Function at 0x10111ec
Capabilities:
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xcc
mov eax, dword [0x101b1f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
call fcn.0100807f
push 0x101b0e8
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp dword [0x101b0f8], 2
jne 0x1011c6d
cmp dword [0x101b0ec], 4
jb 0x1011c6d
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call fcn.01012408
call fcn.0101274b
call fcn.01012454
call fcn.010128c7
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
xor eax, eax
mov word [ebp - 0xc4], ax
mov word [ebp - 0xc2], ax
mov word [ebp - 0xc0], ax
mov word [ebp - 0xbe], ax
push 0x105c420
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
add dword [0x105c420], 0x2a69c000
mov edi, dword [ebp + 8]
push esi
adc dword [0x105c424], 0xc9
xor ebx, ebx
push edi
mov dword [0x105c650], ebx
mov dword [0x105c654], ebx
mov dword [0x105c4cc], ebx
call fcn.0100e440
cmp dword [0x105c4c0], ebx
je 0x10112cc
call dword [sym.imp.KERNEL32.dll_SetFileApisToANSI]
jmp 0x10112d2
call dword [sym.imp.KERNEL32.dll_SetFileApisToOEM]
cmp dword [0x105c4ac], ebx
je 0x10112f9
xor eax, eax
mov byte [0x105c6d8], bl
mov word [0x101c0a8], ax
mov dword [0x105c6d0], ebx
mov dword [0x105c6d4], ebx
jmp 0x1011390
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
sub eax, ebx
je 0x1011334
dec eax
je 0x1011327
dec eax
je 0x101131c
push 0x1006c50
push 0xffffffffffffffff
call fcn.01012301
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 8]
jmp 0x1011330
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0xb0]
add eax, ecx
jmp 0x101133a
mov eax, dword [ebp - 0xb0]
mov ecx, eax
neg ecx
push 0xfffffffffffffff1
mov word [0x101c0a8], cx
cdq
pop ecx
idiv ecx
cmp al, 0xd0
mov byte [0x105c6d8], al
jl 0x1011358
cmp al, 0x34
jle 0x101135f
xor al, al
mov byte [0x105c6d8], al
movsx eax, al
push 2
cdq
push 0x18711a00
push edx
push eax
call fcn.01017640
mov dword [0x105c6d0], eax
mov dword [0x105c6d4], edx
cmp dword [0x105c4f0], ebx
je 0x1011390
sub dword [0x105c420], eax
sbb dword [0x105c424], edx
push dword [0x105c424]
push dword [0x105c420]
push 0x105c6e0
call fcn.01008f65
push dword [0x105c424]
push dword [0x105c420]
push 0x101c0b0
call fcn.0101356d
push dword [0x105c424]
push dword [0x105c420]
push 0x12
push 0x105c700
call fcn.01008fd4
xor eax, eax
inc eax
cmp edi, eax
jle 0x1011415
cmp dword [esi + eax*4], ebx
jne 0x10113e5
inc eax
cmp eax, edi
jl 0x10113db
cmp eax, edi
jge 0x1011415
mov ecx, dword [esi + eax*4]
inc eax
cmp eax, edi
mov dword [0x105cd2c], ecx
jge 0x101141b
cmp dword [esi + eax*4], ebx
jne 0x1011401
inc eax
cmp eax, edi
jl 0x10113f7
cmp eax, edi
jge 0x101141b
mov eax, dword [esi + eax*4]
mov dword [0x105cd28], eax
cmp dword [0x105c494], ebx
je 0x1011423
push ebx
call fcn.010090ba
cmp dword [0x105c494], ebx
je 0x1011415
cmp dword [0x105c4e4], ebx
je 0x1011437
cmp dword [0x105c4e0], ebx
jne 0x1011437
push 5
jmp 0x1011439
push 4
pop eax
push eax
call fcn.010131cc
mov dword [0x101b56c], 0x1000000
cmp dword [0x105c494], ebx
jne 0x1011457
call fcn.01009049
mov esi, dword [sym.imp.msvcrt.dll_printf]
push 0x1006c38
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov edi, dword [sym.imp.msvcrt.dll_fflush]
add eax, 0x20
push eax
call edi
pop ecx
mov eax, 0x1f4
pop ecx
mov dword [0x105c680], eax
mov dword [0x105c684], ebx
mov dword [0x105c678], eax
mov dword [0x105c67c], ebx
call fcn.0100fbac
push dword [0x105c68c]
push dword [0x105c688]
push dword [0x105c694]
push dword [0x105c690]
push 0x1006bf0
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
push 0x1006bc8
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
add esp, 0x20
push ebx
push dword [0x105d540]
call fcn.01008269
call fcn.0100840e
cmp dword [0x105c4a8], ebx
je 0x10114fc
push ebx
push 1
call fcn.0100a7f5
mov dword [0x105c520], eax
cmp dword [0x105c460], ebx
jne 0x101153b
cmp dword [0x105c4b4], ebx
je 0x1011527
cmp dword [0x105c4b0], ebx
je 0x101151b
call fcn.0100fa39
jmp 0x1011520
call fcn.01009fd1
call fcn.0100c2b3
jmp 0x1011548
cmp dword [0x105c464], ebx
je 0x1011534
call fcn.0100fa39
call fcn.0100adf6
jmp 0x101154d
cmp dword [0x101b094], ebx
je 0x101154d
call fcn.01009fd1
call fcn.010082de
call fcn.0100b187
cmp dword [0x105c464], ebx
je 0x10115d9
cmp dword [0x105c448], ebx
je 0x1011596
push 0x102
call fcn.01013362
push dword [0x105c43c]
call fcn.01008aca
push dword [0x105c438]
mov dword [0x105c430], eax
call fcn.01008aca
push 0x1006b90
mov dword [0x105c42c], eax
call esi
pop ecx
jmp 0x10115aa
call fcn.0101337a
test ax, ax
jne 0x10115aa
push 0x150
call fcn.01013362
mov eax, dword [0x101b578]
mov ecx, 0x100
cmp eax, ecx
jae 0x10115cf
sub ecx, eax
mov dword [0x101b57c], eax
mov dword [0x101b580], ecx
mov dword [0x101b578], 0x101
call fcn.01014968
call fcn.01014a20
cmp dword [0x105c4a8], ebx
je 0x1011635
mov dword [ebp - 0xb4], ebx
cmp dword [0x105c518], ebx
jbe 0x1011635
mov dword [ebp - 0xb8], ebx
mov ecx, dword [ebp - 0xb8]
mov eax, dword [0x105c51c]
add eax, ecx
push ebx
push dword [eax + 8]
mov dword [ebp - 0xbc], eax
call fcn.0100a7f5
mov ecx, dword [ebp - 0xbc]
inc dword [ebp - 0xb4]
add dword [ebp - 0xb8], 0x14
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0xb4]
cmp eax, dword [0x105c518]
jb 0x10115f5
cmp dword [0x105c4a4], ebx
je 0x1011652
cmp dword [0x105c464], ebx
jne 0x1011652
push ebx
push 1
call fcn.0100a7f5
mov dword [0x105c514], eax
call fcn.0100845b
cmp dword [0x105c464], ebx
je 0x1011664
call fcn.01014b2d
push 0x1006b64
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
pop ecx
pop ecx
mov ecx, 0x1006b4c
cmp dword [0x105c4e4], ebx
jne 0x101168a
mov ecx, 0x1004d62
mov eax, 0x1006b40
cmp dword [0x105c494], ebx
jne 0x101169c
mov eax, 0x1006b3c
push ecx
push dword [0x105c6b4]
push dword [0x105c6b0]
push eax
push 0x1006b18
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
mov eax, dword [0x105c650]
mov ecx, dword [0x105c654]
add esp, 0x18
mov edx, eax
cmp dword [0x105c464], ebx
jne 0x10116f4
or edx, ecx
jne 0x1011702
cmp dword [0x105c4cc], ebx
jne 0x1011741
mov eax, 0x28a64000
xor ecx, ecx
mov dword [0x105c650], eax
mov dword [0x105c654], ecx
jmp 0x1011702
or edx, ecx
mov dword [0x105c4cc], 1
je 0x1011741
mov dword [0x105c4cc], ebx
cmp dword [0x105c4e4], ebx
jne 0x1011741
cmp dword [0x105c6b4], ecx
jb 0x1011741
mov edx, dword [0x105c6b0]
ja 0x1011724
cmp edx, eax
jbe 0x1011741
push 0x1006af8
push ecx
push eax
sub edx, eax
mov eax, dword [0x105c6b4]
sbb eax, ecx
push eax
push edx
push 0x1006ab0
push ebx
call fcn.01012301
cmp dword [0x105c494], ebx
je 0x1011782
cmp dword [0x105c4e4], ebx
jne 0x1011782
push 0x1006a7c
call esi
mov dword [esp], 0x1006a74
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
pop ecx
pop ecx
cmp dword [0x105c4c8], ebx
je 0x101177b
call fcn.0100bda9
push ebx
call dword [sym.imp.msvcrt.dll_exit]
call fcn.010080c4
cmp dword [0x105c494], ebx
je 0x10117b3
push dword [0x105c68c]
push dword [0x105c688]
push dword [0x105c694]
push dword [0x105c690]
push 0x1006a44
call esi
add esp, 0x14
jmp 0x10117db
push dword [0x105cd28]
push dword [0x105c68c]
push dword [0x105c688]
push dword [0x105c694]
push dword [0x105c690]
push 0x1006a10
call esi
add esp, 0x18
push 0x1006a0c
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
pop ecx
pop ecx
cmp dword [0x105c4e4], ebx
je 0x1011814
cmp dword [0x105c494], ebx
jne 0x1011814
mov eax, dword [0x105c4e0]
neg eax
sbb eax, eax
and eax, 0xffd00000
add eax, 0x600000
jmp 0x1011816
xor eax, eax
mov dword [0x101b570], eax
push 0x100000
add eax, 0x200000
push eax
push dword [0x101b56c]
call fcn.010120b4
mov dword [0x101b56c], eax
sub eax, dword [0x101b570]
mov dword [0x101b574], eax
call fcn.01010779
push 0x10
pop ebx
push ebx
push 0
call fcn.0100d846
cmp dword [0x101b094], 0
je 0x1011863
push ebx
call fcn.0100f03d
push 0x11
pop ebx
cmp dword [0x105c4a8], 0
je 0x1011873
push ebx
call fcn.0100f3da
inc ebx
cmp dword [0x105c4b4], 0
je 0x1011883
push ebx
call fcn.0100f206
inc ebx
cmp dword [0x101b094], 0
je 0x1011893
push ebx
call fcn.0100f45c
inc ebx
cmp dword [0x105c464], 0
je 0x10118b1
push ebx
call fcn.01013613
inc ebx
push ebx
call fcn.01013653
inc ebx
push ebx
call fcn.010136b6
inc ebx
cmp dword [0x105c4a8], 0
je 0x10118cc
push dword [0x105c51c]
push dword [0x105c518]
push ebx
call fcn.0100f4ca
cmp dword [0x105c4b4], 0
je 0x1011963
call fcn.0100f6f0
xor ebx, ebx
cmp dword [0x105c4b4], ebx
je 0x1011965
cmp dword [0x101b094], ebx
je 0x10118f5
call fcn.0100db99
cmp dword [0x105c460], ebx
jne 0x101190d
cmp dword [0x105c4b4], ebx
je 0x101191a
cmp dword [0x105c4b0], ebx
jne 0x101191a
cmp dword [0x101b094], ebx
je 0x101191a
call fcn.0100fa63
mov eax, dword [0x105c6c0]
or eax, dword [0x105c6c4]
je 0x101194c
push 1
push dword [0x101b588]
call fcn.01011f26
push dword [0x101b588]
push eax
push dword [0x105c6c4]
push dword [0x105c6c0]
call fcn.0100d6d0
cmp dword [0x105c460], ebx
jne 0x1011982
cmp dword [0x105c4b4], ebx
je 0x101197b
call fcn.0100f897
jmp 0x101198a
xor ebx, ebx
cmp dword [0x105c460], ebx
jne 0x10118e8
call fcn.0100da10
jmp 0x10118f5
call fcn.0100dd22
jmp 0x101198f
cmp dword [0x101b094], ebx
je 0x101198f
call fcn.0100df43
cmp dword [0x105c464], ebx
je 0x10119c6
mov eax, dword [0x101b580]
cmp eax, ebx
je 0x10119ac
push eax
push dword [0x101b57c]
call fcn.0100d897
call fcn.010150b0
call fcn.01014145
mov eax, dword [0x101b560]
dec eax
mov dword [0x101b58c], eax
call fcn.01014b1c
cmp dword [0x105c4a8], ebx
je 0x1011a02
mov dword [ebp - 0xb4], ebx
cmp dword [0x105c518], ebx
jbe 0x1011a02
mov eax, dword [0x105c51c]
add eax, ebx
push eax
call fcn.0100f68e
inc dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb4]
add ebx, 0x14
cmp eax, dword [0x105c518]
jb 0x10119dc
xor ebx, ebx
cmp dword [0x105c4a4], ebx
je 0x1011a1f
cmp dword [0x105c464], ebx
jne 0x1011a17
call fcn.0100d5d9
cmp dword [0x105c4a4], ebx
jne 0x1011a27
cmp dword [0x105c490], ebx
je 0x1011a2c
call fcn.0100d645
cmp dword [0x105c4fc], ebx
je 0x1011a3d
push 0x1006a0c
call esi
jmp 0x1011a52
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push 0x10069f8
push eax
call dword [sym.imp.msvcrt.dll_fprintf]
pop ecx
mov eax, dword [sym.imp.msvcrt.dll__iob]
pop ecx
add eax, 0x20
push eax
call edi
pop ecx
cmp dword [0x105c490], ebx
je 0x1011a7b
push 0x10069d0
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
pop ecx
pop ecx
cmp dword [0x105c4e4], ebx
je 0x1011b57
push ebx
push 0x64
push dword [0x105c6b4]
push dword [0x105c6b0]
call fcn.01017640
push dword [0x105c6a4]
push dword [0x105c6a0]
push edx
push eax
call fcn.01017680
push 0x64
pop ecx
sub ecx, eax
push ecx
push dword [0x105c66c]
push dword [0x105c668]
push dword [0x105c674]
push dword [0x105c670]
push 0x1006988
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
add esp, 0x1c
mov eax, 0x1006b40
cmp dword [0x105c494], ebx
jne 0x1011af3
mov eax, 0x1006b3c
push dword [0x105c6b4]
push dword [0x105c6b0]
push eax
push 0x1006954
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
add esp, 0x14
cmp dword [0x105c4cc], ebx
jne 0x1011b84
mov ecx, dword [0x105c6b4]
mov ebx, dword [0x105c654]
cmp ecx, ebx
jb 0x1011b82
mov edx, dword [0x105c650]
mov eax, dword [0x105c6b0]
ja 0x1011b3e
cmp eax, edx
jbe 0x1011b82
push 0x1006950
push ebx
push edx
sub eax, edx
sbb ecx, ebx
push ecx
push eax
push 0x1006ab0
push 0
jmp 0x101173c
mov eax, 0x1006b40
cmp dword [0x105c494], ebx
jne 0x1011b69
mov eax, 0x1006b3c
push dword [0x105c6b4]
push dword [0x105c6b0]
push eax
push 0x100692c
call esi
add esp, 0x10
jmp 0x1011b84
xor ebx, ebx
call fcn.0100813c
cmp dword [0x105c4b8], ebx
je 0x1011ba5
push 0x1006850
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
pop ecx
pop ecx
cmp dword [0x105c474], ebx
je 0x1011bc1
push 0x1006560
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
pop ecx
pop ecx
cmp dword [0x105c464], ebx
je 0x1011c14
cmp dword [0x105c45c], ebx
jne 0x1011be9
cmp dword [0x105c458], ebx
jne 0x1011be9
cmp dword [0x105c454], ebx
jne 0x1011be9
cmp dword [0x105c4e4], ebx
je 0x1011c08
push dword [0x101c0a0]
push 0x1006518
call esi
pop ecx
pop ecx
cmp dword [0x105c458], ebx
je 0x1011c08
push 0x10064c8
call esi
pop ecx
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
pop ecx
cmp dword [0x105c48c], ebx
je 0x1011c38
cmp dword [0x105c490], ebx
jne 0x1011c38
push 0x1006480
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
pop ecx
pop ecx
cmp dword [0x105c494], ebx
je 0x1011c48
push 0x1006a7c
call esi
pop ecx
push 0x1006470
call esi
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call edi
pop ecx
pop ecx
cmp dword [0x105c4c8], ebx
je 0x101177b
jmp 0x1011776
push 0x1006430
call dword [sym.imp.msvcrt.dll_printf]
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call dword [sym.imp.msvcrt.dll_fflush]
pop ecx
pop ecx
push 1
jmp 0x101177c