Function at 0x140068d10
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb8
mov rdi, r9
mov r14, r8
mov rbx, rdx
mov rsi, rcx
mov r13, qword [rsp + 0x120]
mov rax, qword [0x140180518]
xor rax, rsp
mov qword [rsp + 0xb0], rax
movabs rax, 0xff00000000
and rax, r8
imul ecx, r14d, 0x3e8
xor edx, edx
cmp rax, 1
sbb edx, edx
or edx, ecx
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x50], xmm0
mov r12d, dword [rbx + 0x10]
mov r15d, dword [rbx + 0x14]
test r13, r13
je 0x140068d81
mov byte [r13 + 0x18], 0
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140068dd9
cmp byte [rsp + 0x128], 0
jne 0x140068ee8
test r14d, r14d
je 0x140068ee8
mov rcx, qword [rbx + 8]
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
je 0x140068fa5
mov rcx, qword [rbx + 8]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r13, r13
je 0x140068e83
mov rcx, qword [rbx + 8]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x48]
lea r8, [rsp + 0x40]
lea r9, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
test eax, eax
je 0x140068e83
mov rcx, qword [rbx + 8]
lea rdx, [rsp + 0x68]
mov r8d, 0x48
call sub.KERNEL32.dll_K32GetProcessMemoryInfo
test eax, eax
je 0x140068e83
imul rax, qword [rsp + 0x30], 0x64
movabs r8, 0x20c49ba5e353f7cf
imul r8
mov rcx, rdx
mov rax, rdx
shr rax, 0x3f
sar rcx, 7
add rcx, rax
imul rax, qword [rsp + 0x38], 0x64
imul r8
mov rax, rdx
shr rax, 0x3f
sar rdx, 7
add rdx, rax
mov rax, qword [rsp + 0xa8]
shr rax, 0xa
add rdx, rcx
cmp byte [r13 + 0x18], 0
mov qword [r13], rdx
mov qword [r13 + 8], rcx
mov qword [r13 + 0x10], rax
jne 0x140068e83
mov byte [r13 + 0x18], 1
mov rcx, qword [rbx + 8]
lea rdx, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov r14d, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
cmp eax, 6
je 0x140068eac
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r14d, r14d
je 0x140068eff
mov eax, dword [rsp + 0x48]
test eax, eax
je 0x140068f6e
mov ecx, eax
and ecx, 0xbfff0000
mov edx, eax
and edx, 0x7fffffff
test al, al
mov r12d, 1
cmovne r12d, edx
cmp ecx, 0x80000000
cmove r12d, eax
jmp 0x140068f6e
mov dword [rsi], 0
mov qword [rsi + 8], 0
mov dword [rsi + 0x10], 0
jmp 0x140068f7e
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r12d, 0xfffffffe
test rdi, rdi
je 0x140068f6e
mov ecx, 0x30
call fcn.1401210e8
mov rbx, rax
mov qword [rsp + 0x78], 0x21
mov qword [rsp + 0x80], 0x2f
movups xmm0, xmmword [str.Failed_getting_status_for_program]
movups xmmword [rax], xmm0
movups xmm0, xmmword [0x14015d1bd]
movups xmmword [rax + 0x10], xmm0
mov word [rax + 0x20], 0x6d
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.140069c20
mov edx, 0x30
mov rcx, rbx
call fcn.14012112c
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x10], r12d
mov dword [rsi + 0x14], r15d
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.1401213e0
mov rax, rsi
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
test rdi, rdi
je 0x140069013
mov ecx, 0x30
call fcn.1401210e8
mov r14, rax
mov qword [rsp + 0x78], 0x25
mov qword [rsp + 0x80], 0x2f
movups xmm0, xmmword [str.Failed_to_terminate_timed_out_program]
movups xmmword [rax], xmm0
movups xmm0, xmmword [0x14015d173]
movups xmmword [rax + 0x10], xmm0
movabs rax, 0x6d6172676f727020
mov qword [r14 + 0x1d], rax
mov byte [r14 + 0x25], 0
mov qword [rsp + 0x68], r14
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.140069c20
mov edx, 0x30
mov rcx, r14
call fcn.14012112c
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x10], 0xfffffffe
jmp 0x140068f7a