Function at 0x401000
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov dword [ebp - 0x28], 0
mov word [ebp - 0x24], 0
mov word [ebp - 0x14], 0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
lea edx, [ecx + eax*4]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp + 0xc]
add eax, 4
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp - 0xc]
jae 0x4011db
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
movsx ecx, byte [eax]
cmp ecx, 0x2d
je 0x401171
mov word [ebp - 0x18], 0
jmp 0x40105f
mov dx, word [ebp - 0x18]
add dx, 1
mov word [ebp - 0x18], dx
mov eax, dword [ebp - 0x18]
and eax, 0xffff
mov ecx, dword [eax*8 + 0x403010]
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0
je 0x401114
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 8], ecx
jmp 0x40109d
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx]
test edx, edx
je 0x4010e1
mov eax, dword [ebp - 4]
movsx ecx, byte [eax]
cmp ecx, 0x61
jl 0x4010cb
mov edx, dword [ebp - 4]
movsx eax, byte [edx]
cmp eax, 0x7a
jg 0x4010cb
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx]
sub edx, 0x20
mov dword [ebp - 0x30], edx
jmp 0x4010d4
mov eax, dword [ebp - 4]
movsx ecx, byte [eax]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 8]
movsx eax, byte [edx]
cmp dword [ebp - 0x30], eax
jne 0x4010e1
jmp 0x40108b
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx]
test edx, edx
jne 0x40110f
mov eax, dword [ebp - 0x18]
and eax, 0xffff
xor ecx, ecx
mov cx, word [eax*8 + 0x403014]
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x2c]
and edx, 0xffff
cmp ecx, edx
jg 0x40110f
jmp 0x401114
jmp 0x401053
cmp dword [ebp - 0x2c], 0
jne 0x401133
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
push str.Unknown_command___s__n
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 8
call fcn.004013b0
mov edx, dword [ebp - 0x18]
and edx, 0xffff
mov ax, word [edx*8 + 0x403016]
mov word [ebp - 0x24], ax
mov ecx, dword [ebp - 0x24]
and ecx, 0xffff
cmp ecx, 1
jne 0x40116f
mov edx, dword [ebp + 0xc]
add edx, 4
mov dword [ebp + 0xc], edx
mov eax, dword [ebp + 0xc]
cmp eax, dword [ebp - 0xc]
jae 0x40116f
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov dword [ebp - 0x28], edx
jmp 0x4011d6
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
movsx eax, byte [edx]
cmp eax, 0x61
jl 0x4011a0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx]
cmp edx, 0x7a
jg 0x4011a0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax]
sub ecx, 0x20
mov dword [ebp - 0x34], ecx
jmp 0x4011a9
mov edx, dword [ebp - 4]
movsx eax, byte [edx]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0x5a
je 0x4011b7
jmp 0x4011bf
mov word [ebp - 0x14], 1
jmp 0x4011d6
mov edx, dword [ebp - 4]
push edx
push str.Unknown_switch___s__n
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 8
call fcn.004013b0
jmp 0x401025
mov eax, dword [ebp - 0x14]
and eax, 0xffff
test eax, eax
je 0x4011fa
push 0x403068
push str.install_version__s_n
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 8
mov ecx, dword [ebp - 0x24]
and ecx, 0xffff
test ecx, ecx
je 0x40122e
cmp dword [ebp - 0x28], 0
jne 0x40121b
mov edx, dword [ebp - 0x24]
and edx, 0xffff
cmp edx, 1
je 0x40122e
cmp dword [ebp - 0x28], 0
je 0x401233
mov eax, dword [ebp - 0x24]
and eax, 0xffff
cmp eax, 1
je 0x401233
call fcn.004013b0
mov dword [ebp - 0x1c], 0x80000002
mov ecx, dword [ebp - 0x24]
and ecx, 0xffff
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], 1
je 0x401257
cmp dword [ebp - 0x3c], 2
je 0x40129d
jmp 0x4012de
push 0x40130e
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004013f0
add esp, 0xc
mov word [ebp - 0x10], ax
mov ecx, dword [ebp - 0x10]
and ecx, 0xffff
test ecx, ecx
je 0x40128d
push str.InterBase_has_not_been_installed_in_the_registry._n
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 4
jmp 0x40129b
push str.InterBase_has_been_successfully_installed_in_the_registry._n
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 4
jmp 0x4012de
push 0x40130e
push 0
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00401557
add esp, 0xc
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x10]
and eax, 0xffff
test eax, eax
je 0x4012d0
push str.InterBase_has_not_been_deleted_from_the_registry._n
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 4
jmp 0x4012de
push str.InterBase_has_been_successfully_deleted_from_the_registry._n
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 4
cmp dword [ebp - 0x1c], 0x80000002
je 0x4012f1
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 0x10]
and edx, 0xffff
neg edx
sbb edx, edx
neg edx
push edx
call dword [sym.imp.MSVCRT.dll_exit]
add esp, 4
mov esp, ebp
pop ebp
ret