Function at 0x100ec52
Capabilities:
Accept command line arguments

Disassembly:
push 0x248
mov eax, 0x1042e7f
call fcn.0102dae7
mov eax, dword [ebp + 8]
xor ebx, ebx
mov esi, ecx
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x254], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x230], ebx
mov dword [ebp - 0x250], ebx
xor eax, eax
push 0x208
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x21a]
push ebx
push eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x248], ebx
call sub.msvcrt.dll_memset
or dword [esi + 0x204], 0xffffffff
add esp, 0xc
mov edi, 0x104
push edi
lea eax, [ebp - 0x21c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp eax, edi
ja 0x100f831
cmp eax, ebx
je 0x100f831
lea eax, [ebp - 0x22c]
push eax
push dword [ebp - 0x23c]
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x234], eax
cmp eax, ebx
jne 0x100ed40
push 0x80004003
push 0x1002c50
push 0x168
push 0x1002210
push 0x10018c8
mov ecx, 0x104abe8
call fcn.0102f8f0
jmp 0x100f831
mov eax, dword [eax]
lea edi, [esi + 0x138]
push 0x3e96
mov ecx, edi
mov dword [ebp - 0x228], eax
call fcn.01030171
cmp dword [esi + 0x190], ebx
jne 0x100ed6e
push 0x426f
mov ecx, edi
call fcn.01030171
xor edi, edi
inc edi
cmp dword [ebp - 0x22c], edi
jne 0x100ede0
push 0xffffffffffffffff
lea eax, [ebp - 0x21c]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x228]
push edi
push 0x7f
call dword [sym.imp.KERNEL32.dll_CompareStringW]
cmp eax, 2
jne 0x100ede0
push ebx
call fcn.0102208b
push ebx
test eax, eax
jne 0x100edba
push ebx
push 0x80000225
call fcn.01026c45
or dword [esi + 0x204], 0xffffffff
jmp 0x100f831
call fcn.01022175
push 0x3e80
lea ecx, [esi + 0x138]
call fcn.01030171
mov dword [esi + 0x204], ebx
mov dword [ebp - 0x220], edi
jmp 0x100f82b
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push ebx
push ebx
push 0x1002c2c
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100ee19
push 0x3e8e
lea ecx, [esi + 0x138]
call fcn.01030171
jmp 0x100f831
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push edi
push dword [ebp - 0x22c]
push 0x1002c1c
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100ee61
push 0x3e82
lea ecx, [esi + 0x138]
call fcn.01030171
mov dword [esi + 0x204], 9
jmp 0x100f831
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push edi
push dword [ebp - 0x22c]
push 0x1002c0c
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100eeb7
push ebx
push edi
push edi
mov ecx, esi
call fcn.0100bc9e
cmp eax, edi
jne 0x100eeb7
push 0x3e81
lea ecx, [esi + 0x138]
call fcn.01030171
mov dword [esi + 0x204], 6
jmp 0x100f831
push ebx
push ebx
push ebx
push ebx
push 0x1002bf4
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100ef7b
cmp dword [ebp - 0x22c], 3
mov dword [ebp - 0x220], edi
je 0x100eeef
cmp dword [ebp - 0x22c], 2
jne 0x100f831
push 0x3e83
lea ecx, [esi + 0x138]
call fcn.01030171
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x224], edi
push dword [eax + 4]
lea ecx, [ebp - 0x244]
call fcn.0100ac19
cmp dword [ebp - 0x22c], 2
jne 0x100ef36
push dword [ebp - 0x230]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x230], ebx
jmp 0x100ef4a
mov eax, dword [ebp - 0x234]
push dword [eax + 8]
lea ecx, [ebp - 0x230]
call fcn.0100ac19
push dword [ebp - 0x230]
mov ecx, esi
push dword [ebp - 0x244]
call fcn.0100bd95
cmp eax, ebx
jge 0x100ef71
push eax
push 0x1002c50
push 0x1db
jmp 0x100ed27
mov dword [esi + 0x204], 0x6f
push ebx
push ebx
push ebx
push ebx
push 0x1002be8
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f023
cmp dword [ebp - 0x22c], 2
mov dword [ebp - 0x220], edi
je 0x100efb2
cmp dword [ebp - 0x22c], edi
jne 0x100f831
push 0x3e85
lea ecx, [esi + 0x138]
call fcn.01030171
mov dword [ebp - 0x224], edi
cmp dword [ebp - 0x22c], edi
jne 0x100efe4
push dword [ebp - 0x230]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x230], ebx
jmp 0x100eff8
mov eax, dword [ebp - 0x234]
push dword [eax + 4]
lea ecx, [ebp - 0x230]
call fcn.0100ac19
push dword [ebp - 0x230]
mov ecx, esi
call fcn.0100c1dd
cmp eax, ebx
jge 0x100f019
push eax
push 0x1002c50
push 0x1f6
jmp 0x100ed27
mov dword [esi + 0x204], 0x6f
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push 2
push dword [ebp - 0x22c]
push 0x1002bd4
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f093
push 0x3e84
lea ecx, [esi + 0x138]
call fcn.01030171
mov eax, dword [ebp - 0x234]
push dword [eax + 4]
lea ecx, [ebp - 0x244]
call fcn.0100ac19
push edi
push dword [ebp - 0x244]
mov ecx, esi
call fcn.0100c0d0
cmp eax, ebx
jge 0x100f093
push eax
push 0x1002c50
push 0x203
jmp 0x100ed27
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push edi
push dword [ebp - 0x22c]
mov dword [ebp - 0x240], ebx
push 0x1002bc4
push dword [ebp - 0x228]
mov dword [ebp - 0x238], ebx
call fcn.010243bf
test eax, eax
je 0x100f0ce
mov dword [ebp - 0x238], edi
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push edi
push dword [ebp - 0x22c]
push 0x1002bac
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f0ff
mov dword [ebp - 0x240], edi
jmp 0x100f10b
cmp dword [ebp - 0x238], edi
jne 0x100f1d6
cmp dword [ebp - 0x238], edi
jne 0x100f11a
push 0x3e8f
jmp 0x100f127
cmp dword [ebp - 0x240], edi
jne 0x100f132
push 0x3e90
lea ecx, [esi + 0x138]
call fcn.01030171
push ebx
push edi
push edi
mov ecx, esi
call fcn.0100bc9e
test eax, eax
jne 0x100f14d
mov ecx, esi
push ebx
call fcn.0100e61d
jmp 0x100f831
lea eax, [ebp - 0x230]
push eax
push 0xc
call fcn.010215da
cmp eax, ebx
mov dword [ebp - 0x24c], eax
jge 0x100f182
push ebx
mov ecx, esi
call fcn.0100e61d
push dword [ebp - 0x24c]
push 0x1002c50
push 0x247
jmp 0x100ed27
push dword [ebp - 0x230]
mov ecx, dword [esi + 0x210]
call fcn.0103406b
mov ecx, dword [esi + 0x210]
push edi
call fcn.01032d6c
cmp dword [ebp - 0x238], edi
jne 0x100f1b2
push 9
call fcn.0102139f
push 6
jmp 0x100f1c3
cmp dword [ebp - 0x240], edi
jne 0x100f1ce
push 5
call fcn.0102139f
push 5
mov ecx, dword [esi + 0x210]
call fcn.01032e45
push edi
mov ecx, esi
call fcn.0100e184
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push ebx
push ebx
push 0x1002b88
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f229
push 0x3e91
lea ecx, [esi + 0x138]
call fcn.01030171
push ebx
push edi
push edi
mov ecx, esi
call fcn.0100bc9e
mov ecx, esi
test eax, eax
je 0x100f142
push dword [ebp - 0x23c]
call fcn.0100e6c9
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push edi
push dword [ebp - 0x22c]
push 0x1002b54
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f277
push 0x3e92
lea ecx, [esi + 0x138]
call fcn.01030171
mov ecx, dword [esi + 0x210]
push 3
call fcn.01032e45
push ebx
mov ecx, esi
call fcn.0100e184
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push 2
push dword [ebp - 0x22c]
push 0x1002b44
push dword [ebp - 0x228]
call fcn.010243bf
mov edi, 0x3e86
test eax, eax
je 0x100f2d6
push edi
lea ecx, [esi + 0x138]
call fcn.01030171
mov eax, dword [ebp - 0x234]
mov ecx, dword [0x104a794]
push dword [eax + 4]
add ecx, 0x1a0
call fcn.0100ac19
mov dword [esi + 0x204], 5
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push 1
push dword [ebp - 0x22c]
push 0x1002b44
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f316
push edi
lea ecx, [esi + 0x138]
call fcn.01030171
mov dword [esi + 0x204], 7
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push ebx
push ebx
push 0x1002b18
push dword [ebp - 0x228]
mov dword [ebp - 0x240], ebx
xor edi, edi
call fcn.010243bf
test eax, eax
je 0x100f34c
mov dword [ebp - 0x240], 1
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push ebx
push ebx
push 0x1002ae8
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f375
xor edi, edi
inc edi
jmp 0x100f382
cmp dword [ebp - 0x240], 1
jne 0x100f4dd
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x238], ebx
push 0x3e93
lea ecx, [esi + 0x138]
mov byte [ebp - 4], 5
call fcn.01030171
lea eax, [ebp - 0x23c]
push eax
push 0x10028a0
push 4
push ebx
push 0x10021a8
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jge 0x100f408
push eax
push 0x1002c50
push 0x2d3
push 0x1002210
push 0x10018c8
mov ecx, 0x104abe8
call fcn.0102f8f0
push dword [ebp - 0x238]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x23c]
mov byte [ebp - 4], 3
cmp eax, ebx
je 0x100f831
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x100f831
mov eax, dword [ebp - 0x23c]
cmp eax, ebx
jne 0x100f423
push 0x80004003
push 0x1002c50
push 0x2d4
jmp 0x100f3cb
mov ecx, dword [eax]
lea edx, [ebp - 0x248]
push edx
push eax
call dword [ecx + 0x20]
cmp eax, ebx
jge 0x100f441
push eax
push 0x1002c50
push 0x2d6
jmp 0x100f3cb
push dword [ebp - 0x248]
mov ecx, dword [esi + 0x210]
call fcn.01034157
push dword [ebp - 0x248]
mov ecx, dword [esi + 0x210]
call fcn.01034172
mov eax, dword [ebp - 0x23c]
mov ecx, dword [eax]
lea edx, [ebp - 0x238]
push edx
push eax
call dword [ecx + 0x44]
push dword [ebp - 0x238]
mov ecx, dword [esi + 0x210]
call fcn.01033e77
cmp edi, 1
jne 0x100f490
push 6
jmp 0x100f49b
cmp dword [ebp - 0x240], 1
jne 0x100f4a6
push 5
mov ecx, dword [esi + 0x210]
call fcn.01032e45
mov ecx, dword [esi + 0x210]
push 2
call fcn.01032da5
push dword [ebp - 0x238]
mov dword [esi + 0x204], 0x70
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x23c]
mov byte [ebp - 4], 3
cmp eax, ebx
je 0x100f4dd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push 1
push dword [ebp - 0x22c]
push 0x1002aa8
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f54d
push 0x3e94
lea ecx, [esi + 0x138]
call fcn.01030171
lea edi, [esi + 0x210]
mov ecx, dword [edi]
push 4
call fcn.01032e45
mov ecx, dword [edi]
push 1
call fcn.01032da5
push 5
call fcn.0102139f
push 2
lea ecx, [esi + 0x138]
call fcn.0102fc03
mov dword [esi + 0x204], 0x70
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push 1
push dword [ebp - 0x22c]
push 0x1002a90
push dword [ebp - 0x228]
call fcn.010243bf
push 0xa
pop edi
test eax, eax
je 0x100f5ae
push ebx
push 1
push 1
mov ecx, esi
call fcn.0100bc9e
cmp eax, 1
jne 0x100f5ae
push 0x3e87
lea ecx, [esi + 0x138]
call fcn.01030171
mov ecx, dword [esi + 0x210]
push 7
call fcn.01032e45
mov dword [esi + 0x204], edi
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push 1
push dword [ebp - 0x22c]
push 0x1002a74
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f607
push 0x3e88
lea ecx, [esi + 0x138]
call fcn.01030171
mov ecx, dword [esi + 0x134]
push ebx
call fcn.0102ac57
mov ecx, dword [esi + 0x210]
push 7
call fcn.01032e45
mov dword [esi + 0x204], edi
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push 2
push dword [ebp - 0x22c]
mov edi, 0x1002a54
push edi
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f687
push ebx
push ebx
push 1
mov ecx, esi
call fcn.0100bc9e
cmp eax, 1
jne 0x100f687
push 0x3e8a
lea ecx, [esi + 0x138]
call fcn.01030171
mov eax, dword [ebp - 0x234]
push dword [eax + 4]
lea ecx, [ebp - 0x230]
call fcn.0100ac19
push dword [ebp - 0x230]
mov ecx, esi
call fcn.0100c4ca
cmp eax, ebx
jge 0x100f687
push eax
push 0x1002c50
push 0x33e
jmp 0x100ed27
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push 1
push dword [ebp - 0x22c]
push edi
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f6d8
push ebx
push 1
push 1
mov ecx, esi
call fcn.0100bc9e
cmp eax, 1
jne 0x100f6d8
push 0x3e89
lea ecx, [esi + 0x138]
call fcn.01030171
mov dword [esi + 0x204], 8
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push 2
push dword [ebp - 0x22c]
mov edi, 0x1002a30
push edi
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f76a
push 0x3e8c
lea ecx, [esi + 0x138]
call fcn.01030171
mov ecx, dword [esi + 0x134]
push ebx
call fcn.0102ac57
mov eax, dword [ebp - 0x234]
push dword [eax + 4]
lea ecx, [ebp - 0x230]
call fcn.0100ac19
mov eax, dword [0x104a794]
push 1
push ebx
push dword [ebp - 0x230]
push dword [eax + 0x210]
call fcn.01026a67
cmp eax, ebx
jge 0x100f760
push eax
push 0x1002c50
push 0x365
jmp 0x100ed27
mov dword [esi + 0x204], 0xd
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push 1
push dword [ebp - 0x22c]
push edi
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f7aa
push 0x3e8b
lea ecx, [esi + 0x138]
call fcn.01030171
mov dword [esi + 0x204], 9
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x220]
push eax
push ebx
push ebx
push 0x1002a2c
push dword [ebp - 0x228]
call fcn.010243bf
test eax, eax
je 0x100f7e5
push 0x3e8d
lea ecx, [esi + 0x138]
call fcn.01030171
mov ecx, esi
call fcn.0100decf
cmp dword [ebp - 0x220], ebx
jne 0x100f831
mov eax, dword [ebp - 0x234]
xor edi, edi
inc edi
mov dword [ebp - 0x220], edi
push dword [eax]
lea ecx, [ebp - 0x244]
call fcn.0100ac19
push ebx
push dword [ebp - 0x244]
mov ecx, esi
call fcn.0100c0d0
test eax, eax
jl 0x100f831
push 0x3e95
lea ecx, [esi + 0x138]
call fcn.01030171
mov dword [ebp - 0x224], edi
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x248], ebx
je 0x100f84d
push dword [ebp - 0x248]
call edi
mov dword [ebp - 0x248], ebx
cmp dword [ebp - 0x234], ebx
je 0x100f861
push dword [ebp - 0x234]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x220], 1
jne 0x100f880
cmp dword [ebp - 0x224], ebx
jne 0x100f880
mov ecx, esi
call fcn.0100decf
or dword [esi + 0x204], 0xffffffff
xor eax, eax
cmp dword [esi + 0x204], 0xffffffff
push ebx
setne al
mov esi, eax
call edi
push dword [ebp - 0x230]
call edi
push dword [ebp - 0x244]
call edi
push ebx
call edi
mov eax, esi
call fcn.0102db79
ret 4