Function at 0x10016db8
Capabilities:
Terminate process

Disassembly:
movzx eax, byte [esp + 8]
sub esp, 8
add eax, 0xffffffee
push ebx
mov bl, 1
push esi
cmp eax, 0xe8
ja case.0x10016be1.19
movzx eax, byte [eax + 0x100170d4]
jmp dword [eax*4 + 0x10017098]
push 0
push 0
push 0
push 0
push 0
call fcn.10003de0
add esp, 0x14
cmp byte [0x1009cf7a], 0
jne case.0x10016f81.165
mov esi, dword [esp + 0x14]
cmp byte [esi + 3], 3
jne 0x10016c24
movzx eax, word [esi + 0x14]
mov ecx, 0x1009cf58
push eax
lea eax, [esi + 4]
push eax
call fcn.10019ef0
cmp byte [0x10092d68], 0
je case.0x10016be1.19
cmp byte [esi + 4], 6
jne case.0x10016be1.19
mov ax, word [0x10092d6c]
mov ecx, 0x1009cf30
push 0
mov dword [esp + 0xd], 0
push 0
mov byte [esp + 0x15], 0
mov word [esp + 0x14], ax
lea eax, [esp + 0x10]
push 6
push eax
mov dword [esp + 0x18], 0x3f406c1
call fcn.10018f00
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
mov edx, dword [esp + 0x14]
movzx eax, byte [edx + 3]
sub eax, 1
je 0x10016ca0
sub eax, 1
jne case.0x10016be1.19
push edx
call fcn.10018840
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10017b30
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
mov edx, dword [esp + 0x14]
mov al, byte [edx]
cmp al, 0xc1
jne 0x10016d65
movzx eax, byte [edx + 3]
cmp eax, 0x52
ja case.0x10016be1.19
movzx eax, byte [eax + 0x100171e4]
jmp dword [eax*4 + 0x100171c0]
push 0
push 0
push 0
push 0
push 0
call fcn.10003de0
add esp, 0x14
mov al, bl
pop esi
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10017490
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.100175f0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10017bf0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10017b90
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10017db0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10017e80
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10017a30
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
cmp al, 0xc2
jne case.0x10016be1.19
cmp byte [edx + 4], 3
jne case.0x10016be1.19
push edx
call fcn.10018750
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.10017a60
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
mov eax, dword [esp + 0x14]
cmp byte [eax + 3], 0x54
jne case.0x10016be1.19
push eax
call fcn.100182f0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
mov edx, dword [esp + 0x14]
mov al, byte [edx]
cmp al, 0xc1
jne 0x10016f68
movzx eax, byte [edx + 3]
add eax, 0xfffffff8
cmp eax, 0xd6
ja case.0x10016f81.165
movzx eax, byte [eax + 0x1001728c]
jmp dword [eax*4 + 0x10017238]
cmp byte [esp + 0x20], bl
jne case.0x10016f81.165
push edx
mov ecx, 0x10092ac0
call fcn.10003280
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10018150
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x10094468
call fcn.1000d410
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.100185b0
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
call fcn.10017f20
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10017630
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
cmp byte [esp + 0x20], bl
jne case.0x10016f81.165
push edx
call fcn.10018310
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10018180
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
call fcn.10014c70
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10016620
add esp, 4
xor bl, bl
mov al, bl
pop esi
pop ebx
add esp, 8
ret 0x10
cmp byte [esp + 0x20], bl
jne case.0x10016f81.165
push edx
call fcn.10018550
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x100931b8
call fcn.1000bc10
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x100931b8
call fcn.1000bb90
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x100931b8
call fcn.1000bc70
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
call fcn.10017a10
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.10017a00
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10017a80
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.100181a0
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
cmp al, 0xc2
jne case.0x10016f81.165
movzx eax, byte [edx + 4]
add eax, 0xffffff5c
cmp eax, 0x54
ja case.0x10016f81.165
movzx eax, byte [eax + 0x1001737c]
jmp dword [eax*4 + 0x10017364]
push edx
call fcn.100141c0
add esp, 4
xor bl, bl
mov al, bl
pop esi
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10017f40
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.100182b0
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x10094468
call fcn.1000d4a0
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x100931b8
call fcn.1000bce0
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.100173e0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.100179d0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.10018060
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.10017cb0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.10017b60
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.10018640
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.100186c0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
mov esi, dword [esp + 0x14]
movzx edx, byte [esi + 3]
sub edx, 0
je case.0x10016be1.19
sub edx, 1
jne case.0x10016be1.19
push esi
call fcn.10017d90
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10