Function at 0x1400763f0
Capabilities:
Acquire debug privileges
Terminate process

Disassembly:
push rbx
sub rsp, 0xb0
mov rax, qword [0x14012dc00]
xor rax, rsp
mov qword [rsp + 0xa0], rax
call fcn.1400796d0
test eax, eax
jne 0x14007643e
lea rcx, [rsp + 0x48]
call fcn.140079a10
nop
mov rcx, rax
call fcn.140084700
nop
lea rcx, [rsp + 0x48]
call fcn.14003fc20
mov ecx, 0x65e
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, str.SeDebugPrivilege
call fcn.140085930
lea rcx, str.SeImpersonatePrivilege
call fcn.140085930
lea rcx, [rsp + 0x48]
call fcn.140081f20
mov r8, rax
movabs rax, 0xd160adea365f2e46
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x30], rcx
movabs rdx, 0xb907caf94dc43c4
mov qword [rsp + 0x20], rdx
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x38], rcx
movabs rax, 0xd160adea1b32430b
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x20], rdx
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x98], rax
movdqa xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140076524
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007651f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400766b6
call fcn.1400ac9a0
movdqa xmm0, xmmword [0x140115010]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
lea r8, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova r8, qword [rsp + 0x70]
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
test rax, rax
je 0x140076569
mov ecx, IStream_Read
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r8, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova r8, qword [rsp + 0x70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov rbx, rax
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x68]
call fcn.140070a00
call fcn.140079b50
test al, al
jne 0x1400765ae
mov ecx, 0x675
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.140082220
nop
call fcn.14003b9a0
nop
jmp 0x1400765c1
call fcn.14003ca40
call fcn.14003d0e0
call fcn.14003de10
call fcn.14003ae40
call fcn.140060d80
call fcn.140063a70
call fcn.140031220
nop
call fcn.140039210
nop
jmp 0x1400765f2
call fcn.140037ac0
call fcn.140077050
call fcn.14003a370
call fcn.140035c10
call fcn.140032f50
call fcn.140035ee0
nop
call fcn.14007e960
nop
jmp 0x14007661e
call fcn.1400759f0
test rbx, rbx
je 0x14007663a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x14012df88], 0
je 0x140076649
call fcn.1400766d0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x140076685
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140076680
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400766bc
call fcn.1400ac9a0
movdqa xmm0, xmmword [0x140115010]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
xor eax, eax
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.1400ac980
add rsp, 0xb0
pop rbx
ret
call fcn.14008fb78
nop
call fcn.14008fb78
int3