Function at 0x140004950
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rax, qword gs:[0x58]
xor ebx, ebx
mov ecx, 0x33c
mov edx, 0x170
mov r8, qword [rax]
mov eax, dword [rcx + r8]
test al, 1
jne 0x140004a00
or eax, 1
mov qword [r8 + rdx], rbx
mov dword [rcx + r8], eax
mov rcx, qword [0x14000ca08]
mov rax, qword [0x14000ca00]
mov word [r8 + rdx + 8], bx
mov byte [r8 + rdx + 0xa], bl
shr rax, 0x20
mov word [r8 + rdx + 0xc], ax
movzx eax, word [0x14000ca06]
mov word [r8 + rdx + 0xe], ax
mov rax, rcx
mov word [r8 + rdx + 0x10], 0x31
shr rax, 0x10
mov word [r8 + rdx + 0x12], ax
movzx eax, word [0x14000ca0e]
shr rcx, 0x20
mov word [r8 + rdx + 0x14], cx
mov word [r8 + rdx + 0x16], ax
movzx eax, word [0x14000ca12]
mov word [r8 + rdx + 0x18], 0xc6
mov word [r8 + rdx + 0x1a], ax
add r8, rdx
cmp byte [r8 + 0xa], bl
jne 0x140004c2e
mov edx, ebx
nop
mov ecx, dword [r8 + 4]
mov r9d, dword [r8]
lea eax, [rcx + 1]
cmp r9d, eax
jne 0x140004a30
movsxd rax, edx
inc cx
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140004a10
lea eax, [rcx + 2]
cmp r9d, eax
jne 0x140004a4a
movsxd rax, edx
add cx, 2
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140004a10
cmp r9d, ecx
je 0x140004a83
lea eax, [rcx + 4]
cmp r9d, eax
jne 0x140004a69
movsxd rax, edx
add cx, 3
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140004a10
lea eax, [rcx + 5]
cmp r9d, eax
jne 0x140004a91
movsxd rax, edx
add cx, 4
xor word [r8 + rax*2 + 0xc], cx
inc dword [r8]
jmp 0x140004a10
movsxd rax, edx
lea rcx, [r8 + rax*2]
lea eax, [rdx + 0x7b]
xor word [rcx + 0xc], ax
mov ecx, dword [r8 + 4]
mov r9d, dword [r8]
lea eax, [rcx + 1]
cmp r9d, eax
jne 0x140004ab1
inc cx
movsxd rax, edx
xor word [r8 + rax*2 + 0xe], cx
inc dword [r8]
jmp 0x140004a91
lea eax, [rcx + 2]
cmp r9d, eax
jne 0x140004acb
add cx, 2
movsxd rax, edx
xor word [r8 + rax*2 + 0xe], cx
inc dword [r8]
jmp 0x140004a91
cmp r9d, ecx
je 0x140004b04
lea eax, [rcx + 4]
cmp r9d, eax
jne 0x140004aea
add cx, 3
movsxd rax, edx
xor word [r8 + rax*2 + 0xe], cx
inc dword [r8]
jmp 0x140004a91
lea eax, [rcx + 5]
cmp r9d, eax
jne 0x140004b20
add cx, 4
movsxd rax, edx
xor word [r8 + rax*2 + 0xe], cx
inc dword [r8]
jmp 0x140004a91
movsxd rax, edx
lea rcx, [r8 + rax*2]
lea eax, [rdx + 0x7c]
xor word [rcx + 0xe], ax
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [r8 + 4]
mov r9d, dword [r8]
lea eax, [rcx + 1]
cmp r9d, eax
jne 0x140004b40
inc cx
movsxd rax, edx
xor word [r8 + rax*2 + 0x10], cx
inc dword [r8]
jmp 0x140004b20
lea eax, [rcx + 2]
cmp r9d, eax
jne 0x140004b5a
add cx, 2
movsxd rax, edx
xor word [r8 + rax*2 + 0x10], cx
inc dword [r8]
jmp 0x140004b20
cmp r9d, ecx
je 0x140004b93
lea eax, [rcx + 4]
cmp r9d, eax
jne 0x140004b79
add cx, 3
movsxd rax, edx
xor word [r8 + rax*2 + 0x10], cx
inc dword [r8]
jmp 0x140004b20
lea eax, [rcx + 5]
cmp r9d, eax
jne 0x140004ba1
add cx, 4
movsxd rax, edx
xor word [r8 + rax*2 + 0x10], cx
inc dword [r8]
jmp 0x140004b20
movsxd rax, edx
lea rcx, [r8 + rax*2]
lea eax, [rdx + 0x7d]
xor word [rcx + 0x10], ax
mov ecx, dword [r8 + 4]
mov r9d, dword [r8]
lea eax, [rcx + 1]
cmp r9d, eax
jne 0x140004bc1
inc cx
movsxd rax, edx
xor word [r8 + rax*2 + 0x12], cx
inc dword [r8]
jmp 0x140004ba1
lea eax, [rcx + 2]
cmp r9d, eax
jne 0x140004bdb
add cx, 2
movsxd rax, edx
xor word [r8 + rax*2 + 0x12], cx
inc dword [r8]
jmp 0x140004ba1
cmp r9d, ecx
je 0x140004c14
lea eax, [rcx + 4]
cmp r9d, eax
jne 0x140004bfa
add cx, 3
movsxd rax, edx
xor word [r8 + rax*2 + 0x12], cx
inc dword [r8]
jmp 0x140004ba1
lea eax, [rcx + 5]
cmp r9d, eax
jne 0x140004c22
add cx, 4
movsxd rax, edx
xor word [r8 + rax*2 + 0x12], cx
inc dword [r8]
jmp 0x140004ba1
movsxd rax, edx
lea rcx, [r8 + rax*2]
lea eax, [rdx + 0x7e]
xor word [rcx + 0x12], ax
add edx, 4
cmp edx, 8
jb 0x140004a10
mov rax, qword gs:[0x58]
mov ecx, 0x49c
mov byte [r8 + 0xa], 1
mov edi, 0xe8
mov rsi, qword [rax]
mov eax, dword [rcx + rsi]
test al, 1
jne 0x140004c86
or eax, 1
mov qword [rsi + rdi], rbx
mov dword [rcx + rsi], eax
mov rax, qword [0x14000c930]
mov word [rsi + rdi + 8], bx
mov byte [rsi + rdi + 0xa], bl
shr rax, 0x20
mov word [rsi + rdi + 0xc], ax
movzx eax, word [0x14000c936]
mov word [rsi + rdi + 0xe], ax
mov word [rsi + rdi + 0x10], 0x7d
cmp byte [rsi + rdi + 0xa], bl
jne 0x140004dd4
mov ecx, dword [rsi + rdi + 4]
mov edx, dword [rsi + rdi]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x140004cae
inc cx
xor word [rsi + rdi + 0xc], cx
lea eax, [rdx + 1]
mov dword [rsi + rdi], eax
jmp 0x140004c90
lea eax, [rcx + 2]
cmp edx, eax
jne 0x140004cc6
add cx, 2
xor word [rsi + rdi + 0xc], cx
lea eax, [rdx + 1]
mov dword [rsi + rdi], eax
jmp 0x140004c90
cmp edx, ecx
je 0x140004cfa
lea eax, [rcx + 4]
cmp edx, eax
jne 0x140004ce2
add cx, 3
xor word [rsi + rdi + 0xc], cx
lea eax, [rdx + 1]
mov dword [rsi + rdi], eax
jmp 0x140004c90
lea eax, [rcx + 5]
cmp edx, eax
jne 0x140004d00
add cx, 4
xor word [rsi + rdi + 0xc], cx
lea eax, [rdx + 1]
mov dword [rsi + rdi], eax
jmp 0x140004c90
xor word [rsi + rdi + 0xc], 0x7b
mov ecx, dword [rsi + rdi + 4]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x140004d1b
inc cx
xor word [rsi + rdi + 0xe], cx
inc dword [rsi + rdi]
mov edx, dword [rsi + rdi]
jmp 0x140004d00
lea eax, [rcx + 2]
cmp edx, eax
jne 0x140004d33
add cx, 2
xor word [rsi + rdi + 0xe], cx
inc dword [rsi + rdi]
mov edx, dword [rsi + rdi]
jmp 0x140004d00
cmp edx, ecx
je 0x140004d67
lea eax, [rcx + 4]
cmp edx, eax
jne 0x140004d4f
add cx, 3
xor word [rsi + rdi + 0xe], cx
inc dword [rsi + rdi]
mov edx, dword [rsi + rdi]
jmp 0x140004d00
lea eax, [rcx + 5]
cmp edx, eax
jne 0x140004d70
add cx, 4
xor word [rsi + rdi + 0xe], cx
inc dword [rsi + rdi]
mov edx, dword [rsi + rdi]
jmp 0x140004d00
xor word [rsi + rdi + 0xe], 0x7c
nop dword [rax]
mov ecx, dword [rsi + rdi + 4]
mov edx, dword [rsi + rdi]
lea eax, [rcx + 1]
cmp edx, eax
jne 0x140004d8b
inc cx
xor word [rsi + rdi + 0x10], cx
inc dword [rsi + rdi]
jmp 0x140004d70
lea eax, [rcx + 2]
cmp edx, eax
jne 0x140004da0
add cx, 2
xor word [rsi + rdi + 0x10], cx
inc dword [rsi + rdi]
jmp 0x140004d70
cmp edx, ecx
je 0x140004dce
lea eax, [rcx + 4]
cmp edx, eax
jne 0x140004db9
add cx, 3
xor word [rsi + rdi + 0x10], cx
inc dword [rsi + rdi]
jmp 0x140004d70
lea eax, [rcx + 5]
cmp edx, eax
jne 0x140004dd4
add cx, 4
xor word [rsi + rdi + 0x10], cx
inc dword [rsi + rdi]
jmp 0x140004d70
xor word [rsi + rdi + 0x10], 0x7d
xor edx, edx
mov byte [rsi + rdi + 0xa], 1
lea rcx, [r8 + 0xc]
call qword [sym.imp.USER32.dll_FindWindowW]
lea rcx, [rdi + 0xc]
xor edx, edx
add rcx, rsi
mov rbp, rax
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140004e05
test rbp, rbp
je 0x140004f34
call fcn.140004f50
mov r9, rax
cmp byte [rax + 9], bl
jne 0x140004f1a
nop word [rax + rax]
mov edx, dword [r9 + 4]
mov r8d, dword [r9]
lea ecx, [rdx + 1]
cmp r8d, ecx
jne 0x140004e3e
movsxd rax, ebx
inc dl
xor byte [rax + r9 + 0xa], dl
inc dword [r9]
jmp 0x140004e20
lea eax, [rdx + 2]
cmp r8d, eax
jne 0x140004e56
movsxd rax, ebx
add dl, 2
xor byte [rax + r9 + 0xa], dl
inc dword [r9]
jmp 0x140004e20
cmp r8d, edx
je 0x140004e8b
lea eax, [rdx + 4]
cmp r8d, eax
jne 0x140004e73
movsxd rax, ebx
add dl, 3
xor byte [rax + r9 + 0xa], dl
inc dword [r9]
jmp 0x140004e20
lea eax, [rdx + 5]
cmp r8d, eax
jne 0x140004ea0
movsxd rax, ebx
add dl, 4
xor byte [rax + r9 + 0xa], dl
inc dword [r9]
jmp 0x140004e20
movsxd rcx, ebx
lea eax, [rbx + 0x7b]
xor byte [rcx + r9 + 0xa], al
nop word [rax + rax]
mov eax, dword [r9 + 4]
mov edx, dword [r9]
lea ecx, [rax + 1]
cmp edx, ecx
jne 0x140004ebd
inc al
movsxd rcx, ebx
xor byte [rcx + r9 + 0xb], al
inc dword [r9]
jmp 0x140004ea0
lea ecx, [rax + 2]
cmp edx, ecx
jne 0x140004ed3
add al, 2
movsxd rcx, ebx
xor byte [rcx + r9 + 0xb], al
inc dword [r9]
jmp 0x140004ea0
cmp edx, eax
je 0x140004f03
lea ecx, [rax + 4]
cmp edx, ecx
jne 0x140004eed
add al, 3
movsxd rcx, ebx
xor byte [rcx + r9 + 0xb], al
inc dword [r9]
jmp 0x140004ea0
lea ecx, [rax + 5]
cmp edx, ecx
jne 0x140004f0e
add al, 4
movsxd rcx, ebx
xor byte [rcx + r9 + 0xb], al
inc dword [r9]
jmp 0x140004ea0
movsxd rcx, ebx
lea eax, [rbx + 0x7c]
xor byte [rcx + r9 + 0xb], al
add ebx, 2
cmp ebx, 0x22
jb 0x140004e20
lea rdx, [r9 + 0xa]
mov byte [r9 + 9], 1
call fcn.1400012a0
mov ecx, 0x1005
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret