Function at 0x140012f50
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
lea rcx, [0x140012e00]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
xor ecx, ecx
call fcn.140024d10
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call fcn.14002320c
movabs rcx, 0xd26923cc383734ee
mov qword [rsp + 0x30], 0
mov qword [rbp - 0x38], rcx
movabs rax, 0xe4c546b109fd1ff5
mov qword [rbp - 0x20], rax
xor r9d, r9d
mov qword [rbp - 0x18], rcx
movabs rax, 0xe4a927ff55d343a9
mov qword [rbp - 0x40], rax
lea rcx, [rbp - 0x40]
movdqa xmm0, xmmword [rbp - 0x40]
xor r8d, r8d
pxor xmm0, xmmword [rbp - 0x20]
xor edx, edx
mov dword [rsp + 0x28], 0x80
movdqa xmmword [rbp - 0x40], xmm0
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
movabs rsi, 0xae5bed1b9b34c165
movabs rbx, 0x854f0710bacee998
movabs r14, 0x79d4380ae3859b5e
movabs r15, 0x36abf8e10ef8da47
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400130da
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0xc729a93bc6199a6f
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x20], rax
lea rdx, [rbp - 0x20]
movabs rax, 0x18f44b63c3f7fe28
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
lea rcx, [0x1403b5b20]
mov qword [rbp - 0x18], rax
movabs rax, 0x5f8b81856f9da82b
pxor xmm0, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], rax
movabs rax, 0x854f2975c9bbc9f6
mov qword [rbp - 8], rax
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
movdqa xmm1, xmmword [rbp - 0x30]
pxor xmm1, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a920
mov rcx, rax
call fcn.14000ab90
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140002e90
mov qword [0x1403b7420], rax
movabs rdi, 0xc73aab3bc6199a6f
inc rax
test rax, 0xfffffffffffffffe
jne 0x140013194
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
movabs rax, 0x15f4577ec3e1fe32
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x18], rax
lea rcx, [0x1403b5b20]
movabs rax, 0x40c28a852e9cbb28
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
pxor xmm0, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], rax
movabs rax, 0x854f0710bae09bfd
mov qword [rbp - 8], rax
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
movdqa xmm1, xmmword [rbp - 0x30]
pxor xmm1, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a920
mov rcx, rax
call fcn.14000ab90
call fcn.1400038c0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.1400057f0
movabs r12, 0x3af4577ec3e1fe32
movabs r13, 0x57d98cc16099bf2b
test al, al
jne 0x140013236
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x18], r12
lea rcx, [0x1403b5b20]
movdqa xmm0, xmmword [rbp - 0x20]
movabs rax, 0x854f36339abd8cfb
mov qword [rbp - 8], rax
mov qword [rbp - 0x10], r13
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
movdqa xmm1, xmmword [rbp - 0x30]
pxor xmm1, xmmword [rbp - 0x10]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmmword [rbp - 0x10], xmm1
call fcn.14000a920
mov rcx, rax
call fcn.14000ab90
call fcn.1400038c0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140005ed0
test al, al
jne 0x1400132bb
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x18], r12
lea rcx, [0x1403b5b20]
movdqa xmm0, xmmword [rbp - 0x20]
movabs rax, 0x854f35339abd8cfb
mov qword [rbp - 8], rax
mov qword [rbp - 0x10], r13
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
movdqa xmm1, xmmword [rbp - 0x30]
pxor xmm1, xmmword [rbp - 0x10]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmmword [rbp - 0x10], xmm1
call fcn.14000a920
mov rcx, rax
call fcn.14000ab90
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x1403b7420]
call fcn.140004d20
test al, al
jne 0x140013347
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x18], r12
lea rcx, [0x1403b5b20]
movdqa xmm0, xmmword [rbp - 0x20]
movabs rax, 0x854f34339abd8cfb
mov qword [rbp - 8], rax
mov qword [rbp - 0x10], r13
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
movdqa xmm1, xmmword [rbp - 0x30]
pxor xmm1, xmmword [rbp - 0x10]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmmword [rbp - 0x10], xmm1
call fcn.14000a920
mov rcx, rax
call fcn.14000ab90
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x1403b7420]
call fcn.14000d4f0
test rax, rax
jne 0x1400133f1
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
movabs rax, 0x14f4577ec3e1fe32
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x18], rax
lea rcx, [0x1403b5b20]
movdqa xmm0, xmmword [rbp - 0x20]
movabs rax, 0x53dd91936ad8aa26
mov qword [rbp - 0x10], rax
movabs rax, 0x854f0710bacec7ea
mov qword [rbp - 8], rax
mov qword [rbp - 0x28], rbx
movdqa xmm1, xmmword [rbp - 0x30]
pxor xmm1, xmmword [rbp - 0x10]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a920
mov rcx, rax
call fcn.14000ab90
call fcn.1400038c0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.1400038c0
mov qword [rbp - 8], rbx
lea rdx, [rbp - 0x20]
movabs rax, 0xc729893bc61f9a6f
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x20], rax
lea rcx, [0x1403b5b20]
movabs rax, 0x9a45967c3f7fe28
mov qword [rbp - 0x28], rbx
movdqa xmm1, xmmword [rbp - 0x30]
mov qword [rbp - 0x18], rax
movabs rax, 0x36abf8e10ed9be22
movdqa xmm0, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], rax
pxor xmm1, xmmword [rbp - 0x10]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
pxor xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a920
mov rcx, rax
call fcn.14000ab90
lea r11, [rsp + 0x80]
mov eax, 1
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret