Function at 0x406a73
Capabilities:
Accept command line arguments
Allocate or change rwx memory

Disassembly:
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov edx, dword [ebp - 0x20]
mov eax, esi
mov dword [ebp - 0x18], edi
mov edi, dword [ebp]
mov dword [ebp - 0x1c], eax
mov edi, dword [ebp]
lea eax, [ebp]
lea eax, [ebp - 0x1c]
mov edi, dword [ebp - 0x18]
mov eax, ecx
mov edi, 0x73
mov esi, dword [esp]
lea edi, [ebp - 0x20]
lea edx, [ebp - 0x20]
mov edx, 0xb2
mov ecx, edx
lea edi, [esp]
mov ecx, dword [ebp]
mov edx, dword [ebp]
mov cx, 4
mov dword [ebp - 0x20], edx
mov edi, dword [ebp - 0x20]
mov edx, dword [esp]
lea edi, [ebp]
mov dword [ebp - 0x1c], ecx
mov si, 8
lea edx, [esp]
mov dword [ebp - 0x18], ecx
mov edi, dword [esp]
mov edx, 0xb4
mov edi, 0xe6
lea edi, [ebp - 0x20]
mov si, 2
mov eax, dword [ebp]
mov esi, dword [ebp - 0x18]
mov ecx, dword [esp]
mov si, 0x10
mov edi, dword [ebp]
lea eax, [esp]
mov ecx, dword [esp]
mov dx, 0x80
lea eax, [ebp]
mov dword [ebp - 0x1c], edi
push 4
push 0x4000
push 0xb00
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edi, dword [esp]
lea eax, [esp]
mov edi, eax
lea esi, [ebp]
lea edx, [ebp - 0x18]
lea edx, [esp]
lea edi, [ebp - 0x18]
mov ecx, edi
mov esi, dword [ebp]
mov dword [ebp - 0x18], esi
mov eax, 2
lea esi, [ebp]
mov esi, dword [ebp]
mov ecx, edi
mov edi, edx
mov edi, dword [ebp]
mov ax, 0x80
mov dword [ebp - 0x20], edi
mov esi, edi
mov edx, dword [esp]
mov ecx, dword [esp]
mov di, 1
lea esi, [ebp]
mov eax, dword [esp]
mov ecx, edi
mov edx, 0xa4
mov edi, dword [ebp - 0x1c]
mov cx, 0xdf
lea edi, [esp]
mov esi, dword [esp]
lea esi, [ebp]
mov esi, dword [ebp - 0x1c]
mov ecx, dword [esp]
lea edi, [ebp]
mov edi, 0xe9
mov edi, dword [ebp - 0x18]
mov ecx, eax
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp]
mov edi, dword [ebp - 0x18]
push 8
push 0x8000
push 0x1000
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ax, 0x8d
lea edi, [esp]
lea esi, [ebp - 0x18]
mov edx, dword [ebp]
mov dx, 0xd9
lea ecx, [esp]
mov edx, 2
lea ecx, [ebp - 0x20]
lea esi, [esp]
mov eax, dword [ebp]
mov edx, dword [ebp - 0x20]
lea edi, [ebp]
mov ecx, dword [esp]
mov edi, dword [ebp]
lea edx, [ebp]
mov edx, dword [ebp]
mov di, 0x44
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], ecx
mov edi, dword [esp]
mov edi, dword [ebp]
mov eax, edx
mov dword [ebp - 0x18], edi
mov ax, 2
mov esi, ecx
mov dword [ebp - 0x20], eax
lea edi, [ebp]
mov edx, dword [ebp]
mov edi, dword [esp]
mov dword [ebp - 0x18], edi
mov edx, ecx
mov edi, dword [esp]
mov edi, eax
lea esi, [ebp]
mov di, 0x12
mov eax, edi
mov ecx, dword [ebp - 0x1c]
lea edi, [esp]
lea eax, [esp]
lea esi, [ebp - 0x1c]
lea esi, [ebp]
push 8
push 0x2000
push 0x900
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
lea edi, [esp]
mov edi, ecx
lea edi, [ebp - 0x18]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov di, 8
mov eax, 0x79
mov esi, 0xc6
mov ax, 0x40
mov edi, dword [ebp - 0x1c]
mov edi, dword [ebp]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ecx
lea ecx, [ebp]
mov edi, esi
mov edx, 0xd4
mov edx, dword [esp]
mov edx, dword [ebp - 0x20]
lea edx, [ebp]
mov edi, dword [ebp - 0x18]
mov edi, dword [esp]
mov ecx, dword [esp]
lea edi, [ebp - 0x20]
lea ecx, [ebp - 0x18]
mov esi, dword [ebp]
lea esi, [ebp - 0x18]
mov eax, ecx
mov ecx, edi
mov edx, dword [esp]
mov dx, 2
mov edi, dword [ebp - 0x20]
mov edi, 0x20
mov ecx, 0x40
lea esi, [esp]
mov ecx, dword [ebp]
mov edi, esi
mov eax, dword [esp]
lea ecx, [esp]
mov dword [ebp - 0x18], eax
lea edi, [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
and dword [ebp - 0x20], 0xffff
cmp edx, dword [ebp - 0x18]
jne 0x406cd5
mov eax, 0xc8
test edx, edx
jb 0x406cd5
call dword [sym.imp.KERNEL32.dll_GetACP]
lea eax, [esp]
mov ecx, dword [ebp - 0x1c]
mov di, 0x20
mov dx, 0xfd
mov dword [ebp - 0x18], edx
mov edx, dword [ebp]
lea ecx, [ebp - 0x1c]
lea ecx, [esp]
mov ecx, dword [ebp - 0x1c]
mov edi, eax
mov ecx, dword [esp]
mov edi, dword [esp]
mov edi, dword [ebp]
lea edx, [ebp - 0x20]
mov edi, dword [ebp]
mov edi, dword [ebp]
mov edi, dword [esp]
lea edi, [ebp]
mov edi, dword [ebp - 0x18]
mov edi, ecx
mov eax, dword [ebp]
lea ecx, [esp]
mov edi, ecx
lea ecx, [esp]
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov edx, 0xe6
lea ecx, [ebp]
mov edx, dword [ebp]
mov esi, dword [ebp]
mov edx, dword [esp]
mov edi, dword [ebp - 0x20]
lea esi, [ebp - 0x1c]
mov edi, dword [ebp]
lea edx, [ebp - 0x1c]
lea esi, [esp]
lea eax, [ebp - 0x18]
lea eax, [ebp]
push 2
push 0x2000
push 0xb00
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov si, 0xc3
mov cx, 1
lea edi, [ebp]
lea esi, [ebp - 0x18]
mov ecx, dword [esp]
mov edi, 0
mov edx, 8
lea edi, [ebp]
mov di, 0x8a
mov edx, 4
lea edi, [esp]
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
lea edx, [ebp]
mov dword [ebp - 0x1c], esi
lea eax, [ebp]
mov ecx, edx
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x1c]
mov edi, edx
mov edx, esi
lea eax, [esp]
mov ecx, dword [esp]
mov edi, dword [esp]
mov dword [ebp - 0x20], edi
lea edi, [esp]
mov edi, 0x80
mov edx, eax
mov edi, dword [ebp - 0x20]
mov ax, 0x80
mov edi, dword [ebp]
mov eax, dword [esp]
mov ecx, dword [esp]
mov dword [ebp - 0x18], edx
mov edx, dword [esp]
mov edi, dword [ebp]
mov dword [ebp - 0x20], edi
lea eax, [esp]
mov edi, dword [ebp - 0x18]
mov esi, dword [esp]
mov edx, dword [ebp]
mov edi, edx
push 4
push 0x4000
push 0x200
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov edx, dword [esp]
lea ecx, [esp]
mov eax, edi
mov edi, 9
mov ax, 0x35
mov edx, dword [esp]
lea ecx, [ebp - 0x1c]
lea edi, [ebp]
mov edi, dword [ebp - 0x1c]
mov esi, 0x40
lea edx, [ebp]
mov edi, 0x4b
mov edi, 0xbc
lea ecx, [esp]
mov edx, dword [ebp]
lea edi, [ebp - 0x20]
mov eax, dword [ebp - 0x18]
lea edi, [esp]
mov dx, 2
mov edx, dword [ebp - 0x18]
mov edx, 0x5b
lea eax, [ebp - 0x1c]
mov edi, dword [ebp - 0x20]
mov edx, dword [ebp]
mov eax, edi
mov edi, eax
mov eax, edi
lea esi, [ebp - 0x20]
lea edi, [ebp]
lea esi, [ebp]
mov dword [ebp - 0x1c], edi
mov ecx, dword [esp]
lea edi, [ebp - 0x1c]
lea esi, [ebp]
lea edi, [esp]
lea edx, [esp]
lea esi, [ebp - 0x18]
mov edx, dword [esp]
mov cx, 0x10
lea edi, [ebp - 0x18]
mov eax, dword [ebp]
lea esi, [esp]
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
lea edi, [ebp]
mov di, 0x40
mov edi, dword [ebp]
mov edi, dword [ebp - 0x18]
lea edi, [ebp]
mov edi, dword [ebp]
mov cx, 0x25
mov eax, dword [ebp]
mov edi, dword [esp]
lea edx, [ebp]
mov edi, 0xe9
mov ecx, dword [esp]
mov edi, 0x10
lea edi, [ebp]
lea eax, [ebp - 0x18]
mov si, 1
mov edi, 0xb6
mov edx, edi
mov di, 4
mov edi, dword [esp]
mov esi, ecx
mov edi, dword [ebp]
lea ecx, [ebp - 0x18]
lea edi, [esp]
lea esi, [ebp]
mov dx, 0x20
mov ecx, dword [esp]
lea ecx, [ebp]
mov si, 0xcb
lea edi, [esp]
mov edx, dword [ebp]
lea ecx, [ebp]
mov eax, dword [ebp - 0x18]
mov edi, ecx
mov eax, dword [ebp]
lea edx, [ebp]
lea edi, [ebp]
mov dword [ebp - 0x18], esi
mov cx, 0x64
mov ecx, dword [ebp - 0x18]
lea esi, [esp]
mov dword [ebp - 0x1c], edi
mov edi, dword [esp]
mov edi, dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov edi, dword [esp]
mov eax, dword [ebp - 0x18]
mov ecx, dword [esp]
mov edi, dword [ebp - 0x18]
mov esi, dword [esp]
mov eax, 0xc7
mov dword [ebp - 0x18], edi
mov di, 0xff
mov esi, 0x7f
lea edi, [ebp]
lea edi, [esp]
mov eax, dword [ebp]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp]
mov edi, dword [ebp - 0x1c]
mov si, 1
mov edi, dword [ebp - 0x20]
mov esi, edx
mov edx, dword [ebp]
mov esi, dword [ebp - 0x1c]
lea esi, [ebp]
mov edi, 0x80
mov edi, dword [ebp]
mov ecx, eax
mov edx, edi
lea edi, [esp]
mov eax, edi
mov esi, dword [esp]
mov ax, 0xad
mov edi, dword [esp]
mov esi, dword [ebp - 0x1c]
mov esi, dword [ebp]
mov ecx, dword [esp]
lea ecx, [esp]
mov eax, edx
mov di, 8
mov ecx, 0x80
mov edi, dword [esp]
push 2
push 0x4000
push 0x200
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
lea eax, [ebp]
lea eax, [esp]
lea eax, [ebp - 0x1c]
lea edi, [ebp]
lea edi, [esp]
mov ecx, dword [esp]
mov edx, dword [esp]
mov cx, 0x1a
mov esi, dword [ebp - 0x18]
mov cx, 0x83
mov eax, 0xe5
mov ecx, dword [ebp - 0x1c]
mov esi, dword [esp]
lea edi, [ebp - 0x20]
lea edi, [ebp]
lea edx, [esp]
mov edi, dword [ebp - 0x20]
lea edi, [ebp]
mov eax, dword [ebp - 0x20]
mov eax, dword [esp]
lea edi, [esp]
mov edx, 0x20
mov esi, dword [ebp]
mov edx, dword [ebp - 0x20]
mov edi, dword [ebp]
mov di, 0x20
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x18]
lea edi, [ebp - 0x1c]
mov dword [ebp - 0x20], edi
mov edi, edx
mov edx, edi
mov dword [ebp - 0x20], edx
mov edi, dword [esp]
lea edi, [ebp - 0x18]
mov edi, esi
mov dword [ebp - 0x1c], edi
mov edi, 0x80
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov ecx, edi
lea esi, [ebp - 0x20]
mov edi, 0xff
mov di, 0x20
lea edi, [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov edi, dword [ebp]
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov ecx, 0xc
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp]
lea edi, [ebp - 0x18]
mov edx, 0x80
lea edi, [ebp - 0x20]
lea edx, [ebp - 0x18]
lea edi, [esp]
mov ecx, dword [esp]
mov esi, dword [esp]
lea eax, [ebp]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov edi, 0x78
mov edx, 0x9d
mov dword [ebp - 0x1c], esi
lea ecx, [esp]
mov dword [ebp - 0x20], edx
mov di, 2
mov eax, dword [esp]
mov edi, 0x80
mov edx, 0x79
lea esi, [esp]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp]
mov dword [ebp - 0x1c], edi
lea edx, [esp]
mov edi, dword [ebp - 0x1c]
lea edi, [ebp - 0x20]
lea ecx, [esp]
mov eax, 0x20
lea eax, [esp]
push 8
push 0x4000
push 0x300
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov esi, dword [ebp]
mov dword [ebp - 0x20], esi
mov esi, dword [esp]
mov edi, dword [ebp]
mov dword [ebp - 0x18], esi
mov ax, 4
lea ecx, [esp]
mov esi, dword [ebp - 0x20]
lea edi, [ebp]
lea esi, [ebp - 0x18]
lea eax, [ebp]
lea esi, [ebp]
mov edi, dword [ebp - 0x18]
lea edi, [esp]
lea esi, [esp]
lea edi, [ebp]
lea edi, [ebp]
lea edi, [ebp - 0x18]
lea esi, [esp]
lea edx, [ebp]
mov edi, 8
lea edi, [ebp]
mov eax, dword [esp]
mov edi, dword [esp]
mov eax, 0x72
mov edx, dword [esp]
mov edi, dword [ebp - 0x1c]
lea eax, [esp]
lea edi, [esp]
mov edi, dword [ebp]
mov edx, dword [ebp]
lea ecx, [ebp - 0x18]
mov edi, ecx
lea ecx, [ebp - 0x20]
mov di, 0x5d
mov dx, 0x20
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x20], esi
mov edi, dword [esp]
lea esi, [ebp - 0x1c]
mov eax, pe_nt_image_headers32
mov dword [ebp - 0x18], 0x10
or dword [ebp - 0x18], 0xff
add dword [ebp - 0x1c], 4
add dword [ebp - 0x1c], 0x29
and dword [ebp - 0x1c], 0xff00ff
cmp eax, 0x9cb
jae 0x407184
mov ecx, dword [ebp - 0x18]
sub dword [ebp - 0x1c], 0x2e
cmp ecx, 0
ja 0x407184
push 8
push 0x8000
push 0xa00
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
lea eax, [ebp]
mov edi, dword [ebp]
mov di, 0x80
mov edi, eax
mov edx, dword [esp]
mov dword [ebp - 0x1c], edi
mov edx, dword [ebp - 0x18]
mov edi, dword [ebp]
mov ecx, eax
mov si, 8
mov esi, dword [esp]
mov edx, 0x10
lea ecx, [ebp - 0x1c]
lea eax, [ebp]
mov ecx, dword [esp]
mov dword [ebp - 0x1c], eax
mov ecx, 2
mov esi, dword [ebp]
mov dword [ebp - 0x18], edi
lea edi, [esp]
mov esi, dword [esp]
lea edx, [ebp]
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x18], edi
lea edi, [esp]
lea ecx, [ebp]
mov dword [ebp - 0x20], ecx
mov ecx, 0xb3
mov ecx, 0x10
lea esi, [ebp]
mov dword [ebp - 0x18], edi
mov eax, 4
mov eax, dword [ebp]
mov edx, 0x20
lea eax, [ebp - 0x20]
mov cx, 4
mov edi, 0x56
mov dword [ebp - 0x20], edi
mov edx, dword [ebp]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea esi, [ebp - 0x1c]
lea eax, [ebp]
mov esi, dword [ebp]
lea eax, [ebp]
mov di, 0xde
lea edx, [esp]
lea edi, [esp]
lea ecx, [ebp]
mov edi, eax
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x18], eax
mov eax, dword [esp]
mov cx, 0x20
mov esi, 4
mov si, 0x88
mov edx, dword [esp]
mov dword [ebp - 0x20], edi
lea edi, [ebp]
mov edx, dword [esp]
mov edi, ecx
lea edi, [ebp - 0x20]
lea esi, [esp]
mov edx, dword [ebp]
mov edx, dword [ebp]
lea edi, [ebp]
lea esi, [esp]
mov ax, 0x38
mov ecx, edi
mov dword [ebp - 0x20], edi
mov ecx, 0xdc
mov dword [ebp - 0x18], esi
lea esi, [ebp - 0x20]
mov di, 4
mov dword [ebp - 0x20], edi
mov esi, 0x53
mov di, 0x80
mov esi, edx
lea edi, [esp]
lea ecx, [esp]
mov edi, esi
lea edi, [esp]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edx, edi
mov edi, 0x80
mov si, 4
mov ax, 0x80
mov dword [ebp - 0x1c], edi
lea ecx, [ebp - 0x20]
mov edi, dword [esp]
mov edi, dword [ebp - 0x20]
lea eax, [ebp - 0x18]
mov esi, 8
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], esi
mov eax, 0x4f
lea edi, [esp]
lea ecx, [ebp]
mov cx, 0x47
mov dword [ebp - 0x1c], ecx
mov esi, dword [ebp - 0x18]
mov edi, ecx
mov esi, dword [ebp]
mov edi, dword [ebp - 0x18]
mov eax, esi
mov si, 1
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp]
mov eax, 0x40
mov eax, dword [ebp]
mov eax, dword [esp]
mov si, 0xd6
mov edi, dword [ebp - 0x18]
mov esi, edi
mov edi, 0xcf
lea ecx, [esp]
mov eax, edi
mov edx, edi
lea eax, [ebp - 0x20]
lea eax, [ebp]
mov edi, dword [ebp]
push 8
push 0x8000
push 0x200
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov di, 0xaa
mov edx, dword [esp]
mov ecx, dword [esp]
lea edx, [ebp - 0x18]
mov edx, dword [ebp]
mov di, 0xc7
mov esi, 0x69
mov esi, dword [ebp]
lea ecx, [esp]
mov dword [ebp - 0x1c], edx
mov ecx, 0x85
lea edi, [ebp - 0x1c]
mov dword [ebp - 0x1c], edi
mov eax, dword [esp]
mov esi, dword [esp]
mov esi, 0xf9
mov ax, 0x80
mov dword [ebp - 0x18], edi
mov ecx, 0x75
mov dword [ebp - 0x18], edi
mov di, 0xbe
mov dword [ebp - 0x18], ecx
lea ecx, [ebp]
mov edi, edx
mov edi, dword [ebp - 0x18]
mov di, 0x38
mov eax, 8
mov edi, edx
mov esi, dword [esp]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], edi
mov esi, dword [esp]
lea edi, [ebp - 0x1c]
mov di, 0x6e
lea edx, [ebp]
mov dword [ebp - 0x20], edx
mov ecx, dword [esp]
mov edi, 8
mov esi, dword [ebp - 0x20]
mov di, 4
lea edi, [ebp]
mov ecx, pe_nt_image_headers32
xor dword [ebp - 0x20], 0xff00ff
add dword [ebp - 0x18], 2
sub dword [ebp - 0x1c], 2
mov dword [ebp - 0x18], 0x20
mov eax, 0
push 4
push 0x2000
push 0x600
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x20], ecx
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x20]
lea eax, [ebp]
mov esi, 0xae
lea eax, [esp]
mov ecx, dword [ebp]
mov ecx, dword [ebp - 0x18]
lea edi, [esp]
mov dword [ebp - 0x20], ecx
mov edi, 0x86
lea esi, [ebp]
lea edi, [ebp]
mov ecx, dword [ebp]
mov edx, 4
mov edx, dword [ebp - 0x20]
mov dx, 0x74
mov edx, edi
lea edx, [ebp - 0x1c]
mov edi, dword [ebp - 0x1c]
mov edi, dword [esp]
mov eax, edx
lea edi, [esp]
lea edi, [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x20]
mov edx, dword [esp]
mov edi, 0x20
lea esi, [ebp - 0x1c]
mov dword [ebp - 0x1c], esi
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x20], edi
mov edx, dword [ebp - 0x20]
mov edx, eax
mov cx, 0xc1
mov edi, dword [ebp - 0x1c]
lea esi, [ebp - 0x1c]
mov edi, dword [esp]
lea ecx, [ebp]
push 8
push 0x4000
push 0x300
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
lea ecx, [esp]
lea eax, [ebp]
lea eax, [esp]
mov eax, 0x66
mov eax, 1
mov edi, dword [esp]
lea edi, [ebp - 0x1c]
mov si, 0xe2
mov dword [ebp - 0x1c], esi
lea esi, [ebp]
mov eax, dword [esp]
mov ax, 0xd3
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov edi, dword [esp]
mov edx, edi
mov eax, ecx
lea edi, [ebp]
lea edi, [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, esi
mov eax, edx
mov edx, 0x9f
lea ecx, [ebp - 0x20]
mov esi, dword [ebp]
mov eax, dword [ebp - 0x20]
lea esi, [ebp]
mov edx, dword [esp]
mov di, 4
mov si, 0x91
lea edx, [esp]
mov di, 8
mov cx, 0x4a
mov esi, 0xff
lea ecx, [ebp - 0x20]
mov eax, dword [ebp]
mov edx, dword [ebp]
mov edi, ecx
lea eax, [ebp]
mov edx, 0x40
mov edx, ecx
lea eax, [esp]
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
lea eax, [ebp - 0x1c]
mov esi, eax
lea edi, [ebp - 0x1c]
lea edi, [esp]
mov di, 0x10
mov esi, dword [ebp - 0x18]
lea eax, [esp]
mov ecx, edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], eax
mov di, 8
mov edi, dword [ebp]
mov edx, dword [ebp - 0x20]
mov dx, 0x7b
lea ecx, [ebp - 0x20]
lea edi, [ebp]
lea esi, [esp]
mov edi, dword [ebp - 0x18]
lea edi, [ebp - 0x20]
lea edi, [ebp]
lea eax, [ebp - 0x18]
mov esi, dword [ebp]
mov edi, dword [esp]
mov ax, 0x10
mov edi, 2
lea ecx, [ebp - 0x20]
mov edi, dword [esp]
mov ecx, dword [ebp]
mov eax, dword [ebp - 0x18]
mov ecx, dword [esp]
mov si, 0x56
mov esi, dword [ebp - 0x18]
lea edi, [ebp]
mov di, 0x3d
mov di, 0x8b
lea esi, [esp]
lea edi, [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov edi, edx
lea edi, [ebp - 0x1c]
lea edi, [esp]
mov di, 4
mov esi, eax
lea edi, [ebp]
call dword [sym.imp.KERNEL32.dll_GetACP]
lea edx, [ebp]
lea edi, [ebp]
mov dword [ebp - 0x1c], edi
lea edi, [ebp]
lea edi, [ebp]
lea esi, [esp]
mov cx, 4
mov ecx, dword [esp]
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp]
mov edi, 0xce
mov edi, dword [ebp - 0x18]
mov edi, 0x80
mov ecx, edi
mov edx, dword [esp]
mov esi, eax
mov eax, dword [ebp - 0x18]
mov edx, dword [esp]
mov edi, 0xb5
mov di, 0xc8
mov edi, esi
mov ecx, eax
mov edx, eax
lea edi, [ebp - 0x18]
lea eax, [ebp - 0x18]
mov ax, 0x93
mov edx, dword [ebp]
mov esi, dword [ebp]
mov edx, dword [ebp]
lea esi, [ebp]
lea edi, [esp]
mov dword [ebp - 0x20], esi
mov esi, edi
lea ecx, [ebp]
mov esi, dword [ebp]
lea edi, [esp]
mov ecx, dword [ebp]
mov dword [ebp - 0x18], esi
mov esi, 8
mov edi, dword [ebp]
mov edx, 0
xor dword [ebp - 0x20], 0xffff
cmp edx, 0
jne 0x40765d
mov eax, pe_nt_image_headers32
xor dword [ebp - 0x18], 0xff
cmp edx, 0
je 0x40765d
lea edx, [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
lea ecx, [ebp]
mov edx, dword [esp]
mov edx, edi
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp]
mov dword [ebp - 0x18], ecx
mov edi, eax
mov esi, dword [ebp]
mov esi, dword [esp]
mov dword [ebp - 0x1c], eax
mov edx, dword [esp]
mov cx, 8
lea edi, [ebp]
mov edi, 2
mov eax, 2
mov edi, eax
lea eax, [ebp - 0x18]
mov eax, edx
mov dword [ebp - 0x1c], esi
mov edi, ecx
mov dword [ebp - 0x1c], ecx
lea edi, [ebp - 0x18]
mov eax, dword [esp]
lea edi, [ebp - 0x1c]
lea edi, [ebp - 0x20]
lea edi, [ebp]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], esi
mov esi, dword [esp]
lea esi, [esp]
mov dword [ebp - 0x18], esi
mov dx, 1
mov ecx, dword [ebp]
mov edx, dword [ebp]
mov ecx, 0xa5
mov esi, dword [esp]
mov ecx, edx
mov edi, esi
mov eax, pe_nt_image_headers32
sub eax, eax
xor dword [ebp - 0x18], 0xff00ff
sub dword [ebp - 0x20], 2
mov eax, 0x40
cmp eax, 0x20
ja 0x407704
mov edx, pe_nt_image_headers32
xor edx, edx
mov eax, 0x4b
lea eax, [ebp - 0x18]
push 2
push 0x4000
push 0xa00
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edi, dword [esp]
mov esi, edx
lea edx, [esp]
lea eax, [ebp - 0x1c]
mov edi, dword [esp]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x1c]
mov edx, ecx
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x20], edx
lea ecx, [esp]
mov eax, dword [esp]
mov ecx, 0x40
mov edi, esi
mov edi, dword [esp]
mov ecx, edx
mov dword [ebp - 0x18], edx
mov di, 4
mov edi, dword [ebp - 0x20]
mov esi, 0x65
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x18]
lea edx, [ebp]
lea ecx, [esp]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x20], edx
mov edx, edi
mov eax, 0x4a
lea edx, [ebp]
mov esi, edi
lea edi, [ebp - 0x18]
lea ecx, [ebp]
mov ecx, edi
mov edi, dword [ebp - 0x18]
lea edi, [ebp - 0x1c]
mov edi, dword [esp]
mov edi, 0x30
mov edi, dword [ebp]
mov dword [ebp - 0x20], edx
mov esi, ecx
mov edx, 0xe1
mov dword [ebp - 0x1c], eax
mov ecx, 0x300
and dword [ebp - 0x18], 0xffffff
xor edx, edx
or dword [ebp - 0x20], 0xff
and dword [ebp - 0x20], 0xff00ff
push 4
push 0x2000
push 0x500
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
lea edi, [ebp - 0x1c]
mov edi, dword [esp]
mov edi, dword [esp]
lea ecx, [esp]
mov ecx, edi
mov esi, edx
mov eax, dword [esp]
lea edi, [ebp - 0x1c]
mov esi, dword [esp]
lea ecx, [ebp]
mov esi, edx
mov edi, dword [ebp - 0x20]
mov edi, dword [ebp]
lea esi, [ebp]
lea edx, [esp]
mov edx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
lea edi, [ebp - 0x20]
mov esi, 0xc0
mov eax, dword [esp]
mov esi, dword [ebp - 0x20]
mov edx, dword [esp]
lea edx, [ebp - 0x1c]
lea ecx, [esp]
mov dword [ebp - 0x20], edi
mov edx, 0x66
mov edi, edx
lea ecx, [esp]
mov edi, eax
mov eax, dword [esp]
lea edx, [ebp - 0x1c]
mov edi, dword [ebp]
lea edi, [esp]
mov eax, dword [ebp - 0x18]
mov esi, dword [esp]
mov dx, 0xe8
mov ax, 0xb
lea esi, [ebp]
mov edi, dword [esp]
mov edi, dword [ebp]
lea esi, [esp]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x1c], edx
sub eax, eax
or dword [ebp - 0x18], 0xff00ff
add dword [ebp - 0x1c], 2
cmp eax, 0x66
jbe 0x407874
mov dword [ebp - 0x20], 0x4e
mov ecx, 0xc8
and dword [ebp - 0x18], 0xffff
xor ecx, ecx
mov ax, 0x57
mov dword [ebp - 0x18], 0x13
mov dword [ebp - 0x18], 0x17
mov ax, 8
mov eax, 0x64
mov ecx, 0x64
or dword [ebp - 0x18], 0xffffff
mov dword [ebp - 0x20], ecx
sub dword [ebp - 0x1c], 0x7f
test ecx, ecx
jbe 0x4078ae
xor edi, edi
test edi, edi
je 0x4078ae
push ecx
push dword [ebp - 0x18]
call fcn.0040153d
mov edx, 0x300
xor dword [ebp - 0x18], 0xffff
and dword [ebp - 0x20], 0xffff
xor ecx, ecx
mov ecx, 4
xor ecx, ecx
mov edx, 0xc8
and dword [ebp - 0x18], 0xff
cmp edx, 0xa6f
jae 0x4078f5
mov eax, dword [ebp - 0x20]
add dword [ebp - 0x20], 0x40
and dword [ebp - 0x18], 0xff00ff
leave
ret