Function at 0x103db2c0
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x28
mov eax, dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0xfbf2ce11
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
sub eax, 0x8f009819
je 0x103db91c
jmp 0x103db2f8
mov eax, dword [ebp - 0x20]
nop dword [eax + eax]
sub eax, 0xd5317ed6
je 0x103db3ab
jmp 0x103db310
mov eax, dword [ebp - 0x20]
sub eax, 0xd7f833e9
je 0x103db398
nop
jmp 0x103db325
mov eax, dword [ebp - 0x20]
sub eax, 0xefa54e79
je 0x103db635
jmp 0x103db338
mov eax, dword [ebp - 0x20]
nop dword [eax + eax]
sub eax, 0xfbf2ce11
je 0x103db37d
jmp 0x103db350
mov eax, dword [ebp - 0x20]
sub eax, 0x18f9977e
je 0x103db911
nop
jmp 0x103db365
mov eax, dword [ebp - 0x20]
sub eax, 0x35368bc8
je 0x103db905
jmp 0x103db378
jmp 0x103db93c
mov edx, dword [ebp - 0x10]
mov eax, 0xd7f833e9
mov ecx, 0xd5317ed6
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x103db93c
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1c], 0x18f9977e
jmp 0x103db93c
mov ecx, dword [0x104a1cd4]
mov eax, dword [0x104a1cd8]
mov esi, 0x5be5dff7
add esi, 0
sub esi, 1
sub esi, 0x5be5dff7
xor edx, edx
sub edx, esi
xor edi, edi
sub edi, edx
mov esi, 0xb0df49e9
add esi, 0
sub esi, ecx
sub esi, 0xb0df49e9
xor edx, edx
sub edx, edi
add edx, 0
sub esi, 0x39f76543
add esi, edx
add esi, 0x39f76543
xor edx, edx
sub edx, esi
add edx, 0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete ch
cmp eax, 0xa
setl ah
mov cl, ah
xor cl, 0xff
and cl, 1
mov dl, 1
xor dl, 1
mov dh, ah
and dh, dl
mov al, 1
xor al, 1
and al, 0xff
and dl, 1
or cl, dh
or al, dl
xor cl, al
mov bl, ch
xor bl, 0xff
and bl, 1
mov dh, 1
xor dh, 1
mov dl, ch
and dl, dh
mov al, cl
xor al, 0xff
and al, 0xff
and cl, dh
or bl, dl
or al, cl
xor bl, al
xor bl, 0xff
mov cl, ch
xor cl, 0xff
mov al, 1
xor al, 1
or bl, cl
or al, 1
xor bl, 0xff
and bl, al
mov al, ch
xor al, 0xff
and al, 1
mov dl, 1
xor dl, 1
mov cl, ch
and cl, dl
or al, cl
xor al, 0xff
mov bh, ah
xor bh, al
and bh, ah
mov cl, ah
xor cl, 0xff
and cl, 0
mov dl, 1
xor dl, 0
and ah, dl
mov al, 1
xor al, 1
and al, 0
and dl, 1
or cl, ah
or al, dl
xor cl, al
xor ch, 0xff
xor cl, 0xff
mov al, 1
xor al, 0
or ch, cl
or al, 0
xor ch, 0xff
and ch, al
mov al, bh
xor al, 0xff
mov dl, ch
xor dl, 0xff
mov cl, 1
xor cl, 1
mov dh, al
and dh, 0xff
and bh, cl
mov ah, dl
and ah, 0xff
and ch, cl
or dh, bh
or ah, ch
xor dh, ah
or al, dl
xor al, 0xff
or cl, 1
and al, cl
or dh, al
mov ch, bl
xor ch, 0xff
and ch, 1
mov cl, 1
xor cl, 1
mov dl, bl
and dl, cl
mov al, 1
xor al, 1
and al, 0xff
and cl, 1
or ch, dl
or al, cl
xor ch, al
mov byte [ebp - 0x23], ch
mov dl, dh
xor dl, 0xff
and dl, 1
mov cl, 1
xor cl, 1
mov ah, dh
and ah, cl
mov al, 1
xor al, 1
and al, 0xff
and cl, 1
or dl, ah
or al, cl
xor dl, al
mov bh, 1
xor bh, 0
and bh, 1
mov cl, 1
xor cl, 1
mov ah, cl
and ah, 0
mov al, 1
xor al, 1
and al, 0xff
and cl, 1
or bh, ah
or al, cl
xor bh, al
xor ch, 0xff
mov cl, 1
xor cl, 0
mov al, 1
xor al, 1
or ch, cl
or al, 1
xor ch, 0xff
and ch, al
xor bl, 0xff
mov cl, bh
xor cl, 0xff
mov al, 1
xor al, 0
or bl, cl
or al, 0
xor bl, 0xff
and bl, al
mov al, dl
xor al, 0xff
mov cl, 1
xor cl, 0
mov ah, 1
xor ah, 1
or al, cl
mov cl, byte [ebp - 0x23]
or ah, 1
xor al, 0xff
and al, ah
mov byte [ebp - 0x22], al
xor dh, 0xff
mov al, bh
xor al, 0xff
mov ah, 1
xor ah, 0
or dh, al
mov al, byte [ebp - 0x22]
or ah, 0
xor dh, 0xff
and dh, ah
mov ah, ch
and ah, bl
xor ch, bl
or ah, ch
mov ch, al
and ch, dh
xor al, dh
or ch, al
mov dh, ah
xor dh, 0xff
mov al, ch
and al, dh
xor ch, 0xff
and ah, ch
or al, ah
mov byte [ebp - 0x21], al
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov dl, al
xor dl, 0xff
and dl, 1
mov cl, 1
xor cl, 1
and al, cl
or dl, al
mov cl, 1
xor cl, 0
mov dh, bh
xor dh, 0xff
mov ch, 1
xor ch, 0
mov ah, cl
and ah, 0
mov al, ch
and al, 0
mov bl, dh
and bl, 0
and bh, ch
or ah, al
mov al, byte [ebp - 0x21]
or bl, bh
xor ah, bl
or cl, dh
xor cl, 0xff
or ch, 0
and cl, ch
or ah, cl
xor ah, 0xff
mov cl, dl
xor cl, ah
and cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8f009819
mov ecx, 0xefa54e79
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x103db93c
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x18]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
sub esp, 8
mov dword [ebp - 0x14], eax
mov ecx, dword [0x104a1cd4]
mov eax, dword [0x104a1cd8]
xor esi, esi
sub esi, 0x75f65d4e
add esi, 0
xor edx, edx
sub edx, 1
add esi, edx
add esi, 0x72a56df8
add esi, 0x75f65d4e
sub esi, 0x72a56df8
mov edx, ecx
sub edx, 0x39705bfd
sub edx, 0x47c7afac
add edx, 0x39705bfd
sub edx, 0x74f8a49b
add edx, esi
add edx, 0x74f8a49b
xor esi, esi
sub esi, 0x47c7afac
sub edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov ch, dl
xor ch, 0xff
and ch, 1
mov ah, 1
xor ah, 1
mov dh, dl
and dh, ah
mov al, 1
xor al, 1
and al, 0xff
and ah, 1
or ch, dh
or al, ah
xor ch, al
mov al, cl
xor al, 0xff
mov ah, ch
and ah, al
xor ch, 0xff
mov al, cl
and al, ch
or ah, al
xor ah, 0xff
mov ch, cl
xor ch, 0xff
mov al, 1
xor al, 1
or ah, ch
or al, 1
xor ah, 0xff
and ah, al
mov ch, cl
xor ch, 0xff
and ch, 1
mov dh, 1
xor dh, 1
mov al, cl
and al, dh
or ch, al
xor ch, 0xff
mov al, dl
xor al, ch
and al, dl
mov ch, dl
xor ch, 0xff
and ch, 1
mov dh, 1
xor dh, 1
and dl, dh
or ch, dl
xor cl, 0xff
xor ch, 0xff
mov dl, 1
xor dl, 0
or cl, ch
or dl, 0
xor cl, 0xff
and cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov al, ah
xor al, 0xff
and al, 1
mov ch, 1
xor ch, 1
mov cl, ah
and cl, ch
or al, cl
mov byte [ebp - 0x25], al
mov cl, dl
xor cl, 0xff
and cl, 0
mov dh, 1
xor dh, 0
mov bl, dl
and bl, dh
mov ch, 1
xor ch, 1
and ch, 0
and dh, 1
or cl, bl
or ch, dh
xor cl, ch
mov byte [ebp - 0x26], cl
mov bh, 1
xor bh, 1
and bh, 1
mov dh, 1
xor dh, 1
mov bl, dh
and bl, 1
mov ch, 1
xor ch, 1
and ch, 0xff
and dh, 1
or bh, bl
or ch, dh
xor bh, ch
mov ch, 1
xor ch, 1
mov bl, al
xor bl, ch
and bl, al
mov ch, bh
xor ch, 0xff
mov al, ah
xor al, ch
and al, ah
xor cl, 0xff
mov ch, 1
xor ch, 1
mov ah, 1
xor ah, 1
or cl, ch
or ah, 1
xor cl, 0xff
and cl, ah
mov byte [ebp - 0x29], cl
mov ah, bh
xor ah, 0xff
mov cl, dl
xor cl, ah
and cl, dl
mov dl, bl
xor dl, 0xff
mov dh, al
xor dh, 0xff
mov ch, 1
xor ch, 1
mov ah, dl
and ah, 0xff
and bl, ch
mov byte [ebp - 0x2b], bl
mov bl, dh
and bl, 0xff
and al, ch
mov byte [ebp - 0x2a], al
mov al, byte [ebp - 0x2b]
or ah, al
mov al, byte [ebp - 0x2a]
or bl, al
mov al, byte [ebp - 0x29]
xor ah, bl
or dl, dh
xor dl, 0xff
or ch, 1
and dl, ch
or ah, dl
mov dl, al
xor dl, 0xff
mov bl, cl
xor bl, 0xff
mov dh, 1
xor dh, 1
mov ch, dl
and ch, 0xff
and al, dh
mov byte [ebp - 0x28], al
mov al, bl
and al, 0xff
mov byte [ebp - 0x27], al
mov al, byte [ebp - 0x28]
and cl, dh
or ch, al
mov al, byte [ebp - 0x27]
or al, cl
mov cl, byte [ebp - 0x26]
xor ch, al
mov al, byte [ebp - 0x25]
or dl, bl
xor dl, 0xff
or dh, 1
and dl, dh
or ch, dl
mov dh, ah
xor dh, 0xff
mov dl, ch
and dl, dh
xor ch, 0xff
and ah, ch
or dl, ah
mov byte [ebp - 0x24], dl
mov ah, al
and ah, cl
xor al, cl
or ah, al
mov cl, ah
xor cl, 0xff
and cl, 1
mov dl, 1
xor dl, 1
and ah, dl
mov al, 1
xor al, 1
and al, 0xff
and dl, 1
or cl, ah
or al, dl
xor cl, al
mov dl, 1
xor dl, 1
mov dh, bh
xor dh, 0xff
mov ch, 1
xor ch, 1
mov ah, dl
and ah, 0xff
mov al, ch
and al, 1
mov bl, dh
and bl, 0xff
and bh, ch
or ah, al
mov al, byte [ebp - 0x24]
or bl, bh
xor ah, bl
or dl, dh
xor dl, 0xff
or ch, 1
and dl, ch
or ah, dl
xor cl, 0xff
xor ah, 0xff
mov dl, 1
xor dl, 0
or cl, ah
or dl, 0
xor cl, 0xff
and cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8f009819
mov ecx, 0x35368bc8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1c], eax
nop dword [eax]
jmp 0x103db93c
mov dword [ebp - 0x1c], 0x18f9977e
jmp 0x103db93c
mov eax, dword [ebp - 0x14]
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x18]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
sub esp, 8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], 0xefa54e79
nop dword [eax]
jmp 0x103db2e2