Function at 0x1000c26b
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
xor eax, eax
push eax
push eax
push eax
push eax
call fcn.1001c480
mov edx, dword [esp + 0x1c]
lea ecx, [esp]
call fcn.10016000
mov edx, dword [esp + 0x20]
lea ecx, [esp + 4]
call fcn.10016000
sub esp, 8
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x18]
call fcn.1001c540
push eax
mov dword [esp + 0x10], eax
push dword [esp + 0x18]
call fcn.10016fcc
push eax
push dword [esp + 4]
call fcn.1001c5b0
pop eax
add esp, 8
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x1000c42e
mov ebx, dword [esp + 0x30]
and ebx, 2
and ebx, ebx
je 0x1000c429
mov ebp, dword [esp + 0x2c]
push dword [ebp]
call fcn.10016e62
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x1000c301
jmp 0x1000c429
push edx
call fcn.1001c2e0
pop edx
push eax
push dword [esp + 0x10]
call fcn.10012a01
lea eax, [esp + 0xc]
push eax
call fcn.1001c380
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c2e0
pop edx
push eax
lea edx, str.MINHOOK_ENABLE:
push edx
call fcn.1001c320
mov edx, dword [esp + 8]
push edx
call fcn.1001c320
lea edx, [0x1001f310]
push edx
call fcn.1001c320
mov edx, dword [esp + 0xc]
push edx
call fcn.1001c320
lea edx, str._ERROR:
push edx
call fcn.1001c320
mov edx, dword [esp + 0x10]
push edx
call fcn.1001c320
call fcn.10016182
add dword [esp], edx
call fcn.10011d85
call fcn.100161a0
cmp dword [0x100240cc], 0
je 0x1000c39b
mov ebx, dword [esp + 0x30]
and ebx, 1
and ebx, ebx
jne 0x1000c39b
mov eax, 1
jmp 0x1000c39d
xor eax, eax
and eax, eax
je 0x1000c429
push edx
call fcn.1001c2e0
pop edx
push eax
push 0xffffffff
push edx
call fcn.1001c2e0
pop edx
push eax
lea edx, str.Error_enable_hook
push edx
call fcn.1001c320
mov edx, dword [esp + 0xc]
push edx
call fcn.1001c320
lea edx, [0x1001f310]
push edx
call fcn.1001c320
mov edx, dword [esp + 0x10]
push edx
call fcn.1001c320
lea edx, [0x1001f0fa]
push edx
call fcn.1001c320
mov edx, dword [esp + 0x14]
push edx
call fcn.1001c320
call fcn.10016182
add dword [esp], edx
call fcn.1000c83e
call fcn.100161a0
mov ebx, dword [0x100240cc]
cmp ebx, 2
jne 0x1000c429
push 0
call sub.KERNEL32.dll_GetCurrentProcess
push eax
call sub.KERNEL32.dll_TerminateProcess
jmp 0x1000c54d
push edx
call fcn.1001c2e0
pop edx
push eax
push dword [esp + 0x10]
call fcn.10012a01
lea eax, [esp + 0xc]
push eax
call fcn.1001c380
push edx
call fcn.1001c2e0
pop edx
push eax
push edx
call fcn.1001c2e0
pop edx
push eax
lea edx, str.MINHOOK_CREATE:
push edx
call fcn.1001c320
mov edx, dword [esp + 8]
push edx
call fcn.1001c320
lea edx, [0x1001f310]
push edx
call fcn.1001c320
mov edx, dword [esp + 0xc]
push edx
call fcn.1001c320
lea edx, str._ERROR:
push edx
call fcn.1001c320
mov edx, dword [esp + 0x10]
push edx
call fcn.1001c320
call fcn.10016182
add dword [esp], edx
call fcn.10011d85
call fcn.100161a0
mov ebx, dword [esp + 0x30]
and ebx, 1
and ebx, ebx
jne 0x1000c54d
cmp dword [0x100240cc], 0
je 0x1000c54d
push edx
call fcn.1001c2e0
pop edx
push eax
push 0xffffffff
push edx
call fcn.1001c2e0
pop edx
push eax
lea edx, str.Error_create_hook
push edx
call fcn.1001c320
mov edx, dword [esp + 0xc]
push edx
call fcn.1001c320
lea edx, [0x1001f310]
push edx
call fcn.1001c320
mov edx, dword [esp + 0x10]
push edx
call fcn.1001c320
lea edx, [0x1001f0fa]
push edx
call fcn.1001c320
mov edx, dword [esp + 0x14]
push edx
call fcn.1001c320
call fcn.10016182
add dword [esp], edx
call fcn.1000c83e
call fcn.100161a0
mov ebx, dword [0x100240cc]
cmp ebx, 2
jne 0x1000c54d
push 0
call sub.KERNEL32.dll_GetCurrentProcess
push eax
call sub.KERNEL32.dll_TerminateProcess
mov eax, dword [esp + 0xc]
jmp 0x1000c555
push dword [esp + 4]
call fcn.1001c4e0
push dword [esp]
call fcn.1001c4e0
push dword [esp + 8]
call fcn.1001c4e0
add esp, 0x10
pop ebx
pop ebp
ret 0x18