Function at 0x408c67
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
jne 0x408c7c
xor eax, eax
jmp 0x408f2c
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov esi, dword [ebp + 0xc]
cmp esi, ebx
mov dword [0x4e321c], eax
jne 0x408c95
mov esi, dword [0x4e2c88]
push edi
mov dword [ebp - 4], 0x4c78fc
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
cmp dword [0x4e2fc8], ebx
mov dword [ebp - 4], eax
jne 0x408cdf
push 0xf
pop ecx
xor eax, eax
mov dword [ebp - 0x64], 0x44
mov dword [ebp - 0x60], ebx
lea edi, [ebp - 0x5c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
movzx eax, word [ebp - 0x34]
push eax
push esi
mov dword [0x4e2fc8], esi
call fcn.0041c7be
pop ecx
pop ecx
push dword [ebp - 4]
lea ecx, [ebp - 8]
call fcn.004505eb
mov eax, dword [ebp - 8]
push 0x11
push eax
push 0x4c78d8
mov dword [ebp - 4], eax
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x408d39
lea eax, [ebp + 0x10]
push eax
call fcn.00408f31
lea eax, [ebp + 0x10]
push eax
call fcn.00405c44
lea eax, [ebp - 4]
push eax
call fcn.00405c44
mov eax, dword [ebp - 4]
add esp, 0xc
mov word [eax], bx
push dword [ebp + 0x10]
lea ecx, [ebp - 8]
call fcn.004465fa
mov eax, dword [ebp - 8]
mov dword [ebp + 0x10], eax
jmp 0x408d6a
mov eax, dword [ebp - 8]
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.00408f31
mov eax, dword [ebp - 4]
pop ecx
mov word [eax], bx
push dword [ebp + 0x10]
lea ecx, [ebp - 8]
call fcn.004465fa
mov eax, dword [ebp - 8]
mov dword [ebp + 0x10], eax
lea eax, [ebp + 0x10]
push eax
call fcn.0043fe57
pop ecx
mov eax, dword [0x4e2fc8]
mov dword [ebp - 0x1c], eax
mov esi, 0x4e2cc8
mov eax, dword [ebp + 0x10]
push 5
mov dword [ebp - 0x20], eax
lea eax, [ebp + 0x10]
push ebx
push eax
call fcn.0041a9b6
add esp, 0xc
mov dword [ebp + 0x10], eax
cmp word [eax], 0x22
mov dword [ebp - 0x14], eax
mov edi, eax
jne 0x408d9d
lea edi, [eax + 2]
push 4
push edi
push 0x4c78d0
call fcn.00441277
add esp, 0xc
test al, al
je 0x408e27
mov ax, word [edi + 8]
call fcn.004b1b03
test al, al
je 0x408e27
push 0x6592
mov ecx, esi
call fcn.004465d3
mov eax, dword [0x4e2cc8]
push 0x6590
mov word [eax], bx
push dword [0x4e2cc8]
push 0x2713
push dword [ebp - 0x1c]
call dword [sym.imp.USER32.dll_LoadStringW]
push dword [0x4e2cc8]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
inc eax
push eax
mov ecx, esi
call fcn.004465d3
push edi
lea ecx, [ebp - 0xc]
call fcn.004505eb
mov eax, dword [ebp - 0xc]
call fcn.00406379
lea ecx, [ebp - 0xc]
call fcn.0043fe25
mov ecx, esi
mov byte [0x4e6003], bl
call fcn.0043fdff
mov edi, dword [ebp - 0x14]
push 4
push edi
push 0x4c78c8
call fcn.00441277
add esp, 0xc
test al, al
je 0x408e88
lea ecx, [edi + 8]
xor edi, edi
mov di, word [ecx]
mov eax, edi
call fcn.004b1b03
cmp al, bl
mov byte [ebp + 0xf], al
jne 0x408e5a
cmp di, 0x2a
jne 0x408e88
lea eax, [ebp - 0x10]
push eax
mov byte [0x4e2c3e], bl
mov dword [ebp - 0x10], ecx
call fcn.0043fe57
cmp byte [ebp + 0xf], bl
pop ecx
je 0x408ee3
push 3
push dword [ebp - 0x10]
push 0x4c78c4
call fcn.00441220
add esp, 0xc
test al, al
je 0x408ee3
mov al, byte [0x4e3114]
push dword [ebp - 0x20]
mov byte [0x4e2c3c], al
call fcn.00403fb3
pop ecx
push ebx
mov ecx, 0x4e3110
call fcn.00436e8d
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x4c78c2
mov ecx, 0x4e3150
call fcn.00446649
mov eax, dword [0x4e2c8c]
cmp eax, ebx
mov dword [0x4e3148], ebx
mov dword [0x4e314c], ebx
mov byte [0x4e6003], bl
je 0x408f07
mov byte [0x4e12e4], 1
mov dword [ebp + 0x10], eax
jmp 0x408d77
mov eax, dword [ebp - 0x14]
add eax, 8
push eax
lea ecx, [ebp - 0x18]
call fcn.004505eb
push dword [ebp - 0x18]
mov ecx, 0x4e3110
call fcn.00430fac
lea ecx, [ebp - 0x18]
call fcn.0043fe25
cmp byte [0x4e2e86], bl
pop edi
je 0x408f15
call fcn.00420d0c
mov ecx, 0x4e3110
call fcn.00440727
lea ecx, [ebp - 8]
mov esi, eax
call fcn.0043fe25
mov eax, esi
pop esi
pop ebx
leave
ret 0x10