Function at 0x14001bbf4
Capabilities:
Terminate process

Disassembly:
jmp 0x140036e60
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push r13
push rbp
push rsi
push rdi
mov eax, 0x11c8
call fcn.14001b2ee
sub rsp, rax
lea r13, [rsp + 0x20]
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
lea rdi, [rsp + 0x20]
mov ecx, 0x31a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x11f8]
mov rax, qword [0x140067040]
xor rax, r13
mov qword [rbp + 0x1178], rax
lea rcx, [0x14007016c]
call fcn.14001c0a4
nop
call fcn.14001b36b
movzx eax, al
test eax, eax
jne 0x140036efb
call fcn.14001b032
movzx eax, al
test eax, eax
jne 0x140036efb
call fcn.14001bb0e
movzx eax, al
test eax, eax
jne 0x140036efb
call fcn.14001ba5f
movzx eax, al
test eax, eax
je 0x140036f07
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.14001b866
nop
call fcn.14001b433
movzx eax, al
test eax, eax
jne 0x140036f3a
call fcn.14001b5e6
nop
mov ecx, 0x3c
call fcn.14001b596
movzx eax, al
test eax, eax
jne 0x140036f3a
mov eax, 1
jmp 0x14003760c
lea rcx, [rbp + 0x7f8]
call fcn.14001bf50
mov qword [rbp + 0x1138], rax
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x1138]
call fcn.14001b2b2
lea rcx, [rbp + 0x7f8]
call fcn.14001bf3c
nop
lea rax, [rbp + 0x8d4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x8f4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x8d4]
movzx r8d, byte [rbp + 0x8f4]
movzx edx, byte [rbp + 0x914]
lea rcx, [rbp + 0x840]
call fcn.14001fc20
mov rcx, rax
call fcn.14001b37f
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.14001b794
nop
lea rax, [rbp + 0x994]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x9b4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x994]
movzx r8d, byte [rbp + 0x9b4]
movzx edx, byte [rbp + 0x9d4]
lea rcx, [rbp + 0x940]
call fcn.14001ff50
mov rcx, rax
call fcn.14001bc2b
mov rdx, rax
lea rcx, [rbp + 0x88]
call fcn.14001b578
nop
lea rcx, [rbp + 0xa34]
call fcn.14001b3e3
mov qword [rbp + 0x1138], rax
lea rax, [rbp + 0xa58]
mov qword [rbp + 0xa88], rax
mov rdx, qword [rbp + 0xa88]
lea rcx, [rbp + 0x88]
call fcn.14001bccb
mov qword [rbp + 0x1140], rax
lea rax, [rbp + 0xaa8]
mov qword [rbp + 0xad8], rax
mov rdx, qword [rbp + 0xad8]
lea rcx, [rbp + 0x88]
call fcn.14001b807
mov qword [rbp + 0x1148], rax
mov r9, qword [rbp + 0x1138]
mov r8, qword [rbp + 0x1140]
mov rdx, qword [rbp + 0x1148]
lea rcx, [rbp + 0x9f8]
call fcn.14001b8a2
mov qword [rbp + 0x1150], rax
lea rcx, [rbp + 0xb34]
call fcn.14001b3e3
mov qword [rbp + 0x1158], rax
lea rax, [rbp + 0xb58]
mov qword [rbp + 0xb88], rax
mov rdx, qword [rbp + 0xb88]
lea rcx, [rbp + 0x48]
call fcn.14001b212
mov qword [rbp + 0x1160], rax
lea rax, [rbp + 0xba8]
mov qword [rbp + 0xbd8], rax
mov rdx, qword [rbp + 0xbd8]
lea rcx, [rbp + 0x48]
call fcn.14001c103
mov qword [rbp + 0x1168], rax
mov r9, qword [rbp + 0x1158]
mov r8, qword [rbp + 0x1160]
mov rdx, qword [rbp + 0x1168]
lea rcx, [rbp + 0xaf8]
call fcn.14001b2e4
mov qword [rbp + 0x1170], rax
mov r8, qword [rbp + 0x1150]
mov rdx, qword [rbp + 0x1170]
lea rcx, [rbp + 0xc8]
call fcn.14001b195
lea rcx, [rbp + 0xaf8]
call fcn.14001b30c
lea rcx, [rbp + 0x9f8]
call fcn.14001b30c
nop
lea rcx, [rbp + 0xc34]
call fcn.14001b3e3
mov qword [rbp + 0x1138], rax
lea rax, [rbp + 0xc58]
mov qword [rbp + 0xc88], rax
mov rdx, qword [rbp + 0xc88]
lea rcx, [rbp + 0x88]
call fcn.14001bccb
mov qword [rbp + 0x1140], rax
lea rax, [rbp + 0xca8]
mov qword [rbp + 0xcd8], rax
mov rdx, qword [rbp + 0xcd8]
lea rcx, [rbp + 0x88]
call fcn.14001b807
mov qword [rbp + 0x1148], rax
mov r9, qword [rbp + 0x1138]
mov r8, qword [rbp + 0x1140]
mov rdx, qword [rbp + 0x1148]
lea rcx, [rbp + 0xbf8]
call fcn.14001b8a2
mov qword [rbp + 0x1150], rax
lea r8, [0x14005c870]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0xcf8]
call fcn.14001bd1b
mov qword [rbp + 0x1158], rax
mov r8, qword [rbp + 0x1150]
mov rdx, qword [rbp + 0x1158]
lea rcx, [rbp + 0x108]
call fcn.14001b195
lea rcx, [rbp + 0xcf8]
call fcn.14001b30c
lea rcx, [rbp + 0xbf8]
call fcn.14001b30c
nop
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0xc8]
call fcn.14001ba14
nop
lea rcx, [rbp + 0x88]
call fcn.14001b68b
nop
mov edx, 0x20
lea rcx, [rbp + 0x148]
call fcn.14001b181
lea rcx, [rbp + 0xd34]
call fcn.14001b334
mov qword [rbp + 0x1138], rax
lea rax, [rbp + 0xd84]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xda4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0xd84]
movzx r8d, byte [rbp + 0xda4]
movzx edx, byte [rbp + 0xdc4]
lea rcx, [rbp + 0xd60]
call fcn.140020060
mov rcx, rax
call fcn.14001b3ac
mov rdx, rax
lea rcx, [rbp + 0x1090]
call fcn.14001b794
lea rax, [rbp + 0xe14]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xe34]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0xe14]
movzx r8d, byte [rbp + 0xe34]
movzx edx, byte [rbp + 0xe54]
lea rcx, [rbp + 0xdf0]
call fcn.140020180
mov rcx, rax
call fcn.14001bee2
mov rdx, rax
lea rcx, [rbp + 0x10b8]
call fcn.14001b794
lea rax, [rbp + 0xea4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xec4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0xea4]
movzx r8d, byte [rbp + 0xec4]
movzx edx, byte [rbp + 0xee4]
lea rcx, [rbp + 0xe80]
call fcn.140020320
mov rcx, rax
call fcn.14001c004
mov rdx, rax
lea rcx, [rbp + 0x10e0]
call fcn.14001b794
lea rax, [rbp + 0xf34]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xf54]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0xf34]
movzx r8d, byte [rbp + 0xf54]
movzx edx, byte [rbp + 0xf74]
lea rcx, [rbp + 0xf10]
call fcn.1400203b0
mov rcx, rax
call fcn.14001b3ac
mov rdx, rax
lea rcx, [rbp + 0x1108]
call fcn.14001b794
lea rax, [rbp + 0x1130]
mov r8, rax
lea rdx, [rbp + 0x1090]
lea rcx, [rbp + 0xf98]
call fcn.14001c00e
lea rcx, [rbp + 0xfc8]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x1060]
lea rcx, [rbp + 0xfc8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rbp + 0x1138]
lea rdx, [rbp + 0x1060]
lea rcx, [rbp + 0x148]
call fcn.14001bc26
lea r9, [fcn.14001b30c]
mov r8d, 4
mov edx, 0x28
lea rcx, [rbp + 0x1090]
call fcn.14001b442
nop
lea rdx, [0x14001c1f3]
lea rcx, [rbp + 0x188]
call fcn.14001b771
nop
lea rcx, [rbp + 0x188]
call fcn.14001c1ad
nop
lea rax, [rbp + 0x148]
mov qword [rbp + 0x1b8], rax
mov rcx, qword [rbp + 0x1b8]
call fcn.14001b4a1
mov qword [rbp + 0x1d8], rax
mov rcx, qword [rbp + 0x1b8]
call fcn.14001b488
mov qword [rbp + 0x1f8], rax
jmp 0x1400374fb
mov rax, qword [rbp + 0x1d8]
add rax, 0x28
mov qword [rbp + 0x1d8], rax
mov rax, qword [rbp + 0x1f8]
cmp qword [rbp + 0x1d8], rax
je 0x1400375ae
mov rax, qword [rbp + 0x1d8]
mov qword [rbp + 0x218], rax
mov r8, qword [rbp + 0x218]
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x238]
call fcn.14001bd7a
nop
lea r8, [0x14005c870]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0xff8]
call fcn.14001bd1b
mov r8, qword [rbp + 0x218]
mov rdx, rax
lea rcx, [rbp + 0x278]
call fcn.14001b5af
lea rcx, [rbp + 0xff8]
call fcn.14001b30c
nop
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x238]
call fcn.14001ba14
nop
lea rcx, [rbp + 0x278]
call fcn.14001b645
nop
lea rcx, [rbp + 0x278]
call fcn.14001b30c
lea rcx, [rbp + 0x238]
call fcn.14001b30c
nop
jmp 0x1400374e9
mov dword [rbp + 0x1034], 0
lea rcx, [rbp + 0x188]
call fcn.14001b78a
lea rcx, [rbp + 0x148]
call fcn.14001c009
lea rcx, [rbp + 0x108]
call fcn.14001b30c
lea rcx, [rbp + 0xc8]
call fcn.14001b30c
lea rcx, [rbp + 0x88]
call fcn.14001be4c
lea rcx, [rbp + 0x48]
call fcn.14001b30c
lea rcx, [rbp + 8]
call fcn.14001b30c
mov eax, dword [rbp + 0x1034]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x140059000]
call fcn.14001bdb1
mov rax, rdi
mov rcx, qword [rbp + 0x1178]
xor rcx, r13
call fcn.14001b811
lea rsp, [r13 + 0x11a8]
pop rdi
pop rsi
pop rbp
pop r13
ret