Function at 0x14008ca1f
Capabilities:
Authenticate hmac
Terminate process

Disassembly:
push rax
pushf
mov eax, 0x7d003a56
pushf
not eax
add eax, 0x5adfc607
xor eax, 0x562b4e3f
rol eax, 0x62
popf
pushf
not eax
add eax, 0x640eb062
xor eax, 0x35b5c7e0
rol eax, 0x91
popf
pushf
not eax
add eax, 0x3538cc61
xor eax, 0x79b2c944
rol eax, 0x11
popf
cmp eax, 0xc
jne 0x14008ca6f
popf
pop rax
jmp 0x14008d57b
cmp eax, 2
jne 0x14008ca7e
popf
pop rax
jmp 0x14008d020
cmp eax, 6
jne 0x14008ca8d
popf
pop rax
jmp 0x14008d29f
cmp eax, 0
jne 0x14008ca9c
popf
pop rax
jmp 0x14008cc6d
cmp eax, 0x16
jne 0x14008caab
popf
pop rax
jmp 0x14008dc17
cmp eax, 0x18
jne 0x14008caba
popf
pop rax
jmp 0x14008dd69
cmp eax, 0x1a
jne 0x14008cac9
popf
pop rax
jmp 0x14008dead
cmp eax, 0x1c
jne 0x14008cad8
popf
pop rax
jmp 0x14008e011
cmp eax, 0x1f
jne 0x14008cae7
popf
pop rax
jmp 0x14008e167
cmp eax, 9
jne 0x14008caf6
popf
pop rax
jmp 0x14008d3f5
cmp eax, 0xd
jne 0x14008cb05
popf
pop rax
jmp 0x14008d601
cmp eax, 0x1d
jne 0x14008cb14
popf
pop rax
jmp 0x14008e076
cmp eax, 0xf
jne 0x14008cb23
popf
pop rax
jmp 0x14008d78c
cmp eax, 5
jne 0x14008cb32
popf
pop rax
jmp 0x14008d23b
cmp eax, 0x17
jne 0x14008cb41
popf
pop rax
jmp 0x14008dd1d
cmp eax, 0x15
jne 0x14008cb50
popf
pop rax
jmp 0x14008dbc1
cmp eax, 3
jne 0x14008cb5f
popf
pop rax
jmp 0x14008d100
cmp eax, 0xb
jne 0x14008cb6e
popf
pop rax
jmp 0x14008d4d3
cmp eax, 0x11
jne 0x14008cb7d
popf
pop rax
jmp 0x14008d916
cmp eax, 8
jne 0x14008cb8c
popf
pop rax
jmp 0x14008d3be
cmp eax, 4
jne 0x14008cb9b
popf
pop rax
jmp 0x14008d139
cmp eax, 7
jne 0x14008cbaa
popf
pop rax
jmp 0x14008d2de
cmp eax, 0x1b
jne 0x14008cbb9
popf
pop rax
jmp 0x14008df69
cmp eax, 0x21
jne 0x14008cbc8
popf
pop rax
jmp 0x14008e295
cmp eax, 0x22
jne 0x14008cbd7
popf
pop rax
jmp 0x14008e2fb
cmp eax, 0x10
jne 0x14008cbe6
popf
pop rax
jmp 0x14008d821
cmp eax, 0xe
jne 0x14008cbf5
popf
pop rax
jmp 0x14008d6c3
cmp eax, 0x1e
jne 0x14008cc04
popf
pop rax
jmp 0x14008e11e
cmp eax, 0xa
jne 0x14008cc13
popf
pop rax
jmp 0x14008d49a
cmp eax, 1
jne 0x14008cc22
popf
pop rax
jmp 0x14008cf40
cmp eax, 0x19
jne 0x14008cc31
popf
pop rax
jmp 0x14008de18
cmp eax, 0x13
jne 0x14008cc40
popf
pop rax
jmp 0x14008da54
cmp eax, 0x20
jne 0x14008cc4f
popf
pop rax
jmp 0x14008e1fc
cmp eax, 0x14
jne 0x14008cc5e
popf
pop rax
jmp 0x14008db15
cmp eax, 0x12
jne 0x14008cc6d
popf
pop rax
jmp 0x14008d9f5
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x20a0]
mov eax, 0x117c4741
pushf
not eax
add eax, 0x2d540a4
xor eax, 0x6023cfe1
rol eax, 0x75
popf
pushf
not eax
add eax, 0x49ca3660
xor eax, 0x6432acea
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x5f15f62e
xor eax, 0x453f4b84
rol eax, 0x6a
popf
call fcn.14009b7ed
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rbp + 0x2090], rax
mov rbx, rcx
lea rdx, [rbp + 0x90]
add rcx, 0x10
mov r8d, 0x7daa9104
pushf
not r8d
add r8d, 0x5b014d00
xor r8d, 0x727a31a4
rol r8d, 0xf5
popf
pushf
not r8d
add r8d, 0x411ebd60
xor r8d, 0x27d0c3f3
rol r8d, 0xf0
popf
pushf
not r8d
add r8d, 0x3139df81
xor r8d, 0x1cfc4c88
rol r8d, 0x9e
popf
call fcn.14008fbd5
mov esi, 0xcaca6539
pushf
not esi
add esi, 0x4c0473ba
xor esi, 0xabb19f4
rol esi, 0xf5
popf
pushf
not esi
add esi, 0xa55b012
xor esi, 0x2e386e41
rol esi, 0xf9
popf
pushf
not esi
add esi, 0x779745b6
xor esi, 0x5cbb7
rol esi, 0x86
popf
pushf
not esi
add esi, 0xd1c8a0f
xor esi, 0x407ae0c8
rol esi, 0x68
popf
lea rcx, [0x19543c972]
pushf
sub rcx, 0x55434442
popf
mov edx, esi
jmp 0x14008cdac
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
xor r14d, r14d
mov dword [rbp - 0x50], 0x18
lea rcx, [rbp + 0x20]
mov qword [rbp - 0x48], r14
mov dword [rbp - 0x40], esi
jmp 0x14008cdc8
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
xorps xmm0, xmm0
mov qword [rbp + 0x28], r14
xor ecx, ecx
movdqa xmmword [rbp + 0x30], xmm0
mov dword [rbp + 0x5c], 0x101
mov word [rbp + 0x60], si
call fcn.1400e7af9
mov rcx, rax
call fcn.140114af2
mov ecx, eax
call fcn.140104fc3
cmp rax, 0xffffffffffffffff
mov ecx, esi
cmove rax, r14
mov qword [rbp + 0x70], rax
call fcn.1400e7af9
mov rcx, rax
call fcn.140114af2
mov ecx, eax
call fcn.140104fc3
cmp rax, 0xffffffffffffffff
mov ecx, 0xe975d10e
pushf
not ecx
add ecx, 0x34aa54e7
xor ecx, 0x2c73ee0a
rol ecx, 0x8d
popf
pushf
not ecx
add ecx, 0x44485620
xor ecx, 0x168e0937
rol ecx, 3
popf
cmove rax, r14
mov qword [rbp + 0x78], rax
call fcn.1400e7af9
mov rcx, rax
call fcn.140114af2
mov ecx, eax
call fcn.140104fc3
cmp rax, 0xffffffffffffffff
lea rdi, [rbx + 0x3040]
cmove rax, r14
mov qword [rbp + 0x80], rax
jmp 0x14008ce83
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov qword [rsp + 0x48], rdi
lea r8, [rbp - 0x50]
mov rdx, rax
lea rcx, [rbp + 0x90]
lea rax, [rbp + 0x20]
xor r9d, r9d
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], esi
jmp 0x14008cebc
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14008cef9
push rax
pushf
mov eax, 0xd69e8af2
pushf
not eax
add eax, 0x9fde78f
xor eax, 0x67e7ec88
rol eax, 0xa
popf
pushf
not eax
add eax, 0x5d29927
xor eax, 0x231247d0
rol eax, 0xde
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0x32966136
pushf
not eax
add eax, 0x18654716
xor eax, 0x49e2a017
rol eax, 0x33
popf
pushf
not eax
add eax, 0x75c61519
xor eax, 0x137ba183
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x2af5976b
xor eax, 0x18c04a6f
rol eax, 0x56
popf
jmp 0x14008ca60
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea r8, [0x19571849b]
pushf
sub r8, 0x556eaacb
popf
lea rcx, [0x194925dcf]
pushf
sub rcx, 0x548f83b7
popf
call fcn.14007076a
mov eax, 0x6dea9443
pushf
not eax
add eax, 0x1f2fda8c
xor eax, 0x589b8e8f
rol eax, 0x51
popf
pushf
not eax
add eax, 0x149d8013
xor eax, 0x55a87d47
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x4019e4e6
xor eax, 0x5b3c853
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x317b8bea
xor eax, 0x3ff6390e
rol eax, 0x7a
popf
jmp 0x14008e326
xorps xmm0, xmm0
mov qword [rbp - 0x30], r14
lea rax, [0x18e501f3e]
pushf
sub rax, 0x4e4d4506
popf
movdqa xmmword [rbp - 0x20], xmm0
mov qword [rbp + 0x10], rax
lea rcx, [rbp - 0x30]
lea rax, [0x1aef3e59c]
pushf
sub rax, 0x6ef364ec
popf
movdqa xmmword [rbp], xmm0
xorps xmm1, xmm1
mov qword [rbp - 0x28], rax
movdqa xmmword [rbp - 0x10], xmm1
jmp 0x14008d068
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
jne 0x14008d0b9
push rax
pushf
mov eax, 0x93024b4
pushf
not eax
add eax, 0x19a6e397
xor eax, 0x3a1c7d5e
rol eax, 0x21
popf
pushf
not eax
add eax, 0x7d6720b8
xor eax, 0x2ec524ec
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x16d8d86
xor eax, 0x693ce797
rol eax, 0x8f
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xe81126b2
pushf
not eax
add eax, 0x37a5a0e6
xor eax, 0x667ffa57
rol eax, 0x75
popf
pushf
not eax
add eax, 0x1cb42495
xor eax, 0x29211534
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x3a3b480f
xor eax, 0x52b55fe
rol eax, 0x48
popf
jmp 0x14008ca60
call qword [sym.imp.KERNEL32.dll_GetLastError]
push rax
pushf
mov eax, 0x7bf9fc3
pushf
not eax
add eax, 0x3c79f7e6
xor eax, 0x5bb14e71
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x71627d5d
xor eax, 0x44bb9b46
rol eax, 0xb8
popf
jmp 0x14008ca60
mov rdx, qword [rbp + 0x10]
lea r8, [0x19d23cbb5]
pushf
sub r8, 0x5d20f135
popf
mov qword [rsp + 0x58], rbx
xor r9d, r9d
mov qword [rsp + 0x50], r14
xor ecx, ecx
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], 0x80000000
mov dword [rsp + 0x30], 0x80000000
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
jmp 0x14008d189
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rbx + 0x3058], rax
test rax, rax
jne 0x14008d1f4
push rax
pushf
mov eax, 0x660568ba
pushf
not eax
add eax, 0x76c0521a
xor eax, 0x60f4d8de
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x43cda9a2
xor eax, 0x410990de
rol eax, 9
popf
pushf
not eax
add eax, 0x6e4ab578
xor eax, 0x3e64c34
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x72c6a4c6
xor eax, 0x6fa7b71c
rol eax, 0xab
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xbcc49c2b
pushf
not eax
add eax, 0x7961aee3
xor eax, 0xa18468
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x17961922
xor eax, 0x265e239e
rol eax, 0x72
popf
pushf
not eax
add eax, 0x21ed6ca9
xor eax, 0x71444677
rol eax, 0xd5
popf
jmp 0x14008ca60
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14008d2de
xor edx, edx
mov rcx, rax
jmp 0x14008d2a5
call qword [sym.imp.USER32.dll_ShowWindow]
push rax
pushf
mov eax, 0x68bba221
pushf
not eax
add eax, 0x20b62708
xor eax, 0x46264df2
rol eax, 0x18
popf
pushf
not eax
add eax, 0x32c3e202
xor eax, 0x1dd50538
rol eax, 0xd0
popf
jmp 0x14008ca60
mov rcx, qword [rdi]
mov edx, 0x59ab9ef5
pushf
not edx
add edx, 0x199b76be
xor edx, 0xb4a5a5b
rol edx, 0x60
popf
pushf
not edx
add edx, 0x3b0cdfff
xor edx, 0x45b21b50
rol edx, 0x6b
popf
pushf
not edx
add edx, 0x7ebd2479
xor edx, 0x58fabdfd
rol edx, 0xc6
popf
pushf
not edx
add edx, 0x408dbaee
xor edx, 0x1e0ee30a
rol edx, 0xf9
popf
jmp 0x14008d33b
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14008d38b
push rax
pushf
mov eax, 0x10345e17
pushf
not eax
add eax, 0x2c21ef80
xor eax, 0x5cd7276c
rol eax, 0x11
popf
pushf
not eax
add eax, 0x2f4adc7c
xor eax, 0x10afd8c4
rol eax, 0x80
popf
pushf
not eax
add eax, 0x23f9895e
xor eax, 0x500bf21b
rol eax, 0x7c
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xe646247c
pushf
not eax
add eax, 0xcef8d39
xor eax, 0x5ddcbb79
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x23c44cc2
xor eax, 0x4e6d7d3
rol eax, 0x62
popf
jmp 0x14008ca60
nop dword [rax]
push rax
pushf
mov eax, 0xe067b8c8
pushf
not eax
add eax, 0x54136760
xor eax, 0x62bb75f9
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x7077229c
xor eax, 0x2c084717
rol eax, 0x8d
popf
jmp 0x14008ca60
cmp eax, 0xffffffff
jne 0x14008d453
push rax
pushf
mov eax, 0x4bda172d
pushf
not eax
add eax, 0x5535762d
xor eax, 0x9c3f8b1
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x5835bb65
xor eax, 0x49e8e0e5
rol eax, 0x95
popf
pushf
not eax
add eax, 0x44540fa
xor eax, 0x43d4d8f4
rol eax, 0xec
popf
pushf
not eax
add eax, 0x47b3ebb
xor eax, 0x55fb8eef
rol eax, 2
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0x22ce4a15
pushf
not eax
add eax, 0x1dbfc6e6
xor eax, 0x2d9e58a6
rol eax, 9
popf
pushf
not eax
add eax, 0x78304108
xor eax, 0x117e739e
rol eax, 0x17
popf
pushf
not eax
add eax, 0xd464c4
xor eax, 0x1d101836
rol eax, 0x41
popf
jmp 0x14008ca60
call qword [sym.imp.KERNEL32.dll_GetLastError]
push rax
pushf
mov eax, 0x925a4fea
pushf
not eax
add eax, 0x79545de9
xor eax, 0x74509f2
rol eax, 0xed
popf
pushf
not eax
add eax, 0x480d3cea
xor eax, 0x67d3a0b2
rol eax, 0xed
popf
jmp 0x14008ca60
cmp byte [rbx + 0x3060], r14b
jne 0x14008d535
push rax
pushf
mov eax, 0xf4239e9c
pushf
not eax
add eax, 0x213fa19
xor eax, 0x563e09
rol eax, 0x16
popf
pushf
not eax
add eax, 0x69cf72c2
xor eax, 0x49383d77
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x13bbe91e
xor eax, 0x793a0091
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x28e4288
xor eax, 0x2c7e6a07
rol eax, 0x8b
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xf7fe46a0
pushf
not eax
add eax, 0x4f168711
xor eax, 0x40071386
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x7431bd02
xor eax, 0x4c9ee267
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x5a3c9987
xor eax, 0x2baea825
rol eax, 0x3c
popf
jmp 0x14008ca60
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14008d591
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jle 0x14008d5ce
push rax
pushf
mov eax, 0x7ce9a457
pushf
not eax
add eax, 0x68f889a7
xor eax, 0x41686838
rol eax, 0x60
popf
pushf
not eax
add eax, 0x4d0070a7
xor eax, 0x1f99e329
rol eax, 0x21
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0x31d86252
pushf
not eax
add eax, 0x15a3aad2
xor eax, 0x73024b94
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x7c184a0b
xor eax, 0x9ff284d
rol eax, 0x5b
popf
jmp 0x14008ca60
lea rcx, [rbp - 0x80]
jmp 0x14008d606
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x80]
jmp 0x14008d611
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14008d62d
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jg 0x14008d690
push rax
pushf
mov eax, 0x70a9f36d
pushf
not eax
add eax, 0x30c4078a
xor eax, 0x56dcb6fc
rol eax, 0x85
popf
pushf
not eax
add eax, 0x21346527
xor eax, 0x2eba34d8
rol eax, 0xac
popf
pushf
not eax
add eax, 0x39851266
xor eax, 0x1fe680df
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x20092e99
xor eax, 0x562686e6
rol eax, 0x37
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0x2e154f70
pushf
not eax
add eax, 0x2920bf82
xor eax, 0x7022e5f2
rol eax, 0x37
popf
pushf
not eax
add eax, 0x5c86468b
xor eax, 0x67c0b1c0
rol eax, 0x68
popf
jmp 0x14008ca60
mov rcx, qword [rdi]
mov edx, 0x3850ab2d
pushf
not edx
add edx, 0x11120813
xor edx, 0x2ac4f5d7
rol edx, 0x57
popf
pushf
not edx
add edx, 0x752f49bf
xor edx, 0x4bb646eb
rol edx, 6
popf
jmp 0x14008d6f6
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x14008d759
push rax
pushf
mov eax, 0x7abaecbd
pushf
not eax
add eax, 0xe257fc0
xor eax, 0x2d715bdd
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x60647587
xor eax, 0x1b5b84c8
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x58cb5805
xor eax, 0x2a114180
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x8e37f01
xor eax, 0x35c85531
rol eax, 0xd1
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xdabeb73e
pushf
not eax
add eax, 0x73236e56
xor eax, 0x2739b7f2
rol eax, 3
popf
pushf
not eax
add eax, 0x3cd84182
xor eax, 0x41f03814
rol eax, 0xda
popf
jmp 0x14008ca60
cmp byte [rbx + 0x3060], r14b
je 0x14008d7ee
push rax
pushf
mov eax, 0x8db41079
pushf
not eax
add eax, 0x66b939d6
xor eax, 0x2b73d9b
rol eax, 0xa
popf
pushf
not eax
add eax, 0x7d6bd1dc
xor eax, 0x4f4a074b
rol eax, 0x55
popf
pushf
not eax
add eax, 0x69306f59
xor eax, 0x7348b72e
rol eax, 0x49
popf
pushf
not eax
add eax, 0x685367ad
xor eax, 0x352f0f3e
rol eax, 0x7c
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xc1d99137
pushf
not eax
add eax, 0x6a41235a
xor eax, 0x4a6adf27
rol eax, 0x59
popf
pushf
not eax
add eax, 0x4af538b2
xor eax, 0x3f310a17
rol eax, 0x98
popf
jmp 0x14008ca60
mov rcx, qword [rdi]
mov edx, 0x22de0757
pushf
not edx
add edx, 0x30bf9db4
xor edx, 0x4ae9de34
rol edx, 0xd8
popf
pushf
not edx
add edx, 0xdf5ecdb
xor edx, 0x1debee4c
rol edx, 0xe3
popf
pushf
not edx
add edx, 0x2e189876
xor edx, 0x6bf05ec0
rol edx, 0x5c
popf
jmp 0x14008d869
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14008d8d0
push rax
pushf
mov eax, 0x11e99014
pushf
not eax
add eax, 0x5a6e2593
xor eax, 0x2b634e35
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x5ec666b7
xor eax, 0x1653cf66
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x531e8321
xor eax, 0x2250800a
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x1206dd19
xor eax, 0x7ca910e2
rol eax, 0x7f
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xcf48fdb6
pushf
not eax
add eax, 0x6e64b620
xor eax, 0x1c2e490a
rol eax, 0x11
popf
pushf
not eax
add eax, 0x773d49a4
xor eax, 0x19db3e6f
rol eax, 0x84
popf
pushf
not eax
add eax, 0x491c50fe
xor eax, 0x7e447b85
rol eax, 9
popf
jmp 0x14008ca60
mov rcx, qword [rdi]
mov edx, 0x13b52bae
pushf
not edx
add edx, 0x1bc95497
xor edx, 0x6abf0f
rol edx, 0x8a
popf
pushf
not edx
add edx, 0x30440794
xor edx, 0x500052a9
rol edx, 0xf4
popf
pushf
not edx
add edx, 0x7a1bc639
xor edx, 0x239a980a
rol edx, 0x45
popf
jmp 0x14008d95e
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x14008d9c1
push rax
pushf
mov eax, 0x53a24101
pushf
not eax
add eax, 0x20e6249
xor eax, 0x3d73fbe4
rol eax, 0xac
popf
pushf
not eax
add eax, 0x2e3ebcd0
xor eax, 0x2ca25889
rol eax, 0x68
popf
pushf
not eax
add eax, 0xbf7af8a
xor eax, 0x51b6bd67
rol eax, 0x79
popf
pushf
not eax
add eax, 0x1c5be17b
xor eax, 0x7528d22
rol eax, 0xc0
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0x31eb242a
pushf
not eax
add eax, 0x56f6eaba
xor eax, 0x37e72c5
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x23b08cd6
xor eax, 0x4989199b
rol eax, 0x13
popf
jmp 0x14008ca60
call qword [sym.imp.KERNEL32.dll_GetLastError]
push rax
pushf
mov eax, 0xf3037fb9
pushf
not eax
add eax, 0x6cd24512
xor eax, 0x5d5df7ce
rol eax, 0x53
popf
pushf
not eax
add eax, 0x12ec11c6
xor eax, 0x5bf0fa50
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x5f222902
xor eax, 0x5178c7dd
rol eax, 0x35
popf
pushf
not eax
add eax, 0x3c045aee
xor eax, 0x197bfc46
rol eax, 0xc5
popf
jmp 0x14008ca60
mov rcx, qword [rdi]
mov edx, 0x2fbacc60
pushf
not edx
add edx, 0x759865b
xor edx, 0x4597d275
rol edx, 8
popf
pushf
not edx
add edx, 0x706d6
xor edx, 0x1e8e1d7c
rol edx, 0x1d
popf
pushf
not edx
add edx, 0x618f0023
xor edx, 0x23aa7f73
rol edx, 0xc9
popf
pushf
not edx
add edx, 0x3498c838
xor edx, 0x17c28856
rol edx, 0x88
popf
jmp 0x14008dab1
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x14008e1fc
cmp byte [rbx + 0x3061], r14b
jne 0x14008db7b
push rax
pushf
mov eax, 0x9c729c12
pushf
not eax
add eax, 0x4991e871
xor eax, 0x49ff0630
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x50f80a86
xor eax, 0x15c5f95b
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x7fc2d50b
xor eax, 0xfe08695
rol eax, 0x76
popf
pushf
not eax
add eax, 0x749afdb2
xor eax, 0x6facb72
rol eax, 0xc2
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0x2e68ab92
pushf
not eax
add eax, 0x2d30d3ef
xor eax, 0x15c10bf
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x14509dce
xor eax, 0x415b89ba
rol eax, 0x17
popf
pushf
not eax
add eax, 0x16459eb4
xor eax, 0x3bbb64e1
rol eax, 0xb
popf
jmp 0x14008ca60
lea rcx, [rsp + 0x78]
jmp 0x14008dbc7
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rsp + 0x70]
jmp 0x14008dbd3
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
nop word [rax + rax]
push rax
pushf
mov eax, 0x9a9115fe
pushf
not eax
add eax, 0x25335a36
xor eax, 0x74608ab0
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x7c9232c4
xor eax, 0x295812c8
rol eax, 0x86
popf
jmp 0x14008ca60
mov r9d, 0x81c07f50
pushf
not r9d
add r9d, 0x31c6b8ea
xor r9d, 0xe40ce14
rol r9d, 0x86
popf
pushf
not r9d
add r9d, 0x2a260725
xor r9d, 0x2abaa2a6
rol r9d, 0x90
popf
pushf
not r9d
add r9d, 0x44c17ff9
xor r9d, 0x1909a528
rol r9d, 0xa1
popf
pushf
not r9d
add r9d, 0x19cbc2c1
xor r9d, 0x6482f183
rol r9d, 0xdc
popf
mov dword [rsp + 0x20], 0x4ff
xor r8d, r8d
xor edx, edx
xor ecx, ecx
jmp 0x14008dc91
call qword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14008dcad
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jle 0x14008dcea
push rax
pushf
mov eax, 0xe4ba24ac
pushf
not eax
add eax, 0x6d9d70a2
xor eax, 0x20a180d3
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x5b2cda41
xor eax, 0x311c277c
rol eax, 0x81
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0x91264d37
pushf
not eax
add eax, 0x768520f9
xor eax, 0x7d5fb09e
rol eax, 0x11
popf
pushf
not eax
add eax, 0xf1170b3
xor eax, 0x485224b0
rol eax, 0x96
popf
jmp 0x14008ca60
nop word [rax + rax]
push rax
pushf
mov eax, 0xcb3fc652
pushf
not eax
add eax, 0x412945ed
xor eax, 0x69e19eaa
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x5a4defa7
xor eax, 0xdfb8efe
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x5f13e1f1
xor eax, 0xfb62615
rol eax, 0x2a
popf
jmp 0x14008ca60
lea rcx, [rbp - 0x80]
jmp 0x14008dd6e
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x80]
jmp 0x14008dd79
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
jmp 0x14008dd95
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jg 0x14008ddd2
push rax
pushf
mov eax, 0xc3ff90f3
pushf
not eax
add eax, 0x25477d2e
xor eax, 0x1bb7752b
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x3318897e
xor eax, 0x1022cc4b
rol eax, 0xb6
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0x7abb4134
pushf
not eax
add eax, 0x2bfad01d
xor eax, 0x23815be3
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xf86a52
xor eax, 0x43759330
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x641c2e8d
xor eax, 0x31ea9c1
rol eax, 0x52
popf
jmp 0x14008ca60
cmp byte [rbx + 0x3061], r14b
jne 0x14008de54
push rax
pushf
mov eax, 0x12d8fb2b
pushf
not eax
add eax, 0x28a1f6dc
xor eax, 0x247db866
rol eax, 0x53
popf
pushf
not eax
add eax, 0x39ef2904
xor eax, 0x5b3d9b5a
rol eax, 3
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xa37a4e5b
pushf
not eax
add eax, 0x59b4d469
xor eax, 0x389a7e67
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x72161647
xor eax, 0x1708fe06
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x2c73de73
xor eax, 0x5dd74fe5
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x21d13bb5
xor eax, 0xc17332e
rol eax, 0x73
popf
jmp 0x14008ca60
lea rcx, [rsp + 0x68]
jmp 0x14008deb3
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x68]
sub rax, qword [rsp + 0x70]
imul rax, rax, 0x3e8
cqo
idiv qword [rsp + 0x78]
cmp rax, 0xfa
jl 0x14008df10
push rax
pushf
mov eax, 0xbb44a53
pushf
not eax
add eax, 0x28b2f20d
xor eax, 0x734504e1
rol eax, 0x82
popf
pushf
not eax
add eax, 0x1ee09841
xor eax, 0x5f2a0adf
rol eax, 0x4d
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xa54372f
pushf
not eax
add eax, 0x7b8a1c9d
xor eax, 0x73d4c41b
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x7f8161b1
xor eax, 0x3480dfcd
rol eax, 0xab
popf
pushf
not eax
add eax, 0x49614634
xor eax, 0x28701316
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x14357909
xor eax, 0x7d76b80d
rol eax, 0x70
popf
jmp 0x14008ca60
cmp byte [rbx + 0x3061], r14b
je 0x14008dfcb
push rax
pushf
mov eax, 0x4f878260
pushf
not eax
add eax, 0x494ec65e
xor eax, 0x210361d4
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x161811f7
xor eax, 0x48f31720
rol eax, 0x35
popf
pushf
not eax
add eax, 0x756a3d57
xor eax, 0x71eb7b31
rol eax, 0x78
popf
pushf
not eax
add eax, 0x214d9fe9
xor eax, 0x3df37bc7
rol eax, 0x2b
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xf9d11eb5
pushf
not eax
add eax, 0x1f2b917b
xor eax, 0x566cc127
rol eax, 0x60
popf
pushf
not eax
add eax, 0x24adc3a8
xor eax, 0xa0297f4
rol eax, 0x93
popf
pushf
not eax
add eax, 0xe028fc2
xor eax, 0x4474b415
rol eax, 0xca
popf
jmp 0x14008ca60
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x16519de2
pushf
not eax
add eax, 0x6ada46fc
xor eax, 0x411e452e
rol eax, 0x24
popf
pushf
not eax
add eax, 0x50849713
xor eax, 0x6c5c1775
rol eax, 0x12
popf
pushf
not eax
add eax, 0x582292d9
xor eax, 0x2878a6b2
rol eax, 0x36
popf
pushf
not eax
add eax, 0x28dc2ff6
xor eax, 0x68010675
rol eax, 0xfb
popf
jmp 0x14008ca60
mov rdx, qword [rbx + 0x3058]
lea rcx, [rbp - 0x80]
xor r9d, r9d
xor r8d, r8d
jmp 0x14008e088
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jle 0x14008e0eb
push rax
pushf
mov eax, 0x48f13384
pushf
not eax
add eax, 0x550a466
xor eax, 0x7294134a
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x4a905fc5
xor eax, 0x355de11e
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x1fc6fb87
xor eax, 0x402ac0ad
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x3b78ca4a
xor eax, 0x73208562
rol eax, 0x54
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xa72116a2
pushf
not eax
add eax, 0x29878b4d
xor eax, 0x26d44393
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x63629448
xor eax, 0x7c51fe01
rol eax, 0xae
popf
jmp 0x14008ca60
lea rcx, [rbp - 0x80]
jmp 0x14008e123
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x80]
jmp 0x14008e12e
call qword [sym.imp.USER32.dll_DispatchMessageW]
push rax
pushf
mov eax, 0x17795c6c
pushf
not eax
add eax, 0x30faec90
xor eax, 0x4d78e623
rol eax, 0x38
popf
pushf
not eax
add eax, 0x481cf5fa
xor eax, 0x47c41c83
rol eax, 0x73
popf
jmp 0x14008ca60
cmp byte [rbx + 0x3061], r14b
jne 0x14008e1c9
push rax
pushf
mov eax, 0x1f9b589
pushf
not eax
add eax, 0x2040990c
xor eax, 0x8c19be4
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x124b7844
xor eax, 0x2e61e896
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x3fc74b78
xor eax, 0x61411ee7
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x113bfa9c
xor eax, 0x36a4ada3
rol eax, 0x78
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xce125814
pushf
not eax
add eax, 0x665e7a02
xor eax, 0x32edc0d2
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x582bc6a7
xor eax, 0x8411ec6
rol eax, 0xbd
popf
jmp 0x14008ca60
mov rcx, qword [rbx + 0x3058]
test rcx, rcx
je 0x14008e261
push rax
pushf
mov eax, 0x9941c44a
pushf
not eax
add eax, 0x1270e937
xor eax, 0x685f3821
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x268d3531
xor eax, 0x65da948c
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x64fe9b3b
xor eax, 0x544c970f
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x6669c28
xor eax, 0x6117d69c
rol eax, 0x2e
popf
jmp 0x14008ca60
push rax
pushf
mov eax, 0xd76c0a54
pushf
not eax
add eax, 0x53086166
xor eax, 0x5dd90cc5
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xf97ef2b
xor eax, 0x4b0d3782
rol eax, 0x86
popf
jmp 0x14008ca60
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [rbx + 0x3058], r14
push rax
pushf
mov eax, 0x2d3ab1e6
pushf
not eax
add eax, 0x5a2534f3
xor eax, 0x6a727d33
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x50fca3ed
xor eax, 0x198d1445
rol eax, 0x81
popf
pushf
not eax
add eax, 0x74b6a6d3
xor eax, 0x651418b
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xa045075
xor eax, 0xc3fc8f7
rol eax, 0xa9
popf
jmp 0x14008ca60
mov rcx, qword [rdi]
lea rdx, [rsp + 0x60]
jmp 0x14008e304
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [rdi]
jmp 0x14008e30e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbx + 0x3048]
jmp 0x14008e31c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x60]
mov rcx, qword [rbp + 0x2090]
xor rcx, rsp
call fcn.140098ae9
lea r11, [rsp + 0x21a0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret