Function at 0x477454
Capabilities:
Accept command line arguments
Parse pe header
Terminate process

Disassembly:
call 0x477459
pop ebx
sub ebx, 0x403459
push dword [esp]
call fcn.00477327
or eax, eax
jne 0x477471
jmp 0x4780d0
mov dword [ebx + fcn.00401000], eax
lea eax, [ebx + 0x401426]
push eax
push dword [ebx + fcn.00401000]
call fcn.004773a1
or eax, eax
jne 0x477492
jmp 0x4780d0
mov dword [ebx + fcn.00401261], eax
lea eax, [ebx + 0x401419]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401265], eax
lea eax, [ebx + 0x40146c]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401269], eax
lea eax, [ebx + 0x401477]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40126d], eax
lea eax, [ebx + 0x40148a]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401271], eax
lea eax, [ebx + 0x40149e]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401275], eax
lea eax, [ebx + 0x4014a8]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401279], eax
lea eax, [ebx + 0x4014d6]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401281], eax
lea eax, [ebx + 0x4014e7]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401285], eax
lea eax, [ebx + 0x4014f3]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401289], eax
lea eax, [ebx + 0x401501]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40128d], eax
lea eax, [ebx + 0x40150f]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401291], eax
lea eax, [ebx + 0x40151b]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401295], eax
lea eax, [ebx + 0x40152e]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401299], eax
lea eax, [ebx + 0x40153c]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40129d], eax
lea eax, [ebx + 0x40154c]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012a1], eax
lea eax, [ebx + 0x401556]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012a5], eax
lea eax, [ebx + 0x401565]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012a9], eax
lea eax, [ebx + 0x401572]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012ad], eax
lea eax, [ebx + 0x40157e]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012b1], eax
lea eax, [ebx + 0x401587]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012b5], eax
lea eax, [ebx + fcn.00401590]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012b9], eax
lea eax, [ebx + 0x40159c]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012bd], eax
lea eax, [ebx + 0x4015a4]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012c1], eax
lea eax, [ebx + 0x4015aa]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012c5], eax
lea eax, [ebx + 0x4015ba]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012c9], eax
lea eax, [ebx + 0x4015ee]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012d5], eax
lea eax, [ebx + 0x4015fd]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012d9], eax
lea eax, [ebx + 0x4015d3]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012cd], eax
lea eax, [ebx + 0x4015e1]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012d1], eax
lea eax, [ebx + 0x401668]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012f5], eax
lea eax, [ebx + 0x401677]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012f9], eax
lea eax, [ebx + 0x40168a]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012fd], eax
lea eax, [ebx + 0x40169d]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401301], eax
lea eax, [ebx + 0x4016b0]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401305], eax
lea eax, [ebx + 0x4016e2]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401315], eax
lea eax, [ebx + 0x4016c6]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.0040130d], eax
lea eax, [ebx + 0x4016d9]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401311], eax
lea eax, [ebx + 0x4016ef]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401319], eax
lea eax, [ebx + 0x4016fb]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40131d], eax
lea eax, [ebx + 0x401804]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40138d], eax
lea eax, [ebx + 0x401813]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401391], eax
lea eax, [ebx + 0x40181d]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401395], eax
lea eax, [ebx + 0x40170f]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401399], eax
lea eax, [ebx + 0x40182b]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.0040139d], eax
lea eax, [ebx + 0x40187a]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013b5], eax
lea eax, [ebx + 0x401893]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013b9], eax
lea eax, [ebx + 0x4018a1]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013bd], eax
lea eax, [ebx + 0x40190f]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013d9], eax
lea eax, [ebx + 0x401938]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013e1], eax
lea eax, [ebx + 0x401942]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013e5], eax
lea eax, [ebx + 0x40194c]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013e9], eax
lea eax, [ebx + 0x40195d]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013ed], eax
lea eax, [ebx + 0x401a13]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013fd], eax
lea eax, [ebx + 0x401a27]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401401], eax
lea eax, [ebx + 0x40171f]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401325], eax
lea eax, [ebx + 0x401734]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401329], eax
lea eax, [ebx + 0x401741]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40132d], eax
lea eax, [ebx + 0x40174d]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401331], eax
lea eax, [ebx + 0x40175e]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401321], eax
lea eax, [ebx + 0x401a43]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401409], eax
lea eax, [ebx + 0x401a4e]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40140d], eax
lea eax, [ebx + 0x401a5e]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401411], eax
lea eax, [ebx + 0x401a6d]
push eax
push dword [ebx + fcn.00401000]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401415], eax
lea eax, [ebx + 0x401435]
push eax
call dword [ebx + 0x401265]
mov dword [ebx + 0x401004], eax
lea eax, [ebx + 0x4014bd]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40127d], eax
lea eax, [ebx + 0x401617]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012e1], eax
lea eax, [ebx + 0x401623]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012e5], eax
lea eax, [ebx + 0x401633]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4012e9], eax
lea eax, [ebx + 0x401646]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012ed], eax
lea eax, [ebx + 0x401657]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012f1], eax
lea eax, [ebx + 0x40160b]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004012dd], eax
lea eax, [ebx + 0x4016bd]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401309], eax
lea eax, [ebx + 0x40183c]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013a1], eax
lea eax, [ebx + 0x40184d]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013a5], eax
lea eax, [ebx + 0x40185d]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013a9], eax
lea eax, [ebx + 0x40186c]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013ad], eax
lea eax, [ebx + 0x401887]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013b1], eax
lea eax, [ebx + 0x4018b5]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013c1], eax
lea eax, [ebx + 0x4018c7]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013c5], eax
lea eax, [ebx + 0x4018db]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013c9], eax
lea eax, [ebx + 0x4018ea]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013cd], eax
lea eax, [ebx + 0x4018fb]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013d1], eax
lea eax, [ebx + 0x401907]
push eax
push dword [ebx + 0x401004]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013d5], eax
lea eax, [ebx + 0x40143c]
push eax
call dword [ebx + 0x401265]
mov dword [ebx + 0x401008], eax
lea eax, [ebx + 0x401770]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401335], eax
lea eax, [ebx + 0x40177a]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401339], eax
lea eax, [ebx + 0x401785]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40133d], eax
lea eax, [ebx + 0x401794]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401341], eax
lea eax, [ebx + 0x40179f]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401345], eax
lea eax, [ebx + 0x4017ab]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401349], eax
lea eax, [ebx + 0x4017bb]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40134d], eax
lea eax, [ebx + 0x4017fb]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40136d], eax
lea eax, [ebx + 0x4017c2]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401351], eax
lea eax, [ebx + 0x4017c7]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401355], eax
lea eax, [ebx + 0x4017cc]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401359], eax
lea eax, [ebx + 0x4017d3]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40135d], eax
lea eax, [ebx + 0x4017d9]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401361], eax
lea eax, [ebx + 0x4017e1]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + sym.imp.KERNEL32.dll_VirtualFree], eax
lea eax, [ebx + 0x401a39]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401405], eax
lea eax, [ebx + 0x4017ed]
push eax
push dword [ebx + 0x401008]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401369], eax
lea eax, [ebx + 0x401447]
push eax
call dword [ebx + 0x401265]
mov dword [ebx + 0x40100c], eax
lea eax, [ebx + 0x40192a]
push eax
push dword [ebx + 0x40100c]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x4013dd], eax
lea eax, [ebx + 0x401453]
push eax
call dword [ebx + 0x401265]
mov dword [ebx + 0x401010], eax
lea eax, [ebx + 0x401981]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401379], eax
lea eax, [ebx + 0x40198f]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x40137d], eax
lea eax, [ebx + 0x401975]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401375], eax
lea eax, [ebx + 0x401969]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + 0x401371], eax
lea eax, [ebx + 0x4019a0]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401381], eax
lea eax, [ebx + 0x4019b4]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401385], eax
lea eax, [ebx + 0x4019c5]
push eax
push dword [ebx + 0x401010]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.00401389], eax
lea eax, [ebx + 0x40145f]
push eax
call dword [ebx + 0x401265]
mov dword [ebx + 0x401014], eax
lea eax, [ebx + 0x4019d6]
push eax
push dword [ebx + 0x401014]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013f1], eax
lea eax, [ebx + 0x4019e7]
push eax
push dword [ebx + 0x401014]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013f5], eax
lea eax, [ebx + 0x4019fd]
push eax
push dword [ebx + 0x401014]
call dword [ebx + fcn.00401261]
mov dword [ebx + fcn.004013f9], eax
call fcn.0047721f
or eax, eax
jne 0x477faa
jmp 0x4780d0
call dword [ebx + 0x40131d]
mov dword [ebx + 0x401024], eax
lea ecx, [ebx + 0x401028]
lea eax, [ebx + 0x401242]
push ecx
push 0
push eax
call fcn.00476deb
or eax, eax
je 0x477fe5
cmp eax, dword [ebx + 0x401024]
jne 0x477fdb
jmp 0x477fea
mov dword [ebx + 0x401020], eax
jmp 0x477ff4
jmp 0x4780d0
call fcn.004772a7
jmp 0x4780d0
lea eax, [ebx + 0x401028]
push 0x104
push eax
call dword [ebx + 0x401325]
lea eax, [ebx + 0x401028]
lea ecx, [ebx + 0x401230]
push ecx
push eax
call dword [ebx + fcn.00401279]
lea ecx, [ebx + 0x401242]
lea eax, [ebx + 0x401028]
push ecx
push eax
call dword [ebx + fcn.00401279]
lea eax, [ebx + 0x401028]
push eax
call fcn.0047708a
or eax, eax
jne 0x4780d0
lea eax, [ebx + 0x401028]
lea ecx, [ebx + 0x40124f]
push 0
push ecx
push eax
call dword [ebx + 0x4013e1]
lea eax, [ebx + 0x40124f]
push eax
call fcn.00476c54
lea eax, [ebx + 0x40112c]
push eax
push 0x104
call dword [ebx + 0x401329]
lea eax, [ebx + 0x40112c]
lea ecx, [ebx + 0x40125f]
lea edx, [ebx + 0x401c5a]
push edx
push 0
push ecx
push eax
call dword [ebx + 0x401331]
lea eax, [ebx + 0x401028]
lea ecx, [ebx + 0x401c5a]
push 1
push ecx
push eax
call dword [ebx + 0x40132d]
lea eax, [ebx + 0x401c5a]
push 4
push 0
push eax
call dword [ebx + 0x40132d]
lea eax, [ebx + 0x40124f]
lea ecx, [ebx + 0x401028]
push 3
push ecx
push eax
call dword [ebx + 0x40132d]
jmp 0x401b92