Function at 0x10011760
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100734c1
mov eax, dword fs:[0]
push eax
sub esp, 0x174
mov eax, dword [0x1044a964]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x150]
mov dword [ebp - 0x148], 0
xorps xmm0, xmm0
push eax
movq qword [ebp - 0x150], xmm0
call fcn.10012630
add esp, 4
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x144], 0
mov dword [ebp - 4], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x120], 0x43357451
mov dword [ebp - 0x11c], 0x2e65726f
mov dword [ebp - 0x118], 0x6c6c64
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10011805
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x144]
call fcn.10005040
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x14c]
mov ebx, dword [ebp - 0x144]
mov byte [ebp - 4], 1
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x168], ecx
cmp eax, ecx
je 0x10011a28
mov edi, dword [ebp - 0x134]
push 0x104
lea ecx, [ebp - 0x114]
push ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x10011a0d
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x11c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x118], 0xf
mov byte [ebp - 0x12c], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100118a0
sub ecx, edx
lea eax, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0x12c]
call fcn.10005040
cmp dword [ebp - 0x130], 0x10
lea esi, [ebp - 0x144]
mov ecx, dword [ebp - 0x118]
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0x11c]
cmovae esi, ebx
mov ebx, dword [ebp - 0x12c]
cmp ecx, 0x10
mov dword [ebp - 0x160], esi
cmovae edx, ebx
mov dword [ebp - 0x164], edx
cmp edi, eax
ja 0x100119c3
test edi, edi
je 0x100119c6
movsx ecx, byte [esi]
sub eax, edi
inc eax
mov dword [ebp - 0x15c], ecx
add eax, edx
mov dword [ebp - 0x158], eax
sub eax, edx
push eax
push ecx
push edx
call fcn.1004f460
mov edi, eax
add esp, 0xc
test edi, edi
je 0x100119bd
mov ecx, esi
mov edx, edi
mov esi, dword [ebp - 0x134]
sub esi, 4
jb 0x10011951
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x10011956
add edx, 4
add ecx, 4
sub esi, 4
jae 0x10011940
cmp esi, 0xfffffffc
je 0x1001198a
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x10011983
cmp esi, 0xfffffffd
je 0x1001198a
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x10011983
cmp esi, 0xfffffffe
je 0x1001198a
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x10011983
cmp esi, 0xffffffff
je 0x1001198a
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x1001198a
sbb eax, eax
or eax, 1
jmp 0x1001198c
xor eax, eax
test eax, eax
je 0x10011a69
mov eax, dword [ebp - 0x158]
inc edi
sub eax, edi
push eax
push dword [ebp - 0x15c]
push edi
call fcn.1004f460
mov esi, dword [ebp - 0x160]
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x10011931
mov ecx, dword [ebp - 0x118]
or edi, 0xffffffff
cmp edi, 0xffffffff
jne 0x10011a7a
mov byte [ebp - 4], 1
cmp ecx, 0x10
jb 0x10011a01
inc ecx
mov eax, ebx
cmp ecx, 0x1000
jb 0x100119f7
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10011b3f
push ecx
push ebx
call fcn.1004cb1a
add esp, 8
mov ebx, dword [ebp - 0x144]
mov edi, dword [ebp - 0x134]
mov eax, dword [ebp - 0x154]
add eax, 0xc
mov dword [ebp - 0x154], eax
cmp eax, dword [ebp - 0x168]
jne 0x10011851
xor bl, bl
mov eax, dword [ebp - 0x130]
cmp eax, 0x10
jb 0x10011b11
mov edx, dword [ebp - 0x144]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x10011b07
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10011b3a
jmp 0x10011b07
sub edi, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x118]
jmp 0x100119c6
mov ecx, 0x15
xor edx, edx
mov al, byte [edx + str.QscznxZSl]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x180], al
and ecx, 0x800000ff
jns 0x10011aa1
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x17
jl 0x10011a81
mov byte [ebp - 0x169], 0
lea eax, [ebp - 0x180]
mov byte [ebp - 4], 3
push eax
call fcn.10041dc0
add esp, 4
push 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [ebp - 0x118]
cmp ecx, 0x10
jb 0x10011b00
inc ecx
mov eax, ebx
cmp ecx, 0x1000
jb 0x10011af6
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10011b3f
push ecx
push ebx
call fcn.1004cb1a
add esp, 8
mov bl, 1
jmp 0x10011a2a
push ecx
push edx
call fcn.1004cb1a
add esp, 8
lea ecx, [ebp - 0x150]
call fcn.100116f0
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004ce42
mov esp, ebp
pop ebp
ret
call fcn.10051faf
call fcn.10051faf
int3