Function at 0x1001b3f0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100b7080]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, byte [0xcf2d20]
add eax, 0xfffffff0
cmp eax, 0xf
ja case.0x1001b413.24
jmp dword [eax*4 + 0x1001b8e8]
mov ecx, 0x48af90
mov dword [0x100bac24], ecx
jmp 0x1001b4a2
mov ecx, 0x48b2f0
mov dword [0x100bac24], ecx
jmp 0x1001b4a2
mov ecx, 0x48b660
mov dword [0x100bac24], ecx
jmp 0x1001b4a2
mov ecx, 0x48b9d0
mov dword [0x100bac24], ecx
jmp 0x1001b4a2
mov ecx, 0x48bd40
mov dword [0x100bac24], ecx
jmp 0x1001b4a2
mov ecx, 0x48c0b0
mov dword [0x100bac24], ecx
jmp 0x1001b4a2
mov ecx, 0x48c420
mov dword [0x100bac24], ecx
jmp 0x1001b4a2
mov ecx, 0x48c790
mov dword [0x100bac24], ecx
jmp 0x1001b4a2
mov ecx, 0x48cb00
mov dword [0x100bac24], ecx
jmp 0x1001b4a2
mov ecx, 0x48ce70
mov dword [0x100bac24], ecx
jmp 0x1001b4a2
mov ecx, dword [0x100bac24]
call fcn.10018490
cmp al, 0xe9
jne 0x1001b4c2
push 9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push edi
push 4
push dword [0x100bac24]
call esi
test eax, eax
jne 0x1001b508
mov eax, dword [0x100bac24]
mov dword [0x100bac30], eax
call fcn.1007fe90
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.10080360
push 0x10019140
push 0x100bac30
call fcn.1007f710
call fcn.1007fef0
push 4
push 0x48b2af
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1001b575
push 4
push 0x10018ec0
call esi
test eax, eax
jne 0x1001b575
push 4
push 0x48b2af
call esi
test eax, eax
jne 0x1001b553
xor edi, edi
nop word [eax + eax]
lea ecx, [edi + 0x48b2af]
mov dl, 0x90
call fcn.10018430
inc edi
cmp edi, 6
jl 0x1001b540
push 0
mov eax, 0x10018ec0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b2b4
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b2af
push 0xffffffffffffffff
call ebx
push 4
push 0x48b610
call esi
test eax, eax
jne 0x1001b5d5
push 4
push 0x10018f00
call esi
test eax, eax
jne 0x1001b5d5
push 4
push 0x48b610
call esi
test eax, eax
jne 0x1001b5b3
xor edi, edi
nop
lea ecx, [edi + 0x48b610]
mov dl, 0x90
call fcn.10018430
inc edi
cmp edi, 6
jl 0x1001b5a0
push 0
mov eax, 0x10018f00
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b615
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b610
push 0xffffffffffffffff
call ebx
push 4
push 0x48b980
call esi
test eax, eax
jne 0x1001b635
push 4
push 0x10018f40
call esi
test eax, eax
jne 0x1001b635
push 4
push 0x48b980
call esi
test eax, eax
jne 0x1001b613
xor edi, edi
nop
lea ecx, [edi + 0x48b980]
mov dl, 0x90
call fcn.10018430
inc edi
cmp edi, 6
jl 0x1001b600
push 0
mov eax, 0x10018f40
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b985
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b980
push 0xffffffffffffffff
call ebx
push 4
push 0x48bcf0
call esi
test eax, eax
jne 0x1001b695
push 4
push 0x10018f80
call esi
test eax, eax
jne 0x1001b695
push 4
push 0x48bcf0
call esi
test eax, eax
jne 0x1001b673
xor edi, edi
nop
lea ecx, [edi + 0x48bcf0]
mov dl, 0x90
call fcn.10018430
inc edi
cmp edi, 6
jl 0x1001b660
push 0
mov eax, 0x10018f80
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48bcf5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48bcf0
push 0xffffffffffffffff
call ebx
push 4
push 0x48c060
call esi
test eax, eax
jne 0x1001b6f5
push 4
push 0x10018fc0
call esi
test eax, eax
jne 0x1001b6f5
push 4
push 0x48c060
call esi
test eax, eax
jne 0x1001b6d3
xor edi, edi
nop
lea ecx, [edi + 0x48c060]
mov dl, 0x90
call fcn.10018430
inc edi
cmp edi, 6
jl 0x1001b6c0
push 0
mov eax, 0x10018fc0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c065
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c060
push 0xffffffffffffffff
call ebx
push 4
push 0x48c3d0
call esi
test eax, eax
jne 0x1001b755
push 4
push 0x10019000
call esi
test eax, eax
jne 0x1001b755
push 4
push 0x48c3d0
call esi
test eax, eax
jne 0x1001b733
xor edi, edi
nop
lea ecx, [edi + 0x48c3d0]
mov dl, 0x90
call fcn.10018430
inc edi
cmp edi, 6
jl 0x1001b720
push 0
mov eax, 0x10019000
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c3d5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c3d0
push 0xffffffffffffffff
call ebx
push 4
push 0x48c740
call esi
test eax, eax
jne 0x1001b7b5
push 4
push 0x10019040
call esi
test eax, eax
jne 0x1001b7b5
push 4
push 0x48c740
call esi
test eax, eax
jne 0x1001b793
xor edi, edi
nop
lea ecx, [edi + 0x48c740]
mov dl, 0x90
call fcn.10018430
inc edi
cmp edi, 6
jl 0x1001b780
push 0
mov eax, 0x10019040
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c745
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c740
push 0xffffffffffffffff
call ebx
push 4
push 0x48cab0
call esi
test eax, eax
jne 0x1001b815
push 4
push 0x10019080
call esi
test eax, eax
jne 0x1001b815
push 4
push 0x48cab0
call esi
test eax, eax
jne 0x1001b7f3
xor edi, edi
nop
lea ecx, [edi + 0x48cab0]
mov dl, 0x90
call fcn.10018430
inc edi
cmp edi, 6
jl 0x1001b7e0
push 0
mov eax, 0x10019080
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48cab5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48cab0
push 0xffffffffffffffff
call ebx
push 4
push 0x48ce20
call esi
test eax, eax
jne 0x1001b875
push 4
push 0x100190c0
call esi
test eax, eax
jne 0x1001b875
push 4
push 0x48ce20
call esi
test eax, eax
jne 0x1001b853
xor edi, edi
nop
lea ecx, [edi + 0x48ce20]
mov dl, 0x90
call fcn.10018430
inc edi
cmp edi, 6
jl 0x1001b840
push 0
mov eax, 0x100190c0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48ce25
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48ce20
push 0xffffffffffffffff
call ebx
push 4
push 0x48d190
call esi
test eax, eax
jne 0x1001b8d5
push 4
push 0x10019100
call esi
test eax, eax
jne 0x1001b8d5
push 4
push 0x48d190
call esi
test eax, eax
jne 0x1001b8b3
xor esi, esi
nop
lea ecx, [esi + 0x48d190]
mov dl, 0x90
call fcn.10018430
inc esi
cmp esi, 6
jl 0x1001b8a0
push 0
mov eax, 0x10019100
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48d195
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48d190
push 0xffffffffffffffff
call ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10081245
mov esp, ebp
pop ebp
ret