Function at 0x100aac20
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c
mov eax, dword [0x10001850]
xor eax, esp
mov dword [esp + 0x18], eax
mov edx, dword [ebp + 0x10]
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x14], edx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x10], ecx
mov byte [esp + 0x1c], dl
mov ebx, dword [edi + 0x88]
test ebx, ebx
jne 0x100aac8b
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.EncodeInstruction___called_without_calling_Init__
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100f05bc], 0
je 0x100aadb5
jmp 0x100aaed2
mov eax, dword [edi + 0x8c]
test eax, eax
js 0x100aadd1
cmp dword [edi + 0x1c], 0x10
lea esi, [edi + 8]
jb 0x100aaca6
mov eax, dword [esi]
jmp 0x100aaca8
mov eax, esi
mov edx, dword [edi + 0x8c]
mov al, byte [edx + eax]
mov byte [esp + 0x18], al
cmp ecx, 1
jne 0x100aacf6
movzx ecx, al
mov eax, dword [edi + 0x84]
cmp byte [ecx + eax], 1
jne 0x100aacf2
mov edx, str.WARNING:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.EncodeInstruction___called_for_two_ADD_instructions_in_a_row
mov ecx, eax
call fcn.100146e0
push eax
call fcn.100195d0
add esp, 4
call fcn.1009dcb0
mov ecx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
mov edx, dword [esp + 0x18]
cmp eax, 0xff
ja 0x100aad56
push dword [esp + 0x1c]
push eax
push ecx
mov ecx, dword [edi + 0x88]
push edx
call fcn.100aa7a0
movzx ecx, ax
mov eax, pe_nt_image_headers32
cmp cx, ax
je 0x100aad52
cmp dword [esi + 0x14], 0x10
jb 0x100aad2b
mov esi, dword [esi]
mov eax, dword [edi + 0x8c]
mov byte [esi + eax], cl
mov dword [edi + 0x8c], 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.100b6427
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x18]
push dword [esp + 0x1c]
mov ebx, dword [edi + 0x88]
mov ecx, ebx
push 0
push dword [esp + 0x18]
push edx
call fcn.100aa7a0
movzx edx, ax
mov eax, pe_nt_image_headers32
cmp dx, ax
je 0x100aadc9
cmp dword [esi + 0x14], 0x10
jb 0x100aad85
mov ecx, dword [esi]
jmp 0x100aad87
mov ecx, esi
mov eax, dword [edi + 0x8c]
mov byte [ecx + eax], dl
lea edx, [esp + 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [edi + 0x8c], 0xffffffff
call fcn.100af0f0
lea edx, [esp + 0x21]
mov ecx, esi
push eax
sub edx, eax
push edx
call fcn.1002b320
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.100b6427
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov eax, dword [ebp + 0xc]
cmp eax, 0xff
ja 0x100aae2e
cmp cl, 3
jne 0x100aade8
movzx edx, dl
add edx, 3
jmp 0x100aadeb
movzx edx, cl
movzx esi, al
cmp esi, dword [ebx + 4]
jg 0x100aae2e
mov eax, dword [ebx + 8]
mov eax, dword [eax + edx*4]
movzx eax, word [eax + esi*2]
mov esi, pe_nt_image_headers32
cmp ax, si
je 0x100aae33
push eax
lea ecx, [edi + 8]
call fcn.10090e70
mov eax, dword [edi + 0x18]
mov ecx, dword [esp + 0x24]
dec eax
mov dword [edi + 0x8c], eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100b6427
mov esp, ebp
pop ebp
ret 0xc
mov esi, pe_nt_image_headers32
cmp cl, 3
jne 0x100aae44
mov eax, dword [esp + 0x14]
movzx edx, al
add edx, 3
jmp 0x100aae47
movzx edx, cl
cmp dword [ebx + 4], 0
jl 0x100aae8a
mov eax, dword [ebx + 8]
mov eax, dword [eax + edx*4]
movzx eax, word [eax]
cmp ax, si
je 0x100aae8a
push eax
lea ecx, [edi + 8]
call fcn.10090e70
mov eax, dword [edi + 0x18]
lea edx, [esp + 0x1c]
mov ecx, dword [ebp + 0xc]
dec eax
mov dword [edi + 0x8c], eax
call fcn.100af0f0
lea edx, [esp + 0x21]
push eax
sub edx, eax
lea ecx, [edi + 8]
push edx
jmp 0x100aadb0
push ecx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100ef488
call fcn.100146e0
mov edx, str.No_matching_opcode_found_for_inst
mov ecx, eax
call fcn.100146e0
add esp, 4
mov ecx, eax
call fcn.1004fd10
mov edx, str.__mode
mov ecx, eax
call fcn.100146e0
mov dl, byte [esp + 0x14]
mov ecx, eax
call fcn.10014950
mov edx, str.__size_0
jmp 0x100aac69
mov ecx, 0x100ef488
call fcn.1002bf20
push 1
call fcn.100b8942
int3