Function at 0x41502e
Capabilities:
Accept command line arguments

Disassembly:
push 0x108
mov eax, 0x448bef
call fcn.0044663a
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0xf4], eax
push 7
xor eax, eax
lea edi, [ebp - 0xe4]
mov dword [ebp - 0xe8], ebx
stosd dword es:[edi], eax
pop esi
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xcc], ebx
mov word [ebp - 0xdc], bx
mov dword [ebp - 4], ebx
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xb0], ebx
mov word [ebp - 0xc0], bx
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], ebx
mov word [ebp - 0xa4], bx
push 0x54
lea eax, [ebp - 0x8c]
push ebx
push eax
mov byte [ebp - 4], 2
call fcn.0042c4d0
add esp, 0xc
lea eax, [ebp - 0x8c]
push eax
call fcn.00414fd1
xor eax, eax
lea edi, [ebp - 0x38]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], bx
lea eax, [ebp - 0xec]
mov dword [ebp - 4], 4
push eax
mov dword [ebp - 0xec], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
cmp dword [ebp - 0xec], 0x13
mov ebx, eax
je 0x41511a
cmp dword [ebp - 0xec], 0x15
je 0x41511a
xor esi, esi
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xe8]
push eax
call fcn.00414f6a
mov eax, esi
call fcn.004466bd
ret 4
xor eax, eax
inc eax
cmp dword [ebp - 0xec], eax
mov dword [ebp - 0xf0], eax
jle 0x41529c
mov esi, dword [ebp - 0xf0]
shl esi, 2
push str._exception_code
lea edi, [esi + ebx]
push dword [edi]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x415161
push dword [esi + ebx + 4]
call fcn.0042d834
pop ecx
mov dword [ebp - 0xe8], eax
jmp 0x415283
push str._exception_address
push dword [edi]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x415187
push dword [esi + ebx + 4]
call fcn.0042d834
pop ecx
mov dword [ebp - 0xe4], eax
jmp 0x415283
push str._program_path
push dword [edi]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4151a4
mov eax, dword [esi + ebx + 4]
lea esi, [ebp - 0xe0]
jmp 0x415210
push str._exception_file_path
push dword [edi]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4151c1
mov eax, dword [esi + ebx + 4]
lea esi, [ebp - 0xc4]
jmp 0x415210
push str._dump_file
push dword [edi]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4151de
mov eax, dword [esi + ebx + 4]
lea esi, [ebp - 0x8c]
jmp 0x415210
push str._txt_file
push dword [edi]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4151f8
mov eax, dword [esi + ebx + 4]
lea esi, [ebp - 0x70]
jmp 0x415210
push str._server_address
push dword [edi]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x415217
mov eax, dword [esi + ebx + 4]
lea esi, [ebp - 0x54]
call fcn.00407939
jmp 0x415283
push str._show_gui
push dword [edi]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x415237
push dword [esi + ebx + 4]
call fcn.0042d834
pop ecx
mov dword [ebp - 0x38], eax
jmp 0x415283
push str._dump_channel
push dword [edi]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x41525c
push 0xa
push eax
push dword [esi + ebx + 4]
call fcn.0042fd6a
add esp, 0xc
mov dword [ebp - 0x34], eax
jmp 0x415283
push str._dump_type
push dword [edi]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x415283
push dword [esi + ebx + 4]
call fcn.0042d834
pop ecx
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 0x174], eax
add dword [ebp - 0xf0], 2
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0xec]
jl 0x41512f
and dword [ebp - 0x38], 0
push str.owu9__cnu_r_jojvb_cad_hbs3_5_6_ryojbbtfdsif
lea esi, [ebp - 0x110]
call fcn.00411d1b
pop ecx
mov byte [ebp - 4], 5
cmp dword [eax + 0x18], 8
jb 0x4152c0
mov eax, dword [eax + 4]
jmp 0x4152c3
add eax, 4
lea esi, [ebp - 0x54]
call fcn.00407939
push 0
push 1
lea esi, [ebp - 0x110]
mov byte [ebp - 4], 4
call fcn.00402890
cmp dword [ebp - 0x74], 8
mov ecx, dword [ebp - 0x88]
jae 0x4152f0
lea ecx, [ebp - 0x88]
cmp dword [ebp - 0x58], 8
mov eax, dword [ebp - 0x6c]
jae 0x4152fc
lea eax, [ebp - 0x6c]
push ecx
push eax
call fcn.0040d644
mov esi, dword [ebp - 0xf4]
pop ecx
pop ecx
lea edi, [ebp - 0xe8]
call fcn.0041531e
xor esi, esi
inc esi
jmp 0x415100