Function at 0x4085d0
Capabilities:
Accept command line arguments
Move file
Terminate process

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x40fd26
push eax
mov eax, 0x3664
mov dword fs:[0], esp
call fcn.0040f4f0
mov eax, dword [esp + 0x3674]
push ebx
push ebp
push esi
cmp eax, 2
push edi
jge 0x408607
or eax, 0xffffffff
jmp 0x408813
call fcn.00407880
xor ebx, ebx
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x15]
mov byte [esp + 0x14], bl
push 0x103
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x18]
push eax
call fcn.00407770
mov ebp, dword [sym.imp.MSVCRT.dll__chdir]
lea ecx, [esp + 0x1c]
push ecx
call ebp
add esp, 0xc
lea ecx, [esp + 0x21c]
call fcn.00408d10
push ecx
lea ecx, [esp + 0x220]
mov edx, esp
mov dword [esp + 0x14], esp
push edx
mov dword [esp + 0x3684], ebx
call fcn.00408830
lea ecx, [esp + 0x220]
call fcn.004093f0
cmp eax, 0x3e9
je 0x40869a
push ebx
push ebx
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x228]
call fcn.00408e60
mov ecx, 0x41
xor eax, eax
mov edi, 0x416344
push ebx
rep stosd dword es:[edi], eax
call dword [sym.imp.MSVCRT.dll_time]
mov esi, dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 4
push eax
push str.C:Program_Files_rzxhostprober__d
push 0x416344
call esi
push ebx
push 0x416344
call dword [sym.imp.MSVCRT.dll__access]
add esp, 0x14
test eax, eax
jne 0x408735
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x416344
call sub.MFC42.DLL_CString::CString_1
call fcn.004037c0
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x11d]
mov byte [esp + 0x11c], bl
rep stosd dword es:[edi], eax
add esp, 4
lea ecx, [esp + 0x118]
stosw word es:[edi], ax
push 0x416344
push str._s_bak
push ecx
stosb byte es:[edi], al
call esi
lea edx, [esp + 0x124]
push edx
push 0x416344
call dword [sym.imp.MSVCRT.dll_rename]
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov esi, eax
push esi
call fcn.00407f00
add esp, 4
test eax, eax
jne 0x408752
push 0xffffffffffffffff
call dword [sym.imp.MSVCRT.dll_exit]
push esi
call fcn.00407db0
add esp, 4
test eax, eax
jne 0x408767
push 0xffffffffffffffff
call dword [sym.imp.MSVCRT.dll_exit]
push esi
call fcn.00407e50
add esp, 4
test eax, eax
jne 0x40877c
push 0xffffffffffffffff
call dword [sym.imp.MSVCRT.dll_exit]
call fcn.00408320
test eax, eax
jne 0x40878d
push 0xffffffffffffffff
call dword [sym.imp.MSVCRT.dll_exit]
call fcn.00408400
test eax, eax
jne 0x40879e
push 0xffffffffffffffff
call dword [sym.imp.MSVCRT.dll_exit]
cmp dword [0x416448], ebx
je 0x4087fa
push 0x416344
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::CString_1
push str._rzxmon.exe
lea ecx, [esp + 0x14]
mov byte [esp + 0x3680], 1
call sub.MFC42.DLL_CString::operator
push 0x416344
call ebp
mov eax, dword [esp + 0x14]
push ebx
push eax
call fcn.004077e0
add esp, 0xc
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x10]
mov byte [esp + 0x367c], bl
call fcn.0040f288
lea ecx, [esp + 0x21c]
mov dword [esp + 0x367c], 0xffffffff
call fcn.00408df0
xor eax, eax
mov ecx, dword [esp + 0x3674]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x3670
ret