Function at 0x41c6d4
Capabilities:
Accept command line arguments
Create process on windows

Disassembly:
push 0x2d0
mov eax, 0x4359c7
call fcn.0042a20d
xor ebx, ebx
push 4
pop edi
mov eax, vtable.CObjectVector_class_CStringBase_wchar_t__.0
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], edi
mov dword [ebp - 0xa0], eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xb4], eax
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x4c]
call fcn.00401375
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 2
call fcn.00420d51
push dword [ebp - 0x4c]
mov byte [ebp - 4], 1
call fcn.00421999
pop ecx
cmp dword [ebp - 0xac], ebx
jle 0x41c77c
push 1
push ebx
lea ecx, [ebp - 0xb4]
call fcn.0040f07f
cmp dword [ebp - 0xac], ebx
jne 0x41c7cc
push 0x7000049
lea eax, [ebp - 0x4c]
push eax
call fcn.0041aac5
mov eax, dword [eax]
push ebx
push 0x438488
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push dword [ebp - 0x4c]
call fcn.00421999
pop ecx
xor esi, esi
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], bl
call fcn.004014f0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa0]
call fcn.004014f0
mov eax, esi
call fcn.0042a290
ret
lea ecx, [ebp - 0x2dc]
call fcn.0041c17f
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 3
call fcn.004010d9
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 4
call fcn.00401cc1
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00402ea6
push 0x44
mov byte [ebp - 0x1c0], bl
call fcn.0042196e
pop ecx
cmp eax, ebx
je 0x41c832
mov ecx, eax
call fcn.0041befa
mov esi, eax
jmp 0x41c834
xor esi, esi
mov dword [ebp - 0x108], esi
cmp esi, ebx
je 0x41c844
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, esi
mov byte [ebp - 4], 5
call fcn.00409a8a
cmp eax, ebx
je 0x41c864
mov dword [ebp - 0x20], eax
push 0x442d74
lea eax, [ebp - 0x20]
push eax
call fcn.004299f9
lea ecx, [ebp - 0x2bc]
call fcn.0040101f
mov byte [ebp - 0x1a], al
cmp dword [esi + 0x38], ebx
jne 0x41c899
cmp al, bl
jne 0x41c88a
lea ecx, [ebp - 0x2bc]
call fcn.00401040
test al, al
je 0x41c899
mov eax, dword [0x44780c]
mov dword [ebp - 0x20], eax
push 0x43f528
jmp 0x41c85b
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x60], vtable.CRecordVector_int_.0
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x170]
push eax
mov ecx, esi
mov byte [ebp - 4], 6
call fcn.00408e36
test al, al
jne 0x41c90e
push 0x200060d
push 0x6b
call fcn.0041b8f2
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 5
call fcn.00421963
mov eax, dword [esi]
push esi
mov byte [ebp - 4], 4
call dword [eax + 8]
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 3
call fcn.00420950
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 1
call fcn.0041be6e
push 2
pop esi
jmp 0x41c7a7
cmp dword [ebp - 0x2bc], 7
jne 0x41c970
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x74], vtable..42.0
lea eax, [ebp - 0x74]
push eax
push esi
mov byte [ebp - 4], 7
call fcn.0041ec0f
cmp eax, ebx
jne 0x41c853
push ebx
push dword [ebp - 0x158]
lea eax, [ebp - 0x74]
push dword [ebp - 0x15c]
push eax
push esi
call fcn.00410b07
cmp eax, ebx
jne 0x41c853
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 6
call fcn.00410479
jmp 0x41d012
cmp byte [ebp - 0x1a], bl
je 0x41cc6a
push 0x70
call fcn.0042196e
pop ecx
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x41c997
mov ecx, eax
call fcn.0041bc90
mov edi, eax
jmp 0x41c999
xor edi, edi
mov byte [ebp - 4], 6
mov dword [ebp - 0x40], edi
cmp edi, ebx
je 0x41c9aa
mov eax, dword [edi]
push edi
call dword [eax + 4]
mov al, byte [ebp - 0x2ac]
mov byte [edi + 0x60], al
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [edi + 0x64]
mov byte [ebp - 4], 9
call fcn.004013e5
mov ecx, edi
call fcn.00419b73
lea ecx, [ebp - 0x104]
call fcn.0041bbd0
mov al, byte [ebp - 0x2d6]
mov byte [ebp - 0x103], al
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0xa
call fcn.004013e5
mov al, byte [ebp - 0x2d4]
mov byte [ebp - 0x102], al
mov eax, dword [ebp - 0x28c]
lea ecx, [ebp - 0x2bc]
mov dword [ebp - 0xf8], eax
call fcn.0040102e
cmp dword [ebp - 0x2bc], 3
mov dword [ebp - 0xfc], eax
sete al
mov byte [ebp - 0x101], al
mov al, byte [ebp - 0x29b]
lea ecx, [ebp - 0xe8]
mov byte [ebp - 0x100], al
call fcn.004218f5
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040908a
mov eax, dword [ebp - 0x2c4]
push ebx
push edi
lea ecx, [ebp - 0x19]
push ecx
push dword [ebp - 0x2d3]
mov byte [ebp - 0x19], bl
mov eax, dword [eax]
add eax, 0xc
lea ecx, [ebp - 0x104]
push ecx
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x60]
push eax
push esi
call fcn.0041b65a
cmp eax, ebx
jne 0x41cc02
cmp byte [ebp - 0x101], 1
je 0x41cbb6
call fcn.0041c2c5
mov dword [ebp - 0x20], eax
cmp eax, 3
jne 0x41cb33
push eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
call fcn.004011b0
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x26c], ebx
jle 0x41cb26
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x24]
push dword [eax + ecx*4]
lea ecx, [ebp - 0x30]
call fcn.004013e5
push ebx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
push 1
sub esp, 0xc
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004013b2
call fcn.0041c435
mov ecx, dword [ebp - 0x30]
xor eax, eax
inc dword [ebp - 0x24]
mov word [ecx], ax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ebx
cmp eax, dword [ebp - 0x26c]
jl 0x41cad9
push dword [ebp - 0x30]
mov byte [ebp - 4], 0xa
call fcn.00421999
pop ecx
cmp dword [ebp - 0x20], 2
jne 0x41cbb6
push 3
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
call fcn.004011b0
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x26c], ebx
jle 0x41cba9
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x24]
push dword [eax + ecx*4]
lea ecx, [ebp - 0x30]
call fcn.004013e5
push 1
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
push 1
sub esp, 0xc
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004013b2
call fcn.0041c435
mov ecx, dword [ebp - 0x30]
xor eax, eax
inc dword [ebp - 0x24]
mov word [ecx], ax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ebx
cmp eax, dword [ebp - 0x26c]
jl 0x41cb5b
push dword [ebp - 0x30]
mov byte [ebp - 4], 0xa
call fcn.00421999
pop ecx
sub esp, 0xc
lea eax, [ebp - 0x298]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004013b2
call fcn.0041c51c
cmp al, bl
jne 0x41cbf2
call fcn.0041c336
cmp al, bl
je 0x41cbf2
push 1
push ebx
push ebx
push dword [ebp - 0x298]
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [edi + 0x54], ebx
jne 0x41cbfc
cmp byte [edi + 0x58], bl
je 0x41cc40
mov byte [ebp - 4], 0xe
jmp 0x41cc1a
cmp eax, 0x80004004
je 0x41c853
cmp byte [ebp - 0x19], bl
je 0x41c853
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xe8]
call fcn.0041ba1d
push dword [ebp - 0xf4]
call fcn.00421999
mov eax, dword [edi]
pop ecx
push edi
mov byte [ebp - 4], 6
call dword [eax + 8]
jmp 0x41c8d2
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0xf
call fcn.0041ba1d
push dword [ebp - 0xf4]
call fcn.00421999
mov eax, dword [edi]
pop ecx
push edi
mov byte [ebp - 4], 6
call dword [eax + 8]
jmp 0x41d012
lea ecx, [ebp - 0x2bc]
call fcn.00401040
test al, al
je 0x41d19f
cmp byte [ebp - 0x2ac], bl
je 0x41cc91
mov byte [ebp - 0x19], 1
cmp dword [ebp - 0x2a4], ebx
jne 0x41cc94
mov byte [ebp - 0x19], bl
lea ecx, [ebp - 0x148]
call fcn.0041bd12
mov al, byte [ebp - 0x19]
mov byte [ebp - 4], 0x10
mov byte [ebp - 0x140], al
cmp byte [ebp - 0x2ac], bl
je 0x41ccc3
mov byte [ebp - 0x130], 1
cmp dword [ebp - 0x2a4], ebx
je 0x41ccc9
mov byte [ebp - 0x130], bl
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x13c]
call fcn.004013e5
lea ecx, [ebp - 0x148]
call fcn.0041d35d
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x60]
push eax
push esi
lea ecx, [ebp - 0x24c]
call fcn.0040c445
test al, al
jne 0x41cd24
push 0x2000601
push 0xc7
call fcn.0041b8f2
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 6
call fcn.0041d48f
jmp 0x41c8d2
push ebx
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1a]
push eax
push dword [ebp - 0x2d3]
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x2d0]
push eax
push esi
mov byte [ebp - 0x1a], bl
call fcn.0041e6f0
cmp eax, ebx
jne 0x41cf9f
push 0x437d24
lea eax, [ebp - 0x1bc]
push eax
call fcn.00408aed
test al, al
je 0x41cf86
push 3
pop edi
push edi
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
call fcn.004011b0
push 0x437b9c
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x11
call fcn.00404bd9
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x12
call fcn.004013e5
push dword [ebp - 0x8c]
mov byte [ebp - 4], 0x11
call fcn.00421999
pop ecx
lea eax, [ebp - 0x204]
push eax
lea ecx, [ebp - 0x3c]
call fcn.0040144e
or dword [ebp - 0x70], 0xffffffff
push edi
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
call fcn.004011b0
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0x14
call fcn.0041ad00
push dword [0x447810]
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00404bd9
mov eax, dword [eax]
push 1
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x15
call fcn.00425eda
push dword [ebp - 0x8c]
neg al
sbb al, al
inc al
mov byte [ebp - 0x19], al
mov byte [ebp - 4], 0x14
call fcn.00421999
pop ecx
cmp byte [ebp - 0x19], bl
je 0x41ce9d
push dword [ebp - 0x4c]
call fcn.00421999
pop ecx
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call fcn.00425b0b
push dword [ebp - 0x3c]
call fcn.00421999
pop ecx
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 6
call fcn.0041d48f
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 5
call fcn.00421963
mov eax, dword [esi]
push esi
mov byte [ebp - 4], 4
call dword [eax + 8]
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 3
call fcn.00420950
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 1
call fcn.0041be6e
jmp 0x41c7a5
push edi
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
call fcn.004011b0
push 0x438618
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x16
call fcn.00404bd9
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x17
call fcn.004013e5
push dword [ebp - 0x8c]
mov byte [ebp - 4], 0x16
call fcn.00421999
pop ecx
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x30]
call fcn.0040144e
push edi
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
call fcn.00401260
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x18
call fcn.00422073
lea eax, [ebp - 0x30]
call fcn.0041b964
test al, al
jne 0x41cf40
lea eax, [ebp - 0x20]
push eax
push 5
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x18], 0xdbfbbef
mov byte [ebp - 0x14], 0xa
call fcn.00425a03
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x70]
push dword [ebp - 0x80]
call fcn.00425a03
push dword [ebp - 0x80]
call fcn.00421999
push dword [ebp - 0x30]
call fcn.00421999
push dword [ebp - 0x4c]
call fcn.00421999
add esp, 0xc
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call fcn.00425b0b
push dword [ebp - 0x3c]
mov byte [ebp - 4], 0x10
call fcn.00421999
pop ecx
cmp dword [ebp - 0x118], ebx
jle 0x41d003
cmp byte [ebp - 0x1a], bl
jne 0x41cfb8
mov dword [ebp - 0x20], 0x80004005
jmp 0x41c856
cmp eax, 0x80004004
je 0x41c853
cmp byte [ebp - 0x1a], bl
jne 0x41cd10
jmp 0x41c853
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 6
call fcn.0041d48f
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 5
call fcn.00421963
mov eax, dword [esi]
push esi
mov byte [ebp - 4], 4
call dword [eax + 8]
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 3
call fcn.00420950
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 1
call fcn.0041be6e
xor esi, esi
inc esi
jmp 0x41c7a7
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 6
call fcn.0041d48f
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x2c8], ebx
jle 0x41d083
mov eax, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0x20]
mov edi, dword [eax + ecx*4]
mov dword [ebp - 0x24], ebx
cmp dword [edi + 0x38], ebx
jle 0x41d075
mov ecx, dword [edi + 0x3c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x40], ebx
cmp dword [eax + 8], ebx
jle 0x41d06a
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x40]
push dword [eax + ecx*4]
lea ecx, [ebp - 0xa0]
call fcn.00401521
inc dword [ebp - 0x40]
mov ecx, dword [edi + 0x3c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ecx + eax*4]
mov edx, dword [ebp - 0x40]
cmp edx, dword [eax + 8]
jl 0x41d042
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, dword [edi + 0x38]
jl 0x41d034
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x2c8]
jl 0x41d01d
cmp byte [ebp - 0x1c0], bl
je 0x41d147
cmp dword [ebp - 0x98], ebx
je 0x41d147
push 3
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
call fcn.004011b0
xor edi, edi
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x98], ebx
jle 0x41d129
mov eax, dword [ebp - 0x94]
push dword [eax + edi*4]
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00401856
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1a
call fcn.004013e5
push dword [ebp - 0x8c]
mov byte [ebp - 4], 0x19
call fcn.00421999
pop ecx
push ebx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
push 1
sub esp, 0xc
lea eax, [ebp - 0x3c]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004013b2
call fcn.0041c435
mov ecx, dword [ebp - 0x3c]
xor eax, eax
inc edi
mov word [ecx], ax
mov dword [ebp - 0x38], ebx
cmp edi, dword [ebp - 0x98]
jl 0x41d0bc
push ebx
push 0x74
push 0x100
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [ebp - 0x3c]
call fcn.00421999
pop ecx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 5
call fcn.00421963
mov eax, dword [esi]
push esi
mov byte [ebp - 4], 4
call dword [eax + 8]
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 3
call fcn.00420950
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 1
call fcn.0041be6e
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], bl
call fcn.004014f0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa0]
call fcn.004014f0
xor eax, eax
jmp 0x41c7c6
mov dword [ebp - 0x20], str.Unsupported_command
push 0x43f770
jmp 0x41c85b