Function at 0x14007cd93
Capabilities:
Terminate process

Disassembly:
push rax
pushf
mov eax, 0x3204d1a
pushf
not eax
add eax, 0x347aa304
xor eax, 0x68238fd
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x47a8b176
xor eax, 0xeb0c3d
rol eax, 0x86
popf
pushf
not eax
add eax, 0x67d68848
xor eax, 0x6685723d
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x148bb274
xor eax, 0x258b61b
rol eax, 0xcc
popf
cmp eax, 0x13
jne 0x14007cdf6
popf
pop rax
jmp 0x14007de06
cmp eax, 0x1b
jne 0x14007ce05
popf
pop rax
jmp 0x14007e32c
cmp eax, 1
jne 0x14007ce14
popf
pop rax
jmp 0x14007d2c7
cmp eax, 0x11
jne 0x14007ce23
popf
pop rax
jmp 0x14007dcda
cmp eax, 8
jne 0x14007ce32
popf
pop rax
jmp 0x14007d756
cmp eax, 0x1f
jne 0x14007ce41
popf
pop rax
jmp 0x14007e52a
cmp eax, 0x14
jne 0x14007ce50
popf
pop rax
jmp 0x14007de8c
cmp eax, 0x1c
jne 0x14007ce5f
popf
pop rax
jmp 0x14007e3c1
cmp eax, 0xf
jne 0x14007ce6e
popf
pop rax
jmp 0x14007db9a
cmp eax, 3
jne 0x14007ce7d
popf
pop rax
jmp 0x14007d461
cmp eax, 0x10
jne 0x14007ce8c
popf
pop rax
jmp 0x14007dc09
cmp eax, 0x17
jne 0x14007ce9b
popf
pop rax
jmp 0x14007e0a7
cmp eax, 0x18
jne 0x14007ceaa
popf
pop rax
jmp 0x14007e106
cmp eax, 0x1d
jne 0x14007ceb9
popf
pop rax
jmp 0x14007e426
cmp eax, 0x22
jne 0x14007cec8
popf
pop rax
jmp 0x14007e6e4
cmp eax, 0xc
jne 0x14007ced7
popf
pop rax
jmp 0x14007d939
cmp eax, 0x1a
jne 0x14007cee6
popf
pop rax
jmp 0x14007e270
cmp eax, 6
jne 0x14007cef5
popf
pop rax
jmp 0x14007d639
cmp eax, 0x15
jne 0x14007cf04
popf
pop rax
jmp 0x14007df38
cmp eax, 0x1e
jne 0x14007cf13
popf
pop rax
jmp 0x14007e4ce
cmp eax, 0x21
jne 0x14007cf22
popf
pop rax
jmp 0x14007e67e
cmp eax, 0x16
jne 0x14007cf31
popf
pop rax
jmp 0x14007df8e
cmp eax, 0x20
jne 0x14007cf40
popf
pop rax
jmp 0x14007e5e5
cmp eax, 0x12
jne 0x14007cf4f
popf
pop rax
jmp 0x14007ddcd
cmp eax, 9
jne 0x14007cf5e
popf
pop rax
jmp 0x14007d7b3
cmp eax, 0xa
jne 0x14007cf6d
popf
pop rax
jmp 0x14007d86b
cmp eax, 0x19
jne 0x14007cf7c
popf
pop rax
jmp 0x14007e1c8
cmp eax, 5
jne 0x14007cf8b
popf
pop rax
jmp 0x14007d5d5
cmp eax, 0xe
jne 0x14007cf9a
popf
pop rax
jmp 0x14007dacd
cmp eax, 2
jne 0x14007cfa9
popf
pop rax
jmp 0x14007d394
cmp eax, 7
jne 0x14007cfb8
popf
pop rax
jmp 0x14007d68b
cmp eax, 0
jne 0x14007cfc7
popf
pop rax
jmp 0x14007cff4
cmp eax, 0xd
jne 0x14007cfd6
popf
pop rax
jmp 0x14007d9e5
cmp eax, 4
jne 0x14007cfe5
popf
pop rax
jmp 0x14007d4c0
cmp eax, 0xb
jne 0x14007cff4
popf
pop rax
jmp 0x14007d8a4
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x20a0]
mov eax, 0x2a98c6fb
pushf
not eax
add eax, 0x18dc8472
xor eax, 0x4901eaf0
rol eax, 0x33
popf
pushf
not eax
add eax, 0x529f903
xor eax, 0x48f43870
rol eax, 0x9e
popf
call fcn.14008c714
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rbp + 0x2090], rax
mov rbx, rcx
lea rdx, [rbp + 0x90]
add rcx, 0x10
mov r8d, 0x88911265
pushf
not r8d
add r8d, 0x7bfa13df
xor r8d, 0x16326f29
rol r8d, 0x39
popf
pushf
not r8d
add r8d, 0x4ae0c3d1
xor r8d, 0x5aafd6a
rol r8d, 0xa4
popf
pushf
not r8d
add r8d, 0x35eb45d1
xor r8d, 0x6a142be6
rol r8d, 0x39
popf
call fcn.140080b6c
mov esi, 0x2684a9ca
pushf
not esi
add esi, 0x60f55c26
xor esi, 0x63378916
rol esi, 0xa
popf
pushf
not esi
add esi, 0x6b3fbae4
xor esi, 0xe04ae0
rol esi, 0xf0
popf
pushf
not esi
add esi, 0x4c1b853b
xor esi, 0xc42d731
rol esi, 0xcf
popf
pushf
not esi
add esi, 0x4df0e382
xor esi, 0x5d146b62
rol esi, 0x92
popf
lea rcx, [0x187d3b0b5]
pushf
sub rcx, 0x47d32b75
popf
mov edx, esi
jmp 0x14007d120
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
xor r14d, r14d
mov dword [rbp - 0x50], 0x18
lea rcx, [rbp + 0x20]
mov qword [rbp - 0x48], r14
mov dword [rbp - 0x40], esi
jmp 0x14007d13c
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
xorps xmm0, xmm0
mov qword [rbp + 0x28], r14
xor ecx, ecx
movdqa xmmword [rbp + 0x30], xmm0
mov dword [rbp + 0x5c], 0x101
mov word [rbp + 0x60], si
call fcn.1400d85f4
mov rcx, rax
call fcn.140104eea
mov ecx, eax
call fcn.1400f5512
cmp rax, 0xffffffffffffffff
mov ecx, esi
cmove rax, r14
mov qword [rbp + 0x70], rax
call fcn.1400d85f4
mov rcx, rax
call fcn.140104eea
mov ecx, eax
call fcn.1400f5512
cmp rax, 0xffffffffffffffff
mov ecx, 0x9c7194a3
pushf
not ecx
add ecx, 0x7e3ed7e2
xor ecx, 0x73d419ec
rol ecx, 0x3c
popf
pushf
not ecx
add ecx, 0x5497aeb0
xor ecx, 0x23761902
rol ecx, 0xa6
popf
cmove rax, r14
mov qword [rbp + 0x78], rax
call fcn.1400d85f4
mov rcx, rax
call fcn.140104eea
mov ecx, eax
call fcn.1400f5512
cmp rax, 0xffffffffffffffff
lea rdi, [rbx + 0x3040]
cmove rax, r14
mov qword [rbp + 0x80], rax
jmp 0x14007d1f7
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov qword [rsp + 0x48], rdi
lea r8, [rbp - 0x50]
mov rdx, rax
lea rcx, [rbp + 0x90]
lea rax, [rbp + 0x20]
xor r9d, r9d
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], esi
jmp 0x14007d230
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14007d26d
push rax
pushf
mov eax, 0x60155d5b
pushf
not eax
add eax, 0x5b69c4f7
xor eax, 0x11db2a30
rol eax, 0x79
popf
pushf
not eax
add eax, 0x70257efc
xor eax, 0x18504060
rol eax, 0xd3
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x983148c9
pushf
not eax
add eax, 0x2f7ee098
xor eax, 0x4b797419
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x31cf0aba
xor eax, 0x7b36b676
rol eax, 0x95
popf
pushf
not eax
add eax, 0x2f8b9363
xor eax, 0x4b515d13
rol eax, 0x55
popf
pushf
not eax
add eax, 0x5d58d1ca
xor eax, 0x77bf36d4
rol eax, 0x97
popf
jmp 0x14007cde7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea r8, [0x1b8cd6f72]
pushf
sub r8, 0x78ca95a2
popf
lea rcx, [0x1bb314107]
pushf
sub rcx, 0x7b2e66ef
popf
call fcn.14006170f
mov eax, 0xe159f6b5
pushf
not eax
add eax, 0x2a12c530
xor eax, 0x48d78087
rol eax, 0x55
popf
pushf
not eax
add eax, 0x86ae33d
xor eax, 0x7b0b6c58
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x568bf3e7
xor eax, 0x6d1eb8b4
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x6edb6193
xor eax, 0x70ef5a58
rol eax, 0x25
popf
jmp 0x14007e70f
xorps xmm0, xmm0
mov qword [rbp - 0x30], r14
lea rax, [0x190d20ae4]
pushf
sub rax, 0x50cf30ac
popf
movdqa xmmword [rbp - 0x20], xmm0
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
lea rax, [0x1928578df]
pushf
sub rax, 0x5284f81f
popf
movdqa xmmword [rbp], xmm0
xorps xmm1, xmm1
mov qword [rbp - 0x28], rax
movdqa xmmword [rbp - 0x10], xmm1
jmp 0x14007d3dc
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
jne 0x14007d42d
push rax
pushf
mov eax, 0x401d0a75
pushf
not eax
add eax, 0x318e9f8f
xor eax, 0x604f9bc5
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x4ef4d4cb
xor eax, 0x799d4c53
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x7026bb4f
xor eax, 0x5db65d45
rol eax, 0x69
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0xdaaa116a
pushf
not eax
add eax, 0x194f0737
xor eax, 0x472cb865
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x6cfd57d9
xor eax, 0xae9ad7a
rol eax, 0x14
popf
jmp 0x14007cde7
call qword [sym.imp.KERNEL32.dll_GetLastError]
push rax
pushf
mov eax, 0xcd968bf3
pushf
not eax
add eax, 0x21c8351c
xor eax, 0x1c559323
rol eax, 0x68
popf
pushf
not eax
add eax, 0x23df4a8c
xor eax, 0x2af13e3
rol eax, 8
popf
pushf
not eax
add eax, 0x7cb7f9cd
xor eax, 0x5a66932a
rol eax, 0x30
popf
pushf
not eax
add eax, 0x277e82ce
xor eax, 0x5d5b59e0
rol eax, 0x91
popf
jmp 0x14007cde7
mov rdx, qword [rbp + 0x10]
lea r8, [0x18d6d8969]
pushf
sub r8, 0x4d6aaee9
popf
mov qword [rsp + 0x58], rbx
xor r9d, r9d
mov qword [rsp + 0x50], r14
xor ecx, ecx
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], 0x80000000
mov dword [rsp + 0x30], 0x80000000
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
jmp 0x14007d510
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rbx + 0x3058], rax
test rax, rax
jne 0x14007d57b
push rax
pushf
mov eax, 0x5a397d0b
pushf
not eax
add eax, 0x5e3f8a1b
xor eax, 0x5ee90b3f
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x381e150b
xor eax, 0x480370f
rol eax, 0x80
popf
pushf
not eax
add eax, 0x264d6950
xor eax, 0x377c4779
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x76c477d0
xor eax, 0x791777ae
rol eax, 0x6c
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x451ccb9e
pushf
not eax
add eax, 0x1e85f3b9
xor eax, 0x1493fa54
rol eax, 0x13
popf
pushf
not eax
add eax, 0x18144bed
xor eax, 0xd34de70
rol eax, 0x29
popf
pushf
not eax
add eax, 0x2d4cd165
xor eax, 0x7dfba87b
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x59908307
xor eax, 0x233321c1
rol eax, 0x2b
popf
jmp 0x14007cde7
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14007d68b
xor edx, edx
mov rcx, rax
jmp 0x14007d63f
call qword [sym.imp.USER32.dll_ShowWindow]
push rax
pushf
mov eax, 0x5bf139ff
pushf
not eax
add eax, 0xd2f1d91
xor eax, 0x6fd5defa
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x4bdae9d6
xor eax, 0x75c52b8d
rol eax, 0x79
popf
pushf
not eax
add eax, 0x253c8cf2
xor eax, 0x4df7a2c1
rol eax, 0x15
popf
jmp 0x14007cde7
mov rcx, qword [rdi]
mov edx, 0xb0949a9b
pushf
not edx
add edx, 0x5990245e
xor edx, 0x5c21ae34
rol edx, 0xfe
popf
pushf
not edx
add edx, 0x3d766c9f
xor edx, 0x6ee2e7e
rol edx, 0xd2
popf
pushf
not edx
add edx, 0x42a0b71f
xor edx, 0x4f229bd1
rol edx, 0x84
popf
jmp 0x14007d6d3
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14007d710
push rax
pushf
mov eax, 0x4b9d1af2
pushf
not eax
add eax, 0x4feb9825
xor eax, 0x2548cb6b
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x79dd076f
xor eax, 0x146af703
rol eax, 0x4e
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x152e24a1
pushf
not eax
add eax, 0x697babc5
xor eax, 0x57bb9233
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x3322f52a
xor eax, 0x3820801d
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x591e931b
xor eax, 0x11955af4
rol eax, 0x9c
popf
jmp 0x14007cde7
nop dword [rax]
push rax
pushf
mov eax, 0x202ed9e4
pushf
not eax
add eax, 0x18263bea
xor eax, 0x674f540f
rol eax, 0x83
popf
pushf
not eax
add eax, 0x2f15bddc
xor eax, 0x4d6b54cf
rol eax, 0x67
popf
pushf
not eax
add eax, 0x7e4d99b5
xor eax, 0x6aa20771
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x29b0705e
xor eax, 0x60e38452
rol eax, 0xb6
popf
jmp 0x14007cde7
cmp eax, 0xffffffff
jne 0x14007d811
push rax
pushf
mov eax, 0x5d9df17a
pushf
not eax
add eax, 0x4ff9af0f
xor eax, 0x3d9c7e35
rol eax, 0x91
popf
pushf
not eax
add eax, 0x7accb26d
xor eax, 0x133c02a1
rol eax, 0xda
popf
pushf
not eax
add eax, 0x7afcaa12
xor eax, 0x4b443d26
rol eax, 0x46
popf
pushf
not eax
add eax, 0x4438bf87
xor eax, 0x34bc01d3
rol eax, 0x12
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x648f6e72
pushf
not eax
add eax, 0x461b24e9
xor eax, 0x2abf7e90
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x38ba1ed3
xor eax, 0x450c5e0c
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x5d08e77d
xor eax, 0xd691482
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x48d9c2b4
xor eax, 0x461fc8b8
rol eax, 0xda
popf
jmp 0x14007cde7
call qword [sym.imp.KERNEL32.dll_GetLastError]
push rax
pushf
mov eax, 0x58509115
pushf
not eax
add eax, 0x630f069c
xor eax, 0x18bd741e
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x5f4fab55
xor eax, 0x4f079f4e
rol eax, 4
popf
jmp 0x14007cde7
cmp byte [rbx + 0x3060], r14b
jne 0x14007d8e0
push rax
pushf
mov eax, 0xd900ec3c
pushf
not eax
add eax, 0x67fc855b
xor eax, 0x72048c6
rol eax, 0x96
popf
pushf
not eax
add eax, 0x7776d9a1
xor eax, 0x154626c
rol eax, 0x7c
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0xdd6c3251
pushf
not eax
add eax, 0x1989437d
xor eax, 0x7232fb4b
rol eax, 0x60
popf
pushf
not eax
add eax, 0x290abb7c
xor eax, 0x30c08889
rol eax, 2
popf
pushf
not eax
add eax, 0x4cfe251d
xor eax, 0x38f58e6e
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x4e214a
xor eax, 0x1d49c87
rol eax, 0xb1
popf
jmp 0x14007cde7
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14007d94f
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jle 0x14007d99f
push rax
pushf
mov eax, 0xf6e4b952
pushf
not eax
add eax, 0x27db6d04
xor eax, 0x33b0e689
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x25fe9422
xor eax, 0x4e2d429e
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x75ea6154
xor eax, 0x1e31f0ae
rol eax, 0xe2
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0xca446e61
pushf
not eax
add eax, 0x4adbac3a
xor eax, 0x70fd40cd
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x7976466c
xor eax, 0x2d7b0e95
rol eax, 0x22
popf
pushf
not eax
add eax, 0x5f8cfc97
xor eax, 0x1895c660
rol eax, 0x45
popf
jmp 0x14007cde7
lea rcx, [rbp - 0x80]
jmp 0x14007d9ea
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x80]
jmp 0x14007d9f5
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14007da11
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jg 0x14007da74
push rax
pushf
mov eax, 0x340f5bac
pushf
not eax
add eax, 0xb76a581
xor eax, 0x285f47b5
rol eax, 0x29
popf
pushf
not eax
add eax, 0x6757c95d
xor eax, 0x6f6fcd03
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x20c3f07c
xor eax, 0x19bf0c68
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x458e97f8
xor eax, 0x6cf7b8d4
rol eax, 5
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x87e00984
pushf
not eax
add eax, 0x734e6270
xor eax, 0x38b90ed3
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x4a85ba3
xor eax, 0x1d0198f0
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x40141a0b
xor eax, 0x34649448
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x43fdd0de
xor eax, 0x11ed7c11
rol eax, 0xe
popf
jmp 0x14007cde7
mov rcx, qword [rdi]
mov edx, 0x44cb14a5
pushf
not edx
add edx, 0xe140e2a
xor edx, 0x8d0572b
rol edx, 0xdd
popf
pushf
not edx
add edx, 0x282b7f01
xor edx, 0x7cadaff8
rol edx, 0x93
popf
pushf
not edx
add edx, 0x7cdc42a7
xor edx, 0x281e0191
rol edx, 0xf9
popf
pushf
not edx
add edx, 0x2f3c31fe
xor edx, 0x5c5f6bb1
rol edx, 0xfa
popf
jmp 0x14007db2a
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x14007db67
push rax
pushf
mov eax, 0xa4b5eb2e
pushf
not eax
add eax, 0x3c73e481
xor eax, 0x73b9f988
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x4a485b6f
xor eax, 0x3c6a1b2e
rol eax, 0x4c
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x8ba3edd3
pushf
not eax
add eax, 0x3072b974
xor eax, 0x7832866f
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x687347b2
xor eax, 0x79bd20ca
rol eax, 0x6d
popf
jmp 0x14007cde7
cmp byte [rbx + 0x3060], r14b
je 0x14007dbd6
push rax
pushf
mov eax, 0xf20a206b
pushf
not eax
add eax, 0x3ca45939
xor eax, 0x7cf79a1a
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x4a09944f
xor eax, 0x633bdbf4
rol eax, 0x7a
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0xbe64725f
pushf
not eax
add eax, 0x15987fab
xor eax, 0x7784a7c2
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x72cd0921
xor eax, 0x4fc2608e
rol eax, 0xc7
popf
jmp 0x14007cde7
mov rcx, qword [rdi]
mov edx, 0xf092027c
pushf
not edx
add edx, 0x10914395
xor edx, 0x63a27f25
rol edx, 0x73
popf
pushf
not edx
add edx, 0x3db58375
xor edx, 0x6caca175
rol edx, 0x86
popf
pushf
not edx
add edx, 0x1327fb99
xor edx, 0xce5cf17
rol edx, 0x48
popf
pushf
not edx
add edx, 0x56dd3729
xor edx, 0x4b6a1ef3
rol edx, 0x4c
popf
jmp 0x14007dc66
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14007dca7
push rax
pushf
mov eax, 0xbcfa79a
pushf
not eax
add eax, 0xa3f7215
xor eax, 0x5202fdfd
rol eax, 7
popf
pushf
not eax
add eax, 0x64c3c1e3
xor eax, 0x6e27fe08
rol eax, 0x82
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x9585462
pushf
not eax
add eax, 0x1c2701da
xor eax, 0x6d3d1099
rol eax, 0x98
popf
pushf
not eax
add eax, 0x15b9e1d2
xor eax, 0x2739ee16
rol eax, 0x84
popf
jmp 0x14007cde7
mov rcx, qword [rdi]
mov edx, 0x97feb99
pushf
not edx
add edx, 0x4e7e9be3
xor edx, 0x39f2bd5c
rol edx, 0x35
popf
pushf
not edx
add edx, 0x69f328c
xor edx, 0x600f8442
rol edx, 0x5e
popf
pushf
not edx
add edx, 0x6e6325a9
xor edx, 0xc801e56
rol edx, 0x56
popf
pushf
not edx
add edx, 0x108b17ce
xor edx, 0x6f8d6301
rol edx, 0x88
popf
jmp 0x14007dd37
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x14007dd74
push rax
pushf
mov eax, 0xad2e6e56
pushf
not eax
add eax, 0x732013fb
xor eax, 0x2986995f
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x1f413525
xor eax, 0x6d64417d
rol eax, 0xde
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0xac902b8
pushf
not eax
add eax, 0x618e9a6e
xor eax, 0x7ee197ed
rol eax, 0x19
popf
pushf
not eax
add eax, 0x5a9b88e2
xor eax, 0x331c6290
rol eax, 1
popf
pushf
not eax
add eax, 0x77273167
xor eax, 0x69b36578
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x7378c5c8
xor eax, 0x3128ec59
rol eax, 0x87
popf
jmp 0x14007cde7
call qword [sym.imp.KERNEL32.dll_GetLastError]
push rax
pushf
mov eax, 0x277ccd46
pushf
not eax
add eax, 0x35b2b2b5
xor eax, 0x5f00c6a0
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x5a4ef48d
xor eax, 0x210a167d
rol eax, 0x19
popf
jmp 0x14007cde7
mov rcx, qword [rdi]
mov edx, 0x4e2af60b
pushf
not edx
add edx, 0x332289ea
xor edx, 0x77eefac1
rol edx, 0xd7
popf
pushf
not edx
add edx, 0x5bcfe730
xor edx, 0x682365e3
rol edx, 0x9c
popf
pushf
not edx
add edx, 0x47d044c6
xor edx, 0x42720f33
rol edx, 0x57
popf
jmp 0x14007de4e
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x14007e5e5
cmp byte [rbx + 0x3061], r14b
jne 0x14007def2
push rax
pushf
mov eax, 0x6c43fd6a
pushf
not eax
add eax, 0x4ac85ea
xor eax, 0x49e0c5a2
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x17145037
xor eax, 0x66255f54
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x5e632ad7
xor eax, 0x849980c
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x31991693
xor eax, 0x679eeee
rol eax, 0xd
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x4df051c8
pushf
not eax
add eax, 0x48ef6416
xor eax, 0x4bae2291
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x5b75ee8b
xor eax, 0x7211ae5
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x34efea04
xor eax, 0x3c6c66d2
rol eax, 0x87
popf
jmp 0x14007cde7
lea rcx, [rsp + 0x78]
jmp 0x14007df3e
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rsp + 0x70]
jmp 0x14007df4a
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
nop word [rax + rax]
push rax
pushf
mov eax, 0xedea3992
pushf
not eax
add eax, 0x45a482fd
xor eax, 0x3f09fc99
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x7767d3a9
xor eax, 0x180cd9f4
rol eax, 0x2a
popf
jmp 0x14007cde7
mov r9d, 0xba5b7af6
pushf
not r9d
add r9d, 0x165607fd
xor r9d, 0x3903a10a
rol r9d, 0x3a
popf
pushf
not r9d
add r9d, 0x47d92c2f
xor r9d, 0x5108dee0
rol r9d, 0xcf
popf
pushf
not r9d
add r9d, 0x60e11bed
xor r9d, 0x3affad33
rol r9d, 0xaf
popf
pushf
not r9d
add r9d, 0x4883c283
xor r9d, 0x1ddfeb0b
rol r9d, 0x51
popf
mov dword [rsp + 0x20], 0x4ff
xor r8d, r8d
xor edx, edx
xor ecx, ecx
jmp 0x14007e008
call qword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14007e024
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jle 0x14007e061
push rax
pushf
mov eax, 0xc2fe29ce
pushf
not eax
add eax, 0x3ce44213
xor eax, 0xe952ebe
rol eax, 0x63
popf
pushf
not eax
add eax, 0x849a098
xor eax, 0x4cafed04
rol eax, 0x3a
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0xe5776849
pushf
not eax
add eax, 0x33b144e7
xor eax, 0x743b1b30
rol eax, 0x16
popf
pushf
not eax
add eax, 0x33c5b9ff
xor eax, 0x56de08c0
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x2d6ac3ef
xor eax, 0x428030d6
rol eax, 0xc8
popf
jmp 0x14007cde7
nop word [rax + rax]
push rax
pushf
mov eax, 0x717aaf95
pushf
not eax
add eax, 0xb883b8a
xor eax, 0x3073e05e
rol eax, 0x59
popf
pushf
not eax
add eax, 0x7219b3fa
xor eax, 0x3f7353eb
rol eax, 0x61
popf
pushf
not eax
add eax, 0x460a5aad
xor eax, 0x2318caee
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x64391662
xor eax, 0xe60f0a2
rol eax, 0xa8
popf
jmp 0x14007cde7
lea rcx, [rbp - 0x80]
jmp 0x14007e10b
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x80]
jmp 0x14007e116
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14007e132
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jg 0x14007e16f
push rax
pushf
mov eax, 0x30fe74de
pushf
not eax
add eax, 0x43e8a53
xor eax, 0xcfe2ce1
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x383b3a42
xor eax, 0x465c8b44
rol eax, 0xf
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x3ae8ece1
pushf
not eax
add eax, 0x2ed8e85c
xor eax, 0x52bf56ce
rol eax, 0x25
popf
pushf
not eax
add eax, 0x1077b2a
xor eax, 0x500759da
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x53fee0db
xor eax, 0x14d7f804
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x71566c88
xor eax, 0x43f86e8a
rol eax, 6
popf
jmp 0x14007cde7
cmp byte [rbx + 0x3061], r14b
jne 0x14007e217
push rax
pushf
mov eax, 0xbdaadc46
pushf
not eax
add eax, 0x10d23dfb
xor eax, 0x349fe909
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x1a5e120a
xor eax, 0x6b4f5e05
rol eax, 0xce
popf
pushf
not eax
add eax, 0x71b67d4b
xor eax, 0x71ac4daa
rol eax, 0x1f
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x94f62384
pushf
not eax
add eax, 0x11c03330
xor eax, 0x3fb7e4b3
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x21198b74
xor eax, 0x5acd6285
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x4a4cda95
xor eax, 0x15f74b99
rol eax, 0x77
popf
pushf
not eax
add eax, 0xa08b3f0
xor eax, 0x7e32d642
rol eax, 0xdc
popf
jmp 0x14007cde7
lea rcx, [rsp + 0x68]
jmp 0x14007e276
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x68]
sub rax, qword [rsp + 0x70]
imul rax, rax, 0x3e8
cqo
idiv qword [rsp + 0x78]
cmp rax, 0xfa
jl 0x14007e2d3
push rax
pushf
mov eax, 0xb5fe388c
pushf
not eax
add eax, 0x74c13683
xor eax, 0x11f1c9de
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x3d5b270e
xor eax, 0x84540a6
rol eax, 0x84
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x25217dd1
pushf
not eax
add eax, 0x5a9c1b84
xor eax, 0x84b345c
rol eax, 0x94
popf
pushf
not eax
add eax, 0x4497c88a
xor eax, 0x56f27f06
rol eax, 0x18
popf
pushf
not eax
add eax, 0x3982fc24
xor eax, 0x55d8cd01
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x5d5557c4
xor eax, 0x6e2f2315
rol eax, 0x31
popf
jmp 0x14007cde7
cmp byte [rbx + 0x3061], r14b
je 0x14007e38e
push rax
pushf
mov eax, 0x8f11daf7
pushf
not eax
add eax, 0x772df828
xor eax, 0x2ad30980
rol eax, 7
popf
pushf
not eax
add eax, 0x2826027f
xor eax, 0x539d6af2
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x43c441dc
xor eax, 0x2a56069a
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x617c7c0f
xor eax, 0x3c7f2394
rol eax, 2
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x3c1078a7
pushf
not eax
add eax, 0x2d8e793b
xor eax, 0xb5fb292
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x62d87504
xor eax, 0x68de5351
rol eax, 0xa
popf
jmp 0x14007cde7
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0xc710f3f4
pushf
not eax
add eax, 0x3fbc7186
xor eax, 0x41eb7e1d
rol eax, 0x98
popf
pushf
not eax
add eax, 0x5cb7cac3
xor eax, 0x390071d4
rol eax, 0
popf
pushf
not eax
add eax, 0xaa810a2
xor eax, 0x35a56f6a
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x1d3430d4
xor eax, 0x12d7f3a5
rol eax, 0x6f
popf
jmp 0x14007cde7
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
xor r8d, r8d
jmp 0x14007e438
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jle 0x14007e488
push rax
pushf
mov eax, 0x7f0b971d
pushf
not eax
add eax, 0x48b804a5
xor eax, 0x729eb1fd
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x5b595ff4
xor eax, 0x3147eebc
rol eax, 0xab
popf
pushf
not eax
add eax, 0x329b45b6
xor eax, 0xf54077f
rol eax, 0x97
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0xa36706c4
pushf
not eax
add eax, 0x1300e0c6
xor eax, 0x6f9a9ba6
rol eax, 0xd
popf
pushf
not eax
add eax, 0x785dea0d
xor eax, 0x57bdc97
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x1b490776
xor eax, 0x2ffb7cc3
rol eax, 0x21
popf
jmp 0x14007cde7
lea rcx, [rbp - 0x80]
jmp 0x14007e4d3
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x80]
jmp 0x14007e4de
call qword [sym.imp.USER32.dll_DispatchMessageW]
push rax
pushf
mov eax, 0x5b83bb5c
pushf
not eax
add eax, 0x3b399035
xor eax, 0xcd4b3f7
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x3c3c2bc7
xor eax, 0x77acdd15
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x33573f0b
xor eax, 0x1433e7ae
rol eax, 0x1e
popf
jmp 0x14007cde7
cmp byte [rbx + 0x3061], r14b
jne 0x14007e58c
push rax
pushf
mov eax, 0xdd7e438e
pushf
not eax
add eax, 0x7dea73a0
xor eax, 0x710f60f8
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x14bb550f
xor eax, 0x13bad16f
rol eax, 0xba
popf
pushf
not eax
add eax, 0xaec2684
xor eax, 0x4da831dc
rol eax, 4
popf
pushf
not eax
add eax, 0x79311d9d
xor eax, 0x69f7a75c
rol eax, 0xc0
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x9e223fd7
pushf
not eax
add eax, 0x3afec859
xor eax, 0x663d96e5
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x2e63001d
xor eax, 0x305afb88
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x487d410a
xor eax, 0x3761b445
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x329d4474
xor eax, 0x2cf29168
rol eax, 0x51
popf
jmp 0x14007cde7
mov rcx, qword [rbx + 0x3058]
test rcx, rcx
je 0x14007e637
push rax
pushf
mov eax, 0x3e0720af
pushf
not eax
add eax, 0x23bb237c
xor eax, 0x5cff4674
rol eax, 0x92
popf
pushf
not eax
add eax, 0x3706d95b
xor eax, 0x54d66b90
rol eax, 0x41
popf
pushf
not eax
add eax, 0x22a3791d
xor eax, 0x48f839a2
rol eax, 0xaa
popf
jmp 0x14007cde7
push rax
pushf
mov eax, 0x387604ff
pushf
not eax
add eax, 0x2656c747
xor eax, 0x5c12ee6c
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x528cf062
xor eax, 0x52c282e3
rol eax, 0x21
popf
pushf
not eax
add eax, 0x5ba13c8f
xor eax, 0x76f026e3
rol eax, 0xf6
popf
jmp 0x14007cde7
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [rbx + 0x3058], r14
push rax
pushf
mov eax, 0x4cfe86c
pushf
not eax
add eax, 0x19abc51b
xor eax, 0x3fdcb3d
rol eax, 0x29
popf
pushf
not eax
add eax, 0x37674746
xor eax, 0x2e52f40
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x47d8a0d0
xor eax, 0x6eb71856
rol eax, 0x52
popf
pushf
not eax
add eax, 0x59baa89c
xor eax, 0x6aaf84a1
rol eax, 0xbd
popf
jmp 0x14007cde7
mov rcx, qword [rdi]
lea rdx, [rsp + 0x60]
jmp 0x14007e6ed
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [rdi]
jmp 0x14007e6f7
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx + 0x3048]
jmp 0x14007e705
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x60]
mov rcx, qword [rbp + 0x2090]
xor rcx, rsp
call fcn.140089a05
lea r11, [rsp + 0x21a0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret