Function at 0x1402fb928
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x58]
sub rsp, 0x120
mov qword [rbp - 0x28], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov rax, qword [0x1405420e0]
xor rax, rsp
mov qword [rbp + 0x10], rax
mov rbx, r9
mov r15, r8
mov qword [rsp + 0x78], rdx
mov r14, rcx
mov qword [rbp - 0x80], rcx
mov rsi, qword [rbp + 0x80]
mov rdi, qword [rbp + 0x88]
mov r13, qword [rbp + 0x90]
mov qword [rbp - 0x30], r13
lea r12, [0x140553448]
mov rcx, r12
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov qword [rbp - 0x20], r12
xor r12d, r12d
mov qword [rbp - 0x16], r12
mov dword [rbp - 0xe], r12d
mov word [rbp - 0xa], r12w
movdqa xmm0, xmmword [0x140420310]
movdqu xmmword [rbp - 8], xmm0
mov word [rbp - 0x18], r12w
mov qword [rbp + 8], r12
lea rdx, [rbp - 0x18]
mov rcx, r13
call fcn.140085570
mov eax, dword [rbp + 8]
mov dword [r13 + 0x20], eax
lea rcx, [r13 + 0x24]
mov qword [rbp - 0x40], rcx
mov eax, dword [rbp + 0xc]
mov dword [rcx], eax
lea rcx, [rbp - 0x18]
call fcn.140055f70
cmp byte [r14], r12b
jne 0x1402fba16
mov rcx, qword [rbp + 0x58]
mov ebx, 0x80070057
mov r9d, ebx
lea r8, str.amcorewcd_source_sensecncproxycncwrappercncwrapper.cpp
lea edx, [r12 + 0x46]
call fcn.14004e0b4
jmp 0x1402fbcdb
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x78], r12
mov rdx, qword [r15]
lea r9, [rsp + 0x70]
mov r8, rdx
mov rdx, qword [rdx]
call fcn.1402fcc88
mov rdx, qword [rbx + 8]
lea r9, [rbp - 0x78]
mov r8, rdx
mov rdx, qword [rdx]
call fcn.1402fcd90
xor eax, eax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], rax
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.1402fbf94
mov ebx, eax
mov r13, qword [rbp - 0x78]
test eax, eax
jns 0x1402fba86
mov rcx, qword [rbp + 0x58]
mov r9d, eax
lea r8, str.amcorewcd_source_sensecncproxycncwrappercncwrapper.cpp
mov edx, reloc.OLEAUT32.dll_VarR8FromUI1
call fcn.14004e0b4
jmp 0x1402fbcaf
mov qword [rsp + 0x60], r12
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x70]
call fcn.1402fc528
mov ebx, eax
test eax, eax
jns 0x1402fbabc
mov rcx, qword [rbp + 0x58]
mov r9d, eax
lea r8, str.amcorewcd_source_sensecncproxycncwrappercncwrapper.cpp
mov edx, 0x50
call fcn.14004e0b4
jmp 0x1402fbc97
xor ebx, ebx
mov qword [rsp + 0x68], rbx
mov r12, qword [rsp + 0x60]
mov rax, qword [r12]
mov rax, qword [rax + 0x20]
mov qword [rbp - 0x38], rax
lea rcx, [r14 + 0x28]
cmp qword [rcx + 0x18], 8
jb 0x1402fbae2
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1402fbd17
mov r15, rbx
mov qword [rbp - 0x58], rbx
cmp qword [rdi + 0x18], 8
jb 0x1402fbafc
mov rdi, qword [rdi]
test rdi, rdi
jne 0x1402fbd39
mov r14, rbx
mov qword [rbp - 0x50], rbx
cmp qword [rsi + 0x18], 8
jb 0x1402fbb16
mov rsi, qword [rsi]
test rsi, rsi
jne 0x1402fbd59
mov rsi, rbx
mov qword [rbp - 0x48], rbx
mov rax, qword [rsp + 0x78]
cmp qword [rax + 0x18], 8
jb 0x1402fbb35
mov rax, qword [rax]
test rax, rax
jne 0x1402fbd79
mov rdi, rbx
mov qword [rsp + 0x78], rbx
mov rcx, qword [rbp - 0x80]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x1402fbb58
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1402fbd9a
mov qword [rbp - 0x80], rbx
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r13
mov r9, qword [rsp + 0x70]
mov r8, rdi
mov rdx, rbx
mov rcx, r12
mov rax, qword [rbp - 0x38]
call qword [str.p76_]
mov r12, qword [rbp - 0x30]
mov dword [r12 + 0x20], eax
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop dword [rax + rax]
nop
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop dword [rax + rax]
nop
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop dword [rax + rax]
nop
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop dword [rax + rax]
nop
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop dword [rax + rax]
xor eax, eax
cmp dword [r12 + 0x20], eax
jl 0x1402fbc3e
mov rdx, qword [rsp + 0x68]
test rdx, rdx
je 0x1402fbc3e
movdqa xmm0, xmmword [0x140420310]
movdqu xmmword [rbp - 8], xmm0
mov word [rbp - 0x18], ax
lea rcx, [rbp - 0x18]
call fcn.140055574
lea rdx, [rbp - 0x18]
mov rcx, r12
call fcn.140085570
lea rcx, [rbp - 0x18]
call fcn.140055f70
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
mov rax, qword [rax + 0x28]
call qword [str.p76_]
mov edx, 0x2710
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x1402fbc7f
or edx, 0xffffffff
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_TerminateProcess]
nop dword [rax + rax]
xor r12d, r12d
mov ebx, r12d
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop dword [rax + rax]
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1402fbcaf
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [str.p76_]
nop
lea rcx, [rbp - 0x70]
call fcn.1401fee5c
nop
mov rcx, r13
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop dword [rax + rax]
nop
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop dword [rax + rax]
nop
lea rcx, [0x140553448]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov eax, ebx
mov rcx, qword [rbp + 0x10]
xor rcx, rsp
call fcn.140356560
mov rbx, qword [rsp + 0x170]
add rsp, 0x120
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
nop dword [rax + rax]
nop
mov r15, rax
mov qword [rbp - 0x58], rax
test rax, rax
je 0x1402fbdc1
jmp 0x1402fbaf2
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
nop dword [rax + rax]
mov r14, rax
mov qword [rbp - 0x50], rax
test rax, rax
je 0x1402fbdcc
jmp 0x1402fbb0c
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
nop dword [rax + rax]
mov rsi, rax
mov qword [rbp - 0x48], rax
test rax, rax
je 0x1402fbdd7
jmp 0x1402fbb26
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
nop dword [rax + rax]
mov rdi, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x1402fbde2
jmp 0x1402fbb46
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
nop dword [rax + rax]
mov rbx, rax
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x1402fbb65
mov ecx, 0x8007000e
call fcn.14021fbf4
nop
mov ecx, 0x8007000e
call fcn.14021fbf4
nop
mov ecx, 0x8007000e
call fcn.14021fbf4
nop
mov ecx, 0x8007000e
call fcn.14021fbf4
nop
mov ecx, 0x8007000e
call fcn.14021fbf4
int3