Function at 0x140047c40
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push r15
sub rsp, 0xe0
mov rax, qword [0x1400c5be0]
xor rax, rsp
mov qword [rsp + 0xd0], rax
xor r15d, r15d
mov dword [rsp + 0x28], r15d
lea rcx, [rsp + 0x60]
call fcn.140056000
mov r8, rax
movabs rax, 0x1421b7ebfff00fec
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x30], rcx
movabs rdx, 0xd044ffc2a90d3f6e
mov qword [rsp + 0x20], rdx
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x38], rcx
movabs rax, 0x1421b7ebd29d62a1
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0x20], rdx
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0xc8], rax
movdqa xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rsp + 0xc0]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x98]
call fcn.1400487a0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140047d48
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047d43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004801e
call fcn.14008d0c0
movdqa xmm0, xmmword [0x1400b2ec0]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
lea r8, [rsp + 0x98]
cmp qword [rsp + 0xb0], 0x10
cmovae r8, qword [rsp + 0x98]
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
test rax, rax
je 0x140047d93
mov ecx, IStream_Read
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r8, [rsp + 0x98]
cmp qword [rsp + 0xb0], 0x10
cmovae r8, qword [rsp + 0x98]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov r14, rax
mov qword [rsp + 0x20], rax
call fcn.14004b800
test al, al
jne 0x140047dd4
mov ecx, 0x675
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.140056310
call fcn.140036db0
call fcn.140037e20
call fcn.140038460
call fcn.140039260
call fcn.1400361f0
call fcn.140045540
call fcn.1400461f0
call fcn.14002edf0
call fcn.1400345a0
call fcn.140033050
call fcn.140048c00
call fcn.140035710
call fcn.140032d60
call fcn.140030980
lea rcx, [rsp + 0x80]
call fcn.140055320
nop
mov rsi, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x80]
mov edi, 1
cmp rbx, rsi
je 0x140047e63
nop word [rax + rax]
mov edx, edi
mov rcx, rbx
call fcn.1400326b0
add rbx, 0x20
cmp rbx, rsi
jne 0x140047e50
mov rbx, qword [rsp + 0x80]
test rbx, rbx
je 0x140047ee9
mov rsi, qword [rsp + 0x88]
cmp rbx, rsi
je 0x140047e99
nop dword [rax]
mov rcx, rbx
call fcn.14002b990
add rbx, 0x20
cmp rbx, rsi
jne 0x140047e80
mov rbx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x90]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140047ecd
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140048024
mov rcx, rbx
call fcn.14008d0c0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], r15
lea rdx, [0x1400af468]
lea rcx, [rsp + 0x40]
call fcn.14004aa30
mov dword [rsp + 0x28], edi
mov edx, edi
lea rcx, [rsp + 0x40]
call fcn.1400326b0
and edi, 0xfffffffe
mov dword [rsp + 0x28], edi
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140047f53
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047f4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004802a
call fcn.14008d0c0
movdqa xmm0, xmmword [0x1400b2eb0]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], r15w
call fcn.14004fc80
nop
jmp 0x140047f74
call fcn.140047690
test r14, r14
je 0x140047f90
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140048040
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0x10
jb 0x140047fd5
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047fd0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140048030
call fcn.14008d0c0
movdqa xmm0, xmmword [0x1400b2ec0]
movdqu xmmword [rsp + 0xa8], xmm0
mov byte [rsp + 0x98], 0
xor eax, eax
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.14008d0a0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop r15
ret
call fcn.14006f260
nop
call fcn.14006f260
int3
call fcn.14006f260
nop
call fcn.14006f260
int3