Function at 0x100ffee0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0xb0
call fcn.100857c0
mov eax, dword [0x1019b080]
xor eax, esp
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xd4]
push ebx
mov dword [esp + 0x68], eax
xor ebx, ebx
mov eax, dword [esp + 0xdc]
push ebp
mov ebp, dword [esp + 0xd0]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0xe4]
push esi
mov esi, dword [esp + 0xc8]
mov dword [esp + 0x20], eax
mov eax, esi
shr eax, 3
push edi
mov dword [esp + 0x54], ecx
xor edi, edi
mov dword [esp + 0x20], ebp
mov dword [esp + 0x38], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x60], eax
call fcn.100a88e0
mov dword [esp + 0x2c], eax
mov ecx, 2
mov dword [esp + 0x34], ecx
test eax, eax
je 0x10100763
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x100fffbd
cmp esi, 0xa0
jne 0x100fffa5
call fcn.100a8c40
jmp 0x100fffb9
cmp esi, 0xe0
jne 0x100fffb4
call fcn.100a8c50
jmp 0x100fffb9
call fcn.100a8c60
mov dword [esp + 0x18], eax
push eax
call fcn.100aee30
mov esi, eax
add esp, 4
mov eax, dword [esp + 0x54]
mov dword [esp + 0x30], esi
cmp dword [eax + 8], ebx
je 0x100fffe3
cmp dword [eax + 0xc], ebx
je 0x100fffe3
cmp dword [esp + 0xdc], ebx
jl 0x10100043
test ebp, ebp
push 0x152
cmove ebp, esi
push 0x101896f4
push ebp
mov dword [esp + 0x2c], ebp
call fcn.10086550
mov ebx, eax
add esp, 0xc
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x1010001c
push 0x157
push 0x101896f4
push ebp
call fcn.10086550
add esp, 0xc
mov dword [esp + 0x38], eax
test ebx, ebx
je 0x10100763
test eax, eax
je 0x10100763
mov eax, dword [esp + 0x40]
test eax, eax
je 0x10100043
push ebp
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
call fcn.100c0320
mov ebp, eax
mov dword [esp + 0x10], ebp
test ebp, ebp
je 0x10100765
call fcn.100b9a00
mov dword [esp + 0x44], eax
test eax, eax
je 0x10100765
push ebp
call fcn.100c0390
push ebp
call fcn.100c02c0
push dword [esp + 0x18]
mov ebp, eax
call fcn.100c02c0
push dword [esp + 0x1c]
mov dword [esp + 0x68], eax
call fcn.100c02c0
push dword [esp + 0x20]
mov dword [esp + 0x60], eax
call fcn.100c02c0
push dword [esp + 0x24]
mov dword [esp + 0x88], eax
call fcn.100c02c0
push dword [esp + 0x28]
mov dword [esp + 0x58], eax
call fcn.100c02c0
add esp, 0x1c
mov dword [esp + 0x14], eax
test eax, eax
je 0x10100528
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x10100101
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x28], eax
test eax, eax
je 0x10100101
cmp dword [esp + 0xdc], edi
jl 0x101004d7
push dword [esp + 0x20]
push ebx
push dword [esp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
jmp 0x101004d7
mov esi, dword [esp + 0x10]
push esi
call fcn.100c02c0
push esi
mov dword [esp + 0x24], eax
call fcn.100c02c0
mov dword [esp + 0x30], eax
add esp, 8
mov eax, dword [esp + 0xc8]
dec eax
mov dword [esp + 0x6c], eax
push eax
call fcn.10098a70
push eax
push dword [esp + 0x1c]
call fcn.100b8ff0
add esp, 0xc
test eax, eax
je 0x10100528
mov esi, dword [esp + 0x40]
nop word [eax + eax]
mov edi, dword [esp + 0x20]
push dword [esp + 0x48]
push 0
push dword [esp + 0x2c]
call fcn.100e7fd0
inc dword [esp + 0x54]
add esp, 0xc
test eax, eax
je 0x10100528
test esi, esi
jne 0x10100188
push edi
push ebx
call fcn.10090110
add esp, 8
test eax, eax
jle 0x10100528
push 0
push dword [esp + 0x1c]
lea eax, [esp + 0x84]
push 0
push eax
push edi
push ebx
call fcn.100a83f0
add esp, 0x18
test eax, eax
je 0x10100528
mov ecx, dword [esp + 0x30]
lea esi, [esp + 0x7c]
mov edx, dword [esp + 0x60]
cmp ecx, edx
jle 0x101001c2
mov eax, ecx
sub eax, edx
add esi, eax
cmp ecx, edx
jge 0x101001e1
mov eax, edx
sub eax, ecx
push eax
lea eax, [esp + 0x80]
add eax, ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x6c]
add esp, 0xc
push dword [esp + 0x28]
or byte [esi], 0x80
or byte [esi + edx - 1], 1
push edx
push esi
call fcn.10097ee0
add esp, 0xc
test eax, eax
je 0x10100528
push dword [esp + 0x24]
mov esi, dword [esp + 0x44]
xor eax, eax
test esi, esi
setne al
push eax
push dword [esp + 0x18]
push 0x32
push dword [esp + 0x38]
call fcn.100e82d0
add esp, 0x14
test eax, eax
jg 0x10100256
jne 0x10100528
test esi, esi
je 0x10100154
push 0x1a6
push 0x101896f4
push 0x71
push 0x7e
push 0xa
xor esi, esi
call fcn.10092a20
mov ebp, dword [esp + 0x24]
add esp, 0x14
jmp 0x10100768
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x10100269
push edi
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov esi, dword [esp + 0x24]
push 0
push 2
push esi
call fcn.100e7fd0
add esp, 0xc
test eax, eax
je 0x10100528
push 0
push 3
push esi
call fcn.100e7fd0
add esp, 0xc
test eax, eax
je 0x10100528
mov ecx, dword [esp + 0x30]
xor edi, edi
mov eax, dword [esp + 0xc8]
xor edx, edx
shl ecx, 3
dec eax
div ecx
mov dword [esp + 0x50], edi
mov esi, eax
mov dword [esp + 0x64], esi
test edi, edi
je 0x101002d1
push edi
push 0
push dword [esp + 0x2c]
call fcn.100e7fd0
add esp, 0xc
test eax, eax
je 0x10100528
push 0
push dword [esp + 0x50]
call fcn.100989c0
add esp, 8
xor edi, edi
test esi, esi
js 0x10100398
mov ecx, dword [esp + 0x20]
xor esi, esi
lea eax, [ecx - 1]
mov dword [esp + 0x68], eax
test eax, eax
js 0x1010030b
nop word [eax + eax]
add byte [eax + ebx], 1
jne 0x1010030b
sub eax, 1
jns 0x10100300
push 0
push dword [esp + 0x1c]
lea eax, [esp + 0x84]
push 0
push eax
push ecx
push ebx
call fcn.100a83f0
add esp, 0x18
test eax, eax
je 0x10100528
push ebp
push dword [esp + 0x34]
lea eax, [esp + 0x84]
push eax
call fcn.10097ee0
add esp, 0xc
test eax, eax
je 0x10100528
push esi
push ebp
push ebp
call fcn.100b8ff0
add esp, 0xc
test eax, eax
je 0x10100528
mov eax, dword [esp + 0x4c]
push ebp
push eax
push eax
call fcn.100c38d0
add esp, 0xc
test eax, eax
je 0x10100528
mov ecx, dword [esp + 0x30]
inc edi
lea eax, [ecx*8]
mov ecx, dword [esp + 0x20]
add esi, eax
mov eax, dword [esp + 0x68]
cmp edi, dword [esp + 0x64]
jle 0x101002f6
mov esi, dword [esp + 0x64]
push dword [esp + 0x6c]
mov edi, dword [esp + 0x50]
push edi
call fcn.100986e0
add esp, 8
test eax, eax
je 0x10100528
push edi
mov edi, dword [esp + 0x74]
push edi
call fcn.10098400
add esp, 8
test eax, eax
je 0x10100528
push dword [esp + 0x14]
push edi
push edi
call fcn.100c38d0
add esp, 0xc
test eax, eax
je 0x10100528
push dword [esp + 0x28]
push ebp
call fcn.100b9120
add esp, 8
test eax, eax
je 0x10100528
push dword [esp + 0x10]
push ebp
push edi
push dword [esp + 0x48]
push 0
call fcn.100c4750
add esp, 0x14
test eax, eax
je 0x10100528
call fcn.10098a70
push eax
push dword [esp + 0x40]
push ebp
call fcn.100c3960
add esp, 0xc
test eax, eax
je 0x10100528
push ebp
push edi
mov edi, dword [esp + 0x24]
push edi
call fcn.100c3960
add esp, 0xc
test eax, eax
je 0x10100528
push dword [esp + 0x14]
push edi
call fcn.100980f0
add esp, 8
test eax, eax
js 0x10100474
mov edi, dword [esp + 0x24]
push edi
push 1
push dword [esp + 0x18]
push 0x32
push dword [esp + 0x2c]
call fcn.100e82d0
add esp, 0x14
test eax, eax
jg 0x101004be
jne 0x10100528
mov edi, dword [esp + 0x50]
mov eax, dword [esp + 0xc8]
inc edi
shl eax, 2
mov dword [esp + 0x50], edi
cmp edi, eax
jl 0x101002b6
mov esi, dword [esp + 0x40]
test esi, esi
je 0x10100150
push 0x1ff
push 0x101896f4
push 0x70
push 0x7e
push 0xa
xor esi, esi
call fcn.10092a20
mov ebp, dword [esp + 0x24]
add esp, 0x14
jmp 0x10100768
push 1
push 2
push edi
call fcn.100e7fd0
add esp, 0xc
test eax, eax
je 0x10100528
mov edi, dword [esp + 0x50]
mov esi, dword [esp + 0x30]
call fcn.10098a70
push eax
push dword [esp + 0x20]
push dword [esp + 0x1c]
call fcn.100c3960
add esp, 0xc
test eax, eax
je 0x10100528
push dword [esp + 0x10]
push dword [esp + 0x2c]
push dword [esp + 0x1c]
push 0
push ebp
call fcn.100c4750
add esp, 0x14
test eax, eax
je 0x10100528
cmp dword [esp + 0xdc], 0
jge 0x10100531
push 2
push dword [esp + 0x18]
call fcn.100989c0
add esp, 8
test eax, eax
jne 0x1010053a
mov ebp, dword [esp + 0x10]
jmp 0x10100765
mov ecx, 1
mov dword [esp + 0x34], ecx
push dword [esp + 0x10]
push dword [esp + 0x20]
push dword [esp + 0x4c]
call fcn.100b9a60
add esp, 0xc
test eax, eax
je 0x10100528
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0xdc]
nop dword [eax]
test eax, eax
js 0x10100628
push 0
push dword [esp + 0x1c]
mov byte [esp + 0x84], al
mov eax, ecx
push dword [esp + 0x34]
shr eax, 8
mov byte [esp + 0x89], al
mov byte [esp + 0x8a], cl
call fcn.100a8550
add esp, 0xc
test eax, eax
je 0x10100528
push dword [esp + 0x20]
push dword [esp + 0x3c]
push dword [esp + 0x34]
call fcn.100a8700
add esp, 0xc
test eax, eax
je 0x10100528
push 4
push str.ggencryptodsadsa_gen.c
push dword [esp + 0x34]
call fcn.100a8700
add esp, 0xc
test eax, eax
je 0x10100528
push 3
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x34]
call fcn.100a8700
add esp, 0xc
test eax, eax
je 0x10100528
push 0
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x34]
call fcn.100a84b0
add esp, 0xc
test eax, eax
je 0x10100528
push dword [esp + 0x14]
lea eax, [esp + 0x80]
push esi
push eax
call fcn.10097ee0
add esp, 0xc
test eax, eax
je 0x10100528
push dword [esp + 0x44]
push dword [esp + 0x14]
push dword [esp + 0x24]
push ebp
push dword [esp + 0x24]
push dword [esp + 0x6c]
call fcn.100c1960
add esp, 0x18
test eax, eax
je 0x10100528
push dword [esp + 0x58]
call fcn.10098680
add esp, 4
test eax, eax
je 0x101006ad
mov eax, dword [esp + 0xdc]
test eax, eax
jns 0x1010068b
call fcn.10098a70
push eax
mov eax, dword [esp + 0x18]
push eax
push eax
call fcn.100c38d0
add esp, 0xc
test eax, eax
je 0x10100528
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x34]
inc ecx
mov dword [esp + 0x34], ecx
test eax, eax
js 0x10100628
cmp ecx, 0xffff
jbe 0x10100560
mov ebp, dword [esp + 0x10]
jmp 0x10100765
push 1
push 3
push dword [esp + 0x2c]
call fcn.100e7fd0
add esp, 0xc
test eax, eax
je 0x10100528
mov dword [esp + 0x3c], 1
nop dword [eax]
mov esi, dword [esp + 0x54]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esi + 8]
cmp ebp, eax
je 0x101006f1
push eax
call fcn.10098570
push ebp
call fcn.100984e0
add esp, 8
mov dword [esi + 8], eax
mov eax, dword [esi + 0xc]
mov ebp, dword [esp + 0x28]
cmp ebp, eax
je 0x1010070e
push eax
call fcn.10098570
push ebp
call fcn.100984e0
add esp, 8
mov dword [esi + 0xc], eax
push dword [esi + 0x10]
call fcn.10098570
push dword [esp + 0x5c]
call fcn.100984e0
add esp, 8
mov dword [esi + 0x10], eax
cmp dword [esi + 8], 0
je 0x10100528
cmp dword [esi + 0xc], 0
je 0x10100528
test eax, eax
je 0x10100528
mov eax, dword [esp + 0x74]
test eax, eax
je 0x1010074b
mov dword [eax], edi
mov eax, dword [esp + 0x78]
mov ebp, dword [esp + 0x10]
mov esi, dword [esp + 0x3c]
test eax, eax
je 0x10100768
mov ecx, dword [esp + 0x34]
mov dword [eax], ecx
jmp 0x10100768
xor ebp, ebp
or esi, 0xffffffff
push 0x250
push 0x101896f4
push ebx
call fcn.10086580
mov eax, dword [esp + 0x44]
add esp, 0xc
cmp dword [esp + 0x5c], eax
je 0x10100798
push 0x252
push 0x101896f4
push eax
call fcn.10086580
add esp, 0xc
test ebp, ebp
je 0x101007a5
push ebp
call fcn.100c0240
add esp, 4
push ebp
call fcn.100c0280
push dword [esp + 0x48]
call fcn.100b99b0
push dword [esp + 0x34]
call fcn.100a88c0
mov ecx, dword [esp + 0xc8]
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10084980
add esp, 0xb0
ret