Function at 0x1109894
Capabilities:
Check for software breakpoints
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x71
push 0
push 0
dec ecx
jne 0x110989c
push ecx
push ebx
mov ebx, eax
xor eax, eax
push ebp
push 0x110a6da
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebx + 0xe0]
xor edx, edx
call fcn.01006b68
cmp byte [ebx + 0xa45], 0
jne 0x11098d7
cmp dword [ebx + 0x198], 0x40010004
jne 0x11098e5
push 0
mov eax, dword [ebx + 0x128]
push eax
call sub.KERNEL32.DLL_TerminateProcess
cmp dword [ebx + 0x19c], 0
je 0x1109a89
cmp byte [ebx + 0xd0], 1
jne 0x110990c
lea edx, [ebx + 0xc4]
xor ecx, ecx
mov eax, ebx
call fcn.0110afb8
jmp 0x110991b
lea edx, [ebx + 0xc4]
xor ecx, ecx
mov eax, ebx
call fcn.0110934c
cmp byte [ebx + 0xd1], 1
jne 0x1109938
lea edx, [ebx + 0xc4]
mov ecx, 2
mov eax, ebx
call fcn.0110afb8
jmp 0x110994a
lea edx, [ebx + 0xc4]
mov ecx, 2
mov eax, ebx
call fcn.0110934c
cmp byte [ebx + 0xd2], 1
jne 0x1109967
lea edx, [ebx + 0xc4]
mov ecx, 4
mov eax, ebx
call fcn.0110afb8
jmp 0x1109979
lea edx, [ebx + 0xc4]
mov ecx, 4
mov eax, ebx
call fcn.0110934c
cmp byte [ebx + 0xd3], 1
jne 0x1109996
lea edx, [ebx + 0xc4]
mov ecx, 6
mov eax, ebx
call fcn.0110afb8
jmp 0x11099a8
lea edx, [ebx + 0xc4]
mov ecx, 6
mov eax, ebx
call fcn.0110934c
cmp byte [ebx + 0xd4], 1
jne 0x11099c5
lea edx, [ebx + 0xc4]
mov ecx, 7
mov eax, ebx
call fcn.0110afb8
jmp 0x11099d7
lea edx, [ebx + 0xc4]
mov ecx, 7
mov eax, ebx
call fcn.0110934c
cmp byte [ebx + 0xd5], 1
jne 0x11099f4
lea edx, [ebx + 0xc4]
mov ecx, 8
mov eax, ebx
call fcn.0110afb8
jmp 0x1109a06
lea edx, [ebx + 0xc4]
mov ecx, 8
mov eax, ebx
call fcn.0110934c
cmp byte [ebx + 0xd6], 1
jne 0x1109a23
lea edx, [ebx + 0xc4]
mov ecx, 0xa
mov eax, ebx
call fcn.0110afb8
jmp 0x1109a35
lea edx, [ebx + 0xc4]
mov ecx, 0xa
mov eax, ebx
call fcn.0110934c
cmp byte [ebx + 0xd7], 1
jne 0x1109a52
lea edx, [ebx + 0xc4]
mov ecx, 0xb
mov eax, ebx
call fcn.0110afb8
jmp 0x1109a64
lea edx, [ebx + 0xc4]
mov ecx, 0xb
mov eax, ebx
call fcn.0110934c
cmp dword [ebx + 0xa48], 0
je 0x1109a7d
lea eax, [ebx + 4]
push eax
mov eax, dword [ebx + 0x19c]
push eax
call sub.KERNEL32.DLL_SetThreadContext
mov eax, dword [ebx + 0x19c]
push eax
call sub.KERNEL32.DLL_CloseHandle
cmp byte [ebx + 0xa4c], 0
jne 0x1109aae
mov eax, dword [ebx + 0x198]
push eax
mov eax, dword [ebx + 0x140]
push eax
mov eax, dword [ebx + 0x13c]
push eax
call sub.KERNEL32.DLL_ContinueDebugEvent
jmp 0x1109ab5
mov byte [ebx + 0xa4c], 0
push 0xffffffffffffffff
lea eax, [ebx + 0x138]
push eax
call sub.KERNEL32.DLL_WaitForDebugEvent
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x1109b04
mov dword [ebx + 0x1a8], 2
push 0
mov eax, dword [ebx + 0x128]
push eax
call sub.KERNEL32.DLL_TerminateProcess
push 0x40010004
mov eax, dword [ebx + 0x140]
push eax
mov eax, dword [ebx + 0x13c]
push eax
call sub.KERNEL32.DLL_ContinueDebugEvent
xor ebx, ebx
jmp 0x110a6b4
mov eax, dword [ebx + 0x140]
push eax
push 0
push 0x1f03ff
call sub.KERNEL32.DLL_OpenThread
mov dword [ebx + 0x19c], eax
mov dword [ebx + 4], 0x10017
lea eax, [ebx + 4]
push eax
mov eax, dword [ebx + 0x19c]
push eax
call sub.KERNEL32.DLL_GetThreadContext
xor ecx, ecx
mov edx, dword [ebx + 0xc4]
mov eax, ebx
call fcn.01109854
test al, al
je 0x1109b50
mov byte [ebx + 0xd0], 1
jmp 0x1109b57
mov byte [ebx + 0xd0], 0
mov ecx, 2
mov edx, dword [ebx + 0xc4]
mov eax, ebx
call fcn.01109854
test al, al
je 0x1109b76
mov byte [ebx + 0xd1], 1
jmp 0x1109b7d
mov byte [ebx + 0xd1], 0
mov ecx, 4
mov edx, dword [ebx + 0xc4]
mov eax, ebx
call fcn.01109854
test al, al
je 0x1109b9c
mov byte [ebx + 0xd2], 1
jmp 0x1109ba3
mov byte [ebx + 0xd2], 0
mov ecx, 6
mov edx, dword [ebx + 0xc4]
mov eax, ebx
call fcn.01109854
test al, al
je 0x1109bc2
mov byte [ebx + 0xd3], 1
jmp 0x1109bc9
mov byte [ebx + 0xd3], 0
mov ecx, 7
mov edx, dword [ebx + 0xc4]
mov eax, ebx
call fcn.01109854
test al, al
je 0x1109be8
mov byte [ebx + 0xd4], 1
jmp 0x1109bef
mov byte [ebx + 0xd4], 0
mov ecx, 8
mov edx, dword [ebx + 0xc4]
mov eax, ebx
call fcn.01109854
test al, al
je 0x1109c0e
mov byte [ebx + 0xd5], 1
jmp 0x1109c15
mov byte [ebx + 0xd5], 0
mov ecx, 0xa
mov edx, dword [ebx + 0xc4]
mov eax, ebx
call fcn.01109854
test al, al
je 0x1109c34
mov byte [ebx + 0xd6], 1
jmp 0x1109c3b
mov byte [ebx + 0xd6], 0
mov ecx, 0xb
mov edx, dword [ebx + 0xc4]
mov eax, ebx
call fcn.01109854
test al, al
je 0x1109c5a
mov byte [ebx + 0xd7], 1
jmp 0x1109c61
mov byte [ebx + 0xd7], 0
mov eax, dword [ebx + 0x138]
cmp eax, 8
ja case.0x1109c70.0
jmp dword [eax*4 + 0x1109c77]
mov dword [ebx + 0x1a8], 1
push 0x110a6f4
mov eax, dword [ebx + 0x13c]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x320]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x320]
push 0x110a734
mov eax, dword [ebx + 0x140]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x324]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x324]
push 0x110a750
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x328]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x328]
lea eax, [ebx + 0x1a0]
mov edx, 6
call fcn.01007120
mov edx, dword [ebx + 0x140]
mov eax, ebx
call fcn.0110ac98
cmp dword [ebx + 0xa48], 0
jne 0x1109d52
mov eax, dword [ebx + 0xa58]
cmp byte [eax + 0x40], 0
jne 0x1109d52
mov eax, dword [ebx + 0x150]
mov dword [ebx + 0xa48], eax
mov dword [ebx + 0x198], 0x10002
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 3
mov eax, dword [ebx + 0x140]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x32c]
mov eax, 8
call fcn.01013760
mov ecx, dword [ebp - 0x32c]
lea eax, [ebx + 0x1a0]
mov edx, 0x110a778
call fcn.0100703c
mov dword [ebx + 0x198], 0x10002
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 2
push 0x110a7b8
mov eax, dword [ebx + 0x13c]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x330]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x330]
push 0x110a7fc
mov eax, dword [ebx + 0x144]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x334]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x334]
lea eax, [ebx + 0x1a0]
mov edx, 4
call fcn.01007120
mov dword [ebx + 0x198], 0x10002
push 0x40010004
mov eax, dword [ebx + 0x140]
push eax
mov eax, dword [ebx + 0x13c]
push eax
call sub.KERNEL32.DLL_ContinueDebugEvent
mov eax, dword [ebx + 0x19c]
push eax
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [ebx + 0x12c]
push eax
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [ebx + 0x128]
push eax
call sub.KERNEL32.DLL_CloseHandle
mov dl, 1
mov eax, dword [ebx + 0xa58]
mov ecx, dword [eax]
call dword [ecx - 4]
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 4
push 0x110a824
mov eax, dword [ebx + 0x140]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x338]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x338]
push 0x110a7fc
mov eax, dword [ebx + 0x144]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x33c]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x33c]
lea eax, [ebx + 0x1a0]
mov edx, 4
call fcn.01007120
mov dword [ebx + 0x198], 0x10002
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 5
lea eax, [ebp - 4]
xor edx, edx
call fcn.01006bbc
cmp dword [ebx + 0x144], 0
je 0x1109f73
cmp dword [ebx + 0x154], 0
je 0x1109f73
push 4
lea ecx, [ebp - 0xc]
mov edx, dword [ebx + 0x154]
mov eax, ebx
call fcn.0110ae84
cmp dword [ebp - 0xc], 0
je 0x1109f73
cmp word [ebx + 0x158], 0
je 0x1109f4b
push 0x20a
lea ecx, [ebp - 0x31c]
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.0110ae84
lea eax, [ebp - 4]
lea edx, [ebp - 0x31c]
mov ecx, 0x105
call fcn.01006d68
jmp 0x1109f73
push 0x105
lea ecx, [ebp - 0x112]
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.0110ae84
lea eax, [ebp - 4]
lea edx, [ebp - 0x112]
mov ecx, 0x105
call fcn.01006d50
cmp dword [ebp - 4], 0
jne 0x1109f86
lea eax, [ebp - 4]
mov edx, 0x110a868
call fcn.01006bbc
push 0x110a8a4
lea edx, [ebp - 0x340]
mov eax, dword [ebp - 4]
call fcn.01013e98
push dword [ebp - 0x340]
push 0x110a750
mov eax, dword [ebx + 0x148]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x344]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x344]
lea eax, [ebx + 0x1a0]
mov edx, 4
call fcn.01007120
cmp dword [ebx + 0xa48], 0
jne 0x110a014
mov eax, dword [ebx + 0xa58]
cmp byte [eax + 0x40], 0
je 0x110a014
cmp dword [ebx + 0x144], 0
je 0x110a014
mov eax, dword [ebx + 0x144]
call fcn.010d3edc
mov edx, dword [ebx + 0xa58]
cmp eax, dword [edx + 0x4c]
jne 0x110a014
mov eax, dword [ebx + 0x148]
mov dword [ebx + 0xa48], eax
mov dword [ebx + 0x198], 0x10002
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 6
push 0xff
lea eax, [ebp - 0x31c]
push eax
mov eax, dword [ebx + 0x148]
push eax
call sub.KERNEL32.DLL_GetModuleFileNameW
push 0x110a8c4
lea eax, [ebp - 0x34c]
lea edx, [ebp - 0x31c]
mov ecx, 0x105
call fcn.01006d68
mov eax, dword [ebp - 0x34c]
lea edx, [ebp - 0x348]
call fcn.01013e98
push dword [ebp - 0x348]
push 0x110a750
mov eax, dword [ebx + 0x148]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x350]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x350]
lea eax, [ebx + 0x1a0]
mov edx, 4
call fcn.01007120
mov dword [ebx + 0x198], 0x10002
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 7
cmp word [ebx + 0x148], 0
je 0x110a11c
lea eax, [ebp - 0x31c]
xor ecx, ecx
mov edx, 0x20a
call fcn.01004858
lea eax, [ebp - 8]
push eax
push 0xff
lea eax, [ebp - 0x31c]
push eax
mov eax, dword [ebx + 0x144]
push eax
mov eax, dword [ebx + 0x128]
push eax
call sub.KERNEL32.DLL_ReadProcessMemory
lea eax, [ebx + 0xe0]
lea edx, [ebp - 0x31c]
mov ecx, 0x105
call fcn.01006d68
jmp 0x110a167
lea eax, [ebp - 0x112]
xor ecx, ecx
mov edx, 0x105
call fcn.01004858
lea eax, [ebp - 8]
push eax
push 0xff
lea eax, [ebp - 0x112]
push eax
mov eax, dword [ebx + 0x144]
push eax
mov eax, dword [ebx + 0x128]
push eax
call sub.KERNEL32.DLL_ReadProcessMemory
lea eax, [ebx + 0xe0]
lea edx, [ebp - 0x112]
mov ecx, 0x105
call fcn.01006d50
push 0x110a8e8
push dword [ebx + 0xe0]
push 0x110a918
lea eax, [ebx + 0x1a0]
mov edx, 3
call fcn.01007120
mov dword [ebx + 0x198], 0x10002
jmp 0x110a6b2
mov eax, dword [ebx + 0x144]
cmp eax, 0x80000004
jg 0x110a1be
je 0x110a2fd
sub eax, 0x80000001
je 0x110a5c3
sub eax, 2
je 0x110a1d9
jmp 0x110a628
sub eax, 0xc0000005
je 0x110a4c2
sub eax, 0x87
je 0x110a57a
jmp 0x110a628
push 1
lea ecx, [ebp - 0xd]
mov edx, dword [ebx + 0x150]
mov eax, ebx
call fcn.0110ae84
cmp byte [ebp - 0xd], 0xcc
jne 0x110a2b4
mov edx, dword [ebx + 0x150]
mov eax, ebx
call fcn.0110ae54
test al, al
je 0x110a26b
mov eax, dword [ebx + 0x150]
mov dword [ebx + 0xbc], eax
lea eax, [ebx + 4]
push eax
mov eax, dword [ebx + 0x19c]
push eax
call sub.KERNEL32.DLL_SetThreadContext
mov dword [ebx + 0x1a8], 9
mov eax, dword [ebx + 0xbc]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x354]
mov eax, 8
call fcn.01013760
mov ecx, dword [ebp - 0x354]
lea eax, [ebx + 0x1a0]
mov edx, 0x110a928
call fcn.0100703c
mov dword [ebx + 0x198], 0x10002
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 8
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x358]
mov eax, 8
call fcn.01013760
mov ecx, dword [ebp - 0x358]
lea eax, [ebx + 0x1a0]
mov edx, 0x110a968
call fcn.0100703c
mov dword [ebx + 0x198], 0x80010001
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 0xa
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x35c]
mov eax, 8
call fcn.01013760
mov ecx, dword [ebp - 0x35c]
lea eax, [ebx + 0x1a0]
mov edx, 0x110a9b4
call fcn.0100703c
mov dword [ebx + 0x198], 0x80010001
jmp 0x110a6b2
cmp byte [ebx + 0xa44], 0
je 0x110a34f
mov dword [ebx + 0x1a8], 0xc
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x360]
mov eax, 8
call fcn.01013760
mov ecx, dword [ebp - 0x360]
lea eax, [ebx + 0x1a0]
mov edx, 0x110a9f0
call fcn.0100703c
mov dword [ebx + 0x198], 0x10002
jmp 0x110a6b2
xor eax, eax
mov dword [ebp - 8], eax
movzx ecx, byte [ebp - 8]
mov edx, dword [ebx + 0x18]
mov eax, ebx
call fcn.01109854
test al, al
jne 0x110a36f
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jne 0x110a354
cmp dword [ebp - 8], 4
je 0x110a479
movzx edx, byte [ebp - 8]
mov eax, ebx
call fcn.0110adc8
test al, al
je 0x110a40e
xor eax, eax
mov dword [ebx + 0x18], eax
lea eax, [ebx + 4]
push eax
mov eax, dword [ebx + 0x19c]
push eax
call sub.KERNEL32.DLL_SetThreadContext
mov eax, dword [ebp - 8]
add eax, 0xf
mov dword [ebx + 0x1a8], eax
push 0x110aa28
mov eax, dword [ebp - 8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x364]
call fcn.01013710
push dword [ebp - 0x364]
push 0x110aa64
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x368]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x368]
lea eax, [ebx + 0x1a0]
mov edx, 4
call fcn.01007120
mov dword [ebx + 0x198], 0x10002
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 0x13
push 0x110aa28
mov eax, dword [ebp - 8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x36c]
call fcn.01013710
push dword [ebp - 0x36c]
push 0x110aa88
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x370]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x370]
lea eax, [ebx + 0x1a0]
mov edx, 4
call fcn.01007120
mov dword [ebx + 0x198], 0x80010001
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 0xb
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x374]
mov eax, 8
call fcn.01013760
mov ecx, dword [ebp - 0x374]
lea eax, [ebx + 0x1a0]
mov edx, 0x110aab4
call fcn.0100703c
mov dword [ebx + 0x198], 0x80010001
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 0xd
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x378]
mov eax, 8
call fcn.01013760
mov ecx, dword [ebp - 0x378]
lea eax, [ebx + 0x1a0]
mov edx, 0x110aaf8
call fcn.0100703c
cmp dword [ebx + 0x154], 2
jb 0x110a56b
cmp dword [ebx + 0x158], 0
jne 0x110a520
lea eax, [ebx + 0x1a0]
mov edx, 0x110ab30
call fcn.01006f7c
jmp 0x110a530
lea eax, [ebx + 0x1a0]
mov edx, 0x110ab64
call fcn.01006f7c
push dword [ebx + 0x1a0]
push 0x110ab94
mov eax, dword [ebx + 0x15c]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x37c]
mov eax, 8
call fcn.01013760
push dword [ebp - 0x37c]
lea eax, [ebx + 0x1a0]
mov edx, 3
call fcn.01007120
mov dword [ebx + 0x198], 0x80010001
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 0xe
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x380]
mov eax, 8
call fcn.01013760
mov ecx, dword [ebp - 0x380]
lea eax, [ebx + 0x1a0]
mov edx, 0x110aba4
call fcn.0100703c
mov dword [ebx + 0x198], 0x80010001
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 0x14
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x384]
mov eax, 8
call fcn.01013760
mov ecx, dword [ebp - 0x384]
lea eax, [ebx + 0x1a0]
mov edx, 0x110abe4
call fcn.0100703c
cmp dword [ebx + 0x158], 0
sete al
mov byte [ebx + 0xd8], al
mov eax, dword [ebx + 0x15c]
mov dword [ebx + 0xdc], eax
mov dword [ebx + 0x198], 0x10002
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 0xe
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x388]
mov eax, 8
call fcn.01013760
mov ecx, dword [ebp - 0x388]
lea eax, [ebx + 0x1a0]
mov edx, 0x110ac10
call fcn.0100703c
mov dword [ebx + 0x198], 0x80010001
jmp 0x110a6b2
mov dword [ebx + 0x1a8], 0xe
mov eax, dword [ebx + 0x150]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x38c]
mov eax, 8
call fcn.01013760
mov ecx, dword [ebp - 0x38c]
lea eax, [ebx + 0x1a0]
mov edx, 0x110ac58
call fcn.0100703c
mov dword [ebx + 0x198], 0x80010001
xor ebx, ebx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x110a6e1
lea eax, [ebp - 0x38c]
mov edx, 0x1c
call fcn.01006b60
lea eax, [ebp - 4]
call fcn.01006b58
ret