Function at 0x140092214
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov cl, 1
call fcn.1403009b8
lea rdx, [0x1404583f4]
mov rbx, rax
lea rcx, [0x14042e734]
call fcn.1400f50fc
xor esi, esi
lea rdi, [0x140301680]
lea r15, [0x14045d7d0]
lea r14, [0x140451890]
test rbx, rbx
jne 0x140092277
xor r8d, r8d
xor edx, edx
mov rcx, r14
call fcn.1400018f0
jmp 0x140092370
mov rcx, rbx
mov qword [rbx + 0x138], rsi
mov qword [rbx + 0x140], rsi
mov qword [rbx + 0x148], r14
call fcn.1403007e4
mov r8, rbx
mov dword [rbx + 0x160], eax
mov rdx, rdi
mov rcx, r14
call fcn.1400018f0
test eax, eax
jns 0x1400922d4
mov rcx, rbx
mov qword [0x1404518b8], rsi
call fcn.140300960
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140092370
lea rcx, [0x14045d7c8]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov rax, qword [0x14045d7d0]
test rax, rax
jne 0x14009231d
lea rdx, [0x1404553b0]
lea rcx, [0x14043b27c]
call fcn.1400f4080
xor r8d, r8d
lea rdx, [0x140301620]
lea rcx, [0x140451ae0]
call fcn.1400018f0
mov rax, qword [0x14045d7d0]
mov rcx, r15
jmp 0x140092335
cmp qword [rax + 0x148], r14
je 0x140092350
lea rcx, [rax + 0x150]
mov rax, qword [rcx]
test rax, rax
jne 0x140092322
mov qword [rcx], rbx
lea rdx, [0x140459b48]
lea rcx, [0x14043f010]
call fcn.1400f4a68
lea rcx, [0x14045d7c8]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
lea rdx, [0x140456778]
lea rcx, [0x140432e38]
call fcn.1400f4710
call fcn.140091f9c
cmp qword [0x1404518b8], rdi
mov ebp, eax
je 0x1400923c8
mov rbx, qword [0x1404518b0]
lea rdx, [0x140451f78]
lea rcx, [0x140441c84]
mov dword [0x140451890], esi
call fcn.1400f39cc
mov rcx, rbx
mov qword [0x1404518b0], rsi
call qword [sym.imp.ADVAPI32.dll_EventUnregister]
lea rdx, [0x140456564]
lea rcx, [0x14043c284]
call fcn.1400f43c8
jmp 0x1400924ca
lea rcx, [0x14045d7c8]
mov rdi, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov rbx, qword [0x14045d7d0]
jmp 0x1400923f7
lea rax, [rbx + 0x150]
cmp qword [rbx + 0x148], r14
je 0x1400923fe
mov rbx, qword [rax]
mov r15, rax
test rbx, rbx
jne 0x1400923e1
jmp 0x14009245b
mov rax, qword [rax]
lea rdx, [0x140458c48]
lea rcx, [0x14042b520]
mov qword [r15], rax
mov rdi, rbx
call fcn.1400f3318
mov rcx, rbx
call fcn.140301234
cmp qword [0x14045d7d0], rsi
jne 0x14009245b
mov rbx, qword [0x140451b00]
lea rdx, [0x140456ca4]
lea rcx, [0x1404330fc]
call fcn.1400f4dac
mov rcx, rbx
mov dword [0x140451ae0], esi
mov qword [0x140451b00], rsi
call qword [sym.imp.ADVAPI32.dll_EventUnregister]
lea rcx, [0x14045d7c8]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
test rdi, rdi
je 0x140092475
mov rcx, rdi
call fcn.140300960
mov rcx, qword [0x1404518b0]
mov qword [0x1404518b0], rsi
mov dword [0x140451890], esi
call qword [sym.imp.ADVAPI32.dll_EventUnregister]
lea rdx, [0x140453c64]
mov qword [0x1404518b8], rsi
lea rcx, [0x1404308c4]
call fcn.1400f3d28
test rdi, rdi
je 0x1400924ca
mov rcx, rdi
call fcn.140300960
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
test ebp, ebp
jns 0x1400924ea
lea rdx, [0x14045845c]
lea rcx, [0x140434580]
call fcn.1400f3670
mov ecx, ebp
call fcn.14007ac40
jmp 0x14009251c
mov ebx, dword [0x14045c7c0]
lea rdx, [0x14045bf94]
lea rcx, [0x1404386d8]
call fcn.1400f4a68
test ebx, ebx
mov edi, esi
sete dil
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, edi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, ebp
call fcn.14007ace8
mov rbx, qword [rsp + 0x40]
test ebp, ebp
mov rbp, qword [rsp + 0x48]
sets sil
mov eax, esi
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret