Function at 0x10300dd3
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
xor ebx, ebx
cmp dword [esi + 0x20], ebx
jne 0x10300dee
mov eax, 0x80004005
jmp 0x10300fbe
cmp byte [esi + 0x180], bl
je 0x10300dfd
xor eax, eax
jmp 0x10300fbe
mov ecx, dword [esi + 0x28]
mov eax, dword [ecx]
call dword [eax + 0x30]
mov ecx, dword [esi + 0x24]
mov eax, dword [ecx]
call dword [eax + 0x1c]
call fcn.101633c4
test al, al
jne 0x10300e2a
mov eax, dword [esi]
push esi
call dword [eax + 0x30]
test eax, eax
je 0x10300e2a
push 0x1c1417
call fcn.10153dc1
push edi
call fcn.1030577f
test al, al
jne 0x10300eac
push 0x2710
lea ecx, [esi + 0x38]
call fcn.10302537
test eax, eax
je 0x10300eac
mov ecx, dword [esi + 0x24]
mov eax, dword [ecx]
call dword [eax + 0x1c]
mov eax, dword [ebp + 8]
sub eax, ebx
je 0x10300e87
sub eax, 1
je 0x10300ea2
sub eax, 1
je 0x10300e87
sub eax, 1
je 0x10300e6f
push 0x1c1418
call fcn.10153dc1
jmp 0x10300e7d
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, 0x80004005
jmp 0x10300fbd
or ecx, 0xffffffff
mov eax, 0x4e20
cmp dword [ebp + 8], ebx
cmove eax, ecx
lea ecx, [esi + 0x38]
push eax
call fcn.10302537
test eax, eax
je 0x10300eac
mov eax, 0x80004004
jmp 0x10300fbd
mov ecx, dword [esi + 0x24]
mov byte [esi + 0x180], 1
mov eax, dword [ecx]
call dword [eax + 0x24]
lea edi, [esi + 0x124]
cmp dword [edi + 8], ebx
je 0x10300eee
cmp dword [edi], ebx
je 0x10300eee
jmp 0x10300edf
mov ecx, dword [ebp - 8]
push 1
mov eax, dword [ecx]
call dword [eax + 0x7c]
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [ebp - 8]
mov ecx, edi
push eax
call fcn.1030d33d
test al, al
jne 0x10300ecc
push 0x105f3f08
lea eax, [esi + 0x10]
mov dword [ebp - 4], ebx
push eax
lea ecx, [ebp - 4]
call fcn.102f35ab
test eax, eax
js 0x10300f12
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov ecx, dword [ebp - 4]
test ecx, ecx
je 0x10300f22
mov dword [ebp - 4], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x10300f2e
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov ecx, dword [esi + 0x78]
test ecx, ecx
je 0x10300f3a
call fcn.10306b7d
lea edi, [esi + 0x7c]
cmp dword [edi + 8], ebx
je 0x10300f69
cmp dword [edi], ebx
je 0x10300f69
jmp 0x10300f5a
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [ebp - 0xc]
mov ecx, edi
push eax
call fcn.1030d33d
test al, al
jne 0x10300f48
lea edi, [esi + 0xd0]
cmp dword [edi + 8], ebx
je 0x10300f92
cmp dword [edi], ebx
je 0x10300f92
jmp 0x10300f83
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [ebp - 0x10]
mov ecx, edi
push eax
call fcn.1030d33d
test al, al
jne 0x10300f7a
cmp dword [esi + 0x17c], ebx
je 0x10300fbb
call fcn.101633c4
test al, al
je 0x10300fb1
call dword [sym.imp.ole32.dll_CoUninitialize]
mov dword [esi + 0x17c], ebx
jmp 0x10300fbb
push 0x1c141d
call fcn.10153dc1
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4