Function at 0x30001d1c
Capabilities:
Terminate process

Disassembly:
call 0x30001d26
jmp 0x30001e03
push 0x58
push 0x30001f58
call fcn.30001f80
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov dword [ebp - 4], 0xfffffffe
mov dword [ebp - 4], 1
mov eax, dword fs:[0x18]
mov esi, dword [eax + 4]
mov edi, 0x3011d37c
push 0
push esi
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
test eax, eax
jne 0x30062c81
xor esi, esi
inc esi
mov eax, dword [0x3011d378]
cmp eax, esi
je 0x30062c9f
mov eax, dword [0x3011d378]
test eax, eax
jne 0x300025b5
mov dword [0x3011d378], esi
push 0x30001f54
push 0x30001f48
call sub.MSVCR80.dll__initterm_e
pop ecx
pop ecx
test eax, eax
jne 0x30062d2c
mov eax, dword [0x3011d378]
cmp eax, esi
jne 0x30001eaf
push 0x30001f44
push 0x30001efc
call sub.MSVCR80.dll__initterm
pop ecx
pop ecx
mov dword [0x3011d378], 2
test ebx, ebx
jne 0x30001ebb
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp dword [0x3011d388], 0
jne 0x30062cac
mov eax, dword [sym.imp.MSVCR80.dll__acmdln]
mov esi, dword [eax]
mov dword [ebp - 0x20], esi
mov al, byte [esi]
cmp al, 0x20
jbe 0x300025c5
cmp al, 0x22
je 0x300025a5
movzx eax, al
push eax
call dword [sym.imp.MSVCR80.dll__ismbblead]
pop ecx
test eax, eax
jne 0x30062cd0
inc esi
jmp 0x30001ecf
xor ecx, ecx
cmp dword [ebp - 0x1c], ecx
sete cl
mov dword [ebp - 0x1c], ecx
jmp 0x30001ee4
mov dword [0x30123d9c], esi
jmp 0x30001e8b
push 0xa
pop eax
jmp 0x300025ed
test al, al
je 0x300025d3
cmp dword [ebp - 0x1c], 0
jne 0x30001edc
mov al, byte [esi]
test al, al
je 0x300025e3
cmp al, 0x20
ja 0x300025e3
inc esi
mov dword [ebp - 0x20], esi
jmp 0x300025d3
test byte [ebp - 0x3c], 1
je 0x300025c0
movzx eax, word [ebp - 0x38]
push eax
push esi
push 0
push 0x30000000
call 0x30002614
mov dword [0x3011d35c], eax
cmp dword [0x3011d350], 0
jne 0x30062d08
push eax
call dword [sym.imp.MSVCR80.dll_exit]
push 0xc
mov eax, 0x300eca7c
call fcn.300026b1
xor esi, esi
push esi
push 0x25
mov dword [0x30119510], esi
call fcn.300026e7
push 0x3e9
call fcn.30002985
push esi
push esi
mov dword [ebp - 4], esi
call dword [sym.imp.MSOCF.dll_void___stdcall_MsoCF::Utilities::Start_int__struct__msotcfcf__]
push 0x3007575a
call dword [sym.imp.MSO.dll_Ordinal_8119]
mov dword [ebp - 0x14], esi
push esi
push dword [0x30107680]
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 2
call fcn.30002b19
cmp eax, esi
jl 0x30002684
mov eax, dword [ebp - 0x14]
push dword [ebp + 8]
mov dword [0x30119510], eax
mov ecx, dword [eax]
push eax
call dword [ecx + 0x50]
mov dword [0x30119510], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.30007c77
push 0x225
call fcn.30002985
push 0x25
call fcn.30028194
call dword [sym.imp.MSOCF.dll_void___stdcall_MsoCF::Utilities::Finish_void_]
xor eax, eax
call fcn.30002f94
ret 0x10
cmp eax, esi
jne 0x30062c8f
xor esi, esi
inc esi
mov ebx, esi
jmp 0x30001e52
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x30001e3d
push 0x1f
call sub.MSVCR80.dll__amsg_exit
pop ecx
jmp 0x30001e8b
push 0x3011d388
call fcn.300e73bf
pop ecx
test eax, eax
je 0x30001ec8
push 0
push 2
push 0
call dword [0x3011d388]
jmp 0x30001ec8
inc esi
mov dword [ebp - 0x20], esi
jmp 0x30001ef7
cmp dword [0x30123d9c], 0
jne 0x30062d17
call dword [sym.imp.MSVCR80.dll__cexit]
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [0x3011d35c]
jmp 0x30062d38
mov dword [ebp - 4], 0xfffffffe
mov eax, 0xff
call fcn.3000219c
ret