Function at 0x1000cc71
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
xor eax, eax
push eax
push eax
push eax
push eax
call fcn.1001f500
mov edx, dword [esp + 0x1c]
lea ecx, [esp]
call fcn.10018000
mov edx, dword [esp + 0x20]
lea ecx, [esp + 4]
call fcn.10018000
sub esp, 8
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x18]
call fcn.1001f5c0
push eax
mov dword [esp + 0x10], eax
push dword [esp + 0x18]
call fcn.1001a04c
push eax
push dword [esp + 4]
call fcn.1001f630
pop eax
add esp, 8
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x1000ce34
mov ebx, dword [esp + 0x30]
and ebx, 2
and ebx, ebx
je 0x1000ce2f
mov ebp, dword [esp + 0x2c]
push dword [ebp]
call fcn.10019ee2
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x1000cd07
jmp 0x1000ce2f
push edx
call fcn.1001f360
pop edx
push eax
push dword [esp + 0x10]
call fcn.10013aaf
lea eax, [esp + 0xc]
push eax
call fcn.1001f400
push edx
call fcn.1001f360
pop edx
push eax
push edx
call fcn.1001f360
pop edx
push eax
lea edx, str.MINHOOK_ENABLE:
push edx
call fcn.1001f3a0
mov edx, dword [esp + 8]
push edx
call fcn.1001f3a0
lea edx, [0x10027310]
push edx
call fcn.1001f3a0
mov edx, dword [esp + 0xc]
push edx
call fcn.1001f3a0
lea edx, str._ERROR:
push edx
call fcn.1001f3a0
mov edx, dword [esp + 0x10]
push edx
call fcn.1001f3a0
call fcn.10019202
add dword [esp], edx
call fcn.10012d2b
call fcn.10019220
cmp dword [0x10031fcc], 0
je 0x1000cda1
mov ebx, dword [esp + 0x30]
and ebx, 1
and ebx, ebx
jne 0x1000cda1
mov eax, 1
jmp 0x1000cda3
xor eax, eax
and eax, eax
je 0x1000ce2f
push edx
call fcn.1001f360
pop edx
push eax
push 0xffffffff
push edx
call fcn.1001f360
pop edx
push eax
lea edx, str.Error_enable_hook
push edx
call fcn.1001f3a0
mov edx, dword [esp + 0xc]
push edx
call fcn.1001f3a0
lea edx, [0x10027310]
push edx
call fcn.1001f3a0
mov edx, dword [esp + 0x10]
push edx
call fcn.1001f3a0
lea edx, [0x100270fa]
push edx
call fcn.1001f3a0
mov edx, dword [esp + 0x14]
push edx
call fcn.1001f3a0
call fcn.10019202
add dword [esp], edx
call fcn.1000d36c
call fcn.10019220
mov ebx, dword [0x10031fcc]
cmp ebx, 2
jne 0x1000ce2f
push 0
call sub.KERNEL32.dll_GetCurrentProcess
push eax
call sub.KERNEL32.dll_TerminateProcess
jmp 0x1000cf53
push edx
call fcn.1001f360
pop edx
push eax
push dword [esp + 0x10]
call fcn.10013aaf
lea eax, [esp + 0xc]
push eax
call fcn.1001f400
push edx
call fcn.1001f360
pop edx
push eax
push edx
call fcn.1001f360
pop edx
push eax
lea edx, str.MINHOOK_CREATE:
push edx
call fcn.1001f3a0
mov edx, dword [esp + 8]
push edx
call fcn.1001f3a0
lea edx, [0x10027310]
push edx
call fcn.1001f3a0
mov edx, dword [esp + 0xc]
push edx
call fcn.1001f3a0
lea edx, str._ERROR:
push edx
call fcn.1001f3a0
mov edx, dword [esp + 0x10]
push edx
call fcn.1001f3a0
call fcn.10019202
add dword [esp], edx
call fcn.10012d2b
call fcn.10019220
mov ebx, dword [esp + 0x30]
and ebx, 1
and ebx, ebx
jne 0x1000cf53
cmp dword [0x10031fcc], 0
je 0x1000cf53
push edx
call fcn.1001f360
pop edx
push eax
push 0xffffffff
push edx
call fcn.1001f360
pop edx
push eax
lea edx, str.Error_create_hook
push edx
call fcn.1001f3a0
mov edx, dword [esp + 0xc]
push edx
call fcn.1001f3a0
lea edx, [0x10027310]
push edx
call fcn.1001f3a0
mov edx, dword [esp + 0x10]
push edx
call fcn.1001f3a0
lea edx, [0x100270fa]
push edx
call fcn.1001f3a0
mov edx, dword [esp + 0x14]
push edx
call fcn.1001f3a0
call fcn.10019202
add dword [esp], edx
call fcn.1000d36c
call fcn.10019220
mov ebx, dword [0x10031fcc]
cmp ebx, 2
jne 0x1000cf53
push 0
call sub.KERNEL32.dll_GetCurrentProcess
push eax
call sub.KERNEL32.dll_TerminateProcess
mov eax, dword [esp + 0xc]
jmp 0x1000cf5b
push dword [esp + 4]
call fcn.1001f560
push dword [esp]
call fcn.1001f560
push dword [esp + 8]
call fcn.1001f560
add esp, 0x10
pop ebx
pop ebp
ret 0x18