Function at 0x1000a9cd
Capabilities:
Accept command line arguments

Disassembly:
call dword [sym.imp.kernel32.dll_GetCommandLineW]
mov edi, dword [esp]
lea edi, [esp]
lea edi, [esp]
mov ecx, edx
lea ecx, [esp]
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x2c], esi
mov edi, dword [ebp]
mov ax, 4
mov dword [ebp - 0x34], edi
lea eax, [esp]
lea eax, [ebp]
mov dword [ebp - 0x2c], esi
mov edi, dword [esp]
lea edx, [ebp]
mov dword [ebp - 0x2c], edx
mov edx, 0xeb
lea esi, [esp]
lea edi, [esp]
mov eax, dword [ebp]
mov edi, dword [esp]
mov eax, dword [ebp - 0x2c]
mov esi, 8
mov edx, edi
mov edi, dword [ebp - 0x2c]
mov edi, dword [esp]
mov edx, dword [esp]
mov edi, ecx
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp]
mov cx, 8
mov edi, dword [ebp - 0x34]
mov esi, eax
mov dword [ebp - 0x2c], edi
mov eax, 0xd9
mov edi, 0x80
mov edi, dword [ebp]
mov ax, 2
mov edx, 1
lea edi, [esp]
mov edi, dword [esp]
mov edi, dword [ebp]
mov ecx, dword [ebp]
lea eax, [ebp - 0x30]
mov dword [ebp - 0x34], edi
mov esi, edi
mov edi, 0x20
mov dword [ebp - 0x38], edi
lea edi, [ebp - 0x2c]
mov esi, dword [ebp]
lea esi, [ebp - 0x34]
mov dword [ebp - 0x34], edi
mov esi, dword [ebp]
mov edi, dword [ebp]
mov dword [ebp - 0x2c], eax
mov ecx, edi
lea esi, [ebp]
mov eax, dword [esp]
lea edi, [ebp - 0x2c]
mov edi, dword [ebp]
lea ecx, [ebp]
mov edx, 0x6d
lea ecx, [ebp - 0x2c]
lea esi, [ebp - 0x30]
lea edx, [esp]
mov edi, 1
mov ecx, 0x40
lea edi, [esp]
mov ecx, dword [esp]
mov edi, esi
mov edx, dword [esp]
mov edi, 0x95
mov edi, dword [ebp]
mov edi, dword [ebp]
mov edx, dword [esp]
lea eax, [ebp - 0x34]
lea esi, [ebp - 0x34]
mov dword [ebp - 0x34], edi
mov edi, dword [ebp]
mov edi, dword [ebp]
mov edx, dword [ebp - 0x2c]
lea edi, [esp]
mov dword [ebp - 0x30], edi
mov ecx, edx
mov edi, dword [esp]
lea edi, [esp]
mov dword [ebp - 0x30], edi
lea eax, [ebp]
lea eax, [ebp]
lea ecx, [ebp]
mov esi, dword [ebp]
lea edi, [esp]
mov edi, dword [ebp - 0x38]
lea edi, [ebp - 0x2c]
mov dx, 1
mov edx, esi
lea edx, [ebp]
lea edi, [ebp - 0x34]
mov edx, 4
lea edi, [esp]
lea esi, [ebp]
lea eax, [ebp]
mov dword [ebp - 0x34], edi
mov edi, dword [ebp]
lea eax, [ebp - 0x34]
mov eax, edi
mov edi, dword [ebp]
lea esi, [ebp]
lea esi, [ebp]
lea edx, [esp]
mov edx, ecx
lea edi, [esp]
mov ecx, dword [ebp - 0x38]
mov edi, dword [ebp]
mov edi, dword [esp]
mov dword [ebp - 0x30], esi
lea ecx, [esp]
mov ecx, edi
mov dx, 0xea
mov ecx, edx
lea edi, [ebp - 0x38]
mov ax, 4
mov edx, dword [ebp - 0x34]
lea edx, [esp]
mov si, 0x40
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x38], esi
lea edi, [esp]
mov edi, dword [ebp - 0x2c]
mov edi, dword [ebp]
mov ecx, edx
lea edi, [ebp - 0x34]
mov edi, 0xa2
mov edi, dword [ebp - 0x30]
mov si, 0x9f
mov edi, dword [ebp]
mov edi, 0x20
lea eax, [esp]
lea esi, [esp]
mov dword [ebp - 0x2c], esi
mov ecx, dword [ebp - 0x34]
mov dx, 0x55
mov dx, 0xfc
lea ecx, [ebp - 0x34]
mov edx, 1
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
lea esi, [esp]
mov edi, dword [esp]
mov dword [ebp - 0x2c], edx
lea edi, [ebp]
lea edi, [ebp]
mov edi, dword [ebp]
lea ecx, [esp]
lea esi, [esp]
mov edi, dword [ebp - 0x2c]
lea esi, [esp]
mov cx, 4
mov cx, 0x20
mov edi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x30]
mov dword [ebp - 0x2c], esi
mov esi, dword [esp]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x2c], ecx
mov ax, 0x5b
mov edi, dword [esp]
mov edx, 0xb
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp]
mov edi, dword [esp]
mov ecx, dword [ebp]
mov eax, 4
mov edx, eax
lea eax, [esp]
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x30], esi
mov dx, 0x65
mov si, 4
lea edx, [ebp]
mov esi, 0xf6
mov ax, 8
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x2c], edx
mov edi, 0xf5
call dword [sym.imp.kernel32.dll_GetCommandLineW]
lea ecx, [ebp - 0x34]
mov cx, 0x10
mov edx, dword [ebp - 0x34]
lea esi, [ebp]
mov di, 0x40
mov ecx, eax
mov esi, dword [esp]
mov ecx, dword [ebp - 0x2c]
mov esi, 8
mov edi, 0xb5
lea edx, [ebp]
mov ecx, dword [esp]
mov edi, dword [ebp]
mov edi, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp]
mov eax, dword [ebp]
mov dword [ebp - 0x38], esi
mov esi, dword [ebp]
mov ecx, eax
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp]
mov edi, eax
mov esi, dword [esp]
mov edi, dword [ebp]
mov edx, dword [ebp - 0x2c]
lea edi, [ebp - 0x34]
mov si, 0x43
lea edx, [ebp]
mov eax, dword [ebp]
mov edx, 0x20
lea esi, [esp]
lea eax, [ebp - 0x2c]
mov edi, ecx
mov ecx, dword [esp]
lea edx, [esp]
mov esi, 2
mov ecx, dword [esp]
lea edi, [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp]
mov edi, dword [esp]
mov ax, 0xc5
mov eax, edi
mov dword [ebp - 0x30], edi
mov di, 2
mov edx, dword [ebp - 0x2c]
mov edi, edx
lea edx, [ebp]
lea edx, [ebp - 0x38]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
mov ecx, 2
mov eax, dword [ebp]
lea edx, [esp]
mov esi, ecx
lea esi, [esp]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x38]
lea ecx, [ebp - 0x2c]
mov edi, dword [ebp]
mov si, 0xcb
lea edx, [ebp]
lea ecx, [ebp]
mov dx, 0x40
mov eax, dword [ebp - 0x30]
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp]
mov ecx, dword [ebp]
mov esi, ecx
lea edi, [esp]
lea eax, [ebp]
mov di, 0xd7
lea edi, [ebp]
mov eax, edi
mov dword [ebp - 0x30], ecx
mov si, 2
lea eax, [ebp - 0x30]
mov edx, edi
mov edi, edx
mov edx, 8
mov edi, dword [ebp - 0x30]
lea edi, [esp]
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0x30]
mov edi, dword [ebp - 0x38]
mov edi, 0x40
mov edi, edx
lea ecx, [ebp]
mov ecx, dword [ebp]
mov edx, edi
mov edi, dword [ebp - 0x2c]
lea esi, [ebp - 0x2c]
lea eax, [ebp]
lea eax, [ebp]
mov dword [ebp - 0x34], esi
mov esi, edi
mov dword [ebp - 0x30], edi
mov eax, 0xe2
mov cx, 4
mov dword [ebp - 0x2c], esi
mov edi, dword [esp]
mov edi, esi
lea eax, [ebp - 0x38]
mov ecx, 0xaf
lea eax, [esp]
lea edx, [ebp]
mov dword [ebp - 0x38], edi
lea eax, [esp]
lea ecx, [esp]
mov dword [ebp - 0x30], edx
mov edi, 0xa8
lea eax, [esp]
lea esi, [esp]
mov esi, dword [esp]
lea edi, [ebp]
mov esi, 0x58
mov dword [ebp - 0x38], ecx
mov eax, 0x8e
lea eax, [esp]
mov edi, dword [ebp]
lea edx, [ebp - 0x2c]
mov esi, edi
mov di, 0x10
mov ecx, dword [esp]
lea eax, [ebp]
mov esi, dword [ebp]
lea edi, [ebp]
mov edi, dword [ebp - 0x34]
mov edi, eax
mov eax, dword [esp]
lea eax, [ebp]
lea esi, [ebp]
mov edx, 1
lea edi, [ebp - 0x38]
mov edi, ecx
mov ax, 0x19
mov esi, dword [ebp]
mov edi, dword [ebp]
mov edi, eax
lea edx, [esp]
mov ecx, dword [ebp - 0x30]
mov si, 0x36
lea ecx, [ebp - 0x30]
mov edx, esi
lea edx, [ebp]
mov eax, dword [esp]
mov ecx, edx
lea edx, [ebp]
mov edi, dword [ebp - 0x30]
mov edi, dword [ebp]
mov edx, 0x10
mov eax, 2
mov eax, dword [ebp - 0x30]
lea edi, [ebp - 0x30]
mov edx, eax
mov edi, 8
mov edi, dword [esp]
mov ecx, dword [ebp]
mov edi, 0x80
mov edi, esi
lea edi, [esp]
mov esi, edi
mov si, 0xfc
lea ecx, [esp]
mov edx, dword [esp]
lea eax, [esp]
mov edi, eax
lea edi, [esp]
mov ax, 0xe5
mov dword [ebp - 0x34], ecx
mov edx, eax
mov esi, dword [esp]
lea eax, [ebp]
mov edi, eax
mov edi, edx
mov cx, 0x3f
mov eax, 0
test eax, eax
jb 0x1000ae74
mov ecx, 0x12c
add dword [ebp - 0x38], 0x29
sub ecx, ecx
cmp dword [ebp - 0x2c], eax
jae 0x1000ae7b
xor dword [ebp - 0x30], 0xffffff
call dword [sym.imp.kernel32.dll_GetCommandLineA]
mov edx, esi
mov eax, dword [ebp]
mov si, 0x31
mov edx, dword [ebp]
mov dx, 8
lea edi, [ebp]
mov di, 2
mov dx, 0x80
mov edi, esi
mov edx, esi
lea esi, [ebp]
lea esi, [ebp]
mov esi, 8
lea eax, [ebp - 0x2c]
mov edx, dword [esp]
mov esi, dword [esp]
mov esi, dword [ebp]
mov edx, 0x92
mov edi, dword [ebp - 0x34]
mov edi, dword [ebp]
lea edi, [ebp - 0x30]
lea edx, [esp]
mov edi, dword [esp]
mov eax, 0x40
mov di, 0x9a
lea eax, [ebp - 0x34]
mov esi, dword [esp]
lea eax, [ebp - 0x38]
mov cx, 0x40
mov edx, dword [esp]
mov eax, 0x20
lea edi, [ebp - 0x2c]
mov ecx, dword [esp]
mov ax, 0xb2
mov edx, dword [esp]
lea esi, [esp]
lea ecx, [ebp]
lea edi, [ebp - 0x34]
mov esi, 0x57
mov esi, 0x5e
mov edx, 0x40
lea eax, [ebp - 0x2c]
lea eax, [esp]
lea edx, [esp]
mov edi, dword [ebp]
lea esi, [ebp]
mov eax, esi
lea edx, [ebp]
lea ecx, [ebp - 0x34]
mov edi, dword [ebp]
lea edi, [ebp - 0x34]
lea edi, [ebp - 0x34]
lea esi, [esp]
lea ecx, [ebp]
mov ecx, dword [esp]
mov ecx, 0x25
lea edi, [ebp]
mov esi, dword [ebp]
lea ecx, [esp]
mov cx, 1
mov ecx, dword [ebp]
mov esi, dword [ebp - 0x34]
mov edx, edi
lea ecx, [ebp - 0x2c]
lea edi, [esp]
lea edx, [ebp]
lea esi, [esp]
lea ecx, [ebp - 0x34]
mov edi, dword [ebp]
lea esi, [ebp - 0x38]
mov si, 1
mov esi, 4
lea edx, [ebp]
mov edi, 2
lea edi, [esp]
mov edi, dword [ebp]
mov edi, dword [ebp - 0x38]
mov di, 0xf2
lea esi, [esp]
mov edx, edi
mov ecx, dword [ebp - 0x30]
mov edi, dword [ebp]
mov dword [ebp - 0x38], eax
lea eax, [esp]
mov dx, 4
mov eax, dword [ebp]
mov ecx, dword [ebp - 0x34]
lea ecx, [esp]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x38]
lea esi, [esp]
mov edi, dword [esp]
mov cx, 1
lea esi, [esp]
mov si, 8
lea esi, [ebp - 0x30]
mov edi, dword [ebp]
mov edi, dword [ebp]
mov eax, dword [ebp]
mov eax, dword [esp]
mov dword [ebp - 0x34], eax
mov edi, dword [ebp]
mov cx, 1
mov eax, dword [esp]
mov cx, 0x9b
lea edi, [ebp]
mov ecx, dword [esp]
mov ecx, 0xfc
mov edi, dword [esp]
mov dword [ebp - 0x38], edi
mov edi, dword [ebp - 0x30]
mov ax, 0xb9
mov ecx, edi
lea edi, [ebp]
mov eax, 0x57
lea edi, [ebp - 0x30]
mov edi, ecx
mov edi, dword [esp]
mov edx, dword [ebp - 0x34]
mov eax, 1
mov edi, dword [esp]
mov dword [ebp - 0x38], esi
mov ecx, edx
mov edx, dword [esp]
mov di, 0x3c
lea edi, [esp]
mov ecx, dword [esp]
mov esi, 4
mov ax, 2
mov edi, dword [esp]
lea edx, [ebp - 0x34]
mov di, 2
lea ecx, [ebp - 0x34]
lea edi, [esp]
mov ecx, dword [ebp]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x2c]
lea edi, [ebp - 0x2c]
mov edi, dword [ebp - 0x38]
mov si, 0xa
mov dx, 0x6c
mov esi, 0xa
mov eax, 0
mov ecx, edi
mov edi, dword [ebp]
lea esi, [ebp]
mov ecx, dword [esp]
mov ecx, dword [ebp - 0x30]
mov edx, esi
lea esi, [ebp - 0x34]
mov edx, dword [ebp]
lea edx, [esp]
mov ecx, dword [ebp - 0x30]
mov edx, 0x80
mov edi, esi
mov edx, 0x80
mov dword [ebp - 0x34], esi
mov edi, dword [ebp]
mov esi, 0xa9
mov dx, 0x84
lea edx, [ebp]
lea eax, [ebp - 0x38]
mov edi, dword [esp]
mov eax, dword [ebp - 0x30]
mov edi, dword [ebp - 0x34]
mov ecx, dword [esp]
mov edx, dword [ebp - 0x38]
mov esi, dword [ebp]
mov edi, dword [ebp - 0x38]
mov eax, dword [esp]
mov cx, 0x20
mov edi, dword [ebp - 0x38]
mov edi, 0x68
lea edx, [ebp]
mov dword [ebp - 0x2c], eax
mov esi, dword [esp]
mov ecx, edi
lea edx, [ebp - 0x38]
lea eax, [ebp]
mov eax, 4
mov edi, edx
mov dx, 0x45
mov dword [ebp - 0x38], ecx
lea edi, [ebp]
lea esi, [ebp - 0x38]
lea ecx, [ebp - 0x34]
mov eax, pe_nt_image_headers32
sub dword [ebp - 0x30], 0x5d
lea edx, [ebp - 0x34]
test eax, eax
jb 0x1000b107
xor edx, edx
lea eax, [ebp - 0x34]
xor edx, edx
xor dword [ebp - 0x2c], 0xff
lea edx, [ebp - 0x34]
push str.version.dll
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov dword [ebp - 0x10], eax
call dword [sym.imp.kernel32.dll_GetCommandLineA]
lea eax, [ebp]
mov edi, dword [ebp - 0x38]
mov ecx, edi
mov edi, dword [ebp - 0x30]
mov edi, 0x20
mov edi, esi
lea edi, [ebp - 0x2c]
lea esi, [ebp - 0x30]
lea edi, [ebp]
mov edi, esi
mov edi, dword [esp]
mov di, 0xf6
lea edi, [ebp - 0x38]
mov esi, dword [ebp]
mov dword [ebp - 0x30], edi
mov esi, eax
mov dword [ebp - 0x2c], edx
lea edi, [esp]
lea edi, [ebp - 0x34]
mov edi, dword [esp]
lea ecx, [ebp]
mov edi, dword [esp]
mov esi, dword [ebp]
lea edi, [ebp - 0x34]
lea esi, [ebp]
mov esi, 0x67
lea edx, [ebp - 0x30]
mov ecx, dword [esp]
lea eax, [esp]
lea esi, [ebp]
lea edx, [esp]
mov edx, 0x20
mov edi, 0xd8
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x2c], ecx
mov edi, 8
mov edi, edx
lea edx, [esp]
mov edx, 0x3b
mov cx, 0x80
mov edx, 2
lea eax, [esp]
mov edi, 0x17
lea eax, [ebp]
mov esi, dword [esp]
mov ax, 0x60
mov eax, 0xd2
lea edi, [ebp]
mov edi, dword [ebp]
mov ecx, esi
mov eax, dword [ebp - 0x38]
mov edi, 0x10
mov dword [ebp - 0x38], esi
mov edx, edi
mov edi, 1
mov edi, 0x4e
mov di, 0xbf
mov ecx, esi
mov cx, 0x10
mov eax, dword [ebp]
lea edi, [esp]
mov eax, 0x80
lea esi, [ebp]
lea edi, [esp]
lea ecx, [esp]
mov edi, ecx
mov dx, 0x86
mov dword [ebp - 0x2c], ecx
mov di, 0x88
mov di, 1
mov si, 0x53
mov edi, dword [ebp - 0x38]
mov edi, dword [ebp]
mov edi, dword [ebp]
lea edi, [esp]
lea ecx, [ebp]
mov ecx, dword [esp]
mov dx, 2
mov di, 2
mov edx, dword [ebp]
mov edx, 1
lea edx, [ebp - 0x34]
lea edi, [ebp - 0x38]
lea ecx, [esp]
mov eax, dword [esp]
mov dword [ebp - 0x34], esi
mov edi, dword [esp]
mov dx, 0x6d
lea edi, [ebp]
mov edi, dword [ebp - 0x2c]
mov di, 0x8c
mov edi, edx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], esi
lea esi, [ebp]
mov ecx, edi
mov ecx, 0xf7
mov eax, dword [esp]
mov di, 0x36
lea edi, [ebp]
mov dword [ebp - 0x38], edi
mov eax, ecx
mov eax, dword [ebp - 0x38]
mov eax, edi
mov di, 0x63
lea ecx, [esp]
lea edx, [ebp]
mov dword [ebp - 0x38], edx
mov edi, dword [ebp - 0x2c]
mov eax, dword [esp]
mov edi, 1
lea eax, [esp]
mov ecx, 0x10
mov esi, eax
lea ecx, [esp]
mov di, 0x4d
mov edi, 0x58
lea eax, [esp]
mov edi, dword [ebp]
mov edi, dword [ebp]
mov edi, dword [ebp - 0x38]
mov edi, 0x3e
lea eax, [ebp - 0x2c]
lea ecx, [esp]
mov dx, 0x7c
lea eax, [ebp]
mov ecx, 0x80
mov si, 5
mov dx, 2
mov edx, 0xf6
mov dword [ebp - 0x30], edx
lea esi, [ebp]
mov cx, 0x10
lea edx, [esp]
lea edx, [ebp]
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp]
lea edi, [ebp - 0x38]
mov edi, 0x20
lea ecx, [ebp - 0x34]
lea ecx, [ebp - 0x38]
mov edi, dword [esp]
lea edi, [ebp]
lea esi, [ebp]
mov ax, 0x87
lea edi, [esp]
mov di, 0x1e
mov eax, 0xa0
lea edi, [esp]
mov edi, dword [ebp - 0x34]
mov di, 6
mov edi, dword [esp]
mov eax, dword [ebp - 0x38]
mov esi, 0x10
mov cx, 1
mov ax, 0x36
mov edx, 0x51
mov edi, dword [ebp - 0x38]
lea ecx, [esp]
lea esi, [ebp]
mov eax, 1
mov edi, dword [esp]
mov eax, dword [ebp]
lea edx, [ebp - 0x30]
mov edi, esi
mov ecx, dword [esp]
mov ecx, dword [esp]
mov dword [ebp - 0x38], edi
mov edi, dword [ebp - 0x30]
lea esi, [ebp - 0x38]
mov ecx, dword [ebp]
lea edi, [esp]
mov dx, 0x7c
mov edi, ecx
lea edi, [ebp]
lea edi, [ebp - 0x34]
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
lea edx, [esp]
mov ecx, 0
mov ecx, 2
sub ecx, ecx
cmp ecx, 0
je 0x1000b391
mov dword [ebp - 0x38], eax
mov eax, 0
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], ecx
and dword [ebp - 0x34], 0xffffff
mov eax, 0x12c
mov eax, 0x80
mov eax, 0x40
lea eax, [ebp - 0x34]
cmp eax, 0
jbe 0x1000b3bf
sub edx, edx
sub edx, edx
xor eax, eax
and dword [ebp - 0x30], 0xffff
lea eax, [ebp - 0x30]
call dword [sym.imp.kernel32.dll_GetCommandLineA]
mov edi, dword [ebp]
mov cx, 0x80
mov edi, dword [esp]
mov edi, dword [ebp - 0x2c]
mov edi, edx
mov dword [ebp - 0x30], edx
mov edx, dword [ebp]
mov edx, dword [ebp - 0x38]
mov edi, dword [esp]
mov esi, 0xca
lea edi, [esp]
mov edi, eax
mov si, 0xf0
lea eax, [ebp - 0x38]
lea edx, [ebp - 0x2c]
lea esi, [esp]
lea esi, [ebp]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp]
mov edx, dword [ebp - 0x34]
lea esi, [ebp - 0x34]
mov dword [ebp - 0x38], ecx
lea ecx, [ebp]
mov edi, 8
lea edi, [esp]
mov eax, edi
mov edi, dword [ebp]
lea ecx, [esp]
lea eax, [ebp]
mov esi, dword [ebp - 0x34]
mov edx, edi
lea edi, [ebp]
mov dword [ebp - 0x2c], esi
mov edx, edi
mov cx, 0x33
lea ecx, [ebp]
mov di, 0xa6
lea edi, [ebp - 0x30]
mov di, 0xd4
mov dword [ebp - 0x30], edi
mov edi, dword [esp]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, eax
lea eax, [ebp]
mov edi, dword [ebp]
mov edx, 0x6e
mov esi, dword [esp]
mov ecx, eax
mov di, 8
lea eax, [esp]
mov ecx, dword [ebp - 0x30]
mov edi, dword [esp]
lea edi, [esp]
mov edi, edx
mov edx, dword [ebp]
mov eax, dword [ebp - 0x34]
lea edi, [ebp - 0x38]
mov edi, dword [ebp - 0x38]
lea ecx, [ebp - 0x30]
mov si, 0x57
lea edx, [esp]
mov dword [ebp - 0x2c], edi
mov dx, 0x34
mov dword [ebp - 0x34], edi
lea eax, [esp]
mov edi, 0x20
lea edx, [esp]
lea eax, [ebp]
mov esi, dword [esp]
mov eax, ecx
mov edx, edi
mov ecx, dword [ebp - 0x38]
lea esi, [ebp]
mov edx, dword [ebp]
mov dword [ebp - 0x2c], edi
mov eax, dword [esp]
lea edi, [esp]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x38]
mov ecx, 0x80
mov ecx, dword [ebp]
mov eax, dword [esp]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], edi
mov edi, dword [esp]
mov eax, 0x4d
mov cx, 0x7a
mov esi, eax
lea eax, [ebp]
mov dword [ebp - 0x38], ecx
mov edi, 1
lea edx, [ebp]
mov dx, 2
mov dx, 4
mov esi, edi
mov ecx, dword [ebp - 0x2c]
mov edi, dword [ebp]
lea ecx, [esp]
mov edi, dword [ebp]
lea edx, [ebp - 0x30]
mov eax, esi
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x30], edx
lea edi, [ebp]
lea eax, [esp]
mov edx, dword [ebp - 0x38]
lea eax, [esp]
mov edi, edx
mov esi, dword [esp]
mov dx, 0x9d
lea esi, [ebp]
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], edx
mov ecx, 0x20
mov dx, 4
mov eax, dword [esp]
lea ecx, [ebp]
mov eax, 4
mov eax, dword [ebp]
lea esi, [ebp - 0x34]
mov eax, dword [ebp]
mov edx, dword [ebp]
mov esi, 0x10
mov si, 8
lea eax, [ebp - 0x30]
mov edx, 4
mov esi, dword [ebp - 0x30]
mov esi, ecx
lea edx, [ebp - 0x34]
mov eax, 0x41
mov dword [ebp - 0x2c], edi
mov esi, ecx
lea ecx, [ebp - 0x38]
mov esi, dword [ebp - 0x38]
lea eax, [ebp - 0x30]
mov eax, 0xe6
lea edi, [ebp - 0x2c]
mov di, 2
lea eax, [esp]
mov dword [ebp - 0x38], ecx
lea esi, [ebp - 0x30]
lea edi, [ebp]
mov dword [ebp - 0x2c], edi
lea ecx, [ebp - 0x34]
mov ecx, dword [esp]
lea edi, [esp]
mov dword [ebp - 0x2c], eax
mov edx, edi
mov ecx, dword [esp]
mov dword [ebp - 0x38], edi
mov edx, dword [ebp]
mov di, 0x83
mov eax, dword [esp]
mov eax, 0xdd
mov ecx, 0x40
lea esi, [esp]
lea esi, [ebp - 0x38]
mov edx, dword [esp]
mov ecx, 4
mov edi, dword [ebp - 0x30]
lea eax, [ebp - 0x38]
mov si, 2
lea ecx, [ebp - 0x38]
mov si, 0x40
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x34], esi
mov eax, dword [ebp - 0x38]
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov si, 0xc5
mov edx, 0x64
or dword [ebp - 0x34], 0xffff
lea edx, [ebp - 0x2c]
cmp edx, 0x95
jne 0x1000b620
mov eax, dword [ebp - 0x34]
and dword [ebp - 0x38], 0xff
mov dx, 0x20
sub edx, edx
cmp dword [ebp - 0x30], eax
jb 0x1000b620
push str.VerQueryValueA
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [ebp - 4], eax
call dword [sym.imp.kernel32.dll_GetCommandLineW]
mov edi, dword [ebp]
lea edi, [ebp - 0x30]
mov ax, 2
mov ecx, dword [esp]
lea edi, [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x34]
lea edi, [esp]
lea esi, [ebp - 0x38]
mov esi, 0x80
mov edi, dword [esp]
mov ecx, dword [ebp]
mov dword [ebp - 0x38], esi
mov edi, esi
lea edx, [ebp - 0x30]
mov di, 0xe2
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp]
lea ecx, [ebp]
mov edx, dword [esp]
lea edi, [esp]
mov dword [ebp - 0x34], eax
mov ax, 0xa8
mov edi, dword [ebp]
lea ecx, [ebp]
lea esi, [esp]
mov edi, dword [ebp]
lea edx, [ebp - 0x2c]
mov edx, 0x92
mov ax, 2
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
mov edi, dword [ebp - 0x34]
mov edi, esi
mov edi, dword [esp]
mov di, 4
mov eax, dword [ebp]
lea esi, [esp]
mov ecx, dword [ebp - 0x2c]
mov edi, dword [esp]
lea esi, [ebp - 0x30]
mov ax, 0xe9
mov edi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x2c]
mov ecx, dword [esp]
mov ax, 0x10
mov ecx, dword [ebp - 0x34]
lea edi, [ebp]
mov edx, dword [ebp - 0x2c]
mov edi, dword [ebp]
lea edi, [esp]
mov dword [ebp - 0x2c], esi
lea ecx, [esp]
mov edi, ecx
lea edx, [ebp - 0x30]
mov dx, 0x8a
mov cx, 0x35
lea edi, [ebp - 0x2c]
mov edi, esi
mov edx, dword [ebp]
mov ecx, dword [ebp]
lea esi, [ebp]
lea ecx, [esp]
mov ecx, dword [ebp]
lea ecx, [esp]
lea edi, [esp]
lea esi, [esp]
mov cx, 0x20
mov ecx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x34]
lea edx, [ebp]
mov eax, 0x7a
mov eax, 0x41
mov edx, dword [ebp]
lea ecx, [ebp - 0x34]
mov edi, dword [ebp]
lea edi, [ebp]
lea eax, [ebp]
mov edx, dword [ebp]
mov ax, 4
lea ecx, [ebp]
mov edi, dword [ebp - 0x38]
mov dx, 0x10
mov edx, dword [esp]
mov eax, 0x6b
mov eax, 2
mov ecx, dword [ebp]
lea edi, [ebp]
lea edi, [ebp]
mov eax, dword [ebp]
lea eax, [ebp - 0x2c]
mov si, 0x52
mov dword [ebp - 0x2c], edi
lea eax, [ebp]
mov esi, edx
mov ecx, 0x64
mov edx, edi
lea ecx, [ebp - 0x38]
lea edx, [esp]
lea edi, [ebp]
mov edi, dword [ebp]
mov edi, 0x10
mov eax, edi
mov edx, edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], esi
mov esi, 0xbf
mov esi, dword [ebp - 0x2c]
mov edi, 0x3b
mov dword [ebp - 0x30], esi
mov ecx, dword [ebp - 0x38]
mov dx, 0x30
mov edi, dword [ebp]
mov di, 8
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
lea ecx, [ebp]
lea edi, [ebp]
mov eax, dword [esp]
lea edi, [ebp]
mov eax, dword [esp]
mov edx, 0x80
mov edx, dword [ebp]
lea edx, [esp]
lea ecx, [ebp - 0x30]
lea ecx, [ebp]
mov edi, dword [ebp]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [esp]
mov ecx, dword [ebp - 0x30]
mov ax, 1
mov dword [ebp - 0x2c], edi
lea esi, [ebp - 0x38]
mov edi, dword [ebp - 0x2c]
mov eax, 0x1c
lea eax, [ebp]
mov eax, dword [esp]
mov eax, 0x10
mov edx, dword [ebp]
mov eax, 4
mov esi, 0x96
mov dword [ebp - 0x30], edx
mov edx, dword [ebp]
mov edi, dword [ebp]
mov cx, 0x24
lea edi, [esp]
mov edi, dword [esp]
mov di, 0xb2
lea edi, [ebp]
mov ecx, dword [esp]
lea esi, [esp]
lea edi, [ebp - 0x30]
mov edi, dword [esp]
mov ecx, 0x5e
mov eax, dword [ebp]
lea esi, [ebp]
mov si, 2
mov edi, dword [ebp - 0x34]
lea edi, [ebp]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], ecx
mov eax, dword [esp]
mov eax, 1
mov edi, 0xc5
lea ecx, [esp]
lea edi, [ebp]
mov di, 8
lea edi, [esp]
lea edi, [esp]
mov ax, 0xfd
lea edx, [ebp]
mov edi, dword [esp]
mov si, 0xc5
mov esi, ecx
mov edi, 0x80
mov edi, dword [esp]
push 0
call dword [sym.imp.kernel32.dll_GetModuleHandleA]
lea edx, [esp]
mov cx, 0x96
mov edi, dword [ebp]
mov cx, 0x20
lea edx, [ebp - 0x30]
mov esi, dword [ebp - 0x34]
mov edi, dword [esp]
lea ecx, [ebp - 0x38]
lea edi, [ebp - 0x38]
lea edi, [ebp - 0x2c]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], ecx
lea edi, [esp]
lea esi, [esp]
mov cx, 0x7b
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], ecx
mov dx, 2
mov dword [ebp - 0x34], edi
mov edx, 0x91
lea esi, [esp]
lea edi, [esp]
mov dx, 0x8c
mov edi, eax
lea edi, [ebp - 0x2c]
mov edi, 0xa1
mov edx, dword [esp]
mov dword [ebp - 0x2c], edi
mov edi, 8
mov esi, 0x31
mov eax, dword [esp]
mov ecx, dword [esp]
mov eax, esi
mov edi, dword [ebp]
mov edi, dword [ebp - 0x30]
lea eax, [esp]
mov dx, 0x93
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0x38]
mov eax, dword [esp]
mov dword [ebp - 0x2c], esi
mov edi, dword [esp]
mov edi, dword [ebp - 0x34]
lea eax, [esp]
lea edi, [ebp]
mov ecx, dword [ebp - 0x2c]
mov eax, ecx
mov di, 0x3e
mov esi, 0x1d
mov eax, dword [ebp]
mov ecx, edx
mov edx, dword [ebp]
mov ecx, edi
lea edi, [esp]
mov edx, 0x38
mov eax, edi
mov eax, dword [ebp - 0x34]
mov si, 4
mov di, 0x20
mov si, 0x85
mov eax, dword [ebp]
lea edi, [ebp - 0x2c]
mov edi, 0x80
mov edi, 0x2e
mov edx, 0xd0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], edi
mov edi, edx
mov di, 0x2f
lea ecx, [esp]
mov dword [ebp - 0x2c], esi
lea edx, [esp]
lea eax, [esp]
lea edi, [ebp]
mov esi, dword [esp]
mov edi, 0xc1
mov ecx, 0x10
lea esi, [esp]
lea ecx, [esp]
mov eax, dword [esp]
lea ecx, [esp]
mov dword [ebp - 0x38], edx
mov edi, dword [esp]
mov edx, dword [esp]
mov eax, esi
mov edx, dword [ebp - 0x34]
mov edi, dword [ebp]
mov dword [ebp - 0x2c], eax
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x38], edi
lea edi, [ebp - 0x30]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp]
lea eax, [esp]
mov esi, 0xfb
mov dword [ebp - 0x38], edi
lea edi, [ebp]
mov cx, 0x47
mov ecx, edx
mov ecx, dword [ebp]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x38], esi
mov edi, ecx
mov edx, edi
mov di, 0x10
mov ecx, dword [ebp - 0x30]
mov edi, dword [ebp - 0x2c]
mov eax, dword [esp]
mov dword [ebp - 0x34], edx
lea ecx, [ebp - 0x30]
mov esi, 2
mov ax, 0x88
lea edi, [ebp - 0x34]
mov esi, 0x67
mov dword [ebp - 0x38], eax
lea ecx, [esp]
mov di, 4
mov edx, 0xc4
mov si, 0xe2
mov edx, dword [esp]
mov dword [ebp - 0x2c], edx
mov edi, 0xc
lea ecx, [ebp - 0x2c]
mov eax, dword [esp]
mov dword [ebp - 0x2c], esi
mov di, 0xe2
mov ecx, dword [esp]
lea ecx, [esp]
lea edx, [ebp]
mov di, 0x67
mov ecx, esi
mov esi, dword [esp]
mov edx, dword [ebp - 0x34]
mov esi, edi
mov eax, dword [ebp]
lea edi, [ebp]
mov di, 1
mov edx, dword [ebp - 0x2c]
mov eax, 0x7b
mov cx, 0x65
mov esi, 0x80
lea esi, [ebp - 0x2c]
lea edi, [ebp]
mov eax, edx
lea eax, [ebp - 0x30]
mov edi, edx
mov eax, 0x77
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x38]
mov edi, dword [ebp]
mov esi, dword [ebp - 0x2c]
lea ecx, [ebp]
lea edi, [ebp - 0x2c]
mov edi, esi
lea edi, [ebp - 0x34]
lea edi, [ebp]
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x30]
mov edi, dword [esp]
mov ecx, dword [esp]
mov edi, dword [esp]
mov edx, 0xa1
mov edi, dword [ebp]
lea esi, [ebp]
lea ecx, [ebp - 0x2c]
mov ecx, eax
mov ecx, 0x14
mov cx, 8
mov edx, dword [ebp - 0x34]
sub eax, eax
mov eax, 5
add dword [ebp - 0x2c], 8
mov eax, 0
mov dx, 0x40
and dword [ebp - 0x30], 0xffffff
sub edx, edx
mov dword [ebp - 0x38], 0x64
lea edx, [ebp - 0x2c]
ret