Function at 0x1001b320
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100b7040]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, byte [0xcf2d20]
add eax, 0xfffffff0
cmp eax, 0xf
ja case.0x1001b343.24
jmp dword [eax*4 + 0x1001b818]
mov ecx, 0x48af90
mov dword [0x100baa44], ecx
jmp 0x1001b3d2
mov ecx, 0x48b2f0
mov dword [0x100baa44], ecx
jmp 0x1001b3d2
mov ecx, 0x48b660
mov dword [0x100baa44], ecx
jmp 0x1001b3d2
mov ecx, 0x48b9d0
mov dword [0x100baa44], ecx
jmp 0x1001b3d2
mov ecx, 0x48bd40
mov dword [0x100baa44], ecx
jmp 0x1001b3d2
mov ecx, 0x48c0b0
mov dword [0x100baa44], ecx
jmp 0x1001b3d2
mov ecx, 0x48c420
mov dword [0x100baa44], ecx
jmp 0x1001b3d2
mov ecx, 0x48c790
mov dword [0x100baa44], ecx
jmp 0x1001b3d2
mov ecx, 0x48cb00
mov dword [0x100baa44], ecx
jmp 0x1001b3d2
mov ecx, 0x48ce70
mov dword [0x100baa44], ecx
jmp 0x1001b3d2
mov ecx, dword [0x100baa44]
call fcn.100183b0
cmp al, 0xe9
jne 0x1001b3f2
push 9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push edi
push 4
push dword [0x100baa44]
call esi
test eax, eax
jne 0x1001b438
mov eax, dword [0x100baa44]
mov dword [0x100baa50], eax
call fcn.1007fcc0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.10080190
push 0x10019070
push 0x100baa50
call fcn.1007f540
call fcn.1007fd20
push 4
push 0x48b2af
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1001b4a5
push 4
push 0x10018df0
call esi
test eax, eax
jne 0x1001b4a5
push 4
push 0x48b2af
call esi
test eax, eax
jne 0x1001b483
xor edi, edi
nop word [eax + eax]
lea ecx, [edi + 0x48b2af]
mov dl, 0x90
call fcn.10018350
inc edi
cmp edi, 6
jl 0x1001b470
push 0
mov eax, 0x10018df0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b2b4
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b2af
push 0xffffffffffffffff
call ebx
push 4
push 0x48b610
call esi
test eax, eax
jne 0x1001b505
push 4
push 0x10018e30
call esi
test eax, eax
jne 0x1001b505
push 4
push 0x48b610
call esi
test eax, eax
jne 0x1001b4e3
xor edi, edi
nop
lea ecx, [edi + 0x48b610]
mov dl, 0x90
call fcn.10018350
inc edi
cmp edi, 6
jl 0x1001b4d0
push 0
mov eax, 0x10018e30
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b615
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b610
push 0xffffffffffffffff
call ebx
push 4
push 0x48b980
call esi
test eax, eax
jne 0x1001b565
push 4
push 0x10018e70
call esi
test eax, eax
jne 0x1001b565
push 4
push 0x48b980
call esi
test eax, eax
jne 0x1001b543
xor edi, edi
nop
lea ecx, [edi + 0x48b980]
mov dl, 0x90
call fcn.10018350
inc edi
cmp edi, 6
jl 0x1001b530
push 0
mov eax, 0x10018e70
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48b985
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48b980
push 0xffffffffffffffff
call ebx
push 4
push 0x48bcf0
call esi
test eax, eax
jne 0x1001b5c5
push 4
push 0x10018eb0
call esi
test eax, eax
jne 0x1001b5c5
push 4
push 0x48bcf0
call esi
test eax, eax
jne 0x1001b5a3
xor edi, edi
nop
lea ecx, [edi + 0x48bcf0]
mov dl, 0x90
call fcn.10018350
inc edi
cmp edi, 6
jl 0x1001b590
push 0
mov eax, 0x10018eb0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48bcf5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48bcf0
push 0xffffffffffffffff
call ebx
push 4
push 0x48c060
call esi
test eax, eax
jne 0x1001b625
push 4
push 0x10018ef0
call esi
test eax, eax
jne 0x1001b625
push 4
push 0x48c060
call esi
test eax, eax
jne 0x1001b603
xor edi, edi
nop
lea ecx, [edi + 0x48c060]
mov dl, 0x90
call fcn.10018350
inc edi
cmp edi, 6
jl 0x1001b5f0
push 0
mov eax, 0x10018ef0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c065
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c060
push 0xffffffffffffffff
call ebx
push 4
push 0x48c3d0
call esi
test eax, eax
jne 0x1001b685
push 4
push 0x10018f30
call esi
test eax, eax
jne 0x1001b685
push 4
push 0x48c3d0
call esi
test eax, eax
jne 0x1001b663
xor edi, edi
nop
lea ecx, [edi + 0x48c3d0]
mov dl, 0x90
call fcn.10018350
inc edi
cmp edi, 6
jl 0x1001b650
push 0
mov eax, 0x10018f30
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c3d5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c3d0
push 0xffffffffffffffff
call ebx
push 4
push 0x48c740
call esi
test eax, eax
jne 0x1001b6e5
push 4
push 0x10018f70
call esi
test eax, eax
jne 0x1001b6e5
push 4
push 0x48c740
call esi
test eax, eax
jne 0x1001b6c3
xor edi, edi
nop
lea ecx, [edi + 0x48c740]
mov dl, 0x90
call fcn.10018350
inc edi
cmp edi, 6
jl 0x1001b6b0
push 0
mov eax, 0x10018f70
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48c745
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48c740
push 0xffffffffffffffff
call ebx
push 4
push 0x48cab0
call esi
test eax, eax
jne 0x1001b745
push 4
push 0x10018fb0
call esi
test eax, eax
jne 0x1001b745
push 4
push 0x48cab0
call esi
test eax, eax
jne 0x1001b723
xor edi, edi
nop
lea ecx, [edi + 0x48cab0]
mov dl, 0x90
call fcn.10018350
inc edi
cmp edi, 6
jl 0x1001b710
push 0
mov eax, 0x10018fb0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48cab5
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48cab0
push 0xffffffffffffffff
call ebx
push 4
push 0x48ce20
call esi
test eax, eax
jne 0x1001b7a5
push 4
push 0x10018ff0
call esi
test eax, eax
jne 0x1001b7a5
push 4
push 0x48ce20
call esi
test eax, eax
jne 0x1001b783
xor edi, edi
nop
lea ecx, [edi + 0x48ce20]
mov dl, 0x90
call fcn.10018350
inc edi
cmp edi, 6
jl 0x1001b770
push 0
mov eax, 0x10018ff0
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48ce25
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48ce20
push 0xffffffffffffffff
call ebx
push 4
push 0x48d190
call esi
test eax, eax
jne 0x1001b805
push 4
push 0x10019030
call esi
test eax, eax
jne 0x1001b805
push 4
push 0x48d190
call esi
test eax, eax
jne 0x1001b7e3
xor esi, esi
nop
lea ecx, [esi + 0x48d190]
mov dl, 0x90
call fcn.10018350
inc esi
cmp esi, 6
jl 0x1001b7d0
push 0
mov eax, 0x10019030
mov byte [ebp - 0xc], 0xe9
sub eax, 0x48d195
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push 0x48d190
push 0xffffffffffffffff
call ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10081075
mov esp, ebp
pop ebp
ret