Function at 0x1006eb0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
mov dword [ebp - 4], 1
cmp dword [ebp + 8], 0
je 0x1006ed0
mov eax, dword [ebp + 8]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x1006eda
mov eax, 1
jmp 0x1007739
mov edx, dword [ebp + 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x10076e9
cmp dword [ebp - 4], 0
je 0x10076e9
mov edx, dword [ebp - 8]
mov dword [ebp - 0x124], edx
mov eax, dword [ebp - 0x124]
movsx ecx, byte [eax]
cmp ecx, 0x20
je 0x1006f55
mov edx, dword [ebp - 0x124]
movsx eax, byte [edx]
cmp eax, 9
je 0x1006f55
mov ecx, dword [ebp - 0x124]
movsx edx, byte [ecx]
cmp edx, 0xd
je 0x1006f55
mov eax, dword [ebp - 0x124]
movsx ecx, byte [eax]
cmp ecx, 0xa
je 0x1006f55
mov edx, dword [ebp - 0x124]
movsx eax, byte [edx]
cmp eax, 0xb
je 0x1006f55
mov ecx, dword [ebp - 0x124]
movsx edx, byte [ecx]
cmp edx, 0xc
jne 0x1006f6a
mov eax, dword [ebp - 0x124]
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [ebp - 0x124], eax
jmp 0x1006f01
mov ecx, dword [ebp - 0x124]
movsx edx, byte [ecx]
test edx, edx
jne 0x1006f7c
jmp 0x10076e9
mov eax, dword [ebp - 0x124]
mov dword [ebp - 8], eax
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0xc], 0
mov ecx, dword [ebp - 8]
movsx edx, byte [ecx]
test edx, edx
je 0x10070bd
cmp dword [ebp - 0x118], 0
jne 0x1006ff9
mov eax, dword [ebp - 8]
movsx ecx, byte [eax]
cmp ecx, 0x20
je 0x1006ff9
mov edx, dword [ebp - 8]
movsx eax, byte [edx]
cmp eax, 9
je 0x1006ff9
mov ecx, dword [ebp - 8]
movsx edx, byte [ecx]
cmp edx, 0xd
je 0x1006ff9
mov eax, dword [ebp - 8]
movsx ecx, byte [eax]
cmp ecx, 0xa
je 0x1006ff9
mov edx, dword [ebp - 8]
movsx eax, byte [edx]
cmp eax, 0xb
je 0x1006ff9
mov ecx, dword [ebp - 8]
movsx edx, byte [ecx]
cmp edx, 0xc
jne 0x1007010
cmp dword [ebp - 0x118], 0
je 0x10070bd
cmp dword [ebp - 0xc], 0
jne 0x10070bd
mov eax, dword [ebp - 8]
movsx ecx, byte [eax]
cmp ecx, 0x22
jne 0x100708e
mov edx, dword [ebp - 8]
mov al, byte [edx + 1]
mov byte [ebp - 0x12c], al
cmp byte [ebp - 0x12c], 0x22
je 0x1007032
jmp 0x1007067
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 8]
mov al, byte [edx]
mov byte [ebp + ecx - 0x114], al
mov ecx, dword [ebp - 0x11c]
add ecx, 1
mov dword [ebp - 0x11c], ecx
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x100708c
cmp dword [ebp - 0x118], 0
jne 0x100707c
mov dword [ebp - 0x118], 1
jmp 0x1007083
mov dword [ebp - 0xc], 1
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
jmp 0x10070b8
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 8]
mov cl, byte [eax]
mov byte [ebp + edx - 0x114], cl
mov edx, dword [ebp - 0x11c]
add edx, 1
mov dword [ebp - 0x11c], edx
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x1006fa0
mov ecx, dword [ebp - 0x11c]
mov byte [ebp + ecx - 0x114], 0
cmp dword [ebp - 0x118], 0
je 0x10070da
cmp dword [ebp - 0xc], 0
jne 0x10070e9
cmp dword [ebp - 0x118], 0
jne 0x10070eb
cmp dword [ebp - 0xc], 0
jne 0x10070eb
jmp 0x10070f7
mov dword [ebp - 4], 0
jmp 0x10076e9
movsx edx, byte [ebp - 0x114]
cmp edx, 0x2f
je 0x1007116
movsx eax, byte [ebp - 0x114]
cmp eax, 0x2d
je 0x1007116
xor eax, eax
jmp 0x1007739
movsx ecx, byte [ebp - 0x113]
push ecx
call dword [sym.imp.USER32.dll_CharUpperA]
movsx edx, al
mov dword [ebp - 0x130], edx
mov eax, dword [ebp - 0x130]
sub eax, 0x3f
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x15
ja case.0x1007157.7
mov edx, dword [ebp - 0x130]
xor ecx, ecx
mov cl, byte [edx + 0x100775f]
jmp dword [ecx*4 + 0x100773f]
movsx eax, byte [ebp - 0x112]
test eax, eax
jne 0x1007174
mov word [0x100dab8], 2
jmp 0x10071d7
movsx ecx, byte [ebp - 0x112]
cmp ecx, 0x3a
jne 0x10071d0
movsx edx, byte [ebp - 0x111]
push edx
call dword [sym.imp.USER32.dll_CharUpperA]
mov byte [ebp - 0x134], al
cmp byte [ebp - 0x134], 0x31
je 0x10071b1
cmp byte [ebp - 0x134], 0x41
je 0x10071bc
cmp byte [ebp - 0x134], 0x55
je 0x10071b1
jmp 0x10071c7
mov word [0x100dab8], 2
jmp 0x10071ce
mov word [0x100dab8], 1
jmp 0x10071ce
mov dword [ebp - 4], 0
jmp 0x10071d7
mov dword [ebp - 4], 0
jmp 0x10076e4
movsx eax, byte [ebp - 0x112]
cmp eax, 0x3a
jne 0x1007309
movsx ecx, byte [ebp - 0x111]
cmp ecx, 0x22
jne 0x1007204
mov dword [ebp - 0x11c], 4
jmp 0x100720e
mov dword [ebp - 0x11c], 3
mov edx, dword [ebp - 0x11c]
lea eax, [ebp + edx - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jne 0x1007232
mov dword [ebp - 4], 0
jmp 0x10076e4
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x120], ecx
lea edx, [ebp - 0x120]
push edx
mov eax, dword [ebp - 0x11c]
lea ecx, [ebp + eax - 0x114]
push ecx
call fcn.01006d60
test eax, eax
jne 0x1007268
mov dword [ebp - 4], 0
jmp 0x10076e4
movsx edx, byte [ebp - 0x113]
push edx
call dword [sym.imp.USER32.dll_CharUpperA]
movsx eax, al
cmp eax, 0x54
jne 0x10072b8
mov ecx, dword [ebp - 0x11c]
add ecx, dword [ebp - 0x120]
lea edx, [ebp + ecx - 0x114]
push edx
push 0x100dbbe
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x10012a8
push 0x100dbbe
call fcn.01007d60
mov dword [ebp - 0x128], 0x100dbbe
jmp 0x10072f0
mov eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x120]
lea ecx, [ebp + eax - 0x114]
push ecx
push 0x100daba
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x10012a8
push 0x100daba
call fcn.01007d60
mov dword [ebp - 0x128], 0x100daba
mov edx, dword [ebp - 0x128]
push edx
call fcn.010035b0
test eax, eax
jne 0x1007307
xor eax, eax
jmp 0x1007739
jmp 0x1007310
mov dword [ebp - 4], 0
jmp 0x10076e4
movsx eax, byte [ebp - 0x112]
test eax, eax
jne 0x100732f
mov dword [0x100daa4], 1
jmp 0x1007453
movsx ecx, byte [ebp - 0x112]
cmp ecx, 0x3a
jne 0x100744c
movsx edx, byte [ebp - 0x111]
cmp edx, 0x22
jne 0x1007357
mov dword [ebp - 0x11c], 4
jmp 0x1007361
mov dword [ebp - 0x11c], 3
mov eax, dword [ebp - 0x11c]
lea ecx, [ebp + eax - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jne 0x1007385
mov dword [ebp - 4], 0
jmp 0x10076e4
push 0x5b
mov edx, dword [ebp - 0x11c]
lea eax, [ebp + edx - 0x114]
push eax
call fcn.01007ca0
test eax, eax
je 0x10073b7
push 0x5d
mov ecx, dword [ebp - 0x11c]
lea edx, [ebp + ecx - 0x114]
push edx
call fcn.01007ca0
test eax, eax
je 0x10073e9
push 0x5d
mov eax, dword [ebp - 0x11c]
lea ecx, [ebp + eax - 0x114]
push ecx
call fcn.01007ca0
test eax, eax
je 0x10073f5
push 0x5b
mov edx, dword [ebp - 0x11c]
lea eax, [ebp + edx - 0x114]
push eax
call fcn.01007ca0
test eax, eax
jne 0x10073f5
mov dword [ebp - 4], 0
jmp 0x10076e4
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x120], ecx
lea edx, [ebp - 0x120]
push edx
mov eax, dword [ebp - 0x11c]
lea ecx, [ebp + eax - 0x114]
push ecx
call fcn.01006d60
test eax, eax
jne 0x100742b
mov dword [ebp - 4], 0
jmp 0x10076e4
mov edx, dword [ebp - 0x11c]
add edx, dword [ebp - 0x120]
lea eax, [ebp + edx - 0x114]
push eax
push 0x100dcc2
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x1007453
mov dword [ebp - 4], 0
jmp 0x10076e4
movsx ecx, byte [ebp - 0x112]
test ecx, ecx
jne 0x100747c
mov dword [0x100e6cc], 3
mov dword [0x100daa8], 1
jmp 0x10075dd
movsx edx, byte [ebp - 0x112]
cmp edx, 0x3a
jne 0x10075b6
mov dword [0x100e6cc], 1
mov dword [ebp - 0x11c], 3
mov eax, dword [ebp - 0x11c]
movsx ecx, byte [ebp + eax - 0x114]
test ecx, ecx
je 0x10075b4
mov edx, dword [ebp - 0x11c]
movsx eax, byte [ebp + edx - 0x114]
mov dword [ebp - 0x138], eax
mov ecx, dword [ebp - 0x138]
push ecx
mov edx, dword [ebp - 0x11c]
add edx, 1
mov dword [ebp - 0x11c], edx
call dword [sym.imp.USER32.dll_CharUpperA]
movsx eax, al
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
sub ecx, 0x41
mov dword [ebp - 0x13c], ecx
cmp dword [ebp - 0x13c], 0x12
ja case.0x1007519.6
mov eax, dword [ebp - 0x13c]
xor edx, edx
mov dl, byte [eax + 0x1007791]
jmp dword [edx*4 + 0x1007775]
mov ecx, dword [0x100e6cc]
and ecx, 0xfffffffe
mov dword [0x100e6cc], ecx
mov dword [0x100daa8], 1
jmp 0x10075af
mov edx, dword [0x100e6cc]
and edx, 0xfffffffd
mov dword [0x100e6cc], edx
mov dword [0x100daa8], 1
jmp 0x10075af
mov eax, dword [0x100e6cc]
or al, 2
mov dword [0x100e6cc], eax
mov dword [0x100daa8], 1
jmp 0x10075af
mov ecx, dword [0x100e6cc]
or ecx, 4
mov dword [0x100e6cc], ecx
mov dword [0x100daa8], 1
jmp 0x10075af
mov edx, dword [0x100ddc8]
or edx, 0x40
mov dword [0x100ddc8], edx
jmp 0x10075af
mov eax, dword [0x100ddc8]
or al, 0x80
mov dword [0x100ddc8], eax
jmp 0x10075af
mov dword [ebp - 4], 0
jmp 0x10074a0
jmp 0x10075dd
lea ecx, [ebp - 0x113]
push ecx
push 0x100149c
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x10075d1
jmp 0x10076e4
mov dword [ebp - 4], 0
jmp 0x10076e4
jmp 0x10076e4
movsx edx, byte [ebp - 0x112]
test edx, edx
jne 0x10075fc
mov dword [0x100daac], 1
jmp 0x10076b8
movsx eax, byte [ebp - 0x112]
cmp eax, 0x3a
jne 0x10076b1
mov dword [ebp - 0x11c], 3
mov ecx, dword [ebp - 0x11c]
movsx edx, byte [ebp + ecx - 0x114]
test edx, edx
je 0x10076af
mov eax, dword [ebp - 0x11c]
movsx ecx, byte [ebp + eax - 0x114]
mov dword [ebp - 0x140], ecx
mov edx, dword [ebp - 0x140]
push edx
mov eax, dword [ebp - 0x11c]
add eax, 1
mov dword [ebp - 0x11c], eax
call dword [sym.imp.USER32.dll_CharUpperA]
mov byte [ebp - 0x144], al
cmp byte [ebp - 0x144], 0x45
je 0x100768b
cmp byte [ebp - 0x144], 0x47
je 0x100767f
cmp byte [ebp - 0x144], 0x56
je 0x1007697
jmp 0x10076a3
mov dword [0x100dab0], 1
jmp 0x10076aa
mov dword [0x100daac], 1
jmp 0x10076aa
mov dword [0x100dab4], 1
jmp 0x10076aa
mov dword [ebp - 4], 0
jmp 0x1007616
jmp 0x10076b8
mov dword [ebp - 4], 0
jmp 0x10076e4
call fcn.01001d60
cmp dword [0x100da80], 0
je 0x10076d5
mov ecx, dword [0x100da80]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 4], 0
jmp 0x1006ee0
cmp dword [0x100daac], 0
je 0x1007736
movsx edx, byte [0x100dbbe]
test edx, edx
jne 0x1007736
push 0x104
push 0x100dbbe
mov eax, dword [0x100e6dc]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x100772f
push 0x5c
push 0x100dbbe
call fcn.01007d10
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 1], 0
jmp 0x1007736
mov dword [ebp - 4], 0
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret 4
invalid