Function at 0x140006dd0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x210
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
movabs rax, 0x2b18d30e8af39b94
movabs rcx, 0xadf4b130e4cfa9a1
mov qword [rbp], rax
movabs r14, 0x2b49d33b8a879bc5
mov rax, qword [rbp]
movabs rsi, 0xad90b15ee4a6a9f6
mov qword [rbp + 0x20], rax
movabs r15, 0x7e10a7f1555cb127
mov qword [rbp], rcx
movabs r12, 0x1c57a6cc95a8cb90
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x7e73a7b8552bb148
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x1c57a6cc95c6cbff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x2b2ad3548af59b95
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqu ymmword [rbp + 0x20], ymm1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xadd8b12de4d5a993
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x7e75a79a553fb146
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x1c57a6cc95a8cbe2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0x2b27d3528ae69b88
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqu ymmword [rbp + 0x180], ymm1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x7e7ca7b2552bb148
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x1c19a6bf95dbcbf1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x8eaed1fae76c2d28
movabs r13, 0x2134adc260f7ebba
mov qword [rbp], rax
movabs rcx, 0x8eaed19fe7012d49
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], r13
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqa xmm2, xmmword [rbp + 0xc0]
mov qword [rbp + 0x108], rax
movabs rax, 0x2b2ad3488aee9ba1
vxorps xmm2, xmm2, xmmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqa xmmword [rbp + 0xc0], xmm2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0xad90b13ae4d4a999
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
vmovdqa xmm0, xmmword [rbp + 0x10]
mov qword [rbp + 0xe8], rax
movabs rax, 0x2b2dd3558aee9b92
vxorps xmm0, xmm0, xmmword [rbp + 0xe0]
vmovdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xadd6b12de4d1a999
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x7e63a79c552eb148
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x1c00a6e29598cba1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x8ec1d1fbe76f2d20
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x211aadfa60d9ebcd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xbffeb685c6f6742a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x6dec40a35ae9bb44
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x3d18f2c74bfb656e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xdf71c1c63361dd3a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0xbfd0b6f5c686744b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0x6ddf40905ac7bb74
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movabs rax, 0x3d21f2a34bcb650d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0xdf71c1c63361dd5e
mov qword [rbp], rax
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqu ymm0, ymmword [rbp + 0x60]
vmovdqa xmm2, xmmword [rbp + 0x80]
mov qword [rbp + 0x168], rax
movabs rax, 0x2b78d30e8af39b94
vxorps xmm2, xmm2, xmmword [rbp + 0x160]
vmovdqa ymmword [rbp + 0x40], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqa xmmword [rbp + 0x80], xmm2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0xadc4b10fe495a9c3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x7e7ea798550bb176
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0x1c1ea6bb95c7cbf4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0x8eaed1f1e76e2d2a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r15
xor edx, edx
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], rcx
lea rcx, [rbp + 0x20]
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], r13
mov rax, qword [rbp]
vmovdqa xmm2, xmmword [rbp + 0x140]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
mov qword [rbp + 0x108], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqa xmmword [rbp + 0x140], xmm2
vzeroupper
call qword [sym.imp.USER32.dll_FindWindowW]
xor ebx, ebx
lea rcx, [rbp + 0x180]
test rax, rax
setne bl
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
mov edi, 1
lea rcx, [rbp + 0xa0]
test rax, rax
cmovne ebx, edi
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
lea rcx, [rbp + 0x10]
cmovne ebx, edi
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
lea rcx, [rbp + 0x40]
cmovne ebx, edi
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
lea rcx, [rbp + 0x120]
cmovne ebx, edi
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
lea rcx, str.Window
cmovne ebx, edi
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140007498
test ebx, ebx
je 0x1400076ad
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
movabs rax, 0x2b2ebd52e4f5fa92
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x10]
mov qword [rbp + 0xe8], rax
movabs rax, 0x5c26bf57ebf4f281
xorps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xdff7de2c9486cd93
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x1a7ed29e337cdc46
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x7924c7a9f9f8ebbe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0xe78eb4ec886d4e69
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x4546c2e20e9ecbce
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xcda0969ab2a6062e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x6ddf6ef43fa2d81b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0x8eaed19fe7012d49
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0xbfd0b6f5c686744b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0x6ddf40905ac7bb74
mov qword [rbp], rax
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
mov qword [rbp + 0x158], rax
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x180], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x1a0], ymm1
mov r9d, 0x30
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x180]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.14000b720
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret