Function at 0x40b93b
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x654
mov eax, dword [0x44c4e8]
xor eax, esp
mov dword [esp + 0x650], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov dword [0x450930], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, eax
lea ebx, [esp + 0x2d8]
mov dword [esp + 0x1c], ecx
call fcn.00408d3a
lea eax, [esp + 0xb0]
call fcn.00407122
push 7
pop eax
xor esi, esi
mov dword [esp + 0x70], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0xac], eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x70], esi
mov word [esp + 0x60], si
mov dword [esp + 0x8c], esi
mov word [esp + 0x7c], si
mov dword [esp + 0xac], esi
mov word [esp + 0x9c], si
mov byte [esp + 0x94], 0
mov byte [esp + 0x95], 1
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
cmp ebx, esi
je 0x40bca1
xor eax, eax
inc eax
cmp dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
jle 0x40bc9a
mov dword [esp + 0x10], 2
mov edi, dword [esp + 0x14]
shl edi, 2
mov eax, dword [edi + ebx]
lea ecx, [esp + 0x3c]
call fcn.00401592
push 0x441474
lea esi, [esp + 0x40]
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc52
push 0x44147c
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc52
push 0x441484
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc52
push 0x44148c
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc52
push 0x441494
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc3e
push 0x44149c
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc3e
push 0x4414a4
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc3e
push 0x4414ac
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc3e
push 0x4414b4
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc34
push 0x4414bc
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc34
push 0x4414c4
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc34
push 0x4414cc
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc34
push 0x4414d4
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc34
push 0x4414dc
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc34
push 0x4414e4
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc34
push 0x4414ec
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc34
push 0x4414f4
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc2a
push 0x4414fc
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc2a
push 0x441504
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc2a
push 0x44150c
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc2a
push 0x441514
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc13
push 0x44151c
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc13
push 0x441524
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc13
push 0x44152c
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc13
push 0x441534
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc13
push 0x44153c
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc13
push 0x441544
call fcn.00408a74
test al, al
pop ecx
jne 0x40bc13
push 0x44154c
call fcn.00408a74
test al, al
pop ecx
je 0x40bc75
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40bd0b
lea esi, [esp + 0x94]
jmp 0x40bc64
mov byte [esp + 0x91], 0
jmp 0x40bc75
mov byte [esp + 0x90], 1
jmp 0x40bc75
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40bd54
lea esi, [esp + 0x74]
jmp 0x40bc64
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40bd54
lea esi, [esp + 0x58]
mov eax, dword [edi + ebx + 4]
call fcn.004015ae
inc dword [esp + 0x14]
inc dword [esp + 0x10]
push 0
push 1
lea esi, [esp + 0x44]
call fcn.0040115f
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
inc dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jl 0x40ba08
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea edi, [esp + 0x58]
lea eax, [esp + 0x2d8]
call fcn.0040b2ed
cmp dword [esp + 0x200], esi
je 0x40bcf7
cmp dword [esp + 0x1e4], esi
jne 0x40bcf7
push 0x27ea
call fcn.00404ea0
lea ecx, [esp + 0x24]
call fcn.0040f8ad
push 0xffffffffffffffff
lea eax, [esp + 0x1d4]
push eax
xor ebx, ebx
lea eax, [esp + 0x28]
call fcn.004010d7
push ebx
push 1
lea esi, [esp + 0x28]
call fcn.0040115f
push dword [esp + 0x1c]
lea ecx, [esp + 0x2dc]
call fcn.0040b32b
mov esi, eax
jmp 0x40bd1b
push 0
push 1
lea esi, [esp + 0x44]
call fcn.0040115f
push 0xfffffffffffffffe
pop esi
lea edi, [esp + 0x58]
call fcn.00408ead
lea edi, [esp + 0xb0]
call fcn.00408ed3
lea eax, [esp + 0x2d8]
push eax
call fcn.00408fc5
mov eax, esi
mov ecx, dword [esp + 0x65c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0042f5f3
mov esp, ebp
pop ebp
ret
push 0
push 1
lea esi, [esp + 0x44]
call fcn.0040115f
lea edi, [esp + 0x58]
call fcn.00408ead
lea edi, [esp + 0xb0]
call fcn.00408ed3
lea eax, [esp + 0x2d8]
push eax
call fcn.00408fc5
push 0xfffffffffffffffe
pop eax
jmp 0x40bd3f