Function at 0x140003ad0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov qword [0x140015128], r8
xor eax, eax
mov dword [rsp + 0x80], 0x3c56
mov dword [rsp + 0x40], 0x3761
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x4c], 0x36d8
mov dword [rsp + 0x50], eax
mov ecx, dword [rsp + 0x80]
mov edx, dword [rsp + 0x4c]
xor ecx, 0x7ffc
mov r8d, dword [rsp + 0x80]
add edx, 0xb34
mov r9d, dword [rsp + 0x48]
xor r8d, 0x84d
mov r11d, dword [rsp + 0x50]
add r9d, 0x46ae
mov eax, dword [rsp + 0x40]
add r11d, 0x42d3
mov r10, qword [section..data]
xor eax, 0xd51
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r10
mov dword [rsp + 0x20], r11d
call fcn.140003650
mov rcx, qword [section..data]
mov r9d, dword [0x140015034]
add r9d, 0xfff35547
mov dword [rsp + 0x50], eax
mov r8d, dword [rcx + 0x104]
mov edx, dword [rcx + 0x4c]
sub r8d, 0x1a345b0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [rsp + 0x40]
lea rdi, [0x140015010]
mov edx, dword [rsp + 0x40]
add rax, 0x1000
mov r8d, dword [rsp + 0x4c]
add ecx, 0xaab
mov r9d, dword [rsp + 0x80]
xor edx, 0x1c97
mov qword [0x1400150c0], rax
sub r8d, 0x2bd
mov eax, dword [rsp + 0x44]
add r9d, 0x754
add eax, 0x43aa
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
call fcn.1400016a0
mov dword [rsp + 0x4c], eax
mov ecx, dword [rsp + 0x80]
mov eax, dword [rsp + 0x40]
add ecx, 0xfffffdda
cmp eax, ecx
jge 0x140003e25
mov ecx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x80]
add ecx, 0x3552
cmp eax, ecx
je 0x140003d95
mov ecx, dword [rsp + 0x40]
mov ebx, 0x341b
mov edx, dword [rsp + 0x48]
sub ecx, 0x253
mov r8d, dword [rsp + 0x50]
add edx, ebx
mov eax, dword [rsp + 0x4c]
xor r8d, 0xbbe
mov r9, qword [section..data]
sub eax, 0x3e7
mov dword [rsp + 0x20], eax
call fcn.140001ddc
mov dword [rsp + 0x48], eax
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
add ecx, 0xc7b
mov r9d, dword [rsp + 0x48]
add edx, 0x2bf6
mov r11d, dword [rsp + 0x48]
sub r9d, 0x8d1
mov r10d, dword [rsp + 0x44]
xor r11d, 0x8f7
mov eax, dword [rsp + 0x4c]
add r10d, ebx
mov r8, qword [section..data]
sub eax, 0x11ac
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call fcn.1400029d8
mov dword [rsp + 0x44], eax
mov ebx, 0xc26
mov ecx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x80]
xor ecx, ebx
mov r8d, dword [rsp + 0x48]
xor edx, 0x7f8a
mov r9d, dword [rsp + 0x50]
add r8d, 0x6be
xor r9d, 0x1ea4
mov qword [rsp + 0x20], rdi
call fcn.1400020a4
mov dword [rsp + 0x40], eax
mov r8, rdi
mov eax, dword [rsp + 0x80]
mov eax, dword [rsp + 0x44]
mov edx, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x44]
xor edx, 0x76f8
mov rax, qword [0x140015090]
add ecx, 0xb9f
xor ecx, 0x7d30
add edx, 0xffffbc56
sub ecx, 0x12f6
cmp edx, ecx
cmovl rax, qword [0x1400150c0]
xor edx, 0x36d8
mov qword [0x140015090], rax
mov dword [rsp + 0x40], edx
mov ecx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x48]
add ecx, 0xa96
mov r9d, dword [rsp + 0x4c]
sub edx, 0x4af
mov eax, dword [rsp + 0x44]
add r9d, 0x109
xor eax, ebx
mov dword [rsp + 0x20], eax
call fcn.140002318
mov dword [rsp + 0x80], eax
jmp 0x140003e25
mov eax, dword [rsp + 0x80]
mov ecx, dword [0x1400150ac]
sub ecx, eax
mov eax, dword [rsp + 0x80]
cmp eax, ecx
je 0x140003e25
mov ebx, dword [0x140015084]
mov edi, 0x420c
jmp 0x140003e1b
mov eax, dword [rsp + 0x4c]
mov edx, dword [0x140015058]
add edx, dword [0x140015078]
and eax, edx
cmp dword [0x1400150f4], eax
jae 0x140003e18
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x80]
sub edx, eax
sub ecx, dword [0x140015018]
movsxd rdx, edx
call qword [sym.imp.KERNEL32.dll_GetHandleInformation]
mov eax, dword [rsp + 0x40]
mov rdx, qword [section..data]
sub eax, 0x43dc
movsxd rcx, eax
mov eax, dword [rsp + 0x40]
add eax, dword [rdx + 0x7c]
mov edx, eax
call qword [sym.imp.KERNEL32.dll_GetHandleInformation]
add ebx, 3
mov eax, dword [rsp + 0x44]
sub eax, edi
cmp ebx, eax
jne 0x140003dbc
mov ecx, dword [0x1400150f0]
call qword [sym.imp.KERNEL32.dll_ExitProcess]