Function at 0x40dab0
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [0x489848]
mov dword [ebp - 8], eax
push str.4D4145C2_C41B_438B_8B10_3C4A78EDE959
mov edx, dword [ebp - 8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x40daf5
mov dword [0x489354], 1
jmp 0x40ddf9
push str.EE992377_0236_4500_871C_26FADE64A096
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x40dbd6
mov dword [0x489350], 1
call dword [0x489858]
cmp eax, 1
jne 0x40db7c
mov dword [ebp - 0x10], 0
push str.7E6D05AF_5118_4B8A_8EA5_8DCF643F1E18
push 0
push 0x100002
call dword [0x4894d0]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x40db72
mov eax, dword [ebp - 0x10]
push eax
call dword [0x4894d4]
test eax, eax
jne 0x40db66
mov ecx, dword [ebp - 0x10]
push ecx
call dword [0x489484]
push 0
call dword [0x4894a8]
mov edx, dword [ebp - 0x10]
push edx
call dword [0x489484]
jmp 0x40db7a
push 0
call dword [0x4894a8]
jmp 0x40db84
push 0
call dword [0x4894a8]
mov eax, 1
test eax, eax
je 0x40dbc7
mov dword [ebp - 0x14], 0
push str.76505A24_1781_4194_B805_5B2DFAFECAD9
push 0
push 0x100000
call dword [0x48946c]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x40dbc3
mov ecx, dword [ebp - 0x14]
push ecx
call dword [0x489484]
push 0x64
call dword [0x48950c]
jmp 0x40db84
jmp 0x40dbc7
mov eax, 1
jmp 0x40ddfe
push str.0EF944A1_42D3_41EC_9492_771919E31DF3
mov edx, dword [ebp - 8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x40dcb5
push str.04B1D95E_91AB_46F8_9624_3460A802495B
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40dc24
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [0x4894ac]
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x1c]
push edx
call dword [0x489484]
push str.E4E30697_AC48_4D6B_93FA_2C91A842EFF8
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x40dc58
push 0xffffffffffffffff
mov eax, dword [ebp - 0x18]
push eax
call dword [0x4894ac]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
push ecx
call dword [0x489484]
mov edx, 1
test edx, edx
je 0x40dc9b
mov dword [ebp - 0x28], 0
push str.76505A24_1781_4194_B805_5B2DFAFECAD9
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x40dc97
mov eax, dword [ebp - 0x28]
push eax
call dword [0x489484]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40dc58
jmp 0x40dc9b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x40ddfe
push str.C25D36F1_6820_4F09_9C7B_2A8961215D50
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x40dd8e
push str.04B1D95E_91AB_46F8_9624_3460A802495B
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x40dd03
push 0xffffffffffffffff
mov eax, dword [ebp - 0x30]
push eax
call dword [0x4894ac]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x30]
push ecx
call dword [0x489484]
push str.E4E30697_AC48_4D6B_93FA_2C91A842EFF8
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x40dd37
push 0xffffffffffffffff
mov edx, dword [ebp - 0x2c]
push edx
call dword [0x4894ac]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2c]
push eax
call dword [0x489484]
mov ecx, 1
test ecx, ecx
je 0x40dd7a
mov dword [ebp - 0x3c], 0
push str.76505A24_1781_4194_B805_5B2DFAFECAD9
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x40dd76
mov edx, dword [ebp - 0x3c]
push edx
call dword [0x489484]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40dd37
jmp 0x40dd7a
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x40ddfe
push str.7ADD09C7_69D5_46D4_8A6E_21AF4109BC40
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x40ddf9
mov edx, 1
test edx, edx
je 0x40dde7
mov dword [ebp - 0x40], 0
push str.76505A24_1781_4194_B805_5B2DFAFECAD9
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x40dde3
mov eax, dword [ebp - 0x40]
push eax
call dword [0x489484]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40dda4
jmp 0x40dde7
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x40ddfe
mov eax, 1
mov esp, ebp
pop ebp
ret