Function at 0x14000d5d0
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
mov qword [rbp - 0x11], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
lea rcx, [0x14006deb8]
call fcn.140011920
test rax, rax
je 0x14000d827
call fcn.1400160a0
ucomisd xmm0, qword [0x14005a498]
jp 0x14000d67d
jne 0x14000d67d
lea rdx, [0x140052a50]
lea rcx, [rbp - 9]
call fcn.140004810
mov r10, rax
lea rdx, str.error_system_time
lea rcx, [rbp - 0x69]
call fcn.140004810
mov rdx, rax
mov rcx, r10
call fcn.140004180
mov r8, rax
mov rcx, rdx
call fcn.140004180
mov rdx, rax
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp - 0x69]
call fcn.140004460
nop
lea rcx, [rbp - 9]
call fcn.140004460
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp eax, 4
je 0x14000d822
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
xor edi, edi
mov dword [rbp + 0x67], edi
lea rdx, [rbp + 0x67]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rbp + 0x67], 0xffffffff
je 0x14000d7ed
lea rcx, vtable.CVolCommonBaseWithMemManager.0
mov qword [rbp - 0x69], rcx
lea rbx, vtable.CVolObject.0
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], rdi
mov qword [rbp - 0x59], rdi
lea rax, vtable.CWString.0
mov qword [rbp - 0x69], rax
lea rax, [rbp - 0x49]
mov qword [rbp + 0x67], rax
mov qword [rbp - 0x49], rcx
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], rdi
mov qword [rbp - 0x39], rdi
lea rax, vtable.CVolMem.0
mov qword [rbp - 0x49], rax
mov qword [rbp - 0x31], rdi
mov qword [rbp - 0x21], rdi
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x19], 0x40
mov qword [rbp - 0x51], rdi
mov qword [rbp - 0x19], 0xfe
lea rax, vtable.CWConstString.0
mov qword [rbp - 0x69], rax
lea rdi, [0x140052a58]
mov qword [rbp - 0x51], rdi
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 9]
call fcn.140012ac0
nop
mov rdx, rax
mov rcx, qword [0x14006def8]
call fcn.1400085b0
nop
lea rcx, [rbp - 9]
call fcn.1400055d0
nop
lea rcx, [rbp - 0x49]
call fcn.1400055d0
nop
mov qword [rbp - 0x69], rbx
lea rdx, [rbp - 9]
call fcn.14000d840
nop
mov rcx, rax
call fcn.1400013f0
cmp eax, 1
sete bl
lea rcx, [rbp - 9]
call fcn.1400055d0
test bl, bl
je 0x14000d822
mov rdx, rdi
lea rcx, [rbp - 0x69]
call fcn.140004810
nop
mov rdx, rax
lea rcx, [rbp - 9]
call fcn.140012ac0
mov rdx, rax
call fcn.1400041a0
mov rcx, rax
call fcn.1400085b0
nop
lea rcx, [rbp - 9]
call fcn.1400055d0
nop
lea rcx, [rbp - 0x69]
call fcn.140004460
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
test eax, eax
jne 0x14000d7fd
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
lea ecx, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret