Function at 0x1000c3be
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
xor eax, eax
push eax
push eax
push eax
push eax
call fcn.1001c490
mov edx, dword [esp + 0x1c]
lea ecx, [esp]
call fcn.10016000
mov edx, dword [esp + 0x20]
lea ecx, [esp + 4]
call fcn.10016000
sub esp, 8
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x18]
call fcn.1001c550
push eax
mov dword [esp + 0x10], eax
push dword [esp + 0x18]
call fcn.10016fd4
push eax
push dword [esp + 4]
call fcn.1001c5c0
pop eax
add esp, 8
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x1000c581
mov ebx, dword [esp + 0x30]
and ebx, 2
and ebx, ebx
je 0x1000c57c
mov ebp, dword [esp + 0x2c]
push dword [ebp]
call fcn.10016e6a
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x1000c454
jmp 0x1000c57c
push edx
call fcn.1001c2f0
pop edx
push eax
push dword [esp + 0x10]
call fcn.10012852
lea eax, [esp + 0xc]
push eax
call fcn.1001c390
push edx
call fcn.1001c2f0
pop edx
push eax
push edx
call fcn.1001c2f0
pop edx
push eax
lea edx, str.MINHOOK_ENABLE:
push edx
call fcn.1001c330
mov edx, dword [esp + 8]
push edx
call fcn.1001c330
lea edx, [0x1001f310]
push edx
call fcn.1001c330
mov edx, dword [esp + 0xc]
push edx
call fcn.1001c330
lea edx, str._ERROR:
push edx
call fcn.1001c330
mov edx, dword [esp + 0x10]
push edx
call fcn.1001c330
call fcn.10016182
add dword [esp], edx
call fcn.10011bd6
call fcn.100161a0
cmp dword [0x10023ffc], 0
je 0x1000c4ee
mov ebx, dword [esp + 0x30]
and ebx, 1
and ebx, ebx
jne 0x1000c4ee
mov eax, 1
jmp 0x1000c4f0
xor eax, eax
and eax, eax
je 0x1000c57c
push edx
call fcn.1001c2f0
pop edx
push eax
push 0xffffffff
push edx
call fcn.1001c2f0
pop edx
push eax
lea edx, str.Error_enable_hook
push edx
call fcn.1001c330
mov edx, dword [esp + 0xc]
push edx
call fcn.1001c330
lea edx, [0x1001f310]
push edx
call fcn.1001c330
mov edx, dword [esp + 0x10]
push edx
call fcn.1001c330
lea edx, [0x1001f0fa]
push edx
call fcn.1001c330
mov edx, dword [esp + 0x14]
push edx
call fcn.1001c330
call fcn.10016182
add dword [esp], edx
call fcn.1000c936
call fcn.100161a0
mov ebx, dword [0x10023ffc]
cmp ebx, 2
jne 0x1000c57c
push 0
call sub.KERNEL32.dll_GetCurrentProcess
push eax
call sub.KERNEL32.dll_TerminateProcess
jmp 0x1000c645
push edx
call fcn.1001c2f0
pop edx
push eax
push dword [esp + 0x10]
call fcn.10012852
lea eax, [esp + 0xc]
push eax
call fcn.1001c390
cmp dword [0x10023ffc], 0
je 0x1000c5b7
mov ebx, dword [esp + 0x30]
and ebx, 1
and ebx, ebx
jne 0x1000c5b7
mov eax, 1
jmp 0x1000c5b9
xor eax, eax
and eax, eax
je 0x1000c645
push edx
call fcn.1001c2f0
pop edx
push eax
push 0xffffffff
push edx
call fcn.1001c2f0
pop edx
push eax
lea edx, str.Error_create_hook
push edx
call fcn.1001c330
mov edx, dword [esp + 0xc]
push edx
call fcn.1001c330
lea edx, [0x1001f310]
push edx
call fcn.1001c330
mov edx, dword [esp + 0x10]
push edx
call fcn.1001c330
lea edx, [0x1001f0fa]
push edx
call fcn.1001c330
mov edx, dword [esp + 0x14]
push edx
call fcn.1001c330
call fcn.10016182
add dword [esp], edx
call fcn.1000c936
call fcn.100161a0
mov ebx, dword [0x10023ffc]
cmp ebx, 2
jne 0x1000c645
push 0
call sub.KERNEL32.dll_GetCurrentProcess
push eax
call sub.KERNEL32.dll_TerminateProcess
mov eax, dword [esp + 0xc]
jmp 0x1000c64d
push dword [esp + 4]
call fcn.1001c4f0
push dword [esp]
call fcn.1001c4f0
push dword [esp + 8]
call fcn.1001c4f0
add esp, 0x10
pop ebx
pop ebp
ret 0x18