Function at 0x100108d4
Capabilities:
Accept command line arguments
Allocate or change rwx memory
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov edx, 0xc8
sub dword [ebp - 0x28], 0x5a
xor edx, edx
xor edx, edx
lea ecx, [ebp - 0x18]
lea ecx, [ebp - 0x20]
mov ecx, 0x64
add dword [ebp - 0x28], 0x10
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x20], edx
call dword [sym.imp.KERNEL32.dll_GetACP]
mov ecx, dword [ebp - 0x24]
mov edi, dword [ebp]
mov eax, 2
lea eax, [esp]
lea edx, [ebp - 0x1c]
lea esi, [esp]
mov di, 0x40
mov edi, dword [esp]
lea esi, [ebp - 0x2c]
mov esi, dword [esp]
mov edi, eax
mov eax, 0xfe
mov esi, dword [ebp]
mov edi, dword [ebp - 0x1c]
mov edi, ecx
mov esi, dword [ebp]
mov edi, dword [ebp]
mov esi, dword [ebp]
mov edx, 2
mov edx, dword [ebp - 0x1c]
mov ax, 0x80
mov edx, dword [ebp - 0x2c]
mov edx, dword [ebp]
mov edx, dword [ebp]
lea edx, [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x18]
lea ecx, [esp]
lea edi, [esp]
mov edx, dword [ebp]
lea ecx, [esp]
mov di, 0xc8
lea ecx, [ebp - 0x2c]
lea edx, [esp]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x18], edx
lea edi, [ebp]
mov di, 8
lea eax, [esp]
mov ecx, dword [ebp]
lea ecx, [ebp - 0x18]
mov ecx, dword [esp]
lea eax, [ebp]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x2c], eax
lea edi, [ebp]
mov edx, dword [esp]
lea edx, [ebp]
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov di, 0x80
mov edi, eax
mov cx, 2
mov edi, dword [ebp - 0x2c]
mov edi, dword [esp]
mov edx, dword [ebp]
mov dword [ebp - 0x24], edi
lea esi, [ebp]
mov edx, dword [ebp]
lea ecx, [ebp - 0x2c]
mov ecx, edx
lea edx, [ebp - 0x24]
mov dword [ebp - 0x28], edi
mov si, 0x80
mov esi, edx
mov dx, 0x65
mov eax, esi
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
mov dx, 0xdf
mov esi, dword [ebp - 0x24]
mov ecx, eax
mov dword [ebp - 0x20], esi
mov di, 0x22
lea eax, [ebp]
mov eax, 0xa5
mov esi, ecx
mov ecx, dword [ebp - 0x28]
lea eax, [esp]
lea esi, [ebp]
lea edi, [esp]
mov edx, dword [ebp - 0x1c]
mov edx, dword [esp]
mov edx, dword [ebp - 0x18]
lea edi, [ebp - 0x1c]
lea edx, [ebp]
mov dword [ebp - 0x1c], edx
mov esi, eax
mov edi, dword [esp]
lea eax, [ebp - 0x2c]
mov ax, 0xe8
mov edi, edx
mov dword [ebp - 0x28], edx
lea ecx, [ebp - 0x28]
lea esi, [esp]
mov edx, 0xc1
mov di, 0xa
mov edx, 0x34
mov edi, dword [ebp]
mov ecx, esi
mov edi, ecx
lea eax, [esp]
mov di, 0x59
mov edi, dword [ebp - 0x18]
mov ecx, dword [ebp]
mov edi, dword [ebp]
lea edi, [ebp]
mov edx, dword [esp]
mov dword [ebp - 0x2c], edi
mov edx, 8
lea ecx, [esp]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x18]
mov ax, 1
mov esi, dword [esp]
lea edx, [ebp]
mov dword [ebp - 0x28], edi
mov edi, 8
mov ecx, dword [ebp]
mov cx, 0x6f
mov dword [ebp - 0x24], esi
mov ecx, 1
mov ecx, dword [esp]
lea eax, [esp]
mov ecx, 0x28
mov di, 4
mov ax, 0x40
mov dword [ebp - 0x20], edi
mov eax, 0x2f
mov edx, edi
lea esi, [esp]
mov ax, 0xd7
mov edi, dword [esp]
mov edi, dword [esp]
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov si, 0x40
mov cx, 1
mov dword [ebp - 0x28], edi
lea edi, [ebp - 0x28]
mov edi, esi
mov di, 0x81
mov dword [ebp - 0x18], edi
mov si, 0x20
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], edi
mov edi, eax
mov dword [ebp - 0x2c], edx
mov edx, 4
mov eax, 0x59
mov dx, 0xf5
mov dword [ebp - 0x28], edi
lea edx, [ebp]
mov ecx, dword [esp]
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp]
mov edi, 0x80
mov dword [ebp - 0x2c], ecx
mov esi, dword [esp]
mov cx, 0xed
mov eax, dword [esp]
lea edi, [ebp]
mov edx, 1
mov edi, dword [ebp - 0x28]
mov edx, esi
mov edx, 0xab
lea edx, [ebp - 0x20]
mov dx, 0x7b
mov ecx, 1
mov edx, dword [ebp]
mov si, 1
mov esi, dword [ebp - 0x28]
lea esi, [ebp - 0x1c]
mov edx, dword [esp]
mov edi, dword [ebp]
mov ecx, dword [ebp]
lea eax, [ebp - 0x1c]
mov ecx, dword [esp]
mov edx, dword [ebp - 0x1c]
lea edi, [esp]
mov esi, edi
mov eax, 0x300
and dword [ebp - 0x28], 0xffffff
mov ecx, 0x64
and dword [ebp - 0x24], 0xffff
xor edx, edx
and dword [ebp - 0x2c], 0xffffff
and dword [ebp - 0x28], 0xff
mov dword [ebp - 0x2c], 0x49
xor ecx, ecx
call fcn.1001295a
mov eax, 0x200
add dword [ebp - 0x24], 0x33
xor eax, eax
mov ax, 4
and dword [ebp - 0x24], 0xffff
cmp eax, 0
jne 0x10010bad
mov ecx, dword [ebp - 0x2c]
xor dword [ebp - 0x18], 0xffffff
call dword [sym.imp.KERNEL32.dll_GetACP]
mov edx, dword [ebp - 0x2c]
mov ecx, eax
mov dword [ebp - 0x20], eax
mov edx, 0xdb
mov dword [ebp - 0x18], edi
lea edx, [ebp]
lea esi, [ebp - 0x1c]
mov edi, dword [ebp - 0x1c]
lea edi, [esp]
mov edi, dword [ebp - 0x2c]
lea esi, [ebp]
mov eax, 0xd3
mov edi, ecx
mov edx, dword [esp]
mov edi, esi
mov edi, 1
mov esi, dword [ebp - 0x24]
mov eax, dword [esp]
mov edi, 1
mov ecx, edx
mov esi, dword [ebp]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], esi
mov edi, 0xb9
lea eax, [esp]
mov di, 0x2c
lea edx, [ebp - 0x2c]
lea ecx, [ebp]
mov edi, esi
mov edx, 4
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], edx
mov di, 0x5f
lea eax, [esp]
mov edx, esi
mov dword [ebp - 0x20], edx
lea edx, [esp]
mov eax, dword [ebp]
mov dx, 0x2e
lea esi, [ebp]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov edi, dword [ebp - 0x2c]
lea eax, [ebp - 0x28]
lea edi, [ebp - 0x28]
mov dword [ebp - 0x24], edx
lea edx, [ebp]
mov eax, dword [ebp - 0x2c]
mov edi, edx
lea ecx, [ebp]
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], ecx
mov esi, dword [ebp - 0x2c]
mov edx, 0x8b
lea esi, [ebp - 0x24]
lea eax, [ebp]
lea eax, [ebp - 0x2c]
mov edi, edx
lea edi, [esp]
mov esi, 8
mov edi, dword [ebp - 0x2c]
mov ecx, dword [esp]
mov esi, dword [ebp - 0x18]
mov edx, esi
lea esi, [ebp]
mov edi, dword [esp]
mov edi, 4
lea ecx, [ebp - 0x18]
mov edi, dword [ebp]
mov esi, dword [esp]
lea edx, [esp]
lea edi, [esp]
lea eax, [ebp]
mov ax, 2
mov si, 0xc6
lea eax, [ebp - 0x24]
mov eax, 0x59
mov edi, dword [ebp]
mov esi, dword [esp]
lea eax, [ebp]
mov edi, dword [ebp - 0x28]
mov di, 0x10
lea edi, [ebp - 0x2c]
lea ecx, [ebp]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x24], esi
lea eax, [esp]
mov dx, 4
mov edx, dword [ebp]
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
lea edx, [ebp]
mov dword [ebp - 0x28], esi
lea eax, [ebp]
mov edi, dword [esp]
lea ecx, [ebp]
mov eax, 0x57
mov edx, 0x94
mov dword [ebp - 0x1c], eax
lea edi, [esp]
mov esi, dword [ebp]
lea edi, [esp]
mov si, 4
mov edi, dword [ebp - 0x2c]
mov ecx, edi
mov edi, ecx
lea eax, [ebp - 0x2c]
mov edi, dword [esp]
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x28], edi
mov edi, dword [esp]
mov eax, dword [ebp]
mov edi, dword [ebp - 0x20]
lea esi, [ebp - 0x20]
lea edx, [esp]
mov edx, dword [ebp - 0x1c]
lea edi, [esp]
mov edi, dword [ebp]
mov dword [ebp - 0x28], esi
mov edi, dword [ebp - 0x28]
mov ecx, dword [esp]
lea eax, [ebp]
mov edi, 0xbe
lea esi, [esp]
mov esi, dword [ebp]
mov esi, edx
lea ecx, [ebp]
mov edi, dword [ebp - 0x18]
mov esi, 4
mov esi, dword [ebp - 0x18]
lea eax, [esp]
mov esi, edi
mov edx, dword [esp]
mov esi, dword [ebp]
mov dword [ebp - 0x1c], edi
lea edi, [ebp]
lea edi, [ebp]
lea ecx, [ebp - 0x1c]
mov esi, edi
mov edx, dword [esp]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
lea eax, [ebp]
lea ecx, [ebp - 0x24]
mov edx, 0x15
mov edi, dword [esp]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov edx, eax
lea eax, [ebp]
lea edi, [ebp - 0x20]
mov edx, 0x2c
mov dword [ebp - 0x2c], edx
lea edi, [esp]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [esp]
lea edi, [esp]
mov edx, dword [ebp - 0x24]
lea edi, [ebp]
lea esi, [esp]
lea esi, [ebp - 0x24]
mov cx, 0x45
mov ecx, eax
lea ecx, [ebp - 0x18]
lea edi, [ebp - 0x1c]
mov eax, esi
lea ecx, [esp]
mov eax, dword [ebp]
mov esi, dword [ebp]
mov esi, dword [esp]
mov ecx, 0
sub dword [ebp - 0x24], 0x20
sub ecx, ecx
xor dword [ebp - 0x24], 0xffffff
sub eax, eax
push 4
push 0x4000
push 0x400
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov eax, dword [ebp]
mov edi, ecx
lea edi, [ebp]
lea edi, [ebp]
mov ax, 0x47
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp]
lea esi, [ebp - 0x18]
mov eax, dword [ebp]
lea eax, [ebp]
mov di, 0x78
mov edi, dword [ebp]
lea edi, [ebp]
lea eax, [ebp]
mov esi, dword [ebp]
lea eax, [ebp - 0x2c]
mov edi, dword [ebp]
mov dx, 8
mov dword [ebp - 0x24], ecx
lea edx, [ebp - 0x2c]
mov edx, 2
lea ecx, [ebp]
mov edx, eax
mov edi, 0x10
mov di, 4
mov edi, dword [ebp - 0x24]
mov eax, 4
lea ecx, [ebp - 0x18]
lea esi, [esp]
mov edx, dword [ebp]
mov esi, dword [ebp - 0x2c]
lea edx, [ebp]
mov di, 0xd7
lea esi, [ebp - 0x1c]
mov esi, dword [esp]
mov dword [ebp - 0x20], edi
lea edi, [ebp]
mov esi, 0xdc
lea edi, [ebp - 0x24]
mov eax, 0x5c
lea ecx, [ebp - 0x28]
mov cx, 0x49
mov edx, dword [ebp]
mov ecx, dword [ebp]
mov ecx, edi
lea edx, [ebp - 0x18]
mov di, 0x8e
lea ecx, [ebp - 0x28]
mov cx, 0x40
mov dword [ebp - 0x24], edi
lea eax, [ebp]
mov dword [ebp - 0x2c], edx
mov edi, dword [ebp - 0x1c]
mov eax, esi
mov ecx, edi
lea eax, [ebp]
mov edx, 0x2b
lea edi, [esp]
mov edx, dword [ebp]
mov edi, dword [ebp]
mov dword [ebp - 0x24], esi
lea edi, [ebp]
mov edi, dword [ebp - 0x28]
lea esi, [esp]
mov ecx, dword [ebp]
mov edi, dword [ebp - 0x28]
mov edi, eax
mov esi, 0x32
lea edi, [ebp - 0x20]
mov eax, dword [esp]
mov cx, 0x80
mov dword [ebp - 0x1c], esi
mov edi, dword [ebp - 0x2c]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
lea esi, [ebp - 0x24]
lea eax, [esp]
mov eax, dword [esp]
lea eax, [ebp - 0x20]
mov di, 4
lea edi, [ebp]
mov esi, dword [esp]
mov edx, eax
mov ecx, 0x5b
lea ecx, [ebp]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c]
lea edx, [ebp]
mov edx, dword [ebp - 0x28]
mov eax, 0x10
mov eax, dword [ebp - 0x18]
lea edi, [esp]
lea edi, [ebp - 0x1c]
lea ecx, [esp]
lea ecx, [esp]
lea ecx, [ebp - 0x28]
mov edx, dword [esp]
lea eax, [esp]
mov edx, dword [ebp]
mov edi, 0x15
mov esi, dword [ebp]
lea edi, [ebp - 0x18]
mov esi, dword [ebp - 0x28]
lea edx, [ebp]
mov dword [ebp - 0x20], edi
lea eax, [esp]
lea ecx, [ebp]
lea eax, [esp]
mov ecx, dword [ebp - 0x20]
mov edi, 0x4d
mov edx, dword [ebp]
lea edi, [ebp]
mov edi, dword [esp]
lea esi, [ebp]
lea eax, [ebp]
mov dword [ebp - 0x20], edi
mov eax, dword [esp]
lea edx, [ebp - 0x24]
lea edi, [esp]
lea esi, [ebp - 0x18]
mov edx, 1
lea ecx, [ebp]
lea eax, [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
lea edi, [ebp - 0x24]
lea edx, [ebp]
lea eax, [ebp - 0x24]
lea edi, [ebp - 0x20]
lea eax, [esp]
mov edx, dword [ebp - 0x1c]
mov eax, dword [esp]
lea edi, [ebp]
mov esi, 1
mov edi, 0x6b
lea edi, [ebp]
lea ecx, [ebp - 0x28]
mov si, 0x10
lea edi, [esp]
lea esi, [esp]
mov ecx, dword [ebp - 0x18]
lea esi, [esp]
mov esi, dword [ebp]
mov di, 0xa0
mov esi, 4
lea edi, [esp]
lea edi, [ebp]
mov ecx, dword [ebp]
mov eax, edx
mov edx, dword [ebp - 0x18]
lea esi, [ebp - 0x20]
mov ax, 0x2a
lea edi, [ebp]
mov dx, 0x5b
mov esi, dword [ebp]
lea ecx, [ebp]
lea edx, [ebp - 0x18]
mov edi, dword [ebp]
mov dword [ebp - 0x2c], eax
mov esi, ecx
mov edi, dword [ebp - 0x2c]
mov eax, dword [esp]
mov esi, dword [esp]
lea esi, [esp]
mov edi, 0x80
mov edi, dword [esp]
mov ecx, dword [ebp - 0x24]
mov edi, 0xb1
mov dword [ebp - 0x28], ecx
mov ecx, dword [esp]
mov si, 2
lea ecx, [ebp]
mov cx, 1
mov esi, dword [ebp - 0x20]
mov edx, edi
mov edi, dword [esp]
lea edi, [ebp]
mov dword [ebp - 0x1c], edx
lea edi, [esp]
mov edi, dword [ebp]
mov esi, 0x20
mov esi, dword [ebp - 0x28]
lea ecx, [ebp]
mov edi, esi
mov eax, dword [ebp - 0x24]
mov di, 0x5d
lea edi, [esp]
lea edi, [ebp]
mov dword [ebp - 0x2c], edi
xor edx, edx
mov dword [ebp - 0x20], 0x29
or dword [ebp - 0x24], 0xff00ff
mov eax, 0x40
mov eax, dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetACP]
mov cx, 0x5f
mov dword [ebp - 0x28], eax
mov edi, dword [ebp - 0x28]
lea ecx, [ebp]
mov edi, dword [esp]
mov eax, dword [ebp - 0x18]
mov di, 0xbe
mov ecx, dword [esp]
mov edi, dword [ebp - 0x24]
mov edx, dword [esp]
mov edi, dword [ebp - 0x2c]
mov dword [ebp - 0x24], edx
mov ecx, edi
mov dword [ebp - 0x1c], eax
lea edi, [ebp]
mov esi, dword [ebp - 0x2c]
mov esi, 4
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x24], edi
mov esi, dword [esp]
lea edx, [ebp]
mov esi, dword [ebp]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, esi
mov edi, 0x23
mov edi, 0x20
mov edi, dword [esp]
mov eax, 4
mov edx, eax
lea esi, [esp]
mov eax, 0x9e
mov esi, dword [ebp - 0x2c]
mov eax, dword [esp]
lea edi, [ebp]
mov di, 0xe
lea esi, [ebp - 0x20]
mov esi, 0x80
lea edi, [ebp - 0x18]
mov dword [ebp - 0x24], edi
lea edi, [ebp - 0x18]
mov ecx, dword [ebp]
mov esi, edi
mov esi, dword [ebp]
mov edi, 0xa5
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov esi, edi
mov edx, edi
mov eax, dword [ebp - 0x18]
mov ecx, dword [esp]
mov eax, 0xed
mov si, 0x80
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], eax
lea edi, [esp]
mov si, 0xf7
mov edi, dword [ebp - 0x28]
lea edi, [esp]
lea edx, [ebp]
mov edi, edx
mov edi, 1
mov dword [ebp - 0x18], ecx
lea esi, [ebp]
lea eax, [ebp]
lea edi, [ebp]
lea edx, [esp]
mov esi, dword [esp]
mov dword [ebp - 0x1c], esi
lea edi, [esp]
mov edi, ecx
mov esi, dword [esp]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], esi
lea edi, [ebp - 0x1c]
mov edi, 0x10
mov dword [ebp - 0x24], edi
lea eax, [esp]
mov cx, 0x20
mov si, 0x40
lea ecx, [ebp - 0x1c]
mov edi, 0x80
mov edi, eax
lea edi, [ebp]
lea eax, [ebp - 0x1c]
lea esi, [ebp - 0x20]
mov edi, eax
mov ecx, 0xad
lea esi, [ebp]
mov edi, 0x40
mov esi, dword [esp]
mov cx, 0xf8
lea esi, [ebp]
mov edx, ecx
mov esi, dword [esp]
lea edi, [ebp]
mov cx, 1
mov ax, 0xac
mov edi, 2
lea edx, [esp]
mov eax, dword [ebp]
mov edi, 0x40
mov edi, edx
mov eax, dword [ebp - 0x24]
mov edx, dword [esp]
mov esi, dword [esp]
mov dword [ebp - 0x24], esi
lea ecx, [ebp]
mov cx, 0x20
lea eax, [ebp - 0x1c]
lea edx, [ebp]
mov edi, dword [ebp]
lea ecx, [ebp]
lea edx, [esp]
mov edx, dword [esp]
mov esi, 0xc9
mov di, 4
lea eax, [ebp - 0x2c]
lea edi, [ebp]
mov edi, dword [ebp - 0x20]
lea esi, [esp]
mov esi, dword [esp]
mov edx, edi
lea edx, [esp]
mov edx, dword [esp]
mov dword [ebp - 0x18], esi
mov eax, dword [ebp - 0x18]
mov edx, 1
lea edi, [esp]
mov edx, eax
mov dword [ebp - 0x18], edi
mov ecx, dword [ebp]
mov edi, dword [ebp]
lea ecx, [ebp - 0x20]
mov esi, dword [esp]
mov ax, 0x59
lea edi, [esp]
mov edx, dword [ebp]
mov dword [ebp - 0x1c], eax
mov esi, dword [esp]
mov ecx, dword [ebp]
mov eax, 0x40
mov edi, edx
mov edi, dword [ebp - 0x28]
lea edx, [esp]
mov ecx, dword [ebp]
mov edi, eax
mov edi, 0x7a
mov dword [ebp - 0x1c], edi
mov edx, dword [esp]
lea edi, [ebp - 0x1c]
lea ecx, [ebp]
lea eax, [ebp]
lea edi, [esp]
lea ecx, [esp]
mov cx, 0xdb
mov dword [ebp - 0x28], ecx
mov edx, 0x9d
mov dword [ebp - 0x20], ecx
mov edi, dword [ebp]
mov dword [ebp - 0x18], edx
mov esi, dword [esp]
mov ecx, dword [ebp]
lea edx, [esp]
mov edi, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov ecx, 0x5b
lea edi, [ebp]
mov ecx, 0x10
mov dword [ebp - 0x24], edx
mov di, 2
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp]
mov dx, 8
lea edx, [esp]
lea edx, [esp]
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
add dword [ebp - 0x2c], 0x40
test ecx, ecx
jbe 0x100112de
mov eax, 0x200
lea eax, [ebp - 0x28]
cmp ecx, 0
je 0x100112de
mov eax, dword [ebp - 0x24]
mov ax, 0x24
cmp eax, 0
ja 0x10011304
mov edx, dword [ebp - 0x28]
cmp dword [ebp - 0x2c], edx
jb 0x10011304
mov dword [ebp - 0x28], 4
add dword [ebp - 0x24], 0x24
mov dword [ebp - 0x18], 0x63
mov ecx, 0x200
mov ecx, 0x51
cmp ecx, dword [ebp - 0x20]
jne 0x10011324
mov eax, 2
and dword [ebp - 0x2c], 0xff
xor eax, eax
lea ecx, [ebp - 0x2c]
xor ecx, ecx
mov eax, 0x200
and dword [ebp - 0x18], 0xffff
mov cx, 8
mov eax, dword [ebp - 0x24]
cmp eax, 0
jbe 0x1001134d
mov ecx, dword [ebp - 0x24]
and dword [ebp - 0x24], 0xffff
cmp ecx, dword [ebp - 0x2c]
jae 0x1001134d
xor edx, edx
xor edx, edx
and dword [ebp - 0x1c], 0xffffff
cmp dword [ebp - 0x2c], edx
jne 0x10011373
mov dword [ebp - 0x1c], 0x20
sub eax, eax
xor eax, eax
sub dword [ebp - 0x24], 7
and dword [ebp - 0x1c], 0xff
and dword [ebp - 0x18], 0xffffff
mov dx, 0x56
push 4
push 0x2000
push 0xc00
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edi, dword [ebp]
mov di, 0x20
mov edi, dword [esp]
lea esi, [ebp]
mov dword [ebp - 0x20], eax
mov ecx, dword [esp]
mov esi, dword [ebp - 0x28]
mov edi, 0x22
lea edi, [esp]
lea esi, [ebp]
mov esi, eax
mov edi, 0x80
mov edi, 0xef
mov edx, dword [ebp - 0x28]
mov cx, 0x29
mov cx, 0x6a
mov esi, edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], eax
lea ecx, [esp]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x24], ecx
lea edi, [ebp - 0x24]
mov edi, dword [ebp - 0x1c]
lea edi, [ebp]
mov edi, dword [ebp]
mov esi, dword [ebp - 0x1c]
mov edi, eax
mov esi, edi
lea ecx, [ebp]
mov dword [ebp - 0x20], eax
lea esi, [ebp]
mov si, 0x95
mov eax, ecx
mov eax, dword [ebp]
mov eax, edi
mov edi, 0x20
mov edx, dword [ebp]
mov edi, dword [ebp - 0x2c]
mov edi, dword [ebp]
mov dword [ebp - 0x24], esi
mov edi, dword [ebp]
mov edi, 0x6a
mov edi, dword [esp]
mov esi, dword [ebp - 0x18]
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov edi, dword [esp]
mov di, 1
lea ecx, [esp]
mov esi, 8
mov ecx, 0x80
mov edx, dword [ebp]
mov ecx, 0xa1
lea ecx, [ebp]
lea eax, [ebp - 0x1c]
mov esi, dword [esp]
lea edx, [ebp]
mov edi, esi
mov edi, dword [ebp - 0x1c]
mov ecx, eax
mov esi, dword [ebp]
lea esi, [ebp - 0x1c]
lea edx, [ebp - 0x20]
mov edx, dword [esp]
mov ecx, dword [ebp]
lea edi, [ebp]
mov ecx, dword [ebp]
lea edi, [esp]
mov edx, dword [ebp]
mov edi, dword [ebp]
lea eax, [esp]
mov edi, 0x17
lea edx, [esp]
mov esi, dword [ebp]
mov dword [ebp - 0x1c], edi
lea eax, [ebp]
lea edi, [esp]
lea edi, [ebp - 0x24]
lea esi, [ebp]
mov edi, dword [ebp]
mov eax, 0x80
mov eax, 0xea
lea esi, [ebp - 0x20]
lea edx, [ebp - 0x18]
lea edi, [esp]
mov eax, dword [ebp]
mov dword [ebp - 0x20], ecx
mov edi, dword [ebp]
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp]
mov edx, dword [esp]
lea ecx, [ebp - 0x28]
mov cx, 1
mov esi, 4
mov eax, dword [esp]
mov dword [ebp - 0x20], esi
lea edi, [ebp - 0x20]
mov edx, eax
lea edi, [ebp - 0x20]
lea eax, [ebp]
mov edx, dword [ebp - 0x24]
mov di, 0x32
lea edx, [ebp]
mov edx, dword [ebp - 0x2c]
lea edi, [ebp]
mov dword [ebp - 0x2c], edi
mov edi, dword [ebp]
lea esi, [esp]
mov dword [ebp - 0x1c], ecx
mov esi, dword [esp]
mov edx, dword [ebp]
lea ecx, [ebp - 0x2c]
mov edi, 0xaa
mov cx, 2
mov di, 0xe2
mov dx, 1
mov ecx, dword [ebp]
mov ax, 0xde
lea ecx, [ebp]
mov esi, edi
mov esi, 2
mov dword [ebp - 0x24], eax
lea edi, [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov edi, edx
mov edx, edi
mov di, 8
mov edi, dword [ebp - 0x28]
mov edi, esi
lea esi, [ebp]
mov eax, edi
mov dword [ebp - 0x18], esi
mov edi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
lea edx, [ebp]
mov esi, eax
mov edx, dword [ebp - 0x28]
mov di, 0x40
lea esi, [ebp - 0x20]
mov esi, dword [ebp]
mov ax, 0x80
mov edi, ecx
mov esi, dword [esp]
mov eax, 0x20
mov edi, dword [ebp - 0x20]
lea edx, [ebp]
lea eax, [esp]
mov dword [ebp - 0x28], ecx
lea eax, [ebp]
mov dword [ebp - 0x24], edi
lea eax, [esp]
mov dx, 0x10
mov edi, dword [ebp - 0x24]
mov esi, dword [ebp - 0x1c]
mov eax, dword [ebp]
mov edi, ecx
mov ecx, dword [ebp]
mov edi, 8
lea eax, [ebp]
mov di, 0x5e
lea edi, [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov si, 0x82
mov dword [ebp - 0x28], esi
mov cx, 0xe3
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0x20]
mov edi, edx
mov dword [ebp - 0x20], edi
mov di, 0xbe
mov ecx, dword [esp]
lea eax, [esp]
lea esi, [ebp - 0x2c]
lea eax, [ebp]
mov esi, dword [ebp]
mov dword [ebp - 0x18], edi
mov ax, 1
mov dword [ebp - 0x2c], edi
mov ax, 8
lea edi, [ebp - 0x28]
mov dword [ebp - 0x2c], edi
mov edx, 0x40
mov eax, dword [esp]
lea edx, [esp]
mov ecx, dword [esp]
mov ecx, dword [ebp - 0x24]
lea edx, [esp]
mov edi, dword [ebp]
mov eax, 0
xor edx, edx
lea eax, [ebp - 0x24]
or dword [ebp - 0x20], 0xff00ff
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edi, dword [ebp - 0x28]
mov ax, 0x5f
mov ecx, dword [ebp]
mov edi, 0x40
mov di, 0x87
lea edx, [esp]
mov edx, 0x10
mov dword [ebp - 0x18], ecx
mov di, 0x8e
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp]
lea eax, [ebp - 0x28]
mov edi, dword [ebp]
mov edi, dword [esp]
mov eax, dword [esp]
mov di, 0x40
lea eax, [ebp]
mov dword [ebp - 0x28], edi
mov eax, dword [ebp]
mov dword [ebp - 0x24], edi
lea eax, [ebp - 0x20]
lea eax, [ebp - 0x18]
mov esi, edi
mov ecx, dword [esp]
lea eax, [ebp]
mov eax, edi
lea eax, [ebp]
mov dword [ebp - 0x28], edx
mov esi, dword [esp]
mov ax, 0xae
mov ecx, dword [esp]
lea edi, [esp]
mov eax, 2
lea eax, [ebp]
lea edx, [ebp - 0x18]
lea edi, [ebp]
mov dword [ebp - 0x24], eax
mov ecx, 0x66
lea edi, [ebp - 0x24]
mov dword [ebp - 0x2c], eax
lea eax, [esp]
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp]
mov edi, dword [esp]
mov ecx, 0x40
mov esi, dword [esp]
mov esi, dword [ebp - 0x20]
lea esi, [esp]
mov ecx, dword [ebp]
mov ecx, dword [ebp]
mov edi, dword [esp]
lea eax, [ebp]
mov dword [ebp - 0x2c], edi
lea ecx, [ebp]
mov ax, 0x80
lea eax, [ebp]
lea edi, [esp]
mov edi, esi
mov dword [ebp - 0x28], eax
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x2c]
mov edx, 0x28
lea esi, [ebp]
lea edi, [esp]
mov si, 4
lea esi, [ebp]
mov edx, dword [esp]
lea ecx, [esp]
mov edi, dword [esp]
mov ecx, dword [esp]
mov dword [ebp - 0x18], ecx
lea edx, [ebp]
lea edx, [ebp - 0x18]
lea eax, [esp]
mov dword [ebp - 0x24], edi
lea eax, [ebp - 0x2c]
mov edx, 0xd0
lea edx, [esp]
mov dword [ebp - 0x24], esi
lea edx, [ebp]
mov esi, 0x10
mov eax, ecx
mov dword [ebp - 0x28], edx
lea ecx, [esp]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov edi, 0x40
mov esi, ecx
mov esi, dword [esp]
lea eax, [ebp - 0x24]
mov edi, 0xf7
lea esi, [ebp]
lea esi, [ebp - 0x24]
mov edi, dword [ebp - 0x20]
mov edx, dword [esp]
lea edi, [ebp]
mov ecx, 0x10
mov cx, 0x6d
mov dword [ebp - 0x1c], eax
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x1c]
lea edx, [ebp - 0x2c]
mov edi, dword [ebp - 0x1c]
lea esi, [ebp]
lea edi, [esp]
mov dx, 8
lea esi, [ebp - 0x1c]
mov edi, dword [ebp]
lea ecx, [ebp]
mov di, 4
mov edx, esi
mov dword [ebp - 0x24], eax
lea ecx, [esp]
mov dword [ebp - 0x24], edi
lea edi, [esp]
mov esi, 1
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov edx, 0x51
lea edi, [ebp - 0x18]
lea esi, [ebp - 0x28]
mov ecx, dword [ebp]
lea edx, [ebp]
lea edx, [ebp - 0x20]
mov esi, edx
mov esi, 0x10
mov eax, dword [esp]
mov ecx, dword [ebp - 0x20]
mov edi, dword [esp]
lea edi, [ebp - 0x28]
mov eax, dword [ebp]
mov di, 0xd8
lea eax, [ebp]
lea ecx, [ebp]
mov esi, dword [ebp - 0x18]
lea edi, [esp]
lea eax, [ebp]
mov cx, 0xa
mov dword [ebp - 0x18], eax
mov eax, esi
mov edi, dword [ebp - 0x2c]
lea esi, [ebp]
mov esi, dword [ebp - 0x20]
mov edx, esi
lea esi, [ebp]
lea edi, [ebp - 0x20]
mov ecx, dword [esp]
mov eax, dword [ebp - 0x18]
lea esi, [esp]
mov dx, 8
lea edx, [ebp - 0x1c]
mov ecx, edi
mov ax, 6
mov esi, 4
lea ecx, [ebp - 0x1c]
lea ecx, [ebp - 0x18]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
lea edi, [ebp - 0x20]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x24], edx
mov esi, dword [ebp]
mov si, 0x2a
lea eax, [ebp - 0x28]
lea edi, [esp]
mov ecx, edx
mov dword [ebp - 0x18], edi
mov edi, 0x20
lea eax, [esp]
lea edi, [ebp]
mov edx, 0x2e
mov ecx, esi
mov dword [ebp - 0x18], esi
lea esi, [ebp - 0x28]
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x1c], 0x25
mov eax, 0xc8
mov esi, 0
sub ecx, ecx
mov dword [ebp - 0x24], 0x10
mov dword [ebp - 0x1c], 0x5c
mov eax, dword [ebp - 4]
push 3
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
je 0x100118ab
mov edx, 0x12c
sub dword [ebp - 0x18], 0x10
add dword [ebp - 0x18], 0x5d
cmp edx, 0
ja 0x1001189b
sub edi, edi
add dword [ebp - 0x1c], 8
or dword [ebp - 0x2c], 0xffffff
test edx, edx
je 0x1001189b
or dword [ebp - 0x1c], 0xffffff
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x28]
test edx, edx
jae 0x100118ca
xor edi, edi
or dword [ebp - 0x24], 0xff00ff
cmp edx, 0x7f3
jae 0x100118ca
add dword [ebp - 0x28], 0x23
or dword [ebp - 0x20], 0xffffff
mov edx, dword [ebp - 0x20]
and dword [ebp - 0x18], 0xffffff
and dword [ebp - 0x1c], 0xff00ff
sub dword [ebp - 0x18], 0x3b
cmp edx, dword [ebp - 0x18]
jb 0x100118f8
mov edi, 4
xor edi, edi
xor edx, edx
add dword [ebp - 0x18], 0x7f
mov dword [ebp - 0x20], 8
inc dword [ebp - 4]
sub edx, edx
mov dword [ebp - 0x2c], 1
mov edx, 4
and dword [ebp - 0x28], 0xff00ff
test edx, edx
jne 0x10011924
xor edi, edi
sub edi, edi
cmp edx, dword [ebp - 0x18]
jae 0x10011924
xor edx, edx
mov esi, 0
xor esi, 0x8758b00
mov edx, dword [ebp - 0x24]
lea edx, [ebp - 0x18]
mov edi, 0x300
add dword [ebp - 0x24], 3
add dword [ebp - 0x28], 2
xor esi, dword [eax]
je 0x10011a2c
mov edx, pe_nt_image_headers32
sub dword [ebp - 0x28], 0x80
mov edx, 0x46
mov dword [ebp - 0x24], 0x80
cmp dword [ebp - 0x2c], edx
je 0x10011977
mov edi, 0x20
sub edi, edi
and dword [ebp - 0x28], 0xffffff
mov edx, 0x12c
and dword [ebp - 0x1c], 0xffffff
xor edx, edx
cmp dword [ebp - 0x2c], edx
jb 0x1001199a
mov edi, dword [ebp - 0x20]
sub edi, edi
and dword [ebp - 0x28], 0xff00ff
mov dx, 0x50
add dword [ebp - 0x24], 0x38
sub edx, edx
inc dword [ebp - 4]
xor edx, edx
add dword [ebp - 0x1c], 0x48
mov edi, 0
mov esi, 0xf78a74ff
not esi
mov edx, 0xc8
xor edx, edx
or dword [ebp - 0x24], 0xffff
xor dword [ebp - 0x18], 0xff00ff
cmp edx, 0xa7
jbe 0x100119ea
mov edi, 0xc8
xor dword [ebp - 0x28], 0xffffff
mov dword [ebp - 0x1c], 0xe
cmp dword [ebp - 0x2c], edx
jbe 0x100119ea
mov dword [ebp - 0x18], 0x58
and dword [ebp - 0x2c], 0xffffff
xor esi, dword [eax]
mov ecx, 0xc8
cmp ecx, 1
jae 0x10011a15
mov edi, 0x12c
lea edi, [ebp - 0x2c]
cmp edi, dword [ebp - 0x24]
jb 0x10011a19
sub dword [ebp - 0x1c], 0x1a
sub dword [ebp - 0x28], 0x10
lea ecx, [ebp - 0x24]
sub ecx, ecx
test esi, esi
je 0x10011a2c
jne 0x1001184f
call dword [sym.imp.KERNEL32.dll_GetACP]
mov edx, dword [esp]
mov esi, 0x80
mov edi, 0x10
mov edi, dword [ebp - 0x24]
mov di, 0x20
lea ecx, [ebp - 0x2c]
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
lea esi, [ebp - 0x1c]
lea edi, [ebp - 0x28]
mov edi, eax
mov edi, dword [ebp]
lea edi, [ebp]
lea ecx, [esp]
mov si, 0x80
mov edi, 2
mov edx, dword [ebp]
mov dword [ebp - 0x24], edi
mov si, 0x10
mov ecx, dword [ebp - 0x20]
lea edi, [ebp - 0x20]
mov ecx, dword [ebp]
lea esi, [esp]
mov edx, ecx
mov edx, dword [ebp - 0x28]
mov ecx, dword [esp]
mov edi, 0xa5
lea edi, [esp]
mov ecx, edi
lea edi, [ebp - 0x18]
mov esi, dword [esp]
mov edx, 0x80
mov eax, dword [ebp]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
lea ecx, [esp]
lea edi, [ebp - 0x18]
lea edx, [esp]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
lea esi, [ebp - 0x24]
lea edi, [ebp]
mov ecx, edx
lea edi, [esp]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x2c], eax
lea edx, [esp]
mov ax, 0x46
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], eax
lea eax, [ebp]
mov eax, 0xcc
lea esi, [ebp - 0x1c]
lea edi, [esp]
lea esi, [esp]
mov dword [ebp - 0x2c], eax
mov edi, 1
lea edx, [esp]
mov ecx, dword [esp]
mov eax, 8
mov ecx, dword [ebp]
mov ax, 0xd
mov eax, 0x10
mov dword [ebp - 0x20], esi
mov eax, ecx
lea edx, [esp]
mov edi, dword [ebp]
mov cx, 0xb8
mov si, 0xe3
lea eax, [ebp]
lea ecx, [esp]
mov ecx, 0xc7
lea edi, [ebp]
mov esi, dword [esp]
mov edi, dword [esp]
lea eax, [esp]
mov ecx, 0x10
mov edx, 0x20
mov ax, 0x40
lea ecx, [ebp]
mov eax, dword [esp]
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x20]
lea edx, [esp]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x24]
mov edi, dword [ebp]
mov edx, 4
mov esi, dword [ebp]
mov edx, dword [ebp]
mov edi, dword [ebp]
lea edx, [ebp - 0x28]
mov eax, dword [ebp]
lea eax, [ebp]
mov eax, dword [ebp - 0x18]
lea edi, [esp]
mov ecx, edi
mov cx, 4
mov dword [ebp - 0x20], esi
mov cx, 0xd1
lea ecx, [ebp]
mov edx, dword [ebp - 0x28]
mov eax, 0xd2
lea eax, [ebp]
mov esi, edi
mov eax, dword [ebp - 0x18]
mov edi, 0x10
mov ecx, dword [esp]
mov edx, edi
mov dword [ebp - 0x18], ecx
mov edi, edx
lea eax, [esp]
mov dword [ebp - 0x18], eax
mov eax, 0x10
mov ecx, 8
mov esi, 0xd8
mov edi, dword [esp]
mov edx, dword [esp]
mov dx, 2
lea edi, [ebp - 0x24]
mov dword [ebp - 0x20], edi
mov esi, dword [ebp]
mov ax, 0x10
mov edi, dword [esp]
lea edx, [esp]
mov dword [ebp - 0x28], esi
mov eax, edx
mov ecx, dword [esp]
lea esi, [ebp - 0x2c]
lea eax, [esp]
mov edi, eax
mov eax, dword [ebp]
mov ecx, 0x10
mov dword [ebp - 0x18], edi
mov di, 0x61
mov edi, dword [ebp]
mov edi, dword [ebp - 0x1c]
mov edi, eax
lea eax, [ebp - 0x2c]
mov eax, 0x80
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x24], eax
mov edi, 4
mov edi, dword [esp]
lea ecx, [ebp]
mov edx, ecx
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp]
mov si, 0x40
mov esi, dword [esp]
mov eax, dword [ebp]
lea esi, [ebp]
mov ax, 1
mov edi, 0x61
lea edx, [esp]
mov edx, dword [esp]
mov edi, dword [esp]
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x18]
lea esi, [ebp - 0x24]
lea esi, [esp]
mov edx, dword [ebp - 0x20]
mov edx, dword [esp]
mov ecx, dword [ebp]
mov dword [ebp - 0x18], edx
lea edi, [esp]
lea edi, [ebp - 0x1c]
mov dword [ebp - 0x20], edi
mov ecx, dword [esp]
mov edi, esi
lea edi, [ebp]
mov edi, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
lea edx, [esp]
lea edx, [ebp]
mov di, 0xad
mov edx, dword [ebp]
mov di, 0x20
mov ecx, 0xc8
sub ecx, ecx
add dword [ebp - 0x20], 0x80
test ecx, ecx
jne 0x10011c9c
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
add dword [ebp - 0x28], 0x80
push 8
push 0x8000
push 0x400
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edi, 0xc7
lea edx, [ebp]
lea edx, [esp]
lea edi, [esp]
mov eax, dword [esp]
mov si, 0
mov esi, dword [ebp - 0x20]
lea eax, [ebp - 0x2c]
lea ecx, [ebp]
lea ecx, [ebp]
lea edi, [esp]
lea edi, [ebp]
lea edi, [ebp]
mov eax, dword [esp]
lea ecx, [ebp - 0x18]
lea eax, [esp]
lea esi, [ebp - 0x1c]
mov edx, 4
mov ax, 0x20
mov ecx, dword [ebp]
mov edi, dword [esp]
mov edx, 0xe0
lea edx, [ebp - 0x1c]
mov eax, dword [esp]
lea eax, [ebp - 0x24]
mov ecx, 0xf8
mov esi, 0x80
lea edi, [ebp]
mov dword [ebp - 0x18], edi
lea edx, [ebp - 0x18]
mov edx, dword [esp]
mov eax, edi
mov edx, dword [esp]
lea esi, [ebp - 0x18]
mov eax, dword [esp]
mov esi, ecx
mov edi, dword [esp]
lea edi, [ebp]
lea edi, [ebp - 0x18]
mov di, 0x40
mov ecx, 0x58
lea ecx, [ebp - 0x1c]
mov ecx, dword [ebp]
lea esi, [ebp]
mov edx, dword [esp]
lea esi, [esp]
mov edi, dword [ebp]
mov eax, ecx
mov esi, 0xd1
mov edx, dword [esp]
mov esi, 0xd8
lea edx, [esp]
mov edi, dword [esp]
mov edi, 0x8e
mov ecx, eax
mov dword [ebp - 0x2c], eax
lea eax, [esp]
mov edi, dword [ebp]
mov edx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x18]
lea ecx, [ebp]
lea edi, [esp]
mov eax, 0x20
mov dword [ebp - 0x2c], esi
mov di, 0xa4
mov edi, dword [ebp]
lea ecx, [ebp - 0x18]
mov esi, dword [ebp - 0x20]
mov esi, edi
mov esi, 2
mov si, 4
mov edx, dword [esp]
mov eax, 1
mov ecx, dword [esp]
lea edi, [ebp - 0x28]
mov ax, 0x85
mov eax, edi
mov eax, dword [esp]
mov dword [ebp - 0x20], edi
mov di, 8
mov dword [ebp - 0x2c], ecx
mov eax, edx
mov esi, edi
mov edi, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edi
mov ecx, dword [esp]
mov dx, 0x20
mov esi, 0xd6
lea ecx, [ebp - 0x20]
mov ax, 0x10
mov edi, 0xa7
lea ecx, [esp]
mov edi, dword [esp]
mov edx, dword [ebp]
mov eax, dword [esp]
mov edi, eax
mov dword [ebp - 0x2c], edi
mov edi, dword [ebp - 0x24]
lea ecx, [ebp - 0x1c]
mov esi, dword [esp]
mov edi, edx
mov edx, dword [ebp]
lea edi, [esp]
mov dword [ebp - 0x20], edx
lea esi, [ebp]
mov edi, 0xb7
mov edi, dword [ebp]
mov eax, edi
mov si, 0x91
mov eax, dword [esp]
mov edi, ecx
mov ax, 0xd8
mov ecx, dword [ebp - 0x20]
lea edi, [esp]
mov esi, dword [esp]
mov ecx, 0x40
mov ecx, 0x40
lea edi, [ebp]
mov ecx, dword [ebp - 0x24]
mov cx, 4
mov esi, dword [ebp]
mov eax, edx
lea eax, [ebp]
lea edi, [ebp]
mov ax, 0x62
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x2c]
mov dx, 0x2b
mov dword [ebp - 0x28], edx
lea eax, [ebp]
lea edi, [esp]
mov edx, 1
mov edx, esi
lea eax, [esp]
lea esi, [esp]
mov ecx, dword [ebp]
mov edi, dword [ebp - 0x18]
lea esi, [ebp]
mov dx, 0xa5
mov eax, edx
mov eax, dword [ebp - 0x1c]
mov di, 4
lea edx, [ebp - 0x1c]
mov cx, 0x70
lea eax, [ebp]
lea eax, [esp]
mov edx, eax
mov si, 0x10
lea edi, [ebp]
mov edi, 0x10
mov edi, ecx
mov dx, 0x15
mov edx, dword [ebp]
mov ecx, edx
lea edx, [ebp]
mov dword [ebp - 0x18], edi
mov edi, esi
mov eax, dword [esp]
lea ecx, [esp]
lea edi, [ebp]
mov ecx, dword [esp]
mov eax, dword [esp]
lea eax, [esp]
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x24]
mov edi, dword [ebp - 0x18]
lea esi, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
lea esi, [esp]
mov edi, esi
mov di, 0x5e
mov edx, dword [esp]
lea edi, [ebp]
mov di, 8
lea ecx, [ebp]
mov ecx, esi
mov edx, dword [ebp - 0x20]
mov cx, 0x80
mov edi, dword [ebp - 0x18]
xor edx, edx
mov dx, 0x23
sub edx, edx
mov dword [ebp - 0x2c], 1
sub edx, edx
cmp edx, dword [ebp - 0x18]
jae 0x10011f19
mov eax, 0x200
and dword [ebp - 0x24], 0xffff
cmp eax, 0
jbe 0x10011f19
mov ecx, 0x64
mov cx, 0x40
cmp ecx, 0
jb 0x10011f38
mov eax, 0xc8
xor dword [ebp - 0x24], 0xffffff
cmp dword [ebp - 0x2c], ecx
ja 0x10011f38
call fcn.10014e90
mov eax, 0
mov dword [ebp - 0x1c], 0x59
xor dword [ebp - 0x18], 0xffff
cmp eax, dword [ebp - 0x18]
jae 0x10011f5f
mov edx, 0
mov eax, 0x5b
xor eax, eax
cmp eax, dword [ebp - 0x20]
jbe 0x10011f73
mov edx, 0xc8
add dword [ebp - 0x28], 8
add dword [ebp - 0x20], 0x40
mov dx, 0x20
xor ecx, ecx
mov edx, 0
mov cx, 2
call fcn.100043b9
xor edx, edx
xor dword [ebp - 0x24], 0xffff
and dword [ebp - 0x20], 0xff
mov eax, dword [ebp - 0x2c]
add dword [ebp - 0x2c], 0x61
sub dword [ebp - 0x18], 0x74
and dword [ebp - 0x28], 0xffffff
mov dword [ebp - 0x24], 2
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], edx
mov eax, 0x300
sub ecx, ecx
and dword [ebp - 0x2c], 0xff
mov eax, 0x12c
test eax, eax
jne 0x10011fd9
xor edx, edx
sub edx, edx
cmp eax, 0x9a
ja 0x10011fd9
mov ax, 0x3f
call fcn.10014e90
sub ecx, ecx
and dword [ebp - 0x2c], 0xffffff
or dword [ebp - 0x28], 0xffff
test ecx, ecx
jne 0x1001200c
mov eax, 0x200
or dword [ebp - 0x2c], 0xff
mov dword [ebp - 0x1c], eax
or dword [ebp - 0x20], 0xffffff
mov edi, dword [ebp - 0x2c]
mov edi, 0x20
cmp edi, 0x5b
ja 0x1001202a
mov edi, 0x300
sub dword [ebp - 0x20], 0xf
cmp edi, 0xeb
jb 0x1001202a
push edi
call fcn.1000c685
mov ecx, pe_nt_image_headers32
xor dword [ebp - 0x2c], 0xffffff
or dword [ebp - 0x24], 0xffffff
mov dword [ebp - 0x28], ecx
cmp ecx, 0xfc
jae 0x1001205a
mov eax, 0x300
cmp ecx, 0
jne 0x1001205a
sub eax, eax
mov eax, 0x12c
add dword [ebp - 0x2c], 0x40
sub eax, eax
or dword [ebp - 0x18], 0xff
cmp eax, dword [ebp - 0x1c]
jb 0x1001207e
sub edx, edx
and dword [ebp - 0x24], 0xffffff
sub dword [ebp - 0x24], 0x13
sub eax, eax
mov ax, 0x10
mov edx, 0x300
mov edx, 0x73
mov dword [ebp - 0x24], edx
test edx, edx
jne 0x100120ad
mov eax, 0x12c
add dword [ebp - 0x20], 0x49
and dword [ebp - 0x2c], 0xff
cmp edx, 0xa74
ja 0x100120ad
call fcn.100043b9
mov ecx, pe_nt_image_headers32
cmp ecx, 0x27
je 0x100120c6
xor edx, edx
cmp edx, 0
jbe 0x100120c6
lea edx, [ebp - 0x1c]
call fcn.100043b9
mov edx, 0
mov ecx, 0x20
xor dword [ebp - 0x2c], 0xff
mov ecx, 0x200
xor eax, eax
and dword [ebp - 0x24], 0xffffff
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0x80
mov edx, 0
or dword [ebp - 0x20], 0xff00ff
cmp dword [ebp - 0x28], edx
jae 0x10012134
xor dword [ebp - 0x28], 0xff00ff
mov ecx, 0x64
and dword [ebp - 0x1c], 0xff00ff
mov dword [ebp - 0x24], 1
xor dword [ebp - 0x18], 0xffff
and dword [ebp - 0x24], 0xff
xor dword [ebp - 0x1c], 0xffffff
push edx
call fcn.100043b9
mov ecx, dword [ebp - 0x18]
or dword [ebp - 0x28], 0xffffff
mov dword [ebp - 0x24], ecx
or dword [ebp - 0x2c], 0xff
cmp ecx, 0xdc
je 0x10012164
mov eax, 0
sub dword [ebp - 0x2c], 0x15
cmp eax, 0
jb 0x10012164
mov edx, 0
sub edi, edi
push edx
push dword [ebp - 0x28]
push dword [ebp - 0x18]
call fcn.1000463d
mov ecx, 0
xor dword [ebp - 0x2c], 0xff00ff
mov dword [ebp - 0x1c], 2
cmp ecx, 0x309
jae 0x1001219e
sub edx, edx
lea edx, [ebp - 0x18]
sub edx, edx
cmp dword [ebp - 0x2c], edx
je 0x1001219e
sub ecx, ecx
mov dword [ebp - 0x1c], 0x80
or dword [ebp - 0x18], 0xff00ff
sub ecx, ecx
cmp dword [ebp - 0x2c], ecx
jne 0x100121c8
mov dword [ebp - 0x1c], 0x7b
mov edx, 0x200
and dword [ebp - 0x24], 0xff00ff
mov edx, dword [ebp - 0x24]
mov dx, 0x40
cmp dword [ebp - 0x28], edx
jb 0x100121e6
mov ecx, 0x64
mov ecx, 0x48
test edx, edx
jae 0x100121e6
sub dword [ebp - 0x18], 0x63
mov ecx, dword [ebp - 0x24]
xor dword [ebp - 0x24], 0xffff
mov cx, 0x7e
cmp ecx, dword [ebp - 0x24]
jbe 0x10012207
mov edx, 0x64
add dword [ebp - 0x24], 8
cmp edx, 0
ja 0x10012207
mov dword [ebp - 0x20], 0x20
and dword [ebp - 0x1c], 0xff
push ecx
call fcn.10015b07
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edi, dword [ebp]
mov esi, edi
lea edi, [esp]
mov edi, 2
lea esi, [ebp - 0x28]
mov ecx, 0xcd
mov esi, ecx
mov edi, esi
mov dword [ebp - 0x20], esi
lea eax, [ebp]
mov edx, 0x29
mov edx, dword [ebp]
mov edi, dword [esp]
lea ecx, [ebp]
mov ecx, dword [ebp - 0x2c]
mov di, 0x80
mov ecx, 0x1a
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov edi, dword [esp]
mov edx, 2
mov dword [ebp - 0x18], edi
mov eax, dword [esp]
lea edx, [ebp]
mov dword [ebp - 0x2c], edi
lea edx, [ebp]
mov dword [ebp - 0x24], edi
lea esi, [ebp]
mov eax, dword [ebp]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x20], edi
mov ecx, 2
mov ecx, edi
lea edi, [esp]
mov esi, dword [esp]
mov ecx, 0xdc
mov edx, 4
mov ecx, 0x76
mov dword [ebp - 0x24], esi
lea eax, [ebp - 0x2c]
mov edx, dword [ebp]
mov ecx, dword [ebp - 0x24]
lea edi, [ebp]
mov cx, 0x76
mov ecx, dword [ebp]
lea edi, [ebp]
mov dword [ebp - 0x28], esi
mov edi, 0x80
mov eax, dword [esp]
mov dword [ebp - 0x1c], ecx
mov eax, 4
mov edi, dword [esp]
mov cx, 0xff
mov edx, dword [ebp]
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x20]
lea eax, [ebp]
lea edx, [ebp - 0x1c]
mov ecx, 0x26
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov ecx, 0x1a
mov edi, dword [esp]
lea eax, [ebp]
mov eax, dword [esp]
mov edi, ecx
mov edi, dword [ebp - 0x24]
lea esi, [ebp - 0x18]
mov edi, dword [esp]
mov edx, dword [ebp]
lea esi, [esp]
mov edi, dword [ebp - 0x1c]
lea esi, [ebp]
mov edx, 0xd
lea esi, [ebp]
mov edi, dword [esp]
mov esi, edi
mov dx, 4
mov ecx, dword [ebp - 0x24]
lea ecx, [ebp]
lea edi, [ebp - 0x28]
lea ecx, [esp]
lea esi, [ebp]
mov dx, 8
mov cx, 0x26
mov dword [ebp - 0x20], edi
mov edx, dword [ebp]
mov dx, 0xa5
mov edx, dword [esp]
lea edi, [esp]
mov edi, dword [ebp - 0x18]
mov ecx, dword [esp]
mov dx, 0x45
mov edi, dword [esp]
lea edi, [esp]
mov edx, ecx
lea esi, [ebp]
lea edi, [ebp]
mov edi, dword [ebp]
mov ecx, dword [ebp]
mov eax, dword [esp]
lea edx, [ebp]
mov dx, 0x1d
mov eax, dword [esp]
mov ax, 1
mov esi, dword [ebp]
lea edi, [ebp]
mov ecx, dword [ebp]
mov eax, dword [ebp - 0x24]
mov eax, ecx
mov edi, eax
mov ecx, 0x40
lea edi, [esp]
mov cx, 0x6b
mov eax, dword [esp]
mov dword [ebp - 0x2c], edx
lea edi, [esp]
mov cx, 0x94
mov dword [ebp - 0x2c], edx
mov eax, dword [esp]
mov dword [ebp - 0x24], edi
mov di, 0x40
mov edi, 0xeb
lea edi, [ebp - 0x24]
lea edi, [ebp - 0x28]
mov si, 0x10
mov eax, 0x15
mov ecx, dword [esp]
mov ecx, edi
mov edi, dword [ebp]
mov dword [ebp - 0x20], esi
lea ecx, [esp]
mov edi, 0x55
mov edx, edi
lea edi, [esp]
lea edx, [ebp]
lea edx, [ebp - 0x20]
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], esi
lea edi, [ebp - 0x2c]
mov eax, dword [esp]
lea eax, [ebp - 0x2c]
mov edi, dword [ebp - 0x24]
lea esi, [ebp - 0x2c]
mov edi, dword [ebp]
lea edi, [ebp]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp]
mov edi, edx
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x24]
lea edx, [ebp]
mov dword [ebp - 0x18], eax
mov esi, dword [esp]
lea esi, [ebp - 0x20]
mov edx, dword [ebp]
mov edi, dword [ebp - 0x24]
mov cx, 4
mov edi, 0xc9
mov edx, dword [ebp]
lea ecx, [esp]
mov eax, edi
lea edi, [esp]
mov ecx, edx
mov ecx, dword [ebp]
mov edi, 0x10
mov edx, eax
mov dx, 0x10
lea edi, [esp]
mov ax, 0x9b
lea edi, [ebp - 0x1c]
mov esi, 2
lea eax, [ebp - 0x2c]
mov ecx, eax
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x20], edi
mov edx, 0
and dword [ebp - 0x2c], 0xff00ff
add dword [ebp - 0x24], 0x80
cmp edx, dword [ebp - 0x28]
jne 0x10012487
mov eax, 0x200
xor eax, eax
add dword [ebp - 0x1c], 8
sub edx, edx
and dword [ebp - 0x24], 0xff00ff
and dword [ebp - 0x20], 0xffff
mov dword [ebp - 0x1c], edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x20], eax
mov esi, 4
mov dword [ebp - 0x2c], eax
mov edi, dword [esp]
mov di, 0x20
mov ecx, dword [ebp]
lea esi, [ebp]
mov esi, dword [esp]
lea edi, [esp]
lea edi, [esp]
mov eax, dword [esp]
mov edi, dword [ebp]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
lea eax, [esp]
lea ecx, [esp]
mov edi, 0x77
mov esi, 0x10
mov esi, dword [ebp]
mov eax, edx
mov edi, dword [esp]
mov edi, 0x40
mov eax, ecx
mov esi, dword [esp]
mov eax, dword [ebp]
mov ecx, dword [ebp - 0x20]
mov eax, 0x40
mov ecx, 0xa2
mov ax, 0x10
mov cx, 0x43
mov edi, 8
mov edx, esi
mov eax, dword [esp]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp]
mov dword [ebp - 0x2c], edi
mov esi, eax
mov edi, 0x40
mov edi, dword [esp]
mov eax, ecx
mov di, 8
lea ecx, [ebp - 0x24]
mov di, 0x2d
mov edx, dword [esp]
mov ecx, dword [ebp]
lea edi, [ebp]
mov edi, eax
mov eax, dword [ebp]
lea ecx, [ebp - 0x24]
lea esi, [ebp - 0x24]
lea eax, [esp]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x18], esi
mov eax, edi
mov esi, 0x67
lea edi, [ebp]
mov ecx, 4
lea edi, [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x2c]
lea edi, [esp]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x20]
mov esi, dword [ebp - 0x20]
mov ecx, 0xce
lea ecx, [ebp]
mov ecx, dword [ebp - 0x20]
mov eax, edx
mov dword [ebp - 0x1c], esi
lea esi, [ebp - 0x20]
mov ax, 0x40
mov eax, dword [ebp - 0x18]
mov esi, edi
mov eax, dword [ebp - 0x24]
mov esi, eax
mov edx, ecx
lea ecx, [ebp]
lea eax, [esp]
mov edx, ecx
lea edi, [esp]
lea esi, [ebp]
lea edi, [ebp - 0x18]
mov edx, dword [esp]
mov edi, eax
lea edx, [ebp - 0x18]
mov edi, dword [ebp]
mov esi, dword [esp]
lea eax, [esp]
lea esi, [esp]
lea edi, [ebp]
mov edi, eax
lea esi, [esp]
mov edx, edi
mov dx, 4
mov ecx, dword [ebp]
mov ax, 1
mov eax, dword [ebp]
lea esi, [esp]
mov eax, dword [ebp]
lea esi, [ebp]
mov edi, 0xf9
lea eax, [esp]
mov edi, dword [ebp - 0x28]
mov di, 0xd7
mov edi, ecx
mov ecx, dword [ebp]
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp]
mov edi, edx
lea esi, [ebp]
lea ecx, [esp]
mov dword [ebp - 0x28], edx
mov esi, 0x42
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x20], edi
mov esi, 0xd2
lea eax, [ebp - 0x18]
lea esi, [ebp]
lea edi, [ebp]
mov dx, 2
mov edx, edi
mov ecx, dword [ebp]
lea edx, [esp]
mov eax, 0x54
mov eax, dword [esp]
mov edi, 0x40
lea edi, [esp]
mov edi, 2
mov dword [ebp - 0x1c], edx
lea eax, [ebp]
lea esi, [esp]
mov esi, dword [ebp]
lea ecx, [ebp]
lea edi, [ebp - 0x24]
mov edi, esi
mov ax, 1
mov esi, dword [ebp - 0x2c]
mov edi, 0x20
mov esi, dword [esp]
mov dword [ebp - 0x24], ecx
lea esi, [ebp]
mov edx, esi
lea edi, [ebp]
lea edi, [ebp]
mov si, 0
lea ecx, [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
lea edi, [ebp]
lea edi, [esp]
mov di, 0x66
mov ecx, edx
mov edx, dword [ebp]
lea esi, [ebp - 0x28]
mov eax, 0xe2
mov esi, ecx
lea edi, [ebp - 0x1c]
mov edi, 0x8f
lea edx, [esp]
mov cx, 4
mov dword [ebp - 0x24], edx
mov edx, dword [esp]
mov edx, dword [esp]
mov eax, 8
mov edi, dword [ebp - 0x28]
mov ecx, dword [esp]
mov edi, dword [ebp]
mov edi, dword [ebp - 0x18]
mov ecx, 8
mov edi, 0xc1
mov edi, 0x14
lea eax, [ebp - 0x1c]
mov ecx, eax
mov edx, dword [ebp]
mov ax, 0x20
lea ecx, [ebp]
lea eax, [ebp]
mov edi, dword [esp]
mov edi, 0x20
mov dword [ebp - 0x20], edi
mov edi, dword [esp]
mov ecx, dword [esp]
mov dword [ebp - 0x28], edi
lea ecx, [ebp]
mov ecx, dword [ebp - 0x20]
leave
ret