Function at 0x140002000
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rax, qword gs:[0x58]
xor ebx, ebx
mov ecx, 0x548
mov edx, 0x108
mov r8, qword [rax]
mov eax, dword [rcx + r8]
test al, 1
jne 0x1400020e8
mov qword [rdx + r8], rbx
or eax, 1
mov dword [rcx + r8], eax
mov rcx, qword [0x14000c860]
mov rax, qword [0x14000c858]
mov word [rdx + r8 + 8], bx
mov byte [rdx + r8 + 0xa], bl
shr rax, 0x20
mov word [rdx + r8 + 0xc], ax
movzx eax, word [0x14000c85e]
mov word [rdx + r8 + 0xe], ax
mov rax, rcx
mov word [rdx + r8 + 0x10], 0x1b
shr rax, 0x10
mov word [rdx + r8 + 0x12], ax
movzx eax, word [0x14000c866]
shr rcx, 0x20
mov word [rdx + r8 + 0x14], cx
mov rcx, qword [0x14000c868]
mov word [rdx + r8 + 0x16], ax
mov rax, rcx
mov word [rdx + r8 + 0x18], 0x1c
shr rax, 0x10
mov word [rdx + r8 + 0x1a], ax
movzx eax, word [0x14000c86e]
shr rcx, 0x20
mov word [rdx + r8 + 0x1c], cx
mov word [rdx + r8 + 0x1e], ax
mov dword [rdx + r8 + 0x20], 0xc30024
mov dword [rdx + r8 + 0x24], 0xd700d1
mov dword [rdx + r8 + 0x28], 0x8400de
add r8, rdx
cmp byte [r8 + 0xa], bl
jne 0x14000231e
mov edx, ebx
nop word [rax + rax]
mov ecx, dword [r8 + 4]
mov r9d, dword [r8]
lea eax, [rcx + 1]
cmp r9d, eax
jne 0x140002120
movsxd rax, edx
inc cx
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140002100
lea eax, [rcx + 2]
cmp r9d, eax
jne 0x14000213a
movsxd rax, edx
add cx, 2
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140002100
cmp r9d, ecx
je 0x140002173
lea eax, [rcx + 4]
cmp r9d, eax
jne 0x140002159
movsxd rax, edx
add cx, 3
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140002100
lea eax, [rcx + 5]
cmp r9d, eax
jne 0x140002181
movsxd rax, edx
add cx, 4
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140002100
movsxd rax, edx
lea rcx, [r8 + rax*2]
lea eax, [rdx + 0x75]
xor word [rcx + 0xc], ax
mov ecx, dword [r8 + 4]
mov r9d, dword [r8]
lea eax, [rcx + 1]
cmp r9d, eax
jne 0x1400021a1
inc cx
movsxd rax, edx
xor word [r8 + rax*2 + 0xe], cx
inc dword [r8]
jmp 0x140002181
lea eax, [rcx + 2]
cmp r9d, eax
jne 0x1400021bb
add cx, 2
movsxd rax, edx
xor word [r8 + rax*2 + 0xe], cx
inc dword [r8]
jmp 0x140002181
cmp r9d, ecx
je 0x1400021f4
lea eax, [rcx + 4]
cmp r9d, eax
jne 0x1400021da
add cx, 3
movsxd rax, edx
xor word [r8 + rax*2 + 0xe], cx
inc dword [r8]
jmp 0x140002181
lea eax, [rcx + 5]
cmp r9d, eax
jne 0x140002210
add cx, 4
movsxd rax, edx
xor word [r8 + rax*2 + 0xe], cx
inc dword [r8]
jmp 0x140002181
movsxd rax, edx
lea rcx, [r8 + rax*2]
lea eax, [rdx + 0x76]
xor word [rcx + 0xe], ax
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [r8 + 4]
mov r9d, dword [r8]
lea eax, [rcx + 1]
cmp r9d, eax
jne 0x140002230
inc cx
movsxd rax, edx
xor word [r8 + rax*2 + 0x10], cx
inc dword [r8]
jmp 0x140002210
lea eax, [rcx + 2]
cmp r9d, eax
jne 0x14000224a
add cx, 2
movsxd rax, edx
xor word [r8 + rax*2 + 0x10], cx
inc dword [r8]
jmp 0x140002210
cmp r9d, ecx
je 0x140002283
lea eax, [rcx + 4]
cmp r9d, eax
jne 0x140002269
add cx, 3
movsxd rax, edx
xor word [r8 + rax*2 + 0x10], cx
inc dword [r8]
jmp 0x140002210
lea eax, [rcx + 5]
cmp r9d, eax
jne 0x140002291
add cx, 4
movsxd rax, edx
xor word [r8 + rax*2 + 0x10], cx
inc dword [r8]
jmp 0x140002210
movsxd rax, edx
lea rcx, [r8 + rax*2]
lea eax, [rdx + 0x77]
xor word [rcx + 0x10], ax
mov ecx, dword [r8 + 4]
mov r9d, dword [r8]
lea eax, [rcx + 1]
cmp r9d, eax
jne 0x1400022b1
inc cx
movsxd rax, edx
xor word [r8 + rax*2 + 0x12], cx
inc dword [r8]
jmp 0x140002291
lea eax, [rcx + 2]
cmp r9d, eax
jne 0x1400022cb
add cx, 2
movsxd rax, edx
xor word [r8 + rax*2 + 0x12], cx
inc dword [r8]
jmp 0x140002291
cmp r9d, ecx
je 0x140002304
lea eax, [rcx + 4]
cmp r9d, eax
jne 0x1400022ea
add cx, 3
movsxd rax, edx
xor word [r8 + rax*2 + 0x12], cx
inc dword [r8]
jmp 0x140002291
lea eax, [rcx + 5]
cmp r9d, eax
jne 0x140002312
add cx, 4
movsxd rax, edx
xor word [r8 + rax*2 + 0x12], cx
inc dword [r8]
jmp 0x140002291
movsxd rax, edx
lea rcx, [r8 + rax*2]
lea eax, [rdx + 0x78]
xor word [rcx + 0x12], ax
add edx, 4
cmp edx, 0x10
jb 0x140002100
mov rax, qword gs:[0x58]
lea r9, [r8 + 0xc]
mov byte [r8 + 0xa], 1
mov ecx, 0x2c0
mov edx, 0x50
mov r8, qword [rax]
mov eax, dword [rcx + r8]
test al, 1
jne 0x14000242b
mov qword [rdx + r8], rbx
or eax, 1
mov word [rdx + r8 + 8], bx
mov byte [rdx + r8 + 0xa], bl
mov dword [rcx + r8], eax
mov rcx, qword [0x14000ca60]
mov rax, qword [0x14000ca58]
shr rax, 0x20
mov word [rdx + r8 + 0xc], ax
movzx eax, word [0x14000ca5e]
mov word [rdx + r8 + 0xe], ax
mov rax, rcx
mov word [rdx + r8 + 0x10], 0x15
shr rax, 0x10
mov word [rdx + r8 + 0x12], ax
movzx eax, word [0x14000ca66]
shr rcx, 0x20
mov word [rdx + r8 + 0x14], cx
mov rcx, qword [0x14000ca68]
mov word [rdx + r8 + 0x16], ax
mov rax, rcx
mov word [rdx + r8 + 0x18], 8
shr rax, 0x10
mov word [rdx + r8 + 0x1a], ax
movzx eax, word [0x14000ca6e]
shr rcx, 0x20
mov word [rdx + r8 + 0x1c], cx
mov word [rdx + r8 + 0x1e], ax
mov dword [rdx + r8 + 0x20], 0xe300e5
mov dword [rdx + r8 + 0x24], 0xe400f7
mov dword [rdx + r8 + 0x28], 0xe000e3
mov dword [rdx + r8 + 0x2c], 0xa700f4
mov dword [rdx + r8 + 0x30], 0xa900a5
mov dword [rdx + r8 + 0x34], 0xc800d1
mov dword [rdx + r8 + 0x38], 0xd800dc
mov dword [rdx + r8 + 0x3c], 0x8f00d3
cmp byte [rdx + r8 + 0xa], bl
lea rdi, [rdx + r8]
jne 0x140002544
mov edx, ebx
nop dword [rax]
mov ecx, dword [rdi + 4]
mov r8d, dword [rdi]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x14000245d
movsxd rax, edx
inc cx
xor word [rdi + rax*2 + 0xc], cx
inc dword [rdi]
jmp 0x140002440
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x140002475
movsxd rax, edx
add cx, 2
xor word [rdi + rax*2 + 0xc], cx
inc dword [rdi]
jmp 0x140002440
cmp r8d, ecx
je 0x1400024aa
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x140002492
movsxd rax, edx
add cx, 3
xor word [rdi + rax*2 + 0xc], cx
inc dword [rdi]
jmp 0x140002440
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x1400024c0
movsxd rax, edx
add cx, 4
xor word [rdi + rax*2 + 0xc], cx
inc dword [rdi]
jmp 0x140002440
movsxd rax, edx
lea rcx, [rdi + rax*2]
lea eax, [rdx + 0x76]
xor word [rcx + 0xc], ax
nop dword [rax + rax]
mov ecx, dword [rdi + 4]
mov r8d, dword [rdi]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x1400024dd
inc cx
movsxd rax, edx
xor word [rdi + rax*2 + 0xe], cx
inc dword [rdi]
jmp 0x1400024c0
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x1400024f5
add cx, 2
movsxd rax, edx
xor word [rdi + rax*2 + 0xe], cx
inc dword [rdi]
jmp 0x1400024c0
cmp r8d, ecx
je 0x14000252a
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x140002512
add cx, 3
movsxd rax, edx
xor word [rdi + rax*2 + 0xe], cx
inc dword [rdi]
jmp 0x1400024c0
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x140002538
add cx, 4
movsxd rax, edx
xor word [rdi + rax*2 + 0xe], cx
inc dword [rdi]
jmp 0x1400024c0
movsxd rax, edx
lea rcx, [rdi + rax*2]
lea eax, [rdx + 0x77]
xor word [rcx + 0xe], ax
add edx, 2
cmp edx, 0x1a
jb 0x140002440
mov rdx, r9
mov byte [rdi + 0xa], 1
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
lea rdx, [rdi + 0xc]
xor ecx, ecx
mov rsi, rax
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140002570
test rsi, rsi
je 0x1400027f1
call fcn.140002810
mov rdx, rax
cmp byte [rax + 9], bl
jne 0x1400027d8
nop dword [rax]
nop word [rax + rax]
mov r8d, dword [rdx + 4]
mov r9d, dword [rdx]
lea ecx, [r8 + 1]
cmp r9d, ecx
jne 0x1400025af
movsxd rax, ebx
inc r8b
xor byte [rax + rdx + 0xa], r8b
inc dword [rdx]
jmp 0x140002590
lea eax, [r8 + 2]
cmp r9d, eax
jne 0x1400025c8
movsxd rax, ebx
add r8b, 2
xor byte [rax + rdx + 0xa], r8b
inc dword [rdx]
jmp 0x140002590
cmp r9d, r8d
je 0x1400025ff
lea eax, [r8 + 4]
cmp r9d, eax
jne 0x1400025e6
movsxd rax, ebx
add r8b, 3
xor byte [rax + rdx + 0xa], r8b
inc dword [rdx]
jmp 0x140002590
lea eax, [r8 + 5]
cmp r9d, eax
jne 0x140002610
movsxd rax, ebx
add r8b, 4
xor byte [rax + rdx + 0xa], r8b
inc dword [rdx]
jmp 0x140002590
movsxd rcx, ebx
lea eax, [rbx + 0x76]
xor byte [rcx + rdx + 0xa], al
nop dword [rax]
mov ecx, dword [rdx + 4]
mov r8d, dword [rdx]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x14000262b
inc cl
movsxd rax, ebx
xor byte [rax + rdx + 0xb], cl
inc dword [rdx]
jmp 0x140002610
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x140002641
add cl, 2
movsxd rax, ebx
xor byte [rax + rdx + 0xb], cl
inc dword [rdx]
jmp 0x140002610
cmp r8d, ecx
je 0x140002672
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x14000265c
add cl, 3
movsxd rax, ebx
xor byte [rax + rdx + 0xb], cl
inc dword [rdx]
jmp 0x140002610
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x140002680
add cl, 4
movsxd rax, ebx
xor byte [rax + rdx + 0xb], cl
inc dword [rdx]
jmp 0x140002610
movsxd rcx, ebx
lea eax, [rbx + 0x77]
xor byte [rcx + rdx + 0xb], al
nop dword [rax]
mov ecx, dword [rdx + 4]
mov r8d, dword [rdx]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x14000269b
inc cl
movsxd rax, ebx
xor byte [rax + rdx + 0xc], cl
inc dword [rdx]
jmp 0x140002680
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x1400026b1
add cl, 2
movsxd rax, ebx
xor byte [rax + rdx + 0xc], cl
inc dword [rdx]
jmp 0x140002680
cmp r8d, ecx
je 0x1400026e2
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x1400026cc
add cl, 3
movsxd rax, ebx
xor byte [rax + rdx + 0xc], cl
inc dword [rdx]
jmp 0x140002680
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x1400026f0
add cl, 4
movsxd rax, ebx
xor byte [rax + rdx + 0xc], cl
inc dword [rdx]
jmp 0x140002680
movsxd rcx, ebx
lea eax, [rbx + 0x78]
xor byte [rcx + rdx + 0xc], al
nop dword [rax]
mov ecx, dword [rdx + 4]
mov r8d, dword [rdx]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x14000270b
inc cl
movsxd rax, ebx
xor byte [rax + rdx + 0xd], cl
inc dword [rdx]
jmp 0x1400026f0
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x140002721
add cl, 2
movsxd rax, ebx
xor byte [rax + rdx + 0xd], cl
inc dword [rdx]
jmp 0x1400026f0
cmp r8d, ecx
je 0x140002752
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x14000273c
add cl, 3
movsxd rax, ebx
xor byte [rax + rdx + 0xd], cl
inc dword [rdx]
jmp 0x1400026f0
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x140002760
add cl, 4
movsxd rax, ebx
xor byte [rax + rdx + 0xd], cl
inc dword [rdx]
jmp 0x1400026f0
movsxd rcx, ebx
lea eax, [rbx + 0x79]
xor byte [rcx + rdx + 0xd], al
nop dword [rax]
mov ecx, dword [rdx + 4]
mov r8d, dword [rdx]
lea eax, [rcx + 1]
cmp r8d, eax
jne 0x14000277b
inc cl
movsxd rax, ebx
xor byte [rax + rdx + 0xe], cl
inc dword [rdx]
jmp 0x140002760
lea eax, [rcx + 2]
cmp r8d, eax
jne 0x140002791
add cl, 2
movsxd rax, ebx
xor byte [rax + rdx + 0xe], cl
inc dword [rdx]
jmp 0x140002760
cmp r8d, ecx
je 0x1400027c2
lea eax, [rcx + 4]
cmp r8d, eax
jne 0x1400027ac
add cl, 3
movsxd rax, ebx
xor byte [rax + rdx + 0xe], cl
inc dword [rdx]
jmp 0x140002760
lea eax, [rcx + 5]
cmp r8d, eax
jne 0x1400027cc
add cl, 4
movsxd rax, ebx
xor byte [rax + rdx + 0xe], cl
inc dword [rdx]
jmp 0x140002760
movsxd rcx, ebx
lea eax, [rbx + 0x7a]
xor byte [rcx + rdx + 0xe], al
add ebx, 5
cmp ebx, 0x23
jb 0x140002590
mov byte [rdx + 9], 1
add rdx, 0xa
call fcn.1400012a0
mov ecx, 0x1005
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret