Function at 0x40b3e1
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x443d6e
mov eax, dword fs:[0]
push eax
sub esp, 0x6d0
mov eax, dword [0x456214]
xor eax, esp
mov dword [esp + 0x6c8], eax
push ebx
push esi
push edi
mov eax, dword [0x456214]
xor eax, esp
push eax
lea eax, [esp + 0x6e0]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [0x45acf0], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, eax
lea eax, [esp + 0x2dc]
push eax
mov dword [esp + 0x24], ecx
call fcn.00408790
lea eax, [esp + 0xb4]
xor esi, esi
push eax
mov dword [esp + 0x6ec], esi
call fcn.00406873
push 7
pop eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], esi
mov word [esp + 0x60], si
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], esi
mov word [esp + 0x7c], si
mov dword [esp + 0xb0], eax
mov dword [esp + 0xac], esi
mov word [esp + 0x9c], si
mov byte [esp + 0x6e8], 2
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x98], 0
mov byte [esp + 0x99], 1
mov dword [esp + 0x20], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
cmp ebx, esi
je 0x40b78b
xor eax, eax
inc eax
cmp dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
jle 0x40b784
mov dword [esp + 0x14], 2
mov edi, dword [esp + 0x18]
shl edi, 2
mov eax, dword [edi + ebx]
lea ecx, [esp + 0x40]
call fcn.00401221
push 0x4473bc
lea esi, [esp + 0x44]
mov byte [esp + 0x6ec], 3
call fcn.0040858a
test al, al
pop ecx
jne 0x40b734
push 0x4473c4
call fcn.0040858a
test al, al
pop ecx
jne 0x40b734
push 0x4473cc
call fcn.0040858a
test al, al
pop ecx
jne 0x40b734
push 0x4473d4
call fcn.0040858a
test al, al
pop ecx
jne 0x40b734
push 0x4473dc
call fcn.0040858a
test al, al
pop ecx
jne 0x40b720
push 0x4473e4
call fcn.0040858a
test al, al
pop ecx
jne 0x40b720
push 0x4473ec
call fcn.0040858a
test al, al
pop ecx
jne 0x40b720
push 0x4473f4
call fcn.0040858a
test al, al
pop ecx
jne 0x40b720
push 0x4473fc
call fcn.0040858a
test al, al
pop ecx
jne 0x40b716
push 0x447404
call fcn.0040858a
test al, al
pop ecx
jne 0x40b716
push 0x44740c
call fcn.0040858a
test al, al
pop ecx
jne 0x40b716
push 0x447414
call fcn.0040858a
test al, al
pop ecx
jne 0x40b716
push 0x44741c
call fcn.0040858a
test al, al
pop ecx
jne 0x40b716
push 0x447424
call fcn.0040858a
test al, al
pop ecx
jne 0x40b716
push 0x44742c
call fcn.0040858a
test al, al
pop ecx
jne 0x40b716
push 0x447434
call fcn.0040858a
test al, al
pop ecx
jne 0x40b716
push 0x44743c
call fcn.0040858a
test al, al
pop ecx
jne 0x40b70c
push 0x447444
call fcn.0040858a
test al, al
pop ecx
jne 0x40b70c
push 0x44744c
call fcn.0040858a
test al, al
pop ecx
jne 0x40b70c
push 0x447454
call fcn.0040858a
test al, al
pop ecx
jne 0x40b70c
push 0x44745c
call fcn.0040858a
test al, al
pop ecx
jne 0x40b6f5
push 0x447464
call fcn.0040858a
test al, al
pop ecx
jne 0x40b6f5
push 0x44746c
call fcn.0040858a
test al, al
pop ecx
jne 0x40b6f5
push 0x447474
call fcn.0040858a
test al, al
pop ecx
jne 0x40b6f5
push 0x44747c
call fcn.0040858a
test al, al
pop ecx
jne 0x40b6f5
push 0x447484
call fcn.0040858a
test al, al
pop ecx
jne 0x40b6f5
push 0x44748c
call fcn.0040858a
test al, al
pop ecx
jne 0x40b6f5
push 0x447494
call fcn.0040858a
test al, al
pop ecx
je 0x40b757
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b7ff
lea esi, [esp + 0x98]
jmp 0x40b746
mov byte [esp + 0x95], 0
jmp 0x40b757
mov byte [esp + 0x94], 1
jmp 0x40b757
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b85f
lea esi, [esp + 0x78]
jmp 0x40b746
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b85f
lea esi, [esp + 0x5c]
mov eax, dword [edi + ebx + 4]
call fcn.00401247
inc dword [esp + 0x18]
inc dword [esp + 0x14]
push 0
push 1
lea esi, [esp + 0x48]
mov byte [esp + 0x6f0], 2
call fcn.004012b5
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
inc dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jl 0x40b4e2
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea edi, [esp + 0x5c]
lea eax, [esp + 0x2dc]
call fcn.0040af3f
cmp dword [esp + 0x204], esi
je 0x40b7eb
cmp dword [esp + 0x1e8], esi
jne 0x40b7eb
lea eax, [esp + 0x24]
push 0x522b
push eax
call fcn.00402c73
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [esp + 0x1d8]
push ecx
xor ebx, ebx
mov byte [esp + 0x6f0], 4
call fcn.00401313
push ebx
push 1
lea esi, [esp + 0x2c]
mov byte [esp + 0x6f0], 2
call fcn.004012b5
push dword [esp + 0x20]
lea ecx, [esp + 0x2e0]
call fcn.0040af7d
mov esi, eax
jmp 0x40b80f
push 0
push 1
lea esi, [esp + 0x48]
call fcn.004012b5
push 0xfffffffffffffffe
pop esi
lea edi, [esp + 0x5c]
call fcn.00408926
lea edi, [esp + 0xb4]
call fcn.0040894c
or dword [esp + 0x6e8], 0xffffffff
lea eax, [esp + 0x2dc]
push eax
call fcn.00408a58
mov eax, esi
mov ecx, dword [esp + 0x6e0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x6c8]
xor ecx, esp
call fcn.004321f0
mov esp, ebp
pop ebp
ret
push 0
push 1
lea esi, [esp + 0x48]
call fcn.004012b5
lea edi, [esp + 0x5c]
call fcn.00408926
lea edi, [esp + 0xb4]
call fcn.0040894c
or dword [esp + 0x6e8], 0xffffffff
lea eax, [esp + 0x2dc]
push eax
call fcn.00408a58
push 0xfffffffffffffffe
pop eax
jmp 0x40b83b