Function at 0x140023ea0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
lea rcx, [0x140023d40]
xor edi, edi
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
movabs rcx, 0x8230561708d606a0
mov qword [rsp + 0x30], rdi
mov qword [rbp - 1], rcx
movabs rax, 0x22c2b8fadc40c653
mov qword [rbp - 0x29], rax
xor r9d, r9d
mov qword [rbp - 0x21], rcx
movabs rax, 0x22aed9b4806e9a0f
movdqa xmm0, xmmword [rbp - 0x29]
lea rcx, [rbp - 9]
mov qword [rbp - 9], rax
xor r8d, r8d
xorps xmm0, xmmword [rbp - 9]
xor edx, edx
mov dword [rsp + 0x28], pe_nt_image_headers64
movdqa xmmword [rbp - 9], xmm0
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
movabs rsi, 0xb0bb49bf77c730bd
movabs rbx, 0x5ff1e6a83c52c848
movabs r14, 0x94101ec2a6a01e6e
movabs r15, 0xef6dd685086427ff
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x140024037
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140090640]
lea rdx, [rbp - 9]
movabs rax, 0xd9c90d9f2aea6bb7
mov qword [rbp - 0x29], rsi
mov qword [rbp - 9], rax
movabs rax, 0xf5306dab86d27b18
mov qword [rbp - 1], rax
movabs rax, 0x864dafe169015593
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], rax
movabs rax, 0x5ff1c8cd4f27e826
mov qword [rbp + 0xf], rax
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
movdqa xmm1, xmmword [rbp - 0x19]
xorps xmm1, xmm2
movdqa xmmword [rbp - 9], xmm0
movdqa xmmword [rbp + 7], xmm1
call fcn.140007660
lea rdx, [0x140007830]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140002b10
mov qword [0x14040e900], rax
movabs rdi, 0xd9da0f9f2aea6bb7
inc rax
test rax, 0xfffffffffffffffe
jne 0x1400240fd
mov rcx, qword [0x140090640]
lea rdx, [rbp + 0x17]
movabs rax, 0xf83071b686c47b02
mov qword [rbp - 9], rdi
mov qword [rbp - 1], rax
movabs rax, 0x9904a4e128004690
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], rax
movabs rax, 0x5ff1e6a83c7cba2d
mov qword [rbp + 0xf], rax
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
movdqa xmm1, xmmword [rbp - 0x19]
xorps xmm1, xmm2
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmmword [rbp + 0x27], xmm1
call fcn.140007660
lea rdx, [0x140007830]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400034b0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.1400054f0
movabs r12, 0xd73071b686c47b02
movabs r13, 0x8e1fa2a566054293
test al, al
jne 0x1400241a7
mov rcx, qword [0x140090640]
lea rdx, [rbp + 0x17]
movabs rax, 0x5ff1d78b1c21ad2b
mov qword [rbp - 9], rdi
mov qword [rbp + 0xf], rax
mov qword [rbp - 1], r12
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r13
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.140007660
lea rdx, [0x140007830]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400034b0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140005bf0
test al, al
jne 0x140024238
mov rcx, qword [0x140090640]
lea rdx, [rbp + 0x17]
movabs rax, 0x5ff1d48b1c21ad2b
mov qword [rbp - 9], rdi
mov qword [rbp + 0xf], rax
mov qword [rbp - 1], r12
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r13
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.140007660
lea rdx, [0x140007830]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x14040e900]
call fcn.1400048e0
test al, al
jne 0x1400242d0
mov rcx, qword [0x140090640]
lea rdx, [rbp + 0x17]
movabs rax, 0x5ff1d58b1c21ad2b
mov qword [rbp - 9], rdi
mov qword [rbp + 0xf], rax
mov qword [rbp - 1], r12
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r13
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.140007660
lea rdx, [0x140007830]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x14040e900]
call fcn.140008f60
test rax, rax
jne 0x140024382
mov rcx, qword [0x140090640]
lea rdx, [rbp + 0x17]
movabs rax, 0xf93071b686c47b02
mov qword [rbp - 9], rdi
mov qword [rbp - 1], rax
movabs rax, 0x8a1bbff76c44579e
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], rax
movabs rax, 0x5ff1e6a83c52e63a
mov qword [rbp + 0xf], rax
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.140007660
lea rdx, [0x140007830]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400034b0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.1400034b0
mov rcx, qword [0x140090640]
lea rdx, [rbp + 0x17]
movabs rax, 0xd9c92d9f2aec6bb7
mov qword [rbp + 0xf], rbx
mov qword [rbp - 9], rax
movabs rax, 0xe4607faf86d27b18
mov qword [rbp - 1], rax
movabs rax, 0xef6dd6850845439a
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], rax
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.140007660
lea rdx, [0x140007830]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r11, [rsp + 0xa0]
mov eax, 1
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret