Function at 0x406a57
Capabilities:
Accept command line arguments

Disassembly:
push 0x144
mov eax, 0x42411c
call fcn.00417706
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x150]
mov dword [ebp - 0x140], ecx
xor ebx, ebx
push eax
mov ecx, esi
mov dword [ebp - 0x13c], esi
mov dword [ebp - 0x138], ebx
call fcn.004050ed
mov eax, dword [ebp - 0x150]
mov dword [ebp - 4], ebx
cmp eax, dword [ebp - 0x14c]
jne 0x406ab4
push 2
pop ebx
lea ecx, [ebp - 0x150]
call fcn.0040462b
mov eax, ebx
call fcn.00417750
ret 4
push 0x4267b4
lea ecx, [ebp - 0x48]
call fcn.00401c39
lea eax, [ebp - 0x48]
push eax
mov ecx, esi
mov byte [ebp - 4], 1
call fcn.00403af0
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x48]
mov edi, eax
mov byte [ebp - 4], bl
call fcn.0040139d
cmp edi, ebx
je 0x406b02
call fcn.0040103c
mov ecx, eax
call fcn.00401052
mov ecx, eax
call fcn.0040cd4e
test ax, ax
je 0x406b02
mov ebx, eax
jmp 0x406a9f
mov edi, 0x42668c
push edi
lea ecx, [ebp - 0x2c]
call fcn.00401c39
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], 2
call fcn.00403a7f
push ebx
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.0040139d
mov ecx, dword [ebp - 0x140]
lea eax, [ebp - 0x64]
push eax
call fcn.004054f6
test eax, eax
jne 0x406c82
push str.ServiceType
lea ecx, [ebp - 0x80]
call fcn.00401c39
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 5
call fcn.00403a7f
push ebx
push esi
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 7
call fcn.0040139d
cmp dword [ebp - 0x34], 8
mov eax, dword [ebp - 0x48]
jae 0x406b8a
lea eax, [ebp - 0x48]
push str.Daemon
push eax
call fcn.004178e9
pop ecx
pop ecx
test eax, eax
jne 0x406bda
call fcn.0040103c
mov ecx, eax
call fcn.00401052
mov ecx, eax
call fcn.0040cc6b
mov ecx, dword [ebp - 0x140]
lea eax, [ebp - 0x64]
push eax
call fcn.00405ec6
mov edi, eax
lea ecx, [ebp - 0x48]
push ebx
push esi
call fcn.0040139d
push ebx
push esi
lea ecx, [ebp - 0x64]
call fcn.0040139d
mov ebx, edi
jmp 0x406a9f
lea ecx, [ebp - 0x134]
call fcn.00404edc
mov byte [ebp - 4], 8
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401c39
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 9
call fcn.00404f44
push ebx
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.0040139d
push edi
lea ecx, [ebp - 0x2c]
call fcn.00401c39
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0xa
call fcn.00404dd0
push ebx
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.0040139d
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x134]
call fcn.0040533b
lea ecx, [ebp - 0x64]
push ecx
push eax
mov byte [ebp - 4], 0xb
call fcn.00406070
pop ecx
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x2c]
mov edi, eax
call fcn.0040139d
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 7
call fcn.00404d14
jmp 0x406bbf
mov edi, str.Temporary
push edi
lea ecx, [ebp - 0x48]
call fcn.00401c39
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x138], esi
call fcn.00403af0
test eax, eax
je 0x406cf0
push edi
lea ecx, [ebp - 0x80]
call fcn.00401c39
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x9c]
push eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x138], 3
call fcn.00403a7f
mov dword [ebp - 0x138], 7
cmp dword [eax + 0x10], ebx
jne 0x406cf0
mov edi, esi
jmp 0x406cf2
xor edi, edi
test byte [ebp - 0x138], 4
je 0x406d0f
and dword [ebp - 0x138], 0xfffffffb
push ebx
push esi
lea ecx, [ebp - 0x9c]
call fcn.0040139d
test byte [ebp - 0x138], 2
je 0x406d29
and dword [ebp - 0x138], 0xfffffffd
push ebx
push esi
lea ecx, [ebp - 0x80]
call fcn.0040139d
test byte [ebp - 0x138], 1
mov dword [ebp - 4], 4
je 0x406d43
push ebx
push esi
lea ecx, [ebp - 0x48]
call fcn.0040139d
cmp edi, ebx
je 0x406d67
mov ecx, dword [ebp - 0x140]
call fcn.00405cce
test eax, eax
je 0x406d67
push ebx
push esi
lea ecx, [ebp - 0x64]
call fcn.0040139d
push 0x11
jmp 0x406a9e
push str.Entry
lea ecx, [ebp - 0x80]
call fcn.00401c39
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 0xe
call fcn.00403a7f
push ebx
push esi
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x10
call fcn.0040139d
push str.EncodePath
lea ecx, [ebp - 0x2c]
call fcn.00401c39
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x11
call fcn.00403af0
push ebx
push esi
lea ecx, [ebp - 0x2c]
mov edi, eax
mov byte [ebp - 4], 0x10
call fcn.0040139d
push str.OnlyVerifyCertSigner
lea ecx, [ebp - 0x2c]
call fcn.00401c39
cmp edi, ebx
je 0x406e42
mov eax, dword [ebp - 0x150]
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x12
jb 0x406def
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.0040e844
pop ecx
pop ecx
mov edi, eax
mov ecx, dword [ebp - 0x13c]
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x13
call fcn.00403af0
mov ecx, dword [ebp - 0x140]
dec eax
neg eax
sbb al, al
inc al
movzx eax, al
push eax
lea eax, [ebp - 0xb8]
push eax
push edi
call fcn.00406187
push ebx
push esi
lea ecx, [ebp - 0x9c]
mov edi, eax
call fcn.0040139d
jmp 0x406e7b
mov ecx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x150]
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x14
call fcn.00403af0
mov ecx, dword [ebp - 0x140]
dec eax
neg eax
sbb al, al
inc al
movzx eax, al
push eax
lea eax, [ebp - 0xb8]
push eax
push edi
call fcn.00406187
mov edi, eax
push ebx
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x10
call fcn.0040139d
test di, di
je 0x406e99
lea ecx, [ebp - 0xb8]
jmp 0x406bc2
mov edi, dword [ebp - 0x150]
jmp 0x406f01
mov eax, dword [ebp - 0x140]
cmp dword [eax + 0x2c], ebx
je 0x406ecb
push 0x42661c
call fcn.004171b1
pop ecx
mov ecx, dword [ebp - 0x140]
push eax
push 0x42661c
add ecx, 0x1c
call fcn.004036f8
lea eax, [ebp - 0x9c]
push edi
push eax
call fcn.0040dad9
pop ecx
pop ecx
mov ecx, dword [ebp - 0x140]
push 0xffffffffffffffff
push ebx
push eax
add ecx, 0x1c
mov byte [ebp - 4], 0x15
call fcn.00403655
push ebx
push esi
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x10
call fcn.0040139d
add edi, 0x1c
cmp edi, dword [ebp - 0x14c]
jne 0x406ea1
push dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x140]
call fcn.00406545
push ebx
push esi
lea ecx, [ebp - 0xb8]
call fcn.0040139d
push ebx
push esi
lea ecx, [ebp - 0x64]
call fcn.0040139d
jmp 0x406a9f