Function at 0x140019bc0
Capabilities:
Create thread
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x400]
sub rsp, 0x500
mov rax, qword [0x1400a4010]
xor rax, rsp
mov qword [rbp + 0x3f0], rax
xor r15d, r15d
call fcn.14000f150
call fcn.140032c60
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
mov qword [rbp + 0x3d0], r15
mov qword [rbp + 0x3d8], r15
lea r8d, [r15 + 0xb]
lea rdx, str.config.json
lea rcx, [rbp + 0x3c0]
call fcn.140006290
nop
lea rcx, [rbp + 0x3c0]
call fcn.14000ba60
nop
mov rdx, qword [rbp + 0x3d8]
cmp rdx, 0x10
jb 0x140019c82
inc rdx
mov rcx, qword [rbp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019c7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019c7d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140081d30
mov ecx, 0xe0
call fcn.14008226c
mov rbx, rax
mov qword [rsp + 0x30], rax
xor edx, edx
mov r8d, 0xe0
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
call fcn.14003bb70
nop
mov qword [0x1400a55e0], rax
lea rdx, str.LOCKDOWN_Protocol
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1400a53f0], rax
test rax, rax
je 0x14001a0fa
lea rdx, [0x1400a5408]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [0x1400a5408]
test r8d, r8d
je 0x14001a0fa
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1400a53f8], rax
test rax, rax
je 0x14001a0fa
mov edx, dword [0x1400a5408]
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x140019d52
lea rdx, str.Failed_to_create_snapshot_for_modules.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140021850
lea rdx, [0x140021a20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140019e1a
mov dword [rbp - 0x80], 0x438
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r14, 0xffffffffffffffff
mov r9d, r14d
lea r8, str.LockdownProtocol_Win64_Shipping.exe
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov eax, 2
mul rbx
cmovo rax, r14
mov rcx, rax
call fcn.1400825d0
mov rsi, rax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, r14d
lea r8, str.LockdownProtocol_Win64_Shipping.exe
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rdx, [rbp - 0x80]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
je 0x140019e09
nop word [rax + rax]
lea rax, [rbp - 0x50]
mov r8, rsi
sub r8, rax
nop word [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140019df4
add rax, 2
test ecx, ecx
jne 0x140019de0
mov rcx, rdi
test edx, edx
je 0x140019e71
lea rdx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x140019dd0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call fcn.140081d30
mov qword [0x1400a5400], r15
lea rdx, str.module_base_invalid
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140021850
lea rdx, [0x140021a20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x30], 2
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x3c0]
call fcn.140002190
mov rcx, rax
call fcn.1400232a0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rbp - 0x68]
mov rcx, rsi
call fcn.140081d30
mov qword [0x1400a5400], rbx
test rbx, rbx
je 0x140019e21
mov ecx, 0xe0
call fcn.14008226c
mov rbx, rax
mov qword [rsp + 0x30], rax
xor edx, edx
mov r8d, 0xe0
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
call fcn.14003bb70
nop
mov qword [0x1400a55e0], rax
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140019edf
imul rax, rax, 0x64
jmp 0x140019efa
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rdi, 0x7fffffffe2329aff
movabs rsi, 0x7fffffffffffffff
cmp rax, rdi
jge 0x140019f20
add rax, 0x1dcd6500
mov qword [rsp + 0x30], rax
jmp 0x140019f25
mov qword [rsp + 0x30], rsi
lea rcx, [rsp + 0x30]
call fcn.14002aa50
mov rax, qword [0x1400a55e0]
cmp qword [rax], 0
jne 0x140019f8c
lea rdx, str.open_medal.tv
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140021850
lea rdx, [0x140021a20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x30], 2
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x3c0]
call fcn.140002190
mov rcx, rax
call fcn.1400232a0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140019faa
imul rax, rax, 0x64
jmp 0x140019fc5
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rdi
jge 0x140019fd7
add rax, 0x1dcd6500
mov qword [rsp + 0x30], rax
jmp 0x140019fdc
mov qword [rsp + 0x30], rsi
lea rcx, [rsp + 0x30]
call fcn.14002aa50
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x38], rax
lea rax, [0x140011ef0]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x38]
mov qword [rbp + 0x3c0], rax
mov rcx, qword [0x1400a55e0]
sub rcx, 0xffffffffffffff80
lea rdx, [rsp + 0x38]
call fcn.14003c3a0
nop
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14001a045
mov rax, qword [rcx]
lea rdx, [rsp + 0x38]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov ecx, 8
call fcn.14008226c
lea rcx, [0x140010e70]
mov qword [rax], rcx
mov qword [rbp + 0x3c0], rax
lea rcx, [rbp + 0x3e8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x14002efe0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x3e0], rax
test rax, rax
je 0x14001a0e7
cmp dword [rbp + 0x3e8], 0
jne 0x14001a0a6
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp + 0x3c0], xmm0
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x14001a0cf
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x3e0], xmm0
nop word [rax + rax]
call fcn.14003bf10
jmp 0x14001a0e0
mov dword [rbp + 0x3e8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rdx, str.open_the_game
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140021850
lea rdx, [0x140021a20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x30], 2
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x3c0]
call fcn.140002190
mov rcx, rax
call fcn.1400232a0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3