Function at 0x1400131c0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
lea rcx, [0x140013060]
xor edi, edi
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
xor ecx, ecx
call fcn.140024ef4
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call fcn.140023230
movabs rcx, 0x78769b7d5f230260
mov qword [rsp + 0x30], rdi
mov qword [rbp - 0x18], rcx
movabs rax, 0xdfb6bc782627be0f
mov qword [rbp - 0x40], rax
xor r9d, r9d
mov qword [rbp - 0x38], rcx
movabs rax, 0xdfdadd367a09e253
movdqa xmm0, xmmword [rbp - 0x40]
lea rcx, [rbp - 0x20]
mov qword [rbp - 0x20], rax
xor r8d, r8d
xorps xmm0, xmmword [rbp - 0x20]
xor edx, edx
mov dword [rsp + 0x28], 0x80
movdqa xmmword [rbp - 0x20], xmm0
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
movabs rsi, 0x7e7c1ff368937755
movabs rbx, 0x254b4c8c06ee71b0
movabs r14, 0x48a240d6b21e5c06
movabs r15, 0x9a35dd797189cf67
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x140013347
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0x170e5bd335be2c5f
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x20], rax
lea rdx, [rbp - 0x20]
movabs rax, 0x298233bf926c3970
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
lea rcx, [0x1403b0b90]
mov qword [rbp - 0x18], rax
movabs rax, 0xf315a41d10ecbd0b
movups xmm1, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], rax
movabs rax, 0x254b62e9759b51de
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x30], r15
xorps xmm0, xmm1
mov qword [rbp - 0x28], rbx
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a3f0
mov rcx, rax
call fcn.14000a6a0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140002f40
mov qword [0x1403b2380], rax
movabs rdi, 0x171d59d335be2c5f
inc rax
test rax, 0xfffffffffffffffe
jne 0x140013401
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
movabs rax, 0x24822fa2927a396a
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x18], rax
lea rcx, [0x1403b0b90]
movups xmm1, xmmword [rbp - 0x20]
movabs rax, 0xec5caf1d51edae08
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp - 0x10], rax
xorps xmm0, xmm1
movabs rax, 0x254b4c8c06c003d5
mov qword [rbp - 0x30], r15
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x28], rbx
movdqa xmmword [rbp - 0x20], xmm0
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
call fcn.14000a3f0
mov rcx, rax
call fcn.14000a6a0
call fcn.1400036b0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140005770
movabs r12, 0xb822fa2927a396a
movabs r13, 0xfb47a9591fe8aa0b
test al, al
jne 0x1400134a3
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x18], r12
lea rcx, [0x1403b0b90]
movups xmm1, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], r13
movabs rax, 0x254b7daf269d14d3
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmm1
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a3f0
mov rcx, rax
call fcn.14000a6a0
call fcn.1400036b0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140005ee0
test al, al
jne 0x140013528
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x18], r12
lea rcx, [0x1403b0b90]
movups xmm1, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], r13
movabs rax, 0x254b7eaf269d14d3
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmm1
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a3f0
mov rcx, rax
call fcn.14000a6a0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x1403b2380]
call fcn.140004b90
test al, al
jne 0x1400135b4
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x18], r12
lea rcx, [0x1403b0b90]
movups xmm1, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], r13
movabs rax, 0x254b7faf269d14d3
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmm1
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a3f0
mov rcx, rax
call fcn.14000a6a0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [0x1403b2380]
call fcn.14000d480
test rax, rax
jne 0x14001365e
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
movabs rax, 0x25822fa2927a396a
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x18], rax
lea rcx, [0x1403b0b90]
movups xmm1, xmmword [rbp - 0x20]
movabs rax, 0xff43b40b15a9bf06
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp - 0x10], rax
xorps xmm0, xmm1
movabs rax, 0x254b4c8c06ee5fc2
mov qword [rbp - 0x30], r15
mov qword [rbp - 8], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x28], rbx
movdqa xmmword [rbp - 0x20], xmm0
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
call fcn.14000a3f0
mov rcx, rax
call fcn.14000a6a0
call fcn.1400036b0
mov ecx, 0x708
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.1400036b0
mov qword [rbp - 8], rbx
lea rdx, [rbp - 0x20]
movabs rax, 0x170e7bd335b82c5f
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x20], rax
lea rcx, [0x1403b0b90]
movabs rax, 0x38d221bb926c3970
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp - 0x18], rax
movabs rax, 0x9a35dd7971a8ab02
movups xmm1, xmmword [rbp - 0x20]
mov qword [rbp - 0x10], rax
movups xmm2, xmmword [rbp - 0x10]
mov qword [rbp - 0x30], r15
xorps xmm0, xmm1
mov qword [rbp - 0x28], rbx
xorps xmm2, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x10], xmm2
movdqa xmmword [rbp - 0x20], xmm0
call fcn.14000a3f0
mov rcx, rax
call fcn.14000a6a0
lea r11, [rsp + 0x80]
mov eax, 1
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret