Function at 0x14002f6d0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
sub rsp, 0x280
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14011f060]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov rdi, rcx
mov qword [rbp + 0x168], rcx
lea rax, [rbp + 0xc8]
mov qword [rbp + 0xc0], rax
movabs rax, 0x46cde3402576c371
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xa1d9c6d948651de2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xcfbe86046b384af0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x4135825f8a300bdf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x79b4250c2eab2922
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x1571d4ea3d25fe92
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x7f55c4ee29e9dcd7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xe359a45ab11706a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0xe768cbe215b54c6e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x17de4f2b96276a38
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xbe9043c9878dd80d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0xe1709fda270d6543
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0xd18ae4fd42690b31
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0xbaec13cfe6cd2a37
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xa68cda3c50e8c881
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x280804976705cc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs r14, 0x69e2d9335502b719
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rsi, 0x8fbdb4b62b167486
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xe0d7f66544552593
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x325eed30e2526ea8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x4a82123f1b9a180d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x2347e3d20914cdaa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x623bec11adeece7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xb529d40c886452cc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0xa009b18b7dfd7e01
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x6fae626ea115274e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xecd10dbde1fb935b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x8508d18860640c70
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xe7deab9770505e55
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0xf5815baaa2fc7372
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xe5fdac79668bbbcf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0x28080497670594
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0xc8]
vzeroupper
call fcn.140007250
mov rbx, rax
movabs rax, 0x28c2b2503470f439
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x20], rcx
movabs rax, 0x8fbd94965f6411ea
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x28], rcx
mov qword [rbp], r14
mov rcx, qword [rbp]
mov qword [rbp + 0x180], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x20]
pxor xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x20], xmm0
movabs rax, 0x69e2d9133562d739
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0x190]
movdqa xmmword [rbp + 0x10], xmm0
lea r8, [0x1401268a8]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x148]
call fcn.14003f9f0
nop
lea r8, [rbp + 0x20]
mov rdx, rax
lea rcx, [rbp + 0x128]
call fcn.14003fb50
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x108]
call fcn.1400404b0
nop
lea r8, [0x140107490]
mov rdx, rax
lea rcx, [rbp + 0xe8]
call fcn.14003fb50
nop
mov rdx, rbx
mov rcx, rax
call fcn.14002ed50
nop
lea rcx, [rbp + 0x108]
call fcn.140007240
nop
lea rcx, [rbp + 0x128]
call fcn.140007240
nop
lea rcx, [rbp + 0x148]
call fcn.140007240
lea rcx, [0x1400f8e88]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.RtlAdjustPrivilege
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
lea rcx, [0x1400f8e88]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtRaiseHardError
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
lea r9, [rbp + 0x170]
xor r8d, r8d
mov dl, 1
lea ecx, [r8 + 0x13]
call rbx
lea rax, [rbp + 0x174]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc00002b4
call rdi
mov ecx, 0x539
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3