Function at 0x10013cdb
Capabilities:
Terminate process

Disassembly:
movzx eax, byte [esp + 8]
sub esp, 8
add eax, 0xffffffee
push ebx
mov bl, 1
push esi
cmp eax, 0xe8
ja case.0x10013b01.19
movzx eax, byte [eax + 0x10013fe4]
jmp dword [eax*4 + 0x10013fa8]
push 0
push 0
push 0
push 0
push 0
mov ecx, 0x100969d4
call fcn.10019070
cmp byte [0x1009565c], 0
jne case.0x10013e90.165
mov esi, dword [esp + 0x14]
cmp byte [esi + 3], 3
jne 0x10013b46
movzx eax, word [esi + 0x14]
mov ecx, 0x10095630
push eax
lea eax, [esi + 4]
push eax
call fcn.10016690
cmp byte [0x10095687], bl
jne case.0x10013b01.19
cmp byte [esi + 4], 6
jne case.0x10013b01.19
mov ax, word [0x10095658]
mov ecx, 0x10095608
push 0
mov dword [esp + 0xd], 0
push 0
mov byte [esp + 0x15], 0
mov word [esp + 0x14], ax
lea eax, [esp + 0x10]
push 6
push eax
mov dword [esp + 0x18], 0x3f406c1
call fcn.10015930
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
mov edx, dword [esp + 0x14]
movzx eax, byte [edx + 3]
sub eax, 1
je 0x10013bc1
sub eax, 1
jne case.0x10013b01.19
push edx
call fcn.100156a0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014980
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
mov edx, dword [esp + 0x14]
mov al, byte [edx]
cmp al, 0xc1
jne 0x10013c88
movzx eax, byte [edx + 3]
cmp eax, 0x52
ja case.0x10013b01.19
movzx eax, byte [eax + 0x100140f4]
jmp dword [eax*4 + 0x100140d0]
push 0
push 0
push 0
push 0
push 0
mov ecx, 0x100969d4
call fcn.10019070
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014330
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014440
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014a40
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.100149e0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014bc0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014c90
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014880
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
cmp al, 0xc2
jne case.0x10013b01.19
cmp byte [edx + 4], 3
jne case.0x10013b01.19
push edx
call fcn.100155b0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.100148b0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
mov eax, dword [esp + 0x14]
cmp byte [eax + 3], 0x54
jne case.0x10013b01.19
push eax
call fcn.100151a0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
mov edx, dword [esp + 0x14]
mov al, byte [edx]
cmp al, 0xc1
jne 0x10013e77
movzx eax, byte [edx + 3]
add eax, 0xfffffff8
cmp eax, 0xd6
ja case.0x10013e90.165
movzx eax, byte [eax + 0x10014198]
jmp dword [eax*4 + 0x10014148]
cmp byte [esp + 0x20], bl
jne case.0x10013e90.165
push edx
mov ecx, 0x1008ea60
call fcn.100026f0
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014f20
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x100902e0
call fcn.1000cf90
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10015470
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014d30
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014480
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
cmp byte [esp + 0x20], bl
jne case.0x10013e90.165
push edx
call fcn.100151c0
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014f50
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
call fcn.100133e0
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
cmp byte [esp + 0x20], bl
jne case.0x10013e90.165
push edx
call fcn.10015430
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x1008f030
call fcn.1000b760
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x1008f030
call fcn.1000b6e0
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x1008f030
call fcn.1000b7c0
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
call fcn.10014860
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.10014850
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.100148d0
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014f70
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
cmp al, 0xc2
jne case.0x10013e90.165
movzx eax, byte [edx + 4]
add eax, 0xffffff5c
cmp eax, 0x54
ja case.0x10013e90.165
movzx eax, byte [eax + 0x10014288]
jmp dword [eax*4 + 0x10014270]
push edx
call fcn.10012530
add esp, 4
xor bl, bl
mov al, bl
pop esi
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10014d60
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
call fcn.10015160
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x100902e0
call fcn.1000d030
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push edx
mov ecx, 0x1008f030
call fcn.1000b830
xor bl, bl
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.100142e0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.10014820
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.10014e80
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.10014b00
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.100149b0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.10015500
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
push dword [esp + 0x14]
call fcn.10015580
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10
mov esi, dword [esp + 0x14]
movzx edx, byte [esi + 3]
sub edx, 0
je case.0x10013b01.19
sub edx, 1
jne case.0x10013b01.19
push esi
call fcn.10014ba0
pop esi
mov al, bl
pop ebx
add esp, 8
ret 0x10