Function at 0x1003da4
Capabilities:
Accept command line arguments

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x1074
call fcn.010055a0
mov eax, dword [0x100c00c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor edi, edi
push edi
push edi
push 1
push edi
mov dword [ebp - 0x1064], 0x80004005
mov dword [ebp - 0x106c], edi
mov dword [ebp - 0x1068], edi
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push 0x100157c
call fcn.01005eb6
mov esi, 0x100c5a8
push esi
call fcn.01003310
push 0x1001518
mov dword [0x100c5c8], 0x10012b8
mov dword [0x100c014], esi
call fcn.010033de
lea eax, [ebp - 0x106c]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
mov dword [ebp - 0x1070], ebx
cmp ebx, edi
jne 0x1003e7a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
jle 0x1003e46
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004679
test byte [eax + 0x1c], 1
je 0x1004679
push esi
push 0x10012c8
push 0x1f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01003070
jmp 0x1004679
cmp dword [ebp - 0x106c], 2
jge 0x1003eb4
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push 0x10012c8
push 0x20
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100304a
jmp 0x1004667
push 1
push edi
mov esi, 0x100c5d0
push edi
mov ecx, esi
call fcn.010082c3
cmp eax, edi
mov dword [ebp - 0x1064], eax
jge 0x1003f05
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push dword [ebp - 0x1064]
push 0x10012c8
push 0x21
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01003070
jmp 0x1004667
mov eax, dword [ebx + 4]
push 4
mov dword [ebp - 0x1074], eax
mov ecx, 0x10014ec
pop ebx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1003f3a
cmp dx, di
je 0x1003f36
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1003f3a
add eax, ebx
add ecx, ebx
cmp dx, di
jne 0x1003f16
xor eax, eax
jmp 0x1003f3f
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x100404d
mov ecx, esi
call fcn.01007eb4
test eax, eax
jne 0x1003f76
mov ecx, esi
call fcn.01007e9c
test eax, eax
jne 0x1003f76
mov ecx, esi
call fcn.01007ecb
test eax, eax
jne 0x1003f76
call fcn.010067ae
mov esi, 0x14c00240
test eax, eax
jne 0x1003f7b
mov esi, 0x84000000
cmp dword [ebp - 0x106c], 2
jbe 0x100401d
lea eax, [ebp - 0x1068]
push eax
call sub.wer.dll_WerpOpenMachineQueue
cmp eax, edi
mov dword [ebp - 0x1064], eax
jge 0x1003fca
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push dword [ebp - 0x1064]
push 0x10012c8
push 0x22
jmp 0x1003ef5
mov eax, dword [ebp - 0x1070]
push edi
push esi
push edi
push edi
push edi
push dword [eax + 8]
push dword [ebp - 0x1068]
call sub.wer.dll_WerpSubmitReportFromStore
cmp eax, edi
mov dword [ebp - 0x1064], eax
jge 0x1004344
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004344
test byte [eax + 0x1c], 1
je 0x1004344
push dword [ebp - 0x1064]
push 0x10012c8
push 0x23
jmp 0x1004339
mov dword [ebp - 0x1064], 0x80070057
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push 0x10012c8
push 0x24
jmp 0x1003ea4
mov eax, dword [ebp - 0x1074]
mov ecx, 0x10014cc
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100407c
cmp dx, di
je 0x1004078
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100407c
add eax, ebx
add ecx, ebx
cmp dx, di
jne 0x1004058
xor eax, eax
jmp 0x1004081
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x1004158
xor esi, esi
cmp dword [ebp - 0x106c], 2
jbe 0x1004128
cmp dword [ebp - 0x106c], 3
jbe 0x10040df
mov eax, dword [ebp - 0x1070]
mov eax, dword [eax + 0xc]
mov ecx, 0x10014b0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10040d3
cmp dx, di
je 0x10040cf
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10040d3
add eax, ebx
add ecx, ebx
cmp dx, di
jne 0x10040af
xor eax, eax
jmp 0x10040d8
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x10040df
xor esi, esi
inc esi
mov eax, dword [ebp - 0x1070]
push esi
push dword [eax + 8]
call sub.wer.dll_WerpLaunchResponse
cmp eax, edi
mov dword [ebp - 0x1064], eax
jge 0x1004667
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push dword [ebp - 0x1064]
push 0x10012c8
push 0x25
jmp 0x1003ef5
mov dword [ebp - 0x1064], 0x80070057
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push 0x10012c8
push 0x26
jmp 0x1003ea4
mov esi, dword [ebp - 0x1074]
mov ecx, 0x1001480
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1004189
cmp dx, di
je 0x1004185
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1004189
add eax, ebx
add ecx, ebx
cmp dx, di
jne 0x1004165
xor eax, eax
jmp 0x100418e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x100426c
cmp dword [ebp - 0x106c], 2
jbe 0x100423c
lea eax, [ebp - 0x1068]
push eax
call sub.wer.dll_WerpOpenUserQueue
cmp eax, edi
mov dword [ebp - 0x1064], eax
jge 0x10041e5
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push dword [ebp - 0x1064]
push 0x10012c8
push 0x27
jmp 0x1003ef5
mov eax, dword [ebp - 0x1070]
push edi
push 0x84000000
push edi
push edi
push edi
push dword [eax + 8]
push dword [ebp - 0x1068]
call sub.wer.dll_WerpSubmitReportFromStore
cmp eax, edi
mov dword [ebp - 0x1064], eax
jge 0x1004344
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004344
test byte [eax + 0x1c], 1
je 0x1004344
push dword [ebp - 0x1064]
push 0x10012c8
push 0x28
jmp 0x1004339
mov dword [ebp - 0x1064], 0x80070057
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push 0x10012c8
push 0x29
jmp 0x1003ea4
mov ecx, 0x100144c
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1004297
cmp dx, di
je 0x1004293
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1004297
add eax, ebx
add ecx, ebx
cmp dx, di
jne 0x1004273
xor eax, eax
jmp 0x100429c
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x100438a
cmp dword [ebp - 0x106c], 2
jbe 0x100435a
lea eax, [ebp - 0x1068]
push eax
call sub.wer.dll_WerpOpenMachineQueue
cmp eax, edi
mov dword [ebp - 0x1064], eax
jge 0x10042f3
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push dword [ebp - 0x1064]
push 0x10012c8
push 0x2a
jmp 0x1003ef5
mov eax, dword [ebp - 0x1070]
push edi
push 0x84000000
push edi
push edi
push edi
push dword [eax + 8]
push dword [ebp - 0x1068]
call sub.wer.dll_WerpSubmitReportFromStore
cmp eax, edi
mov dword [ebp - 0x1064], eax
jge 0x1004344
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004344
test byte [eax + 0x1c], 1
je 0x1004344
push dword [ebp - 0x1064]
push 0x10012c8
push 0x2b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01003070
push dword [ebp - 0x1068]
call sub.wer.dll_WerpCloseStore
mov dword [ebp - 0x1068], edi
jmp 0x1004667
mov dword [ebp - 0x1064], 0x80070057
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push 0x10012c8
push 0x2c
jmp 0x1003ea4
mov ecx, 0x1001438
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10043b5
cmp dx, di
je 0x10043b1
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10043b5
add eax, ebx
add ecx, ebx
cmp dx, di
jne 0x1004391
xor eax, eax
jmp 0x10043ba
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x1004442
cmp dword [ebp - 0x106c], 3
jbe 0x1004412
lea ecx, [ebp - 0x1060]
call fcn.01004ccc
mov esi, dword [ebp - 0x1070]
push dword [esi + 0xc]
call sub.msvcrt.dll__wtoi64
pop ecx
push edx
push eax
push dword [esi + 8]
call sub.msvcrt.dll__wtoi
pop ecx
push eax
lea ecx, [ebp - 0x1060]
call fcn.0100536a
lea ecx, [ebp - 0x1060]
mov dword [ebp - 0x1064], eax
call fcn.01004feb
jmp 0x1004667
mov dword [ebp - 0x1064], 0x80070057
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push 0x10012c8
push 0x2d
jmp 0x1003ea4
mov ecx, 0x1001418
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100446d
cmp dx, di
je 0x1004469
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100446d
add eax, ebx
add ecx, ebx
cmp dx, di
jne 0x1004449
xor eax, eax
jmp 0x1004472
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x1004534
call fcn.01004963
mov edi, eax
call fcn.010049c8
push 0
mov ebx, eax
call fcn.01004b74
mov esi, 0x100c014
test eax, eax
jne 0x10044a7
mov ecx, 0x100c5d0
call fcn.01007e90
cmp eax, 4
jne 0x10044af
test edi, edi
jne 0x10044e1
test ebx, ebx
jne 0x10044e1
push 1
call fcn.01004b74
test eax, eax
je 0x10044be
push 1
jmp 0x10044e3
mov eax, dword [0x100c014]
cmp eax, esi
je 0x10044ee
test byte [eax + 0x1c], 4
je 0x10044ee
push 0x10012c8
push 0x2e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100304a
jmp 0x10044ee
push 0
call fcn.01003c9b
mov dword [ebp - 0x1064], eax
test edi, edi
jne 0x1004667
test ebx, ebx
jne 0x1004667
call fcn.0100483a
mov dword [ebp - 0x1064], eax
test eax, eax
jge 0x1004667
mov eax, dword [0x100c014]
cmp eax, esi
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push 0x10012c8
push 0x2f
jmp 0x1003ea4
mov ecx, 0x1001408
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100455f
cmp dx, di
je 0x100455b
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100455f
add eax, ebx
add ecx, ebx
cmp dx, di
jne 0x100453b
xor eax, eax
jmp 0x1004564
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x10045f7
mov eax, dword [ebp - 0x106c]
cmp eax, 2
jbe 0x10045cb
push edi
push edi
push edi
push edi
push edi
push edi
add eax, 0xfffffffe
push edi
push eax
mov eax, dword [ebp - 0x1070]
add eax, 8
push eax
call fcn.010076a2
cmp eax, edi
mov dword [ebp - 0x1064], eax
jge 0x1004667
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push dword [ebp - 0x1064]
push 0x10012c8
push 0x30
jmp 0x1003ef5
mov dword [ebp - 0x1064], 0x80070057
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x1004667
test byte [eax + 0x1c], 1
je 0x1004667
push 0x10012c8
push 0x31
jmp 0x1003ea4
mov ecx, 0x10013ec
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1004622
cmp dx, di
je 0x100461e
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1004622
add eax, ebx
add ecx, ebx
cmp dx, di
jne 0x10045fe
xor eax, eax
jmp 0x1004627
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x1004638
call fcn.01003497
mov dword [ebp - 0x1064], eax
jmp 0x1004667
mov eax, dword [0x100c014]
cmp eax, 0x100c014
je 0x100465d
test byte [eax + 0x1c], 1
je 0x100465d
push esi
push 0x10012c8
push 0x32
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100309c
mov dword [ebp - 0x1064], 0x80070057
push dword [ebp - 0x1070]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, dword [ebp - 0x1064]
call fcn.0100342b
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.01002f1d
leave
ret 0x10