Function at 0x140034300
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
lea rcx, [0x1400341a0]
xor edi, edi
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
movabs rcx, 0x2914fb93a8220a24
mov qword [rsp + 0x30], rdi
mov qword [rbp + 0x38], rcx
movabs rax, 0xfc4ccf4289244aef
mov qword [rbp + 0x40], rax
xor r9d, r9d
mov qword [rbp + 0x48], rcx
movabs rax, 0xfc20ae0cd50a16b3
movdqa xmm0, xmmword [rbp + 0x40]
lea rcx, [rbp + 0x30]
mov qword [rbp + 0x30], rax
xor r8d, r8d
xorps xmm0, xmmword [rbp + 0x30]
xor edx, edx
mov dword [rsp + 0x28], pe_nt_image_headers64
movdqa xmmword [rbp + 0x30], xmm0
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400343e1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140002aa0
mov qword [0x140422900], rax
movabs rdi, 0xcd16d2d930272a24
inc rax
movabs rsi, 0x6c88b54672512159
movabs rcx, 0x69be6683fef4af6a
movabs rdx, 0x19272f70d473992f
movabs r14, 0x1a58e4970c6c5cb6
movabs r15, 0xab96c7f48b4c1b9b
movabs r12, 0xf1ba105521db9b08
movabs r13, 0x3f737642b6d54ddd
movabs r8, 0xb86fec5110c3c34c
movabs r9, 0xb3284a78179b48cd
movabs r10, 0xbf7991f9554b4845
movabs r11, 0x18e9d9290118013c
movabs rbx, 0xc0410e584ab613c7
test rax, 0xfffffffffffffffe
jne 0x1400345a2
mov qword [rbp - 0x38], rcx
movabs rax, 0x732c8ad6230233df
mov rcx, qword [0x1400a3630]
mov qword [rsp + 0x58], rax
movabs rax, 0xeab9b481f9254dbb
mov qword [rsp + 0x60], rax
movabs rax, 0x85db753d62b2ef66
mov qword [rsp + 0x68], rax
movabs rax, 0x5e070527c4f561ae
movups xmm2, xmmword [rsp + 0x60]
mov qword [rsp + 0x70], rax
movabs rax, 0x7df46c0aed4db18
mov qword [rsp + 0x78], rax
movabs rax, 0x7e460f09a607b94b
movups xmm3, xmmword [rsp + 0x70]
mov qword [rbp - 0x80], rax
movabs rax, 0xb86fec5131adaa2d
mov qword [rbp - 0x30], rdx
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x78], rax
movups xmm4, xmmword [rbp - 0x80]
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x48], r10
movups xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x50], r11
movups xmm1, xmmword [rsp + 0x50]
mov qword [rbp - 0x28], r8
xorps xmm4, xmmword [rbp - 0x30]
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rdi
xorps xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], r14
xorps xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], r12
xorps xmm2, xmmword [rbp - 0x50]
mov qword [rbp - 0x40], r13
xorps xmm3, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x20], xmm4
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp], xmm2
movdqa xmmword [rbp + 0x10], xmm3
call fcn.140007680
lea rdx, [0x140007850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140003440
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140005480
test al, al
jne 0x14003470f
mov rcx, qword [0x1400a3630]
lea rdx, [rbp - 0x20]
movabs rax, 0x69be6683fef4af6a
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x78], rax
movabs rax, 0x19272f70d473992f
mov qword [rbp - 0x80], rax
movabs rax, 0xb86fec5110c3c34c
mov qword [rbp - 0x78], rax
movabs rax, 0xb3284a78179b48cd
mov qword [rbp - 0x70], rax
movabs rax, 0xbf7991f9554b4845
mov qword [rbp - 0x68], rax
movabs rax, 0x18e9d9290118013c
movups xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x60], rax
movabs rax, 0x732c8ad6230233df
mov qword [rbp - 0x58], rax
movabs rax, 0xeab9b481f9254dbb
movups xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
movabs rax, 0x85db753d62b2ef66
mov qword [rbp - 0x48], rax
movabs rax, 0x4d120231d3a76df1
movups xmm2, xmmword [rbp - 0x50]
mov qword [rbp - 0x40], rax
movabs rax, 0xdd007a3bda48f1e
mov qword [rbp - 0x38], rax
movabs rax, 0x78404e50ad01ed0f
movups xmm3, xmmword [rbp - 0x40]
mov qword [rbp - 0x30], rax
movabs rax, 0xb86fec5110e2ad25
mov qword [rbp - 0x28], rax
movups xmm4, xmmword [rbp - 0x30]
xorps xmm4, xmmword [rbp - 0x80]
mov qword [rsp + 0x48], rdi
xorps xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r14
xorps xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
xorps xmm2, xmmword [rsp + 0x60]
mov qword [rsp + 0x70], r13
xorps xmm3, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x20], xmm4
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp], xmm2
movdqa xmmword [rbp + 0x10], xmm3
call fcn.140007680
lea rdx, [0x140007850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140003440
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140005b80
test al, al
jne 0x140034877
mov rcx, qword [0x1400a3630]
lea rdx, [rbp - 0x20]
movabs rax, 0x69be6683fef4af6a
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x78], rax
movabs rax, 0x19272f70d473992f
mov qword [rbp - 0x80], rax
movabs rax, 0xb86fec5110c3c34c
mov qword [rbp - 0x78], rax
movabs rax, 0xb3284a78179b48cd
mov qword [rbp - 0x70], rax
movabs rax, 0xbf7991f9554b4845
mov qword [rbp - 0x68], rax
movabs rax, 0x18e9d9290118013c
movups xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x60], rax
movabs rax, 0x732c8ad6230233df
mov qword [rbp - 0x58], rax
movabs rax, 0xeab9b481f9254dbb
movups xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
movabs rax, 0x85db753d62b2ef66
mov qword [rbp - 0x48], rax
movabs rax, 0x5e070527c4f561ae
movups xmm2, xmmword [rbp - 0x50]
mov qword [rbp - 0x40], rax
movabs rax, 0x7df46c0aed4db18
mov qword [rbp - 0x38], rax
movabs rax, 0x7e460f09a607b94b
movups xmm3, xmmword [rbp - 0x40]
mov qword [rbp - 0x30], rax
movabs rax, 0xb86fec5131adaa2d
mov qword [rbp - 0x28], rax
movups xmm4, xmmword [rbp - 0x30]
xorps xmm4, xmmword [rbp - 0x80]
mov qword [rsp + 0x48], rdi
xorps xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r14
xorps xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
xorps xmm2, xmmword [rsp + 0x60]
mov qword [rsp + 0x70], r13
xorps xmm3, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x20], xmm4
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp], xmm2
movdqa xmmword [rbp + 0x10], xmm3
call fcn.140007680
lea rdx, [0x140007850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x140422900]
call fcn.140004870
test al, al
jne 0x1400349e6
mov rcx, qword [0x1400a3630]
lea rdx, [rbp - 0x20]
movabs rax, 0x69be6683fef4af6a
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x78], rax
movabs rax, 0x19272f70d473992f
mov qword [rbp - 0x80], rax
movabs rax, 0xb86fec5110c3c34c
mov qword [rbp - 0x78], rax
movabs rax, 0xb3284a78179b48cd
mov qword [rbp - 0x70], rax
movabs rax, 0xbf7991f9554b4845
mov qword [rbp - 0x68], rax
movabs rax, 0x18e9d9290118013c
movups xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x60], rax
movabs rax, 0x732c8ad6230233df
mov qword [rbp - 0x58], rax
movabs rax, 0xeab9b481f9254dbb
movups xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
movabs rax, 0x85db753d62b2ef66
mov qword [rbp - 0x48], rax
movabs rax, 0x5e070527c4f561ae
movups xmm2, xmmword [rbp - 0x50]
mov qword [rbp - 0x40], rax
movabs rax, 0x7df46c0aed4db18
mov qword [rbp - 0x38], rax
movabs rax, 0x7e460f09a607b94b
movups xmm3, xmmword [rbp - 0x40]
mov qword [rbp - 0x30], rax
movabs rax, 0xb86fec5131adaa2d
mov qword [rbp - 0x28], rax
movups xmm4, xmmword [rbp - 0x30]
xorps xmm4, xmmword [rbp - 0x80]
mov qword [rsp + 0x48], rdi
xorps xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r14
xorps xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
xorps xmm2, xmmword [rsp + 0x60]
mov qword [rsp + 0x70], r13
xorps xmm3, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x20], xmm4
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp], xmm2
movdqa xmmword [rbp + 0x10], xmm3
call fcn.140007680
lea rdx, [0x140007850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x140422900]
call fcn.140008f80
test rax, rax
jne 0x140034b5b
mov rcx, qword [0x1400a3630]
lea rdx, [rbp - 0x20]
movabs rax, 0x69be6683fef4af6a
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x78], rax
movabs rax, 0x19272f70d473992f
mov qword [rbp - 0x80], rax
movabs rax, 0xb86fec5110c3c34c
mov qword [rbp - 0x78], rax
movabs rax, 0xb3284a78179b48cd
mov qword [rbp - 0x70], rax
movabs rax, 0xbf7991f9554b4845
mov qword [rbp - 0x68], rax
movabs rax, 0x18e9d9290118013c
movups xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x60], rax
movabs rax, 0x732c8ad6230233df
mov qword [rbp - 0x58], rax
movabs rax, 0xeab9b481f9254dbb
movups xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x50], rax
movabs rax, 0x85db753d62b2ef66
mov qword [rbp - 0x48], rax
movabs rax, 0x5e070527c4f561ae
movups xmm2, xmmword [rbp - 0x50]
mov qword [rbp - 0x40], rax
movabs rax, 0x7df46c0aed4db18
mov qword [rbp - 0x38], rax
movabs rax, 0x7e460f09a607b94b
movups xmm3, xmmword [rbp - 0x40]
mov qword [rbp - 0x30], rax
movabs rax, 0xb86fec5131adaa2d
mov qword [rbp - 0x28], rax
movups xmm4, xmmword [rbp - 0x30]
xorps xmm4, xmmword [rbp - 0x80]
mov qword [rsp + 0x48], rdi
xorps xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r14
xorps xmm1, xmmword [rsp + 0x50]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
xorps xmm2, xmmword [rsp + 0x60]
mov qword [rsp + 0x70], r13
xorps xmm3, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x20], xmm4
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp], xmm2
movdqa xmmword [rbp + 0x10], xmm3
call fcn.140007680
lea rdx, [0x140007850]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140003440
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140003440
lea r11, [rsp + 0x150]
mov eax, 1
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret