Function at 0x40b2c5
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x446121
mov eax, dword fs:[0]
push eax
sub esp, 0x6c8
mov eax, dword [0x458220]
xor eax, esp
mov dword [esp + 0x6c0], eax
push ebx
push esi
push edi
mov eax, dword [0x458220]
xor eax, esp
push eax
lea eax, [esp + 0x6d8]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [0x45ca90], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, eax
lea eax, [esp + 0x2dc]
push eax
mov dword [esp + 0x24], ecx
call fcn.00408544
lea eax, [esp + 0xb4]
xor esi, esi
push eax
mov dword [esp + 0x6e4], esi
call fcn.00406655
push 7
pop eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], esi
mov word [esp + 0x60], si
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], esi
mov word [esp + 0x7c], si
mov dword [esp + 0xb0], eax
mov dword [esp + 0xac], esi
mov word [esp + 0x9c], si
mov byte [esp + 0x6e0], 2
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x98], 0
mov byte [esp + 0x99], 1
mov dword [esp + 0x20], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
cmp ebx, esi
je 0x40b66f
xor eax, eax
inc eax
cmp dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
jle 0x40b668
mov dword [esp + 0x14], 2
mov edi, dword [esp + 0x18]
shl edi, 2
mov eax, dword [edi + ebx]
lea ecx, [esp + 0x40]
call fcn.00401222
push 0x449374
lea esi, [esp + 0x44]
mov byte [esp + 0x6e4], 3
call fcn.00408365
test al, al
pop ecx
jne 0x40b618
push 0x44937c
call fcn.00408365
test al, al
pop ecx
jne 0x40b618
push 0x449384
call fcn.00408365
test al, al
pop ecx
jne 0x40b618
push 0x44938c
call fcn.00408365
test al, al
pop ecx
jne 0x40b618
push 0x449394
call fcn.00408365
test al, al
pop ecx
jne 0x40b604
push 0x44939c
call fcn.00408365
test al, al
pop ecx
jne 0x40b604
push 0x4493a4
call fcn.00408365
test al, al
pop ecx
jne 0x40b604
push 0x4493ac
call fcn.00408365
test al, al
pop ecx
jne 0x40b604
push 0x4493b4
call fcn.00408365
test al, al
pop ecx
jne 0x40b5fa
push 0x4493bc
call fcn.00408365
test al, al
pop ecx
jne 0x40b5fa
push 0x4493c4
call fcn.00408365
test al, al
pop ecx
jne 0x40b5fa
push 0x4493cc
call fcn.00408365
test al, al
pop ecx
jne 0x40b5fa
push 0x4493d4
call fcn.00408365
test al, al
pop ecx
jne 0x40b5fa
push 0x4493dc
call fcn.00408365
test al, al
pop ecx
jne 0x40b5fa
push 0x4493e4
call fcn.00408365
test al, al
pop ecx
jne 0x40b5fa
push 0x4493ec
call fcn.00408365
test al, al
pop ecx
jne 0x40b5fa
push 0x4493f4
call fcn.00408365
test al, al
pop ecx
jne 0x40b5f0
push 0x4493fc
call fcn.00408365
test al, al
pop ecx
jne 0x40b5f0
push 0x449404
call fcn.00408365
test al, al
pop ecx
jne 0x40b5f0
push 0x44940c
call fcn.00408365
test al, al
pop ecx
jne 0x40b5f0
push 0x449414
call fcn.00408365
test al, al
pop ecx
jne 0x40b5d9
push 0x44941c
call fcn.00408365
test al, al
pop ecx
jne 0x40b5d9
push 0x449424
call fcn.00408365
test al, al
pop ecx
jne 0x40b5d9
push 0x44942c
call fcn.00408365
test al, al
pop ecx
jne 0x40b5d9
push 0x449434
call fcn.00408365
test al, al
pop ecx
jne 0x40b5d9
push 0x44943c
call fcn.00408365
test al, al
pop ecx
jne 0x40b5d9
push 0x449444
call fcn.00408365
test al, al
pop ecx
jne 0x40b5d9
push 0x44944c
call fcn.00408365
test al, al
pop ecx
je 0x40b63b
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b6e3
lea esi, [esp + 0x98]
jmp 0x40b62a
mov byte [esp + 0x95], 0
jmp 0x40b63b
mov byte [esp + 0x94], 1
jmp 0x40b63b
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b743
lea esi, [esp + 0x78]
jmp 0x40b62a
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b743
lea esi, [esp + 0x5c]
mov eax, dword [edi + ebx + 4]
call fcn.0040124c
inc dword [esp + 0x18]
inc dword [esp + 0x14]
push 0
push 1
lea esi, [esp + 0x48]
mov byte [esp + 0x6e8], 2
call fcn.004012ba
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
inc dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jl 0x40b3c6
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea edi, [esp + 0x5c]
lea eax, [esp + 0x2dc]
call fcn.0040aea3
cmp dword [esp + 0x204], esi
je 0x40b6cf
cmp dword [esp + 0x1e8], esi
jne 0x40b6cf
lea eax, [esp + 0x24]
push 0x522b
push eax
call fcn.00402cc5
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [esp + 0x1d8]
push ecx
xor ebx, ebx
mov byte [esp + 0x6e8], 4
call fcn.00401318
push ebx
push 1
lea esi, [esp + 0x2c]
mov byte [esp + 0x6e8], 2
call fcn.004012ba
push dword [esp + 0x20]
lea ecx, [esp + 0x2e0]
call fcn.0040aee1
mov esi, eax
jmp 0x40b6f3
push 0
push 1
lea esi, [esp + 0x48]
call fcn.004012ba
push 0xfffffffffffffffe
pop esi
lea edi, [esp + 0x5c]
call fcn.004086da
lea edi, [esp + 0xb4]
call fcn.00408700
or dword [esp + 0x6e0], 0xffffffff
lea eax, [esp + 0x2dc]
push eax
call fcn.0040880c
mov eax, esi
mov ecx, dword [esp + 0x6d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x6c0]
xor ecx, esp
call fcn.00434390
mov esp, ebp
pop ebp
ret
push 0
push 1
lea esi, [esp + 0x48]
call fcn.004012ba
lea edi, [esp + 0x5c]
call fcn.004086da
lea edi, [esp + 0xb4]
call fcn.00408700
or dword [esp + 0x6e0], 0xffffffff
lea eax, [esp + 0x2dc]
push eax
call fcn.0040880c
push 0xfffffffffffffffe
pop eax
jmp 0x40b71f