Function at 0x104b643
Capabilities:
Accept command line arguments

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
mov ebx, ecx
push esi
mov dword [ebp - 0xc], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor esi, esi
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], esi
cmp dword [0x107465c], esi
jne 0x104b841
mov dword [0x107465c], 1
cmp eax, esi
je 0x104b841
lea ecx, [ebp - 0x14]
push ecx
push eax
mov dword [ebp - 0x14], esi
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x1c], eax
cmp eax, esi
je 0x104b841
cmp dword [ebp - 0x14], esi
push edi
mov dword [ebp - 0x10], esi
jle 0x104b837
mov edi, dword [sym.imp.msvcrt.dll_wcsstr]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
lea esi, [eax + ecx*4]
push 0x1005d14
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x104b6f3
push 0x10070f0
push dword [ebp - 0x18]
call edi
pop ecx
pop ecx
test eax, eax
je 0x104b828
push 0x10070d8
push dword [ebp - 0x18]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x104b828
and dword [ebx + 0x38], 0
jmp 0x104b840
push 0x1005d80
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x104b6ea
push 0x1005d60
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x104b871
push 0x1004344
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x104b871
push 0x1005d44
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x104b845
push 0x3a
push dword [esi]
call dword [sym.imp.msvcrt.dll_wcschr]
pop ecx
pop ecx
test eax, eax
je 0x104b828
add eax, 2
push eax
mov dword [ebp - 0x20], eax
call fcn.010561ca
test eax, eax
je 0x104b828
push dword [ebp - 4]
and dword [ebp - 8], 0
mov ecx, ebx
call fcn.01049c6f
mov esi, eax
test esi, esi
jne 0x104b79a
push 0xb8
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
test eax, eax
je 0x104b791
mov ecx, eax
call fcn.01047dac
mov esi, eax
jmp 0x104b793
xor esi, esi
mov dword [ebp - 8], 1
and dword [ebx + 0x38], 0
test esi, esi
je 0x104b828
push esi
push dword [ebp - 0x20]
mov ecx, ebx
call fcn.0104b5d9
mov ebx, eax
test ebx, ebx
jl 0x104b806
push 0
mov ecx, esi
call fcn.010482ed
test eax, eax
je 0x104b806
mov ecx, dword [ebp - 0xc]
push esi
call fcn.010483e7
mov ebx, eax
test ebx, ebx
jl 0x104b7df
mov ecx, dword [ebp - 0xc]
and dword [ebp - 8], 0
call fcn.0104a09a
cmp dword [ebp - 8], 0
jne 0x104b7fc
test ebx, ebx
jge 0x104b7fc
mov ecx, dword [ebp - 0xc]
push esi
call fcn.01048460
xor ecx, ecx
inc ecx
cmp eax, ecx
jne 0x104b7fc
mov dword [ebp - 8], ecx
push ebx
push 0x10070ac
push 4
jmp 0x104b80e
push ebx
push 0x1007080
push 2
call fcn.01055c69
add esp, 0xc
cmp dword [ebp - 8], 0
je 0x104b825
push 1
mov ecx, esi
call fcn.0104838c
mov ebx, dword [ebp - 0xc]
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x14]
jl 0x104b6aa
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
pop edi
pop esi
pop ebx
leave
ret
push 0x1005d28
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x104b828
push 0x3a
push dword [esi]
call dword [sym.imp.msvcrt.dll_wcschr]
pop ecx
pop ecx
test eax, eax
je 0x104b828
add eax, 2
push eax
mov ecx, ebx
call fcn.01047c4f
jmp 0x104b828
push 0x3a
push dword [esi]
call dword [sym.imp.msvcrt.dll_wcschr]
pop ecx
pop ecx
mov dword [ebp - 4], eax
test eax, eax
je 0x104b828
add dword [ebp - 4], 2
push dword [ebp - 4]
mov ecx, ebx
call fcn.01049f94
push dword [ebp - 4]
mov ecx, ebx
call fcn.0104c121
push 0x1004344
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x104b8b2
mov dword [ebx + 0x3c], 1
push dword [ebp - 4]
push 0x1007048
push 3
call fcn.01055c69
add esp, 0xc
jmp 0x104b828