Function at 0x100342f0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1016b9d7
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x101d7c7c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0xa4], ebx
call fcn.1001acf0
mov edi, eax
test edi, edi
je 0x100346e5
push 0
push dword [ebx + 4]
lea ecx, [ebp - 0x94]
call fcn.1002e6e0
push dword [eax]
call fcn.1001ad20
push eax
push str.type
push edi
call fcn.1001a920
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x90]
add esp, 0x10
cmp eax, ecx
je 0x10034374
push eax
call fcn.1012fd0c
add esp, 4
push 0
push dword [ebx + 8]
lea ecx, [ebp - 0x94]
call fcn.1002e6e0
push dword [eax]
call fcn.1001ad20
push eax
push str.content
push edi
call fcn.1001a920
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x90]
add esp, 0x10
cmp eax, ecx
je 0x100343b3
push eax
call fcn.1012fd0c
add esp, 4
push 0
push dword [ebx + 0x1c]
lea ecx, [ebp - 0x94]
call fcn.1002e6e0
push dword [eax]
call fcn.1001ad20
push eax
push 0x10188498
push edi
call fcn.1001a920
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x90]
add esp, 0x10
cmp eax, ecx
je 0x100343f2
push eax
call fcn.1012fd0c
add esp, 4
push 0
push dword [ebx + 0x14]
lea ecx, [ebp - 0x94]
call fcn.1002e6e0
push dword [eax]
call fcn.1001ad20
push eax
push 0x1018848c
push edi
call fcn.1001a920
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x90]
add esp, 0x10
cmp eax, ecx
je 0x10034431
push eax
call fcn.1012fd0c
add esp, 4
push 0
push dword [ebx + 0x18]
lea ecx, [ebp - 0x94]
call fcn.1002e6e0
push dword [eax]
call fcn.1001ad20
push eax
push 0x1018849c
push edi
call fcn.1001a920
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x90]
add esp, 0x10
cmp eax, ecx
je 0x10034470
push eax
call fcn.1012fd0c
add esp, 4
push 0
push dword [ebx + 0x10]
lea ecx, [ebp - 0x94]
call fcn.1002e6e0
push dword [eax]
call fcn.1001ad20
push eax
push 0x101885d4
push edi
call fcn.1001a920
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x90]
add esp, 0x10
cmp eax, ecx
je 0x100344af
push eax
call fcn.1012fd0c
add esp, 4
push 0
push dword [ebx + 0xc]
lea ecx, [ebp - 0x94]
call fcn.1002e6e0
push dword [eax]
call fcn.1001ad20
push eax
push 0x101885dc
push edi
call fcn.1001a920
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x90]
add esp, 0x10
cmp eax, ecx
je 0x100344ee
push eax
call fcn.1012fd0c
add esp, 4
push 0x101886fc
call fcn.1001ad20
push eax
push str.askver
push edi
call fcn.1001a920
push edi
call fcn.1001b220
mov ebx, eax
add esp, 0x14
test ebx, ebx
je 0x100346dc
mov ecx, ebx
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034520
sub ecx, edx
je 0x100346dc
call fcn.1000cdc0
mov ecx, eax
test ecx, ecx
je 0x10034701
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x9c], eax
mov eax, str.9c2bfc39_1034_421b_999e_e55c69ab7a2c
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x9c]
test eax, 0xffff0000
jne 0x10034570
movzx eax, ax
push eax
call fcn.1000d750
jmp 0x1003457c
push 0x24
push str.9c2bfc39_1034_421b_999e_e55c69ab7a2c
call fcn.1000d900
mov dword [ebp - 4], 1
call fcn.1000cdc0
mov ecx, eax
test ecx, ecx
je 0x1003470b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x98], eax
mov byte [ebp - 4], 2
test ebx, 0xffff0000
jne 0x100345bd
movzx eax, bx
lea ecx, [ebp - 0x98]
push eax
call fcn.1000d750
jmp 0x10034638
push 0
push 0
push 0xffffffffffffffff
push ebx
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea esi, [eax - 1]
test esi, esi
jle 0x1003462d
mov ecx, dword [ebp - 0x98]
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, esi
or eax, edx
jge 0x100345fe
push esi
lea ecx, [ebp - 0x98]
call fcn.1000b250
mov ecx, dword [ebp - 0x98]
push esi
push ecx
push 0xffffffffffffffff
push ebx
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 0x98]
cmp esi, dword [eax - 8]
jg 0x10034715
mov dword [eax - 0xc], esi
xor ecx, ecx
mov eax, dword [ebp - 0x98]
mov word [eax + esi*2], cx
jmp 0x10034638
lea ecx, [ebp - 0x98]
call fcn.1001e440
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.100aec50
add esp, 0xc
mov ecx, dword [ebp - 0xa4]
push eax
add ecx, 0x20
mov byte [ebp - 4], 4
call fcn.1001ce50
mov edx, dword [ebp - 0xa0]
or esi, 0xffffffff
mov byte [ebp - 4], 3
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10034690
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x98]
mov eax, esi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100346b1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x100346d3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ebx
call fcn.1012fd0c
add esp, 4
push edi
call fcn.1001aeb0
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100acb08
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.1000ae00
push 0x80004005
call fcn.1000ae00
push 0x80070057
call fcn.1000ae00
int3