Function at 0x406c91
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push esi
mov esi, dword [ebp + 8]
push edi
push 8
pop ecx
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea ecx, [ebp - 4]
push ecx
push eax
mov dword [ebp - 0x10], eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0xc], eax
test eax, eax
jne 0x406cf7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x406cde
and esi, 0xffff
or esi, 0x80070000
test esi, esi
js 0x406ce5
mov esi, 0x80004005
push 0x403bb0
push esi
call fcn.004088ec
pop ecx
pop ecx
jmp 0x406f74
push ebx
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 8], ebx
cmp dword [ebp - 4], ebx
jle 0x406eff
mov edi, dword [sym.imp.KERNEL32.dll_CompareStringW]
mov ecx, dword [ebp - 0xc]
lea esi, [ecx + eax*4]
mov eax, dword [esi]
movzx ecx, word [eax]
cmp ecx, 0x2d
je 0x406d28
cmp ecx, 0x2f
jne 0x406eec
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 3
jle 0x406d71
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403bcc
push 2
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x406d71
mov eax, dword [esi]
mov ecx, dword [ebp + 8]
add eax, 6
push eax
xor eax, eax
call fcn.00408c08
mov esi, eax
test esi, esi
jns 0x406eec
push 0x403bd4
jmp 0x406f16
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 3
jle 0x406da4
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403bf0
push 2
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x406da4
mov eax, dword [ebp + 8]
mov dword [eax + 0x14], ebx
mov ecx, dword [esi]
add ecx, 6
jmp 0x406dd5
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 9
jle 0x406df4
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403c20
push 8
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x406df4
mov eax, dword [ebp + 8]
mov dword [eax + 0x14], ebx
mov ecx, dword [esi]
add ecx, 0x12
push ecx
lea ecx, [eax + 8]
xor eax, eax
call fcn.00408c08
mov esi, eax
test esi, esi
jns 0x406eec
push 0x403bf8
jmp 0x406f16
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 3
jle 0x406e41
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403c34
push 2
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x406e41
mov eax, dword [esi]
mov ecx, dword [ebp + 8]
add eax, 6
push eax
add ecx, 4
xor eax, eax
call fcn.00408c08
mov esi, eax
test esi, esi
jns 0x406eec
push 0x4034b0
jmp 0x406f16
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 2
jne 0x406e66
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403c3c
push ebx
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
je 0x406e8c
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 8
jne 0x406e94
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403c40
push 7
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x406e94
mov eax, dword [ebp + 8]
mov dword [eax + 0x14], ebx
jmp 0x406eec
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 2
jne 0x406ebe
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403c50
push ebx
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x406ebe
mov eax, dword [ebp + 8]
jmp 0x406ee9
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 2
jne 0x406eec
mov eax, dword [esi]
push 0xffffffffffffffff
push 0x403c54
push ebx
add eax, 2
push eax
push ebx
push 0x7f
call edi
cmp eax, 2
jne 0x406eec
mov eax, dword [ebp + 8]
mov dword [eax + 0x18], ebx
mov dword [eax + 0x1c], ebx
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp eax, dword [ebp - 4]
jl 0x406d0f
mov esi, dword [ebp + 8]
cmp dword [esi], 0
jne 0x406f23
mov eax, esi
call fcn.00409ba5
mov esi, eax
test esi, esi
jns 0x406f20
push 0x403c58
push esi
call fcn.004088ec
pop ecx
pop ecx
jmp 0x406f6a
mov esi, dword [ebp + 8]
mov ecx, dword [ebp - 0x10]
xor edx, edx
movzx eax, word [ecx]
cmp eax, 0x22
jne 0x406f41
xor eax, eax
test edx, edx
sete al
push 0x22
add ecx, 2
mov edx, eax
pop eax
jmp 0x406f49
add ecx, 2
test ax, ax
je 0x406f61
test edx, edx
jne 0x406f28
cmp ax, 0x20
je 0x406f59
cmp ax, 9
jne 0x406f28
add ecx, 0xfffffffe
mov dword [esi + 0xc], ecx
jmp 0x406f68
mov dword [esi + 0xc], 0x403c7c
xor esi, esi
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_LocalFree]
pop ebx
pop edi
mov eax, esi
pop esi
leave
ret 4