Function at 0x1005cb3
Capabilities:
Accept command line arguments

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x27c
mov eax, dword [0x10110ec]
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
xor eax, eax
push esi
push edi
mov dword [ebp - 0x22c], ebx
lea edi, [ebp - 0x228]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x21c], ebx
lea edi, [ebp - 0x218]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x230], ebx
mov dword [0x1012014], eax
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push 0xc
pop ecx
xor eax, eax
lea edi, [ebp - 0x27c]
rep stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea ecx, [ebp - 0x23c]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov esi, eax
push esi
push dword [ebp - 0x23c]
call fcn.01005258
cmp dword [ebp - 0x23c], 1
jle 0x1005d7e
push dword [esi + 4]
push 0x1001334
call fcn.010064dc
test eax, eax
pop ecx
pop ecx
jne 0x1005d7e
cmp dword [ebp - 0x23c], 2
jle 0x1005d76
mov esi, dword [esi + 8]
jmp 0x1005d78
xor esi, esi
push esi
call fcn.010054b8
mov eax, dword [0x1012004]
cmp eax, ebx
je 0x100606c
mov ecx, dword [0x1012010]
xor ecx, dword [0x1012018]
je 0x100606c
push eax
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.ntdll.dll_RtlInitUnicodeString]
cmp dword [0x1012010], ebx
je 0x1005e02
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.ntdll.dll_RtlGUIDFromString]
test eax, eax
jl 0x100606c
mov eax, dword [0x101200c]
mov dword [ebp - 0x278], eax
mov eax, dword [0x1012010]
mov dword [ebp - 0x274], eax
mov eax, dword [0x1012008]
xor esi, esi
mov dword [ebp - 0x270], eax
inc esi
mov dword [ebp - 0x234], 0x80030000
jmp 0x1005f35
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.ntdll.dll_RtlGUIDFromString]
test eax, eax
jne 0x100606c
mov edi, dword [0x1012018]
cmp edi, ebx
je 0x100606c
push ebx
push ebx
call fcn.0100e6ee
cmp eax, ebx
mov dword [ebp - 0x238], eax
je 0x100606c
lea ecx, [ebp - 0x22c]
push ecx
push eax
call fcn.0100dbc3
mov esi, eax
cmp esi, ebx
jne 0x1005ecc
mov esi, 0x104
push esi
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.0100d1e2
cmp eax, ebx
je 0x100606c
cmp eax, esi
ja 0x100606c
cmp dword [ebp - 0x234], 0x80030000
je 0x1005eae
cmp dword [ebp - 0x234], 0xc0030000
je 0x1005eae
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x238]
call fcn.0100ef43
lea eax, [ebp - 0x22c]
push eax
push dword [ebp - 0x238]
call fcn.0100dbc3
mov esi, eax
cmp esi, ebx
je 0x100606c
jmp 0x1005ed3
or byte [ebp - 0x231], 0x80
lea eax, [ebp - 0x244]
push eax
push edi
push esi
push dword [ebp - 0x238]
call fcn.0100d9f5
test eax, eax
je 0x100606c
push 0x9004
push edi
push esi
call fcn.0100e5ae
cmp eax, ebx
je 0x100606c
push 0x10
lea ecx, [ebp - 0x21c]
push ecx
push eax
push esi
call fcn.0100e3c4
test eax, eax
je 0x100606c
lea eax, [ebp - 0x27c]
push eax
push dword [ebp - 0x244]
push dword [ebp - 0x238]
call fcn.0100b27c
mov esi, eax
lea eax, [ebp - 0x21c]
push eax
call fcn.0100dfba
test eax, eax
jne 0x1005f5c
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.0100dee5
test eax, eax
jne 0x1005f62
mov dword [ebp - 0x230], ebx
cmp esi, ebx
je 0x1006066
mov eax, dword [ebp - 0x230]
test al, 2
jne 0x1006066
shr eax, 2
and eax, 1
jne 0x1005f96
call fcn.010051bd
neg eax
sbb eax, eax
inc eax
jne 0x1005f96
call fcn.01005a8e
neg eax
sbb eax, eax
inc eax
cmp dword [ebp - 0x278], ebx
jbe 0x1006066
cmp dword [ebp - 0x278], 4
ja 0x1006066
cmp eax, ebx
je 0x1005fd2
cmp dword [ebp - 0x278], 2
je 0x1006066
test byte [ebp - 0x22d], 0x10
je 0x100606c
jmp 0x1006066
mov eax, dword [ebp - 0x234]
test eax, eax
mov dword [ebp - 0x254], eax
jns 0x1005fe6
xor eax, eax
jmp 0x1005ff1
push dword [ebp - 0x238]
call fcn.0100d78f
push eax
push ebx
lea eax, [ebp - 0x27c]
push eax
call fcn.01005c4c
mov esi, eax
cmp esi, 0xffffffff
je 0x1006054
test esi, 0x8000
mov edi, 0xfff
je 0x100604a
or dword [ebp - 0x230], 4
and eax, edi
cmp eax, 1
je 0x1006028
or byte [ebp - 0x22d], 0x10
lea eax, [ebp - 0x21c]
push eax
call fcn.0100dfba
test eax, eax
jne 0x100604a
push dword [ebp - 0x230]
lea eax, [ebp - 0x21c]
push eax
call fcn.0100d11f
and esi, edi
dec esi
neg esi
sbb esi, esi
inc esi
jmp 0x1006062
xor eax, eax
cmp dword [ebp - 0x278], 2
setne al
mov esi, eax
cmp esi, ebx
jne 0x100606c
mov dword [ebp - 0x240], ebx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x240]
pop edi
pop esi
pop ebx
call fcn.010060f9
leave
ret 0x10