Function at 0x102996d0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9c
push ebx
push esi
push edi
mov ecx, 0x104f677c
call fcn.1015f0d9
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
mov dword [ebp - 4], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
push eax
call fcn.102991d0
add esp, 4
mov word [ebp - 0xc], ax
movzx eax, word [ebp - 0xc]
test eax, eax
jne 0x10299756
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax + 2]
push edx
call fcn.102991d0
add esp, 4
movzx eax, ax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, 6
cmp dword [ebp + 0xc], eax
jge 0x1029974a
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov ecx, dword [ebp + 0xc]
movzx eax, byte [eax + ecx + 6]
jmp 0x10299b16
xor eax, eax
jmp 0x10299b16
movzx eax, word [ebp - 0xc]
cmp eax, 6
jne 0x102997d1
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax + 6]
push edx
call fcn.102991d0
add esp, 4
movzx eax, ax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax + 8]
push edx
call fcn.102991d0
add esp, 4
movzx eax, ax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0xc]
cmp eax, dword [ebp - 0x14]
jb 0x102997c5
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
cmp dword [ebp + 0xc], eax
jae 0x102997c5
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov ecx, dword [ebp + 0xc]
sub ecx, dword [ebp - 0x14]
lea edx, [eax + ecx*2 + 0xa]
push edx
call fcn.102991d0
add esp, 4
movzx eax, ax
jmp 0x10299b16
xor eax, eax
jmp 0x10299b16
movzx eax, word [ebp - 0xc]
cmp eax, 2
jne 0x102997f7
mov eax, 1
test eax, eax
je 0x102997eb
push 0
call dword [sym.imp.ucrtbased.dll_exit]
xor eax, eax
jmp 0x10299b16
movzx eax, word [ebp - 0xc]
cmp eax, 4
jne 0x10299a1b
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax + 6]
push edx
call fcn.102991d0
add esp, 4
movzx eax, ax
sar eax, 1
mov word [ebp - 0x1c], ax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax + 8]
push edx
call fcn.102991d0
add esp, 4
movzx eax, ax
sar eax, 1
mov word [ebp - 0x20], ax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax + 0xa]
push edx
call fcn.102991d0
add esp, 4
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax + 0xc]
push edx
call fcn.102991d0
add esp, 4
movzx eax, ax
sar eax, 1
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 8]
add eax, 0xe
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
cmp dword [ebp + 0xc], 0xffff
jle 0x1029988e
xor eax, eax
jmp 0x10299b16
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x30]
movzx ecx, word [ebp - 0x28]
lea edx, [eax + ecx*2]
push edx
call fcn.102991d0
add esp, 4
movzx eax, ax
cmp dword [ebp + 0xc], eax
jl 0x102998b9
movzx eax, word [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
lea edx, [ecx + eax*2]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
sub eax, 2
mov dword [ebp - 0x30], eax
movzx eax, word [ebp - 0x24]
test eax, eax
je 0x10299913
mov ax, word [ebp - 0x20]
shr ax, 1
mov word [ebp - 0x20], ax
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x30]
movzx ecx, word [ebp - 0x20]
lea edx, [eax + ecx*2]
push edx
call fcn.102991d0
add esp, 4
mov word [ebp - 0x34], ax
movzx eax, word [ebp - 0x34]
cmp dword [ebp + 0xc], eax
jle 0x10299905
movzx eax, word [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
lea edx, [ecx + eax*2]
mov dword [ebp - 0x30], edx
mov ax, word [ebp - 0x24]
sub ax, 1
mov word [ebp - 0x24], ax
jmp 0x102998c2
mov eax, dword [ebp - 0x30]
add eax, 2
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x2c]
shr eax, 1
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x2c]
movzx ecx, word [ebp - 0x40]
lea edx, [eax + ecx*2]
push edx
call fcn.102991d0
add esp, 4
movzx eax, ax
cmp dword [ebp + 0xc], eax
jle 0x1029994e
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
movzx ecx, word [ebp - 0x1c]
lea edx, [eax + ecx*2 + 0xe]
movzx eax, word [ebp - 0x40]
lea ecx, [edx + eax*2 + 2]
push ecx
call fcn.102991d0
add esp, 4
mov word [ebp - 0x3c], ax
movzx eax, word [ebp - 0x3c]
cmp dword [ebp + 0xc], eax
jge 0x10299981
xor eax, eax
jmp 0x10299b16
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
movzx ecx, word [ebp - 0x1c]
imul edx, ecx, 6
lea eax, [eax + edx + 0xe]
movzx ecx, word [ebp - 0x40]
lea edx, [eax + ecx*2 + 2]
push edx
call fcn.102991d0
add esp, 4
mov word [ebp - 0x38], ax
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x102999dc
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
movzx ecx, word [ebp - 0x1c]
lea edx, [eax + ecx*4 + 0xe]
movzx eax, word [ebp - 0x40]
lea ecx, [edx + eax*2 + 2]
push ecx
call fcn.10299100
add esp, 4
movsx edx, ax
add edx, dword [ebp + 0xc]
movzx eax, dx
jmp 0x10299b16
movzx eax, word [ebp - 0x38]
add eax, dword [ebp - 4]
movzx ecx, word [ebp - 0x3c]
mov edx, dword [ebp + 0xc]
sub edx, ecx
add eax, dword [ebp - 8]
lea eax, [eax + edx*2]
movzx ecx, word [ebp - 0x1c]
imul edx, ecx, 6
lea eax, [eax + edx + 0xe]
movzx ecx, word [ebp - 0x40]
lea edx, [eax + ecx*2 + 2]
push edx
call fcn.102991d0
add esp, 4
movzx eax, ax
jmp 0x10299b16
movzx eax, word [ebp - 0xc]
cmp eax, 0xc
je 0x10299a31
movzx eax, word [ebp - 0xc]
cmp eax, 0xd
jne 0x10299b03
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax + 0xc]
push edx
call fcn.10299150
add esp, 4
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x4c]
jge 0x10299aff
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x48]
sar eax, 1
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
imul ecx, dword [ebp - 0x50], 0xc
lea edx, [eax + ecx + 0x10]
push edx
call fcn.10299150
add esp, 4
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
imul ecx, dword [ebp - 0x50], 0xc
lea edx, [eax + ecx + 0x14]
push edx
call fcn.10299150
add esp, 4
mov dword [ebp - 0x58], eax
mov eax, dword [ebp + 0xc]
cmp eax, dword [ebp - 0x54]
jae 0x10299ab2
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x4c], eax
jmp 0x10299afa
mov eax, dword [ebp + 0xc]
cmp eax, dword [ebp - 0x58]
jbe 0x10299ac5
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x48], eax
jmp 0x10299afa
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
imul ecx, dword [ebp - 0x50], 0xc
lea edx, [eax + ecx + 0x18]
push edx
call fcn.10299150
add esp, 4
mov dword [ebp - 0x5c], eax
movzx eax, word [ebp - 0xc]
cmp eax, 0xc
jne 0x10299af5
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp + 0xc]
sub eax, dword [ebp - 0x54]
jmp 0x10299b16
mov eax, dword [ebp - 0x5c]
jmp 0x10299b16
jmp 0x10299a54
xor eax, eax
jmp 0x10299b16
mov eax, 1
test eax, eax
je 0x10299b14
push 0
call dword [sym.imp.ucrtbased.dll_exit]
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret