Function at 0x3000b3ee
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
or dword [ebp - 4], 0xffffffff
push ebx
push esi
push edi
xor eax, eax
push 0xfffffffffffffffe
pop esi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov ebx, eax
push 0x30001d28
push ebx
call fcn.3000acb0
mov edi, eax
test edi, edi
pop ecx
pop ecx
je 0x3000b42c
add edi, 8
jmp 0x3000b484
push 0x3000264c
push ebx
call fcn.3000acb0
mov edi, eax
test edi, edi
pop ecx
pop ecx
je 0x3000b444
add edi, 0x10
jmp 0x3000b484
cmp word [ebx], 0x22
jne 0x3000b46e
lea eax, [ebx + 2]
push 0x22
push eax
call fcn.3000aa99
test eax, eax
pop ecx
pop ecx
je 0x3000b46e
add eax, 2
push 0x20
push eax
call fcn.3000aa99
mov edi, eax
test edi, edi
pop ecx
pop ecx
jne 0x3000b482
push 0x20
push ebx
call fcn.3000aa99
mov edi, eax
test edi, edi
pop ecx
pop ecx
je 0x3000b6ab
inc edi
inc edi
cmp word [edi], 0x22
je 0x3000b482
jmp 0x3000b48e
inc edi
inc edi
cmp word [edi], 0x20
je 0x3000b48c
push edi
mov ebx, 0x30002634
push ebx
call fcn.3000aba4
test eax, eax
pop ecx
pop ecx
jne 0x3000b4c8
push edi
push 0x30002618
call fcn.3000aba4
test eax, eax
pop ecx
pop ecx
jne 0x3000b4c8
push edi
push 0x300025fc
call fcn.3000aba4
test eax, eax
pop ecx
pop ecx
je 0x3000b53a
push 0x300025e0
push 1
push 0
call fcn.3000ae84
add esp, 0xc
test eax, eax
mov dword [ebp - 8], eax
je 0x3000b6ab
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x3000b69c
push edi
push 0x30002618
call fcn.3000aba4
test eax, eax
pop ecx
pop ecx
je 0x3000b511
push 1
push 1
call fcn.30008a35
jmp 0x3000b58c
push edi
push ebx
call fcn.3000aba4
test eax, eax
pop ecx
pop ecx
je 0x3000b522
push 0
jmp 0x3000b508
push edi
push 0x300025fc
call fcn.3000aba4
test eax, eax
pop ecx
pop ecx
je 0x3000b53a
call fcn.30008d92
jmp 0x3000b58c
push edi
push 0x300025d8
call fcn.3000aba4
test eax, eax
pop ecx
pop ecx
je 0x3000b59c
add edi, 4
mov ax, word [edi]
cmp ax, 0x30
jb 0x3000b69c
cmp ax, 0x39
ja 0x3000b69c
cmp word [edi + 2], 0
jne 0x3000b69c
and word [ebp - 2], 0
mov word [ebp - 4], ax
lea eax, [ebp - 4]
push 0xa
push eax
call fcn.3000a8d4
pop ecx
pop ecx
push eax
call fcn.30005df6
mov esi, eax
neg esi
sbb esi, esi
and esi, 2
dec esi
dec esi
jmp 0x3000b69c
push edi
push 0x30001bdc
call fcn.3000aba4
pop ecx
xor ebx, ebx
test eax, eax
pop ecx
je 0x3000b5b8
add edi, 6
inc ebx
mov dword [ebp - 0x18], ebx
jmp 0x3000b5b9
inc ebx
push edi
push 0x300025d0
call fcn.3000aba4
test eax, eax
pop ecx
pop ecx
je 0x3000b5d0
add edi, 6
mov dword [ebp - 0x14], ebx
push edi
push 0x30002008
call fcn.3000aba4
test eax, eax
pop ecx
pop ecx
je 0x3000b63a
add edi, 4
mov ax, word [edi]
push eax
call fcn.3000a795
cmp ax, 0x64
pop ecx
jne 0x3000b600
cmp word [edi + 2], 0x20
jne 0x3000b600
mov dword [ebp - 0x10], ebx
jmp 0x3000b637
mov ax, word [edi]
cmp ax, 0x30
jb 0x3000b69c
cmp ax, 0x39
ja 0x3000b69c
cmp word [edi + 2], 0x20
jne 0x3000b69c
and word [ebp - 0xa], 0
mov word [ebp - 0xc], ax
lea eax, [ebp - 0xc]
push 0xa
push eax
call fcn.3000a8d4
pop ecx
pop ecx
mov dword [ebp - 4], eax
add edi, 4
cmp word [edi], 0
je 0x3000b69c
xor ebx, ebx
push ebx
push edi
call fcn.30006351
mov edi, eax
cmp edi, ebx
jne 0x3000b654
push 0xfffffffffffffffe
pop esi
jmp 0x3000b692
cmp dword [ebp - 4], 0xffffffff
jne 0x3000b66a
cmp dword [ebp - 0x10], ebx
jne 0x3000b66a
push edi
call fcn.3000a389
mov dword [ebp - 4], eax
jmp 0x3000b670
push edi
call fcn.3000a389
cmp dword [ebp - 0x14], ebx
jne 0x3000b68f
cmp dword [ebp - 4], 0xfffffffe
je 0x3000b68f
xor eax, eax
cmp dword [ebp - 0x18], ebx
setne al
push eax
push edi
push dword [ebp - 4]
call fcn.30008dcd
jmp 0x3000b692
mov esi, dword [ebp - 4]
cmp edi, ebx
je 0x3000b69c
push edi
call fcn.3000283c
cmp dword [ebp - 8], 0
je 0x3000b6ab
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call fcn.3000951c
test eax, eax
je 0x3000b6ba
call dword [sym.imp.ole32.dll_CoUninitialize]
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]