Function at 0x14002ccec
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov r14d, edx
mov r12, rcx
lea r15, [0x14010f570]
lea r8, str.CProcessShutdown::ProcessCallBack____n
mov edx, 2
mov rcx, r15
mov r13, r9
call fcn.140001000
mov rcx, r13
call fcn.1400980d0
mov rcx, r13
lea rdx, [rax + 1]
call fcn.1400990e0
lea rdx, str..EXE
mov rcx, r13
call fcn.140099250
test rax, rax
je 0x14002d01b
mov rax, qword [r12 + 0x60]
mov rsi, qword [r12 + 0x38]
mov rbp, qword [rax]
mov rbx, qword [r12 + 0x60]
test rsi, rsi
je 0x14002cd76
cmp rsi, qword [r12 + 0x38]
je 0x14002cd7b
call fcn.14009861c
cmp rbp, rbx
je 0x14002d01b
test rsi, rsi
jne 0x14002cd93
call fcn.14009861c
xor r11d, r11d
jmp 0x14002cd96
mov r11, qword [rsi]
cmp rbp, qword [r11 + 0x28]
jne 0x14002cda1
call fcn.14009861c
cmp qword [rbp + 0x30], 0x10
jb 0x14002cdae
mov rdx, qword [rbp + 0x18]
jmp 0x14002cdb2
lea rdx, [rbp + 0x18]
lea r8, [rbp + 0x10]
lea rcx, [rsp + 0x20]
call fcn.14000c3fc
mov rdi, qword [rsp + 0x20]
cmp rdi, 0xfffffffffffffffc
je 0x14002cdf6
test rdi, rdi
jne 0x14002cdd5
call fcn.14009861c
cmp qword [rdi + 0x20], 0x10
jb 0x14002cde2
mov rcx, qword [rdi + 8]
jmp 0x14002cde6
lea rcx, [rdi + 8]
add rcx, qword [rdi + 0x18]
cmp qword [rsp + 0x28], rcx
jb 0x14002cdf6
call fcn.14009861c
test rsi, rsi
jne 0x14002ce05
call fcn.14009861c
xor r11d, r11d
jmp 0x14002ce08
mov r11, qword [rsi]
cmp rbp, qword [r11 + 0x28]
jne 0x14002ce13
call fcn.14009861c
cmp qword [rbp + 0x30], 0x10
jb 0x14002ce20
mov rdx, qword [rbp + 0x18]
jmp 0x14002ce24
lea rdx, [rbp + 0x18]
lea r8, [rbp + 0x10]
lea rcx, [rsp + 0x30]
call fcn.14000c3fc
mov rdi, qword [rsp + 0x30]
cmp rdi, 0xfffffffffffffffc
je 0x14002ce6c
test rdi, rdi
jne 0x14002ce47
call fcn.14009861c
cmp qword [rdi + 0x20], 0x10
jb 0x14002ce54
mov rcx, qword [rdi + 8]
jmp 0x14002ce58
lea rcx, [rdi + 8]
mov rax, qword [rdi + 0x18]
lea rdx, [rcx + rax]
cmp qword [rsp + 0x38], rdx
jb 0x14002ce6c
call fcn.14009861c
mov rcx, qword [rsp + 0x28]
call fcn.1400980d0
mov rcx, qword [rsp + 0x38]
lea rdx, [rax + 1]
call fcn.1400990e0
test rsi, rsi
jne 0x14002ce93
call fcn.14009861c
xor r11d, r11d
jmp 0x14002ce96
mov r11, qword [rsi]
cmp rbp, qword [r11 + 0x28]
jne 0x14002cea1
call fcn.14009861c
cmp qword [rbp + 0x30], 0x10
jb 0x14002ceae
mov rdx, qword [rbp + 0x18]
jmp 0x14002ceb2
lea rdx, [rbp + 0x18]
mov rcx, r13
call fcn.140099250
test rax, rax
je 0x14002cff5
test rsi, rsi
jne 0x14002ced2
call fcn.14009861c
xor r11d, r11d
jmp 0x14002ced5
mov r11, qword [rsi]
cmp rbp, qword [r11 + 0x28]
jne 0x14002cee0
call fcn.14009861c
cmp qword [rbp + 0x30], 0x10
jb 0x14002ceed
mov r9, qword [rbp + 0x18]
jmp 0x14002cef1
lea r9, [rbp + 0x18]
lea r8, str.Trying_to_terminate_process__s_n
mov edx, 1
mov rcx, r15
call fcn.140001000
mov r8d, r14d
xor edx, edx
mov ecx, 0x1f0fff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
jne 0x14002cf5f
test rsi, rsi
jne 0x14002cf2c
call fcn.14009861c
xor r11d, r11d
jmp 0x14002cf2f
mov r11, qword [rsi]
cmp rbp, qword [r11 + 0x28]
jne 0x14002cf3a
call fcn.14009861c
cmp qword [rbp + 0x30], 0x10
jb 0x14002cf47
mov r9, qword [rbp + 0x18]
jmp 0x14002cf4b
lea r9, [rbp + 0x18]
lea r8, str.Could_not_open_process__s._n
mov edx, 0x400
mov rcx, r15
call fcn.140001000
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x14002cfaa
test rsi, rsi
jne 0x14002cf7d
call fcn.14009861c
xor r11d, r11d
jmp 0x14002cf80
mov r11, qword [rsi]
cmp rbp, qword [r11 + 0x28]
jne 0x14002cf8b
call fcn.14009861c
cmp qword [rbp + 0x30], 0x10
jb 0x14002cf98
mov r9, qword [rbp + 0x18]
jmp 0x14002cf9c
lea r9, [rbp + 0x18]
lea r8, str.Could_not_terminate_process__s._n
mov edx, 0x400
jmp 0x14002cfe4
test rsi, rsi
jne 0x14002cfb9
call fcn.14009861c
xor r11d, r11d
jmp 0x14002cfbc
mov r11, qword [rsi]
cmp rbp, qword [r11 + 0x28]
jne 0x14002cfc7
call fcn.14009861c
cmp qword [rbp + 0x30], 0x10
jb 0x14002cfd4
mov r9, qword [rbp + 0x18]
jmp 0x14002cfd8
lea r9, [rbp + 0x18]
lea r8, str.Terminated_process__s_n
mov edx, 1
mov rcx, r15
call fcn.140001000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rsi, rsi
jne 0x14002d004
call fcn.14009861c
xor r11d, r11d
jmp 0x14002d007
mov r11, qword [rsi]
cmp rbp, qword [r11 + 0x28]
jne 0x14002d012
call fcn.14009861c
mov rbp, qword [rbp]
jmp 0x14002cd65
lea r8, str.CProcessShutdown::ProcessCallBack____n
mov edx, 4
mov rcx, r15
call fcn.140001000
lea r11, [rsp + 0x40]
mov eax, 1
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret