Function at 0x10001fa0
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
call sub.KERNEL32.DLL_GetCommandLineA
mov edx, dword [0x100503fc]
sub ecx, esi
add eax, eax
cmp dword [0x100507e0], eax
jbe 0x10001f81
mov dword [0x100505bc], edx
mov eax, dword [0x10050568]
mov esi, 8
mov edi, dword [0x10050570]
add eax, eax
mov dword [0x10050588], eax
mov dword [0x10050704], esi
mov edx, dword [0x10050694]
mov dword [0x10050438], edi
call fcn.10002a10
mov eax, dword [0x10050410]
or eax, eax
test eax, eax
jae 0x10001fb4
mov eax, dword [0x10050518]
mov edx, dword [0x1005076c]
add eax, 0x80b86610
add byte [esi - 0x48], ah
and byte [eax], al
mov dword [0x10050768], eax
mov eax, dword [0x1005068c]
mov eax, dword [0x10050718]
mov si, 0x75
push esi
push dword [0x100505fc]
call sub.user32.dll_GetWindow
mov eax, dword [0x100506f8]
mov si, 0xa0
add edx, esi
cmp dword [0x10050670], 2
ja 0x10002002
mov esi, dword [0x10050658]
mov edi, dword [0x100505fc]
sub edi, eax
mov edx, dword [0x100505f8]
sub eax, esi
mov dword [0x10050430], eax
mov dword [0x10050464], eax
mov dword [0x1005042c], eax
mov eax, dword [0x10050698]
call fcn.10001854
mov eax, dword [0x1005047c]
add eax, eax
cmp eax, 1
jb 0x10002047
mov ecx, dword [0x10050408]
mov eax, dword [0x10050684]
mov ecx, dword [0x100504ac]
mov ax, 2
mov eax, dword [0x100503e4]
mov dx, 0xdd
mov dword [0x10050630], eax
mov dword [0x10050644], edx
mov edx, dword [0x100505f8]
mov dword [0x100505d4], edx
mov eax, dword [0x100503e4]
sub edi, edi
sub eax, edx
cmp dword [0x100507c0], eax
je 0x1000208b
mov dword [0x100505fc], edi
mov ecx, dword [0x100503e4]
mov esi, 2
mov eax, dword [0x1005069c]
mov eax, 0x71
mov dword [0x1005065c], ecx
mov dword [0x10050494], esi
mov esi, dword [0x1005077c]
mov ecx, dword [0x100505d4]
call fcn.100022d8
mov edi, dword [0x1005061c]
add esi, esi
mov ecx, dword [0x100507c0]
mov ax, 0x20
cmp dword [0x10050694], 0xfa
jne 0x100020d1
mov eax, dword [0x1005046c]
mov ecx, 0x40
add ecx, edi
mov dword [0x100506d4], ecx
mov eax, dword [0x10050438]
mov esi, dword [0x1005043c]
mov dword [0x10050460], esi
mov dword [0x1005040c], esi
push edx
call sub.user32.dll_DrawMenuBar
mov edi, dword [0x100505a8]
sub eax, ecx
add eax, eax
cmp dword [0x10050714], eax
jae 0x1000211c
mov edi, dword [0x10050704]
mov edx, dword [0x100506b8]
mov esi, 0x10
mov edi, dword [0x100505f4]
mov dword [0x10050548], edi
or dword [0x10050668], 0xff
mov esi, dword [0x10050494]
call fcn.1000113c
mov eax, dword [0x100506d4]
add eax, eax
mov edx, dword [0x10050780]
cmp eax, dword [0x10050778]
ja 0x10002156
mov eax, dword [0x100505c0]
sub eax, eax
sub eax, edi
mov dword [0x10050560], esi
mov dword [0x10050528], eax
sub dword [0x100504f0], eax
or dword [0x10050410], 0xff0000ff
push 0x85
push 0
call sub.user32.dll_LoadBitmapA
call fcn.10002a10
push 0x7c
push 0
call sub.user32.dll_LoadBitmapA
call fcn.1000148c
mov eax, dword [0x1005069c]
sub eax, esi
cmp eax, dword [0x100503e4]
jl 0x100021a2
mov eax, dword [0x100506b4]
mov eax, 0x88
mov di, 0x2c
add dword [0x1005077c], edi
mov eax, dword [0x1005068c]
call fcn.10002a10
mov eax, dword [0x10050460]
sub esi, eax
sub ecx, edi
cmp edx, 1
jg 0x100021ce
mov eax, dword [0x1005055c]
mov ecx, dword [0x100506a0]
mov ax, 1
mov dword [0x100504b0], eax
push dword [0x10050444]
push 0x20
call sub.user32.dll_GetWindow
mov edx, dword [0x10050424]
mov ax, 0x20
and ecx, eax
test eax, eax
jae 0x10002213
mov dword [0x100503e4], edx
mov eax, dword [0x100503e4]
mov esi, 4
mov eax, dword [0x100504f0]
sub esi, eax
mov dword [0x1005070c], esi
mov eax, dword [0x100506b4]
mov edi, dword [0x100504f0]
mov eax, dword [0x10050644]
call fcn.10001670
mov edi, dword [0x10050698]
or eax, eax
mov eax, dword [0x1005051c]
sub eax, edx
cmp eax, dword [0x10050744]
jae 0x1000224d
mov esi, dword [0x10050584]
sub eax, edx
mov dword [0x10050658], eax
mov edx, dword [0x10050554]
mov edx, dword [0x10050440]
mov eax, dword [0x10050720]
mov edx, dword [0x10050468]
mov edi, 0x3d
mov eax, 8
cmp edi, dword [0x10050630]
jl 0x10002294
mov eax, dword [0x10050564]
mov dword [0x100503e4], ecx
mov eax, dword [0x100506d8]
mov eax, 0xe6
mov dword [0x100507bc], esi
mov dword [0x10050734], eax
mov eax, dword [0x100505a0]
mov dword [0x100503e4], eax
call fcn.10002a10
adc edi, dword [0x10050704]
sub eax, esi
cmp dword [0x1005054c], 0x59
je 0x100022c7
mov dword [0x100507cc], eax
mov dword [0x100504fc], esi
mov edx, dword [0x10050608]
sub esi, ecx
mov dword [0x1005046c], eax
mov dword [0x10050480], eax
mov dword [0x1005061c], esi
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]