Function at 0x100842c0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101ad13e
mov eax, dword fs:[0]
push eax
sub esp, 0xdc
mov eax, dword [0x10226180]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
cmp dword [ebp + 0xc], 1
jne 0x100845de
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax + 0x138]
jne 0x10084584
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x124], 1
jne 0x10084361
push 0xe9
lea ecx, [ebp - 0x34]
call fcn.10060810
mov dword [ebp - 4], 0
push 2
push 0xad
lea ecx, [ebp - 0x34]
call fcn.10018540
mov ecx, eax
call fcn.10018540
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [0x10229c40]
call fcn.100c3060
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.100186e0
nop
jmp 0x10084582
mov ecx, dword [ebp - 0x10]
cmp dword [ecx + 0x124], 2
jne 0x100843bb
push 0xe9
lea ecx, [ebp - 0x58]
call fcn.10060810
mov dword [ebp - 4], 1
push 1
push 0xad
lea ecx, [ebp - 0x58]
call fcn.10018540
mov ecx, eax
call fcn.10018540
lea edx, [ebp - 0x58]
push edx
mov ecx, dword [0x10229c40]
call fcn.100c3060
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.100186e0
nop
jmp 0x10084582
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x124], 4
jne 0x1008440e
push 0xe3
push 0xe9
lea ecx, [ebp - 0x7c]
call fcn.10018630
mov dword [ebp - 4], 2
push 2
lea ecx, [ebp - 0x7c]
call fcn.10018540
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, dword [0x10229c40]
call fcn.100c3060
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
call fcn.100186e0
nop
jmp 0x10084582
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x124], 5
jne 0x1008446a
push 0x13
push 0xe9
lea ecx, [ebp - 0xa0]
call fcn.10018630
mov dword [ebp - 4], 3
push 3
lea ecx, [ebp - 0xa0]
call fcn.10018540
lea eax, [ebp - 0xa0]
push eax
mov ecx, dword [0x10229c40]
call fcn.100c3060
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa0]
call fcn.100186e0
nop
jmp 0x10084582
mov ecx, dword [ebp - 0x10]
cmp dword [ecx + 0x124], 6
jne 0x100844c6
push 0x13
push 0xe9
lea ecx, [ebp - 0xc4]
call fcn.10018630
mov dword [ebp - 4], 4
push 4
lea ecx, [ebp - 0xc4]
call fcn.10018540
lea edx, [ebp - 0xc4]
push edx
mov ecx, dword [0x10229c40]
call fcn.100c3060
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc4]
call fcn.100186e0
nop
jmp 0x10084582
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x124], 7
jne 0x10084582
push 0x13
push 0xe9
lea ecx, [ebp - 0xe8]
call fcn.10018630
mov dword [ebp - 4], 5
mov ecx, dword [0x10229c40]
mov edx, dword [ecx + 0x4440]
mov eax, dword [edx + 0x204]
push eax
mov ecx, dword [0x10229c40]
mov edx, dword [ecx + 0x4440]
movzx eax, byte [edx + 0x210]
push eax
mov ecx, dword [0x10229c40]
mov edx, dword [ecx + 0x4440]
movzx eax, byte [edx + 0x208]
push eax
push 2
lea ecx, [ebp - 0xe8]
call fcn.10018540
mov ecx, eax
call fcn.10018540
mov ecx, eax
call fcn.10018540
mov ecx, eax
call fcn.1002c4f0
lea ecx, [ebp - 0xe8]
push ecx
mov ecx, dword [0x10229c40]
call fcn.100c3060
mov edx, dword [0x10229c40]
mov ecx, dword [edx + 0x4440]
call fcn.10053980
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.100186e0
nop
jmp 0x100845d5
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax + 0x134]
jne 0x10084594
jmp 0x100845d5
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 8]
cmp eax, dword [edx + 0x13c]
jne 0x100845d5
mov ecx, dword [ebp - 0x10]
cmp dword [ecx + 0x124], 3
jne 0x100845d5
push 0
call fcn.101760d0
nop
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
mov ecx, dword [ebp - 0x10]
call fcn.10084720
nop
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 8