Function at 0x140099598
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r14
sub rsp, 0x20
mov cl, 1
call fcn.140301da8
xor edi, edi
lea r12, [0x1403028c0]
lea r14, [0x1404525a0]
mov rbx, rax
lea rbp, [0x140448890]
test rax, rax
jne 0x1400995e8
xor r8d, r8d
xor edx, edx
mov rcx, rbp
call fcn.1400018f0
jmp 0x1400996b8
mov rcx, rbx
mov qword [rax + 0x138], rdi
mov qword [rax + 0x140], rdi
mov qword [rax + 0x148], rbp
call fcn.140301bd4
mov r8, rbx
mov dword [rbx + 0x160], eax
mov rdx, r12
mov rcx, rbp
call fcn.1400018f0
test eax, eax
jns 0x140099642
mov rcx, rbx
mov qword [0x1404488b8], rdi
call fcn.140301d50
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400996b8
lea rcx, [0x140452598]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov rax, qword [0x1404525a0]
test rax, rax
jne 0x140099678
xor r8d, r8d
lea rdx, [0x140302860]
lea rcx, [0x140448ae0]
call fcn.1400018f0
mov rax, qword [0x1404525a0]
mov rcx, r14
jmp 0x140099690
cmp qword [rax + 0x148], rbp
je 0x1400996ab
lea rcx, [rax + 0x150]
mov rax, qword [rcx]
test rax, rax
jne 0x14009967d
mov qword [rcx], rbx
lea rdx, [0x14044b730]
lea rcx, [0x140433f00]
call fcn.1400f6e28
lea rcx, [0x140452598]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
call fcn.140099398
cmp qword [0x1404488b8], r12
mov esi, eax
je 0x1400996e7
mov rcx, qword [0x1404488b0]
mov qword [0x1404488b0], rdi
mov dword [0x140448890], edi
call qword [sym.imp.ADVAPI32.dll_EventUnregister]
jmp 0x1400997f6
lea rdx, [0x14044a588]
mov rbx, rdi
lea rcx, [0x14042b238]
call fcn.1400f6ac8
lea rcx, [0x140452598]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_AcquireSRWLockExclusive]
mov rcx, qword [0x1404525a0]
jmp 0x140099729
lea rax, [rcx + 0x150]
cmp qword [rcx + 0x148], rbp
je 0x140099730
mov rcx, qword [rax]
mov r14, rax
test rcx, rcx
jne 0x140099713
jmp 0x140099761
mov rax, qword [rax]
mov rbx, rcx
mov qword [r14], rax
call fcn.140302618
cmp qword [0x1404525a0], rdi
jne 0x140099761
mov rcx, qword [0x140448b00]
mov qword [0x140448b00], rdi
mov dword [0x140448ae0], edi
call qword [sym.imp.ADVAPI32.dll_EventUnregister]
lea rcx, [0x140452598]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseSRWLockExclusive]
test rbx, rbx
je 0x14009978e
lea rdx, [0x14044c73c]
lea rcx, [0x14042cff8]
call fcn.1400f74d8
mov rcx, rbx
call fcn.140301d50
mov rcx, qword [0x1404488b0]
mov qword [0x1404488b0], rdi
mov dword [0x140448890], edi
call qword [sym.imp.ADVAPI32.dll_EventUnregister]
mov qword [0x1404488b8], rdi
test rbx, rbx
je 0x1400997f6
mov rcx, rbx
call fcn.140301d50
lea rdx, [0x140450dac]
lea rcx, [0x140431e18]
call fcn.1400f7830
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rdx, [0x14044c5d0]
lea rcx, [0x140434d54]
call fcn.1400f7184
test esi, esi
jns 0x140099803
mov ecx, esi
call fcn.140082a8c
jmp 0x140099821
mov eax, dword [0x1404515b8]
mov ebx, edi
test eax, eax
sete bl
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, esi
call fcn.140082b34
mov rbx, qword [rsp + 0x40]
test esi, esi
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
sets dil
mov eax, edi
add rsp, 0x20
pop r14
pop r12
pop rdi
ret