Function at 0x140030ce0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
sub rsp, 0x440
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14011f060]
xor rax, rsp
mov qword [rbp + 0x3e0], rax
mov rdi, rcx
mov qword [rbp + 0x1a0], rcx
movabs rax, 0x1dcca0563e5e8d5a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0x8fbdb4b62b1600fe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
movabs r12, 0x69e2d9335502b719
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
movabs r15, 0x8fbdb4b62b167486
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0x320]
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x1b0]
call fcn.140007250
nop
lea rcx, [rbp + 0x1f0]
call fcn.140007290
nop
lea rcx, [rbp + 0x210]
call fcn.14000dd50
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x210]
call fcn.14003f320
nop
lea rcx, [rbp + 0xe0]
call fcn.14003ef30
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x320], xmm0
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0xf0]
call fcn.14003ef10
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x10], xmm0
lea r8, [rbp + 0x320]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x1d0]
call fcn.140040670
nop
lea rdx, [rbp + 0x1d0]
lea rcx, [0x1401268a8]
call fcn.14000e3d0
lea rcx, [rbp + 0x210]
call fcn.14000e190
lea rax, [rbp + 0x100]
mov qword [rbp + 0x10], rax
movabs rax, 0x46cde3402576c371
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xa1d9c6d948651de2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xcfbe86046b384af0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x4135825f8a300bdf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x79b4250c2eab2922
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x1571d4ea3d25fe92
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x7f55c4ee29e9dcd7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0xe359a45ab11706a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0xe768cbe215b54c6e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x17de4f2b96276a38
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xbe9043c9878dd80d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0xe1709fda270d6543
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0xd18ae4fd42690b31
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0xbaec13cfe6cd2a37
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xa68cda3c50e8c881
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x280804976705cc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
movabs r14, 0xe0d7f66544552593
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
movabs rsi, 0x325eed30e2526ea8
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movabs rax, 0x4a82123f1b9a180d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
movabs rax, 0x2347e3d20914cdaa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
movabs rax, 0x623bec11adeece7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
movabs rax, 0xb529d40c886452cc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
movabs rax, 0xa009b18b7dfd7e01
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
movabs rax, 0x6fae626ea115274e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
movabs rax, 0xecd10dbde1fb935b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
movabs rax, 0x8508d18860640c70
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
movabs rax, 0xe7deab9770505e55
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c0], rax
movabs rax, 0xf5815baaa2fc7372
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c8], rax
movabs rax, 0xe5fdac79668bbbcf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d0], rax
movabs rax, 0x28080497670594
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d8], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x360]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3c0]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x100]
vzeroupper
call fcn.140007250
mov rbx, rax
movabs rax, 0x28c2b2503470f439
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x40], rcx
movabs rax, 0xaf9de7f45f6411ea
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x48], rcx
mov qword [rbp], r14
mov rcx, qword [rbp]
mov qword [rbp + 0x50], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x340]
vmovdqa ymmword [rbp + 0x40], ymm1
movabs rax, 0x69e2d9133562d739
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
vmovdqa xmm0, xmmword [rbp + 0x20]
vpxor xmm0, xmm0, xmmword [rbp + 0x330]
vmovdqa xmmword [rbp + 0x20], xmm0
lea r8, [0x1401268a8]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x180]
vzeroupper
call fcn.14003f9f0
nop
lea r8, [rbp + 0x40]
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.14003fb50
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.1400404b0
nop
lea r8, [0x140107490]
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.14003fb50
nop
mov rdx, rbx
mov rcx, rax
call fcn.14002ed50
nop
lea rcx, [rbp + 0x140]
call fcn.140007240
nop
lea rcx, [rbp + 0x160]
call fcn.140007240
nop
lea rcx, [rbp + 0x180]
call fcn.140007240
lea rcx, [0x1400f8e88]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.RtlAdjustPrivilege
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
lea rcx, [0x1400f8e88]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtRaiseHardError
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
lea r9, [rbp + 0x1a8]
xor r8d, r8d
mov dl, 1
lea ecx, [r8 + 0x13]
call rbx
lea rax, [rbp + 0x1ac]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc00002b4
call rdi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3