Function at 0x140005ebe
Capabilities:
Terminate process

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x238
xor ebx, ebx
mov qword [rsp + 0xe0], rbx
mov r12, rcx
mov rbp, rdx
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x108], rbx
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], rbx
mov qword [rsp + 0x128], rbx
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x140], rbx
mov qword [rsp + 0x148], rbx
test rdx, rdx
je 0x1400060b0
lea rsi, [rsp + 0x90]
lea rax, [0x14001dc80]
mov qword [rsp + 0x160], 0x14
mov rcx, rsi
mov qword [rsp + 0x168], rax
call fcn.140001c40
mov rbx, qword [0x14001e610]
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
cmp byte [rbx], 0
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], rdx
jne 0x14000643f
mov qword [rsp + 0x178], rdx
lea rcx, [rsp + 0x160]
mov edx, 2
mov qword [rsp + 0x170], rax
call fcn.140002134
xor r11d, r11d
xor r10d, r10d
xor eax, eax
lea r8, [rsp + 0x200]
mov ecx, 0xc
cmp byte [rbx], 0
mov qword [rsp + 0x158], r10
mov rdi, r8
mov qword [rsp + 0xa8], r11
lea r9, [rsp + 0x150]
rep stosd dword [rdi], eax
mov qword [rsp + 0xb0], r11
mov qword [rsp + 0xb8], r11
mov qword [rsp + 0xc0], 0x7c00
mov qword [rsp + 0x150], rbp
jne 0x14000643f
lea rcx, [rsp + 0xa8]
mov edx, 0x1fffff
call fcn.140005e1b
cmp byte [rbx], 0
jne 0x14000643f
mov rdx, qword [rsp + 0xa8]
test rdx, rdx
je 0x14000609f
lea rax, [0x14001dc10]
mov rcx, rsi
mov qword [rsp + 0x180], 0xd
mov qword [rsp + 0x188], rax
call fcn.140001c40
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
cmp byte [rbx], 0
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], rdx
je 0x1400060b7
jmp 0x14000643f
mov edx, 1
lea rcx, [0x14001dc30]
call fcn.140002134
xor ecx, ecx
call sub.ucrtbase.dll_exit
mov qword [rsp + 0x198], rdx
lea rcx, [rsp + 0x180]
mov edx, 2
mov qword [rsp + 0x190], rax
call fcn.140002134
cmp byte [rbx], 0
jne 0x14000643f
mov dword [rsp + 0x28], 0x40
mov rcx, qword [rsp + 0xa8]
xor r8d, r8d
lea rdx, [rsp + 0xb8]
mov dword [rsp + 0x20], 0x1000
lea r9, [rsp + 0xc0]
call fcn.140005e43
cmp byte [rbx], 0
jne 0x14000643f
xor r9d, r9d
mov qword [rsp + 0xc8], r9
mov r9, qword [rsp + 0xc0]
sub r9, 1
jo 0x140006165
lea rax, [rsp + 0xc8]
mov rdx, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xa8]
mov r8, r12
mov qword [rsp + 0x20], rax
call fcn.140005e6b
cmp byte [rbx], 0
mov edi, eax
je 0x14000616f
jmp 0x14000643f
call fcn.1400023a0
jmp 0x14000643f
movaps xmm0, xmmword [0x14001dbc0]
movaps xmm1, xmmword [0x14001dba0]
lea r13, [rsp + 0x60]
mov rcx, rsi
movaps xmm2, xmmword [0x14001db80]
lea r12, [rsp + 0x70]
lea rbp, [rsp + 0x80]
mov r9, r13
mov rdx, rbp
mov r8, r12
movaps xmmword [rsp + 0x70], xmm1
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x60], xmm2
call fcn.140004c9c
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
cmp byte [rbx], 0
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], rdx
jne 0x14000643f
mov qword [rsp + 0x1a8], rdx
mov rcx, rsi
movsxd rdx, edi
mov qword [rsp + 0x1a0], rax
call fcn.140001c40
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
cmp byte [rbx], 0
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], rdx
jne 0x14000643f
mov qword [rsp + 0x1b8], rdx
lea rcx, [rsp + 0x1a0]
mov edx, 2
mov qword [rsp + 0x1b0], rax
call fcn.140002134
mov rdx, qword [rsp + 0xc8]
lea rax, [0x14001db60]
mov rcx, rsi
mov qword [rsp + 0x1c8], rax
mov qword [rsp + 0x1c0], 0x14
call fcn.140001c6f
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
cmp byte [rbx], 0
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], rdx
jne 0x14000643f
mov qword [rsp + 0x1d8], rdx
lea rcx, [rsp + 0x1c0]
mov edx, 2
mov qword [rsp + 0x1d0], rax
call fcn.140002134
mov edx, 1
lea rcx, [0x14001db40]
call fcn.140002134
cmp byte [rbx], 0
jne 0x14000643f
xor eax, eax
xor edx, edx
xor r8d, r8d
mov r9, qword [rsp + 0xa8]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xb8]
mov dword [rsp + 0x30], edx
mov edx, 0x1fffff
mov qword [rsp + 0x28], r8
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.140005e93
cmp byte [rbx], 0
jne 0x14000643f
mov rdi, qword [0x14001e3c0]
mov rcx, qword [rsp + 0xb0]
call qword [rdi]
mov rcx, qword [rsp + 0xa8]
call qword [rdi]
mov rdx, qword [rsp + 0xb0]
lea rax, [0x14001db20]
mov rcx, rsi
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x1e0], 0xd
call fcn.140001c40
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
cmp byte [rbx], 0
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], rdx
jne 0x14000643f
mov qword [rsp + 0x1f8], rdx
lea rcx, [rsp + 0x1e0]
mov edx, 2
mov qword [rsp + 0x1f0], rax
call fcn.140002134
mov rdx, rbp
mov r9, r13
mov r8, r12
movaps xmm3, xmmword [0x14001dae0]
movaps xmm4, xmmword [0x14001dba0]
mov rcx, rsi
movaps xmm5, xmmword [0x14001db80]
movaps xmmword [rsp + 0x80], xmm3
movaps xmmword [rsp + 0x70], xmm4
movaps xmmword [rsp + 0x60], xmm5
call fcn.140004c9c
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
cmp byte [rbx], 0
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rdx
jne 0x14000643f
mov qword [rsp + 0xd8], rdx
lea rcx, [rsp + 0xd0]
mov edx, 1
mov qword [rsp + 0xd0], rax
call fcn.140002134
lea rcx, [rsp + 0x140]
call fcn.140002333
lea rcx, [rsp + 0x130]
call fcn.140002333
lea rcx, [rsp + 0x120]
call fcn.140002333
lea rcx, [rsp + 0x110]
call fcn.140002333
lea rcx, [rsp + 0x100]
call fcn.140002333
lea rcx, [rsp + 0xf0]
call fcn.140002333
lea rcx, [rsp + 0xe0]
call fcn.140002333
nop
add rsp, 0x238
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret