Function at 0x4028b0
Capabilities:
Accept command line arguments
Acquire debug privileges

Disassembly:
push 0xffffffffffffffff
push 0x4517fe
mov eax, dword fs:[0]
push eax
sub esp, 0x160
mov eax, dword [0x466d98]
xor eax, esp
mov dword [esp + 0x15c], eax
push ebx
push esi
push edi
mov eax, dword [0x466d98]
xor eax, esp
push eax
lea eax, [esp + 0x170]
mov dword fs:[0], eax
push 1
push 2
lea ecx, [esp + 0x3c]
call fcn.00404370
lea eax, [esp + 0x34]
push 0x457524
xor ebx, ebx
push eax
mov dword [esp + 0x180], ebx
call fcn.004073a0
add esp, 8
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x38]
call fcn.004044d0
mov edi, 0x10
mov byte [esp + 0x178], 1
cmp dword [eax + 0x18], edi
jb 0x402937
mov eax, dword [eax + 4]
jmp 0x40293a
add eax, 4
push eax
push str.CClientUpAgent::ExcuteUndateAgentCmdLine
push 0x6b
push str..ClientUpAgent.cpp
push 0x2002
call fcn.004075e0
mov ecx, eax
call fcn.0041f2e0
cmp dword [esp + 0x30], edi
jb 0x40296b
mov edx, dword [esp + 0x1c]
push edx
call fcn.00433d63
add esp, 4
lea ecx, [esp + 0x80]
mov dword [esp + 0x178], 0xffffffff
call fcn.00404450
lea eax, [esp + 0x80]
push eax
mov dword [esp + 0x84], vtable.std::ios_base.0
call fcn.004339e9
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov ecx, eax
mov dword [esp + 0x14c], 0xf
mov dword [esp + 0x148], ebx
mov byte [esp + 0x138], bl
lea esi, [ecx + 1]
mov dl, byte [ecx]
add ecx, 1
cmp dl, bl
jne 0x4029c1
sub ecx, esi
push ecx
push eax
lea ecx, [esp + 0x13c]
call fcn.00405b30
push 4
push ebx
push str.__t_r_n
lea ecx, [esp + 0x140]
mov dword [esp + 0x184], 2
call fcn.00407d20
push eax
push ebx
lea ecx, [esp + 0x13c]
call fcn.00405c00
cmp dword [esp + 0x148], ebx
je 0x402d4c
push ebx
mov esi, 0xf
push 0x45734d
lea ecx, [esp + 0x158]
mov dword [esp + 0x170], esi
mov dword [esp + 0x16c], ebx
mov byte [esp + 0x15c], bl
call fcn.00405b30
mov byte [esp + 0x178], 3
cmp dword [esp + 0x14c], edi
mov eax, dword [esp + 0x138]
jae 0x402a5f
lea eax, [esp + 0x138]
cmp byte [eax], 0x22
push 1
lea edx, [esp + 0x18]
lea ecx, [esp + 0x138]
jne 0x402bd2
push 1
push edx
mov byte [esp + 0x20], 0x22
call fcn.00404c50
cmp eax, 0xffffffff
jne 0x402b80
push 1
push 2
lea ecx, [esp + 0x3c]
call fcn.00404370
lea eax, [esp + 0x134]
push eax
lea ecx, [esp + 0x38]
push ecx
mov byte [esp + 0x180], 4
call fcn.00407680
add esp, 8
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x38]
call fcn.004044d0
mov byte [esp + 0x178], 5
cmp dword [eax + 0x18], edi
jb 0x402ad5
mov eax, dword [eax + 4]
jmp 0x402ad8
add eax, 4
push eax
push str.CClientUpAgent::ExcuteUndateAgentCmdLine
push 0x7b
push str..ClientUpAgent.cpp
push 0xf0000000
call fcn.004075e0
mov ecx, eax
call fcn.0041f2e0
cmp dword [esp + 0x30], edi
jb 0x402b09
mov eax, dword [esp + 0x1c]
push eax
call fcn.00433d63
add esp, 4
lea ecx, [esp + 0x80]
mov byte [esp + 0x178], 3
call fcn.00404450
lea ecx, [esp + 0x80]
push ecx
mov dword [esp + 0x84], vtable.std::ios_base.0
call fcn.004339e9
add esp, 4
cmp dword [esp + 0x168], edi
jb 0x402b51
mov edx, dword [esp + 0x154]
push edx
call fcn.00433d63
add esp, 4
cmp dword [esp + 0x14c], edi
mov dword [esp + 0x168], esi
mov dword [esp + 0x164], ebx
mov byte [esp + 0x154], bl
jb 0x402e5a
mov eax, dword [esp + 0x138]
push eax
jmp 0x402e52
add eax, 1
cmp dword [esp + 0x148], eax
jbe 0x402c2d
push 0xffffffffffffffff
add eax, 1
push eax
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x140]
call fcn.00403e30
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x15c]
mov byte [esp + 0x184], 6
call fcn.00404b70
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 3
call fcn.00403ce0
jmp 0x402c2d
push ebx
push edx
mov byte [esp + 0x20], 0x20
call fcn.00404c50
cmp eax, 0xffffffff
je 0x402c2d
push 0xffffffffffffffff
add eax, 1
push eax
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x140]
call fcn.00403e30
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x15c]
mov byte [esp + 0x184], 7
call fcn.00404b70
mov byte [esp + 0x178], 3
cmp dword [esp + 0x30], edi
jb 0x402c2d
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00433d63
add esp, 4
cmp dword [esp + 0x168], edi
mov eax, dword [esp + 0x154]
jae 0x402c44
lea eax, [esp + 0x154]
push 0x45756c
push eax
call fcn.00434220
add esp, 8
test eax, eax
jne 0x402e13
push 1
push str.SeDebugPrivilege
call fcn.0041b0d0
add esp, 8
test eax, eax
jne 0x402d66
push 1
push 2
lea ecx, [esp + 0x3c]
call fcn.00404370
lea edx, [esp + 0x34]
push str.SeDebugPrivilege
push edx
mov byte [esp + 0x180], 8
call fcn.004073a0
add esp, 8
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x38]
call fcn.004044d0
mov byte [esp + 0x178], 9
cmp dword [eax + 0x18], edi
jb 0x402cb8
mov eax, dword [eax + 4]
jmp 0x402cbb
add eax, 4
push eax
push str.CClientUpAgent::ExcuteUndateAgentCmdLine
push 0x91
push str..ClientUpAgent.cpp
push 0xf0000000
call fcn.004075e0
mov ecx, eax
call fcn.0041f2e0
cmp dword [esp + 0x30], edi
jb 0x402cef
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00433d63
add esp, 4
lea ecx, [esp + 0x80]
mov byte [esp + 0x178], 3
call fcn.00404450
lea edx, [esp + 0x80]
push edx
mov dword [esp + 0x84], vtable.std::ios_base.0
call fcn.004339e9
add esp, 4
cmp dword [esp + 0x168], edi
jb 0x402d37
mov eax, dword [esp + 0x154]
push eax
call fcn.00433d63
add esp, 4
mov dword [esp + 0x168], esi
mov dword [esp + 0x164], ebx
mov byte [esp + 0x154], bl
cmp dword [esp + 0x14c], edi
jb 0x402e5a
mov ecx, dword [esp + 0x138]
push ecx
jmp 0x402e52
call fcn.004167c0
test eax, eax
jne 0x402e13
push 1
push 2
lea ecx, [esp + 0xbc]
call fcn.00404370
mov byte [esp + 0x178], 0xa
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
lea edx, [esp + 0xbc]
push 0x457584
push edx
call fcn.004073a0
add esp, 0xc
mov ecx, eax
call fcn.00403e80
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0xb8]
call fcn.004044d0
mov byte [esp + 0x178], 0xb
cmp dword [eax + 0x18], edi
jb 0x402dd2
mov eax, dword [eax + 4]
jmp 0x402dd5
add eax, 4
push eax
push str.CClientUpAgent::ExcuteUndateAgentCmdLine
push 0x98
push str..ClientUpAgent.cpp
push 0xf0000000
call fcn.004075e0
mov ecx, eax
call fcn.0041f2e0
lea ecx, [esp + 0x18]
call fcn.00403ce0
lea ecx, [esp + 0xb4]
mov byte [esp + 0x178], 3
call fcn.00401b40
cmp dword [esp + 0x168], edi
jb 0x402e2c
mov ecx, dword [esp + 0x154]
push ecx
call fcn.00433d63
add esp, 4
cmp dword [esp + 0x14c], edi
mov dword [esp + 0x168], esi
mov dword [esp + 0x164], ebx
mov byte [esp + 0x154], bl
jb 0x402e5a
mov edx, dword [esp + 0x138]
push edx
call fcn.00433d63
add esp, 4
mov ecx, dword [esp + 0x170]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x15c]
xor ecx, esp
call fcn.00433d68
add esp, 0x16c
ret