Function at 0x140001e70
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
mov qword [0x140013188], r8
xor edx, edx
mov dword [rbp - 0xc], edx
mov dword [rbp - 0x1c], 0xc6f
mov dword [rbp - 0x10], 0x670
mov dword [rbp + 0x20], edx
mov dword [rbp - 0x14], edx
mov dword [rbp - 0x20], 0x170c
mov dword [rbp - 0x18], 0x3a0
mov ecx, dword [rbp + 0x20]
mov eax, dword [rbp - 0x10]
cmp ecx, eax
je 0x140002018
xor dword [rbp - 0x20], 0x117c
lea ecx, [rdx + 1]
add dword [rbp + 0x20], 0x1001
mov rax, qword [section..data]
mov dword [0x140013014], ecx
mov dword [0x14001301c], edx
mov dword [0x140013034], edx
mov qword [0x14001304c], 0x12
mov dword [rax + 0x50], edx
mov rax, qword [section..data]
mov dword [0x1400130a4], ecx
mov dword [0x14001306c], edx
mov qword [0x140013080], rdx
mov dword [0x140013088], 9
mov dword [0x14001309c], 0x4f
mov dword [0x1400130a8], 0x44
mov dword [rax + 0xa8], edx
mov rax, qword [section..data]
mov dword [0x1400130c8], ecx
mov dword [0x1400130cc], ecx
mov dword [0x1400130bc], edx
mov qword [0x1400130dc], rdx
mov dword [0x140013108], edx
mov dword [rax + 0x100], ecx
mov rax, qword [section..data]
mov dword [0x140013138], edx
mov dword [0x140013150], 0x35
mov qword [0x140013128], rdx
mov dword [rax + 0x148], ecx
mov rax, qword [section..data]
mov dword [0x14001316c], ecx
mov dword [0x140013168], 0x29
mov dword [rax + 0x170], edx
xor dword [rbp - 0x18], 0x141d
mov eax, dword [0x140013150]
mov ecx, dword [0x140013138]
add eax, 0x1cfaae
add ecx, eax
or dword [0x1400130c8], ecx
add dword [rbp - 0x14], 0xef5
xor dword [rbp - 0xc], 0x17bd
add dword [rbp - 0x1c], 0xfffffa01
xor dword [rbp - 0x18], 0x11cd
xor dword [rbp + 0x20], 0x1f64
add dword [rbp + 0x20], 0xfffff70b
add dword [rbp - 0x18], 0x29d
mov eax, dword [0x1400130bc]
cmp dword [0x1400130c8], eax
je 0x140002011
mov rax, qword [section..data]
mov ecx, dword [rax + 0x3c]
add ecx, 0x8c302
xor dword [0x140013050], ecx
xor dword [rbp - 0x1c], 0xda6
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x14]
add ecx, 0x42b
cmp eax, ecx
jge 0x1400021ae
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0x20]
xor ecx, 0x4f3
cmp eax, ecx
je 0x14000233d
add dword [rbp - 0x1c], 0xbe7
lea rbx, [0x140013010]
add dword [rbp + 0x20], 0x1160
xor dword [rbp + 0x20], 0x1925
mov ecx, dword [rbp - 0x20]
mov edx, dword [rbp + 0x20]
add ecx, 0x3bd
mov r8d, dword [rbp - 0x1c]
add edx, 0x10c
mov r9d, dword [rbp - 0x1c]
mov r10d, dword [rbp - 0x18]
mov eax, dword [rbp - 0x14]
xor r10d, 0xf7f
xor eax, 0x1ef4
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r10d
call fcn.1400033a0
mov dword [rbp + 0x20], eax
mov eax, dword [rbp - 0x14]
mov dword [rbp - 0x14], eax
add dword [rbp - 0x20], 0x957
xor dword [rbp - 0x20], 0xcba
add dword [rbp - 0x1c], 0xfffff4b2
add dword [rbp - 0x14], 0x3db
add dword [rbp - 0x20], 0x736
xor dword [rbp + 0x20], 0x137c
mov eax, dword [rbp - 0x1c]
mov dword [rbp - 0x1c], eax
xor dword [rbp - 0x10], 0xcc3
add dword [rbp - 0x18], 0xfffffe1b
xor dword [rbp - 0x18], 0x15f8
xor dword [rbp - 0x18], 0x1906
xor dword [rbp - 0x20], 0x19ed
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xf8]
cmp dword [0x140013158], eax
jne 0x140002115
or dword [0x140013150], eax
jmp 0x140002123
mov eax, dword [rcx + 0xc]
xor eax, 0x122c
mov dword [0x140013048], eax
mov ecx, dword [rbp - 0xc]
mov edx, dword [rbp + 0x20]
sub ecx, 0xd0a
mov r8d, dword [rbp - 0x10]
sub edx, 0x991
mov r9d, dword [rbp - 0x14]
xor r8d, 0x1863
sub r9d, 0x476
mov qword [rsp + 0x20], rbx
call section..text
mov dword [rbp - 0x20], eax
add dword [rbp - 0x18], 0x284
mov ecx, dword [rbp + 0x20]
mov edx, dword [rbp - 0x1c]
xor ecx, 0x35f
mov r8d, dword [rbp + 0x20]
add edx, 0xa9d
mov r9d, dword [rbp - 0x18]
sub r8d, 0x5d4
add r9d, 0x10b
mov qword [rsp + 0x20], rbx
call fcn.1400026ec
mov dword [rbp - 0x14], eax
add dword [rbp - 0x1c], 0x661
xor dword [rbp - 0xc], 0x1eb0
xor dword [rbp - 0x18], 0x58c
jmp 0x14000233d
mov eax, dword [rbp + 0x20]
imul ecx, eax, 0x672
cmp dword [0x140013118], ecx
jne 0x14000233d
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0xc]
and ecx, eax
or dword [rbp - 0x14], ecx
mov eax, dword [rbp - 0xc]
mov rcx, qword [section..data]
mov edx, dword [rcx + 0xa4]
sub edx, eax
mov eax, dword [rbp - 0x10]
sub edx, eax
mov rax, qword [section..data]
mov dword [rax + 0x128], edx
mov eax, dword [rbp + 0x20]
sub eax, 0xab3
or eax, dword [0x140013114]
mov dword [0x140013160], eax
mov eax, dword [rbp + 0x20]
xor eax, dword [0x140013138]
add dword [rbp - 0x20], eax
mov eax, dword [rbp + 0x20]
sub eax, dword [0x140013094]
or dword [rbp - 0x1c], eax
mov edx, dword [rbp + 0x20]
mov eax, dword [rbp - 0x10]
add edx, eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0xd0]
mov eax, edx
or rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [rbp - 0x20]
mov rax, qword [section..data]
add ecx, 0x12d0
mov edx, dword [rax + 0xd0]
mov eax, dword [rbp - 0x20]
or edx, ecx
imul eax, edx
mov dword [rbp - 0x20], eax
mov eax, dword [0x140013094]
imul eax, dword [0x14001312c]
imul ecx, eax, 0xc6f
call qword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
mov eax, dword [rbp + 0x20]
mov ecx, dword [0x14001306c]
sub ecx, eax
sub ecx, 0x12d0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xffffe843
sub eax, dword [0x14001316c]
add dword [0x1400130c0], eax
mov eax, dword [rbp - 0x1c]
and eax, dword [0x14001312c]
or dword [rbp - 0x10], eax
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x10]
and ecx, dword [0x140013084]
or eax, ecx
sub dword [rbp - 0x14], eax
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp + 0x20]
or ecx, eax
imul ecx, dword [0x140013160]
sub dword [0x1400130d8], ecx
mov ecx, dword [rbp - 0x1c]
mov r8d, dword [rbp - 0x1c]
mov rax, qword [section..data]
xor ecx, dword [0x14001306c]
mov edx, dword [0x140013128]
xor ecx, 0xa2d
mov r11d, dword [0x140013158]
add edx, dword [rax + 0x6c]
or r11d, 0x12d0
mov eax, dword [rbp - 0x14]
add r8d, edx
mov r9d, dword [rbp - 0xc]
mov r10d, dword [rbp - 0x10]
sub r9d, eax
mov eax, dword [rbp - 0x14]
and r10d, 0x728
sub r10d, eax
mov rax, qword [section..data]
mov qword [rsp + 0x28], rax
mov edx, r11d
mov dword [rsp + 0x20], r10d
call fcn.140003b28
mov dword [rbp - 0x14], eax
mov ecx, dword [0x14001313c]
call qword [sym.imp.KERNEL32.dll_ExitProcess]