Function at 0x140001a60
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x1d0
mov rax, qword [0x140007040]
xor rax, rsp
mov qword [rsp + 0x1a0], rax
mov rbx, rcx
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.RtlGetVersion
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140001e83
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x60], 0x11c
call rax
mov eax, dword [rsp + 0x6c]
cmp eax, 0x47bb
ja 0x140001b61
je 0x140001b37
cmp eax, 0x42ee
ja 0x140001b25
je 0x140001ae6
cmp eax, 0x3839
je 0x140001b13
cmp eax, 0x3ad7
je 0x140001ae6
cmp eax, 0x3fab
jne 0x140001e83
mov qword [rbx + 8], 0x2e0
mov qword [rbx + 0x10], 0x2e8
mov qword [rbx + 0x18], 0x338
mov qword [rbx + 0x20], 0x3c0
mov qword [rbx + 0x28], 0x450
jmp 0x140001bb5
mov qword [rbx + 8], 0x2e8
mov qword [rbx + 0x10], 0x2f0
jmp 0x140001af6
cmp eax, 0x4563
je 0x140001ae6
cmp eax, 0x47ba
jne 0x140001e83
mov qword [rbx + 8], 0x2e8
mov qword [rbx + 0x10], 0x2f0
mov qword [rbx + 0x18], 0x340
mov qword [rbx + 0x20], 0x3c8
mov qword [rbx + 0x28], 0x450
jmp 0x140001bb5
cmp eax, 0x4a64
ja 0x140001b7b
je 0x140001b8d
sub eax, 0x4a61
je 0x140001b8d
sub eax, 1
je 0x140001b8d
cmp eax, 1
jmp 0x140001b87
cmp eax, 0x4a65
je 0x140001b8d
cmp eax, 0x55f0
jne 0x140001e83
mov qword [rbx + 0x28], 0x5a8
mov qword [rbx + 0x20], 0x520
mov qword [rbx + 0x18], 0x498
mov qword [rbx + 0x10], 0x448
mov qword [rbx + 8], 0x440
mov rcx, rbx
call fcn.1400018c0
mov qword [rbx + 0xa8], rax
test rax, rax
jne 0x140001be6
lea rcx, str.cr3_failed._n
call fcn.140001090
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
xor eax, eax
jmp 0x140001c21
mov rcx, rbx
mov qword [rsp + 0x1f8], rdi
call fcn.1400016b0
mov rdi, rax
test rax, rax
jne 0x140001c3a
lea rcx, str.kprocess_initial_failed._n
call fcn.140001090
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
xor eax, eax
mov rdi, qword [rsp + 0x1f8]
mov rcx, qword [rsp + 0x1a0]
xor rcx, rsp
call fcn.140002e30
add rsp, 0x1d0
pop rbx
ret
mov qword [rsp + 0x1e8], rbp
lea rcx, str._n__system_kprocess_______llx_n
mov qword [rsp + 0x1f0], rsi
mov rdx, rdi
mov qword [rsp + 0x1b8], r14
mov qword [rsp + 0x1b0], r15
call fcn.140001090
mov rdx, qword [rbx + 0xa8]
lea rcx, str.__system_cr3_____0x_p_n
call fcn.140001090
mov r14, qword [rbx + 0x10]
add r14, rdi
mov qword [rsp + 0x1c8], r12
xor r15d, r15d
mov qword [rsp + 0x38], r14
mov ebp, r15d
mov qword [rsp + 0x1c0], r13
nop
mov r9d, 8
lea r8, [rsp + 0x38]
mov rdx, r14
mov rcx, rbx
call fcn.140002230
mov rdx, qword [rbx + 0x18]
lea r8, [rsp + 0x40]
mov r14, qword [rsp + 0x38]
mov r9d, 8
mov rsi, r14
mov rcx, rbx
sub rsi, qword [rbx + 0x10]
add rdx, rsi
call fcn.140002230
test al, al
je 0x140001df6
cmp qword [rsp + 0x40], r15
je 0x140001df6
mov rdx, qword [rbx]
lea r8, [rsp + 0x48]
add rdx, rsi
mov r9d, 8
mov rcx, rbx
call fcn.140002230
mov rdx, qword [rbx + 0x20]
lea r8, [rsp + 0x50]
mov r13, qword [rsp + 0x48]
test al, al
mov r9d, 8
mov rcx, rbx
cmove r13, r15
add rdx, rsi
call fcn.140002230
mov rdx, qword [rbx + 0x28]
lea r8, [rsp + 0x190]
mov r12, qword [rsp + 0x50]
test al, al
xorps xmm0, xmm0
mov r9d, 0x10
cmove r12, r15
mov rcx, rbx
add rdx, rsi
movups xmmword [rsp + 0x190], xmm0
call fcn.140002230
mov rdx, qword [rbx + 8]
lea r8, [rsp + 0x30]
add rdx, rsi
mov dword [rsp + 0x30], r15d
mov r9d, 4
mov rcx, rbx
call fcn.140002230
lea rdx, [rsp + 0x190]
lea rcx, str.VALORANT_Win64_Shipping.exe
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140001df6
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rsp + 0x60], 0x130
lea rdx, str.VALORANT_Win64_Shipping.exe
lea rcx, [rsp + 0x8c]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
mov rcx, rdi
test eax, eax
je 0x140001de2
lea rdx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140001db1
mov ecx, 1
jmp 0x140001dec
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [rsp + 0x68]
movsxd rdx, dword [rsp + 0x30]
cmp rdx, rcx
je 0x140001e06
inc ebp
cmp ebp, 0x190
jb 0x140001ca0
jmp 0x140001e4b
lea rcx, str.__pid______i_n
mov qword [rbx + 0xa8], r13
mov r15, r12
mov dword [rbx + 0xb8], edx
mov qword [rbx + 0xb0], rsi
call fcn.140001090
mov rdx, r12
lea rcx, str.__image_base______I64d_n
call fcn.140001090
mov rdx, qword [rbx + 0xa8]
lea rcx, str.__cr3_____0x_p_n
call fcn.140001090
mov r14, qword [rsp + 0x1b8]
mov rax, r15
mov r15, qword [rsp + 0x1b0]
mov r13, qword [rsp + 0x1c0]
mov r12, qword [rsp + 0x1c8]
mov rsi, qword [rsp + 0x1f0]
mov rbp, qword [rsp + 0x1e8]
jmp 0x140001c19
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3