Function at 0x14008c550
Capabilities:
Enumerate gui resources
Enumerate processes

Disassembly:
mov rax, rsp
xchg rbx, r15
mov qword [rax + 8], r15
xchg rbx, r15
jmp 0x14008c7ff
mov qword [rsp - 8], rbp
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r12
nop
jmp 0x14008c650
movaps xmmword [rax - 0x58], xmm8
mov dword [rsp - 0x2c], 0xcd4d90f
mov rax, qword [0x14024f2e0]
xor rax, rsp
jmp 0x14008c5c3
mov dword [rsp - 0x14], edx
cmp rdx, 0x1000
jb 0x14008c67a
sub rdx, 0xffffffffffffffd9
jmp 0x14008c81b
movaps xmmword [rax - 0x38], xmm6
xchg r12, rax
movaps xmmword [r12 - 0x48], xmm7
xchg r12, rax
jmp 0x14008c57a
xchg rsi, rax
mov qword [rbp + 0x1a8], rsi
xchg rsi, rax
jmp 0x14008c639
xchg rbx, rbx
movsxd rcx, dword [rbp + 0x38]
cmp ecx, eax
je 0x14008dc94
xchg r8, rcx
mov qword [rbp + 0x160], r8
xchg rcx, r8
jmp 0x14008c718
mov qword [rsp], r14
nop
push 0x314e1d3a
mov qword [rsp], r15
lea rbp, [rax - 0x208]
mov dword [rsp - 0x1c], 0x3b425a49
sub rsp, 0x2e0
jmp 0x14008c5b0
je 0x14008dc94
mov rcx, rcx
xchg rbx, rax
mov rbx, qword [rbp + 0x178]
xchg rbx, rax
sub rax, rcx
jmp 0x14008c6d5
xchg rbx, rdx
mov qword [rbp - 0x58], rbx
xchg rbx, rdx
xor edx, edx
lea ecx, [rdx + 2]
mov r13, r13
jmp 0x14008c662
sub rsp, 8
mov qword [rsp], r13
nop
sub rsp, 8
jmp 0x14008c5f4
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14008d7a0
jmp 0x14008c69a
call fcn.1400e3588
jmp 0x14008dc94
lea rdx, [rbp + 0x30]
mov rcx, qword [rsp + 0x78]
xchg r11, r11
call sub.KERNEL32.dll_Process32First
jmp 0x14008c741
xchg r8, r8
xor edx, edx
mov r8d, 0x4273fb27
xor r8d, 0x291983a9
xor r8d, 0x3fe4fb41
jmp 0x14008c7d2
mov r12, qword [rbp + 0x168]
xchg r12, rcx
test eax, eax
xchg r15, r15
jne 0x14008c858
test rcx, rcx
jmp 0x14008c61d
mov dword [rsp - 0xc], 0x67bbfe8
sar rax, 1
sar rax, 1
sar rax, 1
lea rdx, [rax*8]
mov rax, rcx
jmp 0x14008c596
xchg rdi, r11
lea rdx, [rbp + 0x160]
lea rcx, [0x14008c410]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rdx, rdx
xchg rcx, r12
jmp 0x14008c6b8
xorps xmm0, xmm0
mov dword [rsp - 0x20], 0x12d4555b
xchg rbp, r14
movdqu xmmword [r14 + 0x168], xmm0
xchg r14, rbp
xchg r11, rdi
mov qword [rbp + 0x178], r11
jmp 0x14008c6f6
test eax, eax
je 0x14008d790
xor edi, edi
mov dword [rsp - 0x44], 0x7835bf99
lea r12, [rdi - 1]
nop
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
jmp 0x14008c5d3
xor byte [rsp + 0x20], 0x43
xor byte [rsp + 0x20], 0x45
add byte [rsp + 0x20], 6
xor byte [rsp + 0x20], 0x59
jmp 0x14008c684
sub dword [rbp + 0x30], 0x73b119ae
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp - 0x3c], ebp
mov ecx, eax
lea rdx, [rbp + 0x1a4]
jmp 0x14008c840
mov dword [rbp + 0x30], 0x4d13089b
xor dword [rbp + 0x30], 0x59ec963e
xor dword [rbp + 0x30], 0x63fb82c9
sub dword [rbp + 0x30], 0x64b20f28
add dword [rbp + 0x30], 0x4d529fb8
sub dword [rbp + 0x30], 0x2f90c633
xor dword [rbp + 0x30], 0x43a2fc17
jmp 0x14008c77d
xor r8d, 0x6ba21446
xor r8d, 0x59f22e4
xor r8d, 0x77640500
sub r8d, 0x4dd7af41
lea rcx, [rbp + 0x34]
mov rdx, rdx
call fcn.1400e5df0
jmp 0x14008c79c
xchg rsi, rdx
mov qword [rax + 0x18], rdx
xchg rdx, rsi
mov qword [rax + 0x20], rdi
mov dword [rsp - 0x30], 0x769893ef
nop
jmp 0x14008c562
mov rcx, qword [rcx - 8]
xchg r14, r14
sub rax, rcx
add rax, 0xfffffffffffffff8
jmp 0x14008c82e
cmp rax, 0x1f
ja 0x14008e336
xchg r11, r11
jmp 0x14008c67a
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
xchg r11, r11
mov byte [rsp + 0x20], 0x58
sub byte [rsp + 0x20], 3
jmp 0x14008c764
xchg rdx, rbx
mov rdx, qword [rbp + 0x170]
xchg rdx, rbx
sub rbx, rcx
sar rbx, 3
mov dword [rsp - 0x18], edx
jmp 0x14008cbd9
mov rdi, r12
xchg rdi, r8
nop dword [rax + rax]
xchg rsi, rsi
jmp 0x14008ca1b
inc rdx
mov rcx, qword [rbp + 0x160]
mov dword [rsp - 0x28], edi
mov rax, rcx
jmp 0x14008cc0c
xchg rdi, r11
mov qword [rbp + 0x160], r11
xchg r11, rdi
xchg rdi, rsi
mov qword [rbp + 0x170], rsi
jmp 0x14008c8fe
jl 0x14008cc81
mov rbx, rbx
jmp 0x14008d28e
jne 0x14008caf2
lea rdx, [rbp + 0x5c]
lea rcx, [rbp + 0x160]
xchg rsi, rsi
call fcn.1400191c0
jmp 0x14008cc26
movdqa xmm0, xmm2
mov dword [rsp - 0x28], 0x69b1a7e3
punpckhdq xmm0, xmm2
jmp 0x14008cf2d
xchg rdi, rsi
mov qword [rbp + 0x178], 0x3b8f893a
sub qword [rbp + 0x178], 0x20ce8d75
jmp 0x14008cd77
paddd xmm3, xmm5
movdqa xmm1, xmm3
mov dword [rsp - 0x1c], esp
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
jmp 0x14008c9f6
call fcn.1400e3588
mov dword [rsp - 0x30], 0xceb8bce
test ebx, ebx
je 0x14008dc94
jmp 0x14008c8a1
mov dword [rsp - 0x30], 0x26f95199
mov qword [rbp + 0x180], rdi
xchg rdi, r11
mov qword [rbp + 0x190], r11
xchg r11, rdi
mov qword [rbp + 0x198], 0x16a70a0b
xor qword [rbp + 0x198], 0x4d1022db
jmp 0x14008ccc4
add ecx, 0xceff6c9
xor ecx, 0x59fbabcb
sub ecx, 0x727e9b26
call qword [sym.imp.KERNEL32.dll_OpenProcess]
jmp 0x14008ca4d
mov rbp, rbp
mov byte [rbx + rdi], al
inc rbx
cmp rbx, r14
jne 0x14008ce0f
mov dword [rsp - 0x30], edi
mov r15, qword [rbp + 0x198]
jmp 0x14008cbfa
mov rdx, qword [rbp + 0x178]
cmp rdx, 0x10
mov dword [rsp - 0x20], ecx
jb 0x14008cb6a
jmp 0x14008c88b
mov edx, edi
movdqa xmm4, xmmword [0x1401133d0]
mov r12, r12
jmp 0x14008cd44
punpckhdq xmm0, xmm3
mov dword [rsp - 0x18], 0x1ec739cf
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
xchg rbx, rbx
jmp 0x14008ce8f
inc r8
cmp byte [rax + r8], 0
jne 0x14008ca1b
lea rdx, [rbp + 0x5c]
mov dword [rsp - 0x14], ebp
lea rcx, [rbp + 0x180]
jmp 0x14008cba8
xchg r9, rbp
lea rcx, [rbp - 0x7c]
mov dword [rsp - 0x38], esp
jmp 0x14008cc79
xchg r13, r10
mov r10, rax
xchg r13, r10
cmp rax, 0xffffffffffffffff
jmp 0x14008ccea
add rdx, 0x1458d788
mov rcx, qword [rcx - 8]
sub rax, rcx
xchg rsp, rsp
jmp 0x14008cb53
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
mov dword [rsp - 0x34], 0x43f27db7
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
jmp 0x14008cb93
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401133b0]
mov dword [rsp - 0x10], ebx
packuswb xmm2, xmm2
jmp 0x14008ca75
sub qword [rbp + 0x198], 0x1b90822e
sub qword [rbp + 0x198], 0x1e40915
xor qword [rbp + 0x198], 0x46996d0f
mov byte [rbp + 0x180], bl
lea rax, [rbp + 0x5c]
mov rdi, rdi
xchg r8, rdi
jmp 0x14008c875
xchg r12, r13
mov r8, r13
xchg r13, r12
inc r8
xchg rcx, rcx
cmp byte [rax + r8], 0
jmp 0x14008c8cb
cmovae rdi, rsi
lea rcx, [rbp + 0x180]
cmovae rcx, rsi
xchg r8, r14
mov r8, qword [rbp + 0x190]
jmp 0x14008cc48
sub rax, rcx
sub rax, 8
mov dword [rsp - 0x44], edx
cmp rax, 0x1f
ja 0x14008e336
jmp 0x14008c93a
movups xmm0, xmmword [str.EWZXCYPTN]
xchg rbp, rbp
xchg rbx, rbp
movups xmmword [rbx - 0x80], xmm0
xchg rbx, rbp
jmp 0x14008ce6e
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e33c
call fcn.1400e3588
mov dword [rsp - 0x14], edx
test bl, bl
jmp 0x14008cd05
paddd xmm0, xmm1
xchg r14, r14
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
mov rdx, rdx
pshufhw xmm1, xmm0, 0xd8
jmp 0x14008ca99
lea eax, [rdx + 4]
mov dword [rsp - 0x14], edi
movd xmm3, eax
pshufd xmm3, xmm3, 0
jmp 0x14008c91c
call fcn.1400191c0
nop
lea rdi, [rbp + 0x180]
mov dword [rsp - 0x2c], esp
xchg rsi, r11
mov r11, qword [rbp + 0x180]
jmp 0x14008ce31
xchg r13, r13
movdqa xmm0, xmm1
psrld xmm0, xmm8
jmp 0x14008cb71
test rcx, rcx
je 0x14008c947
mov rax, qword [rbp + 0x178]
sub rax, rcx
xchg r15, r15
sar rax, 1
sar rax, 1
jmp 0x14008ceed
xchg rsi, rdi
mov rdi, qword [rbp + 0x180]
xchg rdi, rsi
jmp 0x14008cb3a
cmp rdx, 0x1000
jb 0x14008cb61
nop
sub rdx, 0x1458d761
jmp 0x14008ca5f
lea rdx, [rbp + 0x160]
lea rcx, [0x140251ed1]
call fcn.14008c150
mov dword [rsp - 0x24], esp
cmp eax, 1
setg bl
jmp 0x14008c9ca
xchg r8, r14
add r14, rcx
mov r12, r12
lea rbx, [rbp + 0x180]
cmp r15, 0x10
jmp 0x14008cdf7
je 0x14008e1ff
cmp dword [rbp + 0x1a0], 0
jne 0x14008e1ff
jmp 0x14008c954
mov r8d, dword [rbp + 0x160]
nop
movd xmm2, edx
xchg r13, r13
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
jmp 0x14008cdc2
mov dword [rsp - 0x40], esp
movdqa xmm7, xmmword [0x140113390]
mov eax, 0x7b40bad9
sub eax, 0x312c5b1
sub eax, 0x6c7dd237
xor eax, 0x6578bc19
sub eax, 0x2e704824
jmp 0x14008cea6
xor qword [rbp + 0x198], 0x691bd2f8
add qword [rbp + 0x198], 0x2d3b014b
xor qword [rbp + 0x198], 0x3bea0330
jmp 0x14008cab3
je 0x14008dc94
xchg rdi, rdi
lea rdx, [rbp + 0x1a0]
xchg rcx, rsi
mov rsi, rax
jmp 0x14008cf15
jne 0x14008dc94
mov r8d, dword [rbp + 0x38]
xchg r12, r12
xor edx, edx
mov ecx, 0x6eb16cdb
sub ecx, 0xbab0949
xor ecx, 0x7d7359b7
jmp 0x14008c98b
pxor xmm2, xmm0
movd dword [rcx], xmm2
sub edx, 0xfffffff8
xchg rdx, rdx
lea rcx, [rcx + 8]
cmp edx, 0x10
jmp 0x14008c8bd
mov r14d, 0xbf2c46f
xor r14d, 0x697d8901
sub r14d, 0x5d568bdc
add r14d, 0x6d061e0d
sub r14d, 0x3bfe2af8
sub r14d, 0x3640b4a3
movd xmm6, r14d
jmp 0x14008cc9a
add qword [rbp + 0x178], 0x2bb157cd
xor qword [rbp + 0x178], 0x158fc6cd
add qword [rbp + 0x178], 0x10cfb176
sub qword [rbp + 0x178], 0x1cf1c780
xor qword [rbp + 0x178], 0x71a76e46
sub qword [rbp + 0x178], 0x367c1104
lea rax, [rbp + 0x5c]
jmp 0x14008cae9
xchg rsp, rsp
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
jmp 0x14008c8e9
mov rsi, rsi
mov r8d, edi
cmp ebx, 2
jl 0x14008cf3f
mov dword [rsp - 0x28], 0x20a4950a
movdqa xmm5, xmmword [0x140113370]
jmp 0x14008c9e4
cmovae rbx, rsi
cmp rbx, r14
mov dword [rsp - 0x14], 0x36c2c1b8
je 0x14008cb3a
sub rdi, rbx
movsx ecx, byte [rbx]
call fcn.1400b00e0
jmp 0x14008c9a8
add rdx, 0x27
mov dword [rsp - 0x40], 0x7adab498
mov rcx, qword [rcx - 8]
jmp 0x14008cb20
xchg r11, rsi
xchg rdi, r15
mov rdi, qword [rbp + 0x198]
xchg rdi, r15
cmp r15, 0x10
mov dword [rsp - 0x24], 0x30d4d043
jmp 0x14008cb02
xchg rbp, rbp
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xchg r12, r12
jmp 0x14008cd2a
psrldq xmm0, 0xf
movd eax, xmm0
xchg r10, r10
xor edi, edi
mov ebx, dword [0x14024f2c0]
test al, al
je 0x14008d11b
jmp 0x14008cdd3
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
jmp 0x14008cece
sub eax, 0x2167dbd7
sub eax, 0x1ef07ace
movd xmm8, eax
movdqa xmm0, xmmword [str.2222222222222222]
xchg r9, rbp
movdqa xmmword [r9 + 0x160], xmm0
jmp 0x14008ca3d
xchg r9, r9
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401133b0]
jmp 0x14008ce52
sar rax, 1
lea rdx, [rax*8]
mov dword [rsp - 0xc], 0x63320a9e
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c93a
jmp 0x14008ce1c
xchg rcx, rsi
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
mov dword [rsp - 0x3c], 0x52f94125
test eax, eax
jmp 0x14008cc61
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
jmp 0x14008cbc8
lea r9, [rbp - 0x80]
xchg r10, r10
nop word [rax + rax]
mov eax, 0x19326140
add eax, 0x44f36855
xor eax, 0x2a074d2b
xor eax, 0x4d3a2b9c
jmp 0x14008d020
cmp rax, 0xffffffffffffffff
mov r10, r10
jne 0x14008e179
movups xmm0, xmmword [0x1401172d8]
jmp 0x14008d24f
jmp 0x14008de3e
shr eax, 1
movsx eax, al
imul ecx, eax, 0x36
jmp 0x14008d150
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
xchg rsi, rsi
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
jmp 0x14008d217
sub edx, 0x6faba61e
add edx, 0x6faba626
lea rcx, [rcx + 8]
mov dword [rsp - 0x38], esi
cmp edx, 0x18
jl 0x14008d2be
jmp 0x14008cf83
pshufd xmm2, xmm1, 0xd8
xchg r11, r11
pand xmm2, xmmword [0x1401133b0]
packuswb xmm2, xmm2
movd xmm0, r8d
jmp 0x14008d0aa
xchg rdx, rbp
movsd qword [rdx - 0x40], xmm1
xchg rdx, rbp
cmp byte [0x1401172ef], 0
mov r8, r8
jmp 0x14008d1bf
sub eax, 0x520a7d7d
xor eax, 0x1191bf33
xor eax, 0x11922134
jmp 0x14008d267
sub eax, 0x30da281c
add eax, 0x2729c4d5
mul r8d
jmp 0x14008d165
psrld xmm0, xmm8
mov dword [rsp - 0x18], esp
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
xchg r13, r13
pshuflw xmm0, xmm2, 0xd8
jmp 0x14008d22c
movd xmm3, eax
pshufd xmm3, xmm3, 0
mov dword [rsp - 0x34], 0x703b1657
jmp 0x14008cf95
paddb xmm2, xmm0
mov dword [rsp - 0x3c], edx
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
mov r14, r14
lea eax, [rdx + 4]
jmp 0x14008d055
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov dword [rsp - 0x38], 0x1746f0b9
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x14008d0ff
paddb xmm2, xmm0
mov dword [rsp - 0x14], ebx
movd xmm0, dword [rcx]
jmp 0x14008d0ed
xor byte [r9], al
inc r8d
mov r12, r12
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x14008cf51
jmp 0x14008d11b
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
mov dword [rsp - 0x34], edi
jmp 0x14008d19e
pxor xmm2, xmm0
movd dword [rcx], xmm2
mov dword [rsp - 0x40], edi
nop
jmp 0x14008cfb2
pmulld xmm0, xmm7
mov dword [rsp - 0x2c], ebx
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x14008cfd4
mov r14d, 0x244ef429
xor r14d, 0x62dffc01
sub r14d, 0x113011d
xor r14d, 0x66aba7e3
add r14d, 0x239244a3
add r14d, 0x17a75aec
sub r14d, 0x114a90d2
jmp 0x14008d280
mov dword [rsp - 0x40], ebp
movzx eax, r8b
sub al, cl
neg al
add al, 0xce
neg al
jmp 0x14008d0bb
mov rdi, rdi
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
mov dword [rsp - 0x14], ebx
shr eax, 4
jmp 0x14008cf88
movd xmm6, r14d
movdqa xmm7, xmmword [0x140113390]
mov eax, 0x385a58c3
add eax, 0x109e02d9
xor eax, 0x38fc5401
jmp 0x14008d00c
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
xchg rbp, rbp
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
jmp 0x14008d032
je 0x14008de3e
mov r8d, edi
cmp ebx, 2
mov dword [rsp - 0x10], edx
jl 0x14008d2d4
jmp 0x14008d1fd
xchg rbp, rbp
movdqa xmm0, xmmword [str.2222222222222222]
xchg rbp, rsp
movdqa xmmword [rsp + 0x160], xmm0
xchg rbp, rsp
lea rcx, [rbp - 0x4c]
jmp 0x14008d2ae
movdqa xmm5, xmmword [0x140113370]
mov edx, edi
xchg r11, r11
movdqa xmm4, xmmword [0x1401133d0]
jmp 0x14008d17d
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
xchg rbp, rbp
shufps xmm1, xmm0, 0xdd
jmp 0x14008d08c
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401133b0]
xchg r10, r10
packuswb xmm2, xmm2
movd xmm0, r8d
jmp 0x14008d06b
xchg rbp, r15
movups xmmword [r15 - 0x50], xmm0
xchg rbp, r15
movsd xmm1, qword [0x1401172e8]
jmp 0x14008cff2
add eax, 0x32e43d79
xor eax, 0x4f9cf93a
sub eax, 0x1f42b07b
movd xmm8, eax
jmp 0x14008d1da
sub r14d, 0x1597ca87
xor r14d, 0x382ce51a
xor r8d, r8d
lea rdx, [rbp - 0x80]
mov dword [rsp - 0x24], 0x4830ca42
lea rcx, [rbp + 0x180]
call fcn.140090da0
jmp 0x14008cf6a
mov r8d, dword [rbp + 0x160]
xchg r13, r13
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
mov dword [rsp - 0x20], ecx
paddd xmm2, xmm5
jmp 0x14008d0d7
lea r9, [rbp - 0x50]
nop word [rax + rax]
mov r15, r15
mov eax, 0x4444ac79
xor eax, 0x4860a94c
jmp 0x14008dfcf
xchg r9, r9
shr eax, 7
shr eax, 0xa
shr eax, 0xb
shr eax, 2
jmp 0x14008d603
mov dword [rsp - 0x28], ebx
xchg r8, rdi
mov rdx, r8
xchg rdi, r8
mov rcx, rbx
xchg r15, r15
call fcn.1400201a0
jmp 0x14008e06c
xchg r14, r14
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
jmp 0x14008d5dd
nop
mov rsp, rsp
inc r8
cmp byte [rax + r8], 0
jne 0x14008d33c
lea rdx, [rsp + 0x38]
jmp 0x14008e09f
xor byte [rsp + 0x2f], 0x39
xor byte [rsp + 0x30], 0x3a
xor byte [rsp + 0x31], 0x3b
mov dword [rsp - 0x1c], ebx
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rdi
jmp 0x14008dd15
psubd xmm2, xmm0
mov rbp, rbp
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
jmp 0x14008dc32
cmp r8d, 0xc
jl 0x14008dce2
xor r8d, r8d
jmp 0x14008d7f9
cmp ebx, 2
jl 0x14008d6e2
movdqa xmm4, xmmword [0x1401133d0]
movd xmm6, r14d
jmp 0x14008dda1
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
xchg rsi, rsi
shufps xmm1, xmm0, 0xdd
jmp 0x14008df3e
mov qword [rbp + 0x170], r12
xchg rdi, r12
mov ecx, 0x650f0be7
sub ecx, 0x5108bfd1
add ecx, 0x4f9198a
add ecx, 0x374cec00
add ecx, 0x2b27154b
jmp 0x14008df83
mov qword [rbp + 0x160], rax
mov rdi, rdi
xchg rdx, rax
mov qword [rbp + 0x168], rdx
jmp 0x14008d5a9
paddb xmm2, xmm0
movd xmm1, dword [0x1401172f0]
pxor xmm2, xmm1
mov r13, r13
movd dword [rsp + 0x68], xmm2
movdqa xmm3, xmmword [0x140113380]
jmp 0x14008db0e
movsd qword [rbp + 0x38], xmm0
xchg rsp, rbp
movzx eax, word [0x140117338]
mov word [rsp + 0x40], ax
jmp 0x14008e0c8
xchg rbp, rbp
paddb xmm2, xmm0
movd xmm1, dword [str.AEW_YDL]
pxor xmm2, xmm1
movd dword [rsp + 0x58], xmm2
mov r13, r13
jmp 0x14008dbbe
lea rax, [rsp + 0x38]
xchg r8, r12
mov r12, r8
xchg r12, r8
jmp 0x14008d337
cmp rax, 0xffffffffffffffff
mov dword [rsp - 0x44], esp
jne 0x14008e179
movsd xmm0, qword [0x140117310]
xchg rsp, rdx
jmp 0x14008dcfc
mov rcx, qword [rsp + 0x78]
xchg r9, r9
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x14008c759
mov dword [rsp - 0x10], 0x533075a4
jmp 0x14008d790
sub byte [rbp - 0x30], 0x18
add byte [rbp - 0x30], 0x18
sub byte [rbp - 0x30], 0x3c
add byte [rbp - 0x30], 0x2b
xor byte [rbp - 0x30], 0x6b
jmp 0x14008dd83
sub qword [rbp + 0x28], 0x32ff3ae5
add qword [rbp + 0x28], 0x56e37689
xor qword [rbp + 0x28], 0x4d873cc1
xor qword [rbp + 0x28], 0x169aeca6
jmp 0x14008d53f
mov rbp, qword [r11 + 0x48]
xchg rdi, rbp
xchg r9, r11
movaps xmm6, xmmword [r9 - 0x10]
xchg r11, r9
xchg r11, r12
jmp 0x14008d9be
mov byte [rbp + 0x10], 0x1c
xor byte [rbp + 0x10], 0x6f
sub byte [rbp + 0x10], 0x13
sub byte [rbp + 0x10], 0x27
jmp 0x14008dffc
mov qword [rbp + 0x28], 0x75c2cacf
xor qword [rbp + 0x28], 0x645ed5c9
add qword [rbp + 0x28], 0x6a9372ef
xor qword [rbp + 0x28], 0x4b160531
jmp 0x14008d4ea
add rsp, 8
mov r15, qword [rsp - 8]
pop r14
pop r13
jmp 0x14008de66
add eax, 0x152a5523
add eax, 0x313a9022
sub eax, 0x47284bd5
xor eax, 0x45bf6eb1
sub eax, 0x48d874e1
jmp 0x14008daef
xchg rdx, rax
lea rcx, [rax + 0x60]
xchg r9, rcx
mov qword [rbp + 0x170], r9
xchg r9, rcx
lea rax, [rbp + 0x160]
mov dword [rsp - 0x10], esp
jmp 0x14008df1e
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
jmp 0x14008e0b1
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
mov r9, r9
jmp 0x14008dbe0
movd xmm5, eax
movdqa xmm2, xmmword [0x140113370]
xchg r14, r14
jmp 0x14008dece
shr eax, 1
add edx, eax
mov dword [rsp - 0x20], edx
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
jmp 0x14008da59
xorps xmm0, xmm0
mov r15, r15
xchg rsi, rbp
movdqu xmmword [rsi + 0x160], xmm0
xchg rbp, rsi
xchg rdi, r12
jmp 0x14008d3da
xchg rsp, rsp
pmulld xmm0, xmmword [0x140113390]
psubd xmm3, xmm0
jmp 0x14008de91
nop word [rax + rax]
mov eax, 0x66b4707a
add eax, 0x3596064
sub eax, 0x5c3e9c34
add eax, 0x1fb0aafe
jmp 0x14008d8c1
xor byte [r9], al
mov dword [rsp - 0x40], ebx
inc r8d
jmp 0x14008de2d
call fcn.140090da0
cmp rax, 0xffffffffffffffff
mov r14, r14
jne 0x14008e179
movsd xmm0, qword [str.AEW_YDL]
xchg r14, rsp
jmp 0x14008d817
add qword [rbp - 0x18], 0x594ec890
xor qword [rbp - 0x18], 0xadd8ae9
xor qword [rbp - 0x18], 0x7678d7d7
mov byte [rbp - 0x30], 0x67
jmp 0x14008d4d1
sub r8d, 0x2f2d37ff
xor r8d, 0x6ab30d
sub r8d, 0x66d1b90
add r8d, 0x34602d32
sub r8d, 0x43516dfa
mov eax, r8d
jmp 0x14008dfbf
xchg rcx, rdi
xchg r14, rdi
mov qword [rbp + 0x20], r14
xchg rdi, r14
jmp 0x14008d554
xor byte [rsp + 0x28], 0x38
sub byte [rsp + 0x28], 0x1d
add byte [rsp + 0x28], 0x18
add byte [rsp + 0x28], 0x26
xor byte [rsp + 0x29], 0x33
xor byte [rsp + 0x2a], 0x34
xchg r12, r12
jmp 0x14008d7dd
mov dword [rsp - 0x20], esp
mov eax, dword [0x1401172f8]
mov dword [rsp + 0x70], eax
movzx eax, word [0x1401172fc]
mov word [rsp + 0x74], ax
xchg r9, r9
jmp 0x14008dd4a
imul ecx, eax, 0x36
xchg rdi, rdi
movzx eax, r8b
sub al, cl
sub al, 0xf8
add al, 0x2a
jmp 0x14008d66d
sub byte [rsp + 0x38], 0x10
xor byte [rsp + 0x38], 0x6e
add byte [rsp + 0x38], 0x17
add byte [rsp + 0x38], 0x1f
xor byte [rsp + 0x39], 0x33
jmp 0x14008dac2
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, byte [rsp + 0x20]
mov rcx, qword [rbp + 0x1a8]
jmp 0x14008dcec
lea rcx, [rbp + 0x180]
call fcn.140090da0
mov dword [rsp - 0x44], 0x6361ae5d
cmp rax, 0xffffffffffffffff
jne 0x14008e179
movsd xmm0, qword [0x1401172f0]
movsd qword [rsp + 0x68], xmm0
jmp 0x14008d73b
xor byte [rsp + 0x2b], 0x35
xor byte [rsp + 0x2c], 0x36
xor byte [rsp + 0x2d], 0x37
xor byte [rsp + 0x2e], 0x38
mov rsp, rsp
jmp 0x14008d354
mov dword [rsp - 0x24], 0x760a7193
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x180]
call fcn.140090da0
jmp 0x14008d491
movsd qword [r14 + 0x58], xmm0
xchg rsp, r14
mov eax, dword [0x140117308]
mov dword [rsp + 0x60], eax
mov dword [rsp - 0xc], ebp
jmp 0x14008e032
cmp byte [rax + r8], 0
jne 0x14008da0e
lea rdx, [rsp + 0x48]
xchg rcx, rcx
lea rcx, [rbp - 0x10]
call fcn.1400191c0
jmp 0x14008da2c
lea rdx, [rsp + 0x28]
lea rcx, [rbp - 0x30]
call fcn.1400191c0
jmp 0x14008dc6e
add byte [rsp + 0x48], 0x59
sub byte [rsp + 0x48], 0x1a
xor byte [rsp + 0x49], 0x33
xor byte [rsp + 0x4a], 0x34
mov dword [rsp - 0x18], 0x76c4543f
jmp 0x14008df60
sub eax, 0xc728fa0
add eax, 0x1f9837de
add eax, 0xb348b11
jmp 0x14008dfe3
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
mov r12, r12
shufps xmm1, xmm0, 0xdd
jmp 0x14008d98f
movd xmm1, dword [rsp + 0x5c]
pxor xmm2, xmm1
movd dword [rsp + 0x5c], xmm2
jmp 0x14008db23
sub eax, 0x327c648d
add eax, 0x4447476
add eax, 0x25f474a5
sub eax, 0x44cb34bd
add eax, 0x3db05f13
imul r8d
jmp 0x14008d9ea
add eax, 0x5215503b
sub eax, 0x5a771b19
xor eax, 0x64b5ea72
sub eax, 0x489f5852
mul r8d
mov eax, r8d
sub eax, edx
jmp 0x14008e127
lea r11, [rsp + 0x2e0]
xchg r13, rbx
mov r13, qword [r11 + 0x30]
xchg rbx, r13
xchg r15, rsi
jmp 0x14008dc23
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov rcx, rcx
psrld xmm0, xmm5
paddd xmm0, xmm1
jmp 0x14008db76
xor byte [rsp + 0x41], 0x3b
xor al, 0x3c
mov byte [rsp + 0x42], al
xchg rcx, rdi
mov qword [rbp + 0x10], rcx
jmp 0x14008d6ea
movaps xmm7, xmmword [r12 - 0x20]
xchg r12, r11
xchg r9, r11
jmp 0x14008df05
add al, 0x4f
sub al, 0x1d
xor byte [r9], al
inc r8d
mov dword [rsp - 0x44], 0x27494bf1
lea r9, [r9 + 1]
jmp 0x14008d38f
mov dword [rsp - 0x14], ecx
sar edx, 3
sar edx, 1
mov eax, edx
shr eax, 7
shr eax, 0x17
jmp 0x14008da41
xchg r10, r12
nop dword [rax + rax]
mov r14, r14
inc r8
jmp 0x14008d86c
nop
mov dword [rsp - 0xc], esp
movsd xmm0, qword [str.VDYTF]
xchg rsp, rbp
jmp 0x14008d444
shr eax, 1
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
xchg r14, r14
movzx eax, r8b
sub al, cl
jmp 0x14008d9cf
sub al, cl
xchg r12, r12
add al, 0x32
xor byte [r9], al
jmp 0x14008da96
mov dword [rsp - 0x3c], esi
mov byte [rsp + 0x50], al
mov qword [rbp - 0x10], rdi
mov qword [rbp], rdi
jmp 0x14008dbfb
inc r8d
lea r9, [r9 + 1]
xchg r12, r12
jmp 0x14008e04a
xor r8d, 0x315060d1
sub r8d, 0x67290b82
sub r8d, 0x53358ad
mov eax, r8d
jmp 0x14008dcce
mov dword [rsp - 0x30], edi
xor byte [rsp + 0x3a], 0x34
xor byte [rsp + 0x3b], 0x35
jmp 0x14008e0e1
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
mov dword [rsp - 0x44], ebp
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x14008db54
movd xmm5, eax
xchg rbx, rbx
movdqa xmm2, xmmword [0x140113370]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
mov rsp, rsp
jmp 0x14008d3bc
movdqa xmm1, xmm3
xchg rdi, rdi
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
jmp 0x14008dad5
xchg rbx, rbx
mov r8d, 0xcf42d2a
xor r8d, 0x5f9389d6
sub r8d, 0x41b522f6
xor r8d, 0x714c7bea
xor r8d, 0x2fd7054d
add r8d, 0xde20845
jmp 0x14008daa5
psrad xmm1, xmm6
xchg rsp, rsp
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
jmp 0x14008d636
add rsp, 8
mov rbp, qword [rsp - 8]
ret
pmulld xmm0, xmmword [0x140113390]
xchg r10, r10
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
mov r10, r10
jmp 0x14008dd62
add byte [rbp - 0x10], 0xd
xor byte [rbp - 0x10], 0x33
add byte [rbp - 0x10], 0x22
add byte [rbp - 0x10], 0x47
xor byte [rbp - 0x10], 9
sub byte [rbp - 0x10], 6
xor byte [rbp - 0x10], 0x34
jmp 0x14008e162
movdqa xmm3, xmmword [0x140113380]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
mov dword [rsp - 0x24], 0x2858df23
pmuldq xmm1, xmm4
jmp 0x14008d8d5
pand xmm2, xmmword [0x1401133b0]
packuswb xmm2, xmm2
mov eax, dword [str.2222222222222222]
movd xmm0, eax
jmp 0x14008d45d
mov r15, r15
mov qword [rbp + 8], 0x47ca9b0a
sub qword [rbp + 8], 0x41d5a6ee
add qword [rbp + 8], 0x572f60cf
sub qword [rbp + 8], 0x44b22989
jmp 0x14008ddc7
mov r15, qword [r11 + 0x40]
xchg r15, rsi
xchg rbp, rdi
jmp 0x14008d50f
mov dword [rsp - 0x14], esp
pand xmm2, xmmword [0x1401133b0]
packuswb xmm2, xmm2
mov eax, dword [str.2222222222222222]
movd xmm0, eax
mov dword [rsp - 0x44], ecx
jmp 0x14008d41e
mov dword [rsp - 0x14], esp
nop
movsd xmm0, qword [str.VKS_]
movsd qword [rsp + 0x48], xmm0
movzx eax, byte [0x140117328]
jmp 0x14008de06
lea rdx, [rbp + 0x30]
jmp 0x14008d4af
mov eax, 0xc397316
xor eax, 0x5d34785f
sub eax, 0x42e28908
jmp 0x14008d58b
mov rsp, rsp
lea r9, [rsp + 0x58]
add r9, rax
nop word [rax + rax]
xchg rsp, rsp
mov eax, 0x5b386413
jmp 0x14008d91e
xchg rbx, rbx
xor rcx, rsp
call fcn.1400e36a0
jmp 0x14008d975
movsd qword [rdx + 0x28], xmm0
xchg rsp, rdx
movzx eax, word [0x140117318]
mov word [rsp + 0x30], ax
jmp 0x14008e143
mov qword [rbp - 0x18], 0x1404049e
add qword [rbp - 0x18], 0x5bd2d8f8
sub qword [rbp - 0x18], 0x575e4ec4
add qword [rbp - 0x18], 0x2b36cc20
add qword [rbp - 0x18], 0x8f59168
xor qword [rbp - 0x18], 0x6ff278fb
jmp 0x14008d69e
cmp byte [0x1401172fd], 0
je 0x14008e054
mov r8d, edi
xchg r14, r14
jmp 0x14008d3a1
pand xmm2, xmmword [0x1401133b0]
packuswb xmm2, xmm2
movd xmm0, eax
mov dword [rsp - 0x30], 0x7bb42f8d
paddb xmm2, xmm0
jmp 0x14008d8ee
xor byte [rbp - 0x30], 0x53
sub byte [rbp - 0x30], 0x6e
lea rax, [rsp + 0x28]
mov r10, r10
xchg r15, r8
mov r15, r12
xchg r8, r15
jmp 0x14008dfa8
xchg r12, r12
mov eax, 0x6a9119b
add eax, 0x491cda72
sub eax, 0x25074d9b
xor eax, 0x29e15a6c
xor eax, 0x351649ff
xor eax, 0x36498dfe
jmp 0x14008d5ef
add qword [rbp + 8], 0x1282330d
add qword [rbp + 8], 0x30c6d3f
add qword [rbp + 8], 0xcb467fa
sub qword [rbp + 8], 0x3ab53399
mov byte [rbp - 0x10], 0x2b
jmp 0x14008db9d
mov dword [rsp - 0x18], esi
mov byte [rsp + 0x48], 0x58
sub byte [rsp + 0x48], 0x34
add byte [rsp + 0x48], 0x57
sub byte [rsp + 0x48], 0x5d
add byte [rsp + 0x48], 0xf
xor byte [rsp + 0x48], 8
jmp 0x14008d8a0
lea r9, [r9 + 1]
cmp r8d, 0x18
jl 0x14008d2e6
xchg r8, r8
xor r8d, r8d
lea rdx, [rbp - 0x50]
jmp 0x14008d7ac
movd dword [rsp + 0x6c], xmm2
mov dword [rsp - 0x34], ebp
mov r8d, 0x3c2b2909
add r8d, 0x836fe63
jmp 0x14008d6bf
nop
mov r12, qword [rsp]
add rsp, 8
nop
jmp 0x14008db6c
mov dword [rsp - 0x30], ebp
jl 0x14008daba
movdqa xmm4, xmmword [0x1401133d0]
movd xmm6, r14d
jmp 0x14008dc9d
pshuflw xmm0, xmm3, 0xd8
mov r15, r15
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401133b0]
xchg r8, r8
jmp 0x14008d5cc
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
xchg r8, r8
jmp 0x14008e082
mov dword [rsp - 0x38], ebx
mov qword [rbp - 0x68], rbx
lea rax, [rbp + 0x160]
xchg rcx, rax
mov qword [rbp - 0x60], rcx
xchg rcx, rax
nop word [rax + rax]
jmp 0x14008d309
movaps xmm8, xmmword [r9 - 0x30]
xchg r11, r9
mov rsp, r11
mov dword [rsp - 0x18], 0x4b081bc0
nop
jmp 0x14008d579
mov qword [rbp - 0x80], rax
lea rdi, [rbp - 0x30]
xorps xmm0, xmm0
xchg r12, rbp
movups xmmword [r12 - 0x70], xmm0
xchg r12, rbp
mov qword [rbp - 0x70], rbx
jmp 0x14008dee3
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov dword [rsp - 0x20], esi
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140113390]
jmp 0x14008d326
xor byte [rsp + 0x4b], 0x35
xor byte [rsp + 0x4c], 0x36
xor byte [rsp + 0x4d], 0x37
xchg rsi, rsi
xor byte [rsp + 0x4e], 0x38
xor byte [rsp + 0x4f], 0x39
xor al, 0x3a
jmp 0x14008da81
sub ecx, 0xc186612
sub ecx, 0x6f5b0079
call fcn.1400e354c
mov dword [rsp - 0x40], 0x17b167b7
xchg rdi, rax
mov rbx, rdi
xchg rdi, rax
jmp 0x14008d406
nop
inc r8
cmp byte [rax + r8], 0
mov rbp, rbp
jne 0x14008dfa9
jmp 0x14008d88d
lea r9, [rsp + 0x68]
xchg r13, r13
add r9, rax
jmp 0x14008d64b
xor eax, 0x2ed17c2
add eax, 0x6b1d1bb
xor eax, 0x306efd8f
jmp 0x14008d93f
imul r8d
mov dword [rsp - 0x20], 0x26a49429
sar edx, 2
sar edx, 1
sar edx, 1
mov eax, edx
jmp 0x14008d2f5
sub byte [rbp + 0x10], 0x25
add byte [rbp + 0x10], 0x52
xor byte [rbp + 0x10], 0x11
sub byte [rbp + 0x10], 0x77
jmp 0x14008d47e
cmp byte [0x14011730b], 0
je 0x14008d399
mov r8d, edi
cmp ebx, 2
jmp 0x14008de75
cmp r8d, 0xe
jl 0x14008d654
xor r8d, r8d
mov dword [rsp - 0x10], esp
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x180]
jmp 0x14008d67c
neg rbx
add rbx, 0xffffffffffffffe0
neg rbx
mov qword [rbp - 0x68], rbx
mov r8, r8
jmp 0x14008ddf0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
xchg rbp, rbp
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
jmp 0x14008e10a
xchg rdi, rdi
lea rcx, [rbp + 0x10]
call fcn.1400191c0
nop
jmp 0x14008d61a
mov dword [rsp - 0x24], 0x9fc997f
movd xmm1, dword [rsp + 0x6c]
pxor xmm2, xmm1
jmp 0x14008de4a
movzx eax, byte [0x14011733a]
mov rdx, rdx
mov byte [rsp + 0x38], 0x1a
add byte [rsp + 0x38], 0x36
jmp 0x14008d772
xor byte [rsp + 0x3c], 0x36
mov dword [rsp - 0x14], 0x1137e3b6
xor byte [rsp + 0x3d], 0x37
xor byte [rsp + 0x3e], 0x38
xor byte [rsp + 0x3f], 0x39
xor byte [rsp + 0x40], 0x3a
xchg r8, r8
jmp 0x14008d9a7
movdqa xmm0, xmm1
mov r13, r13
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140113390]
jmp 0x14008d374
mov dword [rsp - 0x24], 0x2b9ae1a9
shr eax, 1
add eax, edx
shr eax, 2
shr eax, 2
shr eax, 1
movsx eax, al
jmp 0x14008d75d
mov r11, r11
cmp byte [0x140117319], 0
je 0x14008d367
mov byte [rsp + 0x28], 0x2d
add byte [rsp + 0x28], 0x4e
jmp 0x14008d715
xor byte [rbp - 0x10], 0x43
lea rax, [rsp + 0x48]
xchg r8, r8
xchg r12, r10
mov r8, r10
jmp 0x14008da00
cmp r15, 0x10
jb 0x14008dc94
lea rdx, [r15 + 1]
jmp 0x14008e1e2
ja 0x14008e33c
mov dword [rsp - 0x34], 0xbccf251
xchg r12, rcx
mov r12, rsi
xchg rcx, r12
call fcn.1400e3588
jmp 0x14008dc94
nop
sub rdx, 0xbc6598e
add rdx, 0xbc659b5
mov rsi, qword [rsi - 8]
mov dword [rsp - 0x18], edi
jmp 0x14008e1c9
sub rax, rsi
nop
add rax, 0xffffffffbc1cebdb
sub rax, 0xffffffffbc1cebe3
cmp rax, 0x1f
jmp 0x14008e18c
mov dword [rsp - 0x3c], esi
xchg r12, rax
mov r12, rsi
xchg r12, rax
cmp rdx, 0x1000
jb 0x14008e19a
jmp 0x14008e1ad
xchg r13, rbx
mov rcx, rbx
xchg r13, rbx
jmp 0x14008e20d
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14008dc94
call fcn.1400ea23c
int3
call fcn.1400ea23c
xchg r13, r13
int3