Function at 0x40c1cf
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x66c
mov eax, dword [0x44e4f8]
xor eax, esp
mov dword [esp + 0x668], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov dword [0x452bf0], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, eax
lea ebx, [esp + 0x2d8]
mov dword [esp + 0x1c], ecx
call fcn.00409605
lea eax, [esp + 0xb0]
call fcn.00407aca
push 7
pop eax
xor esi, esi
mov dword [esp + 0x70], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0xac], eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x70], esi
mov word [esp + 0x60], si
mov dword [esp + 0x8c], esi
mov word [esp + 0x7c], si
mov dword [esp + 0xac], esi
mov word [esp + 0x9c], si
mov byte [esp + 0x94], 0
mov byte [esp + 0x95], 1
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
cmp ebx, esi
je 0x40c535
xor eax, eax
inc eax
cmp dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
jle 0x40c52e
mov dword [esp + 0x10], 2
mov edi, dword [esp + 0x14]
shl edi, 2
mov eax, dword [edi + ebx]
lea ecx, [esp + 0x3c]
call fcn.0040118b
push 0x44351c
lea esi, [esp + 0x40]
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4e6
push 0x443524
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4e6
push 0x44352c
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4e6
push 0x443534
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4e6
push 0x44353c
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4d2
push 0x443544
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4d2
push 0x44354c
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4d2
push 0x443554
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4d2
push 0x44355c
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4c8
push 0x443564
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4c8
push 0x44356c
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4c8
push 0x443574
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4c8
push 0x44357c
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4c8
push 0x443584
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4c8
push 0x44358c
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4c8
push 0x443594
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4c8
push 0x44359c
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4be
push 0x4435a4
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4be
push 0x4435ac
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4be
push 0x4435b4
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4be
push 0x4435bc
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4a7
push 0x4435c4
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4a7
push 0x4435cc
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4a7
push 0x4435d4
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4a7
push 0x4435dc
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4a7
push 0x4435e4
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4a7
push 0x4435ec
call fcn.004091fe
test al, al
pop ecx
jne 0x40c4a7
push 0x4435f4
call fcn.004091fe
test al, al
pop ecx
je 0x40c509
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40c59f
lea esi, [esp + 0x94]
jmp 0x40c4f8
mov byte [esp + 0x91], 0
jmp 0x40c509
mov byte [esp + 0x90], 1
jmp 0x40c509
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40c5e8
lea esi, [esp + 0x74]
jmp 0x40c4f8
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40c5e8
lea esi, [esp + 0x58]
mov eax, dword [edi + ebx + 4]
call fcn.00401357
inc dword [esp + 0x14]
inc dword [esp + 0x10]
push 0
push 1
lea esi, [esp + 0x44]
call fcn.00401471
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
inc dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jl 0x40c29c
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea edi, [esp + 0x58]
lea eax, [esp + 0x2d8]
call fcn.0040bb81
cmp dword [esp + 0x200], esi
je 0x40c58b
cmp dword [esp + 0x1e4], esi
jne 0x40c58b
push 0x27ea
call fcn.004050f5
lea ecx, [esp + 0x24]
call fcn.0040fff3
push 0xffffffffffffffff
lea eax, [esp + 0x1d4]
push eax
xor ebx, ebx
lea eax, [esp + 0x28]
call fcn.00401708
push ebx
push 1
lea esi, [esp + 0x28]
call fcn.00401471
push dword [esp + 0x1c]
lea ecx, [esp + 0x2dc]
call fcn.0040bbbf
mov esi, eax
jmp 0x40c5af
push 0
push 1
lea esi, [esp + 0x44]
call fcn.00401471
push 0xfffffffffffffffe
pop esi
lea edi, [esp + 0x58]
call fcn.00409778
lea edi, [esp + 0xb0]
call fcn.0040979e
lea eax, [esp + 0x2d8]
push eax
call fcn.00409890
mov eax, esi
mov ecx, dword [esp + 0x674]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0043223b
mov esp, ebp
pop ebp
ret
push 0
push 1
lea esi, [esp + 0x44]
call fcn.00401471
lea edi, [esp + 0x58]
call fcn.00409778
lea edi, [esp + 0xb0]
call fcn.0040979e
lea eax, [esp + 0x2d8]
push eax
call fcn.00409890
push 0xfffffffffffffffe
pop eax
jmp 0x40c5d3