Function at 0x3000b1af
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
or dword [ebp - 4], 0xffffffff
push ebx
push esi
push edi
xor eax, eax
push 0xfffffffffffffffe
pop esi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov ebx, eax
push 0x30001d00
push ebx
call fcn.3000aa71
mov edi, eax
test edi, edi
pop ecx
pop ecx
je 0x3000b1ed
add edi, 8
jmp 0x3000b245
push 0x30002624
push ebx
call fcn.3000aa71
mov edi, eax
test edi, edi
pop ecx
pop ecx
je 0x3000b205
add edi, 0x10
jmp 0x3000b245
cmp word [ebx], 0x22
jne 0x3000b22f
lea eax, [ebx + 2]
push 0x22
push eax
call fcn.3000a869
test eax, eax
pop ecx
pop ecx
je 0x3000b22f
add eax, 2
push 0x20
push eax
call fcn.3000a869
mov edi, eax
test edi, edi
pop ecx
pop ecx
jne 0x3000b243
push 0x20
push ebx
call fcn.3000a869
mov edi, eax
test edi, edi
pop ecx
pop ecx
je 0x3000b46c
inc edi
inc edi
cmp word [edi], 0x22
je 0x3000b243
jmp 0x3000b24f
inc edi
inc edi
cmp word [edi], 0x20
je 0x3000b24d
push edi
mov ebx, 0x3000260c
push ebx
call fcn.3000a974
test eax, eax
pop ecx
pop ecx
jne 0x3000b289
push edi
push 0x300025f0
call fcn.3000a974
test eax, eax
pop ecx
pop ecx
jne 0x3000b289
push edi
push 0x300025d4
call fcn.3000a974
test eax, eax
pop ecx
pop ecx
je 0x3000b2fb
push 0x300025b8
push 1
push 0
call fcn.3000ac45
add esp, 0xc
test eax, eax
mov dword [ebp - 8], eax
je 0x3000b46c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x3000b45d
push edi
push 0x300025f0
call fcn.3000a974
test eax, eax
pop ecx
pop ecx
je 0x3000b2d2
push 1
push 1
call fcn.30008802
jmp 0x3000b34d
push edi
push ebx
call fcn.3000a974
test eax, eax
pop ecx
pop ecx
je 0x3000b2e3
push 0
jmp 0x3000b2c9
push edi
push 0x300025d4
call fcn.3000a974
test eax, eax
pop ecx
pop ecx
je 0x3000b2fb
call fcn.30008b5f
jmp 0x3000b34d
push edi
push 0x300025b0
call fcn.3000a974
test eax, eax
pop ecx
pop ecx
je 0x3000b35d
add edi, 4
mov ax, word [edi]
cmp ax, 0x30
jb 0x3000b45d
cmp ax, 0x39
ja 0x3000b45d
cmp word [edi + 2], 0
jne 0x3000b45d
and word [ebp - 2], 0
mov word [ebp - 4], ax
lea eax, [ebp - 4]
push 0xa
push eax
call fcn.3000a6a4
pop ecx
pop ecx
push eax
call fcn.30005c08
mov esi, eax
neg esi
sbb esi, esi
and esi, 2
dec esi
dec esi
jmp 0x3000b45d
push edi
push 0x30001bb4
call fcn.3000a974
pop ecx
xor ebx, ebx
test eax, eax
pop ecx
je 0x3000b379
add edi, 6
inc ebx
mov dword [ebp - 0x18], ebx
jmp 0x3000b37a
inc ebx
push edi
push 0x300025a8
call fcn.3000a974
test eax, eax
pop ecx
pop ecx
je 0x3000b391
add edi, 6
mov dword [ebp - 0x14], ebx
push edi
push 0x30001fe0
call fcn.3000a974
test eax, eax
pop ecx
pop ecx
je 0x3000b3fb
add edi, 4
mov ax, word [edi]
push eax
call fcn.3000a565
cmp ax, 0x64
pop ecx
jne 0x3000b3c1
cmp word [edi + 2], 0x20
jne 0x3000b3c1
mov dword [ebp - 0x10], ebx
jmp 0x3000b3f8
mov ax, word [edi]
cmp ax, 0x30
jb 0x3000b45d
cmp ax, 0x39
ja 0x3000b45d
cmp word [edi + 2], 0x20
jne 0x3000b45d
and word [ebp - 0xa], 0
mov word [ebp - 0xc], ax
lea eax, [ebp - 0xc]
push 0xa
push eax
call fcn.3000a6a4
pop ecx
pop ecx
mov dword [ebp - 4], eax
add edi, 4
cmp word [edi], 0
je 0x3000b45d
xor ebx, ebx
push ebx
push edi
call fcn.30006163
mov edi, eax
cmp edi, ebx
jne 0x3000b415
push 0xfffffffffffffffe
pop esi
jmp 0x3000b453
cmp dword [ebp - 4], 0xffffffff
jne 0x3000b42b
cmp dword [ebp - 0x10], ebx
jne 0x3000b42b
push edi
call fcn.3000a159
mov dword [ebp - 4], eax
jmp 0x3000b431
push edi
call fcn.3000a159
cmp dword [ebp - 0x14], ebx
jne 0x3000b450
cmp dword [ebp - 4], 0xfffffffe
je 0x3000b450
xor eax, eax
cmp dword [ebp - 0x18], ebx
setne al
push eax
push edi
push dword [ebp - 4]
call fcn.30008b9a
jmp 0x3000b453
mov esi, dword [ebp - 4]
cmp edi, ebx
je 0x3000b45d
push edi
call fcn.30002694
cmp dword [ebp - 8], 0
je 0x3000b46c
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call fcn.300092e9
test eax, eax
je 0x3000b47b
call dword [sym.imp.ole32.dll_CoUninitialize]
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]