Function at 0x140075820
Capabilities:
Acquire debug privileges
Terminate process

Disassembly:
push rbx
sub rsp, 0xb0
mov rax, qword [0x140131c08]
xor rax, rsp
mov qword [rsp + 0xa0], rax
call fcn.140078690
test eax, eax
jne 0x14007586e
lea rcx, [rsp + 0x48]
call fcn.140078a80
nop
mov rcx, rax
call fcn.140083e40
nop
lea rcx, [rsp + 0x48]
call fcn.140041760
mov ecx, 0x65e
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, str.SeDebugPrivilege
call fcn.140085290
lea rcx, str.SeImpersonatePrivilege
call fcn.140085290
lea rcx, [rsp + 0x48]
call fcn.1400814f0
mov r8, rax
movabs rax, 0xace628c892fce7e2
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x30], rcx
movabs rdx, 0x71ab4f997033ec1c
mov qword [rsp + 0x20], rdx
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x38], rcx
movabs rax, 0xace628c8bf918aaf
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x20], rdx
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x98], rax
movdqa xmm0, xmmword [rsp + 0x90]
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.140076260
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x140075955
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075950
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075ade
call fcn.1400ab870
movdqa xmm0, xmmword [0x14011a1a0]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
lea r8, [rsp + 0x70]
cmp qword [rsp + 0x88], 0x10
cmovae r8, qword [rsp + 0x70]
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
test rax, rax
je 0x14007599a
mov ecx, 0xb7
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r8, [rsp + 0x70]
cmp qword [rsp + 0x88], 0x10
cmovae r8, qword [rsp + 0x70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov rbx, rax
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x68]
call fcn.14006ffc0
call fcn.140078bc0
test al, al
jne 0x1400759df
mov ecx, 0x675
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.140081800
nop
call fcn.14003d480
nop
jmp 0x1400759f2
call fcn.14003e510
call fcn.14003ebb0
call fcn.14003f9c0
call fcn.14003c930
call fcn.140060640
call fcn.140063320
call fcn.140032b90
call fcn.14003ad70
call fcn.140039790
call fcn.140076490
call fcn.14003be50
call fcn.140037780
call fcn.140034a40
call fcn.140037a70
nop
call fcn.14007dda0
nop
jmp 0x140075a46
call fcn.140074e30
test rbx, rbx
je 0x140075a62
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x140131ed0], 0
je 0x140075a71
call fcn.140075af0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x140075aad
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075aa8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075ae4
call fcn.1400ab870
movdqa xmm0, xmmword [0x14011a1a0]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
xor eax, eax
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.1400ab850
add rsp, 0xb0
pop rbx
ret
call fcn.14008f288
nop
call fcn.14008f288
int3