Function at 0x10053dd
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push 1
xor ebx, ebx
pop edi
cmp eax, ebx
mov dword [ebp - 4], edi
je 0x100588a
cmp byte [eax], bl
je 0x100588a
mov dword [ebp + 8], eax
cmp byte [eax], bl
je 0x100584a
cmp dword [ebp - 4], ebx
je 0x100584a
mov eax, dword [ebp + 8]
mov cl, byte [eax]
cmp cl, 0x20
je 0x100543b
cmp cl, 9
je 0x100543b
cmp cl, 0xd
je 0x100543b
cmp cl, 0xa
je 0x100543b
cmp cl, 0xb
je 0x100543b
cmp cl, 0xc
jne 0x1005444
push eax
call dword [sym.imp.USER32.dll_CharNextA]
jmp 0x100541b
cmp byte [eax], bl
je 0x100584a
xor ecx, ecx
xor edx, edx
mov dword [ebp + 8], eax
xor esi, esi
cmp edx, ebx
jne 0x100547a
mov eax, dword [ebp + 8]
mov al, byte [eax]
cmp al, 0x20
je 0x1005476
cmp al, 9
je 0x1005476
cmp al, 0xd
je 0x1005476
cmp al, 0xa
je 0x1005476
cmp al, 0xb
je 0x1005476
cmp al, 0xc
jne 0x100547e
cmp edx, ebx
je 0x10054c0
cmp esi, ebx
jne 0x10054c0
mov eax, dword [ebp + 8]
mov al, byte [eax]
cmp al, 0x22
jne 0x10054ae
mov eax, dword [ebp + 8]
inc eax
cmp byte [eax], 0x22
je 0x100549f
cmp edx, ebx
jne 0x1005498
mov edx, edi
jmp 0x100549a
mov esi, edi
mov dword [ebp + 8], eax
jmp 0x10054b9
mov byte [ebp + ecx - 0x10c], 0x22
inc ecx
add dword [ebp + 8], 2
jmp 0x10054b9
mov byte [ebp + ecx - 0x10c], al
inc ecx
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp byte [eax], bl
jne 0x1005455
cmp edx, ebx
mov byte [ebp + ecx - 0x10c], bl
je 0x10054d7
cmp esi, ebx
jne 0x10054df
cmp edx, ebx
jne 0x1005847
cmp esi, ebx
jne 0x1005847
cmp byte [ebp - 0x10c], 0x2f
je 0x10054f5
cmp byte [ebp - 0x10c], 0x2d
jne 0x1005843
movsx eax, byte [ebp - 0x10b]
mov esi, dword [sym.imp.USER32.dll_CharUpperA]
push eax
call esi
movsx eax, al
sub eax, 0x3f
je 0x100581c
sub eax, 4
je 0x1005776
dec eax
je 0x10056d1
sub eax, 0xa
je 0x100565f
push 3
pop ecx
sub eax, ecx
je 0x1005615
dec eax
je 0x1005545
dec eax
dec eax
je 0x10056d1
jmp 0x1005838
cmp byte [ebp - 0x10a], bl
jne 0x100555e
mov dword [0x100b6cc], ecx
mov dword [0x100aaa8], edi
jmp 0x100583b
cmp byte [ebp - 0x10a], 0x3a
jne 0x10055f6
cmp byte [ebp - 0x109], bl
mov dword [0x100b6cc], edi
je 0x100583b
lea esi, [ebp - 0x109]
movsx eax, byte [esi]
push eax
inc esi
call dword [sym.imp.USER32.dll_CharUpperA]
movsx eax, al
sub eax, 0x41
je 0x10055e0
sub eax, 3
je 0x10055d7
sub eax, 5
je 0x10055ce
sub eax, 5
je 0x10055c5
dec eax
dec eax
je 0x10055bc
sub eax, 3
je 0x10055b3
mov dword [ebp - 4], ebx
jmp 0x10055ed
or dword [0x100b6cc], 4
jmp 0x10055e7
or byte [0x100adc8], 0x80
jmp 0x10055ed
and dword [0x100b6cc], 0xfffffffe
jmp 0x10055e7
and dword [0x100b6cc], 0xfffffffd
jmp 0x10055e7
or dword [0x100adc8], 0x40
jmp 0x10055ed
or dword [0x100b6cc], 2
mov dword [0x100aaa8], edi
cmp byte [esi], bl
jne 0x1005583
jmp 0x100583b
lea eax, [ebp - 0x10b]
push eax
push 0x10014f4
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x100583b
jmp 0x1005838
cmp byte [ebp - 0x10a], bl
je 0x1005651
cmp byte [ebp - 0x10a], 0x3a
jne 0x1005838
movsx eax, byte [ebp - 0x109]
push eax
call esi
cmp al, 0x31
je 0x1005651
cmp al, 0x41
je 0x1005645
cmp al, 0x55
je 0x1005651
jmp 0x1005838
mov word [0x100aab8], di
jmp 0x100583b
mov word [0x100aab8], 2
jmp 0x100583b
cmp byte [ebp - 0x10a], bl
jne 0x1005672
mov dword [0x100aaac], edi
jmp 0x100583b
cmp byte [ebp - 0x10a], 0x3a
jne 0x1005838
cmp byte [ebp - 0x109], bl
je 0x100583b
lea esi, [ebp - 0x109]
movsx eax, byte [esi]
push eax
inc esi
call dword [sym.imp.USER32.dll_CharUpperA]
movsx eax, al
sub eax, 0x45
je 0x10056c2
dec eax
dec eax
je 0x10056ba
sub eax, 0xf
je 0x10056b2
mov dword [ebp - 4], ebx
jmp 0x10056c8
mov dword [0x100aab4], edi
jmp 0x10056c8
mov dword [0x100aab0], edi
jmp 0x10056c8
mov dword [0x100aaac], edi
cmp byte [esi], bl
jne 0x1005691
jmp 0x100583b
cmp byte [ebp - 0x10a], 0x3a
jne 0x1005838
xor eax, eax
cmp byte [ebp - 0x109], 0x22
sete al
add eax, 3
mov esi, eax
lea edi, [ebp + esi - 0x10c]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x10057fa
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
push edi
call fcn.01005361
test eax, eax
je 0x10057fa
movsx eax, byte [ebp - 0x10b]
push eax
call dword [sym.imp.USER32.dll_CharUpperA]
cmp al, 0x54
mov eax, dword [ebp - 8]
jne 0x1005740
add eax, esi
mov esi, 0x100abbe
lea eax, [ebp + eax - 0x10c]
push eax
jmp 0x100574f
add eax, esi
mov esi, 0x100aaba
lea eax, [ebp + eax - 0x10c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x10012fc
push esi
call fcn.01005c31
mov eax, esi
push eax
call fcn.01002dcb
test eax, eax
je 0x1005843
jmp 0x1005817
cmp byte [ebp - 0x10a], bl
jne 0x1005789
mov dword [0x100aaa4], edi
jmp 0x100583b
cmp byte [ebp - 0x10a], 0x3a
jne 0x1005838
xor eax, eax
cmp byte [ebp - 0x109], 0x22
sete al
add eax, 3
mov esi, eax
lea edi, [ebp + esi - 0x10c]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x10057fa
push 0x5b
push edi
call fcn.01005bb1
test eax, eax
je 0x10057d1
push 0x5d
push edi
call fcn.01005bb1
test eax, eax
je 0x10057fa
push 0x5d
push edi
call fcn.01005bb1
test eax, eax
je 0x10057e9
push 0x5b
push edi
call fcn.01005bb1
test eax, eax
je 0x10057fa
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
push edi
call fcn.01005361
test eax, eax
jne 0x10057ff
mov dword [ebp - 4], ebx
jmp 0x1005817
mov eax, dword [ebp - 8]
add eax, esi
lea eax, [ebp + eax - 0x10c]
push eax
push 0x100acc2
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 1
pop edi
jmp 0x100583b
call fcn.01001c30
mov eax, dword [0x100aa90]
cmp eax, ebx
je 0x1005831
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 4], ebx
mov eax, dword [ebp + 8]
jmp 0x1005407
xor eax, eax
jmp 0x100588c
mov dword [ebp - 4], ebx
cmp dword [0x100aaac], ebx
je 0x1005885
cmp byte [0x100abbe], bl
jne 0x1005885
mov esi, 0x100abbe
push 0x104
push esi
push dword [0x100b6dc]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x1005882
push 0x5c
push esi
call fcn.01005bff
mov byte [eax + 1], bl
jmp 0x1005885
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 4]
jmp 0x100588c
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 4