Function at 0x14000a250
Capabilities:
Terminate process

Disassembly:
push rdi
push rsi
push rbx
add rsp, 0xffffffffffffff80
call fcn.140002d67
lea rcx, [0x14000c368]
mov rsi, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rsi
mov qword [0x1400110a0], rax
mov rcx, rax
test rax, rax
jne 0x14000a28c
movaps xmm0, xmmword [0x14000c520]
movaps xmmword [rsp + 0x40], xmm0
jmp 0x14000a430
lea rdx, str.SetConsoleOutputCP
xor ebx, ebx
call fcn.1400029e6
mov rcx, qword [0x1400110a0]
lea rdx, str.SetConsoleCP
mov qword [0x140011108], rax
call fcn.1400029e6
xor r9d, r9d
xor r10d, r10d
xor r11d, r11d
mov qword [0x140011100], rax
lea rax, [0x140001d0a]
mov ecx, 2
mov qword [0x1400110c0], rax
lea rax, str.RangeDefectDefectExceptionRootObj
mov qword [0x1400110d8], rax
lea rax, [0x140001d5b]
mov qword [0x1400112c0], rax
lea rax, str.IndexDefectDefectExceptionRootObj
mov qword [0x1400112d8], rax
lea rax, [0x140001d5f]
mov qword [0x140011280], rax
lea rax, str.OverflowDefectArithmeticDefectDefectExceptionRootObj
mov qword [0x140011298], rax
lea rax, [0x140001d5d]
mov qword [0x140011340], rbx
mov qword [0x140011350], rbx
lea rbx, [0x1400028ec]
mov qword [0x140011320], rax
mov rdx, rbx
lea rax, str.IOErrorCatchableErrorExceptionRootObj
mov qword [0x1400110e0], r9
mov qword [0x1400110f0], r9
mov qword [0x1400112e0], r10
mov qword [0x1400112f0], r10
mov qword [0x1400112a0], r11
mov qword [0x1400112b0], r11
mov qword [0x1400110c8], 0x40
mov qword [0x1400110d0], 8
mov qword [0x1400112c8], 0x40
mov qword [0x1400112d0], 8
mov qword [0x140011288], 0x40
mov qword [0x140011290], 8
mov qword [0x140011328], 0x40
mov qword [0x140011330], 8
mov qword [0x140011338], rax
call sub.ucrtbase.dll_signal
mov rdx, rbx
mov ecx, 0xb
call sub.ucrtbase.dll_signal
mov rdx, rbx
mov ecx, 0x16
call sub.ucrtbase.dll_signal
mov rdx, rbx
mov ecx, 8
call sub.ucrtbase.dll_signal
mov rdx, rbx
mov ecx, 4
call sub.ucrtbase.dll_signal
lea rcx, [0x14000c3a8]
call rsi
mov qword [0x1400110f8], rax
mov rcx, rax
test rax, rax
jne 0x14000a43a
movaps xmm1, xmmword [0x14000c530]
movaps xmmword [rsp + 0x40], xmm1
lea rcx, [rsp + 0x40]
call fcn.140002954
lea rdx, str.OpenProcess
call fcn.1400029e6
mov rcx, qword [0x1400110f8]
lea rdx, str.VirtualAllocEx
mov qword [0x140011270], rax
call fcn.1400029e6
mov rcx, qword [0x1400110f8]
lea rdx, str.WriteProcessMemory
mov qword [0x140011260], rax
call fcn.1400029e6
mov rcx, qword [0x1400110f8]
lea rdx, str.CreateRemoteThread
mov qword [0x140011128], rax
call fcn.1400029e6
mov rdi, qword [sym.imp.ucrtbase.dll___acrt_iob_func]
xor ecx, ecx
mov qword [0x140011118], rax
call rdi
mov rsi, qword [sym.imp.ucrtbase.dll__fileno]
mov rcx, rax
call rsi
mov edx, 0x8000
mov rbx, qword [sym.imp.ucrtbase.dll__setmode]
mov ecx, eax
call rbx
mov ecx, 1
call rdi
mov rcx, rax
call rsi
mov edx, 0x8000
mov ecx, eax
call rbx
mov ecx, 2
call rdi
mov rcx, rax
call rsi
mov edx, 0x8000
mov ecx, eax
call rbx
mov ecx, 0xfde9
call qword [0x140011108]
mov ecx, 0xfde9
call qword [0x140011100]
mov r8d, 0x80e0
xor edx, edx
mov ecx, 0xffff
call qword [0x140011270]
xor edx, edx
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov qword [0x140011268], rax
mov rcx, rax
mov r8d, 0x114
call qword [0x140011260]
mov rdx, rax
test rax, rax
je 0x14000a87d
mov qword [0x140011258], rax
mov r9d, 0x114
movabs rax, 0xc0e8f0e48348fc
lea r8, [0x140011140]
mov qword [0x140011140], rax
movabs rax, 0x5152504151410000
mov qword [0x140011148], rax
movabs rax, 0x528b4865d2314856
mov qword [0x140011150], rax
movabs rax, 0x528b4818528b4860
mov qword [0x140011158], rax
movabs rax, 0xb70f4850728b4820
mov qword [0x140011160], rax
movabs rax, 0xc03148c9314d4a4a
mov qword [0x140011168], rax
movabs rax, 0x41202c027c613cac
mov qword [0x140011170], rax
movabs rax, 0xede2c101410dc9c1
mov qword [0x140011178], rax
movabs rax, 0x8b20528b48514152
mov qword [0x140011180], rax
movabs rax, 0x88808bd001483c42
mov qword [0x140011188], rax
movabs rax, 0x6774c08548000000
mov qword [0x140011190], rax
movabs rax, 0x4418488b50d00148
mov qword [0x140011198], rax
movabs rax, 0x56e3d0014920408b
mov qword [0x1400111a0], rax
movabs rax, 0x4888348b41c9ff48
mov qword [0x1400111a8], rax
movabs rax, 0xc03148c9314dd601
mov qword [0x1400111b0], rax
movabs rax, 0xc101410dc9c141ac
mov qword [0x1400111b8], rax
movabs rax, 0x244c034cf175e038
mov qword [0x1400111c0], rax
movabs rax, 0x4458d875d1394508
mov qword [0x1400111c8], rax
movabs rax, 0x4166d0014924408b
mov qword [0x1400111d0], rax
movabs rax, 0x491c408b44480c8b
mov qword [0x1400111d8], rax
movabs rax, 0x14888048b41d001
mov qword [0x1400111e0], rax
movabs rax, 0x5a595e58415841d0
mov qword [0x1400111e8], rax
movabs rax, 0x83485a4159415841
mov qword [0x1400111f0], rax
movabs rax, 0x4158e0ff524120ec
mov qword [0x1400111f8], rax
movabs rax, 0xff57e9128b485a59
mov qword [0x140011200], rax
movabs rax, 0x1ba485dffff
mov qword [0x140011208], rax
mov eax, 0x11b1a9
shl rax, 0x2b
mov qword [0x140011210], rax
movabs rax, 0x8b31ba4100000101
mov qword [0x140011218], rax
movabs rax, 0xa2b5f0bbd5ff876f
mov qword [0x140011220], rax
movabs rax, 0xff9dbd95a6ba4156
mov qword [0x140011228], rax
movabs rax, 0x7c063c28c48348d5
mov qword [0x140011230], rax
movabs rax, 0x47bb0575e0fb800a
mov qword [0x140011238], rax
mov rcx, qword [0x140011268]
movabs rax, 0x894159006a6f7213
mov qword [0x140011240], rax
movabs rax, 0x2e636c6163d5ffda
mov qword [0x140011248], rax
lea rax, [0x140011120]
mov dword [0x140011250], 0x657865
mov qword [rsp + 0x20], rax
call qword [0x140011128]
mov edx, 1
test al, al
jne 0x14000a7d9
lea rcx, [0x14000c570]
call fcn.140002b48
jmp 0x14000a87d
lea rcx, [0x14000c560]
call fcn.140002b48
mov edx, dword [0x140011120]
xor r8d, r8d
lea rax, [0x14000c540]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x60], 0xe
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x58], r8
call fcn.1400021f8
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
cmp byte [0x140011300], 0
jne 0x14000a875
lea rcx, [rsp + 0x60]
mov edx, 2
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
call fcn.140002b48
xor edx, edx
xor ecx, ecx
lea rax, [0x140011110]
mov dword [rsp + 0x28], edx
mov r9, qword [0x140011258]
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rcx
mov rcx, qword [0x140011268]
mov qword [rsp + 0x30], rax
call qword [0x140011118]
mov rcx, rbx
call fcn.1400017e0
cmp byte [0x140011300], 0
je 0x14000a8c6
mov rcx, qword [0x1400112f8]
test rcx, rcx
je 0x14000a8c6
call fcn.1400025fe
mov rcx, qword [0x1400112f8]
call fcn.140001c64
test al, al
je 0x14000a8b3
mov rcx, qword [0x1400112f8]
call fcn.140001c93
xor eax, eax
mov ecx, 1
mov qword [0x1400112f8], rax
call sub.ucrtbase.dll_exit
xor eax, eax
sub rsp, 0xffffffffffffff80
pop rbx
pop rsi
pop rdi
ret