Function at 0x1003b4a
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
xor ebx, ebx
push ebx
push ebx
xor esi, esi
inc esi
push esi
push ebx
mov dword [ebp - 8], ebx
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push 2
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jl 0x1003b76
mov dword [ebp - 8], esi
push edi
push 0x1ec
push ebx
mov esi, 0x1006d20
push esi
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x100630c
push 0x1006308
push 0x104
push 0x1006728
push 0x209
mov edi, 0x1006310
push edi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call fcn.010035fe
test eax, eax
je 0x1003de9
push esi
push edi
call fcn.010025f4
mov dword [0x1006f20], eax
cmp eax, 5
je 0x1003de9
push ebx
push 0x10
push edi
call dword [sym.imp.GDI32.dll_AddFontResourceExW]
cmp dword [0x1006940], 1
jle 0x1003bef
cmp dword [0x1006f20], 1
jne 0x1003bf9
mov dword [0x10060c8], 3
push 9
call fcn.01003edf
push 0xa
mov dword [0x1006f18], eax
call fcn.01003edf
pop ecx
mov dword [0x1006f1c], eax
pop ecx
xor edi, edi
mov eax, 0x1006d7c
cmp dword [eax], ebx
je 0x1003c2b
add eax, 0x14
inc edi
cmp eax, 0x1006f0c
jl 0x1003c1a
jmp 0x1003ca4
mov eax, dword [0x1006f18]
mov esi, edi
imul esi, esi, 0x14
push eax
mov dword [esi + 0x1006d88], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [esi + 0x1006d8c], eax
lea eax, [edi + 1]
cmp eax, 0x14
mov dword [esi + 0x1006d7c], 3
mov dword [esi + 0x1006d80], 0x10
jge 0x1003ca4
mov ebx, eax
imul ebx, ebx, 0x14
push 5
mov dword [ebp - 4], eax
mov eax, dword [0x1006f1c]
pop ecx
lea esi, [ebx + 0x1006d68]
lea edi, [ebx + 0x1006d7c]
rep movsd dword es:[edi], dword [esi]
push eax
mov dword [ebx + 0x1006d88], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, dword [ebp - 4]
mov dword [ebx + 0x1006d8c], eax
mov dword [ebx + 0x1006d84], 1
xor ebx, ebx
push 0xb
call fcn.01003edf
inc edi
cmp edi, 0x14
pop ecx
mov dword [0x1006f10], eax
jge 0x1003cfa
imul edi, edi, 0x14
add edi, 0x1006d7c
xor esi, esi
cmp esi, 0x1c
jae 0x1003cfa
cmp dword [edi], ebx
jne 0x1003cef
push eax
mov dword [edi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [edi + 0x10], eax
mov eax, dword [esi + 0x1006008]
mov dword [edi + 4], eax
mov eax, dword [0x1006f10]
mov dword [edi], 5
add esi, 4
add edi, 0x14
cmp edi, 0x1006f0c
jl 0x1003cc2
call fcn.010017f8
cmp dword [ebp + 0xc], ebx
jne 0x1003d15
push dword [ebp + 8]
call fcn.01003a7d
test eax, eax
jne 0x1003d15
mov dword [ebp - 0x1c], ebx
jmp 0x1003d75
push dword [0x1006d88]
push dword [ebp + 0x14]
push dword [ebp + 8]
call fcn.01001703
test eax, eax
je 0x1003d10
push 0x64
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
mov edi, eax
jmp 0x1003d68
lea eax, [ebp - 0x24]
push eax
push edi
push dword [0x1006300]
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x1003d68
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push ebx
push ebx
push ebx
lea eax, [ebp - 0x24]
push eax
call esi
test eax, eax
jne 0x1003d3f
cmp dword [0x10060c8], ebx
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 4], ebx
jle 0x1003dac
mov esi, 0x1006044
mov eax, dword [esi]
cmp eax, ebx
je 0x1003d9b
cmp eax, 0x10062d8
je 0x1003d9b
push eax
call edi
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
add esi, 0x20
cmp eax, dword [0x10060c8]
jl 0x1003d8b
cmp dword [0x1006940], 1
jle 0x1003dc1
mov eax, dword [0x1006f0c]
cmp eax, ebx
je 0x1003dc1
push eax
call edi
push ebx
push 0x10
push 0x1006310
call dword [sym.imp.GDI32.dll_RemoveFontResourceExW]
call fcn.0100156b
pop edi
cmp dword [ebp - 8], ebx
je 0x1003de0
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x1c]
pop esi
pop ebx
leave
ret 0x10
push edi
push 1
push ebx
push 0x10
push 2
push ebx
call fcn.01003e13
add esp, 0x18
cmp dword [ebp - 8], ebx
je 0x1003e05
call dword [sym.imp.ole32.dll_CoUninitialize]
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]