Function at 0x1400015e6
Capabilities:
Terminate process

Disassembly:
jmp 0x140001218
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rdi, rdx
mov r14, rcx
mov rcx, rdx
call fcn.140001317
mov rsi, rax
mov rbx, qword [rax + 8]
mov rcx, rbx
call fcn.140001321
test al, al
je 0x14000125c
cmp qword [rsi + 0x10], r14
je 0x140001276
mov rcx, rsi
mov rdx, rdi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.1400014ee
mov rcx, qword [rsi + 0x10]
cmp rcx, r14
je 0x1400012b2
mov rdx, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.14000151f
sub qword [r14 + 0x2088], rbx
mov rax, qword [rsi + 0x28]
mov qword [rdi], rax
mov qword [rsi + 0x28], rdi
mov rax, qword [rsi + 0x30]
cmp rax, rbx
jge 0x1400012c6
lea rax, [rbx + 0xf]
test rbx, rbx
cmovns rax, rbx
sar rax, 4
lea rcx, [r14 + rax*8]
mov rdx, rsi
call fcn.14000132c
add qword [rsi + 0x30], rbx
jmp 0x14000130c
mov rcx, r14
mov rdx, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x140001503
add rax, rbx
mov qword [rsi + 0x30], rax
cmp rax, 0xfb0
jne 0x14000130c
lea rax, [rbx + 0xf]
test rbx, rbx
cmovns rax, rbx
sar rax, 4
lea rcx, [r14 + rax*8]
mov rdx, rsi
call fcn.140001343
mov qword [rsi + 8], 0x1000
mov rcx, r14
mov rdx, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x14000137d
nop
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rdi, rdx
mov r15, rcx
mov rbx, qword [rdx + 8]
add qword [rcx + 0x2080], rbx
mov rdx, qword [rdx]
and rdx, 0xfffffffffffffffe
mov qword [rdi], rdx
je 0x140001449
mov rcx, rdi
call fcn.1400011d9
mov r14, rax
mov rcx, r15
mov rdx, rax
call fcn.1400016a4
test al, al
je 0x140001449
mov rcx, qword [r14]
call fcn.1400016cb
test al, al
je 0x140001449
mov rsi, qword [r14 + 8]
mov rcx, rsi
call fcn.140001321
test al, al
jne 0x140001449
cmp rsi, 0x3effffff
jg 0x140001449
mov rcx, r15
mov rdx, r14
call fcn.1400016d2
mov rax, qword [rdi + 8]
add qword [r14 + 8], rax
mov rcx, rdi
call fcn.14000157e
lea rcx, [r15 + 0x20a0]
mov rdx, rax
call fcn.140001586
mov rbx, qword [r14 + 8]
mov rdi, r14
cmp rbx, 0x3f000001
jl 0x140001449
mov r8d, 0x3f000000
mov rcx, r15
mov rdx, r14
call fcn.140001781
mov rdi, rax
mov rcx, r15
mov rdx, r14
call 0x1400017f0
mov rbx, qword [rdi + 8]
mov rcx, rdi
mov rdx, rbx
call fcn.140001874
mov rsi, rax
mov rcx, r15
mov rdx, rax
call fcn.1400016a4
test al, al
je 0x1400014d8
mov rcx, qword [rsi]
call fcn.1400016cb
test al, al
je 0x1400014d8
mov rcx, qword [rsi + 8]
call fcn.140001321
test al, al
jne 0x1400014d8
cmp rbx, 0x3effffff
jg 0x1400014d8
mov rcx, r15
mov rdx, rsi
call fcn.1400016d2
mov rax, qword [rsi + 8]
add qword [rdi + 8], rax
mov rcx, rsi
call fcn.14000157e
lea rcx, [r15 + 0x20a0]
mov rdx, rax
call fcn.140001586
cmp qword [rdi + 8], 0x3f000001
jl 0x1400014d8
mov r8d, 0x3f000000
mov rcx, r15
mov rdx, rdi
call fcn.140001781
mov rcx, r15
mov rdx, rax
call 0x1400017f0
mov rcx, r15
mov rdx, rdi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
jmp 0x1400017f0
mov rax, qword [rdx + 8]
sub qword [rcx + 0x2088], rax
cmp rax, 0x3f000001
jl 0x14000137d
jmp 0x14000153c
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rdx
mov rdi, rcx
mov rbx, qword [rdx + 8]
mov rcx, rdx
call fcn.14000157e
lea rcx, [rdi + 0x20a0]
mov rdx, rax
call fcn.140001586
mov rcx, rdi
mov rdx, rbx
call fcn.1400015bf
mov rcx, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp 0x1400015e6
sub rsp, 0x28
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x140001601
add rsp, 0x28
ret
call fcn.140001611
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
int3
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
mov rbx, rdx
mov rsi, rcx
mov rdx, qword [rdx + 8]
lea r14, [rsp + 0x28]
mov rcx, r14
call fcn.140001879
mov rdi, qword [r14]
mov rcx, qword [r14 + 8]
mov qword [rbx + 0x20], 0
mov rax, rdi
shl rax, 8
add rax, rsi
lea rax, [rax + rcx*8]
add rax, 0x868
mov rdx, qword [rax]
mov qword [rbx + 0x18], rdx
mov rdx, qword [rax]
test rdx, rdx
je 0x140001846
mov qword [rdx + 0x20], rbx
mov qword [rax], rbx
lea rdx, [rsi + rdi*4]
add rdx, 0x804
call 0x1400018b2
add rsi, 0x800
mov rcx, rdi
mov rdx, rsi
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x1400018b2
mov eax, 1
shl eax, cl
or dword [rdx], eax
ret