Function at 0x1003e9d0
Capabilities:
Accept command line arguments
Get file attributes
Get system information on windows

Disassembly:
push 0x180
mov eax, 0x100316fb
call fcn.1002ceea
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x12c], eax
mov eax, 0x100a93d0
push eax
mov dword [ebp - 0x164], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor eax, eax
inc eax
mov dword [ebp - 0x160], eax
xor ebx, ebx
or edi, 0xffffffff
mov dword [ebp - 4], ebx
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x13c], edi
mov byte [ebp - 4], al
lea ecx, [ebp - 0x15c]
mov esi, 0x100a93f8
mov dword [ebp - 0x134], ebx
push esi
mov dword [ebp - 0x148], ebx
call fcn.1003a983
push esi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 2
call fcn.1003a983
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x158]
push esi
mov dword [ebp - 0x154], ebx
mov byte [ebp - 0x135], bl
mov byte [ebp - 0x13d], bl
call fcn.1003a983
lea ecx, [ebp - 0x13d]
mov byte [ebp - 4], 4
call fcn.10079d02
mov ebx, eax
test ebx, ebx
jns 0x1003eb25
push esi
lea ecx, [ebp - 0x134]
call fcn.1003a983
mov byte [ebp - 4], 5
push 0x1000c4a8
lea eax, [ebp - 0x134]
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x134]
pop ecx
pop ecx
push ebx
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057b0
push 1
call fcn.10073540
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
xor esi, esi
mov edx, ebx
xor ecx, ecx
call fcn.100527f8
cmp byte [ebp - 0x135], 0
je 0x1003eb06
call fcn.1003c152
test al, al
je 0x1003eb06
call fcn.1003cf76
test ebx, ebx
jns 0x1003f5ae
cmp dword [0x100a9458], 0
je 0x1003f5b4
call fcn.10071a87
jmp 0x1003f5b4
cmp byte [ebp - 0x13d], 0
jne 0x1003eb4d
push esi
lea ecx, [ebp - 0x134]
mov ebx, 0x800702e4
call fcn.1003a983
mov byte [ebp - 4], 6
push 0x1000c524
jmp 0x1003eaa0
mov eax, dword [0x100a9484]
test eax, eax
je 0x1003ebbf
inc eax
lea ecx, [ebp - 0x148]
push esi
mov dword [0x100a9484], eax
call fcn.1003a983
mov byte [ebp - 4], 7
lea eax, [ebp - 0x148]
push dword [0x100a9484]
push 0x1000c55c
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x148]
add esp, 0xc
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
lea ecx, [esi - 0x10]
call fcn.1003c869
xor ebx, ebx
inc ebx
jmp 0x1003f620
call fcn.1003c152
cmp al, 1
je 0x1003eae4
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0x188]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x188]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [ebp - 0x188]
lea edx, [ebp - 0x158]
call fcn.1007aba6
mov ebx, eax
test ebx, ebx
jns 0x1003ec6b
push esi
lea ecx, [ebp - 0x134]
call fcn.1003a983
mov byte [ebp - 4], 9
movzx eax, word [ebp - 0x188]
push eax
lea eax, [ebp - 0x134]
push 0x1000c588
push eax
call fcn.1003b5ef
add esp, 0xc
mov esi, dword [ebp - 0x134]
push ebx
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057b0
push 1
call fcn.10073540
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
mov edi, dword [ebp - 0x13c]
jmp 0x1003eae4
push 0x110
lea eax, [ebp - 0x124]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x128], 0x114
lea ecx, [ebp - 0x128]
call fcn.100769f6
test eax, eax
jne 0x1003ecf6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, 0x80070000
test eax, eax
jle 0x1003ecb0
movzx eax, ax
or eax, edi
test eax, eax
jns 0x1003ecc5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
test ebx, ebx
jle 0x1003eccc
movzx ebx, bx
or ebx, edi
jmp 0x1003ecca
mov ebx, 0x80004005
test ebx, ebx
jns 0x1003ecf6
push esi
lea ecx, [ebp - 0x134]
call fcn.1003a983
mov byte [ebp - 4], 0xa
push 0x1000c5e0
lea eax, [ebp - 0x134]
push eax
call fcn.1003b5ef
pop ecx
pop ecx
jmp 0x1003ec2a
lea edx, [ebp - 0x15c]
call fcn.1007b7f6
mov ebx, eax
test ebx, ebx
jns 0x1003ed1e
push esi
lea ecx, [ebp - 0x134]
call fcn.1003a983
mov byte [ebp - 4], 0xb
push 0x1000c638
jmp 0x1003ece3
call fcn.10070f9c
mov esi, eax
mov ebx, 0x100a93f8
test esi, esi
jns 0x1003ed87
push ebx
lea ecx, [ebp - 0x130]
call fcn.1003a983
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0xc
push 0x1000c698
push eax
call fcn.1003b5ef
pop ecx
pop ecx
push esi
mov esi, dword [ebp - 0x130]
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057b0
push 1
call fcn.10073540
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
push ebx
lea ecx, [ebp - 0x130]
call fcn.1003a983
mov edi, 0x1000c6d8
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x130]
push edi
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x130]
pop ecx
pop ecx
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
push ebx
lea ecx, [ebp - 0x130]
call fcn.1003a983
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0xe
push 0x1000c748
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x130]
pop ecx
pop ecx
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
push ebx
lea ecx, [ebp - 0x130]
call fcn.1003a983
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0xf
push edi
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x130]
mov edi, 0x1000c4f4
pop ecx
pop ecx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
push ebx
lea ecx, [ebp - 0x130]
call fcn.1003a983
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x130]
push dword [ebp - 0x174]
push dword [ebp - 0x158]
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
push dword [ebp - 0x124]
push 0x1000c7b8
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x130]
add esp, 0x1c
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
push ebx
lea ecx, [ebp - 0x130]
call fcn.1003a983
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x130]
push dword [ebp - 0x15c]
push 0x1000c894
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x130]
add esp, 0xc
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
push ebx
lea ecx, [ebp - 0x130]
call fcn.1003a983
mov byte [ebp - 4], 0x12
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea eax, [ebp - 0x130]
push 0x1000c8d0
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x130]
add esp, 0xc
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
push ebx
lea ecx, [ebp - 0x130]
call fcn.1003a983
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x130]
push 0x1000c92c
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x130]
pop ecx
pop ecx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
push ebx
lea ecx, [ebp - 0x130]
call fcn.1003a983
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x130]
push dword [ebp - 0x12c]
mov edi, dword [ebp - 0x150]
push edi
push dword [ebp + 8]
push 0x1000c968
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x130]
add esp, 0x14
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
test edi, edi
je 0x1003f157
mov ecx, edi
call fcn.10079d36
test al, al
jne 0x1003f0c9
mov edi, 0x80070057
lea ecx, [ebp - 0x130]
push 0x100a93f8
mov ebx, edi
call fcn.1003a983
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x150]
push eax
lea eax, [ebp - 0x130]
push 0x1000c9f4
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x130]
add esp, 0xc
push edi
jmp 0x1003ec31
lea eax, [ebp - 0x154]
mov edx, 0x8000
push eax
mov ecx, edi
call fcn.10041a2c
mov ebx, eax
test ebx, ebx
jns 0x1003f114
push 0x100a93f8
lea ecx, [ebp - 0x150]
call fcn.1003a983
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x16
push 0x1000ca28
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x150]
pop ecx
pop ecx
jmp 0x1003ec30
cmp dword [ebp - 0x154], 0
ja 0x1003f157
mov edi, 0x80070057
lea ecx, [ebp - 0x154]
push 0x100a93f8
mov ebx, edi
call fcn.1003a983
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x17
push 0x1000ca58
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x154]
pop ecx
pop ecx
push edi
jmp 0x1003ec31
mov esi, dword [ebp - 0x12c]
test esi, esi
je 0x1003f1a8
mov ecx, esi
call fcn.10079d36
test al, al
jne 0x1003f1a8
mov edi, 0x80070057
lea ecx, [ebp - 0x12c]
push 0x100a93f8
mov ebx, edi
call fcn.1003a983
push esi
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x18
push 0x1000ca80
push eax
call fcn.1003b5ef
add esp, 0xc
push edi
mov esi, dword [ebp - 0x12c]
jmp 0x1003ec31
lea edx, [ebp - 0x148]
mov ecx, edi
call fcn.1007ba17
mov ebx, eax
test ebx, ebx
jns 0x1003f1f0
push 0x100a93f8
lea ecx, [ebp - 0x12c]
call fcn.1003a983
mov byte [ebp - 4], 0x19
test edi, edi
jne 0x1003f1d8
mov edi, 0x1000581c
push edi
lea eax, [ebp - 0x12c]
push 0x1000cac0
push eax
call fcn.1003b5ef
add esp, 0xc
push ebx
jmp 0x1003f19d
lea edx, [ebp - 0x134]
mov ecx, esi
call fcn.1007ba17
mov ebx, eax
test ebx, ebx
jns 0x1003f27c
push 0x100a93f8
lea ecx, [ebp - 0x12c]
call fcn.1003a983
mov byte [ebp - 4], 0x1a
test esi, esi
jne 0x1003f220
mov esi, 0x1000581c
push esi
lea eax, [ebp - 0x12c]
push 0x1000cb48
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x12c]
add esp, 0xc
push ebx
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057b0
push 1
call fcn.10073540
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
mov esi, dword [ebp - 0x134]
mov edi, dword [ebp - 0x13c]
jmp 0x1003eae6
mov esi, dword [ebp - 0x134]
mov edi, esi
mov dword [ebp - 0x134], esi
test edi, edi
je 0x1003f3cc
lea edx, [ebp - 0x14c]
mov ecx, esi
call fcn.1007968d
mov ebx, eax
test ebx, ebx
jns 0x1003f315
push 0x100a93f8
lea ecx, [ebp - 0x12c]
call fcn.1003a983
push esi
mov byte [ebp - 4], 0x1b
push 0x1000cbd8
lea eax, [ebp - 0x12c]
push eax
call fcn.1003b5ef
add esp, 0xc
push ebx
mov esi, dword [ebp - 0x12c]
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057b0
push 1
call fcn.10073540
add esp, 0x1c
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 4
call fcn.1003c869
mov edi, dword [ebp - 0x13c]
mov esi, dword [ebp - 0x134]
jmp 0x1003eae6
mov esi, dword [ebp - 0x14c]
mov edi, esi
test edi, edi
je 0x1003f3cc
mov ecx, esi
call fcn.10076f43
test eax, eax
jne 0x1003f366
mov edi, 0x80070057
lea ecx, [ebp - 0x12c]
push 0x100a93f8
mov ebx, edi
call fcn.1003a983
push esi
mov byte [ebp - 4], 0x1c
push 0x1000cc48
lea eax, [ebp - 0x12c]
push eax
call fcn.1003b5ef
add esp, 0xc
push edi
jmp 0x1003f2cf
mov esi, dword [ebp - 0x14c]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
jne 0x1003f39a
mov edi, 0x80070057
lea ecx, [ebp - 0x12c]
push 0x100a93f8
mov ebx, edi
call fcn.1003a983
push esi
mov byte [ebp - 4], 0x1d
push 0x1000cc98
jmp 0x1003f351
mov esi, dword [ebp - 0x14c]
mov ecx, esi
call fcn.1007994d
mov ebx, eax
test ebx, ebx
jns 0x1003f3cc
push 0x100a93f8
lea ecx, [ebp - 0x12c]
call fcn.1003a983
push esi
mov byte [ebp - 4], 0x1e
push 0x1000cce8
jmp 0x1003f2bf
mov edx, dword [ebp - 0x148]
mov ecx, dword [ebp + 8]
push edi
call fcn.100714f4
mov ebx, eax
lea ecx, [ebp - 0x12c]
test ebx, ebx
jns 0x1003f44a
push 0x100a93f8
call fcn.1003a983
mov byte [ebp - 4], 0x1f
push 0x1000cd40
lea eax, [ebp - 0x12c]
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x12c]
pop ecx
pop ecx
push ebx
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057b0
push 1
call fcn.10073540
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
mov byte [ebp - 0x135], 1
jmp 0x1003f304
mov edi, 0x100a93f8
push edi
call fcn.1003a983
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x20
push 0x1000cd88
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x12c]
pop ecx
pop ecx
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
call fcn.1003bd7b
push edi
lea ecx, [ebp - 0x12c]
mov ebx, eax
call fcn.1003a983
test ebx, ebx
jns 0x1003f4c6
mov byte [ebp - 4], 0x21
push 0x1000cdc0
jmp 0x1003f3fa
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x22
push 0x1000ce04
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x12c]
pop ecx
pop ecx
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [esi - 0x10]
call fcn.1003c869
push 1
lea ecx, [ebp - 0x13c]
call fcn.10079c63
lea eax, [ebp - 0x144]
xor edx, edx
push eax
lea ecx, [ebp - 0x13c]
call fcn.1003ae0b
mov ebx, eax
push edi
test ebx, ebx
jns 0x1003f553
lea ecx, [ebp - 0x12c]
call fcn.1003a983
mov byte [ebp - 4], 0x23
push 0x1000ce38
jmp 0x1003f3fa
mov eax, dword [ebp - 0x144]
lea ecx, [ebp - 0x144]
mov dword [0x100a9488], eax
call fcn.1003a983
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0x24
push 0x1000ce88
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x144]
pop ecx
pop ecx
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
jmp 0x1003f2f8
inc dword [0x100a9484]
push esi
call sub.msvcrt.dll_free
pop ecx
push dword [ebp - 0x148]
call sub.msvcrt.dll_free
lea ecx, [ebp - 0x144]
mov dword [esp], 0x100a93f8
call fcn.1003a983
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0x25
push 0x1000cec4
push eax
call fcn.1003b5ef
mov esi, dword [ebp - 0x144]
pop ecx
pop ecx
push 0x1000c4f4
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x100057f0
push 3
call fcn.10073540
add esp, 0x18
lea ecx, [esi - 0x10]
call fcn.1003c869
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.1003c869
mov ecx, dword [ebp - 0x14c]
lea ecx, [ecx - 0x10]
call fcn.1003c869
mov ecx, dword [ebp - 0x15c]
lea ecx, [ecx - 0x10]
call fcn.1003c869
cmp edi, 0xffffffff
je 0x1003f656
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x164]
call fcn.1003cfe6
mov eax, ebx
call fcn.1002ce99
ret 0xc