Function at 0x1400b94bd
Capabilities:
Terminate process

Disassembly:
jmp 0x1400ea710
push rbp
push rdi
sub rsp, 0x428
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0xa2
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1402a4180]
xor rax, rbp
mov qword [rbp + 0x3f8], rax
lea rcx, [0x1402c015c]
call fcn.1400ba6d8
nop
call fcn.1400b7366
nop
mov ecx, 0xe0
call fcn.1400b7267
mov qword [rbp + 0x1d8], rax
cmp qword [rbp + 0x1d8], 0
je 0x1400ea795
mov edx, 0xe0
mov rcx, qword [rbp + 0x1d8]
call fcn.1400b8301
mov rcx, qword [rbp + 0x1d8]
call fcn.1400b84aa
mov qword [rbp + 0x3e8], rax
jmp 0x1400ea7a0
mov qword [rbp + 0x3e8], 0
mov rax, qword [rbp + 0x3e8]
mov qword [rbp + 0x1b8], rax
mov rax, qword [rbp + 0x1b8]
mov qword [0x1402a47c0], rax
lea rcx, str.LOCKDOWN_Protocol
call fcn.1400b9b1b
test eax, eax
je 0x1400ea82d
lea rdx, str.open_the_game
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400b75eb
mov qword [rbp + 0x3e8], rax
lea rdx, [0x1400b7235]
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov dword [rbp + 0x214], 2
lea rdx, [rbp + 0x214]
lea rcx, [rbp + 0x1f8]
call fcn.1400b7c80
mov rcx, rax
call fcn.1400b7a69
nop
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_exit]
nop
mov edx, dword [0x1402a47cc]
lea rcx, str.LockdownProtocol_Win64_Shipping.exe
call fcn.1400ba30e
mov qword [0x1402a47e0], rax
cmp qword [0x1402a47e0], 0
jne 0x1400ea8b1
lea rdx, str.module_base_invalid
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400b75eb
mov qword [rbp + 0x3e8], rax
lea rdx, [0x1400b7235]
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov dword [rbp + 0x254], 2
lea rdx, [rbp + 0x254]
lea rcx, [rbp + 0x238]
call fcn.1400b7c80
mov rcx, rax
call fcn.1400b7a69
nop
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_exit]
nop
mov ecx, 0xe0
call fcn.1400b7267
mov qword [rbp + 0x298], rax
cmp qword [rbp + 0x298], 0
je 0x1400ea8f2
mov edx, 0xe0
mov rcx, qword [rbp + 0x298]
call fcn.1400b8301
mov rcx, qword [rbp + 0x298]
call fcn.1400b84aa
mov qword [rbp + 0x3e8], rax
jmp 0x1400ea8fd
mov qword [rbp + 0x3e8], 0
mov rax, qword [rbp + 0x3e8]
mov qword [rbp + 0x278], rax
mov rax, qword [rbp + 0x278]
mov qword [0x1402a47c0], rax
mov dword [rbp + 0x2d4], 0x1f4
lea rdx, [rbp + 0x2d4]
lea rcx, [rbp + 0x2b8]
call fcn.1400b9850
mov rcx, rax
call fcn.1400b9d23
nop
mov rcx, qword [0x1402a47c0]
call fcn.1400b852c
test rax, rax
jne 0x1400ea9b1
lea rdx, str.open_medal.tv
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400b75eb
mov qword [rbp + 0x3e8], rax
lea rdx, [0x1400b7235]
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov dword [rbp + 0x314], 2
lea rdx, [rbp + 0x314]
lea rcx, [rbp + 0x2f8]
call fcn.1400b7c80
mov rcx, rax
call fcn.1400b7a69
nop
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_exit]
nop
mov dword [rbp + 0x354], 0x1f4
lea rdx, [rbp + 0x354]
lea rcx, [rbp + 0x338]
call fcn.1400b9850
mov rcx, rax
call fcn.1400b9d23
nop
lea rax, [rbp + 0x378]
mov qword [rbp + 0x3d8], rax
lea rdx, [0x1400e5b30]
mov rcx, qword [rbp + 0x3d8]
call fcn.1400b7055
mov qword [rbp + 0x3e8], rax
mov rax, qword [rbp + 0x3e8]
mov qword [rbp + 0x3f0], rax
mov rdx, qword [rbp + 0x3f0]
mov rcx, qword [0x1402a47c0]
call fcn.1400b8310
nop
lea rdx, [0x1400e0aa0]
lea rcx, [rbp + 8]
call fcn.1400b887e
nop
lea rcx, [rbp + 8]
call fcn.1400baa2a
nop
xor eax, eax
cmp eax, 1
je 0x1400eaa52
mov rcx, qword [0x1402a47c0]
call fcn.1400b8b80
nop
jmp 0x1400eaa3c
lea rcx, [rbp + 8]
call fcn.1400b88bf
nop
lea rcx, [rbp - 0x20]
lea rdx, [0x1402379d0]
call fcn.1400b9d96
mov rcx, qword [rbp + 0x3f8]
xor rcx, rbp
call fcn.1400b8a54
lea rsp, [rbp + 0x408]
pop rdi
pop rbp
ret