Function at 0x41e280
Capabilities:
Accept command line arguments
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov dword [ebp - 0x50], 0x5c
mov dword [ebp - 0x30], 0x47
mov dword [ebp - 0x54], 0x57
mov dword [ebp - 0x1c], 0x17
mov dword [ebp - 8], 0x16
mov dword [ebp - 0x10], 0x35
mov dword [ebp - 0x44], 0x4a
mov dword [ebp - 0x34], 0x3d
mov dword [ebp - 0x20], 0x11
mov dword [ebp - 0x58], 0x44
mov dword [ebp - 0x5c], 0x28
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x60], 0x52
mov dword [ebp - 0x48], 0x51
mov dword [ebp - 0x2c], 0x4f
mov dword [ebp - 4], 0x62
mov dword [ebp - 0x38], 0x2c
mov dword [ebp - 0x64], 0x26
mov dword [ebp - 0x68], 0x49
mov dword [ebp - 0x14], 0x39
mov dword [ebp - 0x28], 0x63
mov dword [ebp - 0x4c], 0x55
mov dword [ebp - 0x40], 0x36
mov dword [ebp - 0x3c], 0x17
mov dword [ebp - 0x24], 3
cmp dword [ebp - 4], 0x63
jge 0x41e3c5
cmp dword [ebp + 0x18], 0x4f
je 0x41e366
cmp dword [ebp - 0x34], 0x3f
jne 0x41e366
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [ebp - 0x14], 0x49
jle 0x41e366
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
cmp dword [ebp - 0x38], 0x48
jle 0x41e3c0
cmp dword [ebp - 0x10], 0x2b
jle 0x41e3c0
cmp dword [ebp - 0x3c], 0xb
jne 0x41e3c0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp dword [ebp - 0x28], 0x54
jge 0x41e3ba
cmp dword [ebp + 0x18], 0x29
jle 0x41e3ba
cmp dword [ebp + 0x28], 0x30
jle 0x41e3ba
call dword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
cmp dword [ebp - 0x40], 5
jge 0x41e3b4
call dword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, dword [ebp + 0x18]
xor edx, 0x35
mov dword [ebp + 0x18], edx
call dword [sym.imp.KERNEL32.dll_RaiseException]
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x41e335
cmp dword [ebp + 0x18], 0x5b
jge 0x41e3ee
cmp dword [ebp + 0x28], 0x59
jge 0x41e3da
mov eax, dword [ebp - 4]
sub eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0x18]
add ecx, 1
mov dword [ebp + 0x18], ecx
mov edx, dword [ebp - 0x20]
xor edx, 0x52
mov dword [ebp - 0x20], edx
jmp 0x41e3c5
cmp dword [ebp - 0x1c], 0x25
jne 0x41e415
cmp dword [ebp - 4], 0
jge 0x41e415
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
cmp dword [ebp - 0x28], 0x31
je 0x41e40f
mov eax, dword [ebp - 0x2c]
xor eax, 0x3a
mov dword [ebp - 0x2c], eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
cmp dword [ebp + 0x24], 0x16
jge 0x41e451
cmp dword [ebp + 0x18], 2
jne 0x41e44b
call dword [sym.imp.KERNEL32.dll_WriteConsoleW]
cmp dword [ebp - 0xc], 0x5d
jge 0x41e44b
cmp dword [ebp - 0x44], 0x63
jle 0x41e44b
mov edx, dword [ebp - 0x10]
sub edx, 1
mov dword [ebp - 0x10], edx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call dword [sym.imp.USER32.dll_TranslateMessage]
cmp dword [ebp - 8], 0x17
jl 0x41e3ee
mov dword [ebp - 0x18], 0
jmp 0x41e469
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp + 0x14]
sub ecx, 0x30
cmp dword [ebp - 0x18], ecx
jge 0x41e48b
cmp dword [ebp + 0x10], 0x3e
jge 0x41e489
cmp dword [ebp - 0x14], 0x37
jle 0x41e489
mov edx, dword [ebp + 0x28]
sub edx, 0x5e
mov dword [ebp + 0x28], edx
jmp 0x41e460
cmp dword [ebp - 0xc], 2
jge 0x41e508
cmp dword [ebp - 0x14], 0x22
je 0x41e4be
cmp dword [ebp - 0x1c], 6
jge 0x41e4be
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
cmp dword [ebp - 0x30], 0x55
je 0x41e4be
cmp dword [ebp - 0x1c], 0x1e
jge 0x41e4be
cmp dword [ebp - 0x30], 0x32
jle 0x41e4be
mov eax, dword [ebp + 0xc]
or eax, 0x57
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0x20], 0x46
jne 0x41e506
cmp dword [ebp - 0x10], 0xb
jne 0x41e500
call dword [sym.imp.KERNEL32.dll_GetLogicalProcessorInformation]
cmp dword [ebp - 0x14], 0x30
je 0x41e500
cmp dword [ebp - 0x48], 0x5f
jle 0x41e500
cmp dword [ebp - 0x4c], 8
jge 0x41e500
call dword [sym.imp.USER32.dll_DestroyWindow]
mov edx, dword [ebp - 8]
xor edx, 8
mov dword [ebp - 8], edx
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x41e48b
mov esp, ebp
pop ebp
ret