Function at 0x416db7
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push ebx
push esi
push edi
cmp dword [ebp + 0x10], 0
je 0x416ddd
mov eax, dword [ebp + 0x10]
push eax
push 0x432eac
push 5
call fcn.004093aa
add esp, 0xc
cmp dword [ebp + 0xc], 0
je 0x416e1d
mov eax, dword [ebp + 0xc]
cmp dword [eax*4 + 0x42cc20], 0
je 0x416e1d
push 0x4309b8
push 1
call fcn.004093aa
add esp, 8
push 0x4326d0
push 0
call fcn.004093aa
add esp, 8
xor eax, eax
jmp 0x4172d0
cmp dword [ebp + 0xc], 0
je 0x416e60
mov eax, dword [ebp + 0xc]
cmp dword [eax*4 + 0x42c2b0], 0
je 0x416e60
push 0x431500
push 1
call fcn.004093aa
add esp, 8
push 0x4326d0
push 0
call fcn.004093aa
add esp, 8
mov eax, 1
jmp 0x4172d0
cmp dword [0x42c2a4], 0
je 0x416e72
call fcn.00420fd7
cmp dword [0x42cc0c], 0
je 0x417052
call fcn.0042062e
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
je 0x416ecf
cmp dword [ebp - 4], 0xa
jne 0x416ecf
push 0x4326d0
push 0
call fcn.004093aa
add esp, 8
cmp dword [ebp + 8], 1
jne 0x416ebe
mov eax, 1
jmp 0x4172d0
cmp dword [ebp + 8], 2
jne 0x416ecf
xor eax, eax
jmp 0x4172d0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.MSVCRT20.dll_toupper]
add esp, 4
mov dword [ebp - 0x68], eax
push str.YNQASGC
mov eax, dword [0x42c244]
push eax
call sub.MSVCRT20.dll_strcpy
add esp, 8
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [0x42c244]
push eax
call dword [sym.imp.MSVCRT20.dll_strchr]
add esp, 8
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
sub eax, dword [0x42c244]
mov dword [ebp - 8], eax
cmp dword [ebp - 0x68], 0
je 0x416f41
cmp dword [ebp - 0x64], 0
je 0x416f41
cmp dword [ebp + 0xc], 0
jne 0x416f3c
cmp dword [ebp - 8], 2
jg 0x416f41
jmp 0x416f55
call fcn.00420fd7
push 7
call fcn.00416cca
add esp, 4
jmp 0x416e7f
mov eax, dword [ebp - 4]
push eax
call fcn.00416cca
add esp, 4
push 0x4326d0
push 0
call fcn.004093aa
add esp, 8
cmp dword [ebp - 8], 6
jg 0x416e7f
mov eax, dword [ebp - 8]
mov dword [ebp - 0x6c], eax
jmp 0x41701d
mov eax, 1
jmp 0x4172d0
xor eax, eax
jmp 0x4172d0
push 1
call dword [sym.imp.MSVCRT20.dll_exit]
add esp, 4
cmp dword [ebp + 0xc], 0
je 0x416fb9
mov eax, dword [ebp + 0xc]
mov dword [eax*4 + 0x42c2b0], 1
mov eax, 1
jmp 0x4172d0
cmp dword [ebp + 0xc], 0
je 0x416fdb
mov eax, dword [ebp + 0xc]
mov dword [eax*4 + 0x42cc20], 1
xor eax, eax
jmp 0x4172d0
mov dword [0x42c2f8], 1
mov eax, 1
jmp 0x4172d0
call fcn.00416cf0
cmp dword [ebp + 0x10], 0
je 0x417018
mov eax, dword [ebp + 0x10]
push eax
push 0x432eac
push 5
call fcn.004093aa
add esp, 0xc
jmp case.default.0x41702a
cmp dword [ebp - 0x6c], 6
ja case.default.0x41702a
mov eax, dword [ebp - 0x6c]
jmp dword [eax*4 + 0x417031]
jmp 0x416e7f
push 0x50
lea eax, [ebp - 0x58]
push eax
call fcn.004208f0
add esp, 8
lea eax, [ebp - 0x58]
mov dword [ebp - 0x60], eax
jmp 0x41706e
inc dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
movsx eax, byte [eax]
cmp eax, 0x20
jne 0x417082
jmp 0x41706b
mov eax, dword [ebp - 0x60]
push eax
call sub.MSVCRT20.dll_strlen
add esp, 4
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jle 0x417288
mov eax, dword [ebp - 0x60]
push eax
call fcn.004197a9
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
push 0x4323a0
mov eax, dword [ebp - 0x60]
push eax
call fcn.00416d51
add esp, 0xc
test eax, eax
jne 0x417107
mov eax, 0x431508
mov ecx, 0x431520
xor edx, edx
cmp dword [ebp + 0xc], 0
sete dl
dec edx
sub ecx, eax
and edx, ecx
add edx, eax
push edx
mov eax, dword [0x42c244]
push eax
call sub.MSVCRT20.dll_strcpy
add esp, 8
mov eax, dword [0x42c244]
push eax
push 0
call fcn.004093aa
add esp, 8
jmp 0x417052
mov eax, dword [ebp - 0x5c]
push eax
push 0x4309b8
mov eax, dword [ebp - 0x60]
push eax
call fcn.00416d51
add esp, 0xc
test eax, eax
jne 0x417130
xor eax, eax
jmp 0x4172d0
mov eax, dword [ebp - 0x5c]
push eax
push 0x431500
mov eax, dword [ebp - 0x60]
push eax
call fcn.00416d51
add esp, 0xc
test eax, eax
jne 0x41715c
mov eax, 1
jmp 0x4172d0
mov eax, dword [ebp - 0x5c]
push eax
push 0x430ed4
mov eax, dword [ebp - 0x60]
push eax
call fcn.00416d51
add esp, 0xc
test eax, eax
jne 0x417189
push 1
call dword [sym.imp.MSVCRT20.dll_exit]
add esp, 4
jmp 0x417283
cmp dword [ebp + 0xc], 0
je 0x417283
mov eax, dword [ebp - 0x5c]
push eax
push 0x42f220
mov eax, dword [ebp - 0x60]
push eax
call fcn.00416d51
add esp, 0xc
test eax, eax
jne 0x4171d2
cmp dword [ebp + 0xc], 0
je 0x4171c8
mov eax, dword [ebp + 0xc]
mov dword [eax*4 + 0x42c2b0], 1
mov eax, 1
jmp 0x4172d0
mov eax, dword [ebp - 0x5c]
push eax
push 0x4310d8
mov eax, dword [ebp - 0x60]
push eax
call fcn.00416d51
add esp, 0xc
test eax, eax
jne 0x41720e
cmp dword [ebp + 0xc], 0
je 0x417207
mov eax, dword [ebp + 0xc]
mov dword [eax*4 + 0x42cc20], 1
xor eax, eax
jmp 0x4172d0
mov eax, dword [ebp - 0x5c]
push eax
push 0x4303f8
mov eax, dword [ebp - 0x60]
push eax
call fcn.00416d51
add esp, 0xc
test eax, eax
jne 0x41723f
mov dword [0x42c2f8], 1
mov eax, 1
jmp 0x4172d0
mov eax, dword [ebp - 0x5c]
push eax
push str.COMMAND_
mov eax, dword [ebp - 0x60]
push eax
call fcn.00416d51
add esp, 0xc
test eax, eax
jne 0x417283
call fcn.00416cf0
cmp dword [ebp + 0x10], 0
je 0x41727e
mov eax, dword [ebp + 0x10]
push eax
push 0x432eac
push 5
call fcn.004093aa
add esp, 0xc
jmp 0x417052
jmp 0x4172ad
cmp dword [ebp + 8], 1
jne 0x41729c
mov eax, 1
jmp 0x4172d0
cmp dword [ebp + 8], 2
jne 0x4172ad
xor eax, eax
jmp 0x4172d0
call fcn.00420fd7
push 7
call fcn.00416cca
add esp, 4
push 0x431508
push 0
call fcn.004093aa
add esp, 8
jmp 0x417052
pop edi
pop esi
pop ebx
leave
ret