Function at 0x1003279
Capabilities:
Accept command line arguments
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xe84
mov eax, dword [0x1006040]
push ebx
push esi
push edi
xor edi, edi
lea ecx, [ebp - 0xe24]
mov dword [ebp - 4], eax
xor esi, esi
mov dword [ebp - 0xe54], edi
call fcn.0100172b
or dword [ebp - 0xe34], 0xffffffff
mov dword [ebp - 0xe30], edi
mov dword [ebp - 0xe28], edi
mov dword [ebp - 0xe50], edi
mov dword [ebp - 0xe4c], edi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0xe70]
call fcn.0100324a
mov ebx, 0x100
push ebx
lea eax, [ebp - 0x504]
push eax
push 0x3ea
push edi
mov dword [ebp - 0xe2c], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
je 0x1003321
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
lea eax, [ebp - 0x504]
push eax
push 0x100132c
push edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0xe50], eax
cmp dword [ebp - 0xe68], edi
mov eax, dword [ebp - 0xe5c]
jne 0x1003350
cmp dword [ebp - 0xe70], edi
jne 0x1003350
cmp dword [ebp - 0xe60], edi
jne 0x1003408
cmp eax, edi
je 0x1003350
cmp word [eax], di
jne 0x1003415
push 0x3eb
call fcn.0100293b
cmp esi, edi
jge 0x1003365
push esi
push edi
call fcn.01003094
cmp dword [ebp - 0xe50], edi
je 0x1003379
push dword [ebp - 0xe50]
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp dword [ebp - 0xe34], 0xffffffff
je 0x100338e
push dword [ebp - 0xe34]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xe2c]
cmp ecx, edi
je 0x100339f
push 1
call fcn.01003041
mov ecx, dword [ebp - 0xe30]
cmp ecx, edi
je 0x10033b0
push 1
call fcn.01003041
mov ecx, dword [ebp - 0xe28]
cmp ecx, edi
je 0x10033c1
push 1
call fcn.0100306e
lea ecx, [ebp - 0xe24]
call fcn.01002777
cmp dword [ebp - 0xe54], edi
je 0x10033da
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [ebp - 0xe5c], edi
pop edi
pop esi
pop ebx
je 0x10033f1
push dword [ebp - 0xe5c]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
lea ecx, [ebp - 0xe24]
call fcn.0100174f
mov ecx, dword [ebp - 4]
xor eax, eax
call fcn.01004bb2
leave
ret
cmp eax, edi
je 0x1003415
cmp word [eax], di
jne 0x1003350
cmp dword [ebp - 0xe6c], edi
jne 0x1003425
cmp dword [ebp - 0xe64], edi
je 0x1003436
cmp eax, edi
je 0x1003350
cmp word [eax], di
je 0x1003350
push edi
push edi
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov esi, eax
cmp esi, edi
jl 0x100335e
push 0x1c
mov dword [ebp - 0xe54], 1
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, edi
pop ecx
je 0x100346d
mov ecx, eax
call fcn.01002796
mov dword [ebp - 0xe28], eax
jmp 0x1003473
mov dword [ebp - 0xe28], edi
cmp dword [ebp - 0xe28], edi
jne 0x1003485
mov esi, 0x81000001
jmp 0x100335e
mov ecx, dword [ebp - 0xe28]
call fcn.010041e7
mov esi, eax
cmp esi, edi
jl 0x100335e
cmp dword [ebp - 0xe60], edi
je 0x10034af
mov ecx, dword [ebp - 0xe28]
call fcn.01003e63
jmp 0x1003527
push dword [ebp - 0xe5c]
lea ecx, [ebp - 0xe24]
call fcn.01001768
mov esi, eax
cmp esi, edi
jl 0x100335e
lea ecx, [ebp - 0xe24]
call fcn.01001ee2
mov esi, eax
cmp esi, 0x81000004
jne 0x10034ec
lea ecx, [ebp - 0xe24]
call fcn.01001b7f
jmp 0x1003527
cmp esi, edi
jl 0x100335e
push edi
push 0x80
push 2
push edi
push edi
push 0x40000000
push 0x1001314
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0xe34], eax
jne 0x1003543
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
test eax, eax
jg 0x100352e
call esi
mov esi, eax
jmp 0x100335a
call esi
mov esi, eax
and esi, 0xffff
or esi, 0x80070000
jmp 0x100335a
lea eax, [ebp - 0xe30]
push eax
lea ecx, [ebp - 0xe24]
call fcn.01002008
mov esi, eax
cmp esi, edi
jl 0x100335e
cmp dword [ebp - 0xe30], edi
je 0x10039d7
mov ecx, dword [ebp - 0xe30]
push ebx
lea eax, [ebp - 0x304]
push eax
call fcn.010020e0
mov esi, eax
cmp esi, edi
jl 0x100335e
mov ecx, dword [ebp - 0xe30]
push ebx
lea eax, [ebp - 0x504]
push eax
call fcn.010021ac
mov esi, eax
cmp esi, edi
jl 0x100335e
cmp dword [ebp - 0xe64], edi
mov dword [ebp - 0xe58], 1
je 0x1003629
push 0x80
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x304]
push eax
call fcn.01002b0f
mov esi, eax
cmp esi, edi
jl 0x100335e
cmp esi, 1
jne 0x1003601
lea eax, [ebp - 0x304]
push eax
push 0x3f1
push dword [ebp - 0xe34]
call fcn.010029be
mov dword [ebp - 0xe4c], esi
mov dword [ebp - 0xe58], edi
cmp word [ebp - 0x504], di
jne 0x1003648
cmp word [ebp - 0x104], di
je 0x1003632
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x504]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
cmp word [ebp - 0x504], di
jne 0x1003648
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x504]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xe30]
lea eax, [ebp - 0xe80]
push eax
call fcn.01002274
mov esi, eax
cmp esi, edi
jl 0x100335e
cmp dword [ebp - 0xe80], edi
je 0x1003690
cmp dword [ebp - 0xe6c], edi
jne 0x1003690
mov ecx, dword [ebp - 0xe28]
lea eax, [ebp - 0x304]
push eax
call fcn.0100495f
mov esi, eax
cmp esi, edi
jl 0x100335e
mov ecx, dword [ebp - 0xe2c]
cmp ecx, edi
je 0x10036a1
push 1
call fcn.01003041
mov ecx, dword [ebp - 0xe30]
lea eax, [ebp - 0xe2c]
push eax
call fcn.0100236c
mov esi, eax
cmp esi, edi
jl 0x100335e
cmp dword [ebp - 0xe2c], edi
je 0x1003987
mov ecx, dword [ebp - 0xe2c]
lea eax, [ebp - 0xe74]
push eax
call fcn.0100267f
mov esi, eax
cmp esi, edi
jl 0x100335e
mov ecx, dword [ebp - 0xe2c]
lea eax, [ebp - 0xe38]
push eax
call fcn.010025fb
mov esi, eax
cmp esi, edi
jl 0x100335e
cmp dword [ebp - 0xe38], edi
mov ecx, dword [ebp - 0xe2c]
je 0x100371d
lea eax, [ebp - 0xe40]
push eax
call fcn.01002547
jmp 0x100372e
push 0x80
lea eax, [ebp - 0x104]
push eax
call fcn.01002485
mov esi, eax
cmp esi, edi
jl 0x100335e
cmp dword [ebp - 0xe6c], edi
jne 0x10037b1
cmp dword [ebp - 0xe58], edi
je 0x10037b1
cmp dword [ebp - 0xe74], edi
mov ecx, dword [ebp - 0xe28]
je 0x1003780
cmp dword [ebp - 0xe38], edi
lea eax, [ebp - 0x304]
push eax
je 0x1003772
push dword [ebp - 0xe40]
call fcn.01004a3a
jmp 0x10037d8
lea eax, [ebp - 0x104]
push eax
call fcn.01004a6f
jmp 0x10037d8
cmp dword [ebp - 0xe38], edi
lea eax, [ebp - 0x504]
push eax
lea eax, [ebp - 0x304]
push eax
je 0x10037a3
push dword [ebp - 0xe40]
call fcn.010049ca
jmp 0x10037d8
lea eax, [ebp - 0x104]
push eax
call fcn.01004a02
jmp 0x10037d8
cmp dword [ebp - 0xe38], edi
mov ecx, dword [ebp - 0xe28]
je 0x10037cc
push dword [ebp - 0xe40]
call fcn.010045e8
jmp 0x10037d8
lea eax, [ebp - 0x104]
push eax
call fcn.01004602
mov esi, eax
cmp esi, 1
je 0x10037f4
cmp esi, 0x81000005
je 0x10037f4
cmp esi, edi
jl 0x100335e
jmp 0x1003946
push 0x3ea
lea ecx, [ebp - 0xe3c]
call fcn.010016d9
cmp dword [ebp - 0xe3c], edi
je 0x1003928
cmp dword [ebp - 0xe38], edi
mov word [ebp - 0x804], di
je 0x1003863
push 0x3f2
lea ecx, [ebp - 0xe44]
call fcn.010016d9
cmp dword [ebp - 0xe44], edi
je 0x10038ac
push dword [ebp - 0xe40]
lea eax, [ebp - 0x804]
push dword [ebp - 0xe44]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp dword [ebp - 0xe44], edi
je 0x10038ac
push dword [ebp - 0xe44]
jmp 0x10038a6
push 0x3f3
lea ecx, [ebp - 0xe48]
call fcn.010016d9
cmp dword [ebp - 0xe48], edi
je 0x10038ac
lea eax, [ebp - 0x104]
push eax
push dword [ebp - 0xe48]
lea eax, [ebp - 0x804]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp dword [ebp - 0xe48], edi
je 0x10038ac
push dword [ebp - 0xe48]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
cmp dword [ebp - 0xe34], edi
je 0x100390c
push edi
push edi
push ebx
lea eax, [ebp - 0x604]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x804]
push eax
push edi
push edi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0x10012f8
lea eax, [ebp - 0x604]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push edi
lea eax, [ebp - 0xe84]
push eax
lea eax, [ebp - 0x604]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0x604]
push eax
push dword [ebp - 0xe34]
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x1003928
mov eax, dword [ebp - 0xe3c]
cmp eax, edi
jne 0x100391b
mov eax, 0x100119c
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.0100282d
cmp dword [ebp - 0xe3c], edi
mov dword [ebp - 0xe4c], 1
je 0x1003946
push dword [ebp - 0xe3c]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov ecx, dword [ebp - 0xe2c]
lea eax, [ebp - 0xe78]
push eax
call fcn.0100240d
mov esi, eax
cmp esi, edi
jl 0x100335e
mov ecx, dword [ebp - 0xe2c]
cmp ecx, edi
je 0x1003973
push 1
call fcn.01003041
mov eax, dword [ebp - 0xe78]
cmp eax, edi
mov dword [ebp - 0xe2c], eax
jne 0x10036c9
mov ecx, dword [ebp - 0xe30]
lea eax, [ebp - 0xe7c]
push eax
call fcn.0100240d
mov esi, eax
cmp esi, edi
jl 0x100335e
mov ecx, dword [ebp - 0xe30]
cmp ecx, edi
je 0x10039b4
push 1
call fcn.01003041
mov eax, dword [ebp - 0xe7c]
cmp eax, edi
mov dword [ebp - 0xe30], eax
jne 0x100356b
cmp dword [ebp - 0xe4c], edi
je 0x10039d7
push 0x3f4
jmp 0x10039eb
cmp dword [ebp - 0xe6c], edi
je 0x10039e6
push 0x3ee
jmp 0x10039eb
push 0x3ed
call fcn.0100293b
jmp 0x1003365