Function at 0x100334c0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x504
mov eax, dword [ebp + 8]
push ebx
lea ecx, [eax + 0x18dd]
push esi
push edi
mov esi, eax
mov dword [ebp - 0x104], ecx
cmp eax, ecx
ja 0x10033e34
mov edi, dword [ebp + 8]
xor ebx, ebx
lea ebx, [ebx]
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
cmp esi, 0x2bb8
ja 0x10033955
je 0x10033944
cmp esi, 0x2702
ja 0x10033725
je 0x10033710
cmp esi, 0x24a7
ja 0x10033618
je 0x10033609
cmp esi, 0x239b
ja 0x100335c8
je 0x100335af
lea eax, [esi - 0x228f]
cmp eax, 0xc9
ja case.0x10033c8a.12466
movzx eax, byte [eax + 0x10033f0c]
jmp dword [eax*4 + 0x10033ef8]
mov eax, dword [ebp - 8]
mov cl, byte [eax + 7]
mov dl, byte [eax + 8]
mov byte [ebp - 0x30], cl
mov byte [ebp - 0x2d], dl
jmp case.0x10033c8a.12466
mov dword [ebp - 8], str.eitcseuSStavetrS
mov byte [ebp - 0x27], 0x65
mov byte [ebp - 0x29], 0x69
jmp case.0x10033c8a.12466
mov eax, dword [ebp - 8]
mov cl, byte [eax + 5]
mov dl, byte [eax + 6]
mov byte [ebp - 0x2c], cl
mov byte [ebp - 0x22], dl
jmp case.0x10033c8a.12466
mov eax, dword [ebp - 8]
mov cl, byte [eax + 2]
mov dl, byte [eax + 3]
mov al, byte [eax + 4]
mov byte [ebp - 0x23], cl
mov byte [ebp - 0x28], dl
mov byte [ebp - 0x21], al
jmp case.0x10033c8a.12466
movzx ecx, byte [edx + 9]
mov al, byte [edx + 0xa]
mov byte [ebp - 0x25], cl
movzx ecx, byte [edx + 0xb]
mov byte [ebp - 0x24], al
mov byte [ebp - 0x2a], cl
jmp case.0x10033c8a.12466
mov eax, esi
sub eax, 0x23de
je 0x100335f8
sub eax, 0x43
je 0x100335ed
sub eax, 0x43
jne case.0x10033c8a.12466
mov edx, dword [ebp - 8]
mov al, byte [edx + 0xf]
mov byte [ebp - 0x26], al
jmp case.0x10033c8a.12466
mov cl, byte [edx + 0xe]
mov byte [ebp - 0x2b], cl
jmp case.0x10033c8a.12466
mov al, byte [edx + 0xc]
mov cl, byte [edx + 0xd]
mov byte [ebp - 0x2f], al
mov byte [ebp - 0x2e], cl
jmp case.0x10033c8a.12466
mov byte [ebp - 0x20], bl
mov dword [ebp - 0xc], str.l3vp.adal2di
jmp case.0x10033c8a.12466
cmp esi, 0x25f6
ja 0x100336b5
je 0x100336a5
lea eax, [esi - 0x24ea]
cmp eax, 0xc9
ja case.0x10033c8a.12466
movzx edx, byte [eax + 0x10033fec]
jmp dword [edx*4 + 0x10033fd8]
mov eax, dword [ebp - 0xc]
mov cx, word [eax + 4]
mov dx, word [eax + 6]
mov word [ebp - 0x88], cx
mov word [ebp - 0x84], dx
jmp case.0x10033c8a.12466
mov eax, dword [ebp - 0xc]
mov cx, word [eax + 0xa]
mov dx, word [eax + 0xc]
mov word [ebp - 0x8c], cx
mov word [ebp - 0x7a], dx
jmp case.0x10033c8a.12466
mov eax, dword [ebp - 0xc]
mov cx, word [eax]
mov dx, word [eax + 2]
mov word [ebp - 0x76], cx
mov word [ebp - 0x80], dx
jmp case.0x10033c8a.12466
mov eax, dword [ebp - 0xc]
mov cx, word [eax + 8]
mov word [ebp - 0x7c], cx
jmp case.0x10033c8a.12466
mov dx, word [ecx + 0xe]
mov word [ebp - 0x86], dx
jmp case.0x10033c8a.12466
mov eax, esi
sub eax, 0x2639
je 0x100336f0
sub eax, 0x43
je 0x100336da
sub eax, 0x43
jne case.0x10033c8a.12466
mov eax, 0x7243
mov word [ebp - 0x44], ax
jmp case.0x10033c8a.12466
mov cx, word [ecx + 0x16]
xor edx, edx
mov word [ebp - 0x82], cx
mov word [ebp - 0x74], dx
jmp case.0x10033c8a.12466
movzx eax, word [ecx + 0x10]
mov dx, word [ecx + 0x12]
mov word [ebp - 0x78], ax
movzx eax, word [ecx + 0x14]
mov word [ebp - 0x7e], dx
mov word [ebp - 0x8a], ax
jmp case.0x10033c8a.12466
mov eax, 0x4565
mov dword [ebp - 0x42], 0x746165
mov word [ebp - 0x3f], ax
jmp case.0x10033c8a.12466
cmp esi, 0x295d
ja 0x1003385a
je 0x1003383c
cmp esi, 0x2851
ja 0x100337f2
je 0x100337d7
lea eax, [esi - 0x2745]
cmp eax, 0xc9
ja case.0x10033c8a.12466
movzx ecx, byte [eax + 0x100340cc]
jmp dword [ecx*4 + 0x100340b8]
mov ecx, 0x74
mov dword [ebp - 0x3d], 0x6e6576
mov word [ebp - 0x3a], cx
jmp case.0x10033c8a.12466
mov edx, 0x41
mov eax, 0x6b
mov word [ebp - 0x39], dx
mov word [ebp - 0xc0], ax
mov dword [ebp - 0xbe], 0x720065
jmp case.0x10033c8a.12466
mov ecx, 0x6e
mov edx, 0x33
mov word [ebp - 0xba], cx
mov dword [ebp - 0xb8], 0x6c0065
mov word [ebp - 0xb4], dx
jmp case.0x10033c8a.12466
mov dword [ebp - 0xb2], 0x2e0032
jmp case.0x10033c8a.12466
mov edx, 0x6c
mov dword [ebp - 0xae], 0x6c0064
mov word [ebp - 0xaa], dx
jmp case.0x10033c8a.12466
mov eax, esi
sub eax, 0x2894
je 0x1003382e
sub eax, 0x43
je 0x10033817
sub eax, 0x43
jne case.0x10033c8a.12466
mov eax, 0x74
mov word [ebp - 0x5a], ax
jmp case.0x10033c8a.12466
mov ecx, 0x53
mov edx, 0x65
mov word [ebp - 0x5c], cx
mov word [ebp - 0x5b], dx
jmp case.0x10033c8a.12466
xor eax, eax
mov word [ebp - 0xa8], ax
jmp case.0x10033c8a.12466
mov ecx, 0x65
mov edx, 0x6e
mov word [ebp - 0x55], cx
mov dword [ebp - 0x59], 0x72727543
mov word [ebp - 0x54], dx
jmp case.0x10033c8a.12466
cmp esi, 0x2aac
ja 0x100338dc
je 0x100338d4
lea eax, [esi - 0x29a0]
cmp eax, 0xc9
ja case.0x10033c8a.12466
movzx eax, byte [eax + 0x100341ac]
jmp dword [eax*4 + 0x10034198]
mov ecx, 0x72
mov word [ebp - 0x50], cx
jmp case.0x10033c8a.12466
mov edx, 0x65
mov word [ebp - 0x4f], dx
jmp case.0x10033c8a.12466
mov eax, 0x4179
mov dword [ebp - 0x4e], 0x726f7463
mov word [ebp - 0x4a], ax
jmp case.0x10033c8a.12466
mov ecx, 0x74
mov edx, 0x44
mov word [ebp - 0x53], cx
mov eax, 0x69
mov word [ebp - 0x52], dx
mov word [ebp - 0x51], ax
jmp case.0x10033c8a.12466
mov byte [ebp - 0x48], bl
jmp case.0x10033c8a.12466
mov eax, esi
sub eax, 0x2aef
je 0x1003391f
sub eax, 0x43
je 0x10033904
sub eax, 0x43
jne case.0x10033c8a.12466
mov ecx, 0x2e
mov word [ebp - 0xd0], cx
jmp case.0x10033c8a.12466
mov edx, 0x32
mov dword [ebp - 0xd6], 0x33006c
mov word [ebp - 0xd2], dx
jmp case.0x10033c8a.12466
mov eax, 0x72
mov dword [ebp - 0xe0], 0x65006b
mov word [ebp - 0xdc], ax
mov dword [ebp - 0xda], 0x65006e
jmp case.0x10033c8a.12466
mov ecx, 0x64
mov word [ebp - 0xce], cx
jmp case.0x10033c8a.12466
cmp esi, 0x306e
ja 0x10033c52
je 0x10033c08
cmp esi, 0x2e13
ja 0x10033a93
je 0x10033a82
cmp esi, 0x2d07
ja 0x10033a12
je 0x100339f4
lea eax, [esi - 0x2bfb]
cmp eax, 0xc9
ja case.0x10033c8a.12466
movzx edx, byte [eax + 0x1003428c]
jmp dword [edx*4 + 0x10034278]
mov dword [ebp - 0xca], 0x6c
jmp case.0x10033c8a.12466
mov edx, 0x47
mov eax, 0x65
mov word [ebp - 0x70], dx
mov ecx, 0x74
mov word [ebp - 0x6f], ax
mov word [ebp - 0x6e], cx
jmp case.0x10033c8a.12466
mov edx, 0x53
mov word [ebp - 0x6d], dx
jmp case.0x10033c8a.12466
mov eax, 0x6c
mov word [ebp - 0xcc], ax
jmp case.0x10033c8a.12466
mov ecx, 0x79
mov word [ebp - 0x6c], cx
mov edx, 0x6d
mov dword [ebp - 0x6b], 0x657473
mov word [ebp - 0x68], dx
jmp case.0x10033c8a.12466
mov eax, esi
sub eax, 0x2d4a
je 0x10033a6b
sub eax, 0x43
je 0x10033a4d
sub eax, 0x43
jne case.0x10033c8a.12466
mov eax, 0x41
mov ecx, 0x6b
mov word [ebp - 0x5e], ax
mov word [ebp - 0x100], cx
mov dword [ebp - 0xfe], 0x720065
jmp case.0x10033c8a.12466
mov edx, 0x65
mov word [ebp - 0x64], dx
mov eax, 0x7972
mov dword [ebp - 0x63], 0x6f7463
mov word [ebp - 0x60], ax
jmp case.0x10033c8a.12466
mov ecx, 0x44
mov edx, 0x7269
mov word [ebp - 0x67], cx
mov word [ebp - 0x66], dx
jmp case.0x10033c8a.12466
mov eax, 0x6e
mov word [ebp - 0xfa], ax
jmp case.0x10033c8a.12466
cmp esi, 0x2f62
ja 0x10033b70
je 0x10033b32
lea eax, [esi - 0x2e56]
cmp eax, 0xc9
ja case.0x10033c8a.12466
movzx ecx, byte [eax + 0x1003436c]
jmp dword [ecx*4 + 0x10034358]
mov dword [ebp - 0xf8], 0x6c0065
mov dword [ebp - 0xf4], 0x320033
jmp case.0x10033c8a.12466
mov ecx, 0x64
mov word [ebp - 0xee], cx
mov dword [ebp - 0xec], 0x6c006c
jmp case.0x10033c8a.12466
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x8c]
xor edx, edx
push 0x36c3
push ecx
mov word [ebp - 0xe8], dx
call fcn.10030840
mov dword [ebp - 0xa0], eax
jmp 0x10033ecd
mov edx, 0x2e
mov word [ebp - 0xf0], dx
jmp case.0x10033c8a.12466
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0xc0]
push 0x36c3
push ecx
call fcn.10030840
lea edx, [ebp - 0x5c]
push edx
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0xe0]
push 0x36c3
push eax
call fcn.10030840
add esp, 0x18
mov dword [ebp - 0x9c], eax
jmp case.0x10033c8a.12466
mov eax, esi
sub eax, 0x2fa5
je 0x10033bde
sub eax, 0x43
je 0x10033bb8
sub eax, 0x43
jne case.0x10033c8a.12466
push ebx
push 0x1838
push ebx
call int.1002de60
add esp, 0xc
push eax
push ebx
push 1
push ebx
call dword [ebp - 0x98]
mov dword [ebp - 0x94], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x90], eax
jmp case.0x10033c8a.12466
mov ecx, dword [ebp - 0xe4]
push ecx
lea edx, [ebp - 0x504]
push edx
call dword [ebp - 0xa4]
lea eax, [ebp - 0x504]
push eax
call dword [ebp - 0x9c]
jmp case.0x10033c8a.12466
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x100]
push 0x36c3
push edx
call fcn.10030840
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xe4], 0x400
jmp 0x10033ecd
cmp dword [ebp - 0x94], ebx
je 0x10033c4a
push ebx
push ebx
push 0x6486
call fcn.100334c0
add esp, 0xc
cmp al, bl
je 0x10033c4a
cmp dword [ebp - 0x90], 0xb7
je case.0x10033c8a.12466
push 0x3efc
push ebx
push ebx
call fcn.1001b660
add esp, 0xc
cmp al, bl
jne case.0x10033c8a.12466
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp esi, 0x32c9
ja 0x10033d98
je 0x10033d85
cmp esi, 0x31bd
ja 0x10033d03
je 0x10033cd8
lea eax, [esi - 0x30b1]
cmp eax, 0xc9
ja case.0x10033c8a.12466
movzx eax, byte [eax + 0x1003444c]
jmp dword [eax*4 + 0x10034438]
or edi, 0x42
shl edi, 8
jmp case.0x10033c8a.12466
lea ecx, [ebp - 0x1c]
push ecx
push ebx
push ebx
or edi, 0x8e
push 0x396a
mov dword [ebp - 0x1c], edi
call fcn.10015610
add esp, 0x10
mov dword [ebp - 0x1c], eax
jmp case.0x10033c8a.12466
mov edi, 0xf1
jmp case.0x10033c8a.12466
shl edi, 0x10
or edi, 0x6100
jmp case.0x10033c8a.12466
cmp dword [ebp - 0x1c], ebx
je 0x10033c4a
push ebx
push 0x2d1f
push ebx
call fcn.1000aac0
add esp, 0xc
push 0x10034b30
push eax
call dword [ebp - 0x1c]
mov dword [0x10137cc8], eax
jmp case.0x10033c8a.12466
mov eax, esi
sub eax, 0x3200
je 0x10033d4a
sub eax, 0x43
je 0x10033d3e
sub eax, 0x43
jne case.0x10033c8a.12466
mov edx, dword [0x10137cc8]
inc dword [0x10139dc4]
add dword [0x10139dc0], 4
push 0x10139dbc
push edx
call dword [ebp - 0xa0]
jmp case.0x10033c8a.12466
add dword [0x10139dbc], 0x20
jmp case.0x10033c8a.12466
cmp dword [0x10137cc8], ebx
je 0x10033c4a
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x18]
push ecx
push 0x701c
push 0x10139dbc
mov dword [ebp - 0x18], 0x1c
mov dword [ebp - 0xc4], ebx
call fcn.10029100
add esp, 0x10
jmp case.0x10033c8a.12466
push ebx
push 0x1720
call fcn.10032660
add esp, 8
jmp case.0x10033c8a.12466
cmp esi, 0x654f
ja 0x10033e95
je 0x10033e7b
cmp esi, 0x64c9
ja 0x10033e3e
je 0x10033e17
cmp esi, 0x543e
je 0x10033ee9
cmp esi, 0x6486
jne case.0x10033c8a.12466
push 0x5335
push ebx
call fcn.1000ab90
push 0x5410
push eax
lea edx, [ebp - 0x18]
push edx
mov dword [ebp - 0x18], 0x80000002
call fcn.1002ae10
push ebx
push 0x2d1f
push ebx
mov dword [ebp - 0x14], eax
call fcn.1000aac0
push eax
lea eax, [ebp - 0x14]
push 0x63a4
push eax
call fcn.10032170
add esp, 0x2c
jmp case.0x10033c8a.12466
lea ecx, [ebp - 0x14]
push ecx
push 0x42ac
push ebx
call fcn.10011d30
add esp, 0xc
cmp al, bl
jne case.0x10033c8a.12466
mov byte [ebp - 4], bl
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp esi, 0x650c
jne case.0x10033c8a.12466
push 0x4e5e
push ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x34], ebx
call fcn.1000aef0
lea edx, [ebp - 0x10]
push edx
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x34]
push ecx
push 0x30c3
call fcn.10017080
add esp, 0x1c
cmp al, bl
je 0x10033e31
jmp case.0x10033c8a.12466
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x18]
push ecx
push 0x4f19
mov dword [ebp - 0x18], edx
call fcn.1000e6b0
jmp 0x10033ecd
mov eax, esi
sub eax, 0x6592
je 0x10033eb2
sub eax, 0x43
je 0x10033eaa
sub eax, 0x43
je 0x10033e34
jmp case.0x10033c8a.12466
mov dl, byte [ebp + 0xb]
mov byte [ebp - 4], dl
jmp case.0x10033c8a.12466
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x34]
lea ecx, [ebp + 8]
push ecx
push edx
push 0x55d1
mov dword [ebp + 8], eax
call fcn.1002cc40
mov byte [ebp + 0xb], al
add esp, 0xc
add esi, 0x43
cmp esi, dword [ebp - 0x104]
jbe 0x100334f0
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movsd dword es:[edi], dword [esi]
cmp dword [0x5e5f654f], 0x8b5bc033
in eax, 0x5d
ret