Function at 0x1001f79
Capabilities:
Accept command line arguments

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, 0x1001414
lea edi, [ebp - 0x10]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
xor ebx, ebx
xor eax, eax
lea edi, [ebp - 0xb]
stosd dword es:[edi], eax
push ebx
push ebx
stosw word es:[edi], ax
push 1
push ebx
mov dword [ebp - 0x18], ebx
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1002e8f
mov eax, dword [ebp + 8]
mov dword [0x1019008], eax
mov eax, dword [ebp + 0xc]
mov dword [0x101900c], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
mov esi, eax
push 0x1019080
push esi
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadUILanguage]
cmp esi, ebx
je 0x1002002
push esi
push 0x1002118
lea eax, [ebp - 0x10]
push 0xc
push eax
call sub.msvcrt.dll_sprintf_s
add esp, 0x10
lea eax, [ebp - 0x10]
push eax
push ebx
call dword [sym.imp.msvcrt.dll_setlocale]
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
pop ecx
pop ecx
push 0xfffffffffffffff5
call esi
mov dword [0x1019038], eax
cmp eax, 0xffffffff
je 0x1002e9c
push 0xfffffffffffffff4
call esi
mov dword [0x1019040], eax
cmp eax, 0xffffffff
je 0x1002ea9
lea eax, [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call fcn.01002c79
mov dword [0x101903c], eax
cmp eax, ebx
je 0x1002eb6
add dword [0x101903c], 4
dec dword [ebp + 8]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ebx
je 0x10020be
mov edi, dword [sym.imp.msvcrt.dll__wcsnicmp]
mov ebx, 0xdaf
mov eax, dword [0x101903c]
mov ecx, dword [eax]
cmp word [ecx], 0x2f
je 0x1002ec2
mov eax, 0x100
cmp word [ebp - 0x14], ax
jge 0x1002f7d
movsx eax, word [ebp - 0x14]
inc dword [ebp - 0x14]
mov dword [eax*4 + 0x101a6f0], ecx
mov cx, word [ebp - 0x18]
mov word [eax*2 + 0x101a2e8], cx
add dword [0x101903c], 4
inc dword [ebp - 0x18]
dec dword [ebp + 8]
jne 0x1002073
xor ebx, ebx
push ebx
push 0x2000
push 0x101d340
call fcn.01002121
push ebx
push 0x1000
push 0x101c340
call fcn.01002121
push 0x4000
push dword [sym.imp.msvcrt.dll__iob]
call dword [sym.imp.msvcrt.dll__fileno]
pop ecx
push eax
call dword [sym.imp.msvcrt.dll__setmode]
pop ecx
pop ecx
call fcn.01002c30
push ebx
call fcn.01002992
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.01002d45
leave
ret
call edi
push eax
call fcn.010108f6
jmp 0x1001fbf
call edi
push eax
call fcn.0100295a
jmp 0x1002027
call edi
push eax
call fcn.0100295a
jmp 0x1002039
push 8
call fcn.0100295a
jmp 0x1002056
mov eax, ecx
lea esi, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x1002ec7
sub eax, esi
sar eax, 1
movzx eax, ax
cmp ax, 1
jle 0x1002f4b
movsx esi, ax
push esi
push ecx
push str._YES
call edi
add esp, 0xc
test eax, eax
jne 0x1002f13
cmp dword [0x1021ad0], 2
jne 0x1002f04
push 0xdb6
call fcn.0100295a
mov dword [0x1021ad0], 1
jmp 0x10020ad
mov eax, dword [0x101903c]
push esi
push dword [eax]
push 0x10209d8
call edi
add esp, 0xc
test eax, eax
jne 0x1002f4b
cmp dword [0x1021ad0], 1
jne 0x1002f3c
push 0xdb6
call fcn.0100295a
mov dword [0x1021ad0], 2
jmp 0x10020ad
mov eax, 0x100
cmp word [ebp - 0x1c], ax
jge 0x1002f7d
movsx eax, word [ebp - 0x1c]
mov ecx, dword [0x101903c]
mov ecx, dword [ecx]
inc dword [ebp - 0x1c]
mov dword [eax*4 + 0x101fc80], ecx
mov cx, word [ebp - 0x18]
mov word [eax*2 + 0x10218d0], cx
jmp 0x10020ad
push ebx
call fcn.0100295a
jmp 0x10020ad