Function at 0x2e01c17c
Capabilities:
Accept command line arguments

Disassembly:
push 0x6c
mov eax, 0x2e036d8f
call fcn.2e034a3f
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, dword [ebp + 8]
mov edi, eax
mov dword [0x2e045af8], esi
call fcn.2e01bc46
test al, al
jne 0x2e01c1aa
xor eax, eax
inc eax
jmp 0x2e01c515
call fcn.2e01bb76
test al, al
je 0x2e01c1a2
push 0x50
call fcn.2e02a316
call fcn.2e02a36a
xor ebx, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
call fcn.2e031b7d
call fcn.2e01bb09
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x24], 0x2e002fdc
mov dword [ebp - 0x28], 0x2e003050
call fcn.2e01bb17
push 0x30
lea eax, [ebp - 0x78]
push ebx
push eax
call sub.MSVCR90.dll_memset
add esp, 0xc
mov byte [ebp - 4], 1
call fcn.2e01f7f7
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], 1
call dword [sym.imp.MSO.dll_Ordinal_5706]
test eax, eax
jl 0x2e01c453
push ebx
mov dword [ebp - 0x18], 0x41
call dword [sym.imp.MSO.dll_Ordinal_7045]
test al, al
je 0x2e01c453
lea eax, [ebp - 0x24]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x3c], 0x2e002ba4
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x6c], 0x2e045b00
mov dword [ebp - 0x68], 0x2e0030bc
mov byte [ebp - 0x5f], bl
mov dword [ebp - 0x5c], ebx
mov byte [ebp - 0x4c], 1
mov dword [ebp - 0x50], 0x12
mov byte [ebp - 0x4b], 1
mov byte [ebp - 0x60], 1
call fcn.2e01f65e
call dword [sym.imp.MSO.dll_Ordinal_4250]
test eax, eax
jne 0x2e01c2a3
push 0x2e002c88
push 0x2e002c78
push 0x2e002c68
push 0x58
call dword [sym.imp.MSO.dll_Ordinal_4471]
call fcn.2e01f6bc
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x18], 0xc3
cmp byte [ebp - 0x5f], bl
je 0x2e01c2e8
cmp dword [ebp - 0x5c], ebx
je 0x2e01c2e8
push edi
mov dword [ebp - 0x48], 0xa987
call fcn.2e00bb71
lea eax, [eax + eax + 2]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x48]
push eax
push ebx
push 0x4a
push dword [ebp - 0x5c]
mov dword [ebp - 0x40], edi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x2e01c453
push edi
call fcn.2e01b8f8
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.MSO.dll_Ordinal_3807]
test eax, eax
je 0x2e01c453
mov eax, dword [ebp - 0x1c]
mov dword [0x2e045af4], eax
mov dword [ebp - 0x1c], ebx
cmp byte [0x2e045afe], bl
jne 0x2e01c322
mov byte [ebp - 0x20], 1
cmp byte [0x2e045afd], bl
je 0x2e01c325
mov byte [ebp - 0x20], bl
push dword [ebp - 0x20]
call fcn.2e01bfa6
mov byte [ebp + 0xb], al
cmp al, bl
je 0x2e01c33b
mov dword [ebp - 0x18], 0xe3
push 0x84
call fcn.2e01bb5a
pop ecx
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 3
cmp eax, ebx
je 0x2e01c35a
mov ecx, eax
call fcn.2e01bd5b
jmp 0x2e01c35c
xor eax, eax
mov byte [ebp - 4], bl
mov dword [0x2e045c94], eax
cmp eax, ebx
je 0x2e01c1a2
cmp byte [ebp - 0x20], bl
je 0x2e01c376
cmp byte [ebp + 0xb], bl
jne 0x2e01c37a
mov byte [eax + 0x2b], 1
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x46000000
push 0x2e001d54
push 0x2e0030ac
push dword [0x2e045c94]
call fcn.2e02b02d
push dword [0x2e045c94]
or dword [ebp - 0x18], 4
call fcn.2e01aa84
mov esi, eax
mov eax, dword [esi]
push esi
call dword [eax]
cmp eax, ebx
je 0x2e01c3cd
mov ecx, dword [0x2e045c94]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
push 1
push ecx
push eax
call dword [edx + 4]
mov ecx, dword [0x2e045c94]
push ebx
call fcn.2e015036
mov eax, dword [esi]
push 5
push esi
call dword [eax + 0x50]
cmp byte [0x2e045c92], bl
jne 0x2e01c41a
cmp byte [0x2e045afd], bl
jne 0x2e01c3f9
cmp byte [0x2e045afe], bl
je 0x2e01c41a
movzx ecx, byte [0x2e045afe]
mov eax, dword [0x2e045c94]
mov eax, dword [eax + 4]
push ecx
push 0x1235
push 0x400
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
cmp byte [ebp - 0x11], bl
je 0x2e01c439
mov eax, dword [0x2e045c94]
mov eax, dword [eax + 4]
push ebx
push 0x1234
push 0x400
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push ebx
push ebx
push ebx
push eax
call dword [ecx + 0xc]
jmp 0x2e01c453
mov eax, dword [0x2e045c94]
cmp eax, ebx
je 0x2e01c47e
test byte [ebp - 0x18], 4
je 0x2e01c46d
push eax
call fcn.2e02ae34
mov eax, dword [0x2e045c94]
cmp eax, ebx
je 0x2e01c476
add eax, 0xc
jmp 0x2e01c478
xor eax, eax
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test byte [ebp - 0x18], 0x20
je 0x2e01c48f
call sub.Csi.dll_void___stdcall_Csi::ShutdownNetworkMonitor_void_
call dword [sym.imp.MSO.dll_Ordinal_6196]
test byte [ebp - 0x18], 2
mov dword [ebp - 0x30], ebx
je 0x2e01c49d
call fcn.2e01f71d
test byte [ebp - 0x18], 0x80
je 0x2e01c4a9
call dword [sym.imp.MSO.dll_Ordinal_3386]
test byte [ebp - 0x18], 0x40
je 0x2e01c4b5
call dword [sym.imp.MSO.dll_Ordinal_9118]
call dword [sym.imp.MSO.dll_Ordinal_7115]
test byte [ebp - 0x18], 1
je 0x2e01c4c6
call fcn.2e01f7fe
call fcn.2e02a354
cmp byte [0x2e045c93], bl
je 0x2e01c4e4
push 0x2e043d24
call dword [sym.imp.MSO.dll_Ordinal_3155]
mov byte [0x2e045c93], bl
mov eax, dword [0x2e045c98]
cmp eax, ebx
je 0x2e01c4f3
push eax
call fcn.2e01ac27
mov eax, dword [0x2e045c9c]
mov dword [0x2e045c98], ebx
cmp eax, ebx
je 0x2e01c508
push eax
call fcn.2e01ac31
mov dword [0x2e045c9c], ebx
call fcn.2e031bb8
xor eax, eax
call fcn.2e034ae4
ret 0x10