Function at 0x100b6da
Capabilities:
Accept command line arguments

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor edi, edi
push edi
push edi
xor ebx, ebx
inc ebx
push ebx
push edi
mov dword [0x10105c8], eax
mov dword [ebp + 8], edi
mov dword [ebp - 4], edi
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
call fcn.0100c7a8
mov esi, eax
cmp esi, edi
jl 0x100b9f9
lea eax, [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ecx, dword [ebp + 8]
cmp ecx, edi
mov dword [ebp - 8], eax
jl 0x100b9f9
cmp eax, edi
je 0x100b9f9
mov dword [ebp - 0x14], eax
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
jne 0x100b760
mov esi, 0x80004005
jmp 0x100b9f9
cmp dword [ebp - 4], edi
je 0x100b77c
push dword [ebp - 8]
push 0x1002f3c
push dword [ebp + 8]
call fcn.0100b627
mov esi, eax
jmp 0x100b9f9
push edi
push 0x1002f38
lea eax, [ebp - 0x14]
push eax
call fcn.01003185
cmp al, bl
je 0x100b9f2
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x10]
je 0x100b9f2
push edi
push 0x1002f28
lea eax, [ebp - 0x14]
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b7cf
push eax
call fcn.010032aa
mov esi, eax
cmp esi, edi
jl 0x100b9f9
call fcn.0100ac7e
jmp 0x100b9bd
push edi
push 0x1002f10
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b7fc
push eax
call fcn.010032aa
mov esi, eax
cmp esi, edi
jl 0x100b9f9
call fcn.0100b4da
jmp 0x100b9bd
push edi
push 0x1002f00
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b81a
push eax
call fcn.0100a0df
jmp 0x100b9bd
push edi
push 0x1002eec
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b847
push eax
call fcn.010032aa
mov esi, eax
cmp esi, edi
jl 0x100b9f9
call fcn.0100a99a
jmp 0x100b9bd
push edi
push 0x1002ed4
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b874
push eax
call fcn.010032aa
mov esi, eax
cmp esi, edi
jl 0x100b9f9
call fcn.0100aa4b
jmp 0x100b9bd
push edi
push 0x1002ec4
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b892
push eax
call fcn.01007c7d
jmp 0x100b9bd
push edi
push 0x1002eb8
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b8b0
push eax
call fcn.010078fe
jmp 0x100b9bd
push edi
push 0x1002eac
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b8ce
push eax
call fcn.01007ab3
jmp 0x100b9bd
push edi
push 0x1002e9c
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b8ec
push eax
call fcn.010040aa
jmp 0x100b9bd
push edi
push 0x1002e84
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b90a
push eax
call fcn.01007d41
jmp 0x100b9bd
push edi
push 0x1002e74
push eax
call fcn.01003185
cmp al, bl
je 0x100b9e7
push edi
push 0x1002e60
lea eax, [ebp - 0x14]
push eax
call fcn.01003185
cmp al, bl
je 0x100b9e7
push edi
push 0x1002e50
lea eax, [ebp - 0x14]
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b953
push eax
call fcn.01008562
jmp 0x100b9bd
push edi
push 0x1002e48
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b96e
push eax
call fcn.01003a41
jmp 0x100b9bd
push edi
push 0x1002e38
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b989
push eax
call fcn.01004bb5
jmp 0x100b9bd
push edi
push 0x1002e2c
push eax
call fcn.01003185
cmp al, bl
lea eax, [ebp - 0x14]
jne 0x100b9a4
push eax
call fcn.01008b93
jmp 0x100b9bd
push edi
push 0x1002e20
push eax
call fcn.01003185
cmp al, bl
jne 0x100b9c5
lea eax, [ebp - 0x14]
push eax
call fcn.01005341
mov esi, eax
cmp esi, edi
jl 0x100b9f9
jmp 0x100b9f7
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
push dword [ecx + eax*4]
push 0x1f54
push 0x800
call fcn.0100c98f
add esp, 0xc
mov esi, 0x80070057
jmp 0x100b9f9
lea eax, [ebp - 0x14]
push eax
call fcn.0100441d
jmp 0x100b9bd
call fcn.0100b5ca
xor esi, esi
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0x10