Function at 0x140003730
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x820
mov ebx, dword [0x14008db00]
xor ebp, ebp
test ebx, ebx
jne 0x140003755
mov dword [0x14008db00], ebp
call fcn.140002130
mov rcx, rax
test rax, rax
je 0x140003b31
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x858], rax
lea rcx, [rsp + 0x858]
call fcn.140002590
mov edx, ebp
mov rax, qword [0x140093528]
mov r8, qword [0x140093538]
cmp dword [rax], edx
je 0x1400037b9
mov rcx, r8
nop dword [rax]
cmp qword [rcx], 0
je 0x1400037b9
cmp dword [rax], ebx
je 0x1400037cd
inc edx
add rcx, 8
add rax, 4
cmp dword [rax], 0
jne 0x1400037a0
mov rdx, qword [r8]
mov rsi, 0xffffffffffffffff
test rdx, rdx
jne 0x1400037fd
mov r8d, ebp
jmp 0x14000380b
movsxd rax, edx
mov rdx, qword [r8 + rax*8]
mov rsi, 0xffffffffffffffff
test rdx, rdx
jne 0x1400037e5
mov r8d, ebp
jmp 0x14000380b
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400037f0
jmp 0x14000380b
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140003800
lea rcx, [rsp + 0x858]
call fcn.140002db0
call fcn.140002130
mov rcx, rax
test rax, rax
je 0x140003b26
mov rax, qword [rax]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x860], rdi
mov rbx, qword [rsp + 0x858]
lea r15, [rbx - 0x18]
mov r14, qword [0x140093428]
add r14, 0xffffffffffffffe8
cmp r15, r14
je 0x1400038bb
cmp dword [r14 + 0x10], 0
jl 0x1400038a8
mov rax, qword [r14]
cmp qword [r15], rax
jne 0x1400038a8
mov rcx, r15
call fcn.1400040e0
mov rbx, rax
mov ecx, esi
lock xadd dword [r14 + 0x10], ecx
sub ecx, 1
jg 0x14000388b
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [r8 + 8]
lea rax, [rbx + 0x18]
mov qword [0x140093428], rax
mov rbx, qword [rsp + 0x858]
mov rdi, qword [rsp + 0x860]
jmp 0x1400038bb
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [0x140093428]
call fcn.140002db0
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x20]
call fcn.14006cc60
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov r8d, 0x3ff
lea rdx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x140003923
lea rcx, [rsp + 0x20]
mov rax, rsi
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400038f5
dec eax
movsxd rcx, eax
test eax, eax
jle 0x140003923
cmp word [rsp + rcx*2 + 0x20], 0x5c
je 0x14000391c
dec eax
dec rcx
test rcx, rcx
jg 0x140003908
jmp 0x140003923
cdqe
mov word [rsp + rax*2 + 0x20], bp
cmp dword [0x14008db00], 0
jne 0x140003957
mov rdx, qword [0x14008db10]
test rdx, rdx
jne 0x14000393d
mov r8d, ebp
jmp 0x14000394b
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140003940
lea rcx, [0x140093428]
call fcn.140002db0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x140093410], rax
test rax, rax
jne 0x140003aa2
mov rdx, qword [0x14008db10]
test rdx, rdx
jne 0x140003981
mov r8d, ebp
jmp 0x14000398f
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140003984
lea rcx, [0x140093428]
call fcn.140002db0
mov word [rsp + 0x20], bp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov r8d, 0x3ff
lea rdx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x140003a30
lea rcx, [rsp + 0x20]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400039d0
dec eax
movsxd rcx, eax
test eax, eax
jle 0x1400039fe
cmp word [rsp + rcx*2 + 0x20], 0x5c
je 0x1400039f7
dec eax
dec rcx
test rcx, rcx
jg 0x1400039e3
jmp 0x1400039fe
cdqe
mov word [rsp + rax*2 + 0x20], bp
mov r9, rsi
lea r8, [0x14007c068]
mov edx, 0x400
lea rcx, [rsp + 0x20]
call fcn.1400201f0
mov r9, rsi
mov r8, qword [0x140093428]
mov edx, 0x400
lea rcx, [rsp + 0x20]
call fcn.1400201f0
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x140093410], rax
test rax, rax
jne 0x140003ade
mov rdx, qword [0x14008db10]
lea rcx, [0x140093428]
call fcn.1400026e0
lea rcx, [0x140093428]
call fcn.140003e60
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x140093410], rax
mov r9d, 0x10
lea r8, str.Process_Lasso
lea rdx, str.There_was_an_error_loading_the_resource_DLL_pl_rsrc_english.dll_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0x800
call fcn.14000b68c
mov rbp, rax
mov r8, rbx
mov edx, 0x400
mov rcx, rax
call fcn.14001f05c
mov r8, rsi
inc r8
cmp word [rbp + r8*2], 0
jne 0x140003ac2
mov rdx, rbp
lea rcx, [0x140093428]
call fcn.140002db0
nop
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140003af8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
lock xadd dword [r15 + 0x10], esi
sub esi, 1
jg 0x140003b0f
mov rcx, qword [r15]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + 8]
mov rbx, qword [rsp + 0x850]
add rsp, 0x820
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.1400014d0
nop
mov ecx, 0x80004005
call fcn.1400014d0
int3