Function at 0x140003adc
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rdi
sub rsp, 0x60
mov qword [0x140015128], r8
mov eax, 0x46ae
mov dword [rsp + 0x80], eax
mov edi, 0x7af8
mov dword [rsp + 0x40], 0x43aa
mov dword [rsp + 0x48], 0x3a00
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x4c], 0
mov dword [rsp + 0x50], 0
mov ecx, dword [rsp + 0x80]
mov edx, dword [rsp + 0x4c]
xor ecx, edi
mov r8d, dword [rsp + 0x80]
add edx, 0x3552
mov r9d, dword [rsp + 0x48]
xor r8d, edi
mov r11d, dword [rsp + 0x50]
add r9d, 0x256
mov eax, dword [rsp + 0x40]
add r11d, 0x3a30
mov r10, qword [section..data]
xor eax, 0x77b1
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r10
mov dword [rsp + 0x20], r11d
call fcn.140003658
mov rcx, qword [section..data]
mov r9d, dword [0x140015034]
add r9d, 0xfff35547
mov dword [rsp + 0x50], eax
mov r8d, dword [rcx + 0x104]
mov edx, dword [rcx + 0x4c]
sub r8d, 0x1a345b0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [rsp + 0x40]
lea rbp, [0x140015010]
mov edx, dword [rsp + 0x40]
add rax, 0x1000
mov r8d, dword [rsp + 0x4c]
sub ecx, 0xd7
mov r9d, dword [rsp + 0x80]
xor edx, 0x79aa
mov qword [0x1400150c0], rax
add r8d, 0x3cec
mov eax, dword [rsp + 0x44]
sub r9d, 0x11a0
sub eax, 0x2d2
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x20], eax
call fcn.1400016a8
mov dword [rsp + 0x4c], eax
mov ecx, dword [rsp + 0x80]
mov eax, dword [rsp + 0x40]
add ecx, 0xfffffcfc
cmp eax, ecx
jl 0x140003e37
mov ecx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x80]
add ecx, 0xfffffd61
cmp eax, ecx
je 0x140003da8
mov ecx, dword [rsp + 0x40]
mov ebx, 0xf5c
mov edx, dword [rsp + 0x48]
sub ecx, 0x1283
mov r8d, dword [rsp + 0x50]
sub edx, 0x8d9
mov eax, dword [rsp + 0x4c]
xor r8d, ebx
mov r9, qword [section..data]
sub eax, 0x57e
mov dword [rsp + 0x20], eax
call fcn.140001dd4
mov dword [rsp + 0x48], eax
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
sub ecx, 0x754
mov r9d, dword [rsp + 0x48]
sub edx, 0x2d2
mov r11d, dword [rsp + 0x48]
sub r9d, 0x4f2
mov r10d, dword [rsp + 0x44]
xor r11d, 0x780c
mov eax, dword [rsp + 0x4c]
sub r10d, 0x9c2
mov r8, qword [section..data]
sub eax, 0x704
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call fcn.1400029dc
mov dword [rsp + 0x44], eax
mov ecx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x80]
xor ecx, 0xfcb
mov r8d, dword [rsp + 0x48]
xor edx, 0x7076
mov r9d, dword [rsp + 0x50]
add r8d, 0x9dc
xor r9d, 0x26f
mov qword [rsp + 0x20], rbp
call fcn.1400020ac
mov dword [rsp + 0x40], eax
mov r8, rbp
mov eax, dword [rsp + 0x80]
mov eax, dword [rsp + 0x44]
mov edx, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x44]
xor edx, ebx
mov rax, qword [0x140015090]
sub ecx, 0x296
xor ecx, edi
add edx, 0xfffffd15
sub ecx, 0x1587
cmp edx, ecx
cmovne rax, qword [0x1400150c0]
xor edx, 0x7781
mov qword [0x140015090], rax
mov dword [rsp + 0x40], edx
mov ecx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x48]
add ecx, 0x3e7
mov r9d, dword [rsp + 0x4c]
add edx, 0xcae
mov eax, dword [rsp + 0x44]
add r9d, 0x96
xor eax, 0x7c3f
mov dword [rsp + 0x20], eax
call fcn.140002320
mov dword [rsp + 0x80], eax
jmp 0x140003e37
mov eax, dword [rsp + 0x80]
mov ecx, dword [0x1400150ac]
sub ecx, eax
mov eax, dword [rsp + 0x80]
cmp eax, ecx
je 0x140003e37
mov ebx, dword [0x140015084]
mov edi, 0x43dc
jmp 0x140003e2d
mov eax, dword [rsp + 0x4c]
mov edx, dword [0x140015058]
add edx, dword [0x140015078]
and eax, edx
cmp dword [0x1400150f4], eax
jae 0x140003e2b
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x80]
sub edx, eax
sub ecx, dword [0x140015018]
movsxd rdx, edx
call qword [sym.imp.KERNEL32.dll_GetHandleInformation]
mov eax, dword [rsp + 0x40]
mov rdx, qword [section..data]
sub eax, 0x3a00
movsxd rcx, eax
mov eax, dword [rsp + 0x40]
add eax, dword [rdx + 0x7c]
mov edx, eax
call qword [sym.imp.KERNEL32.dll_GetHandleInformation]
inc ebx
mov eax, dword [rsp + 0x44]
sub eax, edi
cmp ebx, eax
jne 0x140003dcf
mov ecx, dword [0x1400150f0]
call qword [sym.imp.KERNEL32.dll_ExitProcess]