Function at 0x140027310
Capabilities:
Terminate process

Disassembly:
push rbp
push rdi
sub rsp, 0x1b8
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x2e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14003d028]
xor rax, rbp
mov qword [rbp + 0x160], rax
lea rcx, [0x140044081]
call fcn.140011a7d
cmp dword [0x14003d680], 0
je 0x140027360
mov eax, 1
jmp 0x1400276f2
call fcn.1400110d7
mov dword [0x14003d680], eax
cmp dword [0x14003d680], 0
je 0x1400276ec
lea rcx, [0x14003d668]
call fcn.14001137f
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140011352
mov qword [rbp + 8], rax
mov dword [rbp + 0x24], 0
xor eax, eax
cmp eax, 1
je 0x140027459
lea rax, [rbp + 0x48]
mov rdi, rax
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
movsxd rax, dword [rbp + 0x24]
imul rax, rax, 0x10
mov rcx, qword [rbp + 8]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x158], rax
lea rcx, [0x14003d5a0]
call fcn.14001137f
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0x10
mov rcx, qword [rbp + 0x158]
mov r8, rcx
lea rdx, [rbp + 0x48]
mov rcx, rax
call fcn.140011352
cmp qword [rbp + 0x48], 0
jne 0x14002744c
jmp 0x140027459
mov eax, dword [rbp + 0x24]
inc eax
mov dword [rbp + 0x24], eax
jmp 0x1400273c3
lea rax, [rbp + 0x78]
mov rdi, rax
xor eax, eax
mov ecx, 0x10
rep stosb byte [rdi], al
lea rcx, [0x14003d5a0]
call fcn.14001137f
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0x10
mov r8, qword [rbp + 8]
lea rdx, [rbp + 0x78]
mov rcx, rax
call fcn.140011352
mov rax, qword [rbp + 0x78]
mov qword [0x14003d580], rax
mov eax, dword [rbp + 0x24]
dec eax
cdqe
imul rax, rax, 0x10
mov rcx, qword [rbp + 8]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x158], rax
lea rcx, [0x14003d5a0]
call fcn.14001137f
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0x10
mov rcx, qword [rbp + 0x158]
mov r8, rcx
lea rdx, [rbp + 0x78]
mov rcx, rax
call fcn.140011352
mov rax, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x78]
add rcx, rax
mov rax, rcx
mov qword [0x14003d588], rax
lea rcx, [0x14003d650]
call fcn.14001137f
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp + 8]
mov rcx, rax
call fcn.140011352
lea rcx, [0x14003d678]
call fcn.14001137f
mov qword [0x14003d590], rax
mov rax, qword [0x14003d590]
add rax, 0x90
mov qword [0x14003d590], rax
lea rcx, [0x14003d5a0]
call fcn.14001137f
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 8
mov r8, qword [0x14003d590]
lea rdx, [0x14003d590]
mov rcx, rax
call fcn.140011352
lea rcx, [0x14003d678]
call fcn.14001137f
mov qword [0x14003d598], rax
mov rax, qword [0x14003d598]
add rax, 0x98
mov qword [0x14003d598], rax
lea rcx, [0x14003d5a0]
call fcn.14001137f
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 8
mov r8, qword [0x14003d598]
lea rdx, [0x14003d598]
mov rcx, rax
call fcn.140011352
mov rax, qword [0x14003d630]
cmp qword [0x14003d590], rax
jb 0x14002768f
mov rax, qword [0x14003d638]
mov rcx, qword [0x14003d630]
add rcx, rax
mov rax, rcx
cmp qword [0x14003d590], rax
jbe 0x1400276a7
lea rcx, str._RX.exe__KdMapPhysicalMemory64_cant_be_used_n
call fcn.1400114d8
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rax, qword [0x14003d630]
cmp qword [0x14003d598], rax
jb 0x1400276d4
mov rax, qword [0x14003d638]
mov rcx, qword [0x14003d630]
add rcx, rax
mov rax, rcx
cmp qword [0x14003d598], rax
jbe 0x1400276ec
lea rcx, str._RX.exe__KdUnmapVirtualAddress_cant_be_used_n
call fcn.1400114d8
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x14003d680]
mov rdi, rax
lea rcx, [rbp - 0x40]
lea rdx, [0x1400378f0]
call fcn.1400118d4
mov rax, rdi
mov rcx, qword [rbp + 0x160]
xor rcx, rbp
call fcn.140011505
lea rsp, [rbp + 0x178]
pop rdi
pop rbp
ret