Function at 0x100525e
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push 1
xor ebx, ebx
pop edi
cmp eax, ebx
mov dword [ebp - 4], edi
je 0x100570b
cmp byte [eax], bl
je 0x100570b
mov dword [ebp + 8], eax
cmp byte [eax], bl
je 0x10056cb
cmp dword [ebp - 4], ebx
je 0x10056cb
mov eax, dword [ebp + 8]
mov cl, byte [eax]
cmp cl, 0x20
je 0x10052bc
cmp cl, 9
je 0x10052bc
cmp cl, 0xd
je 0x10052bc
cmp cl, 0xa
je 0x10052bc
cmp cl, 0xb
je 0x10052bc
cmp cl, 0xc
jne 0x10052c5
push eax
call dword [sym.imp.USER32.dll_CharNextA]
jmp 0x100529c
cmp byte [eax], bl
je 0x10056cb
xor ecx, ecx
xor edx, edx
mov dword [ebp + 8], eax
xor esi, esi
cmp edx, ebx
jne 0x10052fb
mov eax, dword [ebp + 8]
mov al, byte [eax]
cmp al, 0x20
je 0x10052f7
cmp al, 9
je 0x10052f7
cmp al, 0xd
je 0x10052f7
cmp al, 0xa
je 0x10052f7
cmp al, 0xb
je 0x10052f7
cmp al, 0xc
jne 0x10052ff
cmp edx, ebx
je 0x1005341
cmp esi, ebx
jne 0x1005341
mov eax, dword [ebp + 8]
mov al, byte [eax]
cmp al, 0x22
jne 0x100532f
mov eax, dword [ebp + 8]
inc eax
cmp byte [eax], 0x22
je 0x1005320
cmp edx, ebx
jne 0x1005319
mov edx, edi
jmp 0x100531b
mov esi, edi
mov dword [ebp + 8], eax
jmp 0x100533a
mov byte [ebp + ecx - 0x10c], 0x22
inc ecx
add dword [ebp + 8], 2
jmp 0x100533a
mov byte [ebp + ecx - 0x10c], al
inc ecx
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp byte [eax], bl
jne 0x10052d6
cmp edx, ebx
mov byte [ebp + ecx - 0x10c], bl
je 0x1005358
cmp esi, ebx
jne 0x1005360
cmp edx, ebx
jne 0x10056c8
cmp esi, ebx
jne 0x10056c8
cmp byte [ebp - 0x10c], 0x2f
je 0x1005376
cmp byte [ebp - 0x10c], 0x2d
jne 0x10056c4
movsx eax, byte [ebp - 0x10b]
mov esi, dword [sym.imp.USER32.dll_CharUpperA]
push eax
call esi
movsx eax, al
sub eax, 0x3f
je 0x100569d
sub eax, 4
je 0x10055f7
dec eax
je 0x1005552
sub eax, 0xa
je 0x10054e0
push 3
pop ecx
sub eax, ecx
je 0x1005496
dec eax
je 0x10053c6
dec eax
dec eax
je 0x1005552
jmp 0x10056b9
cmp byte [ebp - 0x10a], bl
jne 0x10053df
mov dword [0x100c6cc], ecx
mov dword [0x100baa8], edi
jmp 0x10056bc
cmp byte [ebp - 0x10a], 0x3a
jne 0x1005477
cmp byte [ebp - 0x109], bl
mov dword [0x100c6cc], edi
je 0x10056bc
lea esi, [ebp - 0x109]
movsx eax, byte [esi]
push eax
inc esi
call dword [sym.imp.USER32.dll_CharUpperA]
movsx eax, al
sub eax, 0x41
je 0x1005461
sub eax, 3
je 0x1005458
sub eax, 5
je 0x100544f
sub eax, 5
je 0x1005446
dec eax
dec eax
je 0x100543d
sub eax, 3
je 0x1005434
mov dword [ebp - 4], ebx
jmp 0x100546e
or dword [0x100c6cc], 4
jmp 0x1005468
or byte [0x100bdc8], 0x80
jmp 0x100546e
and dword [0x100c6cc], 0xfffffffe
jmp 0x1005468
and dword [0x100c6cc], 0xfffffffd
jmp 0x1005468
or dword [0x100bdc8], 0x40
jmp 0x100546e
or dword [0x100c6cc], 2
mov dword [0x100baa8], edi
cmp byte [esi], bl
jne 0x1005404
jmp 0x10056bc
lea eax, [ebp - 0x10b]
push eax
push 0x10014cc
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10056bc
jmp 0x10056b9
cmp byte [ebp - 0x10a], bl
je 0x10054d2
cmp byte [ebp - 0x10a], 0x3a
jne 0x10056b9
movsx eax, byte [ebp - 0x109]
push eax
call esi
cmp al, 0x31
je 0x10054d2
cmp al, 0x41
je 0x10054c6
cmp al, 0x55
je 0x10054d2
jmp 0x10056b9
mov word [0x100bab8], di
jmp 0x10056bc
mov word [0x100bab8], 2
jmp 0x10056bc
cmp byte [ebp - 0x10a], bl
jne 0x10054f3
mov dword [0x100baac], edi
jmp 0x10056bc
cmp byte [ebp - 0x10a], 0x3a
jne 0x10056b9
cmp byte [ebp - 0x109], bl
je 0x10056bc
lea esi, [ebp - 0x109]
movsx eax, byte [esi]
push eax
inc esi
call dword [sym.imp.USER32.dll_CharUpperA]
movsx eax, al
sub eax, 0x45
je 0x1005543
dec eax
dec eax
je 0x100553b
sub eax, 0xf
je 0x1005533
mov dword [ebp - 4], ebx
jmp 0x1005549
mov dword [0x100bab4], edi
jmp 0x1005549
mov dword [0x100bab0], edi
jmp 0x1005549
mov dword [0x100baac], edi
cmp byte [esi], bl
jne 0x1005512
jmp 0x10056bc
cmp byte [ebp - 0x10a], 0x3a
jne 0x10056b9
xor eax, eax
cmp byte [ebp - 0x109], 0x22
sete al
add eax, 3
mov esi, eax
lea edi, [ebp + esi - 0x10c]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x100567b
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
push edi
call fcn.010051e2
test eax, eax
je 0x100567b
movsx eax, byte [ebp - 0x10b]
push eax
call dword [sym.imp.USER32.dll_CharUpperA]
cmp al, 0x54
mov eax, dword [ebp - 8]
jne 0x10055c1
add eax, esi
mov esi, 0x100bbbe
lea eax, [ebp + eax - 0x10c]
push eax
jmp 0x10055d0
add eax, esi
mov esi, 0x100baba
lea eax, [ebp + eax - 0x10c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x10012d4
push esi
call fcn.01005ab2
mov eax, esi
push eax
call fcn.01002ccf
test eax, eax
je 0x10056c4
jmp 0x1005698
cmp byte [ebp - 0x10a], bl
jne 0x100560a
mov dword [0x100baa4], edi
jmp 0x10056bc
cmp byte [ebp - 0x10a], 0x3a
jne 0x10056b9
xor eax, eax
cmp byte [ebp - 0x109], 0x22
sete al
add eax, 3
mov esi, eax
lea edi, [ebp + esi - 0x10c]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x100567b
push 0x5b
push edi
call fcn.01005a32
test eax, eax
je 0x1005652
push 0x5d
push edi
call fcn.01005a32
test eax, eax
je 0x100567b
push 0x5d
push edi
call fcn.01005a32
test eax, eax
je 0x100566a
push 0x5b
push edi
call fcn.01005a32
test eax, eax
je 0x100567b
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
push edi
call fcn.010051e2
test eax, eax
jne 0x1005680
mov dword [ebp - 4], ebx
jmp 0x1005698
mov eax, dword [ebp - 8]
add eax, esi
lea eax, [ebp + eax - 0x10c]
push eax
push 0x100bcc2
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 1
pop edi
jmp 0x10056bc
call fcn.01001b37
mov eax, dword [0x100ba80]
cmp eax, ebx
je 0x10056b2
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 4], ebx
mov eax, dword [ebp + 8]
jmp 0x1005288
xor eax, eax
jmp 0x100570d
mov dword [ebp - 4], ebx
cmp dword [0x100baac], ebx
je 0x1005706
cmp byte [0x100bbbe], bl
jne 0x1005706
mov esi, 0x100bbbe
push 0x104
push esi
push dword [0x100c6dc]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x1005703
push 0x5c
push esi
call fcn.01005a80
mov byte [eax + 1], bl
jmp 0x1005706
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 4]
jmp 0x100570d
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 4