Function at 0x1005302
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push 1
xor ebx, ebx
pop edi
cmp eax, ebx
mov dword [ebp - 4], edi
je 0x10057af
cmp byte [eax], bl
je 0x10057af
mov dword [ebp + 8], eax
cmp byte [eax], bl
je 0x100576f
cmp dword [ebp - 4], ebx
je 0x100576f
mov eax, dword [ebp + 8]
mov cl, byte [eax]
cmp cl, 0x20
je 0x1005360
cmp cl, 9
je 0x1005360
cmp cl, 0xd
je 0x1005360
cmp cl, 0xa
je 0x1005360
cmp cl, 0xb
je 0x1005360
cmp cl, 0xc
jne 0x1005369
push eax
call dword [sym.imp.USER32.dll_CharNextA]
jmp 0x1005340
cmp byte [eax], bl
je 0x100576f
xor ecx, ecx
xor edx, edx
mov dword [ebp + 8], eax
xor esi, esi
cmp edx, ebx
jne 0x100539f
mov eax, dword [ebp + 8]
mov al, byte [eax]
cmp al, 0x20
je 0x100539b
cmp al, 9
je 0x100539b
cmp al, 0xd
je 0x100539b
cmp al, 0xa
je 0x100539b
cmp al, 0xb
je 0x100539b
cmp al, 0xc
jne 0x10053a3
cmp edx, ebx
je 0x10053e5
cmp esi, ebx
jne 0x10053e5
mov eax, dword [ebp + 8]
mov al, byte [eax]
cmp al, 0x22
jne 0x10053d3
mov eax, dword [ebp + 8]
inc eax
cmp byte [eax], 0x22
je 0x10053c4
cmp edx, ebx
jne 0x10053bd
mov edx, edi
jmp 0x10053bf
mov esi, edi
mov dword [ebp + 8], eax
jmp 0x10053de
mov byte [ebp + ecx - 0x10c], 0x22
inc ecx
add dword [ebp + 8], 2
jmp 0x10053de
mov byte [ebp + ecx - 0x10c], al
inc ecx
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp byte [eax], bl
jne 0x100537a
cmp edx, ebx
mov byte [ebp + ecx - 0x10c], bl
je 0x10053fc
cmp esi, ebx
jne 0x1005404
cmp edx, ebx
jne 0x100576c
cmp esi, ebx
jne 0x100576c
cmp byte [ebp - 0x10c], 0x2f
je 0x100541a
cmp byte [ebp - 0x10c], 0x2d
jne 0x1005768
movsx eax, byte [ebp - 0x10b]
mov esi, dword [sym.imp.USER32.dll_CharUpperA]
push eax
call esi
movsx eax, al
sub eax, 0x3f
je 0x1005741
sub eax, 4
je 0x100569b
dec eax
je 0x10055f6
sub eax, 0xa
je 0x1005584
push 3
pop ecx
sub eax, ecx
je 0x100553a
dec eax
je 0x100546a
dec eax
dec eax
je 0x10055f6
jmp 0x100575d
cmp byte [ebp - 0x10a], bl
jne 0x1005483
mov dword [0x100b6cc], ecx
mov dword [0x100aaa8], edi
jmp 0x1005760
cmp byte [ebp - 0x10a], 0x3a
jne 0x100551b
cmp byte [ebp - 0x109], bl
mov dword [0x100b6cc], edi
je 0x1005760
lea esi, [ebp - 0x109]
movsx eax, byte [esi]
push eax
inc esi
call dword [sym.imp.USER32.dll_CharUpperA]
movsx eax, al
sub eax, 0x41
je 0x1005505
sub eax, 3
je 0x10054fc
sub eax, 5
je 0x10054f3
sub eax, 5
je 0x10054ea
dec eax
dec eax
je 0x10054e1
sub eax, 3
je 0x10054d8
mov dword [ebp - 4], ebx
jmp 0x1005512
or dword [0x100b6cc], 4
jmp 0x100550c
or byte [0x100adc8], 0x80
jmp 0x1005512
and dword [0x100b6cc], 0xfffffffe
jmp 0x100550c
and dword [0x100b6cc], 0xfffffffd
jmp 0x100550c
or dword [0x100adc8], 0x40
jmp 0x1005512
or dword [0x100b6cc], 2
mov dword [0x100aaa8], edi
cmp byte [esi], bl
jne 0x10054a8
jmp 0x1005760
lea eax, [ebp - 0x10b]
push eax
push 0x10014d4
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1005760
jmp 0x100575d
cmp byte [ebp - 0x10a], bl
je 0x1005576
cmp byte [ebp - 0x10a], 0x3a
jne 0x100575d
movsx eax, byte [ebp - 0x109]
push eax
call esi
cmp al, 0x31
je 0x1005576
cmp al, 0x41
je 0x100556a
cmp al, 0x55
je 0x1005576
jmp 0x100575d
mov word [0x100aab8], di
jmp 0x1005760
mov word [0x100aab8], 2
jmp 0x1005760
cmp byte [ebp - 0x10a], bl
jne 0x1005597
mov dword [0x100aaac], edi
jmp 0x1005760
cmp byte [ebp - 0x10a], 0x3a
jne 0x100575d
cmp byte [ebp - 0x109], bl
je 0x1005760
lea esi, [ebp - 0x109]
movsx eax, byte [esi]
push eax
inc esi
call dword [sym.imp.USER32.dll_CharUpperA]
movsx eax, al
sub eax, 0x45
je 0x10055e7
dec eax
dec eax
je 0x10055df
sub eax, 0xf
je 0x10055d7
mov dword [ebp - 4], ebx
jmp 0x10055ed
mov dword [0x100aab4], edi
jmp 0x10055ed
mov dword [0x100aab0], edi
jmp 0x10055ed
mov dword [0x100aaac], edi
cmp byte [esi], bl
jne 0x10055b6
jmp 0x1005760
cmp byte [ebp - 0x10a], 0x3a
jne 0x100575d
xor eax, eax
cmp byte [ebp - 0x109], 0x22
sete al
add eax, 3
mov esi, eax
lea edi, [ebp + esi - 0x10c]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x100571f
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
push edi
call fcn.01005286
test eax, eax
je 0x100571f
movsx eax, byte [ebp - 0x10b]
push eax
call dword [sym.imp.USER32.dll_CharUpperA]
cmp al, 0x54
mov eax, dword [ebp - 8]
jne 0x1005665
add eax, esi
mov esi, 0x100abbe
lea eax, [ebp + eax - 0x10c]
push eax
jmp 0x1005674
add eax, esi
mov esi, 0x100aaba
lea eax, [ebp + eax - 0x10c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x10012e0
push esi
call fcn.01005b56
mov eax, esi
push eax
call fcn.01002d71
test eax, eax
je 0x1005768
jmp 0x100573c
cmp byte [ebp - 0x10a], bl
jne 0x10056ae
mov dword [0x100aaa4], edi
jmp 0x1005760
cmp byte [ebp - 0x10a], 0x3a
jne 0x100575d
xor eax, eax
cmp byte [ebp - 0x109], 0x22
sete al
add eax, 3
mov esi, eax
lea edi, [ebp + esi - 0x10c]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x100571f
push 0x5b
push edi
call fcn.01005ad6
test eax, eax
je 0x10056f6
push 0x5d
push edi
call fcn.01005ad6
test eax, eax
je 0x100571f
push 0x5d
push edi
call fcn.01005ad6
test eax, eax
je 0x100570e
push 0x5b
push edi
call fcn.01005ad6
test eax, eax
je 0x100571f
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
push edi
call fcn.01005286
test eax, eax
jne 0x1005724
mov dword [ebp - 4], ebx
jmp 0x100573c
mov eax, dword [ebp - 8]
add eax, esi
lea eax, [ebp + eax - 0x10c]
push eax
push 0x100acc2
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 1
pop edi
jmp 0x1005760
call fcn.01001be2
mov eax, dword [0x100aa80]
cmp eax, ebx
je 0x1005756
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 4], ebx
mov eax, dword [ebp + 8]
jmp 0x100532c
xor eax, eax
jmp 0x10057b1
mov dword [ebp - 4], ebx
cmp dword [0x100aaac], ebx
je 0x10057aa
cmp byte [0x100abbe], bl
jne 0x10057aa
mov esi, 0x100abbe
push 0x104
push esi
push dword [0x100b6dc]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x10057a7
push 0x5c
push esi
call fcn.01005b24
mov byte [eax + 1], bl
jmp 0x10057aa
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 4]
jmp 0x10057b1
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 4