Function at 0x140020d00
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1f8
mov rax, qword [0x140037b50]
xor r11d, r11d
mov qword [rsp + 0x148], r11
lea r12, [rsp + 0x158]
mov qword [rsp + 0x150], r11
mov rdi, r12
call qword [rax]
mov ecx, 6
movaps xmm0, xmmword [0x140036be0]
mov qword [rsp + 0xb0], rax
xor eax, eax
movaps xmm1, xmmword [0x140036ba0]
rep stosd dword [rdi], eax
lea rsi, [rsp + 0xe0]
movaps xmmword [rsp + 0xd0], xmm0
lea rbp, [rsp + 0xc0]
mov rcx, rsi
movaps xmmword [rsp + 0xc0], xmm1
lea rdi, [rsp + 0xd0]
mov r8, rbp
mov rdx, rdi
call fcn.14000bdeb
mov rax, qword [rsp + 0xe8]
mov rcx, qword [0x140037e00]
mov qword [rsp + 0x98], rax
call fcn.140023d60
cmp byte [rax], 0
mov rbx, rax
jne 0x1400217ed
mov rcx, rsi
call fcn.14000b3dd
cmp byte [rbx], 0
mov rcx, rax
jne 0x1400217ed
mov rax, qword [0x140037ad0]
call qword [rax]
movaps xmm2, xmmword [0x140036be0]
mov rdx, rdi
mov r8, rbp
movaps xmm3, xmmword [0x140036b40]
mov rcx, rsi
mov qword [rsp + 0x88], rax
movaps xmmword [rsp + 0xd0], xmm2
movaps xmmword [rsp + 0xc0], xmm3
call fcn.14000bdeb
mov rdx, qword [rsp + 0xe8]
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x48], rdx
jne 0x140021809
mov qword [rsp + 0x178], rdx
mov rdx, qword [rsp + 0x88]
mov rcx, rsi
mov qword [rsp + 0x170], rax
call fcn.140001e70
mov rdx, qword [rsp + 0xe8]
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x38], rdx
jne 0x140021820
mov qword [rsp + 0x188], rdx
lea rcx, [rsp + 0x170]
mov edx, 2
mov qword [rsp + 0x180], rax
call fcn.140006c07
mov rcx, r12
call fcn.140009436
cmp byte [rbx], 0
mov r8, rax
jne 0x140021820
mov rax, qword [0x140037c70]
mov r9d, 0x18
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0xb0]
call qword [rax]
mov rax, qword [rsp + 0x158]
mov r8, rbp
mov rdx, rdi
movaps xmm4, xmmword [0x140036be0]
mov rcx, rsi
movaps xmm5, xmmword [0x140036af0]
movaps xmmword [rsp + 0xd0], xmm4
mov qword [rsp + 0x40], rax
movaps xmmword [rsp + 0xc0], xmm5
call fcn.14000bdeb
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov r15, qword [rsp + 0xe8]
jne 0x140021830
mov rdx, qword [rsp + 0x40]
mov rcx, rsi
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], r15
call fcn.140001e9c
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov r13, qword [rsp + 0xe8]
jne 0x14002183d
lea rcx, [rsp + 0x190]
mov edx, 2
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1a8], r13
call fcn.140006c07
mov r8, rbp
mov rdx, rdi
mov rcx, rsi
movaps xmm0, xmmword [0x140036be0]
movaps xmm1, xmmword [0x140036a90]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm1
call fcn.14000bdeb
cmp byte [rbx], 0
jne 0x14002183d
lea rcx, [rsp + 0x148]
mov rdx, rsi
call fcn.1400069fe
mov r8, rbp
mov rdx, rdi
mov rcx, rsi
movaps xmm2, xmmword [0x140036be0]
movaps xmm3, xmmword [0x140036a20]
movaps xmmword [rsp + 0xd0], xmm2
movaps xmmword [rsp + 0xc0], xmm3
call fcn.14000bdeb
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov r12, qword [rsp + 0xe8]
jne 0x140021847
movups xmm4, xmmword [rsp + 0x148]
lea rcx, [rsp + 0x1b0]
mov edx, 2
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], r12
movaps xmmword [rsp + 0x1c0], xmm4
call fcn.140006c07
or r8, 0xffffffffffffffff
xor edx, edx
mov rcx, rsi
movups xmm5, xmmword [rsp + 0x148]
movaps xmmword [rsp + 0xe0], xmm5
call fcn.140002b44
cmp byte [rbx], 0
mov rcx, rax
jne 0x140021847
call fcn.1400029ba
cmp byte [rbx], 0
mov esi, eax
jne 0x140021847
lea rax, [rsp + 0xc0]
movaps xmm0, xmmword [0x140036be0]
movaps xmm1, xmmword [0x1400369c0]
lea rdi, [rsp + 0xe0]
mov r8, rax
mov qword [rsp + 0x50], rax
lea r14, [rsp + 0xd0]
mov rcx, rdi
movaps xmmword [rsp + 0xd0], xmm0
mov rdx, r14
movaps xmmword [rsp + 0xc0], xmm1
call fcn.14000bdeb
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov rbp, qword [rsp + 0xe8]
jne 0x14002172c
lea rcx, [rsp + 0x100]
mov edx, 1
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], rbp
call fcn.140006c07
movsxd rax, esi
xor r9d, r9d
xor r10d, r10d
mov rcx, rax
mov qword [rsp + 0x28], r9
xor edx, edx
xor r9d, r9d
mov qword [rsp + 0xa8], rax
mov rax, qword [0x140037bb0]
mov r8d, 0x1000002
mov dword [rsp + 0x20], r10d
call qword [rax]
test rax, rax
mov qword [rsp + 0x90], rax
je 0x140021153
mov rax, qword [0x140037b30]
xor r8d, r8d
xor r9d, r9d
mov edx, 4
mov qword [rsp + 0x20], r8
mov rcx, qword [rsp + 0x90]
xor r8d, r8d
call qword [rax]
test rax, rax
mov qword [rsp + 0xb8], rax
jne 0x140021235
jmp 0x1400211c0
mov r8, qword [rsp + 0x50]
mov rcx, rdi
mov rdx, r14
movaps xmm2, xmmword [0x140036be0]
movaps xmm3, xmmword [0x140036950]
movaps xmmword [rsp + 0xd0], xmm2
movaps xmmword [rsp + 0xc0], xmm3
call fcn.14000bdeb
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xe8]
je 0x140021298
test rcx, rcx
je 0x14002172c
test byte [rcx + 7], 0x40
jne 0x14002172c
call fcn.140004925
cmp byte [rbx], 0
je 0x14002111c
jmp 0x14002172c
movaps xmm0, xmmword [0x140036be0]
lea rcx, [rsp + 0xe0]
movaps xmm1, xmmword [0x1400368e0]
lea rdx, [rsp + 0xd0]
lea r8, [rsp + 0xc0]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm1
call fcn.14000bdeb
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xe8]
je 0x140021298
test rcx, rcx
je 0x14002172c
test byte [rcx + 7], 0x40
jne 0x14002172c
call fcn.140004925
cmp byte [rbx], 0
jne 0x14002172c
movaps xmm4, xmmword [0x140036be0]
lea r14, [rsp + 0xe0]
movaps xmm5, xmmword [0x140036870]
lea rdi, [rsp + 0xc0]
mov rcx, r14
lea rsi, [rsp + 0xd0]
mov r8, rdi
movaps xmmword [rsp + 0xd0], xmm4
mov rdx, rsi
movaps xmmword [rsp + 0xc0], xmm5
call fcn.14000bdeb
mov rdx, qword [rsp + 0xe8]
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x50], rdx
je 0x1400212c2
jmp 0x140021711
mov qword [rsp + 0x1d8], rcx
mov edx, 1
lea rcx, [rsp + 0x1d0]
mov qword [rsp + 0x1d0], rax
call fcn.140006c07
or ecx, 0xffffffff
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x50]
mov edx, 1
lea rcx, [rsp + 0x110]
mov qword [rsp + 0x118], rax
call fcn.140006c07
mov rdx, rsi
mov r8, rdi
mov rcx, r14
movaps xmm2, xmmword [0x140036be0]
movaps xmm3, xmmword [0x140036800]
movaps xmmword [rsp + 0xd0], xmm2
movaps xmmword [rsp + 0xc0], xmm3
call fcn.14000bdeb
mov rdx, qword [rsp + 0xe8]
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x60], rdx
jne 0x1400216f6
mov qword [rsp + 0x128], rdx
lea rcx, [rsp + 0x120]
mov edx, 1
mov qword [rsp + 0x120], rax
call fcn.140006c07
mov rax, qword [rsp + 0x40]
movsxd rax, dword [rax + 0x3c]
add rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
jo 0x1400213b5
movaps xmm4, xmmword [0x140036be0]
mov rdx, rsi
mov r8, rdi
mov rcx, r14
movaps xmm5, xmmword [0x1400367a0]
movaps xmmword [rsp + 0xd0], xmm4
movaps xmmword [rsp + 0xc0], xmm5
call fcn.14000bdeb
mov rdx, qword [rsp + 0xe8]
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x68], rdx
je 0x1400213bf
jmp 0x1400216db
call fcn.1400049fd
jmp 0x1400216f6
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x68]
mov edx, 1
lea rcx, [rsp + 0x130]
mov qword [rsp + 0x138], rax
call fcn.140006c07
mov r8, rdi
mov rdx, rsi
mov rcx, r14
movaps xmm0, xmmword [0x140036be0]
movaps xmm1, xmmword [0x140036750]
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm1
call fcn.14000bdeb
mov rdi, qword [rsp + 0xe8]
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x70], rdi
jne 0x1400216c0
mov qword [rsp + 0x1d0], rax
mov rax, qword [rsp + 0x58]
mov rcx, r14
mov qword [rsp + 0x1d8], rdi
movzx edx, word [rax + 6]
call fcn.140001c1e
mov rdi, qword [rsp + 0xe8]
cmp byte [rbx], 0
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x78], rdi
jne 0x1400216a5
lea rcx, [rsp + 0x1d0]
mov edx, 2
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1e8], rdi
call fcn.140006c07
mov word [rsp + 0x86], 0
mov rax, qword [rsp + 0x58]
mov di, word [rsp + 0x86]
cmp di, word [rax + 6]
jb 0x1400214fa
lea rcx, [0x140036450]
mov edx, 1
call fcn.140006c07
mov rbx, qword [0x140037ac0]
mov rcx, qword [rsp + 0xb0]
call qword [rbx]
mov rcx, qword [rsp + 0xa8]
call qword [rbx]
mov rcx, qword [rsp + 0x90]
call qword [rbx]
mov rax, qword [0x140037ae0]
mov rcx, qword [rsp + 0x88]
call qword [rax]
jmp 0x1400216a5
mov rax, qword [rsp + 0x58]
lea r14, [rax + 0x18]
movzx eax, word [rax + 0x14]
add r14, rax
jo 0x140021550
imul ax, word [rsp + 0x86], 0x28
movzx eax, ax
add r14, rax
jo 0x140021550
lea rsi, [rsp + 0xe0]
mov r8d, 8
mov rdx, r14
mov rcx, rsi
call fcn.140020c4f
mov rax, qword [rsp + 0xe8]
cmp byte [rbx], 0
mov qword [rsp + 0xa0], rax
je 0x14002155a
jmp 0x14002167b
call fcn.1400049fd
jmp 0x14002169c
movaps xmm2, xmmword [0x140036730]
lea rdx, [rsp + 0xd0]
mov rcx, rsi
movaps xmmword [rsp + 0xd0], xmm2
call fcn.14000a114
cmp byte [rbx], 0
jne 0x14002167b
test al, al
jne 0x140021593
inc word [rsp + 0x86]
jmp 0x14002167b
xor ecx, ecx
mov edx, 1
mov dword [rsp + 0xfc], ecx
lea rcx, [0x140036470]
call fcn.140006c07
movsxd rcx, dword [r14 + 0xc]
add rcx, qword [rsp + 0x40]
jo 0x14002160b
cmp byte [rbx], 0
jne 0x14002167b
mov rax, qword [0x140037b10]
lea r9, [rsp + 0xfc]
mov r8d, 0x40
movsxd rdx, dword [r14 + 8]
call qword [rax]
mov ecx, eax
call fcn.140009430
cmp byte [rbx], 0
jne 0x14002167b
lea rcx, [0x140036460]
mov edx, 1
call fcn.140006c07
movsxd rsi, dword [r14 + 0xc]
mov rax, qword [rsp + 0x40]
add rax, rsi
jno 0x140021612
call fcn.1400049fd
jmp 0x14002167b
add rsi, qword [rsp + 0xb8]
jo 0x14002160b
movsxd rcx, dword [r14 + 8]
test ecx, ecx
jns 0x140021637
movabs r8, 0x7fffffffffffffff
xor edx, edx
call fcn.1400050a1
jmp 0x14002167b
mov ecx, ecx
mov rdi, rax
rep movsb byte [rdi], byte [rsi]
movsxd rcx, dword [r14 + 0xc]
add rcx, qword [rsp + 0x40]
jo 0x14002160b
cmp byte [rbx], 0
mov r8d, dword [rsp + 0xfc]
jne 0x14002167b
mov rax, qword [0x140037b10]
lea r9, [rsp + 0xfc]
movsxd rdx, dword [r14 + 8]
call qword [rax]
mov ecx, eax
call fcn.140009430
cmp byte [rbx], 0
je 0x140021586
cmp qword [rsp + 0xa0], 0
je 0x14002169c
mov rax, qword [rsp + 0xa0]
test byte [rax + 7], 0x40
jne 0x14002169c
mov rcx, rax
call fcn.140004925
cmp byte [rbx], 0
je 0x14002149b
cmp qword [rsp + 0x78], 0
je 0x1400216c0
mov rax, qword [rsp + 0x78]
test byte [rax + 7], 0x40
jne 0x1400216c0
mov rcx, rax
call fcn.140004925
cmp qword [rsp + 0x70], 0
je 0x1400216db
mov rax, qword [rsp + 0x70]
test byte [rax + 7], 0x40
jne 0x1400216db
mov rcx, rax
call fcn.140004925
cmp qword [rsp + 0x68], 0
je 0x1400216f6
mov rax, qword [rsp + 0x68]
test byte [rax + 7], 0x40
jne 0x1400216f6
mov rcx, rax
call fcn.140004925
cmp qword [rsp + 0x60], 0
je 0x140021711
mov rax, qword [rsp + 0x60]
test byte [rax + 7], 0x40
jne 0x140021711
mov rcx, rax
call fcn.140004925
cmp qword [rsp + 0x50], 0
je 0x14002172c
mov rax, qword [rsp + 0x50]
test byte [rax + 7], 0x40
jne 0x14002172c
mov rcx, rax
call fcn.140004925
test rbp, rbp
je 0x14002173f
test byte [rbp + 7], 0x40
jne 0x14002173f
mov rcx, rbp
call fcn.140004925
test r12, r12
je 0x140021754
test byte [r12 + 7], 0x40
jne 0x140021754
mov rcx, r12
call fcn.140004925
mov rcx, qword [rsp + 0x150]
test rcx, rcx
je 0x14002176c
test byte [rcx + 7], 0x40
jne 0x14002176c
call fcn.140004925
test r13, r13
je 0x140021780
test byte [r13 + 7], 0x40
jne 0x140021780
mov rcx, r13
call fcn.140004925
test r15, r15
je 0x140021794
test byte [r15 + 7], 0x40
jne 0x140021794
mov rcx, r15
call fcn.140004925
cmp qword [rsp + 0x38], 0
je 0x1400217af
mov rax, qword [rsp + 0x38]
test byte [rax + 7], 0x40
jne 0x1400217af
mov rcx, rax
call fcn.140004925
cmp qword [rsp + 0x48], 0
je 0x1400217ca
mov rax, qword [rsp + 0x48]
test byte [rax + 7], 0x40
jne 0x1400217ca
mov rcx, rax
call fcn.140004925
cmp qword [rsp + 0x98], 0
je 0x14002184e
mov rax, qword [rsp + 0x98]
test byte [rax + 7], 0x40
jne 0x14002184e
mov rcx, rax
call fcn.140004925
jmp 0x14002184e
xor edx, edx
xor ebp, ebp
xor r12d, r12d
xor r13d, r13d
xor r15d, r15d
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x48], rdx
jmp 0x14002172c
xor eax, eax
xor ebp, ebp
xor r12d, r12d
xor r13d, r13d
xor r15d, r15d
mov qword [rsp + 0x38], rax
jmp 0x14002172c
xor ebp, ebp
xor r12d, r12d
xor r13d, r13d
xor r15d, r15d
jmp 0x14002172c
xor ebp, ebp
xor r12d, r12d
xor r13d, r13d
jmp 0x14002172c
xor ebp, ebp
xor r12d, r12d
jmp 0x14002172c
xor ebp, ebp
jmp 0x14002172c
add rsp, 0x1f8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret