Function at 0x10011db0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x100a8080]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov ecx, 0x100ad348
call fcn.1000e250
cmp dword [0x100ad344], 0xf
lea ecx, [ebp - 0x30]
mov eax, 0x100ad330
mov dword [0x100ad340], 0
cmova eax, dword [0x100ad330]
xorps xmm0, xmm0
mov byte [0x100acf3f], 0
movlpd qword [0x100ad040], xmm0
movlpd qword [0x100ad048], xmm0
mov byte [eax], 0
call fcn.10011630
push eax
mov ecx, 0x100ad360
call fcn.1000bc40
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0xf
jbe 0x10011e4d
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10011e43
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001208f
push ecx
push edx
call fcn.100675d1
add esp, 8
mov ecx, 0x6d12c0
call fcn.10011470
cmp al, 0xe9
jne 0x10011e72
push 9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push 0x100acfb4
mov dword [0x100acfb4], 0x6d12c0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
test eax, eax
jne 0x10011ec3
push 4
push 0x10012430
call esi
test eax, eax
jne 0x10011ec3
call fcn.100661c0
call edi
push eax
call fcn.10066690
push 0x10012430
push 0x100acfb4
call fcn.10065a40
call fcn.10066220
push 4
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6d141e
push eax
call esi
test eax, eax
jne 0x10011f03
push 4
push 0x10012400
call esi
test eax, eax
jne 0x10011f03
call fcn.100661c0
call edi
push eax
call fcn.10066690
push 0x10012400
lea eax, [ebp - 0x10]
push eax
call fcn.10065a40
call fcn.10066220
mov edx, 0x10014340
mov ecx, 0xfbe200
call fcn.10011440
mov edx, 0x10014d50
mov ecx, 0xfbfea4
call fcn.10011440
call fcn.100661c0
call edi
push eax
call fcn.10066690
push 0x10014ed0
push 0x100acfac
call fcn.10065ed0
call fcn.10066220
push 4
push 0x8365b0
call esi
test eax, eax
jne 0x10011f7a
mov dword [0x100acfac], 0x8365b0
call fcn.100661c0
call edi
push eax
call fcn.10066690
push 0x10014eb0
push 0x100acfac
call fcn.10065a40
call fcn.10066220
push 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x8084c2
push eax
call esi
test eax, eax
jne 0x10011fba
push 4
push 0x10014ed0
call esi
test eax, eax
jne 0x10011fba
call fcn.100661c0
call edi
push eax
call fcn.10066690
push 0x10014ed0
lea eax, [ebp - 0x14]
push eax
call fcn.10065a40
call fcn.10066220
push 4
push 0xb04fda
call esi
test eax, eax
jne 0x10012007
push 4
push 0xb04fda
call esi
test eax, eax
jne 0x10012007
push 4
push 0x1000a8b0
call esi
test eax, eax
jne 0x10012007
push 0
mov eax, 0x1000a8b0
mov byte [ebp - 0xc], 0xe8
sub eax, 0xb04fdf
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0xb04fda
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 4
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0x620620
push eax
call esi
test eax, eax
jne 0x10012047
push 4
push 0x1000a5f0
call esi
test eax, eax
jne 0x10012047
call fcn.100661c0
call edi
push eax
call fcn.10066690
push 0x1000a5f0
lea eax, [ebp - 0x18]
push eax
call fcn.10065a40
call fcn.10066220
push 4
push 0x700150
call esi
test eax, eax
jne 0x1001207f
mov dword [0x100ad034], 0x700150
call fcn.100661c0
call edi
push eax
call fcn.10066690
push 0x100118d0
push 0x100ad034
call fcn.10065a40
call fcn.10066220
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.10067570
mov esp, ebp
pop ebp
ret
call fcn.1006cd3b
int3