Function at 0x14008d03b
Capabilities:
Terminate process

Disassembly:
push rax
pushf
mov eax, 0x692f5532
pushf
not eax
add eax, 0x2e131339
xor eax, 0x452baf93
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x2006a6c
xor eax, 0x55f229df
rol eax, 0x1b
popf
cmp eax, 0xd
jne 0x14008d078
popf
pop rax
jmp 0x14008db50
cmp eax, 0xb
jne 0x14008d087
popf
pop rax
jmp 0x14008da22
cmp eax, 0x17
jne 0x14008d096
popf
pop rax
jmp 0x14008e23c
cmp eax, 0x21
jne 0x14008d0a5
popf
pop rax
jmp 0x14008e78d
cmp eax, 7
jne 0x14008d0b4
popf
pop rax
jmp 0x14008d831
cmp eax, 3
jne 0x14008d0c3
popf
pop rax
jmp 0x14008d67c
cmp eax, 0x16
jne 0x14008d0d2
popf
pop rax
jmp 0x14008e155
cmp eax, 0x10
jne 0x14008d0e1
popf
pop rax
jmp 0x14008dd87
cmp eax, 0xc
jne 0x14008d0f0
popf
pop rax
jmp 0x14008daa4
cmp eax, 0x11
jne 0x14008d0ff
popf
pop rax
jmp 0x14008de56
cmp eax, 5
jne 0x14008d10e
popf
pop rax
jmp 0x14008d7b7
cmp eax, 0x22
jne 0x14008d11d
popf
pop rax
jmp 0x14008e7cd
cmp eax, 0x1e
jne 0x14008d12c
popf
pop rax
jmp 0x14008e62a
cmp eax, 0xe
jne 0x14008d13b
popf
pop rax
jmp 0x14008dc12
cmp eax, 8
jne 0x14008d14a
popf
pop rax
jmp 0x14008d8e7
cmp eax, 0xa
jne 0x14008d159
popf
pop rax
jmp 0x14008d9d6
cmp eax, 4
jne 0x14008d168
popf
pop rax
jmp 0x14008d6b5
cmp eax, 0x12
jne 0x14008d177
popf
pop rax
jmp 0x14008df70
cmp eax, 2
jne 0x14008d186
popf
pop rax
jmp 0x14008d5c2
cmp eax, 0x1a
jne 0x14008d195
popf
pop rax
jmp 0x14008e3cc
cmp eax, 0x18
jne 0x14008d1a4
popf
pop rax
jmp 0x14008e275
cmp eax, 0x13
jne 0x14008d1b3
popf
pop rax
jmp 0x14008dfbc
cmp eax, 0x1d
jne 0x14008d1c2
popf
pop rax
jmp 0x14008e582
cmp eax, 0x19
jne 0x14008d1d1
popf
pop rax
jmp 0x14008e337
cmp eax, 0x1f
jne 0x14008d1e0
popf
pop rax
jmp 0x14008e673
cmp eax, 6
jne 0x14008d1ef
popf
pop rax
jmp 0x14008d7f2
cmp eax, 0x20
jne 0x14008d1fe
popf
pop rax
jmp 0x14008e707
cmp eax, 1
jne 0x14008d20d
popf
pop rax
jmp 0x14008d508
cmp eax, 0x1b
jne 0x14008d21c
popf
pop rax
jmp 0x14008e4ae
cmp eax, 0x14
jne 0x14008d22b
popf
pop rax
jmp 0x14008e054
cmp eax, 0x1c
jne 0x14008d23a
popf
pop rax
jmp 0x14008e543
cmp eax, 0
jne 0x14008d249
popf
pop rax
jmp 0x14008d276
cmp eax, 9
jne 0x14008d258
popf
pop rax
jmp 0x14008d944
cmp eax, 0x15
jne 0x14008d267
popf
pop rax
jmp 0x14008e0d9
cmp eax, 0xf
jne 0x14008d276
popf
pop rax
jmp 0x14008dcf2
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x20a0]
mov eax, 0x3099fcfb
pushf
not eax
add eax, 0x20dd885d
xor eax, 0x4595f0b
rol eax, 0x34
popf
pushf
not eax
add eax, 0x330f49ff
xor eax, 0x6ae00851
rol eax, 0x6e
popf
call fcn.14009bcb8
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rbp + 0x2090], rax
mov rbx, rcx
lea rdx, [rbp + 0x90]
add rcx, 0x10
mov r8d, 0x963b3558
pushf
not r8d
add r8d, 0x805ac9e
xor r8d, 0x146baa70
rol r8d, 0xb
popf
pushf
not r8d
add r8d, 0x307ae619
xor r8d, 0x61913aeb
rol r8d, 0xe
popf
call fcn.1400900bf
mov esi, 0xda841ae9
pushf
not esi
add esi, 0x4e3bde00
xor esi, 0x65c8a4cd
rol esi, 4
popf
pushf
not esi
add esi, 0x6bfc731d
xor esi, 0x405756b
rol esi, 0x51
popf
lea rcx, [0x19af77c3a]
pushf
sub rcx, 0x5af6f70a
popf
mov edx, esi
jmp 0x14008d35f
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
xor r14d, r14d
mov dword [rbp - 0x50], 0x18
lea rcx, [rbp + 0x20]
mov qword [rbp - 0x48], r14
mov dword [rbp - 0x40], esi
jmp 0x14008d37b
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
xorps xmm0, xmm0
mov qword [rbp + 0x28], r14
xor ecx, ecx
movdqa xmmword [rbp + 0x30], xmm0
mov dword [rbp + 0x5c], 0x101
mov word [rbp + 0x60], si
call fcn.1400e7d6b
mov rcx, rax
call fcn.140114ac5
mov ecx, eax
call fcn.14010520d
cmp rax, 0xffffffffffffffff
mov ecx, esi
cmove rax, r14
mov qword [rbp + 0x70], rax
call fcn.1400e7d6b
mov rcx, rax
call fcn.140114ac5
mov ecx, eax
call fcn.14010520d
cmp rax, 0xffffffffffffffff
mov ecx, 0xef0f9ec9
pushf
not ecx
add ecx, 0x3ff2079c
xor ecx, 0x3e3a03d6
rol ecx, 0xca
popf
pushf
not ecx
add ecx, 0x556d840d
xor ecx, 0xaf5281e
rol ecx, 0xbc
popf
pushf
not ecx
add ecx, 0x46726d60
xor ecx, 0x46db27bb
rol ecx, 0xaf
popf
cmove rax, r14
mov qword [rbp + 0x78], rax
call fcn.1400e7d6b
mov rcx, rax
call fcn.140114ac5
mov ecx, eax
call fcn.14010520d
cmp rax, 0xffffffffffffffff
lea rdi, [rbx + 0x3040]
cmove rax, r14
mov qword [rbp + 0x80], rax
jmp 0x14008d44b
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov qword [rsp + 0x48], rdi
lea r8, [rbp - 0x50]
mov rdx, rax
lea rcx, [rbp + 0x90]
lea rax, [rbp + 0x20]
xor r9d, r9d
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], esi
jmp 0x14008d484
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14008d4d4
push rax
pushf
mov eax, 0x499ebad
pushf
not eax
add eax, 0xc3e0eeb
xor eax, 0x50b1c36c
rol eax, 0x56
popf
pushf
not eax
add eax, 0xd5b0cc4
xor eax, 0x24f27a1f
rol eax, 0x80
popf
pushf
not eax
add eax, 0x4f34eb4a
xor eax, 0x793dadf5
rol eax, 0xa5
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xfda8f332
pushf
not eax
add eax, 0x77e2f3ef
xor eax, 0x60e1bcc8
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x13d2efe8
xor eax, 0x3ce50c47
rol eax, 0x8d
popf
jmp 0x14008d069
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea r8, [0x19e0e244b]
pushf
sub r8, 0x5e0b4a7b
popf
lea rcx, [0x187c591eb]
pushf
sub rcx, 0x47c2b7d3
popf
call fcn.140070976
mov eax, 0x26327d70
pushf
not eax
add eax, 0x6a169a34
xor eax, 0x3111149c
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x16878003
xor eax, 0x2edf10ad
rol eax, 0xca
popf
pushf
not eax
add eax, 0x4aac1aab
xor eax, 0x47580ac3
rol eax, 8
popf
jmp 0x14008e7f8
xorps xmm0, xmm0
mov qword [rbp - 0x30], r14
lea rax, [0x180b5df24]
pushf
sub rax, 0x40b304ec
popf
movdqa xmmword [rbp - 0x20], xmm0
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
lea rax, [0x1b6b19cf8]
pushf
sub rax, 0x76b11c48
popf
movdqa xmmword [rbp], xmm0
xorps xmm1, xmm1
mov qword [rbp - 0x28], rax
movdqa xmmword [rbp - 0x10], xmm1
jmp 0x14008d60a
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
jne 0x14008d648
push rax
pushf
mov eax, 0x3538c3b
pushf
not eax
add eax, 0x59d61d53
xor eax, 0x3418d660
rol eax, 0x63
popf
pushf
not eax
add eax, 0x72547ed7
xor eax, 0x5de2431b
rol eax, 0xcb
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xff415251
pushf
not eax
add eax, 0x1289495c
xor eax, 0x6173ef6f
rol eax, 0x59
popf
pushf
not eax
add eax, 0x34371cff
xor eax, 0x695294ce
rol eax, 0x95
popf
jmp 0x14008d069
call qword [sym.imp.KERNEL32.dll_GetLastError]
push rax
pushf
mov eax, 0x73a0fc09
pushf
not eax
add eax, 0x1b7e6438
xor eax, 0x5ff51427
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x72d800dc
xor eax, 0x1ee7afe3
rol eax, 4
popf
jmp 0x14008d069
mov rdx, qword [rbp + 0x10]
lea r8, [0x1a5bb34d1]
pushf
sub r8, 0x65b85a51
popf
mov qword [rsp + 0x58], rbx
xor r9d, r9d
mov qword [rsp + 0x50], r14
xor ecx, ecx
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], 0x80000000
mov dword [rsp + 0x30], 0x80000000
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
jmp 0x14008d705
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rbx + 0x3058], rax
test rax, rax
jne 0x14008d770
push rax
pushf
mov eax, 0x43a0c248
pushf
not eax
add eax, 0x1cb9a429
xor eax, 0x56286e11
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x5e32b4a8
xor eax, 0x57ac63d
rol eax, 0x87
popf
pushf
not eax
add eax, 0x12509252
xor eax, 0x46c35bb0
rol eax, 0x17
popf
pushf
not eax
add eax, 0x1aa44c68
xor eax, 0x4142d959
rol eax, 0xa5
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xacecb328
pushf
not eax
add eax, 0x32470e6a
xor eax, 0x5f4e9e02
rol eax, 0x36
popf
pushf
not eax
add eax, 0x36b13c81
xor eax, 0x606d1b71
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x2e8fb49c
xor eax, 0x3a66f73a
rol eax, 0xf0
popf
jmp 0x14008d069
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14008d831
xor edx, edx
mov rcx, rax
jmp 0x14008d7f8
call qword [sym.imp.USER32.dll_ShowWindow]
push rax
pushf
mov eax, 0xd6aadc20
pushf
not eax
add eax, 0x160ba56e
xor eax, 0x2d677f21
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x5b2bfbc
xor eax, 0x7575345b
rol eax, 0xd5
popf
jmp 0x14008d069
mov rcx, qword [rdi]
mov edx, 0x7fd6b43b
pushf
not edx
add edx, 0x4b0a2b4e
xor edx, 0x204b8856
rol edx, 0x8a
popf
pushf
not edx
add edx, 0x49c26272
xor edx, 0x69454ec4
rol edx, 0xcb
popf
jmp 0x14008d864
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14008d8a1
push rax
pushf
mov eax, 0xc9a13d26
pushf
not eax
add eax, 0x885c9e5
xor eax, 0x7d142a5b
rol eax, 0x66
popf
pushf
not eax
add eax, 0x2aad18d2
xor eax, 0x2e835fc1
rol eax, 0x7d
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0x603b261d
pushf
not eax
add eax, 0x110642f6
xor eax, 0x5ec84733
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x3f276ce0
xor eax, 0x7f2d1a6a
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x38d4537c
xor eax, 0x3a3125fa
rol eax, 0x6d
popf
jmp 0x14008d069
nop dword [rax]
push rax
pushf
mov eax, 0xd971136e
pushf
not eax
add eax, 0x56bc8209
xor eax, 0x6ddfe75d
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x365a30b1
xor eax, 0x19526cec
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x5eef35ee
xor eax, 0x23b0b661
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x700d8ac8
xor eax, 0x30f46cce
rol eax, 0x5d
popf
jmp 0x14008d069
cmp eax, 0xffffffff
jne 0x14008d9a2
push rax
pushf
mov eax, 0xdfca7c57
pushf
not eax
add eax, 0x33eddaa3
xor eax, 0x538eff16
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x48fa623c
xor eax, 0x668fbdea
rol eax, 0x52
popf
pushf
not eax
add eax, 0x38f6e7de
xor eax, 0x7c2bf233
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x975deb0
xor eax, 0x559f4fe1
rol eax, 0xd
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0x8af976c0
pushf
not eax
add eax, 0x47d51917
xor eax, 0x150d6777
rol eax, 0x22
popf
pushf
not eax
add eax, 0x42e266ba
xor eax, 0x5b875231
rol eax, 0xa2
popf
jmp 0x14008d069
call qword [sym.imp.KERNEL32.dll_GetLastError]
push rax
pushf
mov eax, 0xda063ace
pushf
not eax
add eax, 0x7aa95719
xor eax, 0x570559f5
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x6313eff
xor eax, 0x2772d40e
rol eax, 0x29
popf
pushf
not eax
add eax, 0x59c78841
xor eax, 0x4cb16e18
rol eax, 0x46
popf
jmp 0x14008d069
cmp byte [rbx + 0x3060], r14b
jne 0x14008da5e
push rax
pushf
mov eax, 0x443ad7be
pushf
not eax
add eax, 0xef26268
xor eax, 0x62e61e76
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x42792d84
xor eax, 0x6e506318
rol eax, 0x40
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xf95a06c
pushf
not eax
add eax, 0x2212ef7f
xor eax, 0x1791dcc8
rol eax, 0x63
popf
pushf
not eax
add eax, 0x1d0c0735
xor eax, 0x7ceb2437
rol eax, 0x14
popf
pushf
not eax
add eax, 0x23534844
xor eax, 0x5e1a337d
rol eax, 0xe3
popf
jmp 0x14008d069
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14008daba
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jle 0x14008db0a
push rax
pushf
mov eax, 0xbd432268
pushf
not eax
add eax, 0x6334ef7b
xor eax, 0x61cc33d9
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x257dcccb
xor eax, 0x72f3f9fd
rol eax, 0xc
popf
pushf
not eax
add eax, 0x1b83778e
xor eax, 0x483ab473
rol eax, 0xd2
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0x6087de0
pushf
not eax
add eax, 0x6deaed1c
xor eax, 0x75932ed7
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x4625e5e0
xor eax, 0x21ff3dbd
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x4c5398aa
xor eax, 0x2445a8f8
rol eax, 0x4a
popf
jmp 0x14008d069
lea rcx, [rbp - 0x80]
jmp 0x14008db55
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x80]
jmp 0x14008db60
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14008db7c
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jg 0x14008dbcc
push rax
pushf
mov eax, 0xd1166e19
pushf
not eax
add eax, 0x13198332
xor eax, 0x51088861
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x268b2fdf
xor eax, 0x421f0ec
rol eax, 4
popf
pushf
not eax
add eax, 0x57eb5766
xor eax, 0x22052ed5
rol eax, 0x23
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xfead41bd
pushf
not eax
add eax, 0x500df8b7
xor eax, 0x74ca4129
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x56114339
xor eax, 0x4d49a27e
rol eax, 0xca
popf
pushf
not eax
add eax, 0x149359d7
xor eax, 0x478abc76
rol eax, 0xe
popf
jmp 0x14008d069
mov rcx, qword [rdi]
mov edx, 0xf22f7170
pushf
not edx
add edx, 0x7aa5160b
xor edx, 0x1e5273be
rol edx, 0x4b
popf
pushf
not edx
add edx, 0x5d09842e
xor edx, 0x396efd84
rol edx, 0xc7
popf
pushf
not edx
add edx, 0x4f6f1f86
xor edx, 0x4a0e1a63
rol edx, 0xf7
popf
pushf
not edx
add edx, 0x21cd4b9
xor edx, 0x79198adc
rol edx, 0x14
popf
jmp 0x14008dc6f
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x14008dcbf
push rax
pushf
mov eax, 0xf18c3161
pushf
not eax
add eax, 0x2c8918da
xor eax, 0x1d284913
rol eax, 0x39
popf
pushf
not eax
add eax, 0x744f4eb6
xor eax, 0x42c52443
rol eax, 0x88
popf
pushf
not eax
add eax, 0x4a52e483
xor eax, 0xfedc9a3
rol eax, 0x6e
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xd2b77278
pushf
not eax
add eax, 0x5986ae03
xor eax, 0xe5565e8
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x5949e868
xor eax, 0x30c04293
rol eax, 0x7f
popf
jmp 0x14008d069
cmp byte [rbx + 0x3060], r14b
je 0x14008dd54
push rax
pushf
mov eax, 0xd36e576f
pushf
not eax
add eax, 0x3da2a0e8
xor eax, 0x673b30f5
rol eax, 0x62
popf
pushf
not eax
add eax, 0x664a766b
xor eax, 0x76aa7610
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x3c8b6464
xor eax, 0x74042ce1
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x4b3f8c61
xor eax, 0x40733eb2
rol eax, 0x11
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xe8e93dff
pushf
not eax
add eax, 0x487d4ff9
xor eax, 0x269beb3b
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x2a244196
xor eax, 0x2cc3055e
rol eax, 0xbe
popf
jmp 0x14008d069
mov rcx, qword [rdi]
mov edx, 0x24962cb5
pushf
not edx
add edx, 0x310405d0
xor edx, 0x516d874b
rol edx, 0x2e
popf
pushf
not edx
add edx, 0x78da5989
xor edx, 0x2687b432
rol edx, 0x17
popf
pushf
not edx
add edx, 0x41470d55
xor edx, 0x1b632c79
rol edx, 0x8c
popf
jmp 0x14008ddcf
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14008de23
push rax
pushf
mov eax, 0x1e10332a
pushf
not eax
add eax, 0x55a7ee57
xor eax, 0x77ebaad5
rol eax, 0x86
popf
pushf
not eax
add eax, 0x5c50219c
xor eax, 0x46fbb7a
rol eax, 0
popf
pushf
not eax
add eax, 0x6643d922
xor eax, 0x2d1fc2d0
rol eax, 0xdb
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xe3d7a2de
pushf
not eax
add eax, 0x1bbc7d2b
xor eax, 0x679f3d1a
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x37226c64
xor eax, 0x27a58191
rol eax, 0x22
popf
jmp 0x14008d069
mov rcx, qword [rdi]
mov edx, 0xb4afcb3f
pushf
not edx
add edx, 0x261645a7
xor edx, 0x26322aa2
rol edx, 0xc
popf
pushf
not edx
add edx, 0x4fafbfdf
xor edx, 0x45a7b861
rol edx, 0x42
popf
pushf
not edx
add edx, 0x6ad3251a
xor edx, 0x2c93e3b1
rol edx, 0xfe
popf
pushf
not edx
add edx, 0x1aa77f80
xor edx, 0x25e39052
rol edx, 0xe
popf
jmp 0x14008deb3
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x14008df16
push rax
pushf
mov eax, 0x1a1c22a3
pushf
not eax
add eax, 0x42a4f973
xor eax, 0x181f9d6a
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x12176c33
xor eax, 0xc69d9f7
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x2cd9222b
xor eax, 0x7408bc27
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x4c8d1771
xor eax, 0x9a05ba5
rol eax, 0x4f
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0x28c0be20
pushf
not eax
add eax, 0x13ab84
xor eax, 0x38913090
rol eax, 0x32
popf
pushf
not eax
add eax, 0x750cba34
xor eax, 0x1adecc58
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x6c1052d8
xor eax, 0x4dc00fb0
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x6a47a788
xor eax, 0x73ea97a5
rol eax, 0x87
popf
jmp 0x14008d069
call qword [sym.imp.KERNEL32.dll_GetLastError]
push rax
pushf
mov eax, 0x1179622f
pushf
not eax
add eax, 0x685e949a
xor eax, 0x260184ad
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x67d99032
xor eax, 0x6e248538
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x6bfa5a18
xor eax, 0x4e327f12
rol eax, 0x88
popf
jmp 0x14008d069
mov rcx, qword [rdi]
mov edx, 0x54280fe
pushf
not edx
add edx, 0x591a0595
xor edx, 0x5ddf9f70
rol edx, 0x85
popf
pushf
not edx
add edx, 0x7985bce7
xor edx, 0x2d9f8191
rol edx, 1
popf
pushf
not edx
add edx, 0x142b53e9
xor edx, 0x16102f80
rol edx, 0x5b
popf
jmp 0x14008e003
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x14008e707
cmp byte [rbx + 0x3061], r14b
jne 0x14008e0a7
push rax
pushf
mov eax, 0xf3cd2786
pushf
not eax
add eax, 0x44b0c302
xor eax, 0x74215359
rol eax, 0x54
popf
pushf
not eax
add eax, 0x6f14e101
xor eax, 0x7155965c
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x5578688b
xor eax, 0x50667d3c
rol eax, 0xf4
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xa8f92d4d
pushf
not eax
add eax, 0x7f570dfb
xor eax, 0x1b874429
rol eax, 1
popf
pushf
not eax
add eax, 0x155c244
xor eax, 0x659a793a
rol eax, 0x6f
popf
jmp 0x14008d069
lea rcx, [rsp + 0x78]
jmp 0x14008e0df
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rsp + 0x70]
jmp 0x14008e0eb
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
nop word [rax + rax]
push rax
pushf
mov eax, 0xaad951fa
pushf
not eax
add eax, 0x24d2607c
xor eax, 0x24e1936
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x6bf33238
xor eax, 0x532c443c
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x39dd3f9d
xor eax, 0x3e87f11a
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x4647f348
xor eax, 0x6f1f30c8
rol eax, 0x9b
popf
jmp 0x14008d069
mov r9d, 0xe17dd7dc
pushf
not r9d
add r9d, 0x57ccb631
xor r9d, 0x4dbf2e93
rol r9d, 0xef
popf
pushf
not r9d
add r9d, 0x5bd78c72
xor r9d, 0x6ff3ee79
rol r9d, 0xaa
popf
mov dword [rsp + 0x20], 0x4ff
xor r8d, r8d
xor edx, edx
xor ecx, ecx
jmp 0x14008e19d
call qword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14008e1b9
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jle 0x14008e209
push rax
pushf
mov eax, 0x84597f51
pushf
not eax
add eax, 0x106b70b5
xor eax, 0x61c76bf0
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xecee3bc
xor eax, 0x24ddc1a
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x60e4deb3
xor eax, 0x49b42ffb
rol eax, 0x85
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0x89997f6a
pushf
not eax
add eax, 0x52090df3
xor eax, 0x616e4c11
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x31b94b63
xor eax, 0x6471594e
rol eax, 0xd6
popf
jmp 0x14008d069
nop word [rax + rax]
push rax
pushf
mov eax, 0x1e86d364
pushf
not eax
add eax, 0x34614ad5
xor eax, 0x24cc7b92
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x5dbdef74
xor eax, 0x7b8cd97f
rol eax, 0x20
popf
jmp 0x14008d069
lea rcx, [rbp - 0x80]
jmp 0x14008e27a
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x80]
jmp 0x14008e285
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14008e2a1
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jg 0x14008e304
push rax
pushf
mov eax, 0x76db07ba
pushf
not eax
add eax, 0x2e801326
xor eax, 0x7f33a152
rol eax, 0x58
popf
pushf
not eax
add eax, 0x30b0cd6a
xor eax, 0x52d5376a
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x55d3a0c1
xor eax, 0x4c1c640f
rol eax, 3
popf
pushf
not eax
add eax, 0x73bca147
xor eax, 0x3acd624d
rol eax, 0xd9
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xa6e6c2a8
pushf
not eax
add eax, 0x223a19b6
xor eax, 0x56003762
rol eax, 0xec
popf
pushf
not eax
add eax, 0x5599c3ee
xor eax, 0x1f52d118
rol eax, 0x2d
popf
jmp 0x14008d069
cmp byte [rbx + 0x3061], r14b
jne 0x14008e373
push rax
pushf
mov eax, 0xac4539ec
pushf
not eax
add eax, 0x2fbc9b6f
xor eax, 0x21ad2d2c
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x42608e6
xor eax, 0x19e2641b
rol eax, 0x50
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0x5c353e81
pushf
not eax
add eax, 0x1fab404f
xor eax, 0x63d4143d
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x1f25fad4
xor eax, 0xcdf6744
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x24ad6e1a
xor eax, 0x2d86cb0b
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x2ac2bc16
xor eax, 0x32356b53
rol eax, 0xe0
popf
jmp 0x14008d069
lea rcx, [rsp + 0x68]
jmp 0x14008e3d2
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x68]
sub rax, qword [rsp + 0x70]
imul rax, rax, 0x3e8
cqo
idiv qword [rsp + 0x78]
cmp rax, 0xfa
jl 0x14008e455
push rax
pushf
mov eax, 0x97c85793
pushf
not eax
add eax, 0x4782c39e
xor eax, 0x52d6f26d
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x1dd8986a
xor eax, 0x100d2c19
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x2ed45e37
xor eax, 0x4db6425a
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x5ee2d54d
xor eax, 0x6775c468
rol eax, 0xf0
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xf1f98e08
pushf
not eax
add eax, 0x7c217a82
xor eax, 0x4442a8ae
rol eax, 0x96
popf
pushf
not eax
add eax, 0x19b67493
xor eax, 0x42471ec7
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x3faa316d
xor eax, 0x38bf4896
rol eax, 0x90
popf
pushf
not eax
add eax, 0x3a41bb2
xor eax, 0x73e13d03
rol eax, 0x3b
popf
jmp 0x14008d069
cmp byte [rbx + 0x3061], r14b
je 0x14008e4ea
push rax
pushf
mov eax, 0xaf10178e
pushf
not eax
add eax, 0x4605b610
xor eax, 0x20c288d
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x7a707c56
xor eax, 0x33f3a14f
rol eax, 0xe8
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xb09a001c
pushf
not eax
add eax, 0x5706dbcf
xor eax, 0x469491d3
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x1f1b9a1f
xor eax, 0x2ca54b12
rol eax, 0x95
popf
pushf
not eax
add eax, 0x31b685b7
xor eax, 0x81b9599
rol eax, 0x24
popf
pushf
not eax
add eax, 0x6373f902
xor eax, 0x2b6f36c4
rol eax, 0xd8
popf
jmp 0x14008d069
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0xa82eaae9
pushf
not eax
add eax, 0x761f9b72
xor eax, 0xea50bed
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x13d60092
xor eax, 0x82b02df
rol eax, 0x87
popf
jmp 0x14008d069
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
xor r8d, r8d
jmp 0x14008e594
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jle 0x14008e5d1
push rax
pushf
mov eax, 0x7e801198
pushf
not eax
add eax, 0x7f044c92
xor eax, 0x5fd2bee4
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x201dd16d
xor eax, 0x73b28f5e
rol eax, 0xeb
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0x6d92c7da
pushf
not eax
add eax, 0x77386cd1
xor eax, 0x2c009c87
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xb2f700f
xor eax, 0x42934651
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x146818d
xor eax, 0x59991555
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x605cd0c0
xor eax, 0x67e6e77f
rol eax, 9
popf
jmp 0x14008d069
lea rcx, [rbp - 0x80]
jmp 0x14008e62f
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x80]
jmp 0x14008e63a
call qword [sym.imp.USER32.dll_DispatchMessageW]
push rax
pushf
mov eax, 0x785816e7
pushf
not eax
add eax, 0x29ffa499
xor eax, 0x3eb1e815
rol eax, 0x12
popf
pushf
not eax
add eax, 0x3e1f22b
xor eax, 0x6d4faad1
rol eax, 0xb8
popf
jmp 0x14008d069
cmp byte [rbx + 0x3061], r14b
jne 0x14008e6c2
push rax
pushf
mov eax, 0x63618175
pushf
not eax
add eax, 0x2c2a2c6c
xor eax, 0x1ab1b502
rol eax, 0x15
popf
pushf
not eax
add eax, 0x3aafccde
xor eax, 0x5907bb95
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x3d5e7b9
xor eax, 0x6da46c94
rol eax, 0x23
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xb3f3f3af
pushf
not eax
add eax, 0x5dc63875
xor eax, 0x4f5f9cb8
rol eax, 0x84
popf
pushf
not eax
add eax, 0x13eb63a0
xor eax, 0x4141ba4d
rol eax, 1
popf
pushf
not eax
add eax, 0x2b9099f
xor eax, 0x2e2ec685
rol eax, 0x11
popf
jmp 0x14008d069
mov rcx, qword [rbx + 0x3058]
test rcx, rcx
je 0x14008e746
push rax
pushf
mov eax, 0x4d10bfc9
pushf
not eax
add eax, 0x236083bf
xor eax, 0x52dccddd
rol eax, 0x10
popf
pushf
not eax
add eax, 0x73520588
xor eax, 0x652982e4
rol eax, 0x1c
popf
jmp 0x14008d069
push rax
pushf
mov eax, 0xc11fcff5
pushf
not eax
add eax, 0x53ed5b76
xor eax, 0x39b033ef
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x535655c0
xor eax, 0x39dd1c85
rol eax, 0x70
popf
pushf
not eax
add eax, 0x3fca2b27
xor eax, 0x1a79e2d1
rol eax, 0x3c
popf
jmp 0x14008d069
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [rbx + 0x3058], r14
push rax
pushf
mov eax, 0xba41bf5a
pushf
not eax
add eax, 0x267b1b2b
xor eax, 0x60c5afdb
rol eax, 0x57
popf
pushf
not eax
add eax, 0x15683534
xor eax, 0xfe1b631
rol eax, 0xbe
popf
jmp 0x14008d069
mov rcx, qword [rdi]
lea rdx, [rsp + 0x60]
jmp 0x14008e7d6
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [rdi]
jmp 0x14008e7e0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx + 0x3048]
jmp 0x14008e7ee
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x60]
mov rcx, qword [rbp + 0x2090]
xor rcx, rsp
call fcn.140098f5b
lea r11, [rsp + 0x21a0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret