Function at 0x140004740
Capabilities:
Terminate process

Disassembly:
push rsi
sub rsp, 0x70
xor eax, eax
mov dword [rsp + 0x64], 0x2e80
mov dword [rsp + 0x60], 0x3ac7
lea rsi, [section..data]
mov dword [rsp + 0x54], 0x32e6
mov dword [rsp + 0x68], 0x38bb
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x5c], eax
mov dword [rsp + 0x58], 0x3580
mov dword [rsp + 0x50], 0x3243
mov ecx, dword [rsp + 0x54]
mov edx, dword [rsp + 0x6c]
xor ecx, 0x710
mov r8d, dword [rsp + 0x50]
add edx, 0x3864
mov r10d, dword [rsp + 0x50]
add r8d, 0x300
mov r9d, dword [rsp + 0x64]
add r10d, 0x678
mov qword [section..data], rax
mov dword [0x140053020], eax
mov dword [0x140053034], eax
mov dword [0x1400530b0], eax
mov dword [0x1400530d8], eax
mov dword [0x1400530fc], eax
mov dword [0x140053110], eax
mov dword [0x140053130], eax
mov dword [0x140053144], eax
mov dword [0x140053154], eax
mov eax, dword [rsp + 0x50]
add eax, 0x678
mov dword [0x140053010], 6
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r9d
mov r9, rsi
mov dword [0x140053048], 1
mov dword [0x140053058], 1
mov dword [0x14005305c], 0x10
mov dword [0x140053068], 1
mov dword [0x140053084], 1
mov qword [0x140053090], 0x60
mov dword [0x1400530b4], 0x4b
mov dword [0x1400530c8], 0x10
mov dword [0x140053100], 0x3c
mov dword [0x140053118], 1
mov dword [0x140053128], 1
mov dword [0x140053168], 0x13
mov dword [rsp + 0x20], r10d
call fcn.140011880
mov dword [rsp + 0x60], eax
mov eax, dword [0x1400530c8]
add eax, 0x9ccc4
xor dword [0x140053060], eax
add dword [rsp + 0x54], 0x29a
mov ecx, dword [rsp + 0x5c]
mov eax, dword [rsp + 0x50]
xor ecx, 0x3864
cmp eax, ecx
jg 0x140004b0f
mov ecx, dword [rsp + 0x58]
mov eax, dword [rsp + 0x50]
add ecx, 0xfffffcc3
cmp eax, ecx
jne 0x140004a79
mov ecx, dword [rsp + 0x54]
mov edx, dword [rsp + 0x50]
add ecx, 0x33b
mov r8d, dword [rsp + 0x5c]
add edx, 0x738
mov r9d, dword [rsp + 0x64]
add r8d, 0x3765
mov qword [rsp + 0x80], rbx
add r9d, 0x466
mov qword [rsp + 0x88], rdi
mov edi, dword [rsp + 0x54]
mov ebx, dword [rsp + 0x58]
add edi, 0x1e5
mov r11d, dword [rsp + 0x68]
xor ebx, 0xd63
mov r10d, dword [rsp + 0x5c]
xor r11d, 0x58
mov eax, dword [rsp + 0x58]
add r10d, 0x38e3
sub eax, 0x1a1
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], edi
call fcn.1400040e0
mov dword [rsp + 0x54], eax
mov ecx, dword [rsp + 0x68]
mov edx, dword [rsp + 0x58]
mov r8d, dword [rsp + 0x58]
mov r9d, dword [rsp + 0x54]
xor r8d, 0xf47
mov edi, dword [rsp + 0x58]
add r9d, 0x75d
mov ebx, dword [rsp + 0x6c]
sub edi, 0x29a
mov r11d, dword [rsp + 0x60]
add ebx, 0x32e6
mov r10d, dword [rsp + 0x5c]
add r11d, 0x288
mov eax, dword [rsp + 0x50]
add r10d, 0x3765
add eax, 0x3f0
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], r10d
mov dword [rsp + 0x30], r11d
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], edi
call fcn.14000f950
mov dword [rsp + 0x6c], eax
mov ecx, dword [rsp + 0x64]
mov r8d, dword [rsp + 0x50]
add ecx, 0x776
mov r9d, dword [rsp + 0x50]
add r8d, 0x738
mov ebx, dword [rsp + 0x60]
add r9d, 0x3b3
mov r11d, dword [rsp + 0x54]
sub ebx, 0x52c
mov r10d, dword [rsp + 0x58]
xor r11d, 0x344
mov edx, dword [rsp + 0x54]
add r10d, 0xb3
mov eax, dword [rsp + 0x6c]
xor edx, 0x87c
add eax, 0x13c
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], edx
mov rdx, rsi
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x20], ebx
call fcn.14000f400
mov rdi, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x80]
mov dword [rsp + 0x64], eax
jmp 0x140004b0f
mov eax, dword [0x140053114]
add eax, 0xffffc745
or eax, dword [0x14005305c]
cmp dword [0x140053168], eax
jae 0x140004b0f
mov ecx, dword [rsp + 0x64]
imul eax, dword [0x140053058], 0x3864
or ecx, eax
xor dword [0x14005300c], ecx
mov ecx, dword [rsp + 0x60]
sub ecx, dword [0x140053130]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [rsp + 0x50]
mov r8d, dword [rsp + 0x54]
sub eax, 0x3543
mov ecx, dword [0x14005313c]
movsxd rdx, eax
xor rcx, 0x397b
mov eax, dword [0x140053130]
and r8, rax
and r8d, 0x3ac3
call qword [sym.imp.KERNEL32.dll_CreateFiber]
mov ecx, dword [rsp + 0x5c]
mov edx, dword [rsp + 0x68]
mov eax, dword [0x140053090]
or edx, dword [0x140053150]
and rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [rsp + 0x58]
mov eax, dword [rsp + 0x5c]
add ecx, 0xffffffc3
cmp eax, ecx
jg 0x140004bff
mov ecx, dword [rsp + 0x58]
mov eax, dword [rsp + 0x60]
add ecx, 0xfffff900
cmp eax, ecx
je 0x140004b4d
add dword [rsp + 0x50], 0x6a0
mov eax, dword [0x140053130]
xor eax, 0x105446
sub dword [0x140053074], eax
mov ecx, dword [rsp + 0x60]
mov edx, dword [rsp + 0x68]
xor ecx, 0x470
mov r8d, dword [rsp + 0x50]
sub edx, 0x288
mov r9d, dword [rsp + 0x54]
sub r8d, 0x2ed
mov r11d, dword [rsp + 0x5c]
add r9d, 0x2d8
mov r10d, dword [rsp + 0x5c]
xor r11d, 0x3580
mov eax, dword [rsp + 0x54]
add r10d, 0x3633
add eax, 0x7dc
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r11d
mov qword [rsp + 0x20], rsi
call fcn.140004cc0
mov dword [rsp + 0x64], eax
mov rdx, rsi
mov ecx, dword [rsp + 0x60]
mov r8d, dword [rsp + 0x68]
xor ecx, 0xf48
mov r9d, dword [rsp + 0x64]
sub r8d, 0x288
mov r10d, dword [rsp + 0x60]
sub r9d, 4
mov eax, dword [rsp + 0x58]
xor r10d, 0xed0
sub eax, 0x700
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r10d
call fcn.1400017b0
mov dword [rsp + 0x6c], eax
mov ecx, dword [0x140053134]
call qword [sym.imp.KERNEL32.dll_ExitProcess]