Function at 0x7feeff31213
Capabilities:
Terminate process

Disassembly:
jmp 0x7feeff31218
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rdi, rdx
mov r14, rcx
mov rcx, rdx
call fcn.7feeff31317
mov rsi, rax
mov rbx, qword [rax + 8]
mov rcx, rbx
call fcn.7feeff31321
test al, al
je 0x7feeff3125c
cmp qword [rsi + 0x10], r14
je 0x7feeff31276
mov rcx, rsi
mov rdx, rdi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.7feeff314ee
mov rcx, qword [rsi + 0x10]
cmp rcx, r14
je 0x7feeff312b2
mov rdx, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.7feeff3151f
sub qword [r14 + 0x2088], rbx
mov rax, qword [rsi + 0x28]
mov qword [rdi], rax
mov qword [rsi + 0x28], rdi
mov rax, qword [rsi + 0x30]
cmp rax, rbx
jge 0x7feeff312c6
lea rax, [rbx + 0xf]
test rbx, rbx
cmovns rax, rbx
sar rax, 4
lea rcx, [r14 + rax*8]
mov rdx, rsi
call fcn.7feeff3132c
add qword [rsi + 0x30], rbx
jmp 0x7feeff3130c
mov rcx, r14
mov rdx, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x7feeff31503
add rax, rbx
mov qword [rsi + 0x30], rax
cmp rax, 0xfb0
jne 0x7feeff3130c
lea rax, [rbx + 0xf]
test rbx, rbx
cmovns rax, rbx
sar rax, 4
lea rcx, [r14 + rax*8]
mov rdx, rsi
call fcn.7feeff31343
mov qword [rsi + 8], 0x1000
mov rcx, r14
mov rdx, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x7feeff3137d
nop
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rdi, rdx
mov r15, rcx
mov rbx, qword [rdx + 8]
add qword [rcx + 0x2080], rbx
mov rdx, qword [rdx]
and rdx, 0xfffffffffffffffe
mov qword [rdi], rdx
je 0x7feeff31449
mov rcx, rdi
call fcn.7feeff311d9
mov r14, rax
mov rcx, r15
mov rdx, rax
call fcn.7feeff316a4
test al, al
je 0x7feeff31449
mov rcx, qword [r14]
call fcn.7feeff316cb
test al, al
je 0x7feeff31449
mov rsi, qword [r14 + 8]
mov rcx, rsi
call fcn.7feeff31321
test al, al
jne 0x7feeff31449
cmp rsi, 0x3effffff
jg 0x7feeff31449
mov rcx, r15
mov rdx, r14
call fcn.7feeff316d2
mov rax, qword [rdi + 8]
add qword [r14 + 8], rax
mov rcx, rdi
call fcn.7feeff3157e
lea rcx, [r15 + 0x20a0]
mov rdx, rax
call fcn.7feeff31586
mov rbx, qword [r14 + 8]
mov rdi, r14
cmp rbx, 0x3f000001
jl 0x7feeff31449
mov r8d, 0x3f000000
mov rcx, r15
mov rdx, r14
call fcn.7feeff31781
mov rdi, rax
mov rcx, r15
mov rdx, r14
call 0x7feeff317f0
mov rbx, qword [rdi + 8]
mov rcx, rdi
mov rdx, rbx
call fcn.7feeff31874
mov rsi, rax
mov rcx, r15
mov rdx, rax
call fcn.7feeff316a4
test al, al
je 0x7feeff314d8
mov rcx, qword [rsi]
call fcn.7feeff316cb
test al, al
je 0x7feeff314d8
mov rcx, qword [rsi + 8]
call fcn.7feeff31321
test al, al
jne 0x7feeff314d8
cmp rbx, 0x3effffff
jg 0x7feeff314d8
mov rcx, r15
mov rdx, rsi
call fcn.7feeff316d2
mov rax, qword [rsi + 8]
add qword [rdi + 8], rax
mov rcx, rsi
call fcn.7feeff3157e
lea rcx, [r15 + 0x20a0]
mov rdx, rax
call fcn.7feeff31586
cmp qword [rdi + 8], 0x3f000001
jl 0x7feeff314d8
mov r8d, 0x3f000000
mov rcx, r15
mov rdx, rdi
call fcn.7feeff31781
mov rcx, r15
mov rdx, rax
call 0x7feeff317f0
mov rcx, r15
mov rdx, rdi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
jmp 0x7feeff317f0
mov rax, qword [rdx + 8]
sub qword [rcx + 0x2088], rax
cmp rax, 0x3f000001
jl 0x7feeff3137d
jmp 0x7feeff3153c
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rdx
mov rdi, rcx
mov rbx, qword [rdx + 8]
mov rcx, rdx
call fcn.7feeff3157e
lea rcx, [rdi + 0x20a0]
mov rdx, rax
call fcn.7feeff31586
mov rcx, rdi
mov rdx, rbx
call fcn.7feeff315bf
mov rcx, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp 0x7feeff315e6
sub rsp, 0x28
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x7feeff31601
add rsp, 0x28
ret
call fcn.7feeff31611
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
int3
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
mov rbx, rdx
mov rsi, rcx
mov rdx, qword [rdx + 8]
lea r14, [rsp + 0x28]
mov rcx, r14
call fcn.7feeff31879
mov rdi, qword [r14]
mov rcx, qword [r14 + 8]
mov qword [rbx + 0x20], 0
mov rax, rdi
shl rax, 8
add rax, rsi
lea rax, [rax + rcx*8]
add rax, 0x868
mov rdx, qword [rax]
mov qword [rbx + 0x18], rdx
mov rdx, qword [rax]
test rdx, rdx
je 0x7feeff31846
mov qword [rdx + 0x20], rbx
mov qword [rax], rbx
lea rdx, [rsi + rdi*4]
add rdx, 0x804
call 0x7feeff318b2
add rsi, 0x800
mov rcx, rdi
mov rdx, rsi
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x7feeff318b2
mov eax, 1
shl eax, cl
or dword [rdx], eax
ret