Function at 0x140077910
Capabilities:
Acquire debug privileges
Terminate process

Disassembly:
push rbx
sub rsp, 0xb0
mov rax, qword [0x140134bf8]
xor rax, rsp
mov qword [rsp + 0xa0], rax
call fcn.14007a880
test eax, eax
jne 0x14007795e
lea rcx, [rsp + 0x48]
call fcn.14007ac70
nop
mov rcx, rax
call fcn.140085b10
nop
lea rcx, [rsp + 0x48]
call fcn.140041b40
mov ecx, 0x65e
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, str.SeDebugPrivilege
call fcn.140086f60
lea rcx, str.SeImpersonatePrivilege
call fcn.140086f60
lea rcx, [rsp + 0x48]
call fcn.1400831c0
mov r8, rax
movabs rax, 0x24cdff561ad93ce6
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x30], rcx
movabs rdx, 0x2b4b6fbc509dd78
mov qword [rsp + 0x20], rdx
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x38], rcx
movabs rax, 0x24cdff5637b451ab
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x20], rdx
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x98], rax
movdqa xmm0, xmmword [rsp + 0x90]
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.140078360
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x140077a45
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140077a40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140077bd7
call fcn.1400ae030
movdqa xmm0, xmmword [0x14011c220]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
lea r8, [rsp + 0x70]
cmp qword [rsp + 0x88], 0x10
cmovae r8, qword [rsp + 0x70]
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
test rax, rax
je 0x140077a8a
mov ecx, IStream_Read
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea r8, [rsp + 0x70]
cmp qword [rsp + 0x88], 0x10
cmovae r8, qword [rsp + 0x70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov rbx, rax
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x68]
call fcn.140071fa0
call fcn.14007adb0
test al, al
jne 0x140077acf
mov ecx, 0x675
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.1400834d0
nop
call fcn.14003d860
nop
jmp 0x140077ae2
call fcn.14003e8f0
call fcn.14003ef90
call fcn.14003fda0
call fcn.14003cd10
call fcn.140062590
call fcn.140065270
call fcn.140032f30
nop
call fcn.14003b110
nop
jmp 0x140077b13
call fcn.140039b30
call fcn.140078590
call fcn.14003c230
call fcn.140037b20
call fcn.140034de0
call fcn.140037e10
nop
call fcn.14007fbe0
nop
jmp 0x140077b3f
call fcn.140076f20
test rbx, rbx
je 0x140077b5b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x140134ed8], 0
je 0x140077b6a
call fcn.140077bf0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x140077ba6
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140077ba1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140077bdd
call fcn.1400ae030
movdqa xmm0, xmmword [0x14011c220]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
xor eax, eax
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.1400ae010
add rsp, 0xb0
pop rbx
ret
call fcn.140091028
nop
call fcn.140091028
int3