Function at 0x10098cd7
Capabilities:
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x248
mov eax, dword [0x100c5e00]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x1c]
and dword [ebp - 0x220], 0
push ebx
push esi
mov ebx, ecx
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp + 0x24]
push edi
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x230], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 5
pop ecx
mov esi, 0x1001dfe8
mov dword [ebp - 0x22c], eax
lea edi, [ebp - 0x214]
rep movsd dword es:[edi], dword [esi]
push 0x1f4
xor esi, esi
lea eax, [ebp - 0x200]
push esi
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x218], esi
mov dword [ebp - 0x228], esi
cmp dword [0x100c66ac], esi
je 0x10098f99
test ebx, ebx
je 0x10098f99
or dword [ebx + 4], 0x90000
push 2
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov esi, eax
mov dword [ebp - 0x23c], esi
test esi, esi
je 0x10098daa
push 0x1001dfd0
push 0x1001dfd4
push 1
push esi
call fcn.10090a13
add esp, 0x10
test eax, eax
jns 0x10098da4
xor eax, eax
mov word [esi], ax
mov dword [ebp - 0x220], esi
mov eax, dword [ebp - 0x21c]
test eax, eax
je 0x10098e00
mov ecx, eax
call fcn.1009812f
test eax, eax
je 0x10098df4
push 0x104
lea ecx, [ebp - 0x214]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x214]
push 0x5c
push eax
call dword [sym.imp.msvcrt.dll_wcsrchr]
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x10098df4
add edi, 2
mov dword [ebp - 0x218], edi
jmp 0x10098e00
lea eax, [ebp - 0x214]
mov dword [ebp - 0x218], eax
mov eax, dword [ebx]
mov esi, 0x65000000
mov edi, 0x2000000
cmp eax, esi
je 0x10098e14
test eax, eax
jne 0x10098e44
mov edx, dword [0x100c66a8]
mov ecx, eax
test edx, 0x80000
je 0x10098e30
cmp eax, esi
mov ecx, 0x6b000000
cmovne ecx, edi
mov dword [ebx], ecx
mov eax, ecx
test edx, 0x40000
je 0x10098e44
mov dword [ebp - 0x228], 1
cmp eax, edi
je 0x10098e4f
cmp eax, 0x1000000
jne 0x10098e8c
call fcn.10048ef0
test eax, eax
je 0x10098e8c
mov ecx, dword [ebx + 8]
mov edx, 0x1001e0cc
push 0x1001dfe8
call fcn.10048ce2
mov esi, eax
push ecx
push dword [ebp - 0x22c]
xor edx, edx
mov ecx, esi
call fcn.100491a2
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x100c66ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x238], eax
call fcn.10097b21
movsd qword [ebp - 0x244], xmm0
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, dword [0x100c66b0]
mov esi, eax
mov eax, dword [ebp - 0x224]
mov ebx, dword [ebx + 8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x21c], eax
call fcn.1009844d
mov dword [ebp - 0x234], eax
call fcn.100983d9
movsd xmm0, qword [ebp - 0x244]
push ecx
push ecx
movsd qword [esp], xmm0
push dword [ebp + 0x28]
push dword [ebp - 0x230]
push dword [ebp + 0x20]
push dword [ebp - 0x218]
push str._unknown_
push dword [ebp - 0x220]
push esi
push edi
push ebx
push dword [ebp - 0x21c]
mov esi, dword [ebp - 0x238]
xor ebx, ebx
push 0x1001e0cc
push ebx
push ebx
push dword [ebp - 0x234]
mov ecx, esi
push eax
mov eax, dword [ebp - 0x224]
push dword [eax]
push 0x1001e100
push 0x11
push dword [0x100c66ac]
call dword [0x100c7310]
call esi
mov esi, eax
add esp, 0x54
mov eax, dword [ebp - 0x23c]
test eax, eax
je 0x10098f61
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, 4
jne 0x10098f72
call fcn.100989f0
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [ebp - 0x228], ebx
je 0x10098f89
push ebx
push ebx
push 1
push 0xc0000025
call dword [sym.imp.KERNEL32.dll_RaiseException]
push dword [ebp - 0x22c]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, esi
jmp 0x10098f9b
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10033c90
leave
ret 0x24