffffd20
neg rsp
xchg rcx, rax
jmp 0x14008cf7e
mov dword [rsp - 0x30], edx
mov ecx, eax
lea rdx, [rbp + 0x1a4]
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
mov byte [rsp + 0x20], 0x78
sub byte [rsp + 0x20], 6
sub byte [rsp + 0x20], 4
jmp 0x14008d073
lea rcx, [rbp + 0x34]
call fcn.1400ec5d0
mov dword [rbp + 0x30], 0x59d5385d
sub dword [rbp + 0x30], 0x1e590bf2
sub dword [rbp + 0x30], 0xcbe0f1c
jmp 0x14008cf2d
cmp rdx, 0x1000
xchg r9, r9
jb 0x14008cf74
nop
add rdx, 0x480289c7
jmp 0x14008cffb
xorps xmm0, xmm0
mov r9, r9
movdqu xmmword [rbp + 0x168], xmm0
xchg r9, rdi
mov qword [rbp + 0x178], r9
xchg rdi, r9
jmp 0x14008cf03
sub rax, rcx
sar rax, 3
mov dword [rsp - 0x24], edi
lea rdx, [rax*8]
jmp 0x14008d184
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
jmp 0x14008d12f
movaps xmmword [r13 - 0x48], xmm7
xchg r13, rax
xchg r15, rax
jmp 0x14008d032
xchg r12, rbx
mov qword [rax + 0x18], rsi
mov rdi, rdi
xchg rdi, rsi
mov qword [rax + 0x20], rsi
xchg rdi, rsi
nop
jmp 0x14008d061
sub byte [rsp + 0x20], 0x1b
lea rdx, [rbp + 0x30]
mov dword [rsp - 0xc], edx
mov rcx, qword [rsp + 0x78]
call sub.KERNEL32.dll_Process32First
test eax, eax
jmp 0x14008cfdb
add r8d, 0x7ccf66a
xor r8d, 0x5716b21a
xor r8d, 0xa4ca646
add r8d, 0x340c97a4
xor r8d, 0x4d8087a0
add r8d, 0x490ab544
sub r8d, 0x52198b32
jmp 0x14008d10c
mov rbx, qword [rbp + 0x170]
mov dword [rsp - 0x44], 0x4521fe20
sub rbx, rcx
sar rbx, 3
test rcx, rcx
je 0x14008d8bf
mov dword [rsp - 0x1c], ebx
jmp 0x14008d738
call fcn.14008ca90
cmp eax, 1
setg bl
mov dword [rsp - 0x2c], 0x54a9c6d4
mov rdx, qword [rbp + 0x178]
jmp 0x14008d907
sar rax, 2
sar rax, 1
lea rdx, [rax*8]
mov dword [rsp - 0xc], ecx
xchg rbp, rax
mov rbp, rcx
jmp 0x14008d28f
call fcn.140019990
nop
lea rdi, [rbp + 0x180]
mov rbp, rbp
mov rsi, qword [rbp + 0x180]
xchg rsp, r15
jmp 0x14008d329
xchg rbp, rax
cmp rdx, 0x1000
mov dword [rsp - 0x3c], esp
jb 0x14008d8ba
nop
jmp 0x14008d61e
pxor xmm2, xmm0
movd dword [rcx], xmm2
nop
jmp 0x14008d6fb
je 0x14008e8fe
lea rdx, [rbp + 0x1a0]
xchg rdx, rax
mov rcx, rdx
xchg rdx, rax
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
jmp 0x14008d5e4
cmp rax, 0x1f
mov r10, r10
ja 0x14008ed98
call fcn.1400e9d60
test bl, bl
jmp 0x14008d405
jmp 0x14008dbf7
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
mov dword [rsp - 0x20], 0x6aa9f4cf
jmp 0x14008d465
mov dword [rsp - 0x2c], 0x765c2c97
xchg r8, rdi
mov qword [rbp + 0x160], r8
jmp 0x14008d768
mov rsp, qword [rbp + 0x198]
xchg rsp, r15
cmp r15, 0x10
cmovae rdi, rsi
mov dword [rsp - 0x38], esp
lea rcx, [rbp + 0x180]
cmovae rcx, rsi
jmp 0x14008d7de
sub ecx, 0x64b8293f
call qword [sym.imp.KERNEL32.dll_OpenProcess]
xchg rsi, rax
mov r13, rsi
xchg rsi, rax
cmp rax, 0xffffffffffffffff
xchg r14, r14
jmp 0x14008d2b6
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
xchg r10, r10
jmp 0x14008d6c0
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov dword [rsp - 0x3c], 0x1bc588fe
jmp 0x14008d69c
inc r8
cmp byte [rax + r8], 0
jne 0x14008d39c
mov r8, r8
lea rdx, [rbp + 0x5c]
lea rcx, [rbp + 0x160]
jmp 0x14008d50e
cmp byte [rax + r8], 0
jne 0x14008d446
lea rdx, [rbp + 0x5c]
mov r15, r15
lea rcx, [rbp + 0x180]
jmp 0x14008d270
sub r14d, 0x35290f95
xor r14d, 0x25b2acb
movd xmm6, r14d
jmp 0x14008d82b
mov edx, edi
xchg rdi, rdi
movdqa xmm4, xmmword [0x14011b270]
jmp 0x14008d5b6
xchg r15, r15
jne 0x14008e8fe
mov r8d, dword [rbp + 0x38]
xor edx, edx
mov ecx, 0x311a5fc
jmp 0x14008d563
test al, al
je 0x14008dc8e
mov r8d, edi
jmp 0x14008d682
lea rax, [rbp + 0x5c]
xchg rdi, r8
mov rdi, r12
xchg rdi, r8
nop dword [rax + rax]
xchg r14, r14
inc r8
jmp 0x14008d3bd
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
mov dword [rsp - 0x24], edi
jmp 0x14008d2f3
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
mov dword [rsp - 0x28], edx
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
jmp 0x14008d71d
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
mov rdi, rdi
jmp 0x14008d8b4
xchg rbx, rcx
cmp rdx, 0x1000
mov dword [rsp - 0x18], 0x2b6b061a
jb 0x14008d2e2
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
jmp 0x14008d5a0
movups xmm0, xmmword [str.EWZXCYPTN]
mov dword [rsp - 0x20], edi
xchg rbp, rcx
movups xmmword [rcx - 0x80], xmm0
jmp 0x14008d88b
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
mov dword [rsp - 0xc], edx
jmp 0x14008d383
jne 0x14008ec49
xchg rdi, rsi
mov qword [rbp + 0x180], rsi
xchg rsi, rdi
xchg r10, rdi
mov qword [rbp + 0x190], r10
xchg rdi, r10
jmp 0x14008d7fa
call fcn.140019990
lea rdx, [rbp + 0x160]
mov dword [rsp - 0x1c], 0x2dc90d68
lea rcx, [0x1402593e1]
jmp 0x14008d234
add qword [rbp + 0x178], 0x25c33239
xor qword [rbp + 0x178], 0x3b02364a
sub qword [rbp + 0x178], 0x57609043
lea rax, [rbp + 0x5c]
mov dword [rsp - 0x34], 0xf5d7f5e
mov r8, r12
jmp 0x14008d39c
add ecx, 0x3f1f3951
xor ecx, 0x55eaab77
add ecx, 0x471eeb1c
sub ecx, 0x4b83da31
xor ecx, 0x65b19fc1
xor ecx, 0x121c33da
jmp 0x14008d34f
lea rcx, [rbp - 0x7c]
mov r9, r9
mov r8d, dword [rbp + 0x160]
nop
jmp 0x14008d74e
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
jmp 0x14008d2d5
mov r14d, 0x35bdab64
xor r14d, 0x22c351af
sub r14d, 0x1614b86b
add r14d, 0x7572aba4
sub r14d, 0x5a185ace
add r14d, 0x1abfa72d
jmp 0x14008d3db
test eax, eax
mov dword [rsp - 0x10], esi
je 0x14008ec49
cmp dword [rbp + 0x1a0], 0
jmp 0x14008d4e9
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
mov dword [rsp - 0x1c], 0x517307c5
punpckhdq xmm0, xmm3
jmp 0x14008d4d7
sub rdx, 0x4c11cec6
add rdx, 0x4c11ceed
mov rcx, qword [rcx - 8]
mov dword [rsp - 0x28], ebp
sub rax, rcx
jmp 0x14008d489
xchg r9, rcx
mov r9, qword [rbp + 0x160]
xchg rcx, r9
xchg rbx, rcx
mov rax, rbx
jmp 0x14008d499
mov r15, qword [rbp + 0x198]
xchg rsi, rbx
mov rbx, qword [rbp + 0x180]
xchg rsi, rbx
jmp 0x14008d4c0
xchg r15, r15
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
jmp 0x14008d8e6
cmp ebx, 2
mov dword [rsp - 0x24], ebp
jl 0x14008d949
movdqa xmm5, xmmword [0x140119390]
jmp 0x14008d3f3
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
mov r11, r11
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x14008d36e
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
xchg rbx, rbx
movd xmm0, dword [rcx]
jmp 0x14008d2a8
mov dword [rsp - 0x1c], edx
cmp r15, 0x10
cmovae rbx, rsi
cmp rbx, r14
je 0x14008d4c0
mov dword [rsp - 0x18], 0x3228063c
jmp 0x14008d8cc
sub edx, 0x309c19d8
add edx, 0x309c19e0
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x14008d74e
mov dword [rsp - 0x28], edx
jmp 0x14008d2ee
lea eax, [rdx + 4]
xchg r10, r10
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
xchg r13, r13
jmp 0x14008d5fc
xchg r12, rax
mov r12, qword [rbp + 0x178]
xchg r12, rax
sub rax, rcx
xchg rdx, rdx
jmp 0x14008d253
movd xmm2, edx
pshufd xmm2, xmm2, 0
mov dword [rsp - 0x3c], esi
paddd xmm2, xmm5
movdqa xmm1, xmm2
jmp 0x14008d7c0
xchg rdi, r8
mov qword [rbp + 0x170], rdi
mov qword [rbp + 0x178], 0x3555752d
xor qword [rbp + 0x178], 0x597c923b
sub qword [rbp + 0x178], 0x258a7337
jmp 0x14008d52e
sub eax, 0x1f0ee3ab
sub eax, 0x3322f02a
xor eax, 0x3ff738a0
xor eax, 0x268c18fa
xor eax, 0x79475f7a
sub eax, 0x793301dd
movd xmm8, eax
jmp 0x14008d91d
punpckldq xmm1, xmm2
mov dword [rsp - 0x18], 0x60511764
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
jmp 0x14008d66d
xchg r14, r12
mov r12, qword [rbp + 0x190]
xchg r14, r12
add r14, rcx
lea rbx, [rbp + 0x180]
jmp 0x14008d6d9
mov qword [rbp + 0x198], 0x7b6df9b3
xor qword [rbp + 0x198], 0x652ea0d2
xor qword [rbp + 0x198], 0x5c1f6168
sub qword [rbp + 0x198], 0x3d3a7107
jmp 0x14008d845
mov dword [rsp - 0x18], 0x37959d7a
movdqa xmm7, xmmword [0x14011b250]
mov eax, 0x6b4152b1
jmp 0x14008d798
add qword [rbp + 0x198], 0x18af7cc
xor qword [rbp + 0x198], 0x2069378a
add qword [rbp + 0x198], 0x390964b2
add qword [rbp + 0x198], 0x1da17ab0
xor qword [rbp + 0x198], 0x7d7068a9
mov byte [rbp + 0x180], bl
mov dword [rsp - 0x40], esi
jmp 0x14008d42e
xchg rbp, rcx
psrldq xmm0, 0xf
mov dword [rsp - 0x24], 0x5cfec8e0
movd eax, xmm0
xor edi, edi
mov ebx, dword [0x1402567d0]
mov dword [rsp - 0x44], 0x51d6eed7
jmp 0x14008d41e
ja 0x14008ed92
call fcn.1400e9d60
test ebx, ebx
je 0x14008e8fe
jmp 0x14008d312
sub rdi, rbx
movsx ecx, byte [rbx]
call fcn.1400b68a0
mov dword [rsp - 0x14], ebp
mov byte [rbx + rdi], al
inc rbx
jmp 0x14008d938
psrad xmm1, xmm6
mov dword [rsp - 0x40], 0x15c1637e
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
mov r10, r10
jmp 0x14008d44e
cmp rdx, 0x10
jb 0x14008d2e7
inc rdx
mov dword [rsp - 0x18], ecx
jmp 0x14008d63c
movdqa xmm0, xmmword [0x14011b8e0]
xchg rbp, rsi
movdqa xmmword [rsi + 0x160], xmm0
xchg rbp, rsi
jmp 0x14008d58c
cmp rbx, r14
xchg rbp, rbp
jne 0x14008d8cf
jmp 0x14008d654
lea r9, [rbp - 0x80]
mov dword [rsp - 0x1c], esp
nop dword [rax]
mov eax, 0x4a714602
sub eax, 0x7289c20
sub eax, 0x41c6ef3c
add eax, 0x1b6bbc2d
jmp 0x14008dad0
pxor xmm2, xmm0
mov dword [rsp - 0x14], esp
movd dword [rcx - 4], xmm2
jmp 0x14008d9e8
psubd xmm3, xmm0
mov dword [rsp - 0x40], esp
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
jmp 0x14008daa2
jmp 0x14008e2d6
mov dword [rsp - 0x40], 0x11f32ee2
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
mov r14, r14
paddd xmm2, xmm5
jmp 0x14008daef
lea rdx, [rbp - 0x80]
mov dword [rsp - 0x24], ebx
lea rcx, [rbp + 0x180]
call fcn.1400918e0
cmp rax, 0xffffffffffffffff
jmp 0x14008da80
lea eax, [rdx + 4]
movd xmm3, eax
mov dword [rsp - 0x1c], 0x62a49a70
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
xchg r11, r11
jmp 0x14008db5b
psrad xmm1, xmm6
mov dword [rsp - 0x40], 0x14d0fb47
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
xchg r12, r12
jmp 0x14008dc99
movzx eax, r8b
sub al, cl
neg al
add al, 0xce
jmp 0x14008dac0
movd xmm0, r8d
mov dword [rsp - 0x24], 0x449a7500
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
jmp 0x14008d96d
xchg rbp, rsp
movsd xmm1, qword [0x14011d368]
xchg r12, rbp
movsd qword [r12 - 0x40], xmm1
xchg rbp, r12
cmp byte [0x14011d36f], 0
jmp 0x14008daff
mov dword [rsp - 0x18], 0x783246aa
jne 0x14008ebdb
movups xmm0, xmmword [0x14011d358]
xchg rbp, rsp
movups xmmword [rsp - 0x50], xmm0
jmp 0x14008da5c
mov dword [rsp - 0x1c], 0x3b6010f1
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
jmp 0x14008dcde
neg al
xor byte [r9], al
mov rbp, rbp
inc r8d
jmp 0x14008dc78
add eax, 0x14ac086
xor eax, 0x1f5013e3
add eax, 0x78facf48
xor eax, 0x6512b3df
mul r8d
mov eax, r8d
jmp 0x14008db1a
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
mov rdi, rdi
jmp 0x14008db71
mov dword [rsp - 0x18], esi
je 0x14008e2d6
mov r8d, edi
cmp ebx, 2
jl 0x14008dcf3
jmp 0x14008db2b
xchg rsi, rsi
sub eax, edx
shr eax, 1
add eax, edx
mov rsi, rsi
jmp 0x14008dbff
mov dword [rsp - 0x3c], 0x3165f67f
movdqa xmm5, xmmword [0x140119390]
mov edx, edi
movdqa xmm4, xmmword [0x14011b270]
movd xmm6, r14d
mov dword [rsp - 0x10], ebp
movdqa xmm7, xmmword [0x14011b250]
jmp 0x14008dc12
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
mov dword [rsp - 0x40], esp
jmp 0x14008dbb2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov dword [rsp - 0x34], 0x116768b4
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
jmp 0x14008da0c
movdqa xmm0, xmm1
psrld xmm0, xmm8
mov r15, r15
paddd xmm0, xmm1
pmulld xmm0, xmm7
jmp 0x14008d97f
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
mov dword [rsp - 0x2c], 0x298b333b
paddd xmm1, xmm3
psrad xmm1, xmm6
jmp 0x14008db98
xor r14d, 0x136a4607
xor r14d, 0x14df6456
sub r14d, 0x70b0f7d
add r14d, 0x103f8f09
xor r14d, 0x21b9ed5a
xor r8d, r8d
jmp 0x14008d9cb
shr eax, 4
shr eax, 1
movsx eax, al
imul ecx, eax, 0x39
xchg r8, r8
jmp 0x14008da32
mov eax, 0x40c50ecd
add eax, 0x103c0def
xor eax, 0x285f3e3e
sub eax, 0x141b9e2d
sub eax, 0x43f8463d
sub eax, 0x10f091d2
jmp 0x14008dc5c
movdqa xmm0, xmmword [0x14011b8e0]
xchg rsp, rbp
movdqa xmmword [rsp + 0x160], xmm0
xchg rbp, rsp
lea rcx, [rbp - 0x4c]
mov r8d, dword [rbp + 0x160]
jmp 0x14008d9a8
add eax, 0x99161a0
xor eax, 0x2fda04c8
sub eax, 0x3631090f
movd xmm8, eax
xchg r13, r13
jmp 0x14008dc35
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x14008d954
mov dword [rsp - 0xc], 0x252a8c55
mov r14d, 0x1f304f82
jmp 0x14008dbd4
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
mov dword [rsp - 0x40], edx
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
jmp 0x14008da41
add edx, 8
lea rcx, [rcx + 8]
mov dword [rsp - 0x40], 0x1cb8edf5
cmp edx, 0x18
jl 0x14008d9b6
jmp 0x14008d9a3
mov dword [rsp - 0x24], 0x6c187a10
pxor xmm2, xmm0
movd dword [rcx], xmm2
jmp 0x14008dcc1
lea r9, [rbp - 0x50]
mov dword [rsp - 0x40], ebx
nop dword [rax]
jmp 0x14008dfc2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [str.AEW_YDL]
xchg rsp, rsp
jmp 0x14008e44b
punpckldq xmm1, xmm3
mov rbp, rbp
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
jmp 0x14008e35e
sub eax, 0x79a5c521
movd xmm5, eax
mov rdi, rdi
movdqa xmm2, xmmword [0x140119390]
jmp 0x14008e266
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
xchg r13, r13
jmp 0x14008e558
nop
mov dword [rsp - 0x30], ebx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x160], xmm0
xchg rdi, rcx
mov qword [rbp + 0x170], rcx
jmp 0x14008e87f
mov eax, 0x34f98e8b
add eax, 0x2043117a
add eax, 0x24dcb98c
xor eax, 0x409091a1
sub eax, 0x1362ee7e
jmp 0x14008de20
add eax, 0x588ec7fe
sub eax, 0x42a3bf3
sub eax, 0x4b36c334
jmp 0x14008ddf8
xor byte [rsp + 0x4b], 0x35
xor byte [rsp + 0x4c], 0x36
xor byte [rsp + 0x4d], 0x37
xor byte [rsp + 0x4e], 0x38
jmp 0x14008e76e
xchg rsp, r11
movsd qword [r11 + 0x38], xmm0
xchg rsp, r11
movzx eax, word [0x14011d3b8]
mov word [rsp + 0x40], ax
mov dword [rsp - 0x30], ebp
movzx eax, byte [0x14011d3ba]
jmp 0x14008e9a8
mul r8d
mov eax, r8d
mov r12, r12
jmp 0x14008e665
mov rdi, qword [r11 + 0x48]
xchg r11, rbp
movaps xmm6, xmmword [rbp - 0x10]
xchg rbp, r11
xchg r11, rsi
movaps xmm7, xmmword [rsi - 0x20]
jmp 0x14008e3aa
sub eax, 0x3285134
add eax, 0x4d182625
add eax, 0x88f169d
jmp 0x14008dd34
sub al, 0xd
add al, 0x3f
xor byte [r9], al
mov dword [rsp - 0xc], 0x6b428acb
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jmp 0x14008e898
pmuldq xmm1, xmm4
xchg r12, r12
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
jmp 0x14008def5
mov eax, edx
shr eax, 7
shr eax, 0xf
jmp 0x14008df78
call sub.KERNEL32.dll_Process32Next
mov rbp, rbp
test eax, eax
jne 0x14008cff0
mov rcx, qword [rsp + 0x78]
jmp 0x14008e197
pmuldq xmm0, xmm4
mov dword [rsp - 0x3c], ecx
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
jmp 0x14008e090
je 0x14008e595
mov byte [rsp + 0x28], 2
add byte [rsp + 0x28], 0x3a
sub byte [rsp + 0x28], 0x2e
jmp 0x14008e11b
movsd qword [rdx + 0x28], xmm0
xchg rdx, rsp
movzx eax, word [0x14011d398]
mov word [rsp + 0x30], ax
cmp byte [0x14011d399], 0
mov dword [rsp - 0x20], 0x43c7fbfc
jmp 0x14008df0b
mov rcx, qword [rbp + 0x1a8]
xor rcx, rsp
mov dword [rsp - 0x34], esp
call fcn.1400e9e80
jmp 0x14008ead2
call fcn.140019990
nop
movsd xmm0, qword [str.VDYTF]
jmp 0x14008ddd0
shr eax, 5
shr eax, 3
shr eax, 1
add edx, eax
mov dword [rsp - 0x30], 0x3f3fe3ba
movsx eax, dl
jmp 0x14008e67b
movd xmm1, dword [rsp + 0x5c]
pxor xmm2, xmm1
movd dword [rsp + 0x5c], xmm2
mov r8d, 0x626ff609
sub r8d, 0x3339f70a
sub r8d, 0x108c9c78
add r8d, 0x3e586594
jmp 0x14008e6d8
mov eax, 0x2777ef0
add eax, 0x78a1cd5f
xor eax, 0x422fbfc7
sub eax, 0x22f47482
jmp 0x14008dda3
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x14008e4f4
mov dword [rsp - 0x18], 0x6cd99c9d
xorps xmm0, xmm0
xchg r13, rbp
movups xmmword [r13 - 0x70], xmm0
xchg rbp, r13
xchg rbx, r8
jmp 0x14008e3f4
sar edx, 1
sar edx, 1
mov eax, edx
mov dword [rsp - 0x34], ebx
shr eax, 2
shr eax, 8
jmp 0x14008e2f1
xchg rdi, r14
mov rdx, r14
xchg rdi, r14
xchg r11, rbx
mov rcx, r11
jmp 0x14008e106
sub al, 0x1e
xor byte [r9], al
mov dword [rsp - 0x18], ecx
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x18
jl 0x14008dfc2
jmp 0x14008e2ce
mov dword [rsp - 0x24], 0x56c8fd52
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
mov dword [rsp - 0x1c], edx
pmulld xmm0, xmmword [0x14011b250]
jmp 0x14008e07a
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
mov r14, r14
jmp 0x14008dd4d
psrad xmm1, xmm6
mov dword [rsp - 0x10], 0x23fa67c
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14011b250]
mov dword [rsp - 0x14], esp
jmp 0x14008dfdb
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x180]
call fcn.1400918e0
jmp 0x14008e636
add byte [rbp - 0x30], 8
xor byte [rbp - 0x30], 0x67
xor byte [rbp - 0x30], 0x28
sub byte [rbp - 0x30], 0x33
sub byte [rbp - 0x30], 0x2e
add byte [rbp - 0x30], 0x42
xor byte [rbp - 0x30], 0x5c
jmp 0x14008eb7d
paddb xmm2, xmm0
movd xmm1, dword [0x14011d370]
pxor xmm2, xmm1
jmp 0x14008e139
xchg r11, rbx
call fcn.1400208e0
nop
sub rbx, 0x38cb280f
jmp 0x14008eaba
add byte [rsp + 0x28], 0x45
xor byte [rsp + 0x28], 0x6b
xor byte [rsp + 0x28], 0x22
xor byte [rsp + 0x28], 0x7e
xor byte [rsp + 0x29], 0x33
jmp 0x14008e241
mov r8, r8
movd dword [rsp + 0x68], xmm2
movdqa xmm3, xmmword [0x1401193a0]
movdqa xmm1, xmm3
jmp 0x14008dd1b
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
mov r12, r12
mov eax, dword [0x14011b8e0]
jmp 0x14008dd03
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov dword [rsp - 0x14], 0x3c02ea41
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14011b250]
jmp 0x14008e916
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xchg r13, r13
movzx eax, byte [rsp + 0x20]
jmp 0x14008df4d
xchg rsi, r15
mov r15, qword [r11 + 0x40]
xchg rsi, r15
jmp 0x14008de06
mov rbx, rax
xchg r10, r10
xchg rsi, rax
mov qword [rbp + 0x160], rsi
xchg rsi, rax
mov qword [rbp + 0x168], rax
jmp 0x14008e834
pop r13
mov r9, r9
pop r12
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
pxor xmm2, xmm1
mov dword [rsp - 0x20], 0x25013b73
movd dword [rsp + 0x6c], xmm2
mov r8d, 0x3fb1e542
sub r8d, 0x872e0fe
jmp 0x14008e77e
xor byte [rsp + 0x3d], 0x37
xor byte [rsp + 0x3e], 0x38
xor byte [rsp + 0x3f], 0x39
jmp 0x14008e56b
xor byte [rsp + 0x2a], 0x34
mov dword [rsp - 0x28], 0x2c6d4250
xor byte [rsp + 0x2b], 0x35
jmp 0x14008ebb5
mov rbp, rbp
mov r8d, edi
cmp ebx, 2
jmp 0x14008ea40
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
mov dword [rsp - 0x10], esp
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
jmp 0x14008e5bc
sub byte [rsp + 0x48], 0x71
xor byte [rsp + 0x48], 0x19
xor byte [rsp + 0x48], 0x40
xor byte [rsp + 0x48], 0x25
jmp 0x14008ea77
sub qword [rbp + 8], 0x189a3459
add qword [rbp + 8], 0x22c1e668
sub qword [rbp + 8], 0x2ecbf58a
xor qword [rbp + 8], 0xa2a0ddc
sub qword [rbp + 8], 0x62ea75d
mov byte [rbp - 0x10], 0x69
jmp 0x14008e377
mov dword [rsp - 0x10], 0x13335249
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x180]
mov r13, r13
call fcn.1400918e0
jmp 0x14008e991
shr eax, 0xa
shr eax, 7
shr eax, 3
shr eax, 1
add edx, eax
jmp 0x14008e541
mov dword [rsp - 0x1c], 0x3a26fd
cmp byte [rax + r8], 0
jne 0x14008e82c
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x10]
mov dword [rsp - 0x18], 0x2a099001
jmp 0x14008df65
inc r8
mov r12, r12
cmp byte [rax + r8], 0
jne 0x14008e32c
jmp 0x14008ea65
mov rsp, rsp
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
jmp 0x14008e054
sub byte [rbp - 0x10], 0x4e
add byte [rbp - 0x10], 0x55
xor byte [rbp - 0x10], 0x2c
add byte [rbp - 0x10], 0x1d
jmp 0x14008e816
mov eax, 0x5e208a40
add eax, 0x12592cd3
add eax, 0x901b73c
sub eax, 0x4eeb2a93
sub eax, 0x3a5a5dc
jmp 0x14008eb08
xchg rsi, r11
xchg r11, r8
movaps xmm8, xmmword [r8 - 0x30]
jmp 0x14008e52b
mov qword [rbp + 0x20], rdi
mov r14, r14
mov qword [rbp + 0x28], 0x477a9faf
add qword [rbp + 0x28], 0x2fa27e13
sub qword [rbp + 0x28], 0xd2d99ec
xor qword [rbp + 0x28], 0x61054667
jmp 0x14008eb4b
nop
mov r14, qword [rsp]
add rsp, 8
jmp 0x14008e1f7
mov qword [rbp - 0x70], r8
xchg rbx, r8
mov qword [rbp - 0x68], rbx
mov dword [rsp - 0x30], esp
lea rax, [rbp + 0x160]
mov qword [rbp - 0x60], rax
nop word [rax + rax]
jmp 0x14008e021
mov byte [rsp + 0x50], al
xchg r8, r8
mov qword [rbp - 0x10], rdi
jmp 0x14008eb1c
pxor xmm2, xmm1
movd dword [rsp + 0x58], xmm2
movdqa xmm3, xmmword [0x1401193a0]
movdqa xmm1, xmm3
mov r15, r15
punpckldq xmm1, xmm3
jmp 0x14008e9ef
xor ecx, 0x2763494e
add ecx, 0x223e9a85
add ecx, 0x10a75844
xor ecx, 0x124cd354
sub ecx, 0x6b096c7e
sub ecx, 0x7546f6e
call fcn.1400e9d24
jmp 0x14008e1b9
inc r8
cmp byte [rax + r8], 0
jne 0x14008e49b
lea rdx, [rsp + 0x38]
xchg rcx, rcx
lea rcx, [rbp + 0x10]
call fcn.140019990
jmp 0x14008dd66
sub eax, 0x3319b42c
xor eax, 0x7b2a783d
sub eax, 0x3d643b88
jmp 0x14008e859
pshufd xmm2, xmm1, 0xd8
mov dword [rsp - 0x30], esi
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
mov eax, dword [0x14011b8e0]
xchg r15, r15
movd xmm0, eax
jmp 0x14008e0f1
mov r8, rsp
xchg r12, rsp
nop
mov rsp, rsp
jmp 0x14008e49b
xchg r11, r8
xchg r11, r8
mov rsp, r8
xchg r11, r8
pop r15
mov rbx, rbx
jmp 0x14008e3e6
movsx eax, dl
mov r11, r11
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
xchg rdi, rdi
jmp 0x14008e936
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x6c]
jmp 0x14008e209
xchg rcx, rcx
xor byte [rsp + 0x40], 0x3a
xor byte [rsp + 0x41], 0x3b
jmp 0x14008e9d7
xchg r15, rdi
mov qword [rbp - 0x18], 0x37385176
sub qword [rbp - 0x18], 0x153095a7
jmp 0x14008e605
mov qword [rbp - 0x30], rdi
xchg rdi, rdi
xchg r15, rdi
mov qword [rbp - 0x20], r15
jmp 0x14008e57d
mov rdx, rdx
movsd qword [rsp + 0x68], xmm0
mov eax, dword [0x14011d378]
jmp 0x14008ea16
mov dword [rsp - 0x1c], 0x3f56bc72
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
mov r13, r13
jmp 0x14008e7c7
add eax, 0x605fea37
add eax, 0x2945487e
imul r8d
xchg rbx, rbx
add edx, r8d
sar edx, 3
jmp 0x14008e00c
xor byte [rbp + 0x10], 0x65
add byte [rbp + 0x10], 0x27
xor byte [rbp + 0x10], 0x68
jmp 0x14008ea9d
sub qword [rbp - 0x18], 0x21440b90
xor qword [rbp - 0x18], 0x12bd7362
add qword [rbp - 0x18], 0x214bfb3b
sub qword [rbp - 0x18], 0x306f47db
sub qword [rbp - 0x18], 0x35b76ae
mov byte [rbp - 0x30], 0x1d
jmp 0x14008e0d0
cmp rax, 0xffffffffffffffff
mov dword [rsp - 0x10], ebp
jne 0x14008ebdb
movsd xmm0, qword [str.AEW_YDL]
movsd qword [rsp + 0x58], xmm0
mov dword [rsp - 0x34], 0x15265e6b
mov eax, dword [0x14011d388]
jmp 0x14008eae9
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 4
shr eax, 1
movsx eax, al
imul ecx, eax, 0x39
jmp 0x14008eb68
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
xchg rdx, rdx
jmp 0x14008de5d
call fcn.140019990
nop
movsd xmm0, qword [str.VKS_]
mov dword [rsp - 0xc], ecx
movsd qword [rsp + 0x48], xmm0
movzx eax, byte [0x14011d3a8]
mov byte [rsp + 0x48], 0x78
jmp 0x14008e284
xor r8d, 0x4677c88a
add r8d, 0x2f79c071
sub r8d, 0x4aefc0fa
mov eax, r8d
mov dword [rsp - 0x30], 0x40cb8d47
jmp 0x14008e953
jl 0x14008e6ed
movdqa xmm4, xmmword [0x14011b270]
mov r10, r10
movd xmm6, r14d
jmp 0x14008dd85
imul r8d
add edx, r8d
mov dword [rsp - 0x1c], esp
sar edx, 3
sar edx, 1
sar edx, 1
jmp 0x14008de91
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
mov dword [rsp - 0x34], 0x7f5668c8
pshufd xmm2, xmm1, 0xd8
jmp 0x14008e153
add byte [rsp + 0x38], 0x1d
xor byte [rsp + 0x39], 0x33
xchg r9, r9
xor byte [rsp + 0x3a], 0x34
xor byte [rsp + 0x3b], 0x35
xor byte [rsp + 0x3c], 0x36
mov rdi, rdi
jmp 0x14008e22d
mov dword [rsp - 0x20], esp
xor byte [rsp + 0x4f], 0x39
xor al, 0x3a
jmp 0x14008e43b
add r8d, 0x19cc5315
sub r8d, 0xfbab244
xor r8d, 0x1cc1c7f
xor r8d, 0x4d050c4e
add r8d, 0x44e34b63
jmp 0x14008eb94
pand xmm2, xmmword [0x1401193d0]
mov dword [rsp - 0x18], ecx
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
mov dword [rsp - 0x20], ebp
jmp 0x14008df92
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
mov rsi, rsi
pmulld xmm0, xmmword [0x14011b250]
psubd xmm2, xmm0
jmp 0x14008e72e
lea rcx, [rbp + 0x180]
call fcn.1400918e0
cmp rax, 0xffffffffffffffff
jne 0x14008ebdb
mov dword [rsp - 0x18], ebp
movsd xmm0, qword [0x14011d390]
xchg rsp, rdx
jmp 0x14008df25
sub byte [rbp - 0x10], 0x79
lea rax, [rsp + 0x48]
mov dword [rsp - 0x34], esp
mov r8, r12
nop word [rax + rax]
inc r8
jmp 0x14008e303
lea rcx, [rax + 0x60]
xchg rcx, rdx
mov qword [rbp + 0x170], rdx
xchg rcx, rdx
lea rax, [rbp + 0x160]
mov qword [rbp - 0x80], rax
lea rdi, [rbp - 0x30]
jmp 0x14008dfee
sub eax, 0xd303064
sub eax, 0x210bcca3
movd xmm5, eax
mov r9, r9
movdqa xmm2, xmmword [0x140119390]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
jmp 0x14008de7c
xchg rcx, rdi
mov ecx, 0x783ad4b4
sub ecx, 0x6a4eaad
sub ecx, 0x674d9506
jmp 0x14008e46d
mov r8, r8
jl 0x14008e38c
xor r8d, r8d
lea rdx, [rsp + 0x58]
xchg rsi, rsi
jmp 0x14008e7ec
lea rax, [rbp + 0x30]
cmp rdi, rax
xchg r13, r13
jne 0x14008e021
xchg r10, rbx
mov qword [rbp - 0x70], r10
jmp 0x14008e68c
lea rdx, [rbp + 0x30]
mov dword [rsp - 0x24], edi
xchg rcx, r12
mov r12, qword [rsp + 0x78]
xchg r12, rcx
jmp 0x14008de9e
psubd xmm3, xmm0
mov dword [rsp - 0x3c], 0x520171ff
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
jmp 0x14008e7a6
sub al, 0xce
xor byte [r9], al
inc r8d
mov dword [rsp - 0x2c], 0x4569b20a
lea r9, [r9 + 1]
cmp r8d, 0xe
jmp 0x14008e9c6
lea r9, [rsp + 0x58]
add r9, rax
nop word [rax + rax]
mov rbx, rbx
jmp 0x14008e38c
add eax, 0x1cc3c1ed
xor eax, 0x45224ced
add eax, 0x334ee072
add eax, 0x2b20797d
sub eax, 0x34976bd0
xor eax, 0x4125bab9
jmp 0x14008e5d9
cmp rax, 0xffffffffffffffff
jne 0x14008ebdb
movsd xmm0, qword [0x14011d370]
jmp 0x14008e5a8
mov byte [rsp + 0x38], 0x4f
sub byte [rsp + 0x38], 0x38
xor byte [rsp + 0x38], 0x69
sub byte [rsp + 0x38], 0x70
add byte [rsp + 0x38], 0x39
jmp 0x14008e74a
jl 0x14008ebab
xor r8d, r8d
xchg rcx, rcx
jmp 0x14008e0ba
xor al, 0x3c
mov byte [rsp + 0x42], al
mov r15, r15
xchg rdi, r10
mov qword [rbp + 0x10], r10
xchg rdi, r10
jmp 0x14008e3ba
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
mov dword [rsp - 0x24], edx
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
mov dword [rsp - 0x34], 0x3539902
jmp 0x14008e16d
mov dword [rsp + 0x70], eax
mov dword [rsp - 0x14], 0x7c7d9792
movzx eax, word [0x14011d37c]
mov word [rsp + 0x74], ax
cmp byte [0x14011d37d], 0
je 0x14008e9cc
jmp 0x14008e258
jl 0x14008eb9b
movdqa xmm4, xmmword [0x14011b270]
xchg r10, r10
movd xmm6, r14d
mov eax, 0x1da6f819
add eax, 0x25fcfca6
jmp 0x14008e4e0
lea rdx, [rsp + 0x28]
mov dword [rsp - 0x10], edi
lea rcx, [rbp - 0x30]
jmp 0x14008e6af
xor byte [rsp + 0x48], 0x54
sub byte [rsp + 0x48], 0xa
sub byte [rsp + 0x48], 0x23
add byte [rsp + 0x48], 0x62
xor byte [rsp + 0x49], 0x33
xor byte [rsp + 0x4a], 0x34
mov rdi, rdi
jmp 0x14008ddb7
add byte [rbp + 0x10], 0x46
xor byte [rbp + 0x10], 0x77
add byte [rbp + 0x10], 0x4c
xor byte [rbp + 0x10], 0x61
lea rax, [rsp + 0x38]
xchg rsp, r12
jmp 0x14008e51b
add rbx, 0x38cb282f
mov qword [rbp - 0x68], rbx
mov dword [rsp - 0x38], ebp
sub rdi, 0xffffffffffffffe0
jmp 0x14008e8e0
lea r11, [rsp + 0x2e0]
xchg rbx, r15
mov r15, qword [r11 + 0x30]
xchg r15, rbx
jmp 0x14008e1aa
mov dword [rsp + 0x60], eax
cmp byte [0x14011d38b], 0
je 0x14008e8a1
mov r8, r8
mov r8d, edi
cmp ebx, 2
jmp 0x14008e6fd
add eax, 0x46d92b91
xor eax, 0x279744ea
add eax, 0x45639654
jmp 0x14008e718
xchg rdi, r15
mov qword [rbp], r15
xchg rdi, r15
mov qword [rbp + 8], 0x6b2c9f62
sub qword [rbp + 8], 0x16f31637
add qword [rbp + 8], 0x1054e0dc
xor qword [rbp + 8], 0x5426842c
jmp 0x14008e29d
xor qword [rbp + 0x28], 0x14669702
sub qword [rbp + 0x28], 0x1c8c52a4
mov byte [rbp + 0x10], 0x6a
xor byte [rbp + 0x10], 0x42
jmp 0x14008e5f4
mov dword [rsp - 0x38], 0x3dea98e7
movzx eax, r8b
sub al, cl
add al, 0x50
jmp 0x14008e035
xor byte [rbp - 0x30], 0x17
lea rax, [rsp + 0x28]
xchg r8, r12
mov r12, r8
xchg r12, r8
jmp 0x14008e32c
sub r8d, 0x527d007f
mov eax, r8d
lea r9, [rsp + 0x68]
add r9, rax
mov dword [rsp - 0x40], esi
nop
mov eax, 0x3bb94f9c
jmp 0x14008e96e
xor byte [rsp + 0x2c], 0x36
xor byte [rsp + 0x2d], 0x37
xor byte [rsp + 0x2e], 0x38
mov rsp, rsp
xor byte [rsp + 0x2f], 0x39
xor byte [rsp + 0x30], 0x3a
xor byte [rsp + 0x31], 0x3b
jmp 0x14008e595
cmp r15, 0x10
xchg r9, r9
jb 0x14008e8fe
lea rdx, [r15 + 1]
mov rax, rsi
mov r14, r14
cmp rdx, 0x1000
jmp 0x14008ec13
sub rax, 0xffffffffe68ebf30
add rax, 0xffffffffe68ebf28
cmp rax, 0x1f
jmp 0x14008ec2d
jb 0x14008ec36
sub rdx, 0xffffffffffffffd9
mov rsi, qword [rsi - 8]
xchg r11, r11
sub rax, rsi
nop
jmp 0x14008ebfe
mov rsp, rsp
ja 0x14008ed98
xchg rsi, rcx
mov rsi, rcx
xchg rcx, rsi
call fcn.1400e9d60
jmp 0x14008e8fe
xchg r13, rcx
mov r13, rcx
xchg r13, rcx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rcx
jmp 0x14008e8fe
call fcn.1400f0a1c
int3
call fcn.1400f0a1c
mov dword [rsp - 0x30], esp
int3