Function at 0x14002e610
Capabilities:
Terminate process

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
movaps xmmword [r11 - 0x48], xmm6
movaps xmmword [r11 - 0x58], xmm7
mov rax, qword [0x14018e080]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov rbp, r9
mov r14, rdx
movq xmm6, r8
mov qword [rsp + 0x50], r9
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [r11 - 0x78], xmm0
xor r15d, r15d
mov edi, 0xff
movabs rbx, 0x7fffffffffffffff
movabs rsi, 0x4e94914effff
movabs r13, 0x7fffffffffb3b4bf
movabs r12, 0x431bde82d7b634db
movss xmm7, dword [0x14017ab28]
nop
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14002e6da
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x14002e93d
mov rax, qword [0x1403bbf80]
test rax, rax
je 0x14002e6ef
mov rcx, qword [rax + 0x98]
jmp 0x14002e6f2
mov rcx, r15
cmp qword [rcx + 0x18], r15
jne 0x14002e713
test rax, rax
je 0x14002e713
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14002e713
cmp qword [rcx], r15
je 0x14002e713
call fcn.1400281f0
call fcn.140028b10
call fcn.140005430
movsd qword [rsp + 0x58], xmm6
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x14002eb48
mov rax, qword [rcx]
lea r8, [rsp + 0x58]
mov rdx, r14
call qword [rax + 0x10]
call fcn.140007b00
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r15d
movss dword [rsp + 0x28], xmm7
mov dword [rsp + 0x20], r15d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov eax, dword [rsp + 0x68]
cmp byte [r14 + 0xa8], r15b
mov ecx, 0x12
cmove eax, ecx
mov dword [rsp + 0x68], eax
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14002e7cc
call fcn.140007eb0
mov rax, qword [0x1403bbf80]
mov rax, qword [rax + 0x4070]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, r15
cmp byte [rcx], r15b
cmovne rax, rcx
mov rcx, rax
call fcn.140027c30
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14002e8a8
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14002e8a8
mov rbx, qword [0x1403bbf80]
test rbx, rbx
je 0x14002e86b
mov rbx, qword [rbx + 0x98]
test rbx, rbx
je 0x14002e86b
cmp qword [rbx], r15
je 0x14002e86b
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14002e836
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 8], r15
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14002e849
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x10], r15
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x14002e86b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x18], r15
mov rax, qword [0x1403bbf80]
mov rcx, qword [rax + 0x50]
mov qword [rcx + 8], r15
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
lea rdx, [r14 + 0x18]
call qword [rax + 0x80]
mov rax, qword [0x1403bbf80]
test rax, rax
je 0x14002e89e
mov rax, qword [rax + 0x98]
test rax, rax
je 0x14002e89e
cmp qword [rax], r15
je 0x14002e89e
call fcn.1400281f0
movabs rbx, 0x7fffffffffffffff
lea rcx, [rsp + 0x40]
call fcn.1400318e0
mov rax, qword [rsp + 0x40]
cmp rax, r13
je 0x14002e8d0
mov ecx, 1
cmovl ecx, edi
test cl, cl
jns 0x14002e8d0
lea rbx, [rax + 0x4c4b40]
nop
lea rcx, [rsp + 0x48]
call fcn.1400318e0
mov rax, qword [rsp + 0x48]
cmp rbx, rax
je 0x14002e933
mov ecx, 1
cmovl ecx, edi
test cl, cl
jle 0x14002e933
mov rcx, rbx
sub rcx, rax
cmp rcx, rsi
jg 0x14002e927
mov rax, r12
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14002e91e
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14002e8d0
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14002e8d0
movabs rbx, 0x7fffffffffffffff
cmp dword [rsp + 0x68], 0x12
jne 0x14002e6a0
mov rcx, qword [0x1403bbf80]
test rcx, rcx
je 0x14002e95d
mov rdi, qword [rcx + 0x98]
jmp 0x14002e960
mov rdi, r15
lea rsi, [rcx + 8]
test rcx, rcx
je 0x14002e9d9
mov rbx, qword [rcx + 0x98]
test rbx, rbx
je 0x14002e9d9
cmp qword [rbx], r15
je 0x14002e9d9
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x14002e997
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [rbx + 8], r15
mov rcx, qword [0x1403bbf80]
mov rdx, qword [rbx + 0x10]
test rdx, rdx
je 0x14002e9b4
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [rbx + 0x10], r15
mov rcx, qword [0x1403bbf80]
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x14002e9d9
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [rbx + 0x18], r15
mov rcx, qword [0x1403bbf80]
mov rax, qword [rcx + 0x50]
mov qword [rax + 8], r15
mov rdx, qword [rdi]
test rdx, rdx
je 0x14002e9f1
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov rcx, qword [0x1403bbf80]
mov qword [rsi + 0x80], r15
mov qword [rsi + 0x90], r15
test rcx, rcx
je 0x14002ea0a
dec dword [rcx + 0xec]
mov rcx, rdi
call fcn.1400ba7b8
mov rax, qword [0x1403bbf80]
test rax, rax
je 0x14002ea27
mov rbx, qword [rax + 0x90]
jmp 0x14002ea2a
mov rbx, r15
lea rdi, [rax + 8]
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x14002ea44
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1403bbf80]
mov qword [rdi + 0x78], r15
mov qword [rdi + 0x88], r15
test rax, rax
je 0x14002ea5a
dec dword [rax + 0xec]
mov rcx, rbx
call fcn.1400ba7b8
mov rbx, qword [0x1403bbf80]
mov rcx, rbx
call fcn.140006920
cmp qword [0x1403bbf80], rbx
jne 0x14002ea81
mov qword [0x1403bbf80], r15
test rbx, rbx
je 0x14002eaa8
mov rcx, rbx
call fcn.140015cb0
mov rax, qword [0x1403bbf80]
test rax, rax
je 0x14002eaa0
dec dword [rax + 0xec]
mov rcx, rbx
call fcn.1400ba7b8
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x14002eabb
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [r14 + 8], r15
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x14002eace
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [r14 + 0x10], r15
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [r14 + 0x70]
mov rcx, qword [r14 + 0x98]
call qword [sym.imp.USER32.dll_UnregisterClassA]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x14002eb13
mov rax, qword [rcx]
cmp rcx, rbp
setne dl
call qword [rax + 0x20]
mov qword [rbp + 0x38], r15
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.1400b3840
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400b293c
nop
int3