Function at 0x407370
Capabilities:
Terminate thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x414c70
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
mov eax, dword [0x423750]
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x10], esp
cmp eax, edi
jne 0x4073dd
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x423658
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x3c6
push str.C:TEMPRisingAutoLinkProduct2005AppPersonalRavMonRavMonDRavMonCoreRavMonCore.cpp
push 1
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.UnInitCore_m_bServiceRunning__FALSE_
call fcn.00407b30
add esp, 0x14
push 0x423658
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x4236d4]
mov dword [0x423750], edi
cmp eax, edi
je 0x407405
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [0x4236d4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x4236d4], edi
mov ecx, dword [0x42374c]
mov esi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0xbb8
push ecx
call esi
cmp eax, 0x102
jne 0x40742e
mov edx, dword [0x42374c]
push edi
push edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov eax, dword [0x423748]
push 0xbb8
push eax
call esi
cmp eax, 0x102
jne 0x407450
mov ecx, dword [0x423748]
push edi
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov edx, dword [0x42374c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edx
call esi
mov eax, dword [0x423748]
push eax
call esi
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
call dword [sym.imp.guidll.dll__UnloadMonitor_4]
mov dword [ebp - 4], 0xffffffff
call sub.WSOCK32.dll_WSACleanup
push edi
call fcn.0040c480
push edi
call fcn.0040d050
push edi
call fcn.0040d260
push edi
call fcn.00408bf0
push edi
call fcn.0040c5d0
push edi
call fcn.00408a10
mov eax, dword [0x423724]
add esp, 0x18
cmp eax, edi
je 0x4074c3
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x423724], edi
mov eax, dword [0x423728]
cmp eax, edi
je 0x4074d9
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x423728], edi
mov eax, dword [0x4236f0]
cmp eax, edi
je 0x4074ef
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x4236f0], edi
mov ecx, dword [0x423710]
mov dword [ebp - 4], 2
cmp ecx, edi
je 0x407555
mov edx, dword [ecx]
call dword [edx + 0x10]
mov ecx, dword [0x423710]
mov eax, dword [ecx]
call dword [eax + 8]
jmp 0x407555
mov ecx, dword [0x423714]
mov dword [ebp - 4], 4
cmp ecx, edi
je 0x4075bb
mov edx, dword [ecx]
call dword [edx + 0x10]
mov ecx, dword [0x423714]
mov eax, dword [ecx]
call dword [eax + 8]
jmp 0x4075bb
mov ecx, dword [0x423718]
mov dword [ebp - 4], 6
cmp ecx, edi
je 0x407621
mov edx, dword [ecx]
call dword [edx + 0x10]
mov ecx, dword [0x423718]
mov eax, dword [ecx]
call dword [eax + 8]
jmp 0x407621
mov ecx, dword [0x42371c]
mov dword [ebp - 4], 8
cmp ecx, edi
je 0x407687
mov edx, dword [ecx]
call dword [edx + 0x10]
mov ecx, dword [0x42371c]
mov eax, dword [ecx]
call dword [eax + 8]
jmp 0x407687
mov ecx, dword [0x423720]
mov dword [ebp - 4], 0xa
cmp ecx, edi
je 0x4076ed
mov edx, dword [ecx]
call dword [edx + 0x10]
mov ecx, dword [0x423720]
mov eax, dword [ecx]
call dword [eax + 8]
jmp 0x4076ed
mov ecx, dword [0x4236fc]
mov dword [ebp - 4], 0xc
cmp ecx, edi
je 0x40774e
mov edx, dword [ecx]
call dword [edx + 8]
mov dword [0x4236fc], edi
jmp 0x40774e
mov ecx, dword [0x4236f8]
mov dword [ebp - 4], 0xe
cmp ecx, edi
je 0x4077af
mov eax, dword [ecx]
call dword [eax + 8]
mov dword [0x4236f8], edi
jmp 0x4077af
mov ecx, dword [0x423700]
mov dword [ebp - 4], 0x10
cmp ecx, edi
je 0x407810
mov edx, dword [ecx]
call dword [edx + 8]
mov dword [0x423700], edi
jmp 0x407810
mov ecx, dword [0x423704]
mov dword [ebp - 4], 0x12
cmp ecx, edi
je 0x407871
mov eax, dword [ecx]
call dword [eax + 8]
mov dword [0x423704], edi
jmp 0x407871
mov ecx, dword [0x423708]
mov dword [ebp - 4], 0x14
cmp ecx, edi
je 0x4078d2
mov edx, dword [ecx]
call dword [edx + 8]
mov dword [0x423708], edi
jmp 0x4078d2
mov ecx, dword [0x42370c]
mov dword [ebp - 4], 0x16
cmp ecx, edi
je 0x407933
mov eax, dword [ecx]
call dword [eax + 8]
mov dword [0x42370c], edi
jmp 0x407933
mov ecx, dword [0x4236e8]
mov dword [ebp - 4], 0xffffffff
cmp ecx, edi
je 0x4079a2
mov edx, dword [ecx]
mov dword [ebp - 4], 0x18
call dword [edx + 8]
mov dword [0x4236e8], edi
jmp 0x40799b
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x28]
push 0x18
push eax
mov ecx, 0x41b650
call fcn.00401480
test eax, eax
je 0x4079ca
lea ecx, [ebp - 0x28]
push 0x18
push ecx
mov ecx, 0x41b650
call fcn.00401480
test eax, eax
jne 0x4079b6
mov eax, dword [0x42373c]
cmp eax, edi
je 0x4079e0
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x42373c], edi
mov eax, dword [0x4236ec]
cmp eax, edi
je 0x407a03
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, dword [0x4236ec]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x4236ec], edi
mov eax, dword [0x423730]
cmp eax, edi
je 0x407a19
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x423730], edi
mov eax, dword [0x423740]
cmp eax, edi
je 0x407a2f
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x423740], edi
mov ecx, dword [0x4236f4]
mov dword [ebp - 4], 0x1a
cmp ecx, edi
je 0x407a8f
mov eax, dword [ecx]
call dword [eax + 0x10]
call fcn.00410f40
jmp 0x407a8f
mov eax, dword [0x423744]
or ebx, 0xffffffff
cmp eax, edi
mov dword [ebp - 4], ebx
je 0x407aab
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x423744], edi
call fcn.0040e010
mov esi, dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0x423658
call esi
push 0x423640
call esi
mov eax, dword [0x4236b4]
mov dword [ebp - 4], ebx
cmp eax, edi
je 0x407adf
push eax
call fcn.00414922
add esp, 4
mov dword [0x4236b4], edi
push edi
push edi
push 0xd4
push str.RAVMOND.EXE
push 0x41b408
mov ecx, 0x423798
call fcn.00413640
push edi
push edi
push 0xd4
push str.RavService.exe0
mov ecx, 0x423798
call fcn.004135c0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret