Function at 0x1013ff30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x150
mov dword [esp + 0x90], 0x104372c0
mov dword [esp + 0x94], 1
mov dword [esp + 0xa0], 0
mov dword [esp + 0x98], 0x10387964
mov dword [esp + 0x9c], 0
lea edi, [esp + 0x90]
push edi
call fcn.100748a0
add esp, 4
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x1013ffaa
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1013ffb8
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push 0xe
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
jne 0x1013ffc9
push 0xe
push 1
call fcn.1001ac80
add esp, 8
jmp 0x10140c4c
mov word [eax + 0xc], 0x2f73
mov dword [eax + 8], 0x656d756c
mov dword [eax + 4], 0x6f762f73
mov dword [eax], 0x666d762f
mov dword [esp + 0x134], eax
mov eax, dword [0x1044f00c]
mov dword [esp + 0x138], 0xe
mov dword [esp + 0x13c], 0xe
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x10140024
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10140035
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push pe_nt_image_headers32
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
jne 0x10140049
push pe_nt_image_headers32
push 1
call fcn.1001ac80
add esp, 8
jmp 0x10140c4c
mov esi, eax
push pe_nt_image_headers32
push str.Provide_vCenter_or_ESXi_credentials._Drag_and_drop_file_or_enter_manually_in_format_host:user:pass_on_new_line_each__required_:__INFOSPREAD__vCenter_credentials_parsed:
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], pe_nt_image_headers32
mov dword [esp + 0x98], pe_nt_image_headers32
lea eax, [esp + 0x140]
push 1
push edi
push eax
call fcn.10196d20
add esp, 0xc
cmp dword [esp + 0x140], 0
jne 0x101400e7
mov dword [esp + 0x90], str._FATALSPREAD__At_least_one_vCenter_is_required_to_continue_
mov dword [esp + 0x94], 1
mov dword [esp + 0xa0], 0
mov dword [esp + 0x98], 0x10387964
mov dword [esp + 0x9c], 0
push edi
call fcn.100748a0
add esp, 4
push 1
call fcn.1016d750
add esp, 4
jmp 0x10140c4c
movsd xmm0, qword [esp + 0x140]
mov eax, dword [esp + 0x148]
mov dword [esp + 0x1c], 4
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0xe8], 0xa
mov dword [esp], 0
mov dword [esp + 8], 4
movsd qword [esp + 0x110], xmm0
mov dword [esp + 0x118], eax
mov ecx, dword [esp + 0x110]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], eax
mov dword [esp + 0xfc], 1
mov dword [esp + 0x100], 0xa
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], eax
mov dword [esp + 0x130], ecx
mov word [esp + 0x10c], 0
nop dword [eax]
lea ecx, [esp + 0xe8]
call fcn.101373d0
test eax, eax
je 0x1014049c
mov esi, edx
push 1
push 0x1038789f
push edx
push eax
lea eax, [esp + 0x38]
push eax
call fcn.1002b3c0
add esp, 0x14
movsd xmm1, qword [esp + 0x58]
movsd xmm2, qword [esp + 0x50]
movsd xmm0, qword [esp + 0x60]
movsd qword [esp + 0xc0], xmm1
movsd xmm1, qword [esp + 0x48]
movsd qword [esp + 0xb8], xmm2
movsd xmm2, qword [esp + 0x40]
movsd qword [esp + 0xc8], xmm0
movsd qword [esp + 0xb0], xmm1
movsd xmm1, qword [esp + 0x38]
movsd qword [esp + 0xa8], xmm2
movsd xmm2, qword [esp + 0x28]
movsd qword [esp + 0xa0], xmm1
movsd xmm1, qword [esp + 0x30]
movsd qword [esp + 0x90], xmm2
movsd qword [esp + 0x98], xmm1
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], esi
mov word [esp + 0xd8], 1
mov dword [esp + 0xe0], 3
lea ecx, [esp + 0x70]
lea edx, [esp + 0x90]
call fcn.1013fa60
cmp dword [esp + 0x78], 2
jbe 0x10140539
mov eax, dword [esp + 0x70]
mov esi, 1
mov ebx, 1
mov edi, dword [eax + 4]
mov ecx, dword [eax]
mov dword [esp + 4], eax
test edi, edi
mov dword [esp + 0xc], ecx
je 0x101402e6
js 0x101405de
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x101402d3
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x101405ae
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov ebx, eax
test eax, eax
je 0x101405ae
push edi
push dword [esp + 0x10]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 4]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], edi
mov edi, dword [eax + 0xc]
mov ebx, dword [eax + 8]
test edi, edi
je 0x10140358
js 0x101405e8
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x10140345
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x101405be
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
je 0x101405be
push edi
push ebx
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 4]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edi
mov ebx, dword [eax + 0x14]
mov edi, dword [eax + 0x10]
test ebx, ebx
je 0x101403c0
js 0x101405f2
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov eax, dword [0x1044eff8]
mov eax, dword [eax]
test eax, eax
jne 0x101403ab
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x101405ce
mov ecx, dword [0x1044eff8]
mov dword [ecx], eax
push ebx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x101403c5
jmp 0x101405ce
mov esi, 1
push ebx
push edi
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
movsd xmm0, qword [esp + 0x80]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x34]
movsd qword [esp + 0x28], xmm0
mov dword [esp + 0x30], eax
mov dword [ecx + 8], edx
mov edx, dword [esp]
movsd xmm0, qword [esp + 0x10]
cmp edx, dword [esp + 0x20]
movsd qword [ecx], xmm0
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
jne 0x10140430
lea ecx, [esp + 0x1c]
call fcn.1013e460
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x24]
jmp 0x10140434
mov esi, dword [esp + 8]
mov ecx, dword [esp + 0x48]
lea eax, [edx + edx*8]
inc edx
mov dword [esp + 8], esi
mov dword [esp], edx
mov dword [esi + eax*4 + 0x20], ecx
movsd xmm0, qword [esp + 0x40]
movsd qword [esi + eax*4 + 0x18], xmm0
movsd xmm0, qword [esp + 0x38]
movsd qword [esi + eax*4 + 0x10], xmm0
movsd xmm0, qword [esp + 0x28]
movsd xmm1, qword [esp + 0x30]
movsd qword [esi + eax*4 + 8], xmm1
movsd qword [esi + eax*4], xmm0
mov dword [esp + 0x24], edx
cmp dword [esp + 0x74], 0
je 0x101401a0
push dword [esp + 4]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
jmp 0x101401a0
movsd xmm0, qword [esp + 0x1c]
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x114], 0
movsd qword [esp + 0xe8], xmm0
mov dword [esp + 0xf0], eax
je 0x101404d5
push dword [esp + 0x130]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0xf0], 0
jne 0x101405fc
mov dword [esp + 0x90], str._FATALSPREAD__At_least_one_vCenter_is_required_to_continue_
mov dword [esp + 0x94], 1
mov dword [esp + 0xa0], 0
mov dword [esp + 0x98], 0x10387964
mov dword [esp + 0x9c], 0
lea eax, [esp + 0x90]
push eax
call fcn.100748a0
add esp, 4
push 1
call fcn.1016d750
add esp, 4
jmp 0x10140c4c
mov dword [esp + 0x28], str._FATALSPREAD__Credentials_are_in_wrong_format_
mov dword [esp + 0x2c], 1
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0x10387964
mov dword [esp + 0x34], 0
lea esi, [esp + 0x28]
push esi
call fcn.100748a0
add esp, 4
mov dword [esp + 0x28], 0x104376b4
mov dword [esp + 0x2c], 1
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0x10387964
mov dword [esp + 0x34], 0
push esi
call fcn.100748a0
add esp, 4
push 1
call fcn.1016d750
add esp, 4
jmp 0x10140c4c
push edi
push 1
call fcn.1001ac80
add esp, 8
jmp 0x10140c4c
push edi
push 1
call fcn.1001ac80
add esp, 8
jmp 0x10140c4c
push ebx
push 1
call fcn.1001ac80
add esp, 8
jmp 0x10140c4c
call fcn.1001ac40
jmp 0x10140c4c
call fcn.1001ac40
jmp 0x10140c4c
call fcn.1001ac40
jmp 0x10140c4c
lea ebx, [esp + 0x90]
lea edi, [esp + 0xe8]
mov ecx, ebx
mov edx, edi
call fcn.10137ac0
mov eax, dword [esp + 0x90]
test eax, eax
jne 0x1014064b
mov eax, dword [esp + 0x94]
mov dword [esp + 0x90], eax
push 0x104375e0
push 0x10388120
push ebx
push 0x2b
push 0x103880e4
call fcn.10027650
add esp, 0x14
jmp 0x10140c4c
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
mov dword [esp + 0x90], 0x104375d8
mov dword [esp + 0x94], 1
mov dword [esp + 0xa0], 0
mov dword [esp + 0x10], eax
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0x1013e980
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], 1
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], edx
push ebx
call fcn.100748a0
add esp, 4
cmp dword [esp + 0x2c], 0
je 0x101406ce
push dword [esp + 0x28]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [esp + 0xf0]
movsd xmm0, qword [esp + 0xe8]
movsd qword [esp + 0x120], xmm0
mov dword [esp + 0x128], eax
push dword [ebp + 8]
lea eax, [esp + 0x20]
push eax
call fcn.1001bce0
add esp, 8
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
push 1
push 0x4c
call fcn.10001510
add esp, 8
test eax, eax
jne 0x10140727
push 0x4c
push 1
call fcn.1001ac80
add esp, 8
jmp 0x10140c4c
mov esi, eax
push 0x4c
push str.Enter_path_to_ESXi_binary._Drag_and_drop_file_or_enter_manually__required_:_Binary_path_set:__n
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], 0x4c
mov dword [esp + 0x98], 0x4c
push 1
push ebx
push edi
call fcn.101970a0
add esp, 0xc
cmp dword [esp + 0xe8], 0
jne 0x101407bb
mov dword [esp + 0x90], str._FATALSPREAD__ESXi_binary_is_required_
mov dword [esp + 0x94], 1
mov dword [esp + 0xa0], 0
mov dword [esp + 0x98], 0x10387964
mov dword [esp + 0x9c], 0
push ebx
call fcn.100748a0
add esp, 4
push 1
call fcn.1016d750
add esp, 4
jmp 0x10140c4c
mov eax, dword [esp + 0xf0]
movsd xmm0, qword [esp + 0xe8]
lea edx, [esp + 0x28]
lea ecx, [esp + 0x10]
mov dword [esp + 0x90], 0x1043771c
mov dword [esp + 0x94], 2
mov dword [esp + 0xa0], 0
mov dword [esp + 0x10], edx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x14], 0x1013e980
mov dword [esp + 0x9c], 1
mov dword [esp + 0x30], eax
movsd qword [esp + 0x28], xmm0
push ebx
call fcn.10168190
add esp, 4
mov eax, dword [esp + 0x30]
movsd xmm0, qword [esp + 0x28]
movsd qword [esp + 0x70], xmm0
mov dword [esp + 0x78], eax
push eax
push dword [esp + 0x74]
push ebx
call fcn.10176d80
add esp, 0xc
mov eax, dword [esp + 0x90]
mov esi, dword [esp + 0x98]
push esi
mov dword [esp + 8], eax
push eax
call fcn.1016c3e0
add esp, 8
mov ecx, 0x104374ec
test eax, eax
jne 0x10140881
push ecx
push 0x2b
push 0x10387abc
call fcn.10027330
add esp, 0xc
jmp 0x10140c4c
push edx
push eax
lea eax, [esp + 0x30]
push eax
call fcn.1002ad90
add esp, 0xc
cmp dword [esp + 0x28], 0
mov ecx, 0x104374fc
jne 0x1014086c
mov eax, dword [esp + 0x2c]
test eax, eax
mov dword [esp + 0xc], eax
je 0x1014086c
mov eax, dword [esp + 0x30]
mov ecx, 1
test eax, eax
mov dword [esp], eax
jne 0x10140913
push dword [esp]
push dword [esp + 0x10]
mov dword [esp + 0x10], ecx
push ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 8]
mov dword [esp + 0xe8], eax
mov eax, dword [esp]
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], eax
push esi
push dword [esp + 8]
call fcn.1016c510
add esp, 8
mov ecx, 0x1043750c
test eax, eax
jne 0x1014095c
push ecx
push 0x2b
push 0x10387abc
call fcn.10027330
add esp, 0xc
jmp 0x10140c4c
setns al
js 0x10140952
movzx ecx, al
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov dword [esp + 8], ecx
push ecx
push dword [esp + 4]
call fcn.10001510
add esp, 8
mov ecx, eax
test eax, eax
jne 0x101408b8
push dword [esp]
push dword [esp + 0xc]
call fcn.1001ac80
add esp, 8
jmp 0x10140c4c
call fcn.1001ac40
jmp 0x10140c4c
push edx
push eax
lea eax, [esp + 0x30]
push eax
call fcn.1002ad90
add esp, 0xc
cmp dword [esp + 0x28], 0
mov ecx, 0x1043751c
jne 0x101408fe
mov esi, dword [esp + 0x2c]
test esi, esi
je 0x101408fe
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], 1
test eax, eax
mov dword [esp], eax
je 0x101409d7
setns al
js 0x10140bd4
movzx ecx, al
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov dword [esp + 8], ecx
push ecx
push dword [esp + 4]
call fcn.10001510
add esp, 8
test eax, eax
mov dword [esp + 0xc], eax
jne 0x101409d7
push dword [esp]
push dword [esp + 0xc]
call fcn.1001ac80
add esp, 8
jmp 0x10140c4c
push dword [esp]
push esi
push dword [esp + 0x14]
call sub.msvcrt.dll_memcpy
add esp, 0xc
movsd xmm0, qword [esp + 0xe8]
mov eax, dword [esp + 0xf0]
cmp dword [esp + 0x94], 0
movsd qword [esp + 0x28], xmm0
mov dword [esp + 0x30], eax
je 0x10140a1d
push dword [esp + 4]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov esi, dword [esp + 0xc]
mov ecx, dword [esp]
movsd xmm0, qword [esp + 0x28]
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], ecx
mov ecx, dword [ebp + 8]
movsd qword [esp + 0x80], xmm0
mov esi, dword [esp + 0x13c]
mov dword [esp + 0x88], eax
movsd xmm0, qword [ecx]
mov edi, dword [ecx + 8]
mov dword [esp + 0x98], esi
movsd qword [esp + 0x28], xmm0
movsd xmm0, qword [esp + 0x134]
mov dword [esp + 0x30], edi
movsd qword [esp + 0x90], xmm0
lea edx, [esp + 0x28]
lea ecx, [esp + 0xe8]
push ebx
call fcn.10142670
add esp, 4
movsd xmm0, qword [esp + 0x120]
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x78]
mov dword [esp + 0x90], 0x10437300
mov dword [esp + 0x94], 1
mov dword [esp + 0xa0], 0
mov dword [esp + 0x98], 0x10387964
mov dword [esp + 0x9c], 0
movsd qword [esp + 0x28], xmm0
movsd xmm0, qword [esp + 0x1c]
mov dword [esp + 0x30], eax
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x88]
movsd qword [esp + 0x34], xmm0
movsd xmm0, qword [esp + 0x70]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x18]
movsd qword [esp + 0x40], xmm0
movsd xmm0, qword [esp + 0x80]
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0xf0]
movsd qword [esp + 0x4c], xmm0
movsd xmm0, qword [esp + 0x10]
mov dword [esp + 0x60], edx
movsd qword [esp + 0x58], xmm0
movsd xmm0, qword [esp + 0xe8]
mov dword [esp + 0x6c], ecx
movsd qword [esp + 0x64], xmm0
push ebx
call fcn.100748a0
add esp, 4
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
call fcn.101425b0
test al, al
je 0x10140bdb
lea ebx, [esp + 0x90]
lea esi, [esp + 0x28]
mov ecx, 0x12
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
call fcn.10140dd0
mov dword [esp + 0x90], 0x1043733c
mov dword [esp + 0x94], 1
mov dword [esp + 0xa0], 0
mov dword [esp + 0x98], 0x10387964
mov dword [esp + 0x9c], 0
push ebx
call fcn.100748a0
add esp, 4
push 0
call fcn.1016d750
add esp, 4
ud2
call fcn.1001ac40
jmp 0x10140c4c
lea eax, [esp + 0x40]
lea edx, [esp + 0x140]
lea ecx, [esp + 0x110]
mov dword [esp + 0x90], 0x10437378
mov dword [esp + 0x94], 1
mov dword [esp + 0xa0], 0
mov dword [esp + 0x110], edx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x140], eax
mov dword [esp + 0x114], 0x1013ad70
mov dword [esp + 0x9c], 1
push ebx
call fcn.100748a0
add esp, 4
push 1
call fcn.1016d750
add esp, 4
ud2