Function at 0x40c218
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x66c
mov eax, dword [0x44e4ec]
xor eax, esp
mov dword [esp + 0x668], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov dword [0x452bf0], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, eax
lea ebx, [esp + 0x2d8]
mov dword [esp + 0x1c], ecx
call fcn.00409577
lea eax, [esp + 0xb0]
call fcn.00407aac
push 7
pop eax
xor esi, esi
mov dword [esp + 0x70], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0xac], eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x70], esi
mov word [esp + 0x60], si
mov dword [esp + 0x8c], esi
mov word [esp + 0x7c], si
mov dword [esp + 0xac], esi
mov word [esp + 0x9c], si
mov byte [esp + 0x94], 0
mov byte [esp + 0x95], 1
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
cmp ebx, esi
je 0x40c57e
xor eax, eax
inc eax
cmp dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
jle 0x40c577
mov dword [esp + 0x10], 2
mov edi, dword [esp + 0x14]
shl edi, 2
mov eax, dword [edi + ebx]
lea ecx, [esp + 0x3c]
call fcn.0040118b
push 0x44350c
lea esi, [esp + 0x40]
call fcn.004091e0
test al, al
pop ecx
jne 0x40c52f
push 0x443514
call fcn.004091e0
test al, al
pop ecx
jne 0x40c52f
push 0x44351c
call fcn.004091e0
test al, al
pop ecx
jne 0x40c52f
push 0x443524
call fcn.004091e0
test al, al
pop ecx
jne 0x40c52f
push 0x44352c
call fcn.004091e0
test al, al
pop ecx
jne 0x40c51b
push 0x443534
call fcn.004091e0
test al, al
pop ecx
jne 0x40c51b
push 0x44353c
call fcn.004091e0
test al, al
pop ecx
jne 0x40c51b
push 0x443544
call fcn.004091e0
test al, al
pop ecx
jne 0x40c51b
push 0x44354c
call fcn.004091e0
test al, al
pop ecx
jne 0x40c511
push 0x443554
call fcn.004091e0
test al, al
pop ecx
jne 0x40c511
push 0x44355c
call fcn.004091e0
test al, al
pop ecx
jne 0x40c511
push 0x443564
call fcn.004091e0
test al, al
pop ecx
jne 0x40c511
push 0x44356c
call fcn.004091e0
test al, al
pop ecx
jne 0x40c511
push 0x443574
call fcn.004091e0
test al, al
pop ecx
jne 0x40c511
push 0x44357c
call fcn.004091e0
test al, al
pop ecx
jne 0x40c511
push 0x443584
call fcn.004091e0
test al, al
pop ecx
jne 0x40c511
push 0x44358c
call fcn.004091e0
test al, al
pop ecx
jne 0x40c507
push 0x443594
call fcn.004091e0
test al, al
pop ecx
jne 0x40c507
push 0x44359c
call fcn.004091e0
test al, al
pop ecx
jne 0x40c507
push 0x4435a4
call fcn.004091e0
test al, al
pop ecx
jne 0x40c507
push 0x4435ac
call fcn.004091e0
test al, al
pop ecx
jne 0x40c4f0
push 0x4435b4
call fcn.004091e0
test al, al
pop ecx
jne 0x40c4f0
push 0x4435bc
call fcn.004091e0
test al, al
pop ecx
jne 0x40c4f0
push 0x4435c4
call fcn.004091e0
test al, al
pop ecx
jne 0x40c4f0
push 0x4435cc
call fcn.004091e0
test al, al
pop ecx
jne 0x40c4f0
push 0x4435d4
call fcn.004091e0
test al, al
pop ecx
jne 0x40c4f0
push 0x4435dc
call fcn.004091e0
test al, al
pop ecx
jne 0x40c4f0
push 0x4435e4
call fcn.004091e0
test al, al
pop ecx
je 0x40c552
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40c5e8
lea esi, [esp + 0x94]
jmp 0x40c541
mov byte [esp + 0x91], 0
jmp 0x40c552
mov byte [esp + 0x90], 1
jmp 0x40c552
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40c631
lea esi, [esp + 0x74]
jmp 0x40c541
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40c631
lea esi, [esp + 0x58]
mov eax, dword [edi + ebx + 4]
call fcn.00401337
inc dword [esp + 0x14]
inc dword [esp + 0x10]
push 0
push 1
lea esi, [esp + 0x44]
call fcn.00401451
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
inc dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jl 0x40c2e5
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea edi, [esp + 0x58]
lea eax, [esp + 0x2d8]
call fcn.0040bbca
cmp dword [esp + 0x200], esi
je 0x40c5d4
cmp dword [esp + 0x1e4], esi
jne 0x40c5d4
push 0x27ea
call fcn.004050f5
lea ecx, [esp + 0x24]
call fcn.0041007f
push 0xffffffffffffffff
lea eax, [esp + 0x1d4]
push eax
xor ebx, ebx
lea eax, [esp + 0x28]
call fcn.004016e8
push ebx
push 1
lea esi, [esp + 0x28]
call fcn.00401451
push dword [esp + 0x1c]
lea ecx, [esp + 0x2dc]
call fcn.0040bc08
mov esi, eax
jmp 0x40c5f8
push 0
push 1
lea esi, [esp + 0x44]
call fcn.00401451
push 0xfffffffffffffffe
pop esi
lea edi, [esp + 0x58]
call fcn.004096ea
lea edi, [esp + 0xb0]
call fcn.00409710
lea eax, [esp + 0x2d8]
push eax
call fcn.00409802
mov eax, esi
mov ecx, dword [esp + 0x674]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0043220f
mov esp, ebp
pop ebp
ret
push 0
push 1
lea esi, [esp + 0x44]
call fcn.00401451
lea edi, [esp + 0x58]
call fcn.004096ea
lea edi, [esp + 0xb0]
call fcn.00409710
lea eax, [esp + 0x2d8]
push eax
call fcn.00409802
push 0xfffffffffffffffe
pop eax
jmp 0x40c61c