Function at 0x10017f50
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10055beb
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x101c200c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
cmp dword [0x101c40c8], 0x40
jl 0x10017fad
push 0x101c40cc
call fcn.100375e0
mov edi, dword [0x101c40c4]
add esp, 4
test edi, edi
je 0x10017f9f
mov eax, dword [edi]
mov dword [0x101c40c4], eax
mov dword [0x101c40cc], 1
test edi, edi
jne 0x10017fc8
push 0x40
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
test edi, edi
je 0x1001834f
mov dword [ebp - 0x10], edi
mov dword [ebp - 4], 0
mov dword [edi], vtable.CRefObject.0
mov dword [edi + 4], 1
mov byte [ebp - 4], 1
lea eax, [edi + 0xc]
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push eax
mov dword [edi], vtable.CVolEventObjectPointer.0
call esi
mov byte [ebp - 4], 2
lea eax, [edi + 0x24]
push eax
call esi
mov byte [ebp - 4], 3
mov dword [edi + 8], 0
mov dword [edi + 0x3c], ebx
mov dword [ebp - 4], 0xffffffff
lea esi, [ebx + 0x24]
push esi
mov dword [ebx + 0xe24], edi
mov dword [ebx + 0x10], 0x1f6
call fcn.100375e0
mov edx, dword [esi + 8]
add esp, 4
mov dword [esi + 4], 0x10011400
mov dword [esi + 0xc], 0
cmp edx, edi
jne 0x1001804a
mov dword [esi], 1
jmp 0x10018065
mov ecx, edi
mov dword [esi + 8], edi
call fcn.10031310
mov dword [esi], 1
test edx, edx
je 0x10018065
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0x20]
mov edi, dword [ebx + 0xe24]
lea esi, [ebx + 0x394]
push esi
call fcn.100375e0
mov edx, dword [esi + 8]
add esp, 4
mov dword [esi + 0xc], 0
test edi, edi
jne 0x10018090
mov dword [esi + 4], edi
mov dword [esi + 8], edi
jmp 0x100180ad
mov dword [esi + 4], 0x100114a0
cmp edx, edi
jne 0x100180a3
mov dword [esi], 1
jmp 0x100180be
mov ecx, edi
mov dword [esi + 8], edi
call fcn.10031310
mov dword [esi], 1
test edx, edx
je 0x100180be
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0x20]
mov edi, dword [ebx + 0xe24]
lea esi, [ebx + 0x4e4]
push esi
call fcn.100375e0
mov edx, dword [esi + 8]
add esp, 4
mov dword [esi + 0xc], 0
test edi, edi
jne 0x100180e9
mov dword [esi + 4], edi
mov dword [esi + 8], edi
jmp 0x10018106
mov dword [esi + 4], 0x10011470
cmp edx, edi
jne 0x100180fc
mov dword [esi], 1
jmp 0x10018117
mov ecx, edi
mov dword [esi + 8], edi
call fcn.10031310
mov dword [esi], 1
test edx, edx
je 0x10018117
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0x20]
mov edi, dword [ebx + 0xe24]
lea esi, [ebx + 0x634]
push esi
call fcn.100375e0
mov edx, dword [esi + 8]
add esp, 4
mov dword [esi + 0xc], 0
test edi, edi
jne 0x10018142
mov dword [esi + 4], edi
mov dword [esi + 8], edi
jmp 0x1001815f
mov dword [esi + 4], 0x100114a0
cmp edx, edi
jne 0x10018155
mov dword [esi], 1
jmp 0x10018170
mov ecx, edi
mov dword [esi + 8], edi
call fcn.10031310
mov dword [esi], 1
test edx, edx
je 0x10018170
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0x20]
mov edi, dword [ebx + 0xe24]
lea esi, [ebx + 0x784]
push esi
call fcn.100375e0
mov edx, dword [esi + 8]
add esp, 4
mov dword [esi + 0xc], 0
test edi, edi
jne 0x1001819b
mov dword [esi + 4], edi
mov dword [esi + 8], edi
jmp 0x100181b8
mov dword [esi + 4], 0x10011470
cmp edx, edi
jne 0x100181ae
mov dword [esi], 1
jmp 0x100181c9
mov ecx, edi
mov dword [esi + 8], edi
call fcn.10031310
mov dword [esi], 1
test edx, edx
je 0x100181c9
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0x20]
mov edi, dword [ebx + 0xe24]
lea esi, [ebx + 0x8d4]
push esi
call fcn.100375e0
mov edx, dword [esi + 8]
add esp, 4
mov dword [esi + 0xc], 0
test edi, edi
jne 0x100181f4
mov dword [esi + 4], edi
mov dword [esi + 8], edi
jmp 0x10018211
mov dword [esi + 4], 0x10011470
cmp edx, edi
jne 0x10018207
mov dword [esi], 1
jmp 0x10018222
mov ecx, edi
mov dword [esi + 8], edi
call fcn.10031310
mov dword [esi], 1
test edx, edx
je 0x10018222
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0x20]
mov edi, dword [ebx + 0xe24]
lea esi, [ebx + 0xa24]
push esi
call fcn.100375e0
mov edx, dword [esi + 8]
add esp, 4
mov dword [esi + 0xc], 0
test edi, edi
jne 0x1001824d
mov dword [esi + 4], edi
mov dword [esi + 8], edi
jmp 0x1001826a
mov dword [esi + 4], 0x100114a0
cmp edx, edi
jne 0x10018260
mov dword [esi], 1
jmp 0x1001827b
mov ecx, edi
mov dword [esi + 8], edi
call fcn.10031310
mov dword [esi], 1
test edx, edx
je 0x1001827b
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0x20]
mov edi, dword [ebx + 0xe24]
lea esi, [ebx + 0xcc4]
push esi
call fcn.100375e0
mov edx, dword [esi + 8]
add esp, 4
mov dword [esi + 0xc], 0
test edi, edi
jne 0x100182a6
mov dword [esi + 4], edi
mov dword [esi + 8], edi
jmp 0x100182c3
mov dword [esi + 4], 0x10011470
cmp edx, edi
jne 0x100182b9
mov dword [esi], 1
jmp 0x100182d4
mov ecx, edi
mov dword [esi + 8], edi
call fcn.10031310
mov dword [esi], 1
test edx, edx
je 0x100182d4
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0x20]
mov edi, dword [ebx + 0xe24]
lea esi, [ebx + 0xe14]
push esi
call fcn.100375e0
mov edx, dword [esi + 8]
add esp, 4
mov dword [esi + 0xc], 0
test edi, edi
jne 0x100182ff
mov dword [esi + 4], edi
mov dword [esi + 8], edi
jmp 0x1001832c
mov dword [esi + 4], 0x10011420
cmp edx, edi
jne 0x10018322
mov dword [esi], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, edi
mov dword [esi + 8], edi
call fcn.10031310
mov dword [esi], 1
test edx, edx
je 0x1001833d
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0x20]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0xffffffffffffffff
call fcn.10041c16
int3