Function at 0x10009cc0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10025018]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x1011e37b], 0
push ebx
push esi
push edi
je 0x10009d2a
cmp byte [0x1012033b], 0
jne 0x10009cfc
xor eax, eax
cmp dword [0x100262d0], eax
mov byte [0x1012033b], 1
sete al
mov dword [0x100262d0], eax
cmp dword [0x100262d0], 0
je 0x10009f42
cmp byte [0x1011e300], 0
je 0x10009d33
cmp byte [0x101202c0], 0
jne 0x10009d3a
push 0
mov byte [0x101202c0], 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov byte [0x1012033b], 0
jmp 0x10009cfc
mov byte [0x101202c0], 0
cmp dword [0x1012066c], 0
je 0x10009d7b
cmp byte [0x1011e2c5], 0
je 0x10009d7b
lea ecx, [ebp - 0xc]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
lea edx, [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
add ecx, 2
mov dword [0x100262e0], eax
mov dword [0x100262dc], ecx
cmp dword [0x10120558], 0
je 0x10009e18
mov edi, str.F_LxFUFWA
sub edi, 0x1e7b41dd
lea esi, [ebp - 0x10]
call fcn.10017370
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
push eax
push 0
call esi
mov edi, eax
mov ecx, 0x1001ff0c
sub ecx, 0x6fad512a
lea eax, [ebp - 0x10]
call fcn.100173b0
push eax
push 0
call esi
mov ebx, eax
mov ecx, str._b_2_b__
sub ecx, 0x16440e0f
lea eax, [ebp - 0xc]
call fcn.10017440
push eax
push 0
call esi
xor ecx, ecx
cmp edi, ecx
jne 0x10009de8
cmp ebx, ecx
jne 0x10009de8
cmp eax, ecx
je 0x10009e18
mov dword [0x100262d0], ecx
mov dword [0x1012069c], ecx
mov dword [0x10120698], ecx
mov dword [0x10120684], ecx
mov dword [0x101206a8], ecx
mov dword [0x101206b4], ecx
mov dword [0x101206b0], ecx
mov dword [0x101204f8], ecx
cmp byte [0x1011e370], 0
je 0x10009e69
cmp byte [0x10120330], 0
jne 0x10009e70
mov ecx, dword [0x101207c8]
mov eax, dword [0x101207c4]
mov byte [0x10120330], 1
mov edx, 2
dec eax
jns 0x10009e47
lea eax, [ecx - 1]
lea esi, [eax + eax*4]
cmp dword [esi*4 + 0x1011d298], edx
je 0x10009e41
mov dword [0x101207c4], eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10019ba5
mov esp, ebp
pop ebp
ret
mov byte [0x10120330], 0
cmp byte [0x1011e378], 0
je 0x10009ec9
cmp byte [0x10120338], 0
jne 0x10009ed0
mov ecx, dword [0x101207c8]
mov eax, dword [0x101207c4]
mov byte [0x10120338], 1
mov edx, 2
lea esp, [esp]
inc eax
cmp eax, ecx
jne 0x10009ea7
xor eax, eax
lea esi, [eax + eax*4]
cmp dword [esi*4 + 0x1011d298], edx
je 0x10009ea0
mov dword [0x101207c4], eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10019ba5
mov esp, ebp
pop ebp
ret
mov byte [0x10120338], 0
mov eax, dword [0x101207c4]
lea ecx, [eax + eax*4]
add ecx, ecx
mov edx, dword [ecx + ecx + 0x1011d290]
add ecx, ecx
xor edi, edi
cmp edx, edi
je 0x10009f42
mov eax, 0xcb
xor esi, esi
call fcn.10002db0
test al, al
je 0x10009f00
cmp dword [edx], edi
jle 0x10009f00
or esi, 0xffffffff
mov eax, 0xcd
call fcn.10002db0
test al, al
je 0x10009f20
mov eax, dword [ecx + 0x1011d294]
dec eax
cmp dword [edx], eax
jge 0x10009f20
mov esi, 1
jmp 0x10009f24
cmp esi, edi
je 0x10009f42
add dword [edx], esi
mov ecx, dword [ecx + 0x1011d298]
cmp ecx, 1
jne 0x10009f37
mov dword [0x101207c8], edi
cmp ecx, 4
jne 0x10009f42
mov dword [0x101207c8], edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10019ba5
mov esp, ebp
pop ebp
ret