Function at 0x5b1811
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x20
push 0
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov dword [esp + 4], eax
mov eax, dword [0x7ab024]
push eax
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov ebx, eax
mov eax, dword [0x7ab008]
push eax
push 0
call dword [sym.imp.kernel32.dll_LocalAlloc]
mov esi, eax
push 0x104
push esi
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameW]
xor edx, edx
xor eax, eax
movzx ecx, word [esi + edx*2]
cmp ecx, 0x5c
je 0x5b1b5b
test ecx, ecx
je 0x5b186a
inc edx
jmp 0x5b1856
lea edi, [esi + eax*2 + 2]
mov esi, dword [0x7ab010]
cmp dword [esi], 0
je 0x5b18b8
push edi
call dword [sym.imp.kernel32.dll_lstrlenW]
movzx eax, al
cmp al, byte [esi]
je 0x5b1890
cmp al, byte [esi + 1]
jne 0x5b1b3e
movzx eax, word [edi]
xor edx, edx
test eax, eax
je 0x5b18aa
xor eax, eax
movzx ecx, word [edi + eax*2]
inc eax
add edx, ecx
movzx ecx, word [edi + eax*2]
test ecx, ecx
jne 0x5b189b
cmp edx, dword [esi + 4]
je 0x5b18b8
cmp edx, dword [esi + 8]
jne 0x5b1b3e
mov dword [esp + 0x18], 0
call dword [sym.imp.kernel32.dll_GetProcessHeap]
mov edx, eax
mov eax, dword [0x7ab008]
push eax
push 0
push edx
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov edx, eax
xor eax, eax
mov ecx, dword [0x7ab020]
mov esi, dword [ecx + eax]
mov dword [eax + edx], esi
add eax, 4
cmp eax, 0x40
jl 0x5b18db
push edx
push ebx
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x1c], 0
je 0x5b1b3e
lea ebx, [esp + 0x18]
push ebx
mov ebx, dword [0x7ab034]
mov eax, dword [0x7ab04c]
push eax
push 0x7000
push ebx
call dword [esp + 0x2c]
mov ecx, dword [0x7ab028]
mov eax, dword [esp + 4]
lea edi, [eax + ecx]
mov edx, dword [edi + 4]
lea eax, [edi + 8]
mov dword [esp], edx
lea edx, [ebx + 8]
neg eax
add eax, edx
cmp eax, 0x6ff8
jge 0x5b1952
neg eax
cmp eax, 0x6ff8
jl 0x5b1ae7
and edx, 0xf
je 0x5b197c
test dl, 3
jne 0x5b1b4d
neg edx
xor eax, eax
add edx, 0x10
shr edx, 2
mov esi, dword [esp]
mov ecx, dword [edi + eax*4 + 8]
add ecx, esi
mov dword [ebx + eax*4 + 8], ecx
inc eax
cmp eax, edx
jb 0x5b196d
mov eax, edx
lea ecx, [edi + edx*4 + 8]
neg eax
add eax, 0xe
and eax, 0xf
neg eax
lea esi, [eax + 0x1bfe]
test cl, 0xf
je 0x5b19ea
movd xmm0, dword [esp]
pshufd xmm0, xmm0, 0
movdqu xmm1, xmmword [edi + edx*4 + 8]
paddd xmm1, xmm0
movdqu xmmword [ebx + edx*4 + 8], xmm1
movdqu xmm2, xmmword [edi + edx*4 + 0x18]
paddd xmm2, xmm0
movdqu xmmword [ebx + edx*4 + 0x18], xmm2
movdqu xmm3, xmmword [edi + edx*4 + 0x28]
paddd xmm3, xmm0
movdqu xmmword [ebx + edx*4 + 0x28], xmm3
movdqu xmm4, xmmword [edi + edx*4 + 0x38]
paddd xmm4, xmm0
movdqu xmmword [ebx + edx*4 + 0x38], xmm4
add edx, 0x10
cmp edx, esi
jb 0x5b19a1
jmp 0x5b1a48
movd xmm0, dword [esp]
pshufd xmm0, xmm0, 0
nop dword [eax + eax]
nop dword [eax + eax]
movdqu xmm1, xmmword [edi + edx*4 + 8]
paddd xmm1, xmm0
movdqu xmmword [ebx + edx*4 + 8], xmm1
movdqu xmm2, xmmword [edi + edx*4 + 0x18]
paddd xmm2, xmm0
movdqu xmmword [ebx + edx*4 + 0x18], xmm2
movdqu xmm3, xmmword [edi + edx*4 + 0x28]
paddd xmm3, xmm0
movdqu xmmword [ebx + edx*4 + 0x28], xmm3
movdqu xmm4, xmmword [edi + edx*4 + 0x38]
paddd xmm4, xmm0
movdqu xmmword [ebx + edx*4 + 0x38], xmm4
add edx, 0x10
cmp edx, esi
jb 0x5b1a01
lea edx, [eax + 0x1bff]
cmp edx, 0x1bfe
ja 0x5b1b08
mov ecx, esi
neg ecx
add ecx, 0x1bfe
cmp ecx, 4
jb 0x5b1b46
mov edx, ecx
and edx, 0xfffffffc
mov dword [esp + 0xc], edx
lea edx, [eax*4 + 0x6ff8]
mov dword [esp + 4], 0
lea eax, [ebx + edx]
add edx, edi
mov dword [esp + 8], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 8]
mov edi, dword [esp + 4]
movdqu xmm1, xmmword [edx + edi*4 + 8]
paddd xmm1, xmm0
movdqu xmmword [ebx + edi*4 + 8], xmm1
add edi, 4
cmp edi, eax
jb 0x5b1aa2
mov edi, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
cmp eax, ecx
jae 0x5b1b08
mov dword [esp + 0x14], ebx
lea edx, [ebx + esi*4]
lea esi, [edi + esi*4]
mov edi, dword [esp]
mov ebx, dword [esi + eax*4 + 8]
add ebx, edi
mov dword [edx + eax*4 + 8], ebx
inc eax
cmp eax, ecx
jb 0x5b1ad2
mov ebx, dword [esp + 0x14]
jmp 0x5b1b08
mov esi, dword [esp]
xor eax, eax
mov edx, dword [edi + eax*8 + 8]
add edx, esi
mov dword [ebx + eax*8 + 8], edx
mov ecx, dword [edi + eax*8 + 0xc]
add ecx, esi
mov dword [ebx + eax*8 + 0xc], ecx
inc eax
cmp eax, 0xdff
jb 0x5b1aec
mov edx, dword [0x7ab048]
lea eax, [esp + 0x18]
push eax
mov dword [ebx + 8], edx
push dword [esp + 0x1c]
push 0x7000
push ebx
call dword [esp + 0x2c]
mov ecx, dword [ebx + 0xc]
add ecx, ebx
mov eax, dword [0x7ab018]
add ecx, eax
mov edx, dword [0x7ab018]
add ebx, edx
push ebx
call ecx
add esp, 4
push 0
call dword [sym.imp.kernel32.dll_ExitProcess]
xor eax, eax
jmp 0x5b1ac1
xor esi, esi
mov ecx, 0x1bfe
xor eax, eax
jmp 0x5b1ac1
mov eax, edx
jmp 0x5b1867