Function at 0x140013360
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
lea rcx, [0x140013200]
xor edi, edi
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
xor ecx, ecx
call fcn.140025e78
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call fcn.14002422c
movabs rcx, 0xb50b1b46aa8c3bc6
mov qword [rsp + 0x30], rdi
mov qword [rbp - 1], rcx
movabs rax, 0xe7e4461773ad0569
mov qword [rbp - 0x29], rax
xor r9d, r9d
mov qword [rbp - 0x21], rcx
movabs rax, 0xe78827592f835935
movdqa xmm0, xmmword [rbp - 0x29]
lea rcx, [rbp - 9]
mov qword [rbp - 9], rax
xor r8d, r8d
xorps xmm0, xmmword [rbp - 9]
xor edx, edx
mov dword [rsp + 0x28], 0x80
movdqa xmmword [rbp - 9], xmm0
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
movabs rsi, 0x29d7e20a2cc9906f
movabs rbx, 0x8e8d251d7868ed52
movabs r14, 0x4303ac0bff387708
movabs r15, 0x53b8e2b435af6c79
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400134e9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0x40a5a62a71e4cb65
mov qword [rbp - 0x29], rsi
mov qword [rbp - 9], rax
lea rdx, [rbp - 9]
movabs rax, 0x2223df62df4a127e
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
lea rcx, [0x1403b4b80]
mov qword [rbp - 1], rax
movabs rax, 0x3a989bd054ca1e15
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], rax
movabs rax, 0x8e8d0b780b1dcd3c
mov qword [rbp + 0xf], rax
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x19], r15
xorps xmm0, xmm1
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 7], xmm2
movdqa xmmword [rbp - 9], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140002f40
mov qword [0x1403b6430], rax
movabs rdi, 0x40b6a42a71e4cb65
inc rax
test rax, 0xfffffffffffffffe
jne 0x1400135a3
movabs rax, 0x2f23c37fdf5c1264
mov qword [rbp - 9], rdi
mov qword [rbp - 1], rax
lea rdx, [rbp + 0x17]
movups xmm1, xmmword [rbp - 9]
movabs rax, 0x25d190d015cb0d16
mov qword [rbp - 0x29], rsi
mov qword [rbp + 7], rax
lea rcx, [0x1403b4b80]
movabs rax, 0x8e8d251d78469f37
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
mov qword [rbp + 0xf], rax
xorps xmm0, xmm1
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
call fcn.1400036d0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140005790
movabs r12, 0x23c37fdf5c1264
movabs r13, 0x32ca96945bce0915
test al, al
jne 0x140013645
movabs rax, 0x8e8d143e581b8831
mov qword [rbp - 9], rdi
mov qword [rbp + 0xf], rax
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], r12
lea rcx, [0x1403b4b80]
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r13
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
call fcn.1400036d0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140005ec0
test al, al
jne 0x1400136ca
movabs rax, 0x8e8d173e581b8831
mov qword [rbp - 9], rdi
mov qword [rbp + 0xf], rax
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], r12
lea rcx, [0x1403b4b80]
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r13
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x1403b6430]
call fcn.140004b70
test al, al
jne 0x140013756
movabs rax, 0x8e8d163e581b8831
mov qword [rbp - 9], rdi
mov qword [rbp + 0xf], rax
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], r12
lea rcx, [0x1403b4b80]
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r13
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x1403b6430]
call fcn.14000d450
test rax, rax
jne 0x140013800
movabs rax, 0x2e23c37fdf5c1264
mov qword [rbp - 9], rdi
mov qword [rbp - 1], rax
lea rdx, [rbp + 0x17]
movups xmm1, xmmword [rbp - 9]
movabs rax, 0x36ce8bc6518f1c18
mov qword [rbp - 0x29], rsi
mov qword [rbp + 7], rax
lea rcx, [0x1403b4b80]
movabs rax, 0x8e8d251d7868c320
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
mov qword [rbp + 0xf], rax
xorps xmm0, xmm1
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
call fcn.1400036d0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.1400036d0
movabs rax, 0x40a5862a71e2cb65
mov qword [rbp + 0xf], rbx
mov qword [rbp - 9], rax
lea rdx, [rbp + 0x17]
movabs rax, 0x3373cd66df4a127e
mov qword [rbp - 0x29], rsi
mov qword [rbp - 1], rax
lea rcx, [0x1403b4b80]
movups xmm1, xmmword [rbp - 9]
movabs rax, 0x53b8e2b4358e081c
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
mov qword [rbp + 7], rax
xorps xmm0, xmm1
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
lea r11, [rsp + 0xa0]
mov eax, 1
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret