Function at 0x100b0dd0
Capabilities:
Accept command line arguments

Disassembly:
push 0xc5c
mov eax, 0x10121caf
call fcn.10003d4a
mov esi, 0x101a3d74
push esi
mov dword [ebp - 0xc58], esi
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp byte [0x101a5368], bl
jne 0x100b11d1
push str.Microsoft.Office.Groove.GrooveLogsObfuscation
call fcn.1003a42b
test al, al
je 0x100b0e2b
push ebx
push str.LogObfuscationDisabled
push 4
call fcn.100b5920
test eax, eax
jne 0x100b0e2b
mov al, 1
cmp byte [0x101a3d8d], bl
jne 0x100b0e2d
mov al, bl
push ebx
push ebx
push 4
lea ecx, [ebp - 0x430]
mov byte [0x101a3d49], al
call fcn.100a5b7c
push 0x20019
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 1
call fcn.1003a42b
push eax
lea ecx, [ebp - 0x430]
call fcn.1000530c
test eax, eax
jne 0x100b11bf
mov dword [ebp - 0x414], ebx
push ebx
push str.TraceThreadId
lea eax, [ebp - 0x414]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x430]
call fcn.1003a42b
test eax, eax
jne 0x100b0ea5
push 0xa
push dword [ebp - 0x414]
call fcn.1003a42b
test eax, eax
setg byte [0x1019ab90]
push ebx
push str.TraceTime
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x430]
call fcn.1003a42b
test eax, eax
jne 0x100b0ed7
push 0xa
push dword [ebp - 0x414]
call fcn.1003a42b
test eax, eax
setg byte [0x1019ab91]
push ebx
push str.TraceToDebugOutput
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x430]
call fcn.1003a42b
test eax, eax
jne 0x100b0f09
push 0xa
push dword [ebp - 0x414]
call fcn.1003a42b
test eax, eax
setg byte [0x1019ab92]
lea eax, [ebp - 0x830]
mov dword [ebp - 0x83c], 0x200
mov dword [ebp - 0x840], eax
xor eax, eax
mov byte [ebp - 0x838], bl
mov dword [ebp - 0x834], ebx
mov dword [ebp - 0x830], ebx
mov word [ebp - 0x82c], ax
push ebx
push str.TraceCSUFile
lea eax, [ebp - 0x414]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x430]
call fcn.1003a42b
test eax, eax
jne 0x100b0fa4
lea eax, [ebp - 0xc5c]
push eax
call fcn.100adaf9
mov eax, dword [eax]
mov dword [ebp - 0xc54], eax
push eax
lea ecx, [ebp - 0x840]
mov byte [ebp - 4], 4
call fcn.1003a42b
lea ecx, [ebp - 0xc54]
mov byte [ebp - 4], 5
call fcn.100050ed
push dword [ebp - 0x414]
lea ecx, [ebp - 0x840]
mov byte [ebp - 4], 3
call fcn.1003a42b
jmp 0x100b0fd1
push ebx
push str.TraceFile
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x430]
call fcn.1003a42b
test eax, eax
jne 0x100b0fd1
push dword [ebp - 0x414]
lea ecx, [ebp - 0x840]
call fcn.1003a42b
mov eax, dword [ebp - 0x840]
xor ecx, ecx
cmp cx, word [eax]
je 0x100b11a2
push eax
mov byte [ebp - 0x838], 1
call dword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
mov edi, dword [sym.imp.kernel32.dll_GetCurrentProcessId]
call edi
mov ebx, eax
lea ecx, [ebp - 0xc40]
xor edx, edx
mov dword [ebp - 0xc50], ecx
mov esi, 0x200
mov dword [ebp - 0xc44], edx
xor eax, eax
mov dword [ebp - 0xc4c], esi
mov dword [ebp - 0xc40], edx
mov word [ebp - 0xc3c], ax
push esi
push ecx
push edx
mov byte [ebp - 4], 6
mov byte [ebp - 0xc48], 1
call dword [sym.imp.kernel32.dll_GetModuleFileNameW]
test eax, eax
jne 0x100b1070
push 0x80004005
push 0x66673573
lea eax, [ebp - 0xc68]
push eax
call fcn.100bf210
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.100ba2d1
lea ecx, [ebp - 0xc68]
mov byte [ebp - 4], 6
call fcn.1003a42b
push dword [ebp - 0xc50]
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
call fcn.1003a42b
cmp byte [ebp - 0x838], 0
mov esi, eax
je 0x100b10ab
push dword [ebp - 0x840]
call fcn.1003a42b
mov ecx, dword [ebp - 0x840]
add eax, eax
mov dword [ecx - 4], eax
xor eax, eax
mov byte [ebp - 0x838], al
push ebx
push esi
push dword [ebp - 0x840]
lea eax, [ebp - 0x840]
push str._s__s_pid_u.log
push eax
call fcn.1003a42b
add esp, 0x14
xor ebx, ebx
mov ecx, 0x1019ab94
push ebx
push 0x80
push 0x7021
push dword [ebp - 0x840]
call fcn.100b3727
test al, al
je 0x100b1189
mov byte [0x101a5369], 1
call edi
mov ebx, eax
call dword [sym.imp.kernel32.dll_GetCommandLineW]
mov edi, eax
test edi, edi
je 0x100b1124
mov ecx, edi
xor esi, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x100b110a
sub ecx, edx
sar ecx, 1
lea esi, [ecx + 1]
cmp esi, 0x3fffffff
jle 0x100b1128
xor eax, eax
jmp 0x100b113e
add esi, esi
mov eax, esi
call fcn.10119e6a
mov eax, esp
xor ecx, ecx
push ecx
push esi
push edi
push eax
call fcn.1003a42b
push ebx
push eax
push str._nGrooveTrace_n_s___x__r_n_r_n
push 0x3ff
lea eax, [ebp - 0x410]
push 0x400
push eax
call fcn.1003a42b
mov edx, dword [0x1019ab94]
add esp, 0x18
mov esi, eax
mov ecx, 0x1019ab94
xor eax, eax
push 2
push eax
push eax
call dword [edx + 8]
push esi
lea eax, [ebp - 0x410]
push eax
push dword [0x1019ab9c]
call fcn.100bb3dd
jmp 0x100b118f
mov byte [0x101a5369], bl
lea eax, [ebp - 0xc50]
push eax
mov ecx, eax
call fcn.1003a42b
mov esi, 0x101a3d74
lea eax, [ebp - 0x840]
push eax
mov ecx, eax
call fcn.1003a42b
lea ecx, [ebp - 0x414]
mov byte [ebp - 4], 8
call fcn.100050ed
lea ecx, [ebp - 0x430]
mov byte [0x101a5368], 1
call fcn.1003a42b
push esi
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
lea esp, [ebp - 0xc78]
call fcn.1000401a
ret