Function at 0x4011a0
Capabilities:
Execute command
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x406008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [ebp - 0x20], eax
xor eax, eax
push ebx
push esi
mov dword [ebp - 0x10], eax
xor esi, esi
xor al, al
mov dword [ebp - 0x1c], esi
push edi
mov byte [ebp - 7], al
xor edi, edi
xor eax, eax
mov dword [ebp - 0x28], ecx
push 0xfffffffffffffff5
xor ebx, ebx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edi
mov byte [ebp - 9], al
mov dword [ebp - 0x24], eax
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edi, eax
push 0x4e3
mov dword [ebp - 0x2c], edi
call dword [sym.imp.KERNEL32.dll_SetConsoleCP]
push 0x4e3
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
push 0xf
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edi, dword [ebp - 0x20]
push str.pd:D:f:b:Bo:S:N:
push edi
push dword [ebp + 8]
call fcn.004025b0
add esp, 0xc
cmp al, 0xff
je case.0x401246.67
mov ecx, dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
nop dword [eax]
movsx eax, al
add eax, 0xffffffbe
cmp eax, 0x2e
ja case.0x401246.67
movzx eax, byte [eax + 0x401594]
jmp dword [eax*4 + 0x40156c]
mov dword [ebp - 0x10], 1
jmp 0x4012ab
push dword [0x406038]
call ecx
add esp, 4
mov byte [ebp - 9], al
jmp 0x4012ab
mov ebx, dword [0x406038]
jmp 0x4012ab
mov esi, dword [0x406038]
mov dword [ebp - 0x1c], esi
jmp 0x4012ab
mov eax, dword [0x406038]
mov dword [ebp - 0x18], eax
jmp 0x4012ab
mov eax, dword [0x406038]
mov dword [ebp - 0x14], eax
jmp 0x4012ab
mov byte [ebp - 7], 1
jmp 0x4012ab
push dword [0x406038]
call ecx
add esp, 4
mov dword [ebp - 0x24], eax
jmp 0x4012ab
mov eax, dword [0x406038]
mov dword [ebp - 0x28], eax
push str.pd:D:f:b:Bo:S:N:
push edi
push dword [ebp + 8]
call fcn.004025b0
mov ecx, dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 0xc
cmp al, 0xff
jne 0x401230
mov al, byte [ebp - 9]
mov ecx, dword [ebp - 0x28]
mov byte [ebp - 0x20], al
test ecx, ecx
je 0x401304
push ecx
call fcn.00401600
mov eax, dword [ebp - 0x10]
add esp, 4
mov dword [ebp - 0x10], eax
mov al, byte [ebp - 7]
mov byte [ebp - 7], al
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov al, byte [ebp - 9]
mov dword [ebp - 0x1c], esi
mov byte [ebp - 9], al
mov byte [ebp - 0x20], al
mov ecx, dword [ebp - 0x24]
test ebx, ebx
je case.0x401246.67
test esi, esi
je case.0x401246.67
test al, al
je case.0x401246.67
push ecx
push ebx
call fcn.00402410
mov esi, eax
add esp, 8
test esi, esi
je 0x40152b
push dword [ebp - 0x20]
push esi
call fcn.00402250
mov edi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 8
cmp eax, 0xffffffff
je 0x40136a
test eax, eax
je 0x401355
push str.Unknown_error__n
jmp 0x40135a
push 0x40433c
push 2
call edi
add esp, 4
push eax
call fcn.00401180
add esp, 8
push esi
call fcn.00402360
add esp, 4
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1c200
push ebx
call fcn.00402410
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4013d1
mov cl, byte [ebp - 9]
dec cl
movzx ecx, cl
push ecx
push ebx
call fcn.00401650
mov esi, eax
add esp, 8
cmp esi, 0xffffffed
je 0x401444
cmp esi, 0xffffffff
je 0x40141c
test esi, esi
je 0x4013bc
push 0x404414
jmp 0x401421
push 0x4043f8
push 2
call edi
add esp, 4
push eax
call fcn.00401180
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x32
call edi
cmp byte [ebp - 7], 0
je 0x40146e
push ebx
call fcn.00401c30
mov esi, eax
add esp, 4
test esi, esi
js 0x401431
push 0x404428
call fcn.004015d0
add esp, 4
cmp esi, 0x100
jg 0x401459
je 0x401452
sub esi, 0
je 0x40144b
sub esi, 1
jne 0x40146e
push 0x404458
jmp 0x401466
push 0x40439c
push 2
call edi
add esp, 4
push eax
call fcn.00401180
add esp, 8
pop edi
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004026f8
mov esp, ebp
pop ebp
ret
push 0x4043c0
jmp 0x401421
push 0x404448
jmp 0x401466
push 0x404474
jmp 0x401466
cmp esi, 0x101
jne 0x40146e
push 0x4044a4
call fcn.004015d0
add esp, 4
push 0x32
call edi
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 0x1c]
test edi, edi
je 0x4014a8
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 0x10]
push 0
push eax
push 1
push esi
push 0
push ebx
call fcn.00401810
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 0x18]
push edi
push esi
push eax
push 0
push ebx
call fcn.00401e70
add esp, 0x34
jmp 0x4014be
mov eax, dword [ebp - 0x10]
push 0
push 1
push eax
push 1
push esi
push 0
push ebx
call fcn.00401810
add esp, 0x1c
movzx edi, byte [ebp - 9]
mov esi, eax
mov ebx, dword [ebp - 0x2c]
test esi, esi
jne 0x4014e4
push 0x2f
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push edi
push 0x4044c4
call fcn.004015d0
add esp, 8
jmp 0x401501
push 0x47
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push esi
push 0x4044e0
push edi
push 0x4044e8
call fcn.004015d0
add esp, 0x10
push 0xf
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push str.pause
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004026f8
mov esp, ebp
pop ebp
ret
push str.COM
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.00401180
add esp, 8
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push dword [edi]
call fcn.00401000
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
mov eax, 1
pop edi
pop esi
pop ebx
call fcn.004026f8
mov esp, ebp
pop ebp
ret