Function at 0x139e5520
Capabilities:
Accept command line arguments

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x13a7b4cb
push eax
mov dword fs:[0], esp
sub esp, 0x12c
push ebx
push ebp
push esi
push edi
push 0x5c
push 0x13aab7b0
call fcn.13a17da0
mov edi, eax
add esp, 8
test edi, edi
jne 0x139e555e
mov eax, 1
jmp 0x139e5bc6
inc edi
mov dword [esp + 0x38], edi
call fcn.13a07650
test eax, eax
jne 0x139e5582
cmp dword [0x13aab8b4], 0x80000000
jbe 0x139e5582
mov eax, 1
jmp 0x139e5bc6
push edi
call fcn.139e5be0
add esp, 4
test eax, eax
jne 0x139e55c7
mov eax, dword [0x13aab698]
push eax
call fcn.139e5c40
add esp, 4
test eax, eax
jne 0x139e55c7
mov ecx, dword [0x13aab690]
push ecx
call fcn.139e5ca0
add esp, 4
test eax, eax
jne 0x139e55c7
mov edx, dword [0x13aab68c]
push edx
call fcn.139e5d00
add esp, 4
test eax, eax
je 0x139e560e
mov eax, dword [0x13aaace8]
test eax, eax
je 0x139e55f8
push 0x13aab7b0
push edi
call fcn.139e5d70
add esp, 8
push eax
push str.IsCanHook_filter_static_successful___d_
push 0x13a92f94
push 0xffffffffffffffff
push 0x13aaac5c
call fcn.139ed890
add esp, 0x14
push 0x13aab7b0
push edi
call fcn.139e5d70
add esp, 8
test eax, eax
je 0x139e5bc4
lea ecx, [esp + 0x14]
call fcn.139eb720
push 1
push 0
push ecx
mov dword [esp + 0x150], 0
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.hookapi_disins
call fcn.139f4400
lea ecx, [esp + 0x20]
call fcn.139eb910
lea ecx, [esp + 0x14]
call fcn.139ebe70
cmp eax, 1
jne 0x139e5665
mov eax, dword [0x13aaace8]
test eax, eax
je 0x139e5bb0
push str.IsCanHook_dis_successful
jmp 0x139e5b9c
push 1
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.hookapi_filterproc_external_crypt
call fcn.139f4400
lea ecx, [esp + 0x20]
call fcn.139eb910
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push edi
call fcn.139f42a0
lea ecx, [esp + 0x18]
call fcn.139ebdf0
mov esi, dword [esp + 0x34]
push 1
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.hookapi_filterproc_external
mov ebx, eax
call fcn.139f4400
lea ecx, [esp + 0x20]
call fcn.139eb910
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push edi
call fcn.139f42a0
lea ecx, [esp + 0x18]
call fcn.139ebdf0
mov edi, dword [esp + 0x34]
mov ebp, eax
test ebp, ebp
jne 0x139e56eb
call fcn.139ebf00
test eax, eax
je 0x139e56eb
mov ebp, 1
test ebx, ebx
jne 0x139e5b8e
test ebp, ebp
jne 0x139e5b8e
test esi, esi
je 0x139e5707
cmp esi, 0xf0000001
jne 0x139e5713
test edi, edi
je 0x139e5737
cmp edi, 0xf0000001
je 0x139e5737
mov eax, dword [0x13aaace8]
test eax, eax
je 0x139e5737
push edi
push esi
push str.IsCanHook_filter_sync_external_failed__err___08x__err2___08x
push 0x13a92f94
push 0xffffffffffffffff
push 0x13aaac5c
call fcn.139ed890
add esp, 0x18
push 1
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.hookapi_filterproc_internal_crypt
call fcn.139f4400
lea ecx, [esp + 0x20]
call fcn.139eb910
mov eax, dword [0x13aab698]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x139e5781
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x13aab698
call fcn.139f41a0
lea ecx, [esp + 0x18]
call fcn.139ebdf0
mov esi, dword [esp + 0x34]
mov ebx, eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.hookapi_filterproc_internal
call fcn.139f4400
lea ecx, [esp + 0x20]
call fcn.139eb910
mov ecx, dword [0x13aab698]
mov eax, dword [ecx - 8]
test eax, eax
je 0x139e57cc
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x13aab698
call fcn.139f41a0
lea ecx, [esp + 0x18]
call fcn.139ebdf0
mov edi, dword [esp + 0x34]
mov ebp, eax
test ebx, ebx
jne 0x139e5b7e
test ebp, ebp
jne 0x139e5b7e
test esi, esi
je 0x139e57e8
cmp esi, 0xf0000001
jne 0x139e57f4
test edi, edi
je 0x139e5818
cmp edi, 0xf0000001
je 0x139e5818
mov eax, dword [0x13aaace8]
test eax, eax
je 0x139e5818
push edi
push esi
push str.IsCanHook_filter_sync_internal_failed__err___08x__err2___08x
push 0x13a92f94
push 0xffffffffffffffff
push 0x13aaac5c
call fcn.139ed890
add esp, 0x18
push 1
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.hookapi_filterproc_product_crypt
call fcn.139f4400
lea ecx, [esp + 0x20]
call fcn.139eb910
mov edx, dword [0x13aab690]
mov eax, dword [edx - 8]
test eax, eax
je 0x139e5863
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x13aab690
call fcn.139f41a0
lea ecx, [esp + 0x18]
call fcn.139ebdf0
mov esi, dword [esp + 0x34]
mov ebx, eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.hookapi_filterproc_product
call fcn.139f4400
lea ecx, [esp + 0x20]
call fcn.139eb910
mov eax, dword [0x13aab690]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x139e58ad
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x13aab690
call fcn.139f41a0
lea ecx, [esp + 0x18]
call fcn.139ebdf0
mov edi, dword [esp + 0x34]
mov ebp, eax
test ebx, ebx
jne 0x139e5b6e
test ebp, ebp
jne 0x139e5b6e
test esi, esi
je 0x139e58c9
cmp esi, 0xf0000001
jne 0x139e58d5
test edi, edi
je 0x139e58f9
cmp edi, 0xf0000001
je 0x139e58f9
mov eax, dword [0x13aaace8]
test eax, eax
je 0x139e58f9
push edi
push esi
push str.IsCanHook_filter_sync_product_failed__err___08x__err2___08x
push 0x13a92f94
push 0xffffffffffffffff
push 0x13aaac5c
call fcn.139ed890
add esp, 0x18
push 1
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.hookapi_filterproc_company_crypt
call fcn.139f4400
lea ecx, [esp + 0x20]
call fcn.139eb910
mov ecx, dword [0x13aab68c]
mov eax, dword [ecx - 8]
test eax, eax
je 0x139e5944
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x13aab68c
call fcn.139f41a0
lea ecx, [esp + 0x18]
call fcn.139ebdf0
mov esi, dword [esp + 0x34]
mov ebx, eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.hookapi_filterproc_company
call fcn.139f4400
lea ecx, [esp + 0x20]
call fcn.139eb910
mov edx, dword [0x13aab68c]
mov eax, dword [edx - 8]
test eax, eax
je 0x139e598f
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x13aab68c
call fcn.139f41a0
lea ecx, [esp + 0x18]
call fcn.139ebdf0
mov edi, dword [esp + 0x34]
mov ebp, eax
test ebx, ebx
jne 0x139e5b5e
test ebp, ebp
jne 0x139e5b5e
test esi, esi
je 0x139e59d3
cmp esi, 0xf0000001
je 0x139e59d3
mov eax, dword [0x13aaace8]
test eax, eax
je 0x139e59d3
push edi
push esi
push str.IsCanHook_filter_sync_company_failed__err___08x__err2___08x
or esi, 0xffffffff
push 0x13a92f94
push esi
push 0x13aaac5c
call fcn.139ed890
add esp, 0x18
jmp 0x139e59d6
or esi, 0xffffffff
mov eax, dword [esp + 0x38]
push eax
call fcn.139e5d60
add esp, 4
test eax, eax
je 0x139e59f3
mov dword [esp + 0x144], esi
jmp 0x139e5bbb
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov edx, eax
test edx, edx
je 0x139e5b47
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x3d]
mov byte [esp + 0x3c], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0xff
lea ecx, [esp + 0x40]
push edx
push ecx
stosb byte es:[edi], al
call fcn.13a17bf0
lea edx, [esp + 0x48]
push edx
call fcn.13a4be50
lea eax, [esp + 0x4c]
push str.RUNAGENT32
push eax
call fcn.13a17d20
add esp, 0x18
test eax, eax
jne 0x139e5aba
lea ecx, [esp + 0x3c]
push str.RUNAGENTU32
push ecx
call fcn.13a17d20
add esp, 8
test eax, eax
jne 0x139e5aba
lea edx, [esp + 0x3c]
push str.RUNAGENTU64
push edx
call fcn.13a17d20
add esp, 8
test eax, eax
jne 0x139e5aba
lea eax, [esp + 0x3c]
push str.RUNSDCENTER32
push eax
call fcn.13a17d20
add esp, 8
test eax, eax
jne 0x139e5aba
lea ecx, [esp + 0x3c]
push str.RUNSDAGENT32
push ecx
call fcn.13a17d20
add esp, 8
test eax, eax
jne 0x139e5aba
lea edx, [esp + 0x3c]
push str.RUNMONITOR32
push edx
call fcn.13a17d20
add esp, 8
test eax, eax
je 0x139e5b47
lea eax, [esp + 0x3c]
push str.WINOAV3.DLL
push eax
call fcn.13a17d20
add esp, 8
test eax, eax
jne 0x139e5b3e
lea ecx, [esp + 0x3c]
push str.WINOAUV3.DLL
push ecx
call fcn.13a17d20
add esp, 8
test eax, eax
jne 0x139e5b3e
lea edx, [esp + 0x3c]
push str.WINOAUV364.DLL
push edx
call fcn.13a17d20
add esp, 8
test eax, eax
jne 0x139e5b3e
lea eax, [esp + 0x3c]
push str.SDCENTER.DLL
push eax
call fcn.13a17d20
add esp, 8
test eax, eax
jne 0x139e5b3e
lea ecx, [esp + 0x3c]
push str.SDAGENT.DLL
push ecx
call fcn.13a17d20
add esp, 8
test eax, eax
jne 0x139e5b3e
lea edx, [esp + 0x3c]
push str.WINWDGV3.DLL
push edx
call fcn.13a17d20
add esp, 8
test eax, eax
je 0x139e5b47
mov dword [esp + 0x144], esi
jmp 0x139e5bbb
lea ecx, [esp + 0x14]
mov dword [esp + 0x144], esi
call fcn.139eb870
mov eax, 1
jmp 0x139e5bc6
mov eax, dword [0x13aaace8]
test eax, eax
je 0x139e5bb0
push str.IsCanHook_filter_sync_company_successful
jmp 0x139e5b9c
mov eax, dword [0x13aaace8]
test eax, eax
je 0x139e5bb0
push str.IsCanHook_filter_sync_product_successful
jmp 0x139e5b9c
mov eax, dword [0x13aaace8]
test eax, eax
je 0x139e5bb0
push str.IsCanHook_filter_sync_internal_successful
jmp 0x139e5b9c
mov eax, dword [0x13aaace8]
test eax, eax
je 0x139e5bb0
push str.IsCanHook_filter_sync_external_successful
push 0x13a92f94
push 0xffffffffffffffff
push 0x13aaac5c
call fcn.139ed890
add esp, 0x10
mov dword [esp + 0x144], 0xffffffff
lea ecx, [esp + 0x14]
call fcn.139eb870
xor eax, eax
mov ecx, dword [esp + 0x13c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x138
ret