Function at 0x1400073a0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rbx, qword [0x140025340]
mov rdi, qword [0x140025348]
lea rcx, [0x140025330]
cmp rdi, 0xf
cmova rcx, qword [0x140025330]
cmp rbx, 5
jne 0x1400073ec
mov r8, rbx
lea rdx, str.eject
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140007420
lea rcx, [0x140025330]
cmp rdi, 0xf
cmova rcx, qword [0x140025330]
cmp rbx, 8
jne 0x140007b65
mov r8, rbx
lea rdx, str.uninject
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140007b65
mov rbx, qword [0x140026308]
cmp rbx, 2
jne 0x140007486
mov r8, qword [0x140023300]
lea rcx, [0x1400232f0]
cmp qword [0x140023308], 0xf
cmova rcx, qword [0x1400232f0]
cmp r8, 1
jne 0x140007b19
lea rdx, [0x14001b078]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140007b19
lea rdx, [0x140025330]
lea rcx, [rbp - 0x40]
call fcn.140003520
mov rcx, rax
call fcn.140006810
jmp 0x140007b5e
cmp rbx, 1
jne 0x140007b19
call fcn.140006340
xor edi, edi
mov dword [0x1400230d0], edi
mov dword [0x1400264a0], 2
mov qword [rsp + 0x20], rdi
lea r9d, [rbx + 5]
lea r8, [0x140026310]
mov rdx, qword [0x140026480]
mov rcx, qword [0x140026200]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rbx, qword [0x1400263d0]
test rbx, rbx
je 0x14000751e
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x140026460]
test rbx, rbx
je 0x140007571
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x1400263a8]
test rbx, rbx
je 0x1400075c4
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x140026340]
test rbx, rbx
je 0x140007617
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x140026278]
test rbx, rbx
je 0x14000766a
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x140026378]
test rbx, rbx
je 0x1400076bd
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x1400262d0]
test rbx, rbx
je 0x140007710
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x1400262f0]
test rbx, rbx
je 0x140007763
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x1400262c8]
test rbx, rbx
je 0x1400077b6
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x140026348]
test rbx, rbx
je 0x140007809
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x140026418]
test rbx, rbx
je 0x14000785c
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rdi
mov r9d, 5
lea r8, [0x1400262d8]
mov rdx, qword [0x140026390]
mov rcx, qword [0x140026200]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rbx, qword [0x140026368]
test rbx, rbx
je 0x1400078e0
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x1400262b8]
test rbx, rbx
je 0x140007933
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [0x140023130]
mov rdx, qword [0x1400263b8]
mov rcx, qword [0x140026200]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], rdi
mov r9d, 0xb
lea r8, [0x140026330]
mov rdx, qword [0x1400262c0]
mov rcx, qword [0x140026200]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rbx, qword [0x1400263b8]
test rbx, rbx
je 0x1400079dd
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x20], rdi
mov r9d, 5
lea r8, [0x140026320]
mov rdx, qword [0x1400262a0]
mov rcx, qword [0x140026200]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rbx, qword [0x1400262e8]
test rbx, rbx
je 0x140007a61
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
mov rbx, qword [0x140026290]
test rbx, rbx
je 0x140007ab4
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, [rbp - 0x40]
call fcn.1400033b0
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call fcn.140005d30
lea rcx, [rbp - 0x40]
call fcn.140001810
mov ebx, eax
lea rcx, [rbp - 0x40]
call fcn.1400033b0
test ebx, ebx
je 0x140007b02
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [0x1400230bc]
mov rdx, qword [0x140026458]
mov rcx, qword [0x140026200]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rbp - 0x40]
mov qword [rbp + 0x10], rax
shl rbx, 5
lea rdx, [0x1400232d0]
add rdx, 0xffffffffffffffe0
add rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.140003520
mov rbx, rax
lea rdx, [0x140025330]
lea rcx, [rbp - 0x20]
call fcn.140003520
nop
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140006670
mov byte [0x1400261cd], 1
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret