Function at 0x14004f560
Capabilities:
Terminate process

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
cmp dword [rcx + 0x10], 0
mov rcx, qword [rcx]
je 0x14004f782
mov edx, 0x32
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsi]
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rdi, qword [rsi + 0x38]
mov qword [rsi + 0x38], 0
test rdi, rdi
je 0x14004f5fb
mov rcx, qword [rdi + 0x20]
mov rdx, rdi
call fcn.14004fc30
test al, al
je 0x14004f5c7
lea rcx, [rdi + 8]
call fcn.14004f810
mov rcx, qword [rdi]
test rcx, rcx
je 0x14004f5c7
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 0x20]
mov rax, qword [0x14028a5a0]
and rax, rcx
cmp rax, qword [0x14028a588]
je 0x14004f798
mov qword [rdi + 0x20], 0
lea rcx, [rdi + 8]
call fcn.14004f810
mov rcx, rdi
call fcn.140172a44
mov rdx, qword [rsi + 0x58]
test rdx, rdx
jne 0x14004f7a2
mov rdx, qword [rsi + 0x50]
mov qword [rsi + 0x50], 0
test rdx, rdx
je 0x14004f628
lea rcx, fcn.1400fe7c0
xor r8d, r8d
call fcn.1400fd880
mov rcx, qword [rsi + 0x40]
mov rax, qword [0x14028a5a0]
and rax, rcx
cmp rax, qword [0x14028a588]
je 0x14004f7bb
mov rdi, qword [rsi + 0x38]
xorps xmm0, xmm0
movups xmmword [rsi + 0x38], xmm0
test rdi, rdi
jne 0x14004f7c5
mov rax, qword [rsi + 0x28]
inc rax
cmp rax, 2
jb 0x14004f695
call fcn.1400f24d0
mov rdi, qword [rsi + 0x28]
cmp qword [0x1402a1a18], 0
je 0x14004f6f2
mov rcx, qword [0x1402a1a18]
mov rax, qword [rcx]
mov rax, qword [rax]
mov rdx, rdi
call qword [case.0x1401d7990.0]
mov qword [rsi + 0x28], 0
mov rax, qword [rsi + 0x20]
inc rax
cmp rax, 2
jae 0x14004f7da
mov rax, qword [rsi + 0x18]
inc rax
cmp rax, 2
jb 0x14004f6e4
call fcn.1400f24d0
mov rdi, qword [rsi + 0x18]
cmp qword [0x1402a1a18], 0
je 0x14004f734
mov rcx, qword [0x1402a1a18]
mov rax, qword [rcx]
mov rax, qword [rax]
mov rdx, rdi
call qword [case.0x1401d7990.0]
mov qword [rsi + 0x18], 0
mov rcx, rsi
add rsp, 0x28
pop rdi
pop rsi
jmp fcn.14004faa0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [0x14026b3c1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14004f802
lea rcx, [sym.chrome.exe_GetHandleVerifier]
cmp rax, rcx
je 0x14004f776
call qword [case.0x1401d7990.0]
mov rcx, rax
xor edx, edx
call fcn.14003cbf0
jmp 0x14004f677
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [0x14026b3c1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14004f809
lea rcx, [sym.chrome.exe_GetHandleVerifier]
cmp rax, rcx
je 0x14004f77c
call qword [case.0x1401d7990.0]
mov rcx, rax
xor edx, edx
call fcn.14003cbf0
jmp 0x14004f6c6
xor ecx, ecx
mov dl, 1
jmp 0x14004f72a
xor ecx, ecx
mov dl, 1
jmp 0x14004f76c
test rcx, rcx
jne 0x14004f576
cmp dword [rsi + 0x14], 0
je 0x14004f7f5
xor ecx, ecx
jmp 0x14004f576
call fcn.1400ebe70
jmp 0x14004f5e2
lea rdi, [rsi + 0x58]
mov rcx, rdi
call fcn.1400799a0
mov rcx, qword [rdi]
call fcn.140172a44
jmp 0x14004f608
call fcn.1400ebe70
jmp 0x14004f643
mov rcx, rdi
call fcn.140079f90
mov rcx, rdi
call fcn.140172a44
jmp 0x14004f657
call fcn.1400f24d0
mov rcx, qword [rsi + 0x20]
call fcn.1401571e0
mov qword [rsi + 0x20], 0
jmp 0x14004f6a6
cmp qword [rsi + 8], 0
je 0x14004f58f
jmp 0x14004f791
xor ecx, ecx
jmp 0x14004f728
xor ecx, ecx
jmp 0x14004f76a