Function at 0x18f8a14
Capabilities:
Accept command line arguments
Parse pe header
Terminate process

Disassembly:
call 0x18f8a19
pop ebx
sub ebx, 0x403a19
push dword [esp]
call fcn.018f88e7
or eax, eax
jne 0x18f8a31
jmp 0x18f95e1
mov dword [ebx + section..text], eax
lea eax, [ebx + 0x40140a]
push eax
push dword [ebx + section..text]
call fcn.018f8961
or eax, eax
jne 0x18f8a52
jmp 0x18f95e1
mov dword [ebx + fcn.00401261], eax
lea eax, [ebx + 0x4013fd]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401265], eax
lea eax, [ebx + 0x401450]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401269], eax
lea eax, [ebx + 0x40145b]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40126d], eax
lea eax, [ebx + 0x40146e]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401271], eax
lea eax, [ebx + 0x401482]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401275], eax
lea eax, [ebx + 0x40148c]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401279], eax
lea eax, [ebx + 0x4014ba]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401281], eax
lea eax, [ebx + 0x4014cb]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401285], eax
lea eax, [ebx + 0x4014d7]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401289], eax
lea eax, [ebx + 0x4014e5]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40128d], eax
lea eax, [ebx + 0x4014f3]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401291], eax
lea eax, [ebx + 0x4014ff]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401295], eax
lea eax, [ebx + 0x401512]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401299], eax
lea eax, [ebx + 0x401520]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40129d], eax
lea eax, [ebx + 0x401530]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012a1], eax
lea eax, [ebx + 0x40153a]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012a5], eax
lea eax, [ebx + 0x401549]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012a9], eax
lea eax, [ebx + 0x401556]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012ad], eax
lea eax, [ebx + 0x401562]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012b1], eax
lea eax, [ebx + 0x40156b]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012b5], eax
lea eax, [ebx + 0x401574]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012b9], eax
lea eax, [ebx + 0x401580]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012bd], eax
lea eax, [ebx + 0x401588]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012c1], eax
lea eax, [ebx + 0x401598]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012c5], eax
lea eax, [ebx + 0x4015cc]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012d1], eax
lea eax, [ebx + 0x4015db]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012d5], eax
lea eax, [ebx + 0x4015b1]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012c9], eax
lea eax, [ebx + 0x4015bf]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012cd], eax
lea eax, [ebx + 0x401646]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012f1], eax
lea eax, [ebx + 0x401655]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012f5], eax
lea eax, [ebx + 0x401668]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012f9], eax
lea eax, [ebx + 0x40167b]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012fd], eax
lea eax, [ebx + 0x40168e]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401301], eax
lea eax, [ebx + 0x4016c0]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401311], eax
lea eax, [ebx + 0x4016a4]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401309], eax
lea eax, [ebx + 0x4016b7]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.0040130d], eax
lea eax, [ebx + 0x4016cd]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + sym.imp.GDI32.dll_SetTextColor], eax
lea eax, [ebx + 0x4016d9]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401319], eax
lea eax, [ebx + 0x4017c7]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401381], eax
lea eax, [ebx + 0x4017d6]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401385], eax
lea eax, [ebx + 0x4017e0]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401389], eax
lea eax, [ebx + 0x4016ed]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40138d], eax
lea eax, [ebx + 0x4017ee]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401391], eax
lea eax, [ebx + 0x40183d]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013a9], eax
lea eax, [ebx + 0x401856]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013ad], eax
lea eax, [ebx + 0x401864]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013b1], eax
lea eax, [ebx + 0x4018d2]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013cd], eax
lea eax, [ebx + 0x4018fb]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013d5], eax
lea eax, [ebx + 0x401905]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013d9], eax
lea eax, [ebx + 0x40190f]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013dd], eax
lea eax, [ebx + 0x401920]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013e1], eax
lea eax, [ebx + 0x4019d6]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013f1], eax
lea eax, [ebx + 0x4019ea]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013f5], eax
lea eax, [ebx + 0x4016fd]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40131d], eax
lea eax, [ebx + 0x401712]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + sym.imp.GDI32.dll_SetBkMode], eax
lea eax, [ebx + 0x40171f]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401325], eax
lea eax, [ebx + 0x40172b]
push eax
push dword [ebx + section..text]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401329], eax
lea eax, [ebx + 0x401419]
push eax
call dword [ebx + 0x401265]
mov dword [ebx + 0x401004], eax
lea eax, [ebx + 0x4014a1]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40127d], eax
lea eax, [ebx + 0x4015f5]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012dd], eax
lea eax, [ebx + 0x401601]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012e1], eax
lea eax, [ebx + 0x401611]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012e5], eax
lea eax, [ebx + 0x401624]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012e9], eax
lea eax, [ebx + 0x401635]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012ed], eax
lea eax, [ebx + 0x4015e9]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012d9], eax
lea eax, [ebx + 0x40169b]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401305], eax
lea eax, [ebx + 0x4017ff]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401395], eax
lea eax, [ebx + 0x401810]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401399], eax
lea eax, [ebx + 0x401820]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40139d], eax
lea eax, [ebx + 0x40182f]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013a1], eax
lea eax, [ebx + 0x40184a]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013a5], eax
lea eax, [ebx + 0x401878]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013b5], eax
lea eax, [ebx + 0x40188a]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013b9], eax
lea eax, [ebx + 0x40189e]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013bd], eax
lea eax, [ebx + 0x4018ad]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013c1], eax
lea eax, [ebx + 0x4018be]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013c5], eax
lea eax, [ebx + 0x4018ca]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013c9], eax
lea eax, [ebx + 0x401420]
push eax
call dword [ebx + 0x401265]
mov dword [ebx + 0x401008], eax
lea eax, [ebx + 0x40173c]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40132d], eax
lea eax, [ebx + 0x401746]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401331], eax
lea eax, [ebx + 0x401751]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401335], eax
lea eax, [ebx + 0x401760]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401339], eax
lea eax, [ebx + 0x40176b]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.0040133d], eax
lea eax, [ebx + 0x401777]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401341], eax
lea eax, [ebx + 0x401787]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401345], eax
lea eax, [ebx + 0x40178e]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401349], eax
lea eax, [ebx + 0x401793]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.0040134d], eax
lea eax, [ebx + 0x401798]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401351], eax
lea eax, [ebx + 0x40179f]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401355], eax
lea eax, [ebx + 0x4017a5]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401359], eax
lea eax, [ebx + 0x4017ad]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40135d], eax
lea eax, [ebx + 0x4019fc]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013f9], eax
lea eax, [ebx + 0x4017b9]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401361], eax
lea eax, [ebx + 0x40142b]
push eax
call dword [ebx + 0x401265]
mov dword [ebx + 0x40100c], eax
lea eax, [ebx + 0x4018ed]
push eax
push dword [ebx + 0x40100c]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013d1], eax
lea eax, [ebx + 0x401437]
push eax
call dword [ebx + 0x401265]
mov dword [ebx + 0x401010], eax
lea eax, [ebx + 0x401944]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40136d], eax
lea eax, [ebx + 0x401952]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401371], eax
lea eax, [ebx + 0x401938]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401369], eax
lea eax, [ebx + 0x40192c]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401365], eax
lea eax, [ebx + 0x401963]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401375], eax
lea eax, [ebx + 0x401977]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401379], eax
lea eax, [ebx + 0x401988]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40137d], eax
lea eax, [ebx + 0x401443]
push eax
call dword [ebx + 0x401265]
mov dword [ebx + 0x401014], eax
lea eax, [ebx + 0x401999]
push eax
push dword [ebx + 0x401014]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013e5], eax
lea eax, [ebx + 0x4019aa]
push eax
push dword [ebx + 0x401014]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013e9], eax
lea eax, [ebx + 0x4019c0]
push eax
push dword [ebx + 0x401014]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013ed], eax
call fcn.018f87e8
or eax, eax
jne 0x18f94bb
jmp 0x18f95e1
call dword [ebx + 0x401319]
mov dword [ebx + 0x401024], eax
lea ecx, [ebx + 0x401028]
lea eax, [ebx + 0x401242]
push ecx
push 0
push eax
call fcn.018f83c8
or eax, eax
je 0x18f94f6
cmp eax, dword [ebx + 0x401024]
jne 0x18f94ec
jmp 0x18f94fb
mov dword [ebx + 0x401020], eax
jmp 0x18f9505
jmp 0x18f95e1
call fcn.018f8870
jmp 0x18f95e1
lea eax, [ebx + 0x401028]
push 0x104
push eax
call dword [ebx + 0x40131d]
lea eax, [ebx + 0x401028]
lea ecx, [ebx + 0x401230]
push ecx
push eax
call dword [ebx + fcn.00401279]
lea ecx, [ebx + 0x401242]
lea eax, [ebx + 0x401028]
push ecx
push eax
call dword [ebx + fcn.00401279]
lea eax, [ebx + 0x401028]
push eax
call fcn.018f8653
or eax, eax
jne 0x18f95e1
lea eax, [ebx + 0x401028]
lea ecx, [ebx + 0x40124f]
push 0
push ecx
push eax
call dword [ebx + 0x4013d5]
lea eax, [ebx + 0x40124f]
push eax
call fcn.018f8262
lea eax, [ebx + 0x40112c]
push eax
push 0x104
call dword [ebx + 0x401321]
lea eax, [ebx + 0x40112c]
lea ecx, [ebx + 0x40125f]
lea edx, [ebx + 0x401c0c]
push edx
push 0
push ecx
push eax
call dword [ebx + 0x401329]
lea eax, [ebx + 0x401028]
lea ecx, [ebx + 0x401c0c]
push 1
push ecx
push eax
call dword [ebx + 0x401325]
lea eax, [ebx + 0x401c0c]
push 4
push 0
push eax
call dword [ebx + 0x401325]
lea eax, [ebx + 0x40124f]
lea ecx, [ebx + 0x401028]
push 3
push ecx
push eax
call dword [ebx + 0x401325]
jmp 0x4bb25f