Function at 0x406fa0
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push esi
mov esi, dword [ebp + 8]
push edi
push 8
pop ecx
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea ecx, [ebp - 4]
push ecx
push eax
mov dword [ebp - 0x10], eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0xc], eax
test eax, eax
jne 0x407006
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x406fed
and esi, 0xffff
or esi, 0x80070000
test esi, esi
js 0x406ff4
mov esi, 0x80004005
push 0x403e70
push esi
call fcn.00408c66
pop ecx
pop ecx
jmp 0x407283
push ebx
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 8], ebx
cmp dword [ebp - 4], ebx
jle 0x40720e
mov edi, dword [sym.imp.KERNEL32.dll_CompareStringW]
mov ecx, dword [ebp - 0xc]
lea esi, [ecx + eax*4]
mov eax, dword [esi]
movzx ecx, word [eax]
cmp ecx, 0x2d
je 0x407037
cmp ecx, 0x2f
jne 0x4071fb
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 3
jle 0x407080
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403e8c
push 2
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x407080
mov eax, dword [esi]
mov ecx, dword [ebp + 8]
add eax, 6
push eax
xor eax, eax
call fcn.00408f9b
mov esi, eax
test esi, esi
jns 0x4071fb
push 0x403e94
jmp 0x407225
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 3
jle 0x4070b3
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403eb0
push 2
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x4070b3
mov eax, dword [ebp + 8]
mov dword [eax + 0x14], ebx
mov ecx, dword [esi]
add ecx, 6
jmp 0x4070e4
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 9
jle 0x407103
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403ee0
push 8
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x407103
mov eax, dword [ebp + 8]
mov dword [eax + 0x14], ebx
mov ecx, dword [esi]
add ecx, 0x12
push ecx
lea ecx, [eax + 8]
xor eax, eax
call fcn.00408f9b
mov esi, eax
test esi, esi
jns 0x4071fb
push 0x403eb8
jmp 0x407225
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 3
jle 0x407150
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403ef4
push 2
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x407150
mov eax, dword [esi]
mov ecx, dword [ebp + 8]
add eax, 6
push eax
add ecx, 4
xor eax, eax
call fcn.00408f9b
mov esi, eax
test esi, esi
jns 0x4071fb
push 0x403770
jmp 0x407225
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 2
jne 0x407175
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403efc
push ebx
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
je 0x40719b
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 8
jne 0x4071a3
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403f00
push 7
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x4071a3
mov eax, dword [ebp + 8]
mov dword [eax + 0x14], ebx
jmp 0x4071fb
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 2
jne 0x4071cd
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403f10
push ebx
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x4071cd
mov eax, dword [ebp + 8]
jmp 0x4071f8
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 2
jne 0x4071fb
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403f14
push ebx
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x4071fb
mov eax, dword [ebp + 8]
mov dword [eax + 0x18], ebx
mov dword [eax + 0x1c], ebx
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp eax, dword [ebp - 4]
jl 0x40701e
mov esi, dword [ebp + 8]
cmp dword [esi], 0
jne 0x407232
mov eax, esi
call fcn.00409fba
mov esi, eax
test esi, esi
jns 0x40722f
push 0x403f18
push esi
call fcn.00408c66
pop ecx
pop ecx
jmp 0x407279
mov esi, dword [ebp + 8]
mov ecx, dword [ebp - 0x10]
xor edx, edx
movzx eax, word [ecx]
cmp eax, 0x22
jne 0x407250
xor eax, eax
test edx, edx
sete al
push 0x22
add ecx, 2
mov edx, eax
pop eax
jmp 0x407258
add ecx, 2
test ax, ax
je 0x407270
test edx, edx
jne 0x407237
cmp ax, 0x20
je 0x407268
cmp ax, 9
jne 0x407237
add ecx, 0xfffffffe
mov dword [esi + 0xc], ecx
jmp 0x407277
mov dword [esi + 0xc], 0x403f3c
xor esi, esi
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_LocalFree]
pop ebx
pop edi
mov eax, esi
pop esi
leave
ret 4