Function at 0x10002d40
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 8]
sub esp, 0x228
push ebx
mov ebx, dword [ebp + 0x18]
push esi
push edi
mov edi, dword [ebp + 0x10]
test edi, edi
je 0x10002d90
test ebx, ebx
je 0x10002d90
mov eax, ebx
nop
dec eax
cmp dword [edi + eax*4], 0
jne 0x10002d6d
test eax, eax
jne 0x10002d60
jmp 0x10002d90
lea ecx, [eax + 1]
test ecx, ecx
je 0x10002d90
mov edi, dword [edi + ecx*4 - 4]
xor esi, esi
mov eax, 0x80000000
nop
test eax, edi
jne 0x10002d89
inc esi
shr eax, 1
jne 0x10002d80
shl ecx, 5
sub ecx, esi
jne 0x10002db3
cmp ebx, 1
jbe 0x10002d9f
lea edi, [edx + 4]
lea ecx, [ebx - 1]
xor eax, eax
rep stosd dword es:[edi], eax
pop edi
pop esi
mov dword [edx], 1
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x14
cmp ecx, 1
jne 0x10002ddc
test ebx, ebx
je 0x10002dce
mov ecx, dword [ebp + 0xc]
mov eax, edx
sub ecx, edx
mov edx, dword [ecx + eax]
mov dword [eax], edx
add eax, 4
dec ebx
jne 0x10002dc3
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x14
xor esi, esi
mov edi, edi
cmp esi, 0x20
jae 0x10002df4
cmp dword [esi*4 + 0x1004f7b4], ecx
ja 0x10002df4
inc esi
cmp esi, 8
jb 0x10002de0
cmp esi, 1
ja 0x10002e16
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push ecx
push eax
push edx
mov eax, ebx
call fcn.10002b40
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
lea edi, [ebx + ebx]
push 4
push edi
mov dword [ebp - 8], edi
call dword [sym.imp.MSVCRT.dll_calloc]
add esp, 8
mov dword [ebp - 4], eax
test eax, eax
jne 0x10002e37
push 1
call dword [sym.imp.MSVCRT.dll_exit]
push 4
push edi
call dword [sym.imp.MSVCRT.dll_calloc]
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
jne 0x10002e52
push 1
call dword [sym.imp.MSVCRT.dll_exit]
push 4
push edi
call dword [sym.imp.MSVCRT.dll_calloc]
add esp, 8
mov dword [ebp - 0x1c], eax
test eax, eax
jne 0x10002e6d
push 1
call dword [sym.imp.MSVCRT.dll_exit]
push 4
push edi
call dword [sym.imp.MSVCRT.dll_calloc]
add esp, 8
mov dword [ebp - 0x28], eax
test eax, eax
jne 0x10002e88
push 1
call dword [sym.imp.MSVCRT.dll_exit]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp - 0x1c]
push ebx
push ecx
push eax
push eax
push edx
mov dword [ebp - 0x228], eax
call fcn.10002ac0
lea ecx, [esi - 1]
mov eax, 1
shl eax, cl
mov edi, 1
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], eax
cmp eax, edi
jbe 0x10002f2a
lea ebx, [ebx]
mov eax, dword [ebp - 8]
push 4
push eax
call dword [sym.imp.MSVCRT.dll_calloc]
mov esi, eax
add esp, 8
test esi, esi
je 0x10002e2f
mov ecx, dword [ebp + edi*4 - 0x22c]
mov dword [ebp + edi*4 - 0x228], esi
test ebx, ebx
je 0x10002efe
sub ecx, esi
mov edx, ebx
nop
mov ebx, dword [ecx + eax]
mov dword [eax], ebx
add eax, 4
dec edx
jne 0x10002ef0
mov ebx, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
push ebx
push esi
push ecx
call fcn.10001e00
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
push edx
mov edx, dword [ebp - 0xc]
push eax
push ecx
push esi
push edx
mov eax, ebx
call fcn.10002040
inc edi
cmp edi, dword [ebp - 0x24]
jb 0x10002ec0
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x10], 1
mov eax, ebx
jmp 0x10002f40
dec eax
cmp dword [edx + eax*4], 0
jne 0x10002ff0
test eax, eax
jne 0x10002f40
xor edi, edi
mov ecx, dword [edx + edi*4 - 4]
lea edx, [edx + edi*4 - 4]
mov dword [ebp + 0xc], edi
mov eax, 0x80000000
test eax, ecx
jne 0x10002f69
shr eax, 1
jne 0x10002f61
xor esi, esi
test edi, edi
mov edi, dword [ebp - 0x28]
mov dword [ebp + 0x10], eax
mov dword [ebp - 0x18], esi
mov dword [ebp + 0x18], esi
je 0x10003119
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x10], 0
jne 0x10002fae
mov eax, dword [ebp - 4]
push ebx
push edi
push eax
call fcn.10002350
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
push ecx
mov ecx, dword [ebp - 0xc]
push edx
push eax
push edi
push ecx
mov eax, ebx
call fcn.10002040
mov eax, dword [ebp + 0x10]
cmp dword [ebp - 0x18], 0
jne 0x10003028
mov edx, dword [ebp - 0x14]
test dword [edx], eax
je 0x10003098
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov ecx, 1
mov dword [ebp - 0x18], ecx
jbe 0x1000300d
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x20]
lea esp, [esp]
cmp eax, 1
jne 0x10002ff8
dec edx
mov eax, 0x80000000
sub esi, 4
jmp 0x10002ffa
lea edi, [eax + 1]
jmp 0x10002f51
shr eax, 1
add ecx, ecx
test edx, edx
je 0x10003007
test dword [esi], eax
je 0x10003007
or ecx, 1
dec edi
jne 0x10002fe0
mov edi, dword [ebp - 0x28]
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x1000301e
test cl, 1
jne 0x1000301e
shr ecx, 1
dec esi
jne 0x10003014
mov eax, dword [ebp + 0x10]
shr ecx, 1
mov dword [ebp + 0x18], ecx
jmp 0x1000302d
test esi, esi
je 0x1000302d
dec esi
cmp esi, 1
jae 0x10003098
cmp dword [ebp - 0x10], 0
je 0x10003064
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + eax*4 - 0x228]
test ebx, ebx
je 0x1000305b
mov eax, edi
sub ecx, edi
mov edx, ebx
lea esp, [esp]
mov esi, dword [ecx + eax]
mov dword [eax], esi
add eax, 4
dec edx
jne 0x10003050
mov dword [ebp - 0x10], 0
jmp 0x10003090
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp + ecx*4 - 0x228]
mov esi, dword [ebp - 4]
push ebx
push edi
push edx
mov eax, esi
call fcn.10001e00
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
push eax
push ecx
push esi
push edi
push edx
mov eax, ebx
call fcn.10002040
mov eax, dword [ebp + 0x10]
xor esi, esi
mov dword [ebp - 0x18], esi
cmp eax, 1
jne 0x100030ab
dec dword [ebp + 0xc]
sub dword [ebp - 0x14], 4
mov eax, 0x80000000
jmp 0x100030ad
shr eax, 1
cmp dword [ebp + 0xc], 0
mov dword [ebp + 0x10], eax
jne 0x10002f82
cmp dword [ebp - 0x18], 0
je 0x10003119
cmp dword [ebp - 0x10], 0
je 0x100030ed
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + eax*4 - 0x228]
test ebx, ebx
je 0x1000312f
mov eax, edi
sub ecx, edi
mov edx, ebx
lea ebx, [ebx]
mov esi, dword [ecx + eax]
mov dword [eax], esi
add eax, 4
dec edx
jne 0x100030e0
jmp 0x10003119
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp + ecx*4 - 0x228]
mov esi, dword [ebp - 4]
push ebx
push edi
push edx
mov eax, esi
call fcn.10001e00
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
push eax
push ecx
push esi
push edi
push edx
mov eax, ebx
call fcn.10002040
test ebx, ebx
je 0x1000312f
mov eax, dword [ebp + 8]
mov ecx, edi
sub ecx, eax
mov edx, dword [ecx + eax]
mov dword [eax], edx
add eax, 4
dec ebx
jne 0x10003124
mov eax, dword [ebp - 8]
test eax, eax
je 0x10003140
dec eax
mov dword [edi + eax*4], 0
jne 0x10003136
mov eax, dword [edi]
mov ebx, dword [sym.imp.MSVCRT.dll_free]
mov dword [ebp + 0x14], eax
mov ecx, dword [ebp + 0x14]
push edi
call ebx
mov edi, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
add esp, 4
mov eax, edi
test edi, edi
je 0x1000316a
dec eax
mov dword [ecx + eax*4], 0
jne 0x10003160
mov edx, dword [ecx]
mov dword [ebp + 0x14], edx
mov eax, dword [ebp + 0x14]
push ecx
call ebx
mov ecx, dword [ebp - 4]
add esp, 4
mov eax, edi
test edi, edi
je 0x1000318b
dec eax
mov dword [ecx + eax*4], 0
jne 0x10003181
mov edx, dword [ecx]
mov dword [ebp + 0x14], edx
mov eax, dword [ebp + 0x14]
push ecx
call ebx
mov ecx, dword [ebp - 0xc]
add esp, 4
mov eax, edi
test edi, edi
je 0x100031ac
dec eax
mov dword [ecx + eax*4], 0
jne 0x100031a2
mov edx, dword [ecx]
mov dword [ebp + 0x14], edx
mov eax, dword [ebp + 0x14]
push ecx
call ebx
mov esi, 1
add esp, 4
cmp dword [ebp - 0x24], esi
jbe 0x10003209
mov ecx, dword [ebp + esi*4 - 0x228]
test ecx, ecx
je 0x100031e7
mov eax, edi
test edi, edi
je 0x100031df
dec eax
mov dword [ecx + eax*4], 0
jne 0x100031d5
mov ecx, dword [ecx]
mov dword [ebp + 0x14], ecx
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp + esi*4 - 0x228]
test eax, eax
je 0x10003203
push eax
call ebx
add esp, 4
mov dword [ebp + esi*4 - 0x228], 0
inc esi
cmp esi, dword [ebp - 0x24]
jb 0x100031c4
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x14