Function at 0x140006f20
Capabilities:
Terminate process

Disassembly:
mov r11, rsp
mov dword [r11 + 0x20], r9d
push rsi
push rdi
push r13
push r14
sub rsp, 0xa8
mov r14, qword [rcx + 0x108]
mov rdi, rcx
mov rax, qword [rcx + 0x78]
add r14, r8
lea rcx, [rdx + 0x3b0]
mov qword [rsp + 0xe0], r14
mov r8d, 8
mov qword [rsp + 0xd0], 0
lea rdx, [r11 + 0x10]
mov qword [r11 + 0x10], rax
mov esi, r9d
xor r13d, r13d
call fcn.1400452a0
test rax, rax
je 0x1400072e9
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x1400072e9
mov qword [rsp + 0x88], r15
call fcn.140008520
mov r15, rax
test rax, rax
je 0x1400072e1
mov rax, qword [rdi]
mov rcx, rdi
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0x98], rbp
mov qword [rsp + 0x90], r12
call qword [rax + 0x38]
cmp eax, 0x1e
jne 0x140006fe2
mov rax, qword [rdi + 0x100]
cmp qword [rdi + 0xf0], rax
je 0x1400072b3
mov dword [rsp + 0x30], r13d
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x28], 8
xor r9d, r9d
mov r8d, reloc.WS2_32.dll_recv
mov qword [rsp + 0x20], 8
xor ecx, ecx
call fcn.14003f9b0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x38]
cmp eax, 0x1f
je 0x14000702a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x38]
cmp eax, 0x18
jne 0x140007084
lea rcx, [rdi + 0xa8]
call fcn.140044810
test al, al
jne 0x140007084
mov edx, dword [r15 + 8]
xor ecx, ecx
shl rdx, 4
mov r8d, 0x20
call fcn.14003b8b0
mov edx, dword [r15 + 8]
xor ecx, ecx
shl rdx, 4
mov r8d, 0x20
mov rbx, rax
mov qword [rsp + 0xd0], rax
call fcn.14003b8b0
mov r13, rax
test rbx, rbx
je 0x140007345
test rax, rax
je 0x140007345
mov rbp, qword [rdi + 0xf0]
cmp rbp, qword [rdi + 0x100]
jae 0x14000724b
lea rax, [rdi + 0x80]
nop
mov r9, rbp
mov qword [rsp + 0x20], r13
mov r8, rax
mov rdx, r15
mov rcx, rdi
mov r12, rbp
call fcn.140006da0
mov r14, rax
test rax, rax
je 0x14000731e
add rbp, rax
xor ebx, ebx
cmp esi, 0x1f
je 0x1400070dd
cmp esi, 0x18
je 0x1400070dd
lea rsi, [rdi + 0xa8]
jmp 0x140007111
mov rax, qword [rsp + 0xd0]
lea rsi, [rdi + 0xa8]
mov r8, rsi
mov qword [rsp + 0x20], rax
mov r9, rbp
mov rdx, r15
mov rcx, rdi
call fcn.140006da0
mov rbx, rax
test rax, rax
je 0x1400072f7
add rbp, rax
lea rdx, [rbx + r14]
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x48], rdx
call fcn.14003b8b0
mov qword [rsp + 0x40], rax
mov r10, rax
test rax, rax
je 0x14000738d
test rbx, rbx
je 0x140007201
test r13, r13
jne 0x140007162
lea rdx, [r14 + r12]
mov r8, rbx
mov rcx, rax
call fcn.140092830
mov rcx, qword [rsp + 0x40]
mov r8, r14
add rcx, rbx
jmp 0x140007209
xor eax, eax
lea r11, [rdi + 0x80]
cmp dword [r15 + 8], eax
jbe 0x1400071de
mov r10, qword [rsp + 0xd0]
nop dword [rax]
mov ecx, eax
mov edx, 1
shr rcx, 6
mov r9d, eax
lea r8, [rcx*8]
movzx ecx, al
and cl, 0x3f
shl rdx, cl
mov rcx, qword [r11]
test qword [r8 + rcx], rdx
je 0x1400071ca
mov rcx, qword [rsi]
test qword [r8 + rcx], rdx
je 0x1400071ca
add r9, r9
movups xmm0, xmmword [r10 + r9*8]
movups xmm1, xmmword [r13 + r9*8]
movups xmmword [r13 + r9*8], xmm0
movups xmmword [r10 + r9*8], xmm1
inc eax
cmp eax, dword [r15 + 8]
jb 0x140007180
mov r10, qword [rsp + 0x40]
lea rsi, [rdi + 0xa8]
mov r8, r10
mov rdx, r13
mov rcx, r11
call fcn.1400095e0
mov rdx, qword [rsp + 0xd0]
mov r8, rax
mov rcx, rsi
call fcn.1400095e0
jmp 0x140007211
mov r8, qword [rsp + 0x48]
mov rcx, rax
mov rdx, r12
call fcn.140092830
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.14003fa50
test al, al
jne 0x140007369
lea rax, [rdi + 0x80]
mov esi, dword [rsp + 0xe8]
cmp rbp, qword [rdi + 0x100]
jb 0x1400070a0
mov r14, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0x58]
test rdi, rdi
je 0x14000728f
mov rsi, rdi
shl rsi, 4
nop dword [rax]
mov rbx, qword [rsp + 0x50]
mov rcx, r14
add rbx, rsi
mov r8, qword [rbx - 8]
mov rdx, qword [rbx - 0x10]
call fcn.140092830
mov rcx, qword [rbx - 0x10]
add r14, qword [rbx - 8]
call fcn.14003b830
add rsi, 0xfffffffffffffff0
sub rdi, 1
jne 0x140007260
lea rcx, [rsp + 0x50]
call fcn.14003f8e0
test r13, r13
je 0x1400072b3
mov rcx, r13
call fcn.14003b830
mov rcx, qword [rsp + 0xd0]
call fcn.14003b830
mov rcx, qword [r15 + 0x28]
call fcn.14003b830
mov edx, 0x30
mov rcx, r15
call fcn.14008ddc4
mov r12, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xa0]
mov r15, qword [rsp + 0x88]
add rsp, 0xa8
pop r14
pop r13
pop rdi
pop rsi
ret
mov ecx, 2
call sub.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func
mov rcx, rax
lea rdx, str._nError_row_length:__zu_n
xor r8d, r8d
call fcn.140018470
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
int3
mov ecx, 2
call sub.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func
mov rcx, rax
lea rdx, str._nError_row_length:__zu_n
xor r8d, r8d
call fcn.140018470
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
int3
mov ecx, 2
call sub.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func
mov rcx, rax
lea rdx, str._nError:_Out_of_memory._Could_not_exchange_to_flashback_event._n
call fcn.140018470
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
int3
mov ecx, 2
call sub.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func
mov rcx, rax
lea rdx, str._nError:_Out_of_memory._Could_not_push_flashback_event_into_array._n
call fcn.140018470
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
int3
mov ecx, 2
call sub.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func
mov rcx, rax
lea rdx, str._nError:_Out_of_memory._Could_not_exchange_to_flashback_event._n
call fcn.140018470
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
int3