Function at 0x1400132f0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
lea rcx, [0x140013190]
xor edi, edi
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
xor ecx, ecx
call fcn.140025cc0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call fcn.1400241bc
movabs rcx, 0xc2f7f2456d3d6b60
mov qword [rsp + 0x30], rdi
mov qword [rbp - 1], rcx
movabs rax, 0x26ac35e01a04f223
mov qword [rbp - 0x29], rax
xor r9d, r9d
mov qword [rbp - 0x21], rcx
movabs rax, 0x26c054ae462aae7f
movdqa xmm0, xmmword [rbp - 0x29]
lea rcx, [rbp - 9]
mov qword [rbp - 9], rax
xor r8d, r8d
xorps xmm0, xmmword [rbp - 9]
xor edx, edx
mov dword [rsp + 0x28], 0x80
movdqa xmmword [rbp - 9], xmm0
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
movabs rsi, 0xbeb61f84b3ddb14b
movabs rbx, 0xac761c3fd7a7eb82
movabs r14, 0x2aee08a1dd6cdb60
movabs r15, 0x5f3ab9dafa2fef95
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x140013479
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0xd7c45ba4eef0ea41
mov qword [rbp - 0x29], rsi
mov qword [rbp - 9], rax
lea rdx, [rbp - 9]
movabs rax, 0x4bce7bc8fd1ebe16
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
lea rcx, [0x1403b1b80]
mov qword [rbp - 1], rax
movabs rax, 0x361ac0be9b4a9df9
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], rax
movabs rax, 0xac76325aa4d2cbec
mov qword [rbp + 0xf], rax
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x19], r15
xorps xmm0, xmm1
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 7], xmm2
movdqa xmmword [rbp - 9], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140002f40
mov qword [0x1403b3430], rax
movabs rdi, 0xd7d759a4eef0ea41
inc rax
test rax, 0xfffffffffffffffe
jne 0x140013533
movabs rax, 0x46ce67d5fd08be0c
mov qword [rbp - 9], rdi
mov qword [rbp - 1], rax
lea rdx, [rbp + 0x17]
movups xmm1, xmmword [rbp - 9]
movabs rax, 0x2953cbbeda4b8efa
mov qword [rbp - 0x29], rsi
mov qword [rbp + 7], rax
lea rcx, [0x1403b1b80]
movabs rax, 0xac761c3fd78999e7
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
mov qword [rbp + 0xf], rax
xorps xmm0, xmm1
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
call fcn.1400036d0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140005790
movabs r12, 0x69ce67d5fd08be0c
movabs r13, 0x3e48cdfa944e8af9
test al, al
jne 0x1400135d5
movabs rax, 0xac762d1cf7d48ee1
mov qword [rbp - 9], rdi
mov qword [rbp + 0xf], rax
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], r12
lea rcx, [0x1403b1b80]
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r13
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
call fcn.1400036d0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140005ec0
test al, al
jne 0x14001365a
movabs rax, 0xac762e1cf7d48ee1
mov qword [rbp - 9], rdi
mov qword [rbp + 0xf], rax
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], r12
lea rcx, [0x1403b1b80]
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r13
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x1403b3430]
call fcn.140004b70
test al, al
jne 0x1400136e6
movabs rax, 0xac762f1cf7d48ee1
mov qword [rbp - 9], rdi
mov qword [rbp + 0xf], rax
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], r12
lea rcx, [0x1403b1b80]
movups xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r13
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmm1
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x1403b3430]
call fcn.14000d450
test rax, rax
jne 0x140013790
movabs rax, 0x47ce67d5fd08be0c
mov qword [rbp - 9], rdi
mov qword [rbp - 1], rax
lea rdx, [rbp + 0x17]
movups xmm1, xmmword [rbp - 9]
movabs rax, 0x3a4cd0a89e0f9ff4
mov qword [rbp - 0x29], rsi
mov qword [rbp + 7], rax
lea rcx, [0x1403b1b80]
movabs rax, 0xac761c3fd7a7c5f0
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
mov qword [rbp + 0xf], rax
xorps xmm0, xmm1
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
call fcn.1400036d0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.1400036d0
movabs rax, 0xd7c47ba4eef6ea41
mov qword [rbp + 0xf], rbx
mov qword [rbp - 9], rax
lea rdx, [rbp + 0x17]
movabs rax, 0x5a9e69ccfd1ebe16
mov qword [rbp - 0x29], rsi
mov qword [rbp - 1], rax
lea rcx, [0x1403b1b80]
movups xmm1, xmmword [rbp - 9]
movabs rax, 0x5f3ab9dafa0e8bf0
mov qword [rbp - 0x21], r14
movdqa xmm0, xmmword [rbp - 0x29]
mov qword [rbp + 7], rax
xorps xmm0, xmm1
movups xmm2, xmmword [rbp + 7]
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], rbx
xorps xmm2, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x27], xmm2
movdqa xmmword [rbp + 0x17], xmm0
call fcn.14000a3b0
mov rcx, rax
call fcn.14000a660
lea r11, [rsp + 0xa0]
mov eax, 1
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret