Function at 0x100ffef
Capabilities:
Execute command
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x214
mov eax, dword [0x102020c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov dword [ebp - 0x20c], ebx
mov dword [ebp - 0x214], ebx
mov dword [ebp - 0x208], 1
cmp dword [esi + 0x38], ebx
je 0x1010076
push dword [esi + 0x2c]
push dword [esi + 0x3c]
push dword [esi + 4]
push dword [esi]
call fcn.010138cf
mov edi, eax
mov ebx, 0x1002124
mov dword [ebp - 0x210], 0x100211c
test edi, edi
jne 0x10100b4
call fcn.0100fb55
push edi
push 0x1001ac0
push 0x32c
call fcn.0100e77e
push eax
push dword [0x1021064]
call dword [fcn.010012f0]
push 1
call dword [0x10013a0]
cmp dword [esi + 0x30], ebx
je 0x1010091
call fcn.010158b7
mov ebx, 0x1002110
mov dword [ebp - 0x210], 0x1002108
jmp 0x10100ae
cmp dword [esi + 0x34], ebx
je 0x10101cd
call fcn.010153a4
mov ebx, 0x1002100
mov dword [ebp - 0x210], 0x10020f8
mov edi, eax
test edi, edi
je 0x101010a
and dword [ebp - 0x208], 0
inc dword [ebp - 0x208]
lea eax, [ebp - 0x208]
push eax
push edi
call fcn.01013b71
push eax
push edi
call fcn.01013b60
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.01005ec9
push edi
call fcn.01013b87
mov edi, eax
test edi, edi
jne 0x10100bb
push dword [esi + 0x20]
lea eax, [ebp - 0x20c]
push dword [ebp - 0x210]
push ebx
push eax
call fcn.01005f0d
mov dword [ebp - 0x208], eax
xor ebx, ebx
cmp dword [ebp - 0x20c], ebx
je 0x10102c6
cmp dword [ebp - 0x208], ebx
je 0x10102c6
cmp dword [esi + 0x14], ebx
je 0x10101a4
push 0x10020ec
mov edi, 0x200
lea eax, [ebp - 0x204]
push edi
push eax
call fcn.0101634b
push dword [esi + 0x14]
lea eax, [ebp - 0x204]
push edi
push eax
call fcn.010162d2
push 0x10020d8
lea eax, [ebp - 0x204]
push edi
push eax
call fcn.010162d2
push dword [esi]
lea eax, [ebp - 0x204]
push edi
push eax
call fcn.010162d2
push 0x1001aa0
lea eax, [ebp - 0x204]
push edi
push eax
call fcn.010162d2
push dword [esi + 4]
lea eax, [ebp - 0x204]
push edi
push eax
call fcn.010162d2
add esp, 0x48
lea eax, [ebp - 0x204]
push eax
call dword [0x1001398]
pop ecx
mov eax, dword [esi + 0x10]
cmp eax, ebx
je 0x101020e
lea ecx, [ebp - 0x210]
push ecx
push eax
push dword [esi + 0x20]
call fcn.0100c2f2
test eax, eax
jge 0x10101e8
push 0x10
push 0x1001ac0
push 0x33a
jmp 0x10101fc
push dword [esi + 0x24]
push dword [esi + 0x20]
push dword [esi + 4]
push dword [esi]
call fcn.01005d86
mov dword [ebp - 0x20c], eax
jmp 0x101010c
cmp dword [ebp - 0x210], ebx
jne 0x101020e
push 0x10
push 0x1001ac0
push 0x341
call fcn.0100e77e
push eax
push dword [0x1021064]
call dword [fcn.010012f0]
mov eax, dword [esi + 8]
cmp eax, ebx
jne 0x101021a
cmp dword [esi + 0xc], ebx
je 0x101028b
mov edi, dword [esi + 0x28]
cmp eax, ebx
je 0x1010230
push dword [esi + 0x18]
push eax
push dword [ebp - 0x20c]
call fcn.01006045
cmp dword [esi + 0xc], ebx
je 0x1010270
mov eax, dword [0x10200b0]
cmp eax, ebx
jl 0x1010241
push eax
jmp 0x101024e
push dword [esi + 0x20]
call fcn.0100c45d
test eax, eax
jle 0x101025c
push ebx
push dword [esi + 0x20]
call fcn.0100c5e9
mov dword [ebp - 0x214], eax
push dword [esi + 0x1c]
push dword [esi + 0xc]
push dword [ebp - 0x214]
push dword [esi + 0x20]
call fcn.01004d2a
cmp edi, ebx
je 0x101028b
push 0x144
push esi
push dword [0x1021004]
call fcn.01018511
push ebx
jmp 0x1010070
push dword [esi + 0x20]
call fcn.0100c45d
cmp eax, 1
jne 0x10102d3
push dword [ebp - 0x20c]
call fcn.01004ffa
cmp eax, 1
jne 0x10102d3
cmp dword [0x10200b4], ebx
je 0x10102d3
push 0xffffffffffffffff
push eax
push ebx
call fcn.0100e11b
push dword [0x1021064]
call fcn.0100ee4c
jmp 0x10102d3
call fcn.010144b2
push dword [esi + 0x20]
call fcn.0100b9e4
push 0x144
push esi
push dword [0x1021004]
call fcn.01018511
call fcn.0100fb55
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.01015ea0
leave
ret 4