Function at 0x140005e8c
Capabilities:
Resolve function by parsing pe exports
Terminate process

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x28
mov rax, qword [rcx + 0xe8]
xor esi, esi
mov rbx, qword [rcx]
mov rdi, rcx
mov dword [rsp + 0x70], esi
mov r13d, esi
mov dword [rsp + 0x78], esi
mov r14d, esi
mov edx, dword [rax + 0x3c]
mov dword [rcx + 0xf0], edx
mov rcx, rbx
mov rax, qword [rbx]
mov qword [rsp + 0x88], rsi
call qword [rax + 0x3a0]
mov r15d, eax
mov ebp, esi
test eax, eax
je 0x140005f25
mov r8, qword [rbx]
mov edx, ebp
mov rcx, rbx
call qword [r8 + 0x68]
mov esi, dword [rax]
jmp 0x140005f18
mov rax, qword [rbx]
inc r14d
mov edx, esi
mov rcx, rbx
call qword [rax + 0x68]
mov r12, rax
mov r8, qword [rbx]
mov edx, esi
mov rcx, rbx
call qword [r8 + 0x68]
mov esi, dword [rax + 4]
test esi, esi
jne 0x140005f01
mov esi, dword [r12]
test esi, esi
jne 0x140005ef0
inc ebp
cmp ebp, r15d
jb 0x140005ee0
xor esi, esi
mov rax, qword [rdi + 0xe8]
xor ecx, ecx
mov dword [rdi + 0xf4], r14d
mov edx, dword [rax + 0x38]
shl edx, 6
add edx, 8
call fcn.140009564
mov rdx, rax
and edx, 7
sub rax, rdx
add rax, 8
mov qword [0x140032e38], rax
jne 0x140005f7c
mov ecx, 0x2ee1
call fcn.14000baf4
mov rcx, rax
mov edx, 2
call fcn.14000ab14
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, dword [rdi + 0xf0]
xor ecx, ecx
shl edx, 3
add edx, 8
call fcn.140009564
mov rdx, rax
mov ecx, 8
and edx, 7
sub rcx, rdx
add rax, rcx
mov qword [rdi + 0xf8], rax
jne 0x140005fcc
mov ecx, 0x2ee1
call fcn.14000baf4
mov rcx, rax
mov edx, 2
call fcn.14000ab14
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [rdi + 0xf4]
xor ecx, ecx
mov edx, eax
not edx
and edx, 1
add edx, eax
mov dword [0x140032e7c], edx
shl edx, 3
add edx, 8
call fcn.140009564
mov rcx, rax
and ecx, 7
sub rax, rcx
lea rcx, [rax + 8]
mov qword [0x140032e30], rcx
test rcx, rcx
jne 0x14000602a
mov ecx, 0x2ee1
call fcn.14000baf4
mov rcx, rax
mov edx, 2
call fcn.14000ab14
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r8d, dword [0x140032e7c]
xor edx, edx
shl r8, 3
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rdi + 8]
cmp dword [rax + 0x1c], esi
je 0x140006064
mov ecx, 0x2f5b
call fcn.14000bedc
mov rax, qword [rdi + 8]
cmp dword [rax + 0x58], esi
je 0x140006064
lea rcx, [0x14000de2c]
call fcn.14000bf6c
mov rcx, qword [rdi]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x58]
mov r14, rax
test rax, rax
je 0x14000631b
mov r12, rsi
mov ebp, r13d
mov rcx, qword [rdi + 0xe8]
cmp r13d, dword [rcx + 0x38]
jge 0x14000631b
mov rbx, qword [0x140032e38]
mov r15d, 1
add rbx, r12
add r13d, r15d
add r12, 0x40
mov qword [rbx], r14
mov rcx, qword [rdi]
mov edx, dword [r14]
mov rax, qword [rcx]
call qword [rax + 0x78]
mov qword [rbx + 0x38], rax
mov rcx, qword [rdi + 8]
cmp dword [rcx + 0x58], esi
je 0x1400060d2
mov rdx, rax
mov ecx, 0x2f5d
call fcn.14000bedc
mov rdx, qword [rbx]
cmp dword [rdx + 4], esi
je 0x140006303
mov dword [rbx + 0x2c], esi
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax + 0xc8]
mov rcx, qword [rdi]
lea r8, [rsp + 0x80]
mov edx, 0xa
mov rax, qword [rcx]
call qword [rax + 0x40]
mov qword [rbx + 8], rax
test rax, rax
je 0x1400063bb
mov rcx, qword [rdi]
lea r8, [rsp + 0x80]
mov edx, 0xb
mov rax, qword [rcx]
call qword [rax + 0x40]
mov qword [rbx + 0x10], rax
test rax, rax
je 0x140006396
mov rcx, qword [rdi]
lea r8, [rbx + 0x28]
lea rdx, [rbx + 0x20]
mov rax, qword [rcx]
call qword [rax + 0x3b8]
test eax, eax
je 0x140006371
mov rdx, rbx
mov rcx, rdi
call fcn.14000685c
mov rcx, qword [rdi]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0xe8]
xor r9d, r9d
mov rsi, rax
test rax, rax
je 0x1400062f5
mov r8d, dword [rsp + 0x78]
imul r15d, r8d, 0x64
cmp ebp, dword [rdi + 0xf0]
jae 0x1400062f5
mov rcx, qword [rdi + 0xe8]
mov eax, r15d
cdq
inc r8d
add r15d, 0x64
mov dword [rsp + 0x78], r8d
idiv dword [rcx + 0x3c]
mov rcx, qword [rdi + 8]
mov ebp, eax
cmp dword [rcx + 0x58], r9d
je 0x1400061cf
mov edx, dword [rsi + 0x34]
mov rcx, rdi
call fcn.140005e50
mov rdx, rax
lea rcx, [0x14000de30]
mov r8d, ebp
call fcn.14000bf6c
mov r8d, dword [rsi + 0x34]
xor edx, edx
mov eax, r8d
div dword [0x140032e7c]
mov rax, qword [0x140032e30]
movsxd rcx, edx
mov rbp, qword [rax + rcx*8]
test rbp, rbp
je 0x140006341
cmp dword [rbp + 8], r8d
je 0x140006201
mov rbp, qword [rbp]
jmp 0x1400061ec
mov rbp, qword [rbp + 0x10]
test rbp, rbp
je 0x140006341
mov rcx, qword [rdi]
mov edx, r8d
mov rax, qword [rcx]
call qword [rax + 0x68]
movsxd rax, dword [rsi + 0x28]
add rax, qword [rbx + 8]
mov qword [rbp + 0x80], rax
test byte [rsi + 0x14], 1
je 0x140006235
movzx eax, word [rsi + 0x3c]
jmp 0x140006239
movzx eax, word [rsi + 8]
mov word [rbp + 0x98], ax
mov rdx, rsi
movzx eax, word [rsi + 0xc]
mov word [rbp + 0x9a], ax
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax + 0xf0]
mov r9, rbx
mov qword [rbp + 8], rbx
mov r8, rbp
mov rdx, rsi
mov rcx, rdi
call fcn.14000872c
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax + pe_nt_image_headers64]
mov edx, dword [rsp + 0x70]
xor ecx, ecx
mov rax, qword [rdi + 0xf8]
mov qword [rax + rdx*8], rbp
inc edx
mov rax, qword [0x140033e88]
test rax, rax
mov dword [rsp + 0x70], edx
cmove rax, rbp
mov qword [0x140033e88], rax
mov rax, qword [rsp + 0x88]
test rax, rax
je 0x1400062bb
mov qword [rax + 0xa0], rbp
mov qword [rbp + 0xa0], rcx
mov rdx, rsi
mov word [rbp + 0x50], cx
mov rcx, qword [rdi]
mov qword [rsp + 0x88], rbp
mov rax, qword [rcx]
call qword [rax + 0xe8]
mov r8d, dword [rsp + 0x78]
xor r9d, r9d
mov ebp, dword [rsp + 0x70]
mov rsi, rax
test rax, rax
jne 0x140006180
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax + 0xe0]
xor esi, esi
mov rcx, qword [rdi]
mov rdx, r14
mov rax, qword [rcx]
call qword [rax + 0x58]
mov r14, rax
test rax, rax
jne 0x140006081
mov rax, qword [rdi + 8]
cmp dword [rax + 0x1c], esi
je 0x14000632e
mov ecx, 0x2f5c
call fcn.14000bedc
xor eax, eax
add rsp, 0x28
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rbx, qword [rdi + 8]
mov ecx, 0x2ee1
call fcn.14000baf4
mov r8, qword [rbx + 0x40]
mov rcx, rax
mov edx, 0x42e
call fcn.14000a918
mov rcx, qword [rdi]
mov rax, qword [rcx]
call qword [rax + 0xe0]
or eax, 0xffffffff
jmp 0x140006330
mov ecx, 0x2ee1
call fcn.14000baf4
mov r8, qword [rbx + 0x38]
mov rcx, rax
mov edx, 0x425
call fcn.14000aa64
mov ecx, r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0x2ee1
call fcn.14000baf4
mov r8, qword [rbx + 0x38]
mov rcx, rax
mov edx, 0x425
call fcn.14000aa64
mov ecx, r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0x2ee1
call fcn.14000baf4
mov r8, qword [rbx + 0x38]
mov rcx, rax
mov edx, 0x425
call fcn.14000aa64
mov ecx, r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3