Function at 0x1003782
Capabilities:
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
and dword [ebp - 4], 0
push ebx
push edi
mov eax, dword [section..data]
mov edi, 0x1001680
cmp eax, section..data
je 0x10037b9
cmp byte [eax + 0x19], 4
jb 0x10037b9
test byte [eax + 0x1c], 1
je 0x10037b9
push edi
push 0x38
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002ce5
xor ebx, ebx
inc ebx
push ebx
push 0x10120dc
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
test eax, eax
jne 0x1003bf8
push esi
push 0x10120a0
call fcn.01009364
mov esi, eax
test esi, esi
je 0x1003817
mov eax, dword [section..data]
cmp eax, section..data
je 0x1003b72
cmp byte [eax + 0x19], bl
jb 0x1003b72
test byte [eax + 0x1c], bl
je 0x1003b72
push esi
push edi
push 0x39
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100f8f1
jmp 0x1003b6d
mov dword [ebp - 4], ebx
mov ebx, 0x10120b0
push ebx
call fcn.01009364
mov esi, eax
test esi, esi
je 0x1003855
mov eax, dword [section..data]
cmp eax, section..data
je 0x1003b72
cmp byte [eax + 0x19], 1
jb 0x1003b72
test byte [eax + 0x1c], 1
je 0x1003b72
push esi
push edi
push 0x3a
jmp 0x1003807
call fcn.01004356
mov dword [ebp - 4], 3
call fcn.010082a4
mov esi, eax
test esi, esi
je 0x1003899
mov eax, dword [section..data]
cmp eax, section..data
je 0x1003b72
cmp byte [eax + 0x19], 1
jb 0x1003b72
test byte [eax + 0x1c], 1
je 0x1003b72
push esi
push edi
push 0x3b
jmp 0x1003807
push ebx
mov dword [ebp - 4], 4
call fcn.0100a1a1
mov esi, eax
test esi, esi
je 0x10038d9
mov eax, dword [section..data]
cmp eax, section..data
je 0x1003b72
cmp byte [eax + 0x19], 1
jb 0x1003b72
test byte [eax + 0x1c], 1
je 0x1003b72
push esi
push edi
push 0x3c
jmp 0x1003807
mov dword [ebp - 4], 5
call fcn.0100a997
mov esi, eax
test esi, esi
je 0x1003918
mov eax, dword [section..data]
cmp eax, section..data
je 0x1003b72
cmp byte [eax + 0x19], 1
jb 0x1003b72
test byte [eax + 0x1c], 1
je 0x1003b72
push esi
push edi
push 0x3d
jmp 0x1003807
mov ebx, 0x10120a0
push ebx
mov dword [ebp - 4], 6
call fcn.0100a1a1
mov esi, eax
test esi, esi
je 0x100395d
mov eax, dword [section..data]
cmp eax, section..data
je 0x1003b72
cmp byte [eax + 0x19], 1
jb 0x1003b72
test byte [eax + 0x1c], 1
je 0x1003b72
push esi
push edi
push 0x3e
jmp 0x1003807
mov dword [ebp - 4], 7
call fcn.0100428c
mov esi, eax
cmp esi, 0x139f
jne 0x10039a9
mov eax, dword [section..data]
cmp eax, section..data
je 0x1003999
cmp byte [eax + 0x19], 3
jb 0x1003999
test byte [eax + 0x1c], 1
je 0x1003999
push edi
push 0x3f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002ce5
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.0100428c
mov esi, eax
test esi, esi
je 0x10039da
mov eax, dword [section..data]
cmp eax, section..data
je 0x1003b72
cmp byte [eax + 0x19], 1
jb 0x1003b72
test byte [eax + 0x1c], 1
je 0x1003b72
push esi
push edi
push 0x40
jmp 0x1003807
push ebx
mov dword [ebp - 4], 8
call fcn.01009cbc
mov esi, eax
mov ebx, 0x10d3
cmp esi, ebx
jne 0x1003a2d
mov eax, dword [section..data]
cmp eax, section..data
je 0x1003a18
cmp byte [eax + 0x19], 3
jb 0x1003a18
test byte [eax + 0x1c], 1
je 0x1003a18
push edi
push 0x41
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002ce5
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x10120a0
call fcn.01009cbc
mov esi, eax
test esi, esi
je 0x1003a5e
mov eax, dword [section..data]
cmp eax, section..data
je 0x1003b72
cmp byte [eax + 0x19], 1
jb 0x1003b72
test byte [eax + 0x1c], 1
je 0x1003b72
push esi
push edi
push 0x42
jmp 0x1003807
push 0x10120b0
mov dword [ebp - 4], 9
call fcn.01009cbc
mov esi, eax
cmp esi, ebx
jne 0x1003ab4
mov eax, dword [section..data]
mov ebx, section..data
cmp eax, ebx
je 0x1003a9d
cmp byte [eax + 0x19], 3
jb 0x1003a9d
test byte [eax + 0x1c], 1
je 0x1003a9d
push edi
push 0x43
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01002ce5
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x10120b0
call fcn.01009cbc
mov esi, eax
jmp 0x1003ab9
mov ebx, section..data
test esi, esi
je 0x1003ae7
mov eax, dword [section..data]
cmp eax, ebx
je 0x1003b72
cmp byte [eax + 0x19], 1
jb 0x1003b72
test byte [eax + 0x1c], 1
je 0x1003b72
push esi
push edi
push 0x44
jmp 0x1003807
push dword [ebp + 0x14]
mov dword [ebp - 4], 0xa
call fcn.010065ad
mov esi, eax
test esi, esi
je 0x1003b1a
mov eax, dword [section..data]
cmp eax, ebx
je 0x1003b72
cmp byte [eax + 0x19], 1
jb 0x1003b72
test byte [eax + 0x1c], 1
je 0x1003b72
push esi
push edi
push 0x45
jmp 0x1003807
mov dword [ebp - 4], 0xb
call fcn.01005d57
mov esi, eax
test esi, esi
je 0x1003b4a
mov eax, dword [section..data]
cmp eax, ebx
je 0x1003b72
cmp byte [eax + 0x19], 1
jb 0x1003b72
test byte [eax + 0x1c], 1
je 0x1003b72
push esi
push edi
push 0x46
jmp 0x1003807
mov dword [ebp - 4], 0xc
call fcn.0100cd49
mov eax, dword [0x10120d8]
test eax, eax
je 0x1003bbc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [0x10120d8], 0
mov eax, dword [section..data]
test esi, esi
je 0x1003bc1
cmp eax, section..data
je 0x1003b94
test byte [eax + 0x1c], 1
je 0x1003b94
push dword [ebp - 4]
push edi
push 0x47
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100f8f1
cmp dword [0x10120d0], 0
je 0x1003ba2
call fcn.01002ea3
mov esi, 0x2c9
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [section..data]
cmp dword [0x10120d0], 0
pop esi
je 0x1003bd5
call fcn.01002ea3
mov eax, dword [section..data]
cmp eax, section..data
je 0x1003bf8
cmp byte [eax + 0x19], 4
jb 0x1003bf8
test byte [eax + 0x1c], 1
je 0x1003bf8
push 0
push edi
push 0x48
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100f8f1
pop edi
pop ebx
leave
ret 0x10