Function at 0x101279f0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
mov esi, dword [ecx + 0x2c]
mov ebx, edx
push edi
mov edi, dword [ecx + 4]
mov eax, 0x100
movzx ecx, byte [esi + edi]
lea edx, [esi + edi]
imul ecx, eax
movzx eax, byte [edx + 1]
mov dword [ebp - 8], ebx
mov dword [ebp - 0x10], edi
mov dword [ebp - 0xc], esi
add cx, ax
movzx eax, cx
mov dword [ebp - 0x14], eax
test ax, ax
jne 0x10127a4f
movzx ecx, byte [edx + 2]
movzx eax, byte [edx + 3]
shl ecx, 8
add eax, 0xfffffffa
add eax, ecx
cmp ebx, eax
jge 0x10127d08
movzx eax, byte [edx + ebx + 6]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 6
jne 0x10127aa1
movzx ecx, byte [edx + 6]
movzx eax, byte [edx + 7]
shl ecx, 8
add ecx, eax
mov dword [ebp - 0x10], ecx
cmp ebx, ecx
jb 0x10127d08
movzx ecx, byte [edx + 8]
movzx eax, byte [edx + 9]
mov edx, dword [ebp - 0x10]
shl ecx, 8
add ecx, edx
add eax, ecx
cmp ebx, eax
jae 0x10127d08
sub ebx, edx
lea ecx, [esi + ebx*2]
movzx eax, byte [ecx + edi + 0xb]
movzx ecx, byte [ecx + edi + 0xa]
shl ecx, 8
add eax, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 2
je 0x10127d3a
cmp eax, 4
jne 0x10127c5a
movzx ecx, byte [edx + 6]
mov eax, 0x100
imul ecx, eax
add esi, 0xe
movzx eax, byte [edx + 7]
mov dword [ebp - 0x14], esi
add cx, ax
shr cx, 1
movzx eax, cx
movzx ecx, byte [edx + 8]
mov dword [ebp - 0x18], eax
mov eax, 0x100
imul ecx, eax
movzx eax, byte [edx + 9]
add cx, ax
shr cx, 1
movzx eax, cx
movzx ecx, byte [edx + 0xa]
mov dword [ebp - 0x10], eax
mov eax, 0x100
imul ecx, eax
movzx eax, byte [edx + 0xb]
add cx, ax
movzx eax, cx
mov dword [ebp - 8], eax
cmp ebx, 0xffff
jg 0x10127d08
movzx eax, byte [edx + 0xc]
movzx ecx, byte [edx + 0xd]
shl eax, 8
add ecx, eax
shr ecx, 1
lea edx, [esi + ecx*2]
movzx ecx, byte [edx + edi]
movzx eax, byte [edx + edi + 1]
shl ecx, 8
add ecx, eax
cmp ebx, ecx
cmovge esi, edx
sub esi, 2
cmp word [ebp - 8], 0
je 0x10127b84
mov ax, word [ebp - 0x10]
nop dword [eax]
shr ax, 1
mov word [ebp - 2], ax
movzx eax, ax
lea edx, [esi + eax*2]
movzx ecx, byte [edx + edi]
movzx eax, byte [edx + edi + 1]
shl ecx, 8
add ecx, eax
mov eax, dword [ebp - 8]
cmp ebx, ecx
cmovg esi, edx
add eax, 0xffff
mov dword [ebp - 8], eax
test ax, ax
mov ax, word [ebp - 2]
jne 0x10127b50
mov eax, dword [ebp - 0x14]
sub esi, eax
add esi, 2
shr esi, 1
movzx edx, si
mov dword [ebp - 4], edx
lea eax, [eax + edx*2]
movzx ecx, byte [eax + edi]
movzx eax, byte [eax + edi + 1]
shl ecx, 8
add ecx, eax
cmp ebx, ecx
jg 0x10127d3a
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0xc]
movzx eax, ax
mov dword [ebp - 8], eax
add eax, edx
lea eax, [esi + eax*2]
movzx ecx, byte [eax + edi + 0x11]
movzx eax, byte [eax + edi + 0x10]
shl eax, 8
add eax, ecx
mov dword [ebp - 0x18], eax
cmp ebx, eax
jl 0x10127d08
mov eax, dword [ebp - 8]
lea eax, [eax + eax*2]
add eax, edx
lea edx, [esi + eax*2]
mov eax, 0x100
movzx ecx, byte [edx + edi + 0x10]
imul ecx, eax
movzx eax, byte [edx + edi + 0x11]
add cx, ax
movzx edx, cx
test dx, dx
jne 0x10127c30
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
lea eax, [eax + ecx*2]
lea eax, [eax + 8]
lea edx, [esi + eax*2]
mov eax, 0x100
movzx ecx, byte [edx + edi]
imul ecx, eax
movzx eax, byte [edx + edi + 1]
pop edi
pop esi
add cx, ax
add cx, bx
movzx eax, cx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 8]
lea ecx, [eax + eax*2]
sub ecx, dword [ebp - 0x18]
lea eax, [esi + edx]
add ecx, dword [ebp - 4]
add ecx, ebx
lea ecx, [eax + ecx*2]
movzx eax, byte [ecx + edi + 0x10]
movzx ecx, byte [ecx + edi + 0x11]
pop edi
shl eax, 8
pop esi
add eax, ecx
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0xc
je 0x10127c68
cmp eax, 0xd
jne 0x10127d3a
movzx ebx, byte [edx + 0xc]
xor esi, esi
movzx eax, byte [edx + 0xd]
shl ebx, 8
add ebx, eax
mov dword [ebp - 4], esi
movzx eax, byte [edx + 0xe]
shl ebx, 8
add ebx, eax
movzx eax, byte [edx + 0xf]
shl ebx, 8
add ebx, eax
test ebx, ebx
jle 0x10127d08
mov ecx, dword [ebp - 8]
mov edx, ebx
sub edx, esi
sar edx, 1
add edx, esi
lea eax, [edx + edx*2]
shl eax, 2
mov dword [ebp - 0x18], eax
add eax, dword [ebp - 0xc]
add edi, eax
movzx esi, byte [edi + 0x10]
movzx eax, byte [edi + 0x11]
shl esi, 8
add esi, eax
movzx eax, byte [edi + 0x12]
shl esi, 8
add esi, eax
movzx eax, byte [edi + 0x13]
shl esi, 8
add esi, eax
cmp ecx, esi
jae 0x10127cd3
mov esi, dword [ebp - 4]
mov ebx, edx
jmp 0x10127d01
movzx eax, byte [edi + 0x14]
movzx ecx, byte [edi + 0x15]
shl eax, 8
add ecx, eax
movzx eax, byte [edi + 0x16]
shl ecx, 8
add ecx, eax
movzx eax, byte [edi + 0x17]
mov edi, dword [ebp - 8]
shl ecx, 8
add ecx, eax
cmp edi, ecx
jbe 0x10127d11
lea esi, [edx + 1]
mov ecx, edi
mov dword [ebp - 4], esi
mov edi, dword [ebp - 0x10]
cmp esi, ebx
jl 0x10127c93
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
add eax, dword [ebp - 0xc]
add ecx, 0x18
add ecx, eax
call fcn.10128670
cmp word [ebp - 0x14], 0xc
jne 0x10127a9a
sub eax, esi
add eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3