Function at 0x46b422
Capabilities:
Accept command line arguments

Disassembly:
sub esp, 0x24
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x1c]
xor edi, edi
push eax
mov esi, edi
push ecx
mov dword [esp + 0x30], esi
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x18], ebx
mov ebp, edi
mov dword [esp + 0x20], ebp
mov dword [esp + 0x14], edi
test ebx, ebx
je 0x46b713
cmp dword [esp + 0x1c], esi
jle 0x46b713
push 0x4e93ec
push dword [ebx]
call fcn.0049e790
mov esi, eax
mov dword [esp + 0x2c], esi
pop ecx
pop ecx
test esi, esi
je 0x46b4d8
sub eax, dword [ebx]
sar eax, 1
lea eax, [eax*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebp, eax
mov dword [esp + 0x20], ebp
test ebp, ebp
je 0x46b4de
mov ebx, dword [ebx]
lea ecx, [ebx + 2]
mov ax, word [ebx]
add ebx, 2
cmp ax, di
jne 0x46b49e
sub ebx, ecx
mov ecx, dword [esp + 0x18]
sar ebx, 1
sub esi, dword [ecx]
mov eax, esi
and eax, 0xfffffffe
push eax
push dword [ecx]
push ebp
call fcn.0049fa90
mov ecx, dword [esp + 0x30]
lea eax, [esi + 4]
sar eax, 1
add esp, 0xc
add ecx, 4
cmp eax, ebx
sbb eax, eax
and eax, ecx
jmp 0x46b4da
mov eax, dword [ebx]
mov dword [esp + 0x10], eax
mov ebx, edi
mov eax, edi
push 0x19
mov dword [esp + 0x28], ebx
pop ecx
movzx edx, bx
cmp bx, cx
jae 0x46b5b9
mov esi, edx
test ebp, ebp
je 0x46b517
mov eax, dword [esi*4 + 0x4d08c0]
push dword [eax]
push ebp
call fcn.004a65ee
pop ecx
pop ecx
test eax, eax
je 0x46b517
mov eax, edi
jmp 0x46b5a9
xor eax, eax
inc eax
cmp dword [esp + 0x10], 0
mov dword [esp + 0x30], eax
je 0x46b5a9
cmp dword [esp + 0x14], 0
mov dword [esp + 0x2c], edi
jne 0x46b5a9
mov ebp, dword [esp + 0x10]
mov ebx, dword [esp + 0x18]
mov ecx, dword [esi*4 + 0x4d08c0]
cmp di, word [ecx + 0xc]
jae 0x46b59b
movzx eax, di
imul edx, eax, 0xc
mov eax, dword [ecx + 0x10]
mov dword [esp + 0x2c], edx
push dword [eax + edx + 4]
push ebp
call fcn.004a65ee
pop ecx
pop ecx
xor ecx, ecx
test eax, eax
sete cl
mov dword [esp + 0x14], ecx
test eax, eax
jne 0x46b596
mov eax, dword [esi*4 + 0x4d08c0]
mov ecx, dword [eax + 0x10]
lea eax, [ebx + 4]
push eax
mov eax, dword [esp + 0x20]
dec eax
push eax
mov eax, dword [esp + 0x34]
call dword [ecx + eax]
pop ecx
pop ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x28], eax
inc edi
test ecx, ecx
je 0x46b53c
mov ebp, dword [esp + 0x20]
xor edi, edi
mov ebx, dword [esp + 0x24]
mov eax, dword [esp + 0x30]
inc ebx
mov dword [esp + 0x24], ebx
push 0x19
pop ecx
test eax, eax
je 0x46b4e9
test eax, eax
jne 0x46b61c
push ebp
push str.ERROR_mimikatz_doLocal_____s__module_not_found___n
call fcn.00409cda
pop ecx
pop ecx
push 0x19
mov esi, 0x4d08c0
pop edi
mov eax, dword [esi]
push dword [eax]
push str._n_16s
call fcn.00409cda
mov eax, dword [esi]
pop ecx
pop ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x46b5fa
push ecx
push str.______s
call fcn.00409cda
mov eax, dword [esi]
pop ecx
pop ecx
cmp dword [eax + 8], 0
je 0x46b60f
push dword [eax + 8]
push str.____s_
call fcn.00409cda
pop ecx
pop ecx
add esi, 4
sub edi, 1
jne 0x46b5d2
jmp 0x46b6f1
cmp dword [esp + 0x14], 0
jne 0x46b6fc
lea eax, [ebx - 1]
movzx ebx, ax
mov eax, dword [ebx*4 + 0x4d08c0]
push dword [eax]
push dword [esp + 0x14]
push str.ERROR_mimikatz_doLocal_____s__command_of___s__module_not_found___n
call fcn.00409cda
mov eax, dword [ebx*4 + 0x4d08c0]
push dword [eax]
push str._nModule_:_t_s
call fcn.00409cda
mov eax, dword [ebx*4 + 0x4d08c0]
add esp, 0x14
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x46b67c
push ecx
push str._nFull_name_:_t_s
call fcn.00409cda
mov eax, dword [ebx*4 + 0x4d08c0]
pop ecx
pop ecx
cmp dword [eax + 8], 0
je 0x46b691
push dword [eax + 8]
push str._nDescription_:_t_s
call fcn.00409cda
pop ecx
pop ecx
push 0x4c75d0
call fcn.00409cda
pop ecx
mov ecx, dword [ebx*4 + 0x4d08c0]
xor eax, eax
cmp ax, word [ecx + 0xc]
jae 0x46b6f1
movzx eax, di
imul esi, eax, 0xc
mov eax, dword [ecx + 0x10]
push dword [eax + esi + 4]
push str._n_16s
call fcn.00409cda
pop ecx
pop ecx
mov ecx, dword [ebx*4 + 0x4d08c0]
mov eax, dword [ecx + 0x10]
mov eax, dword [eax + esi + 8]
test eax, eax
je 0x46b6ea
push eax
push str.______s
call fcn.00409cda
pop ecx
pop ecx
mov ecx, dword [ebx*4 + 0x4d08c0]
inc edi
cmp di, word [ecx + 0xc]
jb 0x46b6ab
push 0x4c75d0
call fcn.00409cda
pop ecx
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
test ebp, ebp
je 0x46b709
push ebp
call esi
push dword [esp + 0x18]
call esi
mov esi, dword [esp + 0x28]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret