Function at 0x14007c600
Capabilities:
Acquire debug privileges
Terminate process

Disassembly:
push rbx
sub rsp, 0xb0
mov rax, qword [0x140130c00]
xor rax, rsp
mov qword [rsp + 0xa0], rax
call fcn.14007f820
test eax, eax
jne 0x14007c64e
lea rcx, [rsp + 0x48]
call fcn.14007fb60
nop
mov rcx, rax
call fcn.14008a780
nop
lea rcx, [rsp + 0x48]
call fcn.140042660
mov ecx, 0x65e
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, str.SeDebugPrivilege
call fcn.14008b9b0
lea rcx, str.SeImpersonatePrivilege
call fcn.14008b9b0
lea rcx, [rsp + 0x48]
call fcn.140088030
mov r8, rax
movabs rax, 0x29d1e92ed68b955e
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x30], rcx
movabs rdx, 0xdcc967fb8dd09740
mov qword [rsp + 0x20], rdx
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x38], rcx
movabs rax, 0x29d1e92efbe6f813
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x20], rdx
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x98], rax
movdqa xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.14007d030
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14007c734
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c72f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007c8c6
call fcn.1400ae880
movdqa xmm0, xmmword [0x140118200]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
lea r8, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova r8, qword [rsp + 0x70]
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
test rax, rax
je 0x14007c779
mov ecx, IStream_Read
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r8, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova r8, qword [rsp + 0x70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov rbx, rax
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x68]
call fcn.1400766f0
call fcn.14007fca0
test al, al
jne 0x14007c7be
mov ecx, 0x675
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.140088330
nop
call fcn.14003d570
nop
jmp 0x14007c7d1
call fcn.14003e610
call fcn.14003ecb0
call fcn.14003f9e0
call fcn.14003ca10
call fcn.14006cab0
call fcn.14006f7a0
call fcn.140031b90
nop
call fcn.14003add0
nop
jmp 0x14007c802
call fcn.140039680
call fcn.14007d260
call fcn.14003bf40
call fcn.1400377d0
call fcn.140034b70
call fcn.140037aa0
nop
call fcn.140084a30
nop
jmp 0x14007c82e
call fcn.14007bcc0
test rbx, rbx
je 0x14007c84a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x140130f08], 0
je 0x14007c859
call fcn.14007c8e0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x14007c895
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c890
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007c8cc
call fcn.1400ae880
movdqa xmm0, xmmword [0x140118200]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
xor eax, eax
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.1400ae860
add rsp, 0xb0
pop rbx
ret
call fcn.140098254
nop
call fcn.140098254
int3