Function at 0x401ac0
Capabilities:
Accept command line arguments

Disassembly:
push 0xffffffffffffffff
push 0x450a00
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x4663e0]
xor eax, esp
mov dword [esp + 0x6c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4663e0]
xor eax, esp
push eax
lea eax, [esp + 0x84]
mov dword fs:[0], eax
mov eax, dword [esp + 0x94]
xor ebp, ebp
mov edi, 7
mov dword [esp + 0x24], eax
mov dword [esp + 0x60], edi
mov dword [esp + 0x5c], ebp
mov word [esp + 0x4c], bp
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x14], ebp
mov dword [esp + 0x7c], edi
mov dword [esp + 0x78], ebp
mov word [esp + 0x68], bp
mov eax, ecx
mov byte [esp + 0x8c], 1
lea esi, [eax + 2]
lea esp, [esp]
mov dx, word [eax]
add eax, 2
cmp dx, bp
jne 0x401b40
sub eax, esi
sar eax, 1
push eax
push ecx
mov ecx, 0x468c2c
call fcn.00403fe0
push 0x45693c
mov ebx, 3
xor eax, eax
mov edx, 0x468c2c
call fcn.00403560
cmp eax, 0xffffffff
je 0x401b8a
push 4
push 0x456944
push ebx
mov esi, eax
mov ebx, 0x468c2c
call fcn.004033b0
push 0x456950
mov ebx, 3
xor eax, eax
mov edx, 0x468c2c
call fcn.00403560
cmp eax, 0xffffffff
je 0x401bb9
push 4
push str._v__
push ebx
mov esi, eax
mov ebx, 0x468c2c
call fcn.004033b0
cmp dword [0x468c40], ebp
je 0x401dcb
cmp dword [0x468c44], 8
mov eax, dword [0x468c30]
jae 0x401bd8
mov eax, 0x468c30
lea ecx, [esp + 0x1c]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
cmp eax, ebp
mov dword [esp + 0x20], eax
je 0x401e61
xor ecx, ecx
cmp dword [esp + 0x1c], ebp
mov dword [esp + 0x18], ecx
jle 0x401dac
mov eax, dword [eax + ecx*4]
movzx ecx, word [eax]
cmp cx, 0x2d
je 0x401c6c
cmp cx, 0x2f
je 0x401c6c
xor edi, edi
mov edx, eax
mov eax, edx
lea esi, [eax + 2]
jmp 0x401c20
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x401c20
sub eax, esi
sar eax, 1
push eax
push edx
lea esi, [esp + 0x50]
call fcn.00404160
cmp dword [esp + 0x14], ebp
je 0x401c9c
cmp edi, ebp
je 0x401c76
push 0x456964
push ecx
mov edx, esi
push edx
push 0x468bac
call fcn.00404d90
add esp, 0xc
push eax
call fcn.00405010
add esp, 8
mov dword [esp + 0x14], ebp
jmp 0x401d8e
mov edi, 1
lea edx, [eax + 2]
jmp 0x401c16
lea eax, [esp + 0x64]
push eax
mov ecx, 0x468b98
call fcn.00402210
push 0xffffffffffffffff
mov ecx, eax
push ebp
lea eax, [esp + 0x50]
call fcn.004040b0
mov dword [esp + 0x14], ebp
jmp 0x401d8e
cmp edi, ebp
je 0x401d6d
mov eax, dword [esp + 0x5c]
xor esi, esi
cmp eax, ebp
jbe 0x401d01
cmp esi, eax
jbe 0x401cbb
call fcn.00439049
mov eax, dword [esp + 0x5c]
mov edi, dword [esp + 0x4c]
mov ebx, 8
cmp dword [esp + 0x60], ebx
jae 0x401cce
lea edi, [esp + 0x4c]
cmp esi, eax
jbe 0x401cd7
call fcn.00439049
cmp dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x4c]
jae 0x401ce5
lea ebx, [esp + 0x4c]
movzx ecx, word [edi + esi*2]
push ecx
call fcn.00438f11
mov word [ebx + esi*2], ax
mov eax, dword [esp + 0x60]
add esi, 1
add esp, 4
cmp esi, eax
jb 0x401cbb
cmp dword [esp + 0x60], 8
mov eax, dword [esp + 0x4c]
jae 0x401d10
lea eax, [esp + 0x4c]
mov edi, dword [esp + 0x24]
push eax
lea ebx, [esp + 0x2c]
call fcn.00401a30
test eax, eax
je 0x401d60
cmp dword [esp + 0x28], ebp
je 0x401d42
push 0xffffffffffffffff
push ebp
lea eax, [esp + 0x50]
lea ecx, [esp + 0x6c]
call fcn.004040b0
mov dword [esp + 0x14], 1
jmp 0x401d8e
lea edx, [esp + 0x48]
push edx
mov ecx, 0x468b98
call fcn.00402210
push ebp
push 0x456938
mov esi, eax
call fcn.00404160
jmp 0x401d8e
push 0x456964
push ecx
lea eax, [esp + 0x50]
push eax
jmp 0x401d78
push 0x456964
push ecx
lea ecx, [esp + 0x50]
push ecx
push 0x468bac
call fcn.00404d90
add esp, 0xc
push eax
call fcn.00405010
add esp, 8
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
add ecx, 1
cmp ecx, dword [esp + 0x1c]
mov dword [esp + 0x18], ecx
jl 0x401c00
mov edi, 7
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [esp + 0x14], ebp
je 0x401dcb
lea edx, [esp + 0x48]
push edx
push 0x468bac
call fcn.00404d90
add esp, 8
lea ecx, [esp + 0x2c]
mov eax, 0x468ba4
call fcn.00402590
xor ecx, ecx
cmp dword [eax + 0x14], ebp
mov ebx, 8
sete cl
cmp dword [esp + 0x44], ebx
mov esi, ecx
jb 0x401dfb
mov edx, dword [esp + 0x30]
push edx
call fcn.00439059
add esp, 4
cmp dword [esp + 0x7c], ebx
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], ebp
mov word [esp + 0x30], bp
jb 0x401e1b
mov eax, dword [esp + 0x68]
push eax
call fcn.00439059
add esp, 4
cmp dword [esp + 0x60], ebx
mov dword [esp + 0x7c], edi
mov dword [esp + 0x78], ebp
mov word [esp + 0x68], bp
jb 0x401e3b
mov ecx, dword [esp + 0x4c]
push ecx
call fcn.00439059
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x84]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x6c]
xor ecx, esp
call fcn.0043782a
add esp, 0x7c
ret 4
push 0x468c2c
jmp 0x401dbe