Function at 0x100a0120
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c
mov eax, dword [0x10001840]
xor eax, esp
mov dword [esp + 0x18], eax
mov edx, dword [ebp + 0x10]
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x14], edx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x10], ecx
mov byte [esp + 0x1c], dl
mov ebx, dword [edi + 0x88]
test ebx, ebx
jne 0x100a018b
mov edx, str.ERROR:
mov ecx, 0x100e51d8
call fcn.10020050
mov edx, str.EncodeInstruction___called_without_calling_Init__
mov ecx, eax
call fcn.10020050
push eax
call fcn.10093d70
add esp, 4
cmp byte [0x100e6504], 0
je 0x100a02b5
jmp 0x100a03d2
mov eax, dword [edi + 0x8c]
test eax, eax
js 0x100a02d1
cmp dword [edi + 0x1c], 0x10
lea esi, [edi + 8]
jb 0x100a01a6
mov eax, dword [esi]
jmp 0x100a01a8
mov eax, esi
mov edx, dword [edi + 0x8c]
mov al, byte [edx + eax]
mov byte [esp + 0x18], al
cmp ecx, 1
jne 0x100a01f6
movzx ecx, al
mov eax, dword [edi + 0x84]
cmp byte [ecx + eax], 1
jne 0x100a01f2
mov edx, str.WARNING:
mov ecx, 0x100e51d8
call fcn.10020050
mov edx, str.EncodeInstruction___called_for_two_ADD_instructions_in_a_row
mov ecx, eax
call fcn.10020050
push eax
call fcn.10093d70
add esp, 4
call fcn.10091ef0
mov ecx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
mov edx, dword [esp + 0x18]
cmp eax, 0xff
ja 0x100a0256
push dword [esp + 0x1c]
push eax
push ecx
mov ecx, dword [edi + 0x88]
push edx
call fcn.1009fca0
movzx ecx, ax
mov eax, pe_nt_image_headers32
cmp cx, ax
je 0x100a0252
cmp dword [esi + 0x14], 0x10
jb 0x100a022b
mov esi, dword [esi]
mov eax, dword [edi + 0x8c]
mov byte [esi + eax], cl
mov dword [edi + 0x8c], 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.100ab72e
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x18]
push dword [esp + 0x1c]
mov ebx, dword [edi + 0x88]
mov ecx, ebx
push 0
push dword [esp + 0x18]
push edx
call fcn.1009fca0
movzx edx, ax
mov eax, pe_nt_image_headers32
cmp dx, ax
je 0x100a02c9
cmp dword [esi + 0x14], 0x10
jb 0x100a0285
mov ecx, dword [esi]
jmp 0x100a0287
mov ecx, esi
mov eax, dword [edi + 0x8c]
mov byte [ecx + eax], dl
lea edx, [esp + 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [edi + 0x8c], 0xffffffff
call fcn.100a35e0
lea edx, [esp + 0x21]
mov ecx, esi
push eax
sub edx, eax
push edx
call fcn.10024aa0
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.100ab72e
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov eax, dword [ebp + 0xc]
cmp eax, 0xff
ja 0x100a032e
cmp cl, 3
jne 0x100a02e8
movzx edx, dl
add edx, 3
jmp 0x100a02eb
movzx edx, cl
movzx esi, al
cmp esi, dword [ebx + 4]
jg 0x100a032e
mov eax, dword [ebx + 8]
mov eax, dword [eax + edx*4]
movzx eax, word [eax + esi*2]
mov esi, pe_nt_image_headers32
cmp ax, si
je 0x100a0333
push eax
lea ecx, [edi + 8]
call fcn.1007efb0
mov eax, dword [edi + 0x18]
mov ecx, dword [esp + 0x24]
dec eax
mov dword [edi + 0x8c], eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100ab72e
mov esp, ebp
pop ebp
ret 0xc
mov esi, pe_nt_image_headers32
cmp cl, 3
jne 0x100a0344
mov eax, dword [esp + 0x14]
movzx edx, al
add edx, 3
jmp 0x100a0347
movzx edx, cl
cmp dword [ebx + 4], 0
jl 0x100a038a
mov eax, dword [ebx + 8]
mov eax, dword [eax + edx*4]
movzx eax, word [eax]
cmp ax, si
je 0x100a038a
push eax
lea ecx, [edi + 8]
call fcn.1007efb0
mov eax, dword [edi + 0x18]
lea edx, [esp + 0x1c]
mov ecx, dword [ebp + 0xc]
dec eax
mov dword [edi + 0x8c], eax
call fcn.100a35e0
lea edx, [esp + 0x21]
push eax
sub edx, eax
lea ecx, [edi + 8]
push edx
jmp 0x100a02b0
push ecx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100e51d8
call fcn.10020050
mov edx, str.No_matching_opcode_found_for_inst
mov ecx, eax
call fcn.10020050
add esp, 4
mov ecx, eax
call fcn.1004d6e0
mov edx, str.__mode
mov ecx, eax
call fcn.10020050
mov dl, byte [esp + 0x14]
mov ecx, eax
call fcn.1001dec0
mov edx, str.__size_0
jmp 0x100a0169
mov ecx, 0x100e51d8
call fcn.10023930
push 1
call fcn.100adad2
int3