Function at 0x140005260
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x820
mov ebx, dword [0x14007fcb0]
xor ebp, ebp
test ebx, ebx
jne 0x140005285
mov dword [0x14007fcb0], ebp
call fcn.140001a70
mov rcx, rax
test rax, rax
je 0x140005661
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x858]
call fcn.140002ef0
mov edx, ebp
mov rax, qword [0x140086d28]
mov r8, qword [0x140086d38]
cmp dword [rax], edx
je 0x1400052e9
mov rcx, r8
nop dword [rax]
cmp qword [rcx], 0
je 0x1400052e9
cmp dword [rax], ebx
je 0x1400052fd
inc edx
add rcx, 8
add rax, 4
cmp dword [rax], 0
jne 0x1400052d0
mov rdx, qword [r8]
mov rsi, 0xffffffffffffffff
test rdx, rdx
jne 0x14000532d
mov r8d, ebp
jmp 0x14000533b
movsxd rax, edx
mov rdx, qword [r8 + rax*8]
mov rsi, 0xffffffffffffffff
test rdx, rdx
jne 0x140005315
mov r8d, ebp
jmp 0x14000533b
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140005320
jmp 0x14000533b
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140005330
lea rcx, [rsp + 0x858]
call fcn.140002da0
call fcn.140001a70
mov rcx, rax
test rax, rax
je 0x140005656
mov rax, qword [rax]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x860], rdi
mov rbx, qword [rsp + 0x858]
lea r15, [rbx - 0x18]
mov r14, qword [0x140086ae8]
add r14, 0xffffffffffffffe8
cmp r15, r14
je 0x1400053eb
cmp dword [r14 + 0x10], 0
jl 0x1400053d8
mov rax, qword [r14]
cmp qword [r15], rax
jne 0x1400053d8
mov rcx, r15
call fcn.140004a00
mov rbx, rax
mov ecx, esi
lock xadd dword [r14 + 0x10], ecx
sub ecx, 1
jg 0x1400053bb
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [0x140086ae8], rax
mov rbx, qword [rsp + 0x858]
mov rdi, qword [rsp + 0x860]
jmp 0x1400053eb
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [0x140086ae8]
call fcn.140002da0
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x20]
call fcn.14005fd20
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov r8d, 0x3ff
lea rdx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x140005453
lea rcx, [rsp + 0x20]
mov rax, rsi
inc rax
cmp word [rcx + rax*2], 0
jne 0x140005425
dec eax
movsxd rcx, eax
test eax, eax
jle 0x140005453
cmp word [rsp + rcx*2 + 0x20], 0x5c
je 0x14000544c
dec eax
dec rcx
test rcx, rcx
jg 0x140005438
jmp 0x140005453
cdqe
mov word [rsp + rax*2 + 0x20], bp
cmp dword [0x14007fcb0], 0
jne 0x140005487
mov rdx, qword [str.pl_rsrc_english.dll]
test rdx, rdx
jne 0x14000546d
mov r8d, ebp
jmp 0x14000547b
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140005470
lea rcx, [0x140086ae8]
call fcn.140002da0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1400862e0], rax
test rax, rax
jne 0x1400055d2
mov rdx, qword [str.pl_rsrc_english.dll]
test rdx, rdx
jne 0x1400054b1
mov r8d, ebp
jmp 0x1400054bf
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400054b4
lea rcx, [0x140086ae8]
call fcn.140002da0
mov word [rsp + 0x20], bp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov r8d, 0x3ff
lea rdx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x140005560
lea rcx, [rsp + 0x20]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140005500
dec eax
movsxd rcx, eax
test eax, eax
jle 0x14000552e
cmp word [rsp + rcx*2 + 0x20], 0x5c
je 0x140005527
dec eax
dec rcx
test rcx, rcx
jg 0x140005513
jmp 0x14000552e
cdqe
mov word [rsp + rax*2 + 0x20], bp
mov r9, rsi
lea r8, [0x14006dba4]
mov edx, 0x400
lea rcx, [rsp + 0x20]
call fcn.14004cedc
mov r9, rsi
mov r8, qword [0x140086ae8]
mov edx, 0x400
lea rcx, [rsp + 0x20]
call fcn.14004cedc
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1400862e0], rax
test rax, rax
jne 0x14000560e
mov rdx, qword [str.pl_rsrc_english.dll]
lea rcx, [0x140086ae8]
call fcn.1400028b0
lea rcx, [0x140086ae8]
call fcn.1400028a0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1400862e0], rax
mov r9d, InitCommonControls
lea r8, [0x14006d5e8]
lea rdx, str.There_was_an_error_loading_the_resource_DLL_pl_rsrc_english.dll_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0x800
call fcn.14003ef40
mov rbp, rax
mov r8, rbx
mov edx, 0x400
mov rcx, rax
call fcn.14004bbe0
mov r8, rsi
inc r8
cmp word [rbp + r8*2], 0
jne 0x1400055f2
mov rdx, rbp
lea rcx, [0x140086ae8]
call fcn.140002da0
nop
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140005628
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lock xadd dword [r15 + 0x10], esi
sub esi, 1
jg 0x14000563f
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x850]
add rsp, 0x820
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.1400018b0
nop
mov ecx, 0x80004005
call fcn.1400018b0
int3