Function at 0x1400131d0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
lea rcx, [0x140013070]
xor edi, edi
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
xor ecx, ecx
call fcn.140025a70
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call fcn.140023f6c
movabs rcx, 0xc4f05cd34b280e68
mov qword [rsp + 0x30], rdi
mov qword [rbp - 0x18], rcx
movabs rax, 0xa1214f7e84963adb
mov qword [rbp - 0x40], rax
xor r9d, r9d
mov qword [rbp - 0x38], rcx
movabs rax, 0xa14d2e30d8b86687
movdqa xmm0, xmmword [rbp - 0x40]
lea rcx, [rbp - 0x20]
mov qword [rbp - 0x20], rax
xor r8d, r8d
xorps xmm0, xmmword [rbp - 0x20]
xor edx, edx
mov dword [rsp + 0x28], 0x80
movdqa xmmword [rbp - 0x20], xmm0
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
movabs rsi, 0xbd127108f04178bf
movabs rbx, 0xfd79f2ff58c6cefa
movabs r14, 0x10f551a5d603e0a8
movabs r15, 0x8558ad72cbe67ec1
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x140013357
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0xd4603528ad6c23b5
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x20], rax
lea rdx, [rbp - 0x20]
movabs rax, 0x71d522ccf67185de
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
lea rcx, [0x1403b1b80]
mov qword [rbp - 0x18], rax
movabs rax, 0xec78d416aa830cad
movups xmm1, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], rax
movabs rax, 0xfd79dc9a2bb3ee94
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x30], r15
xorps xmm0, xmm1
mov qword [rbp - 0x28], rbx
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a3e0
mov rcx, rax
call fcn.14000a690
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140002f40
mov qword [0x1403b3430], rax
movabs rdi, 0xd4733728ad6c23b5
inc rax
test rax, 0xfffffffffffffffe
jne 0x140013411
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
movabs rax, 0x7cd53ed1f66785c4
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x18], rax
lea rcx, [0x1403b1b80]
movups xmm1, xmmword [rbp - 0x20]
movabs rax, 0xf331df16eb821fae
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp - 0x10], rax
xorps xmm0, xmm1
movabs rax, 0xfd79f2ff58e8bc9f
mov qword [rbp - 0x30], r15
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x28], rbx
movdqa xmmword [rbp - 0x20], xmm0
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
call fcn.14000a3e0
mov rcx, rax
call fcn.14000a690
call fcn.1400036b0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.1400057c0
movabs r12, 0x53d53ed1f66785c4
movabs r13, 0xe42ad952a5871bad
test al, al
jne 0x1400134b3
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x18], r12
lea rcx, [0x1403b1b80]
movups xmm1, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], r13
movabs rax, 0xfd79c3dc78b5ab99
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmm1
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a3e0
mov rcx, rax
call fcn.14000a690
call fcn.1400036b0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140005ef0
test al, al
jne 0x140013538
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x18], r12
lea rcx, [0x1403b1b80]
movups xmm1, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], r13
movabs rax, 0xfd79c0dc78b5ab99
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmm1
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a3e0
mov rcx, rax
call fcn.14000a690
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x1403b3430]
call fcn.140004b90
test al, al
jne 0x1400135c4
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x18], r12
lea rcx, [0x1403b1b80]
movups xmm1, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], r13
movabs rax, 0xfd79c1dc78b5ab99
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmm1
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a3e0
mov rcx, rax
call fcn.14000a690
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x1403b3430]
call fcn.14000d480
test rax, rax
jne 0x14001366e
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
movabs rax, 0x7dd53ed1f66785c4
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x18], rax
lea rcx, [0x1403b1b80]
movups xmm1, xmmword [rbp - 0x20]
movabs rax, 0xe02ec400afc60ea0
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp - 0x10], rax
xorps xmm0, xmm1
movabs rax, 0xfd79f2ff58c6e088
mov qword [rbp - 0x30], r15
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x28], rbx
movdqa xmmword [rbp - 0x20], xmm0
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
call fcn.14000a3e0
mov rcx, rax
call fcn.14000a690
call fcn.1400036b0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.1400036b0
mov qword [rbp - 8], rbx
lea rdx, [rbp - 0x20]
movabs rax, 0xd4601528ad6a23b5
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x20], rax
lea rcx, [0x1403b1b80]
movabs rax, 0x608530c8f67185de
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp - 0x18], rax
movabs rax, 0x8558ad72cbc71aa4
movups xmm1, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x30], r15
xorps xmm0, xmm1
mov qword [rbp - 0x28], rbx
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a3e0
mov rcx, rax
call fcn.14000a690
lea r11, [rsp + 0x80]
mov eax, 1
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret