Function at 0x1001ca70
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100bd080]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, byte [0xcf2d20]
add eax, 0xfffffff0
cmp eax, 0xf
ja case.0x1001ca93.24
jmp dword [eax*4 + 0x1001cf68]
mov ecx, 0x48af90
mov dword [0x100c0b34], ecx
jmp 0x1001cb22
mov ecx, 0x48b2f0
mov dword [0x100c0b34], ecx
jmp 0x1001cb22
mov ecx, 0x48b660
mov dword [0x100c0b34], ecx
jmp 0x1001cb22
mov ecx, 0x48b9d0
mov dword [0x100c0b34], ecx
jmp 0x1001cb22
mov ecx, 0x48bd40
mov dword [0x100c0b34], ecx
jmp 0x1001cb22
mov ecx, 0x48c0b0
mov dword [0x100c0b34], ecx
jmp 0x1001cb22
mov ecx, 0x48c420
mov dword [0x100c0b34], ecx
jmp 0x1001cb22
mov ecx, 0x48c790
mov dword [0x100c0b34], ecx
jmp 0x1001cb22
mov ecx, 0x48cb00
mov dword [0x100c0b34], ecx
jmp 0x1001cb22
mov ecx, 0x48ce70
mov dword [0x100c0b34], ecx
jmp 0x1001cb22
mov ecx, dword [0x100c0b34]
call fcn.100196a0
cmp al, 0xe9
jne 0x1001cb42
push 9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push edi
push 4
push dword [0x100c0b34]
call esi
test eax, eax
jne 0x1001cb88
mov eax, dword [0x100c0b34]
mov dword [0x100c0b44], eax
call fcn.1007e600
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.1007ead0
push 0x1001a380
push 0x100c0b44
call fcn.1007de80
call fcn.1007e660
push 4
push 0x48b2af
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1001cbf5
push 4
push 0x1001a100
call esi
test eax, eax
jne 0x1001cbf5
push 4
push 0x48b2af
call esi
test eax, eax
jne 0x1001cbd3
xor edi, edi
nop word [eax + eax]
lea ecx, [edi + 0x48b2af]
mov dl, 0x90
call fcn.10019640
inc edi
cmp edi, 6
jl 0x1001cbc0
push 0
mov eax, 0x1001a100
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b2b4
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b2af
push 0xffffffffffffffff
call ebx
push 4
push 0x48b610
call esi
test eax, eax
jne 0x1001cc55
push 4
push 0x1001a140
call esi
test eax, eax
jne 0x1001cc55
push 4
push 0x48b610
call esi
test eax, eax
jne 0x1001cc33
xor edi, edi
nop
lea ecx, [edi + 0x48b610]
mov dl, 0x90
call fcn.10019640
inc edi
cmp edi, 6
jl 0x1001cc20
push 0
mov eax, 0x1001a140
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b615
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b610
push 0xffffffffffffffff
call ebx
push 4
push 0x48b980
call esi
test eax, eax
jne 0x1001ccb5
push 4
push 0x1001a180
call esi
test eax, eax
jne 0x1001ccb5
push 4
push 0x48b980
call esi
test eax, eax
jne 0x1001cc93
xor edi, edi
nop
lea ecx, [edi + 0x48b980]
mov dl, 0x90
call fcn.10019640
inc edi
cmp edi, 6
jl 0x1001cc80
push 0
mov eax, 0x1001a180
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b985
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b980
push 0xffffffffffffffff
call ebx
push 4
push 0x48bcf0
call esi
test eax, eax
jne 0x1001cd15
push 4
push 0x1001a1c0
call esi
test eax, eax
jne 0x1001cd15
push 4
push 0x48bcf0
call esi
test eax, eax
jne 0x1001ccf3
xor edi, edi
nop
lea ecx, [edi + 0x48bcf0]
mov dl, 0x90
call fcn.10019640
inc edi
cmp edi, 6
jl 0x1001cce0
push 0
mov eax, 0x1001a1c0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48bcf5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48bcf0
push 0xffffffffffffffff
call ebx
push 4
push 0x48c060
call esi
test eax, eax
jne 0x1001cd75
push 4
push 0x1001a200
call esi
test eax, eax
jne 0x1001cd75
push 4
push 0x48c060
call esi
test eax, eax
jne 0x1001cd53
xor edi, edi
nop
lea ecx, [edi + 0x48c060]
mov dl, 0x90
call fcn.10019640
inc edi
cmp edi, 6
jl 0x1001cd40
push 0
mov eax, 0x1001a200
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c065
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c060
push 0xffffffffffffffff
call ebx
push 4
push 0x48c3d0
call esi
test eax, eax
jne 0x1001cdd5
push 4
push 0x1001a240
call esi
test eax, eax
jne 0x1001cdd5
push 4
push 0x48c3d0
call esi
test eax, eax
jne 0x1001cdb3
xor edi, edi
nop
lea ecx, [edi + 0x48c3d0]
mov dl, 0x90
call fcn.10019640
inc edi
cmp edi, 6
jl 0x1001cda0
push 0
mov eax, 0x1001a240
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c3d5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c3d0
push 0xffffffffffffffff
call ebx
push 4
push 0x48c740
call esi
test eax, eax
jne 0x1001ce35
push 4
push 0x1001a280
call esi
test eax, eax
jne 0x1001ce35
push 4
push 0x48c740
call esi
test eax, eax
jne 0x1001ce13
xor edi, edi
nop
lea ecx, [edi + 0x48c740]
mov dl, 0x90
call fcn.10019640
inc edi
cmp edi, 6
jl 0x1001ce00
push 0
mov eax, 0x1001a280
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c745
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c740
push 0xffffffffffffffff
call ebx
push 4
push 0x48cab0
call esi
test eax, eax
jne 0x1001ce95
push 4
push 0x1001a2c0
call esi
test eax, eax
jne 0x1001ce95
push 4
push 0x48cab0
call esi
test eax, eax
jne 0x1001ce73
xor edi, edi
nop
lea ecx, [edi + 0x48cab0]
mov dl, 0x90
call fcn.10019640
inc edi
cmp edi, 6
jl 0x1001ce60
push 0
mov eax, 0x1001a2c0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48cab5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48cab0
push 0xffffffffffffffff
call ebx
push 4
push 0x48ce20
call esi
test eax, eax
jne 0x1001cef5
push 4
push 0x1001a300
call esi
test eax, eax
jne 0x1001cef5
push 4
push 0x48ce20
call esi
test eax, eax
jne 0x1001ced3
xor edi, edi
nop
lea ecx, [edi + 0x48ce20]
mov dl, 0x90
call fcn.10019640
inc edi
cmp edi, 6
jl 0x1001cec0
push 0
mov eax, 0x1001a300
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48ce25
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48ce20
push 0xffffffffffffffff
call ebx
push 4
push 0x48d190
call esi
test eax, eax
jne 0x1001cf55
push 4
push 0x1001a340
call esi
test eax, eax
jne 0x1001cf55
push 4
push 0x48d190
call esi
test eax, eax
jne 0x1001cf33
xor esi, esi
nop
lea ecx, [esi + 0x48d190]
mov dl, 0x90
call fcn.10019640
inc esi
cmp esi, 6
jl 0x1001cf20
push 0
mov eax, 0x1001a340
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48d195
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48d190
push 0xffffffffffffffff
call ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1007f9b5
mov esp, ebp
pop ebp
ret