Function at 0x2e01c0a4
Capabilities:
Accept command line arguments

Disassembly:
push 0x6c
mov eax, 0x2e036c89
call fcn.2e0348f3
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, dword [ebp + 8]
mov edi, eax
mov dword [0x2e045af8], esi
call fcn.2e01bb69
test al, al
jne 0x2e01c0d2
xor eax, eax
inc eax
jmp 0x2e01c431
call fcn.2e01ba99
test al, al
je 0x2e01c0ca
push 0x50
call fcn.2e02a2cc
call fcn.2e02a320
xor ebx, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
call fcn.2e031a31
call fcn.2e01ba2c
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x24], 0x2e002f5c
mov dword [ebp - 0x28], 0x2e002fd0
call fcn.2e01ba3a
push 0x30
lea eax, [ebp - 0x78]
push ebx
push eax
call fcn.2e0347a3
add esp, 0xc
mov byte [ebp - 4], 1
call fcn.2e01f799
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], 1
call dword [sym.imp.MSO.dll_Ordinal_5706]
test eax, eax
jl 0x2e01c36f
push ebx
mov dword [ebp - 0x18], 0x41
call dword [sym.imp.MSO.dll_Ordinal_7045]
test al, al
je 0x2e01c36f
lea eax, [ebp - 0x24]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x3c], 0x2e002c4c
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x6c], 0x2e045b00
mov dword [ebp - 0x68], 0x2e00303c
mov byte [ebp - 0x5f], bl
mov dword [ebp - 0x5c], ebx
mov byte [ebp - 0x4c], 1
mov dword [ebp - 0x50], 0x12
mov byte [ebp - 0x4b], 1
mov byte [ebp - 0x60], 1
call fcn.2e01f600
call dword [sym.imp.MSO.dll_Ordinal_4250]
test eax, eax
jne 0x2e01c1bf
push ebx
push ebx
push ebx
push 0x58
call dword [sym.imp.MSO.dll_Ordinal_4471]
call fcn.2e01f65e
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x18], 0xc3
cmp byte [ebp - 0x5f], bl
je 0x2e01c204
cmp dword [ebp - 0x5c], ebx
je 0x2e01c204
push edi
mov dword [ebp - 0x48], 0xa987
call fcn.2e00bb4d
lea eax, [eax + eax + 2]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x48]
push eax
push ebx
push 0x4a
push dword [ebp - 0x5c]
mov dword [ebp - 0x40], edi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x2e01c36f
push edi
call fcn.2e01b81b
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.MSO.dll_Ordinal_3807]
test eax, eax
je 0x2e01c36f
mov eax, dword [ebp - 0x1c]
mov dword [0x2e045af4], eax
mov dword [ebp - 0x1c], ebx
cmp byte [0x2e045afe], bl
jne 0x2e01c23e
mov byte [ebp - 0x20], 1
cmp byte [0x2e045afd], bl
je 0x2e01c241
mov byte [ebp - 0x20], bl
push dword [ebp - 0x20]
call fcn.2e01bece
mov byte [ebp + 0xb], al
cmp al, bl
je 0x2e01c257
mov dword [ebp - 0x18], 0xe3
push 0x84
call fcn.2e01ba8a
pop ecx
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 3
cmp eax, ebx
je 0x2e01c276
mov ecx, eax
call fcn.2e01bc83
jmp 0x2e01c278
xor eax, eax
mov byte [ebp - 4], bl
mov dword [0x2e045c94], eax
cmp eax, ebx
je 0x2e01c0ca
cmp byte [ebp - 0x20], bl
je 0x2e01c292
cmp byte [ebp + 0xb], bl
jne 0x2e01c296
mov byte [eax + 0x2b], 1
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x46000000
push 0x2e001d64
push 0x2e00302c
push dword [0x2e045c94]
call fcn.2e02afc4
push dword [0x2e045c94]
or dword [ebp - 0x18], 4
call fcn.2e01a9f6
mov esi, eax
mov eax, dword [esi]
push esi
call dword [eax]
cmp eax, ebx
je 0x2e01c2e9
mov ecx, dword [0x2e045c94]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
push 1
push ecx
push eax
call dword [edx + 4]
mov ecx, dword [0x2e045c94]
push ebx
call fcn.2e014fab
mov eax, dword [esi]
push 5
push esi
call dword [eax + 0x50]
cmp byte [0x2e045c92], bl
jne 0x2e01c336
cmp byte [0x2e045afd], bl
jne 0x2e01c315
cmp byte [0x2e045afe], bl
je 0x2e01c336
movzx ecx, byte [0x2e045afe]
mov eax, dword [0x2e045c94]
mov eax, dword [eax + 4]
push ecx
push 0x1235
push 0x400
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
cmp byte [ebp - 0x11], bl
je 0x2e01c355
mov eax, dword [0x2e045c94]
mov eax, dword [eax + 4]
push ebx
push 0x1234
push 0x400
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push ebx
push ebx
push ebx
push eax
call dword [ecx + 0xc]
jmp 0x2e01c36f
mov eax, dword [0x2e045c94]
cmp eax, ebx
je 0x2e01c39a
test byte [ebp - 0x18], 4
je 0x2e01c389
push eax
call fcn.2e02adea
mov eax, dword [0x2e045c94]
cmp eax, ebx
je 0x2e01c392
add eax, 0xc
jmp 0x2e01c394
xor eax, eax
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test byte [ebp - 0x18], 0x20
je 0x2e01c3ab
call sub.Csi.dll_void___stdcall_Csi::ShutdownNetworkMonitor_void_
call dword [sym.imp.MSO.dll_Ordinal_6196]
test byte [ebp - 0x18], 2
mov dword [ebp - 0x30], ebx
je 0x2e01c3b9
call fcn.2e01f6bf
test byte [ebp - 0x18], 0x80
je 0x2e01c3c5
call dword [sym.imp.MSO.dll_Ordinal_3386]
test byte [ebp - 0x18], 0x40
je 0x2e01c3d1
call dword [sym.imp.MSO.dll_Ordinal_9118]
call dword [sym.imp.MSO.dll_Ordinal_7115]
test byte [ebp - 0x18], 1
je 0x2e01c3e2
call fcn.2e01f7a0
call fcn.2e02a30a
cmp byte [0x2e045c93], bl
je 0x2e01c400
push 0x2e043d24
call dword [sym.imp.MSO.dll_Ordinal_3155]
mov byte [0x2e045c93], bl
mov eax, dword [0x2e045c98]
cmp eax, ebx
je 0x2e01c40f
push eax
call fcn.2e01ab99
mov eax, dword [0x2e045c9c]
mov dword [0x2e045c98], ebx
cmp eax, ebx
je 0x2e01c424
push eax
call fcn.2e01aba3
mov dword [0x2e045c9c], ebx
call fcn.2e031a6c
xor eax, eax
call fcn.2e034998
ret 0x10