Function at 0x101d01a
Capabilities:
Accept command line arguments
Check if file exists
Create process on windows
Get common file path
Get program files directory

Disassembly:
push 0x280
mov eax, 0x102fb00
call fcn.0100f48e
lea eax, [ebp - 0x22c]
push eax
mov dword [ebp - 0x228], ecx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
xor eax, eax
cmp ebx, eax
jne 0x101d054
push 6
pop eax
call fcn.0100f520
ret
cmp dword [ebp - 0x22c], eax
mov byte [ebp - 0x21a], al
mov byte [ebp - 0x219], al
jle 0x101d0f6
mov edi, dword [ebx + eax*4]
mov edx, edi
mov ecx, 0x10047f4
mov si, word [ecx]
cmp si, word [edx]
jne 0x101d09c
test si, si
je 0x101d098
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x101d09c
add ecx, 4
add edx, 4
test si, si
jne 0x101d076
xor ecx, ecx
jmp 0x101d0a1
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x101d0e6
mov edx, edi
mov ecx, 0x10047dc
mov si, word [ecx]
cmp si, word [edx]
jne 0x101d0d2
test si, si
je 0x101d0ce
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x101d0d2
add ecx, 4
add edx, 4
test si, si
jne 0x101d0ac
xor ecx, ecx
jmp 0x101d0d7
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x101d0ef
inc eax
cmp eax, dword [ebp - 0x22c]
jl 0x101d06c
jmp 0x101d0f6
mov byte [ebp - 0x21a], 1
jmp 0x101d0f6
mov byte [ebp - 0x219], 1
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp byte [ebp - 0x21a], 0
jne 0x101d04b
cmp byte [ebp - 0x219], 0
je 0x101d11a
push 7
jmp 0x101d04d
push 0x1038044
lea ecx, [ebp - 0x234]
call fcn.0101672d
mov eax, dword [ebp - 0x228]
push dword [eax]
and dword [ebp - 4], 0
push dword [eax + 8]
lea ecx, [ebp - 0x250]
call fcn.010197ce
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 1
call fcn.010198f9
test eax, eax
jge 0x101d369
lea ecx, [ebp - 0x250]
call fcn.010196fb
test al, al
je 0x101d18d
push 2
pop esi
lea ecx, [ebp - 0x250]
call fcn.0100df9a
mov ecx, dword [ebp - 0x234]
add ecx, 0xfffffff0
call fcn.0100744d
mov eax, esi
jmp 0x101d04e
mov ebx, SysReAllocStringLen
push ebx
lea eax, [ebp - 0x224]
push eax
mov edi, 0x10047c8
push edi
mov esi, 0x1002324
push esi
call fcn.0102d114
cmp eax, 3
je 0x101d1b7
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax]
and dword [ebp - 0x230], 0
mov eax, dword [ecx]
lea edx, [ebp - 0x230]
push edx
call dword [eax + 0xcc]
mov eax, dword [ebp - 0x224]
cmp eax, dword [ebp - 0x230]
jb 0x101d1e7
push 5
jmp 0x101d16c
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
xor eax, eax
push eax
push eax
push 0x26
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jl 0x101d362
push 0x1004788
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x101d35b
push 0x1038044
lea ecx, [ebp - 0x220]
call fcn.0101672d
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax]
mov eax, dword [ecx]
lea edx, [ebp - 0x220]
push edx
mov byte [ebp - 4], 2
call dword [eax + 0x44]
test eax, eax
jl 0x101d292
push 1
push 0x1001d54
push 0x100476c
lea eax, [ebp - 0x220]
push eax
call fcn.01012edb
lea eax, [ebp - 0x220]
push eax
call fcn.0100ca11
jmp 0x101d2a2
push 0x1001cc4
lea ecx, [ebp - 0x220]
call fcn.0100b6a9
push 0x3c
lea eax, [ebp - 0x28c]
push 0
push eax
call sub.msvcrt.dll_memset
and dword [ebp - 0x288], 0
lea eax, [ebp - 0x218]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x220]
add esp, 0xc
mov dword [ebp - 0x28c], 0x3c
mov dword [ebp - 0x280], 0x1001ca4
push dword [eax - 0xc]
lea ecx, [ebp - 0x220]
call fcn.0100a5c5
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x28c]
push eax
mov dword [ebp - 0x270], 0xa
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
cmp eax, 1
je 0x101d32d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x220]
add ecx, 0xfffffff0
mov esi, eax
call fcn.0100744d
jmp 0x101d16d
inc dword [ebp - 0x224]
push 0
push ebx
push 1
push dword [ebp - 0x224]
push edi
push esi
call fcn.0102d7a4
mov ecx, dword [ebp - 0x220]
add ecx, 0xfffffff0
call fcn.0100744d
xor esi, esi
inc esi
jmp 0x101d16d
push 4
jmp 0x101d16c
mov esi, eax
jmp 0x101d16d
push 3
jmp 0x101d16c