Function at 0x401a00
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, eax
push esi
push ebx
mov ebx, edx
sub esp, 0x4c
mov dword [ebp - 0x2c], eax
mov eax, edx
call fcn.00401000
mov dword [ebp - 0x34], eax
test eax, eax
je 0x401b99
cmp word [edi], 0
je 0x401cbd
mov dword [ebp - 0x38], ebx
nop
lea eax, [ebp - 0x1c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2c]
mov dword [esp], eax
call sub.shell32.dll_CommandLineToArgvW
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov esi, eax
lea eax, [ecx*4 + 8]
mov dword [ebp - 0x30], ecx
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_malloc]
mov ecx, dword [ebp - 0x30]
test eax, eax
mov ebx, eax
je 0x401cd5
test ecx, ecx
jle 0x401a85
xor edi, edi
mov eax, dword [esi + edi*4]
call fcn.00401000
mov ecx, dword [ebp - 0x1c]
mov dword [ebx + edi*4], eax
add edi, 1
cmp ecx, edi
jg 0x401a70
mov eax, dword [ebp - 0x34]
mov dword [ebx + ecx*4 + 4], 0
mov dword [ebx + ecx*4], eax
movzx eax, byte [section..data]
test al, 8
jne 0x401be0
mov edx, dword [ebp - 0x1c]
test edx, edx
js 0x401b0b
xor esi, esi
jmp 0x401ab8
add esi, 1
cmp dword [ebp - 0x1c], esi
jl 0x401b03
mov edx, eax
and edx, 8
je 0x401ab0
mov eax, dword [ebx + esi*4]
add esi, 1
call fcn.004017f0
mov dword [esp + 0xc], 0x405120
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0x405440
mov dword [esp + 4], 0x404000
mov dword [esp], 3
call fcn.00401340
movzx eax, byte [section..data]
mov edx, eax
and edx, 8
cmp dword [ebp - 0x1c], esi
jge 0x401ab8
test dl, dl
jne 0x401bb0
mov dword [esp + 4], 0
mov dword [esp], ebx
call sub.ntdll.dll___wine_unix_spawnvp
sub esp, 8
test eax, eax
je 0x401cc8
mov ecx, dword [ebp - 0x1c]
xor esi, esi
mov edi, dword [sym.imp.ucrtbase.dll_free]
test ecx, ecx
jle 0x401b4c
lea esi, [esi]
mov eax, dword [ebx + esi*4]
add esi, 1
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_free]
cmp dword [ebp - 0x1c], esi
jg 0x401b38
mov dword [esp], ebx
call edi
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 0
mov eax, ecx
je 0x401c20
add eax, 2
cmp word [eax], 0
jne 0x401b60
mov ebx, dword [ebp - 0x2c]
sub eax, ebx
add eax, 2
add dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 0
jne 0x401a30
mov ebx, dword [ebp - 0x38]
test byte [section..data], 2
jne 0x401c41
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
call edi
lea esp, [ebp - 0xc]
mov eax, 1
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0xc], 0x405124
mov dword [esp + 8], 0x405440
mov dword [esp + 4], 0x404000
mov dword [esp], 3
call fcn.00401340
jmp 0x401b0b
mov dword [esp + 0xc], str.Trying
mov dword [esp + 8], 0x405440
mov dword [esp + 4], 0x404000
mov dword [esp], 3
call fcn.00401340
mov esi, dword [ebp - 0x1c]
test esi, esi
js 0x401c2a
movzx eax, byte [section..data]
jmp 0x401aa9
mov eax, 2
jmp 0x401b71
movzx edx, byte [section..data]
and edx, 8
test dl, dl
je 0x401b0b
jmp 0x401bb0
test ebx, ebx
je 0x401cb6
mov eax, ebx
shr eax, 0x10
test eax, eax
je 0x401ca1
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x401c74
mov eax, ebx
call fcn.00401160
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.could_not_find_a_suitable_app_to_open__s_n
mov dword [esp + 8], 0x405440
mov dword [esp + 4], 0x404000
mov dword [esp], 1
call fcn.00401340
jmp 0x401b91
movzx eax, bx
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401790
jmp 0x401c74
mov eax, str._null_
jmp 0x401c74
mov edi, dword [sym.imp.ucrtbase.dll_free]
jmp 0x401b84
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_ExitProcess]
mov ebx, dword [ebp - 0x38]
mov edi, dword [sym.imp.ucrtbase.dll_free]
jmp 0x401b84