Function at 0x140003f50
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x140014040]
xor rax, rsp
mov qword [rbp + 0x50], rax
xor r14d, r14d
mov r15d, r14d
mov dword [rsp + 0x50], r14d
lea rdx, str.Starting_process_termination_cycle.
lea rcx, [rsp + 0x78]
call fcn.140008400
nop
lea rcx, [rsp + 0x78]
call fcn.140001860
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x140003fee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003fe9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003fe9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000bd2c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], rax
lea rcx, [rbp - 0x28]
call fcn.140002f70
nop
mov r12, qword [rbp - 0x28]
mov r13, qword [rbp - 0x20]
cmp r12, r13
je 0x140004899
nop word [rax + rax]
lea rsi, [r12 + 8]
mov rcx, rsi
cmp qword [rsi + 0x18], 7
jbe 0x140004032
mov rcx, qword [rsi]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.140008400
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
or r15d, 1
mov dword [rsp + 0x50], r15d
mov r8, qword [rbp - 0x38]
cmp r8, 8
jb 0x14000408a
mov rdx, r8
lea rcx, [rsp + 0x30]
call fcn.140009670
mov qword [rsp + 0x40], r14
mov r8, qword [rbp - 0x38]
lea rax, [rbp - 0x48]
mov rcx, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x30]
cmp rdx, 7
cmova rax, rcx
lea rdi, [rax + r8*2]
lea rbx, [rbp - 0x48]
cmova rbx, rcx
cmp rbx, rdi
je 0x14000410b
nop
movzx ecx, word [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
cmp rdx, r8
jae 0x1400040ec
lea rcx, [rdx + 1]
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x30]
cmp r8, 7
cmova rcx, qword [rsp + 0x30]
mov word [rcx + rdx*2], ax
mov word [rcx + rdx*2 + 2], r14w
jmp 0x1400040fa
movzx r9d, ax
lea rcx, [rsp + 0x30]
call fcn.140009a80
add rbx, 2
cmp rbx, rdi
jne 0x1400040b0
mov rdx, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x140004143
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000413e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000484c
call fcn.14000bd2c
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rbp - 0x38], xmm1
and r15d, 0xfffffffe
mov r8d, dword [r12]
xor edx, edx
mov ecx, 0x411
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
mov r8, rax
lea rdx, [rbp - 0x48]
mov ecx, dword [r12]
call fcn.140003540
test al, al
jne 0x1400047ff
test r14, r14
je 0x1400047ff
mov rcx, r14
call fcn.140002470
test al, al
jne 0x1400041dd
lea rdx, [0x140014978]
mov rcx, rsi
call fcn.1400029b0
test al, al
jne 0x1400041dd
mov rdx, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 7
jbe 0x1400041bb
mov rsi, qword [rsi]
mov qword [rsp + 0x20], 9
lea r9, str.steamapps
mov rcx, rsi
call fcn.140009590
cmp rax, 0xffffffffffffffff
je 0x1400047f5
mov r8d, dword [r12]
lea r9, [rbp + 0x1a]
nop word [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x1400041f0
lea r8, [rbp + 0x1a]
mov rdx, r9
lea rcx, [rsp + 0x78]
call fcn.14000a6c0
or r15d, 0xc0
lea r8, [rsp + 0x78]
lea rdx, str.Terminating_process_PID:
lea rcx, [rsp + 0x58]
call fcn.140008f10
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x26
jb 0x140004297
lea rsi, [rcx + 0x26]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 7
jbe 0x140004279
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x4c
lea rdx, str._due_to_DLL__publisher__or_path_match.
call sub.VCRUNTIME140.dll_memmove
xor eax, eax
mov word [rdi + rsi*2], ax
jmp 0x1400042b7
mov qword [rsp + 0x20], 0x26
lea r9, str._due_to_DLL__publisher__or_path_match.
mov edx, 0x26
mov rcx, rbx
call fcn.140009f70
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xor edi, edi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
bts r15d, 8
lea rcx, [rsp + 0x30]
call fcn.140001860
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x14000433d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004338
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004853
call fcn.14000bd2c
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], di
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x140004392
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000438d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000485a
call fcn.14000bd2c
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], di
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x1400043e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400043e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004861
call fcn.14000bd2c
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1400046f6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
lea r10, [rbp + 0x4a]
nop word [rax + rax]
sub r10, 2
mov eax, 0xcccccccd
mul r9d
shr edx, 3
movzx ecx, dx
shl cx, 2
lea r8d, [rcx + rdx]
add r8w, r8w
sub r9w, r8w
add r9w, 0x30
mov word [r10], r9w
mov r9d, edx
test edx, edx
jne 0x140004410
lea r8, [rbp + 0x4a]
mov rdx, r10
lea rcx, [rbp - 0x10]
call fcn.14000a6c0
or r15d, 0x18000
mov r8d, dword [r12]
lea r9, [rbp + 0x4a]
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x140004461
lea r8, [rbp + 0x4a]
mov rdx, r9
lea rcx, [rsp + 0x58]
call fcn.14000a6c0
or r15d, 0x60000
lea r8, [rsp + 0x58]
lea rdx, str.Failed_to_terminate_process_PID:
lea rcx, [rbp - 0x68]
call fcn.140008f10
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0xe
jb 0x140004509
lea rsi, [rcx + 0xe]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 7
jbe 0x1400044e9
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x1c
lea rdx, str.._Error_code:
call sub.VCRUNTIME140.dll_memmove
xor eax, eax
mov word [rdi + rsi*2], ax
xor edi, edi
jmp 0x140004529
mov qword [rsp + 0x20], 0xe
lea r9, str.._Error_code:
mov edx, 0xe
mov rcx, rbx
call fcn.140009f70
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
bts r15d, 0x13
lea r9, [rbp - 0x10]
lea r8, [rsp + 0x78]
lea rcx, [rsp + 0x30]
call fcn.14000a2b0
bts r15d, 0x14
lea rcx, [rsp + 0x30]
call fcn.140001860
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x1400045b2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004868
call fcn.14000bd2c
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], di
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x140004607
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004601
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000486f
call fcn.14000bd2c
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x140004647
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004642
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004876
call fcn.14000bd2c
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], di
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x140004699
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004694
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000487d
call fcn.14000bd2c
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], di
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x1400047f5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400047f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400047f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r8d, dword [r12]
lea r9, [rbp + 0x4a]
nop
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x140004700
lea r8, [rbp + 0x4a]
mov rdx, r9
lea rcx, [rbp - 0x10]
call fcn.14000a6c0
or r15d, 0x600000
lea r8, [rbp - 0x10]
lea rdx, str.Successfully_terminated_process_PID:
lea rcx, [rbp - 0x68]
call fcn.140008f10
nop
mov rcx, rax
call fcn.140001860
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x1400047a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400047a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004884
call fcn.14000bd2c
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], di
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x1400047f5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400047f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000488b
call fcn.14000bd2c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 7
jbe 0x14000483b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140004836
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004892
call fcn.14000bd2c
add r12, 0x40
cmp r12, r13
je 0x140004899
xor r14d, r14d
jmp 0x140004020
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.Process_termination_cycle_completed.
lea rcx, [rbp - 0x10]
call fcn.140008400
nop
lea rcx, [rbp - 0x10]
call fcn.140001860
nop
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x1400048f8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400048f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400048f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000bd2c
nop
mov rbx, qword [rbp - 0x28]
test rbx, rbx
je 0x140004960
mov rdi, qword [rbp - 0x20]
cmp rbx, rdi
je 0x140004925
nop word [rax + rax]
mov rcx, rbx
call fcn.140003480
add rbx, 0x40
cmp rbx, rdi
jne 0x140004910
mov rbx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x18]
sub rdx, rbx
and rdx, 0xffffffffffffffc0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140004958
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004958
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14000bd2c
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.14000b8a0
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret