Function at 0x5d11e8
Capabilities:
Terminate process
Terminate thread

Disassembly:
jae 0x5d10d4
jmp 0x5d10cf
call fcn.005d10d6
jae 0x5d10cf
add esp, 4
jmp 0x5d10db
dec dword [esp]
jno 0x5d10e0
jns 0x5d10cb
jp 0x5d10e4
add esp, 4
popf
jmp 0x5d10eb
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
clc
jae 0x5d1104
cld
fdiv qword [ebx + eax + 0x75]
add eax, ebp
je 0x5d1109
jne 0x5d1109
call 0x101d445d
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x5d1123
jne 0x5d1122
call 0x836101aa
rol byte [ebx + eax*4], 0xf0
add eax, 0xe445c7
add byte [eax], al
add byte [eax + 0x11], ch
leave
jl 0x5d1145
xor eax, 3
add eax, 4
xor eax, 5
mov dword [ebp - 0x1c], 0
push 0xd7cc911
lea ecx, [ebp - 0x51]
call fcn.005d1cc0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
in al, dx
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x51]
call fcn.005d8320
push 0x7c10c479
lea ecx, [ebp - 0x38]
call fcn.005d1c50
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], 0
push 0x7c10c479
lea ecx, [ebp - 0x30]
call fcn.005d1c50
mov dword [ebp - 0x24], eax
push 0
lea edx, [ebp - 0x28]
push edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_WTSGetActiveConsoleSessionId]
push eax
push 0
call sub.WTSAPI32.dll_WTSSendMessageA
lea ecx, [ebp - 0x30]
call fcn.005d1dd0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.005d1dd0
je 0x5d11d2
jne 0x5d11d2
lcall 0x749a, 0x3eb037c
sti
jl 0x5d11d7
jmp 0x5d11d9
je 0x5d11d4
pushf
push 0xa
jae 0x5d11e6
jmp 0x5d11e1
call 0x5d11e8
jae 0x5d11e1
add esp, 4
jmp 0x5d11ed
dec dword [esp]
jno 0x5d11f2
jns 0x5d11dd
jp 0x5d11f6
add esp, 4
popf
jmp 0x5d11fd
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
clc
jae 0x5d1216
inc edx
lcall 0x50e8, 0x1750374
je 0x5d121b
jne 0x5d121b
call 0x101d456f
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x5d1235
jne 0x5d1234
call 0x836102bc
rol byte [ebx + eax*4], 0xf0
add eax, 0x15ff006a
js 0x5d1257
xor eax, 3
add eax, 4
xor eax, 5
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop edi
add byte [eax - 1], dl
adc eax, sym.imp.KERNEL32.dll_TerminateProcess
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
adc eax, sym.imp.KERNEL32.dll_TerminateThread
je 0x5d1261
jne 0x5d1261
invalid
jl 0x5d1266
jmp 0x5d1268
je 0x5d1263
pushf
push 0xa
jae 0x5d1275
jmp 0x5d1270
call 0x5d1277
jae 0x5d1270
add esp, 4
jmp 0x5d127c
dec dword [esp]
jno 0x5d1281
jns 0x5d126c
jp 0x5d1285
add esp, 4
popf
jmp 0x5d128c
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
clc
jae 0x5d12a5
mov esi, 0x750374c6
add eax, ebp
je 0x5d12aa
jne 0x5d12aa
call 0x101d45fe
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x5d12c4
jne 0x5d12c3
call 0x8361034b
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x5d12d2
jne 0x5d12d2
invalid
jl 0x5d12d7
jmp 0x5d12d9
je 0x5d12d4
pushf
push 0xa
jae 0x5d12e6
jmp 0x5d12e1
call 0x5d12e8
jae 0x5d12e1
add esp, 4
jmp 0x5d12ed
dec dword [esp]
jno 0x5d12f2
jns 0x5d12dd
jp 0x5d12f6
add esp, 4
popf
jmp 0x5d12fd
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
clc
jae 0x5d1316
push 0x7503748f
add eax, ebp
je 0x5d131b
jne 0x5d131b
call 0x101d466f
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x5d1335
jne 0x5d1334
call 0x836103bc
rol byte [ebx + eax*4], 0xf0
add eax, 0x64f44d8b
mov dword [0], ecx
xor eax, 3
add eax, 4
xor eax, 5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret