Function at 0x10002ebe
Capabilities:
Terminate process

Disassembly:
mov eax, 0x10023a49
call fcn.10012144
sub esp, 0xc
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x18], edi
xor ebx, ebx
mov byte [0x1002f100], 1
mov dword [ebp - 4], 0xe
cmp dword [0x1002f10c], ebx
je 0x10002f13
push 0x1388
push dword [0x1002f10c]
call dword [0x1004d524]
test eax, eax
je 0x10002f0d
push ebx
push dword [0x1002f10c]
call dword [0x1004d51c]
mov dword [0x1002f10c], ebx
cmp dword [0x1002f108], ebx
je 0x10002f43
push 0x898
push dword [0x1002f108]
call dword [0x1004d524]
test eax, eax
je 0x10002f3d
push ebx
push dword [0x1002f108]
call dword [0x1004d51c]
mov dword [0x1002f108], ebx
mov esi, 0xc8
cmp dword [0x1002f104], ebx
je 0x10002f74
push esi
push dword [0x1002f104]
call dword [0x1004d524]
test eax, eax
je 0x10002f6e
push ebx
push dword [0x1002f104]
call dword [0x1004d51c]
mov dword [0x1002f104], ebx
mov eax, dword [edi + 0x416c]
test eax, eax
je 0x10002f9d
push esi
push eax
call dword [0x1004d524]
test eax, eax
je 0x10002f97
push ebx
push dword [edi + 0x416c]
call dword [0x1004d51c]
mov dword [edi + 0x416c], ebx
cmp dword [0x1004d244], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov esi, dword [sym.imp.KERNEL32.dll_TerminateProcess]
je 0x10002fea
lea eax, [ebp - 0x10]
push eax
push dword [0x1004d244]
call ebx
test eax, eax
je 0x10002fca
cmp dword [ebp - 0x10], 0x103
jne 0x10002fd4
push 0
push dword [0x1004d244]
call esi
push dword [0x1004d244]
call fcn.1000c695
pop ecx
mov dword [0x1004d244], 0
cmp dword [0x1002f114], 0
je 0x1000302f
lea eax, [ebp - 0x14]
push eax
push dword [0x1002f114]
call ebx
test eax, eax
je 0x1000300c
cmp dword [ebp - 0x14], 0x103
jne 0x10003019
xor ebx, ebx
push ebx
push dword [0x1002f114]
call esi
jmp 0x1000301b
xor ebx, ebx
push dword [0x1002f114]
call fcn.1000c695
pop ecx
mov dword [0x1002f114], ebx
jmp 0x10003031
xor ebx, ebx
cmp dword [edi + 8], 0
je 0x10003043
push dword [edi + 8]
call fcn.1000c695
pop ecx
mov dword [edi + 8], ebx
cmp dword [edi + 0xc], 0
je 0x10003055
push dword [edi + 0xc]
call fcn.1000c695
pop ecx
mov dword [edi + 0xc], ebx
cmp dword [edi + 0x10], 0
je 0x10003067
push dword [edi + 0x10]
call fcn.1000c695
pop ecx
mov dword [edi + 0x10], ebx
cmp dword [0x1002f110], ebx
je 0x10003081
push dword [0x1002f110]
call fcn.1000c695
pop ecx
mov dword [0x1002f110], ebx
push ebx
push 1
lea ecx, [edi + 0x419c]
call fcn.1000afe6
mov ecx, dword [edi + 0x4198]
sub ecx, 0x10
call fcn.1000a3a4
push ebx
push 1
lea ecx, [edi + 0x4180]
call fcn.1000afe6
lea ecx, [edi + 0x413c]
call fcn.1000b074
lea ecx, [edi + 0x4130]
call fcn.1000b074
lea ecx, [edi + 0x4124]
call fcn.1000b074
lea ecx, [edi + 0x40e0]
call fcn.10009baf
lea ecx, [edi + 0x40d0]
call fcn.10009aeb
push ebx
push 1
lea ecx, [edi + 0x40a8]
call fcn.1000afe6
lea esi, [edi + 0x4090]
mov ecx, esi
call fcn.1000b02c
push dword [esi]
call fcn.1000fcf0
mov dword [esi], ebx
pop ecx
lea esi, [edi + 0x407c]
mov ecx, esi
call fcn.1000b02c
push dword [esi]
call fcn.1000fcf0
pop ecx
lea ecx, [edi + 0x60]
mov dword [esi], ebx
call fcn.1000b074
lea ecx, [edi + 0x54]
call fcn.1000b074
lea ecx, [edi + 0x48]
call fcn.1000b074
push ebx
push 1
lea ecx, [edi + 0x30]
call fcn.1000afe6
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret