Function at 0x1001ffa0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100c90c0]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, byte [0xcf2d20]
add eax, 0xfffffff0
cmp eax, 0xf
ja case.0x1001ffc3.24
jmp dword [eax*4 + 0x10020494]
mov ecx, 0x48af90
mov dword [0x100ce570], ecx
jmp 0x10020052
mov ecx, 0x48b2f0
mov dword [0x100ce570], ecx
jmp 0x10020052
mov ecx, 0x48b660
mov dword [0x100ce570], ecx
jmp 0x10020052
mov ecx, 0x48b9d0
mov dword [0x100ce570], ecx
jmp 0x10020052
mov ecx, 0x48bd40
mov dword [0x100ce570], ecx
jmp 0x10020052
mov ecx, 0x48c0b0
mov dword [0x100ce570], ecx
jmp 0x10020052
mov ecx, 0x48c420
mov dword [0x100ce570], ecx
jmp 0x10020052
mov ecx, 0x48c790
mov dword [0x100ce570], ecx
jmp 0x10020052
mov ecx, 0x48cb00
mov dword [0x100ce570], ecx
jmp 0x10020052
mov ecx, 0x48ce70
mov dword [0x100ce570], ecx
jmp 0x10020052
mov ecx, dword [0x100ce570]
call fcn.1001cad0
cmp al, 0xe9
jne 0x10020072
push 9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push edi
push 4
push dword [0x100ce570]
call esi
test eax, eax
jne 0x100200b8
mov eax, dword [0x100ce570]
mov dword [0x100ce580], eax
call fcn.100845d0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.10084aa0
push 0x1001d7b0
push 0x100ce580
call fcn.10083e50
call fcn.10084630
push 4
push 0x48b2af
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x10020123
push 4
push 0x1001d530
call esi
test eax, eax
jne 0x10020123
push 4
push 0x48b2af
call esi
test eax, eax
jne 0x10020101
xor edi, edi
nop word [eax + eax]
lea ecx, [edi + 0x48b2af]
call fcn.1001ca70
inc edi
cmp edi, 6
jl 0x100200f0
push 0
mov eax, 0x1001d530
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b2b4
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b2af
push 0xffffffffffffffff
call ebx
push 4
push 0x48b610
call esi
test eax, eax
jne 0x10020183
push 4
push 0x1001d570
call esi
test eax, eax
jne 0x10020183
push 4
push 0x48b610
call esi
test eax, eax
jne 0x10020161
xor edi, edi
nop dword [eax]
lea ecx, [edi + 0x48b610]
call fcn.1001ca70
inc edi
cmp edi, 6
jl 0x10020150
push 0
mov eax, 0x1001d570
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b615
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b610
push 0xffffffffffffffff
call ebx
push 4
push 0x48b980
call esi
test eax, eax
jne 0x100201e3
push 4
push 0x1001d5b0
call esi
test eax, eax
jne 0x100201e3
push 4
push 0x48b980
call esi
test eax, eax
jne 0x100201c1
xor edi, edi
nop dword [eax]
lea ecx, [edi + 0x48b980]
call fcn.1001ca70
inc edi
cmp edi, 6
jl 0x100201b0
push 0
mov eax, 0x1001d5b0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b985
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b980
push 0xffffffffffffffff
call ebx
push 4
push 0x48bcf0
call esi
test eax, eax
jne 0x10020243
push 4
push 0x1001d5f0
call esi
test eax, eax
jne 0x10020243
push 4
push 0x48bcf0
call esi
test eax, eax
jne 0x10020221
xor edi, edi
nop dword [eax]
lea ecx, [edi + 0x48bcf0]
call fcn.1001ca70
inc edi
cmp edi, 6
jl 0x10020210
push 0
mov eax, 0x1001d5f0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48bcf5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48bcf0
push 0xffffffffffffffff
call ebx
push 4
push 0x48c060
call esi
test eax, eax
jne 0x100202a3
push 4
push 0x1001d630
call esi
test eax, eax
jne 0x100202a3
push 4
push 0x48c060
call esi
test eax, eax
jne 0x10020281
xor edi, edi
nop dword [eax]
lea ecx, [edi + 0x48c060]
call fcn.1001ca70
inc edi
cmp edi, 6
jl 0x10020270
push 0
mov eax, 0x1001d630
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c065
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c060
push 0xffffffffffffffff
call ebx
push 4
push 0x48c3d0
call esi
test eax, eax
jne 0x10020303
push 4
push 0x1001d670
call esi
test eax, eax
jne 0x10020303
push 4
push 0x48c3d0
call esi
test eax, eax
jne 0x100202e1
xor edi, edi
nop dword [eax]
lea ecx, [edi + 0x48c3d0]
call fcn.1001ca70
inc edi
cmp edi, 6
jl 0x100202d0
push 0
mov eax, 0x1001d670
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c3d5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c3d0
push 0xffffffffffffffff
call ebx
push 4
push 0x48c740
call esi
test eax, eax
jne 0x10020363
push 4
push 0x1001d6b0
call esi
test eax, eax
jne 0x10020363
push 4
push 0x48c740
call esi
test eax, eax
jne 0x10020341
xor edi, edi
nop dword [eax]
lea ecx, [edi + 0x48c740]
call fcn.1001ca70
inc edi
cmp edi, 6
jl 0x10020330
push 0
mov eax, 0x1001d6b0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c745
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c740
push 0xffffffffffffffff
call ebx
push 4
push 0x48cab0
call esi
test eax, eax
jne 0x100203c3
push 4
push 0x1001d6f0
call esi
test eax, eax
jne 0x100203c3
push 4
push 0x48cab0
call esi
test eax, eax
jne 0x100203a1
xor edi, edi
nop dword [eax]
lea ecx, [edi + 0x48cab0]
call fcn.1001ca70
inc edi
cmp edi, 6
jl 0x10020390
push 0
mov eax, 0x1001d6f0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48cab5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48cab0
push 0xffffffffffffffff
call ebx
push 4
push 0x48ce20
call esi
test eax, eax
jne 0x10020423
push 4
push 0x1001d730
call esi
test eax, eax
jne 0x10020423
push 4
push 0x48ce20
call esi
test eax, eax
jne 0x10020401
xor edi, edi
nop dword [eax]
lea ecx, [edi + 0x48ce20]
call fcn.1001ca70
inc edi
cmp edi, 6
jl 0x100203f0
push 0
mov eax, 0x1001d730
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48ce25
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48ce20
push 0xffffffffffffffff
call ebx
push 4
push 0x48d190
call esi
test eax, eax
jne 0x10020483
push 4
push 0x1001d770
call esi
test eax, eax
jne 0x10020483
push 4
push 0x48d190
call esi
test eax, eax
jne 0x10020461
xor esi, esi
nop dword [eax]
lea ecx, [esi + 0x48d190]
call fcn.1001ca70
inc esi
cmp esi, 6
jl 0x10020450
push 0
mov eax, 0x1001d770
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48d195
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48d190
push 0xffffffffffffffff
call ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10085995
mov esp, ebp
pop ebp
ret