Function at 0x1001b9d0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100b7040]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, byte [0xcf2d20]
add eax, 0xfffffff0
cmp eax, 0xf
ja case.0x1001b9f3.24
jmp dword [eax*4 + 0x1001bec8]
mov ecx, 0x48af90
mov dword [0x100baa4c], ecx
jmp 0x1001ba82
mov ecx, 0x48b2f0
mov dword [0x100baa4c], ecx
jmp 0x1001ba82
mov ecx, 0x48b660
mov dword [0x100baa4c], ecx
jmp 0x1001ba82
mov ecx, 0x48b9d0
mov dword [0x100baa4c], ecx
jmp 0x1001ba82
mov ecx, 0x48bd40
mov dword [0x100baa4c], ecx
jmp 0x1001ba82
mov ecx, 0x48c0b0
mov dword [0x100baa4c], ecx
jmp 0x1001ba82
mov ecx, 0x48c420
mov dword [0x100baa4c], ecx
jmp 0x1001ba82
mov ecx, 0x48c790
mov dword [0x100baa4c], ecx
jmp 0x1001ba82
mov ecx, 0x48cb00
mov dword [0x100baa4c], ecx
jmp 0x1001ba82
mov ecx, 0x48ce70
mov dword [0x100baa4c], ecx
jmp 0x1001ba82
mov ecx, dword [0x100baa4c]
call fcn.10018430
cmp al, 0xe9
jne 0x1001baa2
push 9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push edi
push 4
push dword [0x100baa4c]
call esi
test eax, eax
jne 0x1001bae8
mov eax, dword [0x100baa4c]
mov dword [0x100baa5c], eax
call fcn.1007e630
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.1007eb00
push 0x10019100
push 0x100baa5c
call fcn.1007deb0
call fcn.1007e690
push 4
push 0x48b2af
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1001bb55
push 4
push 0x10018e70
call esi
test eax, eax
jne 0x1001bb55
push 4
push 0x48b2af
call esi
test eax, eax
jne 0x1001bb33
xor edi, edi
nop word [eax + eax]
lea ecx, [edi + 0x48b2af]
mov dl, 0x90
call fcn.100183d0
inc edi
cmp edi, 6
jl 0x1001bb20
push 0
mov eax, 0x10018e70
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b2b4
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b2af
push 0xffffffffffffffff
call ebx
push 4
push 0x48b610
call esi
test eax, eax
jne 0x1001bbb5
push 4
push 0x10018eb0
call esi
test eax, eax
jne 0x1001bbb5
push 4
push 0x48b610
call esi
test eax, eax
jne 0x1001bb93
xor edi, edi
nop
lea ecx, [edi + 0x48b610]
mov dl, 0x90
call fcn.100183d0
inc edi
cmp edi, 6
jl 0x1001bb80
push 0
mov eax, 0x10018eb0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b615
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b610
push 0xffffffffffffffff
call ebx
push 4
push 0x48b980
call esi
test eax, eax
jne 0x1001bc15
push 4
push 0x10018ef0
call esi
test eax, eax
jne 0x1001bc15
push 4
push 0x48b980
call esi
test eax, eax
jne 0x1001bbf3
xor edi, edi
nop
lea ecx, [edi + 0x48b980]
mov dl, 0x90
call fcn.100183d0
inc edi
cmp edi, 6
jl 0x1001bbe0
push 0
mov eax, 0x10018ef0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b985
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b980
push 0xffffffffffffffff
call ebx
push 4
push 0x48bcf0
call esi
test eax, eax
jne 0x1001bc75
push 4
push 0x10018f30
call esi
test eax, eax
jne 0x1001bc75
push 4
push 0x48bcf0
call esi
test eax, eax
jne 0x1001bc53
xor edi, edi
nop
lea ecx, [edi + 0x48bcf0]
mov dl, 0x90
call fcn.100183d0
inc edi
cmp edi, 6
jl 0x1001bc40
push 0
mov eax, 0x10018f30
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48bcf5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48bcf0
push 0xffffffffffffffff
call ebx
push 4
push 0x48c060
call esi
test eax, eax
jne 0x1001bcd5
push 4
push 0x10018f70
call esi
test eax, eax
jne 0x1001bcd5
push 4
push 0x48c060
call esi
test eax, eax
jne 0x1001bcb3
xor edi, edi
nop
lea ecx, [edi + 0x48c060]
mov dl, 0x90
call fcn.100183d0
inc edi
cmp edi, 6
jl 0x1001bca0
push 0
mov eax, 0x10018f70
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c065
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c060
push 0xffffffffffffffff
call ebx
push 4
push 0x48c3d0
call esi
test eax, eax
jne 0x1001bd35
push 4
push 0x10018fb0
call esi
test eax, eax
jne 0x1001bd35
push 4
push 0x48c3d0
call esi
test eax, eax
jne 0x1001bd13
xor edi, edi
nop
lea ecx, [edi + 0x48c3d0]
mov dl, 0x90
call fcn.100183d0
inc edi
cmp edi, 6
jl 0x1001bd00
push 0
mov eax, 0x10018fb0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c3d5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c3d0
push 0xffffffffffffffff
call ebx
push 4
push 0x48c740
call esi
test eax, eax
jne 0x1001bd95
push 4
push 0x10018ff0
call esi
test eax, eax
jne 0x1001bd95
push 4
push 0x48c740
call esi
test eax, eax
jne 0x1001bd73
xor edi, edi
nop
lea ecx, [edi + 0x48c740]
mov dl, 0x90
call fcn.100183d0
inc edi
cmp edi, 6
jl 0x1001bd60
push 0
mov eax, 0x10018ff0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c745
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c740
push 0xffffffffffffffff
call ebx
push 4
push 0x48cab0
call esi
test eax, eax
jne 0x1001bdf5
push 4
push 0x10019030
call esi
test eax, eax
jne 0x1001bdf5
push 4
push 0x48cab0
call esi
test eax, eax
jne 0x1001bdd3
xor edi, edi
nop
lea ecx, [edi + 0x48cab0]
mov dl, 0x90
call fcn.100183d0
inc edi
cmp edi, 6
jl 0x1001bdc0
push 0
mov eax, 0x10019030
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48cab5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48cab0
push 0xffffffffffffffff
call ebx
push 4
push 0x48ce20
call esi
test eax, eax
jne 0x1001be55
push 4
push 0x10019070
call esi
test eax, eax
jne 0x1001be55
push 4
push 0x48ce20
call esi
test eax, eax
jne 0x1001be33
xor edi, edi
nop
lea ecx, [edi + 0x48ce20]
mov dl, 0x90
call fcn.100183d0
inc edi
cmp edi, 6
jl 0x1001be20
push 0
mov eax, 0x10019070
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48ce25
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48ce20
push 0xffffffffffffffff
call ebx
push 4
push 0x48d190
call esi
test eax, eax
jne 0x1001beb5
push 4
push 0x100190b0
call esi
test eax, eax
jne 0x1001beb5
push 4
push 0x48d190
call esi
test eax, eax
jne 0x1001be93
xor esi, esi
nop
lea ecx, [esi + 0x48d190]
mov dl, 0x90
call fcn.100183d0
inc esi
cmp esi, 6
jl 0x1001be80
push 0
mov eax, 0x100190b0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48d195
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48d190
push 0xffffffffffffffff
call ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1007f9e5
mov esp, ebp
pop ebp
ret