Function at 0x40cf94
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x12c
mov eax, dword [0x4297d0]
add eax, 0x21ab730b
mov dword [0x429548], eax
call dword [sym.imp.USER32.dll_GetShellWindow]
xor eax, 0xa428f37
mov dword [0x4297d0], eax
imul eax, dword [0x429548], 0x67eca908
mov dword [0x429548], eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
or eax, 0x89351154
mov dword [0x4297d0], eax
mov dword [esp], str.IPsec_DoS_Protection_failed_to_look_up_state.
call fcn.00411870
mov eax, dword [0x4297d0]
imul edx, eax, 0x6685d8d8
imul eax, eax, 0xeb79fdce
mov dword [0x429548], edx
mov dword [0x4294a8], eax
mov dword [esp], eax
mov dword [esp + 8], str.Insufficient_quota_exists_to_complete_the_operation
mov dword [esp + 4], str.IPsec_DoS_Protection_failed_to_look_up_state.
call fcn.004145fc
mov eax, dword [0x429548]
lea edx, [eax + 0x4d2fba75]
add eax, 0x7854f41a
mov dword [0x4297d0], edx
mov dword [0x4294a8], eax
call fcn.00414fe4
call fcn.004104bc
mov eax, dword [0x4294a8]
mov edx, eax
or eax, 0x9fbfe2f6
mov dword [0x4294a8], eax
mov eax, dword [0x41611c]
or edx, 0x1b9d6054
mov dword [0x4297d0], edx
cmp dword [eax + 0x54], 0
jne 0x40d075
mov edx, dword fs:[0x18]
mov dword [eax + 0x54], edx
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0xc]
lea esi, [eax + 0xc]
cmp ebx, esi
je 0x40d1f7
mov eax, dword [0x429548]
lea edi, [ebp - 0x11c]
add eax, 0x21b3dc91
mov dword [0x4294a8], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [esp + 8], 0x104
mov eax, dword [ebx + 0x30]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.004152e0
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.0040c828
cmp eax, dword [ebp + 8]
je 0x40d0e1
cmp dword [ebp + 8], 0
jne 0x40d1f0
xor eax, eax
cmp word [eax + str.Insufficient_quota_exists_to_complete_the_operation], 0
je 0x40d10c
add eax, 2
cmp eax, 0x286
jne 0x40d0e3
mov eax, dword [0x4297d0]
and eax, 0x87628fc5
mov dword [0x4294a8], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov eax, dword [0x4294a8]
and dword [0x429548], 0xc67c000
sub eax, 0x2440bd97
mov dword [0x4297d0], eax
call fcn.00410174
xor dword [0x429548], 0x5e8dced
sub dword [0x4294a8], 0x7676f2e3
mov dword [esp], str.SdbGetNextChild
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edx
mov eax, dword [0x429548]
or dword [0x4294a8], 0xd4ac03b2
sub eax, 0x7fe69ef5
cmp byte [str.IPsec_DoS_Protection_failed_to_look_up_state.], 0
mov dword [0x4297d0], eax
je 0x40d182
call fcn.00413eac
mov eax, dword [0x4294a8]
or eax, 0xc9243487
mov dword [0x4297d0], eax
call fcn.00411544
mov eax, dword [0x4297d0]
mov esi, str.IPsec_DoS_Protection_failed_to_look_up_state.
mov edx, dword [0x429548]
mov edi, 0x374
and edx, 0xa1f07080
movzx ecx, byte [esi]
inc esi
test cl, cl
je 0x40d1b4
add edi, ecx
cmp edi, 0x278
jbe 0x40d1a2
imul edx, edx, 0x59aa1bde
add eax, 0x555b136e
mov dword [0x429548], eax
mov dword [0x4294a8], edx
call fcn.00411544
xor eax, eax
mov dword [esp + 8], 0x104
mov dword [esp + 4], eax
lea eax, [ebp - 0x11c]
mov dword [esp], eax
call fcn.0040d25c
mov eax, dword [ebx + 0x18]
jmp 0x40d1f9
mov ebx, dword [ebx]
jmp 0x40d084
xor eax, eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret