Function at 0x40b39d
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4478e6
mov eax, dword fs:[0]
push eax
sub esp, 0x6c8
mov eax, dword [0x45a210]
xor eax, esp
mov dword [esp + 0x6c0], eax
push ebx
push esi
push edi
mov eax, dword [0x45a210]
xor eax, esp
push eax
lea eax, [esp + 0x6d8]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [0x45ea70], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, eax
lea eax, [esp + 0x2dc]
push eax
mov dword [esp + 0x24], ecx
call fcn.004085d2
lea eax, [esp + 0xb4]
xor esi, esi
push eax
mov dword [esp + 0x6e4], esi
call fcn.00406741
push 7
pop eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], esi
mov word [esp + 0x60], si
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], esi
mov word [esp + 0x7c], si
mov dword [esp + 0xb0], eax
mov dword [esp + 0xac], esi
mov word [esp + 0x9c], si
mov byte [esp + 0x6e0], 2
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x98], 0
mov byte [esp + 0x99], 1
mov dword [esp + 0x20], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
cmp ebx, esi
je 0x40b747
xor eax, eax
inc eax
cmp dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
jle 0x40b740
mov dword [esp + 0x14], 2
mov edi, dword [esp + 0x18]
shl edi, 2
mov eax, dword [edi + ebx]
lea ecx, [esp + 0x40]
call fcn.00401222
push 0x44a384
lea esi, [esp + 0x44]
mov byte [esp + 0x6e4], 3
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6f0
push 0x44a38c
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6f0
push 0x44a394
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6f0
push 0x44a39c
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6f0
push 0x44a3a4
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6dc
push 0x44a3ac
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6dc
push 0x44a3b4
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6dc
push 0x44a3bc
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6dc
push 0x44a3c4
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6d2
push 0x44a3cc
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6d2
push 0x44a3d4
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6d2
push 0x44a3dc
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6d2
push 0x44a3e4
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6d2
push 0x44a3ec
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6d2
push 0x44a3f4
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6d2
push 0x44a3fc
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6d2
push 0x44a404
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6c8
push 0x44a40c
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6c8
push 0x44a414
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6c8
push 0x44a41c
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6c8
push 0x44a424
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6b1
push 0x44a42c
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6b1
push 0x44a434
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6b1
push 0x44a43c
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6b1
push 0x44a444
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6b1
push 0x44a44c
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6b1
push 0x44a454
call fcn.004083f3
test al, al
pop ecx
jne 0x40b6b1
push 0x44a45c
call fcn.004083f3
test al, al
pop ecx
je 0x40b713
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b7bb
lea esi, [esp + 0x98]
jmp 0x40b702
mov byte [esp + 0x95], 0
jmp 0x40b713
mov byte [esp + 0x94], 1
jmp 0x40b713
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b81b
lea esi, [esp + 0x78]
jmp 0x40b702
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b81b
lea esi, [esp + 0x5c]
mov eax, dword [edi + ebx + 4]
call fcn.0040124c
inc dword [esp + 0x18]
inc dword [esp + 0x14]
push 0
push 1
lea esi, [esp + 0x48]
mov byte [esp + 0x6e8], 2
call fcn.004012ba
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
inc dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jl 0x40b49e
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea edi, [esp + 0x5c]
lea eax, [esp + 0x2dc]
call fcn.0040af57
cmp dword [esp + 0x204], esi
je 0x40b7a7
cmp dword [esp + 0x1e8], esi
jne 0x40b7a7
lea eax, [esp + 0x24]
push 0x522b
push eax
call fcn.00402c78
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [esp + 0x1d8]
push ecx
xor ebx, ebx
mov byte [esp + 0x6e8], 4
call fcn.00401318
push ebx
push 1
lea esi, [esp + 0x2c]
mov byte [esp + 0x6e8], 2
call fcn.004012ba
push dword [esp + 0x20]
lea ecx, [esp + 0x2e0]
call fcn.0040af95
mov esi, eax
jmp 0x40b7cb
push 0
push 1
lea esi, [esp + 0x48]
call fcn.004012ba
push 0xfffffffffffffffe
pop esi
lea edi, [esp + 0x5c]
call fcn.00408768
lea edi, [esp + 0xb4]
call fcn.0040878e
or dword [esp + 0x6e0], 0xffffffff
lea eax, [esp + 0x2dc]
push eax
call fcn.00408880
mov eax, esi
mov ecx, dword [esp + 0x6d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x6c0]
xor ecx, esp
call fcn.0043579e
mov esp, ebp
pop ebp
ret
push 0
push 1
lea esi, [esp + 0x48]
call fcn.004012ba
lea edi, [esp + 0x5c]
call fcn.00408768
lea edi, [esp + 0xb4]
call fcn.0040878e
or dword [esp + 0x6e0], 0xffffffff
lea eax, [esp + 0x2dc]
push eax
call fcn.00408880
push 0xfffffffffffffffe
pop eax
jmp 0x40b7f7