Function at 0x1000117f
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
call fcn.10001557
mov dword [ebp - 4], eax
push str._test.ini
push dword [ebp - 4]
mov ecx, 2
call fcn.10001086
add esp, 8
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x100011b8
push ebx
call fcn.100016f5
add esp, 4
mov eax, dword [ebp - 8]
push eax
mov ebx, dword [0x100042ba]
test ebx, ebx
je 0x100011cf
push ebx
call fcn.100016f5
add esp, 4
pop eax
mov dword [0x100042ba], eax
push 0
push 0
push 0
push 0x80000004
push 0
push str.test
push 0x80000004
push 0
push str.admin
push 0x80000004
push 0
mov eax, dword [0x100042ba]
test eax, eax
jne 0x10001208
mov eax, 0x10004215
push eax
push 4
mov ebx, 0x8c8
call fcn.10001990
add esp, 0x34
mov dword [ebp - 4], eax
push 0x10004216
push dword [ebp - 4]
call fcn.100010e2
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x1000124c
push ebx
call fcn.100016f5
add esp, 4
cmp dword [ebp - 8], 0
je 0x1000127f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
nop
nop
nop
nop
mov dword [ebp - 4], eax
push 0
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
nop
nop
nop
push 0
call fcn.1000170d
add esp, 4
call fcn.10001610
mov dword [ebp - 8], eax
mov dword [ebp - 4], edx
push 0
push 0
push 0
push 0x80000004
push 0
push 0x10004218
push 0x80000004
push 0
push str.admin
push 0x80000004
push 0
mov eax, dword [0x100042ba]
test eax, eax
jne 0x100012bd
mov eax, 0x10004215
push eax
push 4
mov ebx, 0x8c8
call fcn.10001990
add esp, 0x34
mov dword [ebp - 0xc], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x100012e6
mov eax, 0x10004215
push eax
push 1
mov ebx, 0x9dc
call fcn.10001a30
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x1000130c
push ebx
call fcn.100016f5
add esp, 4
fild qword [ebp - 8]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x20]
fsub qword [ebp - 0x20]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fsub qword [0x1000421c]
fcomp qword [0x10004224]
fnstsw ax
test ah, 0x41
jne 0x100013c3
push 0
push 0
push 0
push 0x80000004
push 0
push str.test
push 0x80000004
push 0
push str.admin
push 0x80000004
push 0
mov eax, dword [0x100042ba]
test eax, eax
jne 0x1000136e
mov eax, 0x10004215
push eax
push 4
mov ebx, 0x8c8
call fcn.10001990
add esp, 0x34
mov dword [ebp - 0x30], eax
push 0x1000422c
push dword [ebp - 0x30]
call fcn.100010e2
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100013b2
push ebx
call fcn.100016f5
add esp, 4
cmp dword [ebp - 0x34], 0
je 0x100013c3
mov eax, 1
jmp 0x100013c8
mov eax, 0
test eax, eax
je 0x1000151e
push 0
push 0
push 0
push 0x80000004
push 0
push 0x1000422e
push 0x80000004
push 0
push str.admin
push 0x80000004
push 0
mov eax, dword [0x100042ba]
test eax, eax
jne 0x10001403
mov eax, 0x10004215
push eax
push 4
mov ebx, 0x8c8
call fcn.10001990
add esp, 0x34
mov dword [ebp - 4], eax
push 0x80000004
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x1000142c
mov eax, 0x10004215
push eax
push 1
mov ebx, 0x9dc
call fcn.10001a30
add esp, 0x10
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10001452
push ebx
call fcn.100016f5
add esp, 4
push 0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
nop
nop
nop
push 0
push 0
push 0
push 0x80000004
push 0
push str.Main
push 0x80000004
push 0
push str.admin
push 0x80000004
push 0
mov eax, dword [0x100042ba]
test eax, eax
jne 0x10001497
mov eax, 0x10004215
push eax
push 4
mov ebx, 0x8c8
call fcn.10001990
add esp, 0x34
mov dword [ebp - 4], eax
push 0
push 0
push 0
push 0x80000002
push 0
push 0
push 0x80000004
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x100014d2
mov eax, 0x10004215
push eax
push 3
mov ebx, 0x2c0
call fcn.10001b10
add esp, 0x28
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x100014f5
push ebx
call fcn.100016f5
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
nop
nop
nop
nop
mov dword [ebp - 4], eax
push 0
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
nop
nop
nop
push 0
call fcn.1000170d
add esp, 4
push 0x80000301
push 0
push 0x1f4
push 1
mov ebx, 0x67c
call fcn.10001c00
add esp, 0x10
push 0
mov ebx, 0x350
call fcn.10001c10
add esp, 4
jmp 0x100011d5