Function at 0x140017c4c
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x14003c4b8]
xor rax, rsp
mov qword [rbp + 0x70], rax
xor edi, edi
mov dword [rsp + 0x20], 0x8000ffff
lea rax, [rsp + 0x30]
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x48]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rax
xor edx, edx
lea rax, [rsp + 0x68]
mov dword [rsp + 0x50], edi
mov qword [rsp + 0x60], rax
mov r8d, 0x90
lea rax, [0x14002f4e0]
mov dword [rsp + 0x68], edi
mov qword [rbp - 0x68], rax
mov ebx, 0xa
mov byte [rsp + 0x6c], dil
mov byte [rbp - 0x58], dil
mov dword [rbp - 0x70], edi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], 1
mov qword [rbp + 0x48], rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor eax, eax
mov qword [rbp + 0x60], rdi
lea r15, [0x14002c4e8]
mov qword [rbp + 0x50], rax
lea rcx, [rsp + 0x30]
mov qword [rbp + 0x58], rax
mov qword [rsp + 0x30], r15
call fcn.140018cd4
mov rcx, qword [0x14003c500]
or rsi, 0xffffffffffffffff
cmp rcx, rsi
je 0x140017e3e
lea rdx, [rsp + 0x20]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetExitCodeProcess]
mov r14d, 0x103
test eax, eax
je 0x140017d82
cmp dword [rsp + 0x20], r14d
jne 0x140017df9
mov rcx, qword [0x14003c4f0]
cmp rcx, rsi
je 0x140017d61
call qword [sym.imp.api_ms_win_core_kernel32_legacy_l1_1_0.dll_UnregisterWait]
mov qword [0x14003c4f0], rsi
mov rcx, qword [0x14003c500]
xor edx, edx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_TerminateProcess]
mov rcx, qword [0x14003c500]
lea rdx, [rsp + 0x20]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetExitCodeProcess]
mov edx, dword [rsp + 0x20]
cmp edx, r14d
jne 0x140017df9
test ebx, ebx
je 0x140017db1
mov rcx, qword [0x14003c500]
mov edx, 0x3e8
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x140017dc0
mov edx, dword [rsp + 0x20]
dec ebx
cmp edx, r14d
je 0x140017d8b
cmp edx, r14d
jne 0x140017df9
mov ebx, 0x10000103
jmp 0x140017e44
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
test ebx, ebx
jns 0x140017df3
mov rcx, qword [rbp + 0x98]
lea r8, str.onecore_amcoreoctagon_broker_sourceliblpachost.cpp
mov r9d, ebx
mov edx, 0x196
call fcn.140002e14
mov edx, dword [rsp + 0x20]
jmp 0x140017e44
mov rcx, qword [0x14003c500]
mov dword [rsp + 0x20], edi
mov byte [0x14003d0a8], dil
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, qword [0x14003c4f8]
mov qword [0x14003c500], rsi
cmp rcx, rsi
je 0x140017e3e
call qword [sym.imp.RPCRT4.dll_RpcBindingUnbind]
lea rcx, [0x14003c4f8]
call qword [sym.imp.RPCRT4.dll_RpcBindingFree]
mov qword [0x14003c4f8], rsi
mov edx, dword [rsp + 0x20]
mov ebx, edx
lea rcx, [rsp + 0x30]
call fcn.140009c64
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], r15
call fcn.14000b3d8
lea rcx, [rsp + 0x30]
call fcn.14000a8b4
mov eax, ebx
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400281d0
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret