Function at 0x100435c0
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1012bb3b
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x10188068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [0x10196d50], ebx
sub eax, 0
je 0x100439b3
sub eax, 1
jne 0x10043a70
mov eax, dword [0x10196c04]
test al, 1
jne 0x10043626
or eax, 1
mov dword [0x10196c10], 0
mov dword [0x10196c04], eax
push str.RtlGetVersion
push str.ntdll.dll
mov dword [0x10196c14], 0x11c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10043652
push 0x10196c14
call eax
mov eax, dword [0x10196c18]
test eax, eax
je 0x1004371e
shl eax, 8
or eax, dword [0x10196c1c]
cmp eax, 0x602
ja 0x100436a9
je 0x1004369d
cmp eax, 0x501
je 0x1004368e
cmp eax, 0x601
jne 0x100436b7
mov dword [0x10196c10], 2
jmp 0x1004371e
mov dword [0x10196c10], 1
jmp 0x1004371e
mov dword [0x10196c10], 3
jmp 0x1004371e
cmp eax, 0x603
je 0x10043714
cmp eax, 0xa00
je 0x100436c3
mov dword [0x10196c10], 0
jmp 0x1004371e
mov eax, dword [0x10196c20]
cmp eax, 0x3fab
jb 0x100436db
mov dword [0x10196c10], 8
jmp 0x1004371e
cmp eax, 0x3ad7
jb 0x100436ee
mov dword [0x10196c10], 7
jmp 0x1004371e
cmp eax, 0x3839
jb 0x10043701
mov dword [0x10196c10], 6
jmp 0x1004371e
cmp eax, 0x295a
jb 0x1004371e
mov dword [0x10196c10], 5
jmp 0x1004371e
mov dword [0x10196c10], 4
mov eax, dword [0x10196d50]
mov dword [ebp - 0x234], eax
lea eax, [ebp - 0x248]
push eax
mov dword [ebp - 0x248], 0x30
mov dword [ebp - 0x244], 0x10000
mov dword [ebp - 0x240], 0x10046640
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 8
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], str.GSoInputUI
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x21c], 0
call dword [sym.imp.USER32.dll_RegisterClassExW]
test ax, ax
jne 0x100437c6
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x100437bd
movzx eax, ax
or eax, 0x80070000
test eax, eax
jns 0x100437c6
xor eax, eax
jmp 0x10043a75
push ecx
push str.WeaselRoot
sub esp, 8
lea ecx, [ebp - 0x260]
call fcn.10048940
mov dword [ebp - 4], 0
cmp dword [ebp - 0x250], 0
jne 0x10043852
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.100fc650
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10043830
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x260]
call fcn.10043b50
push str._bugreport.exe
lea edx, [ebp - 0x260]
lea ecx, [ebp - 0x230]
call fcn.10043dd0
add esp, 4
cmp dword [ebp - 0x250], 0
jne 0x10043878
xor esi, esi
jmp 0x1004388c
cmp dword [ebp - 0x21c], 8
lea esi, [ebp - 0x230]
cmovae esi, dword [ebp - 0x230]
push 0x1018f5f0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp byte [0x1018f5ec], 0
jne 0x1004398d
mov byte [0x1018f5ec], 1
mov dword [0x101899ac], ebx
test esi, esi
je 0x100438c4
push 0xffffffffffffffff
push esi
push 0x104
push 0x1018f1e4
jmp 0x1004390f
push 0x104
push 0x1018f1e4
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
push 0x1018f1e4
call fcn.100fb5ec
mov edx, eax
add esp, 8
test edx, edx
je 0x1004398d
mov ecx, edx
mov eax, 0x104
sub ecx, 0x101899a8
sub ecx, 0x583c
push 0xffffffffffffffff
sar ecx, 1
push str._bugreport.exe
sub eax, ecx
push eax
push edx
call fcn.101080b4
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push 0xffffffffffffffff
push eax
push 0x1000
push 0x10189c94
call fcn.101080b4
push 0xffffffffffffffff
push 0x1015a6ac
push 0x40
push 0x1018f0e4
call fcn.101080b4
push 0xffffffffffffffff
push 0x1015a7a0
push 0x40
push 0x1018f164
call fcn.101080b4
add esp, 0x30
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str.bdbugreport__u
push 0xffffffffffffffff
push 0x1018f3ec
call fcn.10043d70
add esp, 0x10
push 0x10043110
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
xor ecx, ecx
cmp eax, 0x10043110
cmove eax, ecx
mov dword [0x101899a8], eax
push 0x1018f5f0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0x230]
call fcn.10043ac0
lea ecx, [ebp - 0x260]
call fcn.10043ac0
jmp 0x10043a70
mov esi, dword [0x10196d68]
mov eax, dword [esi]
mov dword [ebp - 0x264], eax
cmp eax, esi
je 0x100439e4
mov ecx, dword [eax + 0x14]
push 0
call fcn.10046dc0
lea ecx, [ebp - 0x264]
call fcn.10047a80
mov eax, dword [ebp - 0x264]
cmp eax, esi
jne 0x100439c5
push 0x10196d74
call fcn.100cb5bf
add esp, 4
test eax, eax
je 0x100439fe
push eax
call fcn.100cb6b8
add esp, 4
mov dword [ebp - 4], 1
mov esi, dword [0x10196d68]
push dword [esi + 4]
call fcn.100477f0
mov eax, dword [0x10196d68]
mov dword [eax + 4], esi
mov eax, dword [0x10196d68]
mov dword [eax], esi
mov eax, dword [0x10196d68]
mov dword [eax + 8], esi
mov dword [0x10196d6c], 0
push 0x10196d74
mov dword [ebp - 4], 2
call fcn.100cb5e4
add esp, 4
test eax, eax
je 0x10043a55
push eax
call fcn.100cb6b8
add esp, 4
push dword [0x10196d50]
push str.GSoInputUI
call dword [sym.imp.USER32.dll_UnregisterClassW]
test eax, eax
jne 0x10043a70
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100e278d
mov esp, ebp
pop ebp
ret 0xc