Function at 0x140001190
Capabilities:
Terminate process

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x90
xor eax, eax
mov ecx, 0xd
lea rdx, [rsp + 0x20]
mov rdi, rdx
rep stosq qword [rdi], rax
mov rdi, qword [0x1400c26b0]
mov r9d, dword [rdi]
test r9d, r9d
jne 0x140001460
mov rax, qword gs:[0x30]
mov rbx, qword [0x1400c25c0]
xor ebp, ebp
mov rsi, qword [rax + 8]
mov r12, qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400011f9
cmp rsi, rax
je 0x140001400
mov ecx, 0x3e8
call r12
mov rax, rbp
lock cmpxchg qword [rbx], rsi
test rax, rax
jne 0x1400011e8
mov rsi, qword [0x1400c25d0]
xor ebp, ebp
mov eax, dword [rsi]
cmp eax, 1
je 0x140001417
mov eax, dword [rsi]
test eax, eax
je 0x140001490
mov dword [0x1400e801c], 1
mov eax, dword [rsi]
cmp eax, 1
je 0x14000142c
test ebp, ebp
je 0x14000144d
mov rax, qword [0x1400c2550]
mov rax, qword [rax]
test rax, rax
je 0x14000125c
xor r8d, r8d
mov edx, 2
xor ecx, ecx
call rax
call fcn.14000be50
mov rcx, qword [0x1400c2670]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov rdx, qword [0x1400c25b0]
lea rcx, section..text
mov qword [rdx], rax
call sub.api_ms_win_crt_runtime_l1_1_0.dll__set_invalid_parameter_handler
call fcn.14000bc60
mov rax, qword [0x1400c2570]
mov qword [0x1400e8010], rax
call sub.api_ms_win_crt_runtime_l1_1_0.dll___p__acmdln
xor ecx, ecx
mov rax, qword [rax]
test rax, rax
jne 0x1400012c2
jmp 0x140001300
test dl, dl
je 0x1400012f9
and ecx, 1
je 0x1400012e0
mov ecx, 1
add rax, 1
movzx edx, byte [rax]
cmp dl, 0x20
jle 0x1400012b0
mov r8d, ecx
xor r8d, 1
cmp dl, 0x22
cmove ecx, r8d
jmp 0x1400012be
test dl, dl
je 0x1400012f9
nop dword [rax]
movzx edx, byte [rax + 1]
add rax, 1
test dl, dl
je 0x1400012f9
cmp dl, 0x20
jle 0x1400012e8
mov qword [0x1400e8008], rax
mov r8d, dword [rdi]
test r8d, r8d
je 0x14000131e
test byte [rsp + 0x5c], 1
mov eax, 0xa
jne 0x1400013f0
mov dword [section..data], eax
mov ebx, dword [0x1400e8038]
lea r12d, [rbx + 1]
movsxd r12, r12d
shl r12, 3
mov rcx, r12
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test ebx, ebx
mov rdi, qword [0x1400e8030]
mov rbp, rax
jle 0x1400014ae
sub r12, 8
xor ebx, ebx
nop
mov rcx, qword [rdi + rbx]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
lea rsi, [rax + 1]
mov rcx, rsi
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r8, rsi
mov qword [rbp + rbx], rax
mov rdx, qword [rdi + rbx]
mov rcx, rax
add rbx, 8
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
cmp rbx, r12
jne 0x140001350
add rbx, rbp
mov qword [rbx], 0
mov qword [0x1400e8030], rbp
call fcn.14000ba50
mov rax, qword [0x1400c2580]
mov r8, qword [0x1400e8028]
mov ecx, dword [0x1400e8038]
mov rax, qword [rax]
mov qword [rax], r8
mov rdx, qword [0x1400e8030]
call fcn.140001915
mov ecx, dword [0x1400e8020]
mov dword [0x1400e8024], eax
test ecx, ecx
je 0x1400014b6
mov edx, dword [0x1400e801c]
test edx, edx
je 0x140001470
add rsp, 0x90
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
movzx eax, word [rsp + 0x60]
jmp 0x140001318
mov rsi, qword [0x1400c25d0]
mov ebp, 1
mov eax, dword [rsi]
cmp eax, 1
jne 0x14000121a
mov ecx, 0x1f
call fcn.140018090
mov eax, dword [rsi]
cmp eax, 1
jne 0x140001239
mov rdx, qword [0x1400c2610]
mov rcx, qword [0x1400c2600]
call sub.api_ms_win_crt_runtime_l1_1_0.dll__initterm
test ebp, ebp
mov dword [rsi], 2
jne 0x140001241
xor eax, eax
xchg qword [rbx], rax
jmp 0x140001241
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_GetStartupInfoA]
jmp 0x1400011c2
call sub.api_ms_win_crt_runtime_l1_1_0.dll__cexit
mov eax, dword [0x1400e8024]
add rsp, 0x90
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
mov rdx, qword [0x1400c2630]
mov dword [rsi], 1
mov rcx, qword [0x1400c2620]
call sub.api_ms_win_crt_runtime_l1_1_0.dll__initterm
jmp 0x14000122e
mov rbx, rax
jmp 0x140001385
mov ecx, eax
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
nop
nop