Function at 0x14007fc70
Capabilities:
Execute command
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
mov eax, 0x1100
call fcn.1400ede50
sub rsp, rax
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140153200]
xor rax, rsp
mov qword [rbp + 0x10a0], rax
xor esi, esi
lea r14, [0x1401d2340]
movabs r12, 0x7fffffff88ca6bff
movabs r15, 0x7fffffffffffffff
nop dword [rax]
mov ecx, esi
mov rdx, rsi
mov rax, r14
nop dword [rax + rax]
cmp dword [rax], 0x13
je 0x14007fdbc
inc ecx
inc rdx
add rax, 0x30
cmp ecx, 0x1f
jb 0x14007fce0
mov rdi, rsi
mov ecx, esi
mov rdx, rsi
mov rax, r14
cmp dword [rax], 0xc
je 0x14007fdd8
inc ecx
inc rdx
add rax, 0x30
cmp ecx, 0x1f
jb 0x14007fd02
mov rbx, rsi
xorps xmm0, xmm0
mov dword [rbp + 0x60], Ordinal_50
xor edx, edx
mov qword [rbp + 0x68], rsi
mov r8d, 0x1000
mov dword [rbp + 0x78], esi
lea rcx, [rbp + 0xa0]
mov qword [rbp + 0x70], rsi
movdqu xmmword [rbp + 0x80], xmm0
call sub.VCRUNTIME140.dll_memset
xor r9d, r9d
lea r8, [rbp + 0x60]
mov edx, 0x1f000f
lea rcx, [rbp + 0x40]
call rbx
mov ecx, esi
mov rdx, rsi
mov rax, r14
cmp dword [rax], 0x13
je 0x14007fdf4
inc ecx
inc rdx
add rax, 0x30
cmp ecx, 0x1f
jb 0x14007fd67
xor al, al
mov byte [0x1401d8198], al
test al, al
jne 0x14007fe57
lea rcx, [rbp]
call fcn.140005490
mov rax, qword [rbp]
cmp rax, r12
jge 0x14007fe45
add rax, 0x77359400
lea rcx, [rbp + 8]
mov qword [rbp + 8], rax
call fcn.14002aff0
jmp 0x14007fcd0
lea rax, [rdx + rdx*2]
add rax, rax
cmp byte [r14 + rax*8 + 0x24], sil
je 0x14007fcf7
mov rdi, qword [r14 + rax*8 + 0x28]
jmp 0x14007fcfa
lea rax, [rdx + rdx*2]
add rax, rax
cmp byte [r14 + rax*8 + 0x24], sil
je 0x14007fd19
mov rbx, qword [r14 + rax*8 + 0x28]
jmp 0x14007fd1c
lea rax, [rdx + rdx*2]
add rax, rax
cmp byte [r14 + rax*8 + 0x24], sil
je 0x14007fd7e
mov rcx, qword [rbp + 0x40]
lea r8, [rbp + 0xa0]
mov r9d, 0x1000
mov qword [rsp + 0x20], rsi
mov edx, 2
call rdi
mov rcx, qword [rbp + 0x40]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
js 0x14007fd7e
cmp dword [rbp + 0xb4], esi
sete al
jmp 0x14007fd80
lea rcx, [rbp + 8]
mov qword [rbp + 8], r15
call fcn.14002aff0
jmp 0x14007fcd0
movabs rax, 0xce540140d7761c06
lea rcx, [rbp + 0x20]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x26058bd5ea355ecd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0xd05709071820425a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x80e26046d8e4eff2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0xa1306f29802a2645
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x4371f8acb9692dba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xbf30666b44127137
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x80e2053ebdca8994
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3