Function at 0x614f43
Capabilities:
Terminate process

Disassembly:
push 0x1cc
mov eax, 0x6bf177
call fcn.0064d018
mov esi, ecx
push 7
pop edi
xor eax, eax
mov dword [ebp - 0x40], edi
xor ebx, ebx
mov word [ebp - 0x54], ax
push str.PID:
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x44], ebx
call fcn.0040d510
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x6c]
xor eax, eax
mov dword [ebp - 0x5c], ebx
push str.ShutdownProcess:_Terminating_Process
mov dword [ebp - 0x58], edi
mov word [ebp - 0x6c], ax
call fcn.0040d510
mov ecx, edi
mov byte [ebp - 4], 1
xor eax, eax
lea edi, [ebp - 0xec]
rep stosd dword es:[edi], eax
mov edx, esi
lea ecx, [ebp - 0x12]
call fcn.00445520
push ecx
lea ecx, [ebp - 0x12]
push ecx
push eax
lea ecx, [ebp - 0x84]
call fcn.0040e3c6
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x6c]
push eax
push ecx
lea ecx, [ebp - 0xa0]
call fcn.005e9850
xor eax, eax
mov dword [ebp - 0xa0], vtable.C2R::ContextDataMsg.0
mov word [ebp - 0xe8], ax
mov ecx, 0x240014b
lea eax, [ebp - 0xa0]
mov dword [ebp - 0xec], vtable.C2R::CommonTelemetry.0
push eax
lea eax, [ebp - 0xec]
mov dword [ebp - 0xd8], ebx
push eax
push str.LightProcessKiller::ShutdownProcess
push 0x32
push 0xe
pop edx
mov dword [ebp - 0xd4], 7
call fcn.00411dd9
lea ecx, [ebp - 0xe8]
call fcn.0040d475
lea ecx, [ebp - 0x9c]
call fcn.0040d475
lea ecx, [ebp - 0x84]
call fcn.0040d475
lea ecx, [ebp - 0x6c]
call fcn.0040d475
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.0040d475
push esi
push ebx
push 0x100001
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
jne 0x6151d4
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov dword [ebp - 0x1d8], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x1d8]
mov edx, str.Failed_to_OpenProcess._Error___d
push eax
call fcn.004140bb
mov esi, eax
mov dword [ebp - 4], 3
cmp dword [esi + 0x14], 8
jb 0x6150a9
mov esi, dword [esi]
call edi
push 7
pop edx
mov dword [ebp - 0x1d8], eax
lea edi, [ebp - 0xa0]
xor eax, eax
mov dword [ebp - 0x70], edx
mov ecx, edx
mov word [ebp - 0x84], ax
xor ebx, ebx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], edx
mov word [ebp - 0xb8], ax
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], edx
mov word [ebp - 0xd0], ax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], edx
mov word [ebp - 0x54], ax
lea eax, [ebp - 0x84]
mov byte [ebp - 4], dl
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x16c]
call fcn.005b30c3
xor ecx, ecx
mov dword [ebp - 0xa0], vtable.C2R::CommonTelemetry.0
mov word [ebp - 0x9c], cx
mov edx, 0x3ae
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x8c], ebx
push ecx
push eax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x88], 7
push eax
push str.LightProcessKiller::ShutdownProcess
push 0xa
mov ecx, 0x240014c
mov dword [ebp - 0x60], vtable.Mso::Logging::StructuredObject_wchar_t_const___1_.0
mov dword [ebp - 0x5c], str.ContextData
mov dword [ebp - 0x58], esi
call fcn.00411ea6
lea ecx, [ebp - 0x9c]
call fcn.0040d475
lea ecx, [ebp - 0x16c]
call fcn.00413b8b
lea ecx, [ebp - 0x54]
call fcn.0040d475
lea ecx, [ebp - 0xd0]
call fcn.0040d475
lea ecx, [ebp - 0xb8]
call fcn.0040d475
lea ecx, [ebp - 0x84]
call fcn.0040d475
lea ecx, [ebp - 0xe8]
call fcn.0040d475
xor al, al
jmp 0x6154a6
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x61534a
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov dword [ebp - 0x1d8], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x1d8]
mov edx, str.Call_to_TerminateProcess_failed._Error___d
push eax
call fcn.004140bb
mov esi, eax
push 8
pop eax
mov dword [ebp - 4], eax
cmp dword [esi + 0x14], eax
jb 0x615219
mov esi, dword [esi]
call edi
push 7
pop edx
mov dword [ebp - 0x1d8], eax
lea edi, [ebp - 0xa0]
xor eax, eax
mov dword [ebp - 0xbc], edx
mov ecx, edx
mov word [ebp - 0xd0], ax
rep stosd dword es:[edi], eax
xor edi, edi
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], edx
mov word [ebp - 0x54], ax
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xa4], edx
mov word [ebp - 0xb8], ax
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edx
mov word [ebp - 0x84], ax
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x16c]
call fcn.005b30c3
xor ecx, ecx
mov dword [ebp - 0xa0], vtable.C2R::CommonTelemetry.0
mov word [ebp - 0x9c], cx
mov edx, 0x3ae
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x8c], edi
push ecx
push eax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x88], 7
push eax
push str.LightProcessKiller::ShutdownProcess
push 0xa
mov ecx, 0x240014d
mov dword [ebp - 0x60], vtable.Mso::Logging::StructuredObject_wchar_t_const___1_.0
mov dword [ebp - 0x5c], str.ContextData
mov dword [ebp - 0x58], esi
call fcn.00411ea6
lea ecx, [ebp - 0x9c]
call fcn.0040d475
lea ecx, [ebp - 0x16c]
call fcn.00413b8b
lea ecx, [ebp - 0x84]
call fcn.0040d475
lea ecx, [ebp - 0xb8]
call fcn.0040d475
lea ecx, [ebp - 0x54]
call fcn.0040d475
lea ecx, [ebp - 0xd0]
call fcn.0040d475
lea ecx, [ebp - 0xe8]
call fcn.0040d475
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x6151cd
push 0xea60
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x1d8], eax
test eax, eax
je 0x61549d
lea eax, [ebp - 0x1d8]
mov edx, str.The_call_to_terminate_process_failed._Error___d
push eax
lea ecx, [ebp - 0x104]
call fcn.004140bb
mov esi, eax
mov dword [ebp - 4], 0xd
cmp dword [esi + 0x14], 8
jb 0x61538c
mov esi, dword [esi]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 7
pop edx
mov dword [ebp - 0x1d8], eax
lea edi, [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x58], edx
mov ecx, edx
mov word [ebp - 0x6c], ax
xor ebx, ebx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], edx
mov word [ebp - 0x54], ax
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], edx
mov word [ebp - 0xb8], ax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], edx
mov word [ebp - 0x84], ax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x1d4]
call fcn.005b30c3
xor ecx, ecx
mov dword [ebp - 0x30], vtable.C2R::CommonTelemetry.0
mov word [ebp - 0x2c], cx
mov edx, 0x3ae
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x1c], ebx
push ecx
push eax
lea eax, [ebp - 0x30]
mov dword [ebp - 0x18], 7
push eax
push str.LightProcessKiller::ShutdownProcess
push 0xa
mov ecx, 0x240014e
mov dword [ebp - 0xc4], vtable.Mso::Logging::StructuredObject_wchar_t_const___1_.0
mov dword [ebp - 0xc0], str.ContextData
mov dword [ebp - 0xbc], esi
call fcn.00411ea6
lea ecx, [ebp - 0x2c]
call fcn.0040d475
lea ecx, [ebp - 0x1d4]
call fcn.00413b8b
lea ecx, [ebp - 0x84]
call fcn.0040d475
lea ecx, [ebp - 0xb8]
call fcn.0040d475
lea ecx, [ebp - 0x54]
call fcn.0040d475
lea ecx, [ebp - 0x6c]
call fcn.0040d475
lea ecx, [ebp - 0x104]
jmp 0x6151c8
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 1
call fcn.0064cfc2
ret