Function at 0x1000905f
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
xor eax, eax
push eax
push eax
push eax
push eax
call fcn.10018130
mov edx, dword [esp + 0x1c]
lea ecx, [esp]
call fcn.10011000
mov edx, dword [esp + 0x20]
lea ecx, [esp + 4]
call fcn.10011000
sub esp, 8
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x18]
call fcn.100181f0
push eax
mov dword [esp + 0x10], eax
push dword [esp + 0x18]
call fcn.10013064
push eax
push dword [esp + 4]
call fcn.10018260
pop eax
add esp, 8
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x10009222
mov ebx, dword [esp + 0x30]
and ebx, 2
and ebx, ebx
je 0x1000921d
mov ebp, dword [esp + 0x2c]
push dword [ebp]
call fcn.10012efa
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x100090f5
jmp 0x1000921d
push edx
call fcn.10017f90
pop edx
push eax
push dword [esp + 0x10]
call fcn.1000d85a
lea eax, [esp + 0xc]
push eax
call fcn.10018030
push edx
call fcn.10017f90
pop edx
push eax
push edx
call fcn.10017f90
pop edx
push eax
lea edx, str.MINHOOK_ENABLE:
push edx
call fcn.10017fd0
mov edx, dword [esp + 8]
push edx
call fcn.10017fd0
lea edx, [0x10020220]
push edx
call fcn.10017fd0
mov edx, dword [esp + 0xc]
push edx
call fcn.10017fd0
lea edx, str._ERROR:
push edx
call fcn.10017fd0
mov edx, dword [esp + 0x10]
push edx
call fcn.10017fd0
call fcn.10012202
add dword [esp], edx
call fcn.1000cb6c
call fcn.10012220
cmp dword [0x1002a3e4], 0
je 0x1000918f
mov ebx, dword [esp + 0x30]
and ebx, 1
and ebx, ebx
jne 0x1000918f
mov eax, 1
jmp 0x10009191
xor eax, eax
and eax, eax
je 0x1000921d
push edx
call fcn.10017f90
pop edx
push eax
push 0xffffffff
push edx
call fcn.10017f90
pop edx
push eax
lea edx, str.Error_enable_hook
push edx
call fcn.10017fd0
mov edx, dword [esp + 0xc]
push edx
call fcn.10017fd0
lea edx, [0x10020220]
push edx
call fcn.10017fd0
mov edx, dword [esp + 0x10]
push edx
call fcn.10017fd0
lea edx, [0x1002010a]
push edx
call fcn.10017fd0
mov edx, dword [esp + 0x14]
push edx
call fcn.10017fd0
call fcn.10012202
add dword [esp], edx
call fcn.1000966c
call fcn.10012220
mov ebx, dword [0x1002a3e4]
cmp ebx, 2
jne 0x1000921d
push 0
call sub.KERNEL32.dll_GetCurrentProcess
push eax
call sub.KERNEL32.dll_TerminateProcess
jmp 0x100092e6
push edx
call fcn.10017f90
pop edx
push eax
push dword [esp + 0x10]
call fcn.1000d85a
lea eax, [esp + 0xc]
push eax
call fcn.10018030
cmp dword [0x1002a3e4], 0
je 0x10009258
mov ebx, dword [esp + 0x30]
and ebx, 1
and ebx, ebx
jne 0x10009258
mov eax, 1
jmp 0x1000925a
xor eax, eax
and eax, eax
je 0x100092e6
push edx
call fcn.10017f90
pop edx
push eax
push 0xffffffff
push edx
call fcn.10017f90
pop edx
push eax
lea edx, str.Error_create_hook
push edx
call fcn.10017fd0
mov edx, dword [esp + 0xc]
push edx
call fcn.10017fd0
lea edx, [0x10020220]
push edx
call fcn.10017fd0
mov edx, dword [esp + 0x10]
push edx
call fcn.10017fd0
lea edx, [0x1002010a]
push edx
call fcn.10017fd0
mov edx, dword [esp + 0x14]
push edx
call fcn.10017fd0
call fcn.10012202
add dword [esp], edx
call fcn.1000966c
call fcn.10012220
mov ebx, dword [0x1002a3e4]
cmp ebx, 2
jne 0x100092e6
push 0
call sub.KERNEL32.dll_GetCurrentProcess
push eax
call sub.KERNEL32.dll_TerminateProcess
mov eax, dword [esp + 0xc]
jmp 0x100092ee
push dword [esp + 4]
call fcn.10018190
push dword [esp]
call fcn.10018190
push dword [esp + 8]
call fcn.10018190
add esp, 0x10
pop ebx
pop ebp
ret 0x18