Function at 0x140002986
Capabilities:
Terminate process

Disassembly:
xor rax, rax
push rax
push rax
push rax
push rax
push rax
push rax
sub rsp, 0x28
call fcn.14003d020
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14003cc00
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.140003c55
add rsp, 0x28
lea rcx, [rsp + 0x30]
pop rdx
call fcn.14003ccc0
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCurrentProcessId
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140036c50
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.14003ccc0
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
movabs rcx, 0x1400dbed2
sub rsp, 0x28
call fcn.14003cc50
add rsp, 0x28
mov rcx, qword [rsp + 0x48]
sub rsp, 0x28
call fcn.14003cc50
add rsp, 0x28
call fcn.14003cef0
push qword [rsp + 0x40]
push rax
call fcn.14003cec0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140036cb0
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140009e50
add rsp, 0x28
pop rax
and rax, rax
je 0x140002cd4
mov qword [rsp + 0x38], 1
jmp 0x140002abb
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push qword [rsp + 0x30]
pop rcx
pop rdx
call fcn.140037060
cmp rax, qword [rsp + 0x38]
jl 0x140002cd4
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push qword [rsp + 0x58]
push qword [rsp + 0x50]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037100
add rsp, 0x28
lea rcx, [rsp + 0x48]
pop rdx
call fcn.14003ccc0
push 1
push rcx
sub rsp, 0x20
call fcn.14003cc00
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
movabs rcx, 0x1400dbed2
sub rsp, 0x28
call fcn.14003cc50
add rsp, 0x28
mov rcx, qword [rsp + 0x48]
sub rsp, 0x28
call fcn.14003cc50
add rsp, 0x28
call fcn.14003cef0
push qword [rsp + 0x58]
push rax
call fcn.14003cec0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140036cb0
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.140009e50
add rsp, 0x20
pop rax
and rax, rax
je 0x140002bc4
mov rax, 1
jmp 0x140002bc7
xor rax, rax
cmp rax, qword [rsp]
jne 0x140002cc8
push rcx
sub rsp, 0x20
call fcn.14003cc00
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push 1
push qword [rsp + 0x78]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037100
add rsp, 0x28
push rax
call fcn.14003cec0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140037280
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.140009e50
add rsp, 0x20
pop rax
mov rax, rax
push rax
pop rax
mov dword [rsp + 0x50], eax
sub rsp, 8
movsxd rax, dword [rsp + 0x58]
mov rax, rax
push rax
push 0
push 1
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call sub.KERNEL32.dll_OpenProcess
add rsp, 0x28
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
je 0x140002cc8
sub rsp, 8
push 1
push qword [rsp + 0x68]
pop rcx
pop rdx
sub rsp, 0x20
call sub.KERNEL32.dll_TerminateProcess
add rsp, 0x28
sub rsp, 8
push qword [rsp + 0x60]
pop rcx
sub rsp, 0x20
call sub.KERNEL32.dll_CloseHandle
add rsp, 0x28
pop rax
inc qword [rsp + 0x38]
jno 0x140002abb
xor rax, rax
push rax
mov rcx, qword [rsp + 0x48]
sub rsp, 0x28
call fcn.14003d0c0
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.14003d0c0
add rsp, 0x28
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.14003d0c0
add rsp, 0x28
pop rax
add rsp, 0x58
ret