Function at 0x1003bf20
Capabilities:
Accept command line arguments
Get file attributes
Get system information on windows

Disassembly:
push 0x180
mov eax, 0x1002ecab
call fcn.1002c45a
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x12c], eax
mov eax, 0x100a7360
push eax
mov dword [ebp - 0x164], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor eax, eax
inc eax
mov dword [ebp - 0x160], eax
xor ebx, ebx
or edi, 0xffffffff
mov dword [ebp - 4], ebx
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x13c], edi
mov byte [ebp - 4], al
lea ecx, [ebp - 0x15c]
mov esi, 0x100a7388
mov dword [ebp - 0x134], ebx
push esi
mov dword [ebp - 0x148], ebx
call fcn.10037ec3
push esi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 2
call fcn.10037ec3
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x158]
push esi
mov dword [ebp - 0x154], ebx
mov byte [ebp - 0x135], bl
mov byte [ebp - 0x13d], bl
call fcn.10037ec3
lea ecx, [ebp - 0x13d]
mov byte [ebp - 4], 4
call fcn.10077d25
mov ebx, eax
test ebx, ebx
jns 0x1003c075
push esi
lea ecx, [ebp - 0x134]
call fcn.10037ec3
mov byte [ebp - 4], 5
push 0x1000a598
lea eax, [ebp - 0x134]
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x134]
pop ecx
pop ecx
push ebx
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000562c
push 1
call fcn.10071500
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
xor esi, esi
mov edx, ebx
xor ecx, ecx
call fcn.10050398
cmp byte [ebp - 0x135], 0
je 0x1003c056
call fcn.10039692
test al, al
je 0x1003c056
call fcn.1003a4b6
test ebx, ebx
jns 0x1003cafe
cmp dword [0x100a73d8], 0
je 0x1003cb04
call fcn.1006fa45
jmp 0x1003cb04
cmp byte [ebp - 0x13d], 0
jne 0x1003c09d
push esi
lea ecx, [ebp - 0x134]
mov ebx, 0x800702e4
call fcn.10037ec3
mov byte [ebp - 4], 6
push 0x1000a614
jmp 0x1003bff0
mov eax, dword [0x100a7404]
test eax, eax
je 0x1003c10f
inc eax
lea ecx, [ebp - 0x148]
push esi
mov dword [0x100a7404], eax
call fcn.10037ec3
mov byte [ebp - 4], 7
lea eax, [ebp - 0x148]
push dword [0x100a7404]
push 0x1000a64c
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x148]
add esp, 0xc
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
lea ecx, [esi - 0x10]
call fcn.10039da9
xor ebx, ebx
inc ebx
jmp 0x1003cb70
call fcn.10039692
cmp al, 1
je 0x1003c034
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0x188]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x188]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [ebp - 0x188]
lea edx, [ebp - 0x158]
call fcn.10078adf
mov ebx, eax
test ebx, ebx
jns 0x1003c1bb
push esi
lea ecx, [ebp - 0x134]
call fcn.10037ec3
mov byte [ebp - 4], 9
movzx eax, word [ebp - 0x188]
push eax
lea eax, [ebp - 0x134]
push 0x1000a678
push eax
call fcn.10038b2f
add esp, 0xc
mov esi, dword [ebp - 0x134]
push ebx
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000562c
push 1
call fcn.10071500
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
mov edi, dword [ebp - 0x13c]
jmp 0x1003c034
push 0x110
lea eax, [ebp - 0x124]
push 0
push eax
call fcn.1002e3fd
add esp, 0xc
mov dword [ebp - 0x128], 0x114
lea ecx, [ebp - 0x128]
call fcn.100749b9
test eax, eax
jne 0x1003c246
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, 0x80070000
test eax, eax
jle 0x1003c200
movzx eax, ax
or eax, edi
test eax, eax
jns 0x1003c215
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
test ebx, ebx
jle 0x1003c21c
movzx ebx, bx
or ebx, edi
jmp 0x1003c21a
mov ebx, 0x80004005
test ebx, ebx
jns 0x1003c246
push esi
lea ecx, [ebp - 0x134]
call fcn.10037ec3
mov byte [ebp - 4], 0xa
push 0x1000a6d0
lea eax, [ebp - 0x134]
push eax
call fcn.10038b2f
pop ecx
pop ecx
jmp 0x1003c17a
lea edx, [ebp - 0x15c]
call fcn.10079a5b
mov ebx, eax
test ebx, ebx
jns 0x1003c26e
push esi
lea ecx, [ebp - 0x134]
call fcn.10037ec3
mov byte [ebp - 4], 0xb
push 0x1000a728
jmp 0x1003c233
call fcn.1006ef5a
mov esi, eax
mov ebx, 0x100a7388
test esi, esi
jns 0x1003c2d7
push ebx
lea ecx, [ebp - 0x130]
call fcn.10037ec3
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0xc
push 0x1000a788
push eax
call fcn.10038b2f
pop ecx
pop ecx
push esi
mov esi, dword [ebp - 0x130]
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000562c
push 1
call fcn.10071500
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
push ebx
lea ecx, [ebp - 0x130]
call fcn.10037ec3
mov edi, 0x1000a7c8
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x130]
push edi
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x130]
pop ecx
pop ecx
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
push ebx
lea ecx, [ebp - 0x130]
call fcn.10037ec3
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0xe
push 0x1000a838
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x130]
pop ecx
pop ecx
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
push ebx
lea ecx, [ebp - 0x130]
call fcn.10037ec3
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0xf
push edi
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x130]
mov edi, 0x1000a5e4
pop ecx
pop ecx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
push ebx
lea ecx, [ebp - 0x130]
call fcn.10037ec3
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x130]
push dword [ebp - 0x174]
push dword [ebp - 0x158]
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
push dword [ebp - 0x124]
push 0x1000a8a8
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x130]
add esp, 0x1c
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
push ebx
lea ecx, [ebp - 0x130]
call fcn.10037ec3
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x130]
push dword [ebp - 0x15c]
push 0x1000a984
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x130]
add esp, 0xc
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
push ebx
lea ecx, [ebp - 0x130]
call fcn.10037ec3
mov byte [ebp - 4], 0x12
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea eax, [ebp - 0x130]
push 0x1000a9c0
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x130]
add esp, 0xc
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
push ebx
lea ecx, [ebp - 0x130]
call fcn.10037ec3
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x130]
push 0x1000aa1c
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x130]
pop ecx
pop ecx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
push ebx
lea ecx, [ebp - 0x130]
call fcn.10037ec3
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x130]
push dword [ebp - 0x12c]
mov edi, dword [ebp - 0x150]
push edi
push dword [ebp + 8]
push 0x1000aa58
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x130]
add esp, 0x14
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
test edi, edi
je 0x1003c6a7
mov ecx, edi
call fcn.10077d59
test al, al
jne 0x1003c619
mov edi, 0x80070057
lea ecx, [ebp - 0x130]
push 0x100a7388
mov ebx, edi
call fcn.10037ec3
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x150]
push eax
lea eax, [ebp - 0x130]
push 0x1000aae4
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x130]
add esp, 0xc
push edi
jmp 0x1003c181
lea eax, [ebp - 0x154]
mov edx, 0x8000
push eax
mov ecx, edi
call fcn.1003ef70
mov ebx, eax
test ebx, ebx
jns 0x1003c664
push 0x100a7388
lea ecx, [ebp - 0x150]
call fcn.10037ec3
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x16
push 0x1000ab18
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x150]
pop ecx
pop ecx
jmp 0x1003c180
cmp dword [ebp - 0x154], 0
ja 0x1003c6a7
mov edi, 0x80070057
lea ecx, [ebp - 0x154]
push 0x100a7388
mov ebx, edi
call fcn.10037ec3
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x17
push 0x1000ab48
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x154]
pop ecx
pop ecx
push edi
jmp 0x1003c181
mov esi, dword [ebp - 0x12c]
test esi, esi
je 0x1003c6f8
mov ecx, esi
call fcn.10077d59
test al, al
jne 0x1003c6f8
mov edi, 0x80070057
lea ecx, [ebp - 0x12c]
push 0x100a7388
mov ebx, edi
call fcn.10037ec3
push esi
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x18
push 0x1000ab70
push eax
call fcn.10038b2f
add esp, 0xc
push edi
mov esi, dword [ebp - 0x12c]
jmp 0x1003c181
lea edx, [ebp - 0x148]
mov ecx, edi
call fcn.10079c7c
mov ebx, eax
test ebx, ebx
jns 0x1003c740
push 0x100a7388
lea ecx, [ebp - 0x12c]
call fcn.10037ec3
mov byte [ebp - 4], 0x19
test edi, edi
jne 0x1003c728
mov edi, 0x10005698
push edi
lea eax, [ebp - 0x12c]
push 0x1000abb0
push eax
call fcn.10038b2f
add esp, 0xc
push ebx
jmp 0x1003c6ed
lea edx, [ebp - 0x134]
mov ecx, esi
call fcn.10079c7c
mov ebx, eax
test ebx, ebx
jns 0x1003c7cc
push 0x100a7388
lea ecx, [ebp - 0x12c]
call fcn.10037ec3
mov byte [ebp - 4], 0x1a
test esi, esi
jne 0x1003c770
mov esi, 0x10005698
push esi
lea eax, [ebp - 0x12c]
push 0x1000ac38
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x12c]
add esp, 0xc
push ebx
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000562c
push 1
call fcn.10071500
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
mov esi, dword [ebp - 0x134]
mov edi, dword [ebp - 0x13c]
jmp 0x1003c036
mov esi, dword [ebp - 0x134]
mov edi, esi
mov dword [ebp - 0x134], esi
test edi, edi
je 0x1003c91c
lea edx, [ebp - 0x14c]
mov ecx, esi
call fcn.100776b0
mov ebx, eax
test ebx, ebx
jns 0x1003c865
push 0x100a7388
lea ecx, [ebp - 0x12c]
call fcn.10037ec3
push esi
mov byte [ebp - 4], 0x1b
push 0x1000acc8
lea eax, [ebp - 0x12c]
push eax
call fcn.10038b2f
add esp, 0xc
push ebx
mov esi, dword [ebp - 0x12c]
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000562c
push 1
call fcn.10071500
add esp, 0x1c
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 4
call fcn.10039da9
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x134]
jmp 0x1003c036
mov esi, dword [ebp - 0x14c]
mov edi, esi
test edi, edi
je 0x1003c91c
mov ecx, esi
call fcn.10074f06
test eax, eax
jne 0x1003c8b6
mov edi, 0x80070057
lea ecx, [ebp - 0x12c]
push 0x100a7388
mov ebx, edi
call fcn.10037ec3
push esi
mov byte [ebp - 4], 0x1c
push 0x1000ad38
lea eax, [ebp - 0x12c]
push eax
call fcn.10038b2f
add esp, 0xc
push edi
jmp 0x1003c81f
mov esi, dword [ebp - 0x14c]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
jne 0x1003c8ea
mov edi, 0x80070057
lea ecx, [ebp - 0x12c]
push 0x100a7388
mov ebx, edi
call fcn.10037ec3
push esi
mov byte [ebp - 4], 0x1d
push 0x1000ad88
jmp 0x1003c8a1
mov esi, dword [ebp - 0x14c]
mov ecx, esi
call fcn.10077970
mov ebx, eax
test ebx, ebx
jns 0x1003c91c
push 0x100a7388
lea ecx, [ebp - 0x12c]
call fcn.10037ec3
push esi
mov byte [ebp - 4], 0x1e
push 0x1000add8
jmp 0x1003c80f
mov edx, dword [ebp - 0x148]
mov ecx, dword [ebp + 8]
push edi
call fcn.1006f4b2
mov ebx, eax
lea ecx, [ebp - 0x12c]
test ebx, ebx
jns 0x1003c99a
push 0x100a7388
call fcn.10037ec3
mov byte [ebp - 4], 0x1f
push 0x1000ae30
lea eax, [ebp - 0x12c]
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x12c]
pop ecx
pop ecx
push ebx
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000562c
push 1
call fcn.10071500
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
mov byte [ebp - 0x135], 1
jmp 0x1003c854
mov edi, 0x100a7388
push edi
call fcn.10037ec3
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x20
push 0x1000ae78
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x12c]
pop ecx
pop ecx
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
call fcn.100392bb
push edi
lea ecx, [ebp - 0x12c]
mov ebx, eax
call fcn.10037ec3
test ebx, ebx
jns 0x1003ca16
mov byte [ebp - 4], 0x21
push 0x1000aeb0
jmp 0x1003c94a
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x22
push 0x1000aef4
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x12c]
pop ecx
pop ecx
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.10039da9
push 1
lea ecx, [ebp - 0x13c]
call fcn.10077c86
lea eax, [ebp - 0x144]
xor edx, edx
push eax
lea ecx, [ebp - 0x13c]
call fcn.1003834b
mov ebx, eax
push edi
test ebx, ebx
jns 0x1003caa3
lea ecx, [ebp - 0x12c]
call fcn.10037ec3
mov byte [ebp - 4], 0x23
push 0x1000af28
jmp 0x1003c94a
mov eax, dword [ebp - 0x144]
lea ecx, [ebp - 0x144]
mov dword [0x100a7408], eax
call fcn.10037ec3
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0x24
push 0x1000af78
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x144]
pop ecx
pop ecx
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
jmp 0x1003c848
inc dword [0x100a7404]
push esi
call sub.msvcrt.dll_free
pop ecx
push dword [ebp - 0x148]
call sub.msvcrt.dll_free
lea ecx, [ebp - 0x144]
mov dword [esp], 0x100a7388
call fcn.10037ec3
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0x25
push 0x1000afb4
push eax
call fcn.10038b2f
mov esi, dword [ebp - 0x144]
pop ecx
pop ecx
push 0x1000a5e4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1000566c
push 3
call fcn.10071500
add esp, 0x18
lea ecx, [esi - 0x10]
call fcn.10039da9
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.10039da9
mov ecx, dword [ebp - 0x14c]
lea ecx, [ecx - 0x10]
call fcn.10039da9
mov ecx, dword [ebp - 0x15c]
lea ecx, [ecx - 0x10]
call fcn.10039da9
cmp edi, 0xffffffff
je 0x1003cba6
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x164]
call fcn.1003a526
mov eax, ebx
call fcn.1002c409
ret 0xc