Function at 0x10001130
Capabilities:
Link many functions at runtime
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x15a8
call fcn.100015e0
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push esi
call sub.MSVCRT.dll_strlen
mov ebx, eax
cmp ebx, 1
pop ecx
jl 0x100014fd
cmp ebx, 0x104
jg 0x100014fd
xor edi, edi
test ebx, ebx
jle 0x10001190
mov dword [ebp + 8], esi
lea eax, [ebp - 0x2e0]
sub dword [ebp + 8], eax
mov eax, dword [ebp + 8]
lea esi, [ebp + edi - 0x2e0]
movsx eax, byte [eax + esi]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
inc edi
cmp edi, ebx
pop ecx
mov byte [esi], al
jl 0x10001173
and byte [ebp + ebx - 0x2e0], 0
lea eax, [ebp - 0xb4]
push eax
mov dword [ebp - 0xb4], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x100011bd
mov eax, 0x25e
jmp 0x10001502
cmp dword [ebp - 0xa4], 2
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x100011e9
cmp dword [ebp - 0xa4], 1
je 0x1000131d
mov eax, 0x25f
jmp 0x10001502
push 0x1000111c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
mov dword [ebp - 0x10], eax
jne 0x10001205
mov eax, 0x25d
jmp 0x10001502
push 0x1000110c
push eax
call esi
push 0x100010f8
push dword [ebp - 0x10]
mov ebx, eax
call esi
push 0x100010e4
push dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
call esi
test ebx, ebx
mov dword [ebp - 0x14], eax
je 0x10001370
cmp dword [ebp - 0xc], 0
je 0x10001370
test eax, eax
je 0x10001370
lea eax, [ebp - 0x18]
push eax
push 0x3e8
lea eax, [ebp - 0x15a8]
push eax
call ebx
test eax, eax
jne 0x10001263
mov esi, 0x2bd
jmp 0x100014e9
mov eax, dword [ebp - 0x18]
shr eax, 2
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0
je 0x10001310
lea eax, [ebp - 0x15a8]
mov dword [ebp - 8], eax
lea eax, [ebp - 0x3e4]
push 0x100010dc
push eax
call sub.MSVCRT.dll_strcpy
mov eax, dword [ebp - 8]
mov ebx, dword [sym.imp.KERNEL32.dll_OpenProcess]
pop ecx
pop ecx
push dword [eax]
push 0
push 0x410
call ebx
test eax, eax
mov dword [ebp + 8], eax
je 0x100012d7
lea ecx, [ebp - 0x18]
push ecx
push 4
lea ecx, [ebp - 0x1c]
push ecx
push eax
call dword [ebp - 0xc]
test eax, eax
je 0x100012d7
push 0x104
lea eax, [ebp - 0x3e4]
push eax
push dword [ebp - 0x1c]
push dword [ebp + 8]
call dword [ebp - 0x14]
push dword [ebp + 8]
call edi
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x3e4]
push eax
call dword [sym.imp.MSVCRT.dll__strupr]
pop ecx
push eax
call sub.MSVCRT.dll_strcmp
test eax, eax
pop ecx
pop ecx
je 0x1000133b
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
add dword [ebp - 8], 4
cmp eax, dword [ebp - 0x20]
jb 0x10001282
cmp dword [ebp - 0xa4], 1
jne 0x100014e4
push 0x100010cc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
mov dword [ebp - 0x10], ebx
jne 0x1000137a
mov eax, 0x2be
jmp 0x10001502
mov eax, dword [ebp - 4]
push dword [ebp + eax*4 - 0x15a8]
push 0
push 1
call ebx
mov esi, eax
test esi, esi
je 0x100014da
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
push esi
je 0x100014cb
call edi
xor esi, esi
jmp 0x100014e9
mov esi, 0x2bc
jmp 0x100014e9
push 0x100010b0
push ebx
call esi
push 0x100010a0
push ebx
mov dword [ebp + 8], eax
call esi
push 0x10001090
push ebx
mov dword [ebp - 0xc], eax
call esi
push 0x10001080
push ebx
mov dword [ebp - 0x14], eax
call esi
push 0x10001070
push ebx
mov dword [ebp - 8], eax
call esi
mov dword [ebp - 4], eax
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x100014f6
cmp dword [ebp - 0xc], eax
je 0x100014f6
cmp dword [ebp - 4], eax
je 0x100014f6
cmp dword [ebp - 8], eax
je 0x100014f6
cmp dword [ebp + 8], eax
je 0x100014f6
push eax
push 2
call dword [ebp + 8]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x100013f7
mov esi, 0x2c0
jmp 0x100014e9
lea eax, [ebp - 0x1dc]
push eax
push ebx
mov dword [ebp - 0x1dc], 0x128
call dword [ebp - 0xc]
test eax, eax
je 0x100014e1
push dword [ebp - 0x1d4]
push 8
call dword [ebp + 8]
mov esi, eax
cmp esi, 0xffffffff
je 0x10001489
lea eax, [ebp - 0x608]
push eax
push esi
mov dword [ebp - 0x608], 0x224
call dword [ebp - 8]
test eax, eax
je 0x1000146f
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x5e8]
push eax
call sub.MSVCRT.dll_strcmp
test eax, eax
pop ecx
pop ecx
je 0x10001491
lea eax, [ebp - 0x608]
push eax
push esi
mov dword [ebp - 0x608], 0x224
call dword [ebp - 4]
jmp 0x1000143b
push esi
call edi
lea eax, [ebp - 0x1dc]
push eax
push ebx
mov dword [ebp - 0x1dc], 0x128
call dword [ebp - 0x14]
jmp 0x1000140c
push ebx
call edi
jmp 0x100013ed
push dword [ebp - 0x1d4]
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
mov dword [ebp + 8], eax
je 0x100014d4
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
push esi
je 0x100014c3
call edi
push ebx
call edi
push dword [ebp + 8]
jmp 0x10001367
call edi
push ebx
call edi
push dword [ebp + 8]
call edi
mov esi, 0x25a
jmp 0x100014e9
push esi
call edi
push ebx
call edi
mov esi, 0x25c
jmp 0x100014e9
push ebx
call edi
mov esi, 0x25b
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, esi
jmp 0x10001502
mov esi, 0x2bf
jmp 0x100014e9
mov eax, 0x278
pop edi
pop esi
pop ebx
leave
ret