Function at 0x40b2e8
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x446b44
mov eax, dword fs:[0]
push eax
sub esp, 0x6c8
mov eax, dword [0x458210]
xor eax, esp
mov dword [esp + 0x6c0], eax
push ebx
push esi
push edi
mov eax, dword [0x458210]
xor eax, esp
push eax
lea eax, [esp + 0x6d8]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [0x45ca70], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, eax
lea eax, [esp + 0x2dc]
push eax
mov dword [esp + 0x24], ecx
call fcn.0040851a
lea eax, [esp + 0xb4]
xor esi, esi
push eax
mov dword [esp + 0x6e4], esi
call fcn.004065ec
push 7
pop eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], esi
mov word [esp + 0x60], si
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], esi
mov word [esp + 0x7c], si
mov dword [esp + 0xb0], eax
mov dword [esp + 0xac], esi
mov word [esp + 0x9c], si
mov byte [esp + 0x6e0], 2
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x98], 0
mov byte [esp + 0x99], 1
mov dword [esp + 0x20], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
cmp ebx, esi
je 0x40b692
xor eax, eax
inc eax
cmp dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
jle 0x40b68b
mov dword [esp + 0x14], 2
mov edi, dword [esp + 0x18]
shl edi, 2
mov eax, dword [edi + ebx]
lea ecx, [esp + 0x40]
call fcn.00401222
push 0x449374
lea esi, [esp + 0x44]
mov byte [esp + 0x6e4], 3
call fcn.0040833b
test al, al
pop ecx
jne 0x40b63b
push 0x44937c
call fcn.0040833b
test al, al
pop ecx
jne 0x40b63b
push 0x449384
call fcn.0040833b
test al, al
pop ecx
jne 0x40b63b
push 0x44938c
call fcn.0040833b
test al, al
pop ecx
jne 0x40b63b
push 0x449394
call fcn.0040833b
test al, al
pop ecx
jne 0x40b627
push 0x44939c
call fcn.0040833b
test al, al
pop ecx
jne 0x40b627
push 0x4493a4
call fcn.0040833b
test al, al
pop ecx
jne 0x40b627
push 0x4493ac
call fcn.0040833b
test al, al
pop ecx
jne 0x40b627
push 0x4493b4
call fcn.0040833b
test al, al
pop ecx
jne 0x40b61d
push 0x4493bc
call fcn.0040833b
test al, al
pop ecx
jne 0x40b61d
push 0x4493c4
call fcn.0040833b
test al, al
pop ecx
jne 0x40b61d
push 0x4493cc
call fcn.0040833b
test al, al
pop ecx
jne 0x40b61d
push 0x4493d4
call fcn.0040833b
test al, al
pop ecx
jne 0x40b61d
push 0x4493dc
call fcn.0040833b
test al, al
pop ecx
jne 0x40b61d
push 0x4493e4
call fcn.0040833b
test al, al
pop ecx
jne 0x40b61d
push 0x4493ec
call fcn.0040833b
test al, al
pop ecx
jne 0x40b61d
push 0x4493f4
call fcn.0040833b
test al, al
pop ecx
jne 0x40b613
push 0x4493fc
call fcn.0040833b
test al, al
pop ecx
jne 0x40b613
push 0x449404
call fcn.0040833b
test al, al
pop ecx
jne 0x40b613
push 0x44940c
call fcn.0040833b
test al, al
pop ecx
jne 0x40b613
push 0x449414
call fcn.0040833b
test al, al
pop ecx
jne 0x40b5fc
push 0x44941c
call fcn.0040833b
test al, al
pop ecx
jne 0x40b5fc
push 0x449424
call fcn.0040833b
test al, al
pop ecx
jne 0x40b5fc
push 0x44942c
call fcn.0040833b
test al, al
pop ecx
jne 0x40b5fc
push 0x449434
call fcn.0040833b
test al, al
pop ecx
jne 0x40b5fc
push 0x44943c
call fcn.0040833b
test al, al
pop ecx
jne 0x40b5fc
push 0x449444
call fcn.0040833b
test al, al
pop ecx
jne 0x40b5fc
push 0x44944c
call fcn.0040833b
test al, al
pop ecx
je 0x40b65e
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b706
lea esi, [esp + 0x98]
jmp 0x40b64d
mov byte [esp + 0x95], 0
jmp 0x40b65e
mov byte [esp + 0x94], 1
jmp 0x40b65e
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b766
lea esi, [esp + 0x78]
jmp 0x40b64d
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b766
lea esi, [esp + 0x5c]
mov eax, dword [edi + ebx + 4]
call fcn.00401248
inc dword [esp + 0x18]
inc dword [esp + 0x14]
push 0
push 1
lea esi, [esp + 0x48]
mov byte [esp + 0x6e8], 2
call fcn.004012b6
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
inc dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jl 0x40b3e9
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea edi, [esp + 0x5c]
lea eax, [esp + 0x2dc]
call fcn.0040ae98
cmp dword [esp + 0x204], esi
je 0x40b6f2
cmp dword [esp + 0x1e8], esi
jne 0x40b6f2
lea eax, [esp + 0x24]
push 0x522b
push eax
call fcn.00402ca2
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [esp + 0x1d8]
push ecx
xor ebx, ebx
mov byte [esp + 0x6e8], 4
call fcn.00401322
push ebx
push 1
lea esi, [esp + 0x2c]
mov byte [esp + 0x6e8], 2
call fcn.004012b6
push dword [esp + 0x20]
lea ecx, [esp + 0x2e0]
call fcn.0040aed6
mov esi, eax
jmp 0x40b716
push 0
push 1
lea esi, [esp + 0x48]
call fcn.004012b6
push 0xfffffffffffffffe
pop esi
lea edi, [esp + 0x5c]
call fcn.004086b0
lea edi, [esp + 0xb4]
call fcn.004086d6
or dword [esp + 0x6e0], 0xffffffff
lea eax, [esp + 0x2dc]
push eax
call fcn.004087e2
mov eax, esi
mov ecx, dword [esp + 0x6d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x6c0]
xor ecx, esp
call fcn.00434bcb
mov esp, ebp
pop ebp
ret
push 0
push 1
lea esi, [esp + 0x48]
call fcn.004012b6
lea edi, [esp + 0x5c]
call fcn.004086b0
lea edi, [esp + 0xb4]
call fcn.004086d6
or dword [esp + 0x6e0], 0xffffffff
lea eax, [esp + 0x2dc]
push eax
call fcn.004087e2
push 0xfffffffffffffffe
pop eax
jmp 0x40b742