Function at 0x1167a10
Capabilities:
Accept command line arguments

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x218
push ebx
push esi
push edi
xor edi, edi
push 0x20a
lea eax, [ebp - 0x218]
push edi
push eax
mov dword [ebp - 4], edi
mov dword [ebp - 0xc], 1
mov dword [ebp - 8], edi
call sub.msvcrt.dll_memset
mov esi, dword [ebp + 0xc]
mov ecx, dword [esi + 0x14]
add esp, 0xc
push ecx
push edi
push edi
mov edi, dword [ebp + 8]
mov edx, dword [edi + 0x60]
lea eax, [esi + 0x468]
push eax
push 0x101abf4
mov dword [ebp + 0xc], eax
mov eax, dword [edi]
push edx
push eax
call fcn.010e9960
cmp dword [esi + 0x18c], 0
mov ebx, eax
jne 0x1167c93
test ebx, ebx
jne 0x1167a7f
mov dword [ebp - 0xc], eax
cmp dword [esi + 8], 0
jne 0x1167c8d
lea ecx, [ebp - 4]
push ecx
lea edx, [ebp - 8]
push edx
lea eax, [ebp - 0x218]
push eax
push 0x1014dcc
push edi
call fcn.010c5ca0
test eax, eax
je 0x1167c43
cmp dword [ebp - 8], 0x9000864
jae 0x1167ac7
lea ecx, [ebp - 0x218]
push ecx
push esi
push edi
call fcn.011670a0
jmp 0x1167c9a
test ebx, ebx
je 0x1167b42
cmp dword [ebp - 4], 0
jne 0x1167b24
mov ebx, dword [ebp + 0xc]
mov edx, dword [edi + 8]
mov eax, dword [ebx]
mov ecx, dword [edx + 0x1bc]
push eax
call ecx
lea edx, [ebp - 0x218]
mov dword [ebx], 0
mov eax, dword [edi]
push edx
push eax
call fcn.01103970
test eax, eax
jne 0x1167b09
lea ecx, [ebp - 0x218]
push ecx
push esi
push edi
call fcn.011670a0
mov edx, dword [esi]
mov ecx, dword [edi]
push 5
push 0
push edx
lea eax, [ebp - 0x218]
push eax
push ecx
call fcn.0102ccd0
jmp 0x1167c9a
push esi
push edi
call fcn.01143f90
test eax, eax
jne 0x1167c9a
mov dword [esi + 0x464], 1
jmp 0x1167c8d
cmp dword [ebp - 4], 0
jne 0x1167b88
cmp dword [esi + 0x460], 0
jne 0x1167b88
cmp dword [esi + 0x24], 0
jne 0x1167b88
cmp dword [esi + 0x30], 0
jne 0x1167b88
cmp dword [esi + 0x34], 0
jne 0x1167b88
cmp dword [esi + 0x174], 0
jne 0x1167b88
cmp dword [esi + 0x28], 0
jne 0x1167b88
cmp dword [esi + 0x178], 0
jne 0x1167b88
cmp dword [esi + 0x54], 0
jne 0x1167b88
mov dword [esi + 0x24], 1
push 0xf51
push 8
call dword [sym.imp.KERNEL32.DLL_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.DLL_HeapAlloc]
mov ebx, eax
test ebx, ebx
je 0x1167c14
push 0
push 0xfa0
push ebx
push 0x1013260
push edi
mov dword [ebx], 1
call fcn.01095780
test eax, eax
je 0x1167c0e
cmp dword [esi + 0x6c4], 0
je 0x1167be3
mov edx, dword [edi]
push edx
call fcn.010b44e0
test eax, eax
jne 0x1167bdf
mov eax, dword [esi]
push eax
push edi
call fcn.010e2890
jmp 0x1167c0e
push 1
jmp 0x1167c08
cmp dword [esi + 0x6c8], 0
je 0x1167bf0
push 2
jmp 0x1167c08
cmp dword [esi + 0x6cc], 0
je 0x1167bfd
push 3
jmp 0x1167c08
cmp dword [esi + 0x6d0], 0
je 0x1167c0e
push 4
push edi
call fcn.010f5530
push ebx
call fcn.0102d700
push esi
push edi
call fcn.01143f90
cmp dword [ebp - 4], 0
je 0x1167c8d
cmp dword [esi + 0x460], 0
je 0x1167c8d
call dword [sym.imp.KERNEL32.DLL_GetCommandLineW]
push eax
push edi
call fcn.010f4460
mov dword [esi + 0x460], 0
jmp 0x1167c8d
test ebx, ebx
je 0x1167c86
push 0xb
push edi
call fcn.010561d0
test eax, eax
jne 0x1167c8d
push 7
push edi
mov dword [esi + 0x10], 1
call fcn.010da610
cmp eax, 1
jne 0x1167c8d
mov ecx, dword [edi]
push ecx
call fcn.010b44e0
test eax, eax
jne 0x1167c8d
push edi
call fcn.010dafc0
test eax, eax
je 0x1167c8d
push esi
push edi
call fcn.0106c290
jmp 0x1167c9a
push esi
push edi
call fcn.01143f90
cmp dword [ebp - 0xc], 0
je 0x1167c9a
push esi
push edi
call fcn.01166eb0
mov esi, dword [ebp + 0xc]
mov eax, dword [esi]
test eax, eax
je 0x1167cba
cmp eax, 0xffffffff
je 0x1167cba
mov edx, dword [edi + 8]
push eax
mov eax, dword [edx + 0x1bc]
call eax
mov dword [esi], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8