Function at 0x5653d0
Capabilities:
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x5e5f3c
mov eax, dword fs:[0]
push eax
sub esp, 0x45c
mov eax, dword [0x5fc7d0]
xor eax, esp
mov dword [esp + 0x458], eax
push esi
push edi
mov eax, dword [0x5fc7d0]
xor eax, esp
push eax
lea eax, [esp + 0x468]
mov dword fs:[0], eax
mov ecx, dword [0x600710]
mov esi, dword [esp + 0x47c]
mov dword [esp + 0x2c], esi
test cl, 1
jne 0x565ba9
xorps xmm0, xmm0
mov dword [0x60072c], 0
movdqu xmmword [esp + 0x50], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov eax, dword [0x600714]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
shr eax, 0x1f
mov dword [esp + 0x470], 0
test al, 1
je 0x565497
call esi
mov dword [esp + 0x58], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [esp + 0x5c], eax
lea ecx, [esp + 0x50]
mov eax, dword [0x600714]
and eax, 0x3fffffff
push eax
call fcn.0057ee70
push 0x9c
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [esp + 0x30], eax
test eax, eax
jne 0x5654c4
push 0x12
call esi
push eax
call edi
mov eax, dword [esp + 0x30]
push eax
mov dword [eax], 0x9c
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x5654f1
push dword [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 0xff
call esi
push eax
call edi
call fcn.005c5dd4
test eax, eax
jne 0x565501
push 0x1c
call esi
push eax
call edi
call fcn.005c6060
test eax, eax
jne 0x565511
push 0x10
call esi
push eax
call edi
call fcn.005c60f3
test eax, eax
jns 0x565524
push 0x1b
call fcn.005c6443
add esp, 4
push 1
call fcn.005c646e
add esp, 4
test eax, eax
je 0x56553b
push eax
call fcn.005c6443
add esp, 4
call fcn.00545970
mov esi, dword [esp + 0x30]
mov ecx, 0x27
mov dword [esp + 0x28], eax
lea edi, [eax + 0x2c]
rep movsd dword es:[edi], dword [esi]
mov esi, eax
mov ecx, esi
call fcn.00553150
mov ecx, esi
call fcn.00553120
push dword [esp + 0x30]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
call fcn.00545850
mov ecx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
push 0
mov dword [esp + 0x34], edi
mov dword [0x6023dc], ecx
mov dword [edi + 0x1c0], ecx
call ecx
mov dword [esi + 0x28], eax
mov eax, 0x601
cmp word [esi + 6], ax
push 0x3ff
setae al
mov byte [edi + 0x2d1], al
mov eax, 0x602
cmp word [esi + 6], ax
mov esi, 0x600710
push 0
setae al
mov byte [edi + 0x2d2], al
lea eax, [esp + 0x6d]
sub esi, dword [0x600720]
push eax
mov byte [esp + 0x70], 0
call fcn.005c55e0
add esp, 0xc
lea eax, [esp + 0x64]
push 0x400
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x64]
push ecx
lea ecx, [eax + 8]
mov dword [eax + 0x24], esi
call fcn.005975c0
call fcn.005660a0
mov dword [esp + 0x60], 0
lea eax, [esp + 0x60]
mov byte [esp + 0x470], 1
push eax
call fcn.00565f20
add esp, 4
mov ecx, edi
push dword [esp + 0x60]
call fcn.0054fb40
test al, al
jne 0x565649
push 0xff
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [0x600710]
shr eax, 0xa
test al, 1
je 0x5656c0
cmp dword [edi + 0x450], 0
je 0x5656c0
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x38]
call fcn.00598410
lea eax, [esp + 0xc]
mov byte [esp + 0x470], 2
push eax
lea ecx, [esp + 0x38]
call fcn.005987b0
add eax, 4
mov byte [esp + 0x470], 3
cmp dword [eax + 0x14], 0x10
jb 0x565695
mov eax, dword [eax]
push eax
mov eax, dword [edi + 0x450]
call eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x470], 2
call fcn.005685c0
lea ecx, [esp + 0x34]
mov byte [esp + 0x470], 1
call fcn.005685c0
call fcn.005458e0
mov edi, eax
push edi
call fcn.0055d270
mov eax, dword [0x601d0c]
add esp, 4
test eax, 0x800000
jne 0x565728
mov esi, dword [0x6021c0]
lea ecx, [esi + 0xa4]
call fcn.005510b0
int3
mov ecx, dword [esp + 0x28]
call fcn.00553090
lea eax, [esp + 0x60]
mov ecx, edi
push eax
push 0x600710
call fcn.0054cf00
test dword [0x601d0c], 0x800000
jne 0x56576c
mov esi, dword [0x6021c0]
lea ecx, [esi + 0xa4]
call fcn.005510b0
invalid
push 0x600710
mov ecx, edi
call 0x55d6a0
test al, al
jne 0x565868
mov eax, dword [0x600710]
or eax, 1
mov dword [0x600710], eax
shr eax, 8
test al, 1
je 0x5657a5
push dword [esp + 0x2c]
call fcn.00565dd0
add esp, 4
jmp 0x56583b
mov ecx, dword [0x602380]
test ecx, ecx
je 0x5657bf
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x602380], 0
mov ecx, dword [0x60239c]
test ecx, ecx
je 0x5657d9
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x60239c], 0
mov ecx, dword [0x6023bc]
test ecx, ecx
je 0x5657f3
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x6023bc], 0
mov ecx, dword [0x602370]
test ecx, ecx
je 0x56580d
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x602370], 0
mov esi, dword [0x602da0]
test esi, esi
je 0x565831
mov ecx, esi
call fcn.00542e30
push esi
call fcn.005c40d3
add esp, 4
mov dword [0x602da0], 0
call fcn.005c60d6
call fcn.005c5de9
mov esi, dword [esp + 0x60]
mov edi, dword [0x600724]
mov byte [esp + 0x470], 0
test esi, esi
je 0x565861
mov ecx, esi
call fcn.00542970
push esi
call fcn.005c40d3
add esp, 4
mov eax, edi
jmp 0x565c13
mov eax, dword [edi + 0xd0]
shr eax, 8
test al, 1
jne 0x5658a8
mov eax, dword [edi + 0xcc]
shr eax, 0x17
test al, 1
jne 0x5658a8
mov esi, dword [esp + 0x30]
cmp dword [esi + 0x2e8], 0
je 0x5658a8
mov eax, dword [esi + 0x2f0]
push 0
call eax
mov eax, dword [esi + 0x2e8]
push 0x565db0
push 1
call eax
test dword [0x601d0c], 0x800000
jne 0x5658d2
mov esi, dword [0x6021c0]
lea ecx, [esi + 0xa4]
call fcn.005510b0
invalid
push 0x600710
mov ecx, edi
call 0x55e890
call 0x57dcb0
test dword [0x601d0c], 0x800000
jne 0x565912
mov esi, dword [0x6021c0]
lea ecx, [esi + 0xa4]
call fcn.005510b0
lea ecx, [esi + 0xa4]
mov byte [5], 5
call fcn.00551110
mov eax, dword [edi + 0xcc]
mov ecx, edi
push dword [0x6020e1]
shr eax, 0x11
push dword [0x6020e5]
and eax, 0xffffff01
mov dword [esp + 0x34], eax
call fcn.0054ccc0
cmp byte [esp + 0x30], 0
push eax
sete al
movzx eax, al
push eax
push dword [0x6020e9]
call fcn.005648d0
mov ecx, eax
call fcn.00552110
mov ecx, edi
mov dword [0x6020e9], 0
mov dword [0x6020e1], 0
call fcn.0054b910
mov eax, dword [edi + 0xd0]
mov ecx, edi
shr eax, 8
not al
and al, 1
push 0
movzx eax, al
push eax
call fcn.0054ccd0
mov eax, dword [edi + 0xcc]
shr eax, 2
test al, 1
je 0x5659dc
push dword [0x602119]
mov ecx, edi
push dword [0x60211d]
call fcn.0054ccc0
push eax
push dword [0x601d34]
call fcn.00564a00
mov ecx, eax
call fcn.0056b590
mov dword [0x601d34], 0
mov dword [0x602119], 0
mov dword [0x60211d], 0
mov ecx, dword [edi + 0xcc]
mov eax, ecx
shr eax, 3
test al, 1
je 0x565a04
shr ecx, 0x12
and ecx, 0xffffff01
mov dword [esp + 0x2c], ecx
call fcn.005632a0
mov ecx, dword [esp + 0x2c]
mov byte [eax + 5], cl
test dword [0x601d0c], 0x800000
jne 0x565a2f
mov esi, dword [0x6021c0]
lea ecx, [esi + 0xa4]
call fcn.005510b0
in ax, 0x64
lea ecx, [esi + 0xa4]
call fcn.00551110
push dword [0x602129]
movzx eax, word [0x601d89]
push dword [0x602125]
mov ecx, dword [edi + 0xfc]
push dword [0x602121]
push eax
call fcn.00597060
push eax
call fcn.00564960
mov ecx, eax
call fcn.00564a80
mov edx, dword [0x60212d]
mov eax, edx
shr eax, 0x1c
test al, 1
je 0x565a85
mov ecx, dword [0x6032b4]
mov eax, dword fs:[0x2c]
mov eax, dword [eax + ecx*4]
inc dword [eax + 0x8704]
test dword [0x601d0c], 0x800000
mov dword [0x602125], 0
mov dword [0x602129], 0
jne 0x565ace
mov esi, dword [0x6021c0]
lea ecx, [esi + 0xa4]
call fcn.005510b0
lea ecx, [esi + 0xa4]
mov byte [6], 6
call fcn.00551110
mov edx, dword [0x60212d]
and dl, 0x30
cmp dl, 0x20
jne 0x565b0f
mov eax, dword [edi + 0xcc]
shr eax, 0x13
test al, 1
jne 0x565b0f
mov eax, dword [esp + 0x28]
mov ecx, 0x600
cmp word [eax + 6], cx
jae 0x565b0f
call fcn.00545970
add eax, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x565b02
mov eax, dword [eax]
push eax
mov eax, dword [esp + 0x34]
mov eax, dword [eax + 0x1c8]
call eax
call fcn.00545970
mov ecx, dword [eax + 0x24]
mov eax, dword [0x602131]
add eax, ecx
test dword [0x601d0c], 0x800000
mov dword [0x600724], eax
jne 0x565b4e
mov esi, dword [0x6021c0]
lea ecx, [esi + 0xa4]
call fcn.005510b0
in ax, 0x64
lea ecx, [esi + 0xa4]
call fcn.00551110
mov eax, dword [0x600714]
and eax, 0xc0000000
cmp eax, 0x80000000
jne 0x565b7b
push dword [esp + 0x54]
push dword [esp + 0x60]
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push dword [esp + 0x50]
push dword [esp + 0x5c]
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
or dword [0x600710], 1
mov esi, dword [esp + 0x60]
mov byte [esp + 0x470], 0
test esi, esi
je 0x565ba2
mov ecx, esi
call fcn.00542970
push esi
call fcn.005c40d3
add esp, 4
mov eax, dword [0x600724]
jmp 0x565c13
mov eax, ecx
shr eax, 8
test al, 1
je 0x565c11
mov edx, dword [0x601d0c]
mov eax, edx
shr eax, 4
test al, 1
jne 0x565c11
cmp dword [esp + 0x478], 0
jne 0x565ba2
mov eax, ecx
shr eax, 2
test al, 1
je 0x565bdd
mov eax, ecx
shr eax, 0xb
test al, 1
jne 0x565ba2
push esi
test dl, dl
jns 0x565bf1
call fcn.00565dd0
mov eax, dword [0x600724]
add esp, 4
jmp 0x565c13
or ecx, 4
push 0
mov dword [0x600710], ecx
call fcn.00565ee0
push eax
call dword [0x600724]
push esi
call fcn.00565dd0
add esp, 4
xor eax, eax
xor edx, edx
mov ecx, dword [esp + 0x468]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x458]
xor ecx, esp
call fcn.005c4b26
add esp, 0x468
ret