Function at 0x6e9da0
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
test byte [0x718004], 2
je 0x6ea0a0
call sub.KERNEL32.dll_GetCommandLineA
mov dword [ebp - 0x3c], esp
mov dword [esp], eax
mov esi, eax
call sub.msvcrt.dll_strlen
lea eax, [eax + eax + 0x11]
shr eax, 4
shl eax, 4
call fcn.006ea950
sub esp, eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2c], 0
lea eax, [esp + 0x10]
mov dword [ebp - 0x30], 0
mov edx, eax
mov dword [ebp - 0x34], eax
mov eax, dword [0x718004]
and eax, 0x4400
or eax, 0x10
mov dword [ebp - 0x38], eax
xor eax, eax
lea esi, [esi]
add esi, 1
movsx ecx, byte [esi - 1]
test ecx, ecx
mov ebx, ecx
je 0x6e9e90
cmp bl, 0x3f
je 0x6e9fb3
jg 0x6e9ee0
cmp bl, 0x27
je 0x6e9fe5
cmp bl, 0x2a
je 0x6e9fb3
cmp bl, 0x22
jne 0x6e9f50
mov ecx, eax
sar ecx, 1
je 0x6ea12a
add ecx, edx
add edx, 1
mov byte [edx - 1], 0x5c
cmp edx, ecx
jne 0x6e9e53
cmp dword [ebp - 0x2c], 0x27
je 0x6ea031
test al, 1
jne 0x6ea031
add esi, 1
mov edx, ecx
xor dword [ebp - 0x2c], 0x22
movsx ecx, byte [esi - 1]
xor eax, eax
mov dword [ebp - 0x30], 1
test ecx, ecx
mov ebx, ecx
jne 0x6e9e1d
lea esi, [esi]
test eax, eax
je 0x6ea131
add eax, edx
lea esi, [esi]
add edx, 1
mov byte [edx - 1], 0x5c
cmp edx, eax
jne 0x6e9ea0
cmp dword [ebp - 0x34], eax
jb 0x6ea072
mov edx, dword [ebp - 0x30]
test edx, edx
jne 0x6ea072
mov eax, dword [ebp - 0x24]
mov dword [0x71b004], eax
mov eax, dword [ebp - 0x20]
mov dword [section..bss], eax
mov esp, dword [ebp - 0x3c]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
cmp bl, 0x5c
je 0x6e9fd3
cmp bl, 0x7f
je 0x6e9fb3
cmp bl, 0x5b
jne 0x6e9f50
test byte [0x718004], 0x20
jne 0x6e9fb3
test eax, eax
lea edi, [eax - 1]
mov ecx, 1
je 0x6e9f42
lea edi, [edx + edi + 1]
mov eax, edx
lea esi, [esi]
lea edi, [edi]
add eax, 1
mov byte [eax - 1], 0x5c
cmp eax, edi
jne 0x6e9f20
test cl, cl
jne 0x6e9f40
lea edx, [eax + 1]
mov byte [eax], bl
xor eax, eax
jmp 0x6e9e10
mov edx, eax
lea eax, [edx + 1]
mov byte [edx], 0x7f
jmp 0x6e9f2f
test eax, eax
lea edi, [edx + eax]
je 0x6ea123
nop
lea esi, [esi]
add edx, 1
mov byte [edx - 1], 0x5c
cmp edx, edi
jne 0x6e9f60
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x6e9fa7
mov eax, dword [sym.imp.msvcrt.dll___mb_cur_max]
cmp dword [eax], 1
je 0x6ea045
mov dword [esp + 4], 0x40
mov dword [esp], ecx
mov dword [ebp - 0x40], ecx
call sub.msvcrt.dll__isctype
test eax, eax
jne 0x6ea056
mov ecx, dword [ebp - 0x40]
cmp ecx, 9
je 0x6ea056
lea edx, [edi + 1]
mov byte [edi], bl
xor eax, eax
jmp 0x6e9e10
test eax, eax
lea edi, [eax - 1]
je 0x6ea10c
mov eax, dword [ebp - 0x2c]
cmp ecx, 0x7f
sete cl
test eax, eax
setne al
or ecx, eax
jmp 0x6e9f10
cmp dword [ebp - 0x2c], 0x27
je 0x6ea0c1
add eax, 1
jmp 0x6e9e10
test byte [0x718004], 0x10
je 0x6e9f50
mov ecx, eax
sar ecx, 1
je 0x6ea138
add ecx, edx
nop
add edx, 1
mov byte [edx - 1], 0x5c
cmp edx, ecx
jne 0x6ea000
cmp dword [ebp - 0x2c], 0x22
je 0x6ea0ad
test al, 1
jne 0x6ea0ad
xor dword [ebp - 0x2c], 0x27
mov edx, ecx
xor eax, eax
mov dword [ebp - 0x30], 1
jmp 0x6e9e10
lea edx, [ecx + 1]
mov byte [ecx], 0x22
xor eax, eax
mov dword [ebp - 0x30], 1
jmp 0x6e9e10
mov eax, dword [sym.imp.msvcrt.dll__pctype]
mov eax, dword [eax]
test byte [eax + ecx*2], 0x40
je 0x6e9f9e
cmp dword [ebp - 0x34], edi
jb 0x6ea0d0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x6ea0d0
mov edx, edi
xor eax, eax
mov dword [ebp - 0x30], 0
jmp 0x6e9e10
mov byte [eax], 0
lea eax, [ebp - 0x28]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
call fcn.006eb920
jmp 0x6e9ebf
call fcn.006512a0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea edx, [ecx + 1]
mov byte [ecx], 0x27
xor eax, eax
mov dword [ebp - 0x30], 1
jmp 0x6e9e10
mov byte [edx], 0x5c
add edx, 1
jmp 0x6e9e10
lea eax, [ebp - 0x28]
mov byte [edi], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov ebx, dword [ebp - 0x38]
mov dword [esp + 4], ebx
mov edi, dword [ebp - 0x34]
mov dword [esp], edi
call fcn.006eb920
mov eax, ebx
mov edx, edi
mov dword [ebp - 0x30], 0
or eax, 1
mov dword [ebp - 0x38], eax
xor eax, eax
jmp 0x6e9e10
mov eax, dword [ebp - 0x2c]
test eax, eax
setne al
cmp ecx, 0x7f
sete cl
or ecx, eax
mov eax, edx
jmp 0x6e9f2b
mov edi, edx
jmp 0x6e9f6b
mov ecx, edx
jmp 0x6e9e5e
mov eax, edx
jmp 0x6e9eab
mov ecx, edx
jmp 0x6ea00b