Function at 0x424d30
Capabilities:
Accept command line arguments
Shutdown system

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x20c
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, eax
push esi
push str.rav.exe_enter_WinMain_Proc_In_Thread__x
push 8
push 0x40
mov dword [esp + 0x1c], esi
call fcn.00410430
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
push str.rav.exe_Run_With_Command___s
push 8
push 0x40
call fcn.00410430
push str.RavMain
mov ecx, esi
call fcn.0041a9c0
add esp, 0x14
call fcn.0041f1a0
test eax, eax
je 0x424e56
push 0x454
call fcn.0042ab58
add esp, 4
test eax, eax
je 0x424da8
mov ecx, eax
call fcn.0041ed10
jmp 0x424daa
xor eax, eax
test eax, eax
mov dword [0x447fe8], eax
je 0x424e56
xor eax, eax
mov word [esp + 0x10], 0
mov ecx, 0x81
lea edi, [esp + 0x12]
rep stosd dword es:[edi], eax
push 0
stosw word es:[edi], ax
lea eax, [esp + 0x14]
push 0x104
push eax
call fcn.0040c970
lea ecx, [esp + 0x1c]
push ecx
call fcn.0041a570
call fcn.0041cd10
mov esi, dword [0x447fe8]
lea edx, [esi + 0x40]
push edx
mov edi, eax
call fcn.0041ad10
add esp, 0x14
mov ecx, esi
mov dword [esi + 0x38], eax
call fcn.0040a5a0
mov eax, dword [0x447fe8]
cmp dword [eax], 0x4014
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
jne 0x424e64
push 0
push 0
push 0
mov esi, str.94CCE0E7_4FBE_47c3_8280_6F822A1346B2
call fcn.0041cf10
add esp, 0xc
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x424e61
mov ecx, dword [esp + 0xc]
push ecx
push str.Already_Run_Ravssave.exe_Proc_In_Thread__x
push 8
push 1
call fcn.00410430
add esp, 0x10
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push esi
call ebx
mov edx, dword [0x447fe8]
mov eax, dword [edx + 0x10]
xor esi, esi
test eax, eax
je 0x424ea2
call fcn.00423840
mov esi, eax
test esi, esi
jne 0x424ea2
mov eax, dword [esp + 0xc]
push eax
push str.Already_Run_Rav.exe_Proc_In_Thread__x
push 8
push 0x40
call fcn.00410430
mov eax, 0xb
add esp, 0x10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcA]
push 0x4ff
call fcn.00406780
mov ecx, dword [ebp + 8]
add esp, 4
push 0
push ecx
push 0
mov ecx, 0x447ff0
call fcn.0041bd50
mov edx, dword [0x447fe8]
mov eax, dword [edx + 4]
and al, 1
neg al
sbb eax, eax
and eax, 0xfffffff6
add eax, 0xa
push eax
mov eax, dword [ebp + 0x10]
push eax
call fcn.0041fc80
add esp, 8
mov ecx, 0x447ff0
mov edi, eax
call fcn.0041f820
call dword [sym.imp.ole32.dll_CoUninitialize]
test esi, esi
je 0x424f1e
cmp esi, 0xffffffff
je 0x424f1e
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
call ebx
mov ecx, dword [0x447fe8]
mov eax, dword [ecx + 0x18]
sub eax, 2
je 0x424f36
dec eax
jne 0x424f52
call fcn.00424d00
jmp 0x424f52
call fcn.00424be0
test eax, eax
je 0x424f48
call fcn.0041af50
test eax, eax
je 0x424f52
push 0
push 2
call dword [sym.imp.USER32.dll_ExitWindowsEx]
mov ecx, dword [0x447fe8]
test ecx, ecx
je 0x424f76
mov esi, ecx
call fcn.0041f170
push esi
call fcn.00429695
add esp, 4
mov dword [0x447fe8], 0
mov edx, dword [esp + 0xc]
push edx
push str.rav.exe_outer_WinMain_Proc_In_Thread__x
push 8
push 0x40
call fcn.00410430
add esp, 0x10
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10