Function at 0x40b6da
Capabilities:
Accept command line arguments

Disassembly:
push 0x98
mov eax, 0x434f0a
call fcn.00411966
mov edi, ecx
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x94], edi
xor eax, eax
mov byte [ebp - 0x80], al
mov dword [edi], vtable.NGUtils::CCommandLine.0
lea esi, [edi + 4]
mov dword [ebp - 0x8c], esi
mov dword [esi], eax
mov dword [esi + 4], eax
call fcn.0040be04
mov dword [esi], eax
mov dword [ebp - 4], 2
lea ecx, [edi + 0xc]
call fcn.00402a40
mov byte [ebp - 4], 3
lea ecx, [edi + 0x24]
call fcn.00402a40
mov byte [ebp - 4], 4
lea ecx, [edi + 0x3c]
call fcn.00402a40
push 5
pop ebx
mov byte [ebp - 4], bl
mov ecx, 0x44ba08
mov eax, dword [vtable.NGWinApi::IKernelApi.0]
call dword [eax + 0x90]
mov dword [ebp - 0x84], eax
and dword [ebp - 0x90], 0
lea ecx, [ebp - 0x90]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x40b9b9
push dword [eax]
lea ecx, [edi + 0x24]
call fcn.00402990
xor esi, esi
inc esi
cmp dword [ebp - 0x90], esi
jle 0x40b7ed
mov eax, dword [ebp - 0x98]
push dword [eax + 4]
lea ecx, [edi + 0xc]
call fcn.00402990
push dword [ebp - 0x84]
lea ecx, [edi + 0x3c]
call fcn.00402990
push ecx
lea eax, [edi + 0xc]
push eax
lea ecx, [edi + 0x3c]
call fcn.0040bc75
cmp eax, 0xffffffff
je 0x40b7ed
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [edi + 0x3c]
call fcn.0040b2f4
mov byte [ebp - 4], 6
push eax
lea ecx, [edi + 0x3c]
call fcn.004034e0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x2c]
call fcn.00403720
xor edx, edx
mov ecx, edx
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x88], esi
cmp esi, dword [ebp - 0x90]
jge 0x40b9ad
mov eax, dword [ebp - 0x98]
mov edi, dword [eax + esi*4]
movzx eax, word [edi]
cmp eax, 0x2f
je 0x40b85f
cmp eax, 0x2d
je 0x40b85f
test ecx, ecx
je 0x40b99c
push ecx
lea ecx, [ebp - 0x44]
call fcn.00403eb0
mov byte [ebp - 4], 0x10
push edi
lea eax, [ebp - 0x44]
push eax
mov edi, dword [ebp - 0x78]
lea ecx, [edi + 4]
call fcn.0040bc19
mov ecx, eax
call fcn.00402990
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x44]
call fcn.00403720
xor edx, edx
mov ecx, edx
mov dword [ebp - 0x7c], ecx
jmp 0x40b9a7
add edi, 2
mov ecx, edi
lea eax, [ecx + 2]
mov dword [ebp - 0x84], eax
mov ax, word [ecx]
add ecx, 2
cmp ax, dx
jne 0x40b86d
sub ecx, dword [ebp - 0x84]
sar ecx, 1
je 0x40b9a1
mov eax, edi
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x84], eax
cmp byte [ebp - 0x80], 0
je 0x40b95e
push 0x3d
push edi
call fcn.00413a78
pop ecx
pop ecx
mov dword [ebp - 0x8c], eax
test eax, eax
je 0x40b901
xor ecx, ecx
mov word [eax], cx
mov byte [ebp - 4], 7
push edi
lea ecx, [ebp - 0x5c]
call fcn.00403eb0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x8c]
add eax, 2
push eax
lea eax, [ebp - 0x5c]
push eax
mov edi, dword [ebp - 0x78]
lea ecx, [edi + 4]
call fcn.0040bc19
mov ecx, eax
call fcn.00402990
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5c]
call fcn.00403720
mov dword [ebp - 4], ebx
xor edx, edx
jmp 0x40b9a4
mov byte [ebp - 4], 0xa
push edi
lea ecx, [ebp - 0x74]
call fcn.00403eb0
mov byte [ebp - 4], 0xb
push 0x442afc
lea eax, [ebp - 0x74]
push eax
mov edi, dword [ebp - 0x78]
lea ecx, [edi + 4]
call fcn.0040bc19
mov ecx, eax
call fcn.00402990
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x74]
jmp 0x40b8ec
mov byte [ebp - 4], 0xd
push edi
lea ecx, [ebp - 0x2c]
call fcn.00403eb0
mov byte [ebp - 4], 0xe
push 0x442afc
lea eax, [ebp - 0x2c]
push eax
mov edi, dword [ebp - 0x78]
lea ecx, [edi + 4]
call fcn.0040bc19
mov ecx, eax
call fcn.00402990
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2c]
jmp 0x40b8ec
mov edi, dword [ebp - 0x78]
jmp 0x40b9a7
mov edi, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x7c]
inc esi
jmp 0x40b7f4
push dword [ebp - 0x98]
call dword [sym.imp.KERNEL32.dll_LocalFree]
or dword [ebp - 4], 0xffffffff
mov eax, edi
call fcn.004118b3
ret 8