Function at 0x100aa5a0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c
mov eax, dword [0x10001850]
xor eax, esp
mov dword [esp + 0x18], eax
mov edx, dword [ebp + 0x10]
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x14], edx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x10], ecx
mov byte [esp + 0x1c], dl
mov ebx, dword [edi + 0x88]
test ebx, ebx
jne 0x100aa60b
mov edx, str.ERROR:
mov ecx, 0x100eec88
call fcn.100146d0
mov edx, str.EncodeInstruction___called_without_calling_Init__
mov ecx, eax
call fcn.100146d0
push eax
call fcn.100195d0
add esp, 4
cmp byte [0x100efdbc], 0
je 0x100aa735
jmp 0x100aa852
mov eax, dword [edi + 0x8c]
test eax, eax
js 0x100aa751
cmp dword [edi + 0x1c], 0x10
lea esi, [edi + 8]
jb 0x100aa626
mov eax, dword [esi]
jmp 0x100aa628
mov eax, esi
mov edx, dword [edi + 0x8c]
mov al, byte [edx + eax]
mov byte [esp + 0x18], al
cmp ecx, 1
jne 0x100aa676
movzx ecx, al
mov eax, dword [edi + 0x84]
cmp byte [ecx + eax], 1
jne 0x100aa672
mov edx, str.WARNING:
mov ecx, 0x100eec88
call fcn.100146d0
mov edx, str.EncodeInstruction___called_for_two_ADD_instructions_in_a_row
mov ecx, eax
call fcn.100146d0
push eax
call fcn.100195d0
add esp, 4
call fcn.1009d630
mov ecx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
mov edx, dword [esp + 0x18]
cmp eax, 0xff
ja 0x100aa6d6
push dword [esp + 0x1c]
push eax
push ecx
mov ecx, dword [edi + 0x88]
push edx
call fcn.100aa120
movzx ecx, ax
mov eax, pe_nt_image_headers32
cmp cx, ax
je 0x100aa6d2
cmp dword [esi + 0x14], 0x10
jb 0x100aa6ab
mov esi, dword [esi]
mov eax, dword [edi + 0x8c]
mov byte [esi + eax], cl
mov dword [edi + 0x8c], 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.100b5da7
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [esp + 0x18]
push dword [esp + 0x1c]
mov ebx, dword [edi + 0x88]
mov ecx, ebx
push 0
push dword [esp + 0x18]
push edx
call fcn.100aa120
movzx edx, ax
mov eax, pe_nt_image_headers32
cmp dx, ax
je 0x100aa749
cmp dword [esi + 0x14], 0x10
jb 0x100aa705
mov ecx, dword [esi]
jmp 0x100aa707
mov ecx, esi
mov eax, dword [edi + 0x8c]
mov byte [ecx + eax], dl
lea edx, [esp + 0x1c]
mov ecx, dword [ebp + 0xc]
mov dword [edi + 0x8c], 0xffffffff
call fcn.100aea70
lea edx, [esp + 0x21]
mov ecx, esi
push eax
sub edx, eax
push edx
call fcn.1002b320
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.100b5da7
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov eax, dword [ebp + 0xc]
cmp eax, 0xff
ja 0x100aa7ae
cmp cl, 3
jne 0x100aa768
movzx edx, dl
add edx, 3
jmp 0x100aa76b
movzx edx, cl
movzx esi, al
cmp esi, dword [ebx + 4]
jg 0x100aa7ae
mov eax, dword [ebx + 8]
mov eax, dword [eax + edx*4]
movzx eax, word [eax + esi*2]
mov esi, pe_nt_image_headers32
cmp ax, si
je 0x100aa7b3
push eax
lea ecx, [edi + 8]
call fcn.100907c0
mov eax, dword [edi + 0x18]
mov ecx, dword [esp + 0x24]
dec eax
mov dword [edi + 0x8c], eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100b5da7
mov esp, ebp
pop ebp
ret 0xc
mov esi, pe_nt_image_headers32
cmp cl, 3
jne 0x100aa7c4
mov eax, dword [esp + 0x14]
movzx edx, al
add edx, 3
jmp 0x100aa7c7
movzx edx, cl
cmp dword [ebx + 4], 0
jl 0x100aa80a
mov eax, dword [ebx + 8]
mov eax, dword [eax + edx*4]
movzx eax, word [eax]
cmp ax, si
je 0x100aa80a
push eax
lea ecx, [edi + 8]
call fcn.100907c0
mov eax, dword [edi + 0x18]
lea edx, [esp + 0x1c]
mov ecx, dword [ebp + 0xc]
dec eax
mov dword [edi + 0x8c], eax
call fcn.100aea70
lea edx, [esp + 0x21]
push eax
sub edx, eax
lea ecx, [edi + 8]
push edx
jmp 0x100aa730
push ecx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100eec88
call fcn.100146d0
mov edx, str.No_matching_opcode_found_for_inst
mov ecx, eax
call fcn.100146d0
add esp, 4
mov ecx, eax
call fcn.1004fe30
mov edx, str.__mode
mov ecx, eax
call fcn.100146d0
mov dl, byte [esp + 0x14]
mov ecx, eax
call fcn.10014940
mov edx, str.__size_0
jmp 0x100aa5e9
mov ecx, 0x100eec88
call fcn.1002bf20
push 1
call fcn.100b82c3
int3