Function at 0x40c1c4
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x66c
mov eax, dword [0x44f4f8]
xor eax, esp
mov dword [esp + 0x668], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov dword [0x453bf0], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, eax
lea ebx, [esp + 0x2d8]
mov dword [esp + 0x1c], ecx
call fcn.0040965e
lea eax, [esp + 0xb0]
call fcn.00407a93
push 7
pop eax
xor esi, esi
mov dword [esp + 0x70], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0xac], eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x70], esi
mov word [esp + 0x60], si
mov dword [esp + 0x8c], esi
mov word [esp + 0x7c], si
mov dword [esp + 0xac], esi
mov word [esp + 0x9c], si
mov byte [esp + 0x94], 0
mov byte [esp + 0x95], 1
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
cmp ebx, esi
je 0x40c52a
xor eax, eax
inc eax
cmp dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
jle 0x40c523
mov dword [esp + 0x10], 2
mov edi, dword [esp + 0x14]
shl edi, 2
mov eax, dword [edi + ebx]
lea ecx, [esp + 0x3c]
call fcn.0040118b
push 0x44451c
lea esi, [esp + 0x40]
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4db
push 0x444524
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4db
push 0x44452c
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4db
push 0x444534
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4db
push 0x44453c
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4c7
push 0x444544
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4c7
push 0x44454c
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4c7
push 0x444554
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4c7
push 0x44455c
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4bd
push 0x444564
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4bd
push 0x44456c
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4bd
push 0x444574
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4bd
push 0x44457c
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4bd
push 0x444584
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4bd
push 0x44458c
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4bd
push 0x444594
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4bd
push 0x44459c
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4b3
push 0x4445a4
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4b3
push 0x4445ac
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4b3
push 0x4445b4
call fcn.004091dc
test al, al
pop ecx
jne 0x40c4b3
push 0x4445bc
call fcn.004091dc
test al, al
pop ecx
jne 0x40c49c
push 0x4445c4
call fcn.004091dc
test al, al
pop ecx
jne 0x40c49c
push 0x4445cc
call fcn.004091dc
test al, al
pop ecx
jne 0x40c49c
push 0x4445d4
call fcn.004091dc
test al, al
pop ecx
jne 0x40c49c
push 0x4445dc
call fcn.004091dc
test al, al
pop ecx
jne 0x40c49c
push 0x4445e4
call fcn.004091dc
test al, al
pop ecx
jne 0x40c49c
push 0x4445ec
call fcn.004091dc
test al, al
pop ecx
jne 0x40c49c
push 0x4445f4
call fcn.004091dc
test al, al
pop ecx
je 0x40c4fe
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40c594
lea esi, [esp + 0x94]
jmp 0x40c4ed
mov byte [esp + 0x91], 0
jmp 0x40c4fe
mov byte [esp + 0x90], 1
jmp 0x40c4fe
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40c5dd
lea esi, [esp + 0x74]
jmp 0x40c4ed
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jge 0x40c5dd
lea esi, [esp + 0x58]
mov eax, dword [edi + ebx + 4]
call fcn.00401338
inc dword [esp + 0x14]
inc dword [esp + 0x10]
push 0
push 1
lea esi, [esp + 0x44]
call fcn.00401452
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
inc dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jl 0x40c291
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea edi, [esp + 0x58]
lea eax, [esp + 0x2d8]
call fcn.0040bbda
cmp dword [esp + 0x200], esi
je 0x40c580
cmp dword [esp + 0x1e4], esi
jne 0x40c580
push 0x27ea
call fcn.004050db
lea ecx, [esp + 0x24]
call fcn.00410040
push 0xffffffffffffffff
lea eax, [esp + 0x1d4]
push eax
xor ebx, ebx
lea eax, [esp + 0x28]
call fcn.004016e9
push ebx
push 1
lea esi, [esp + 0x28]
call fcn.00401452
push dword [esp + 0x1c]
lea ecx, [esp + 0x2dc]
call fcn.0040bc18
mov esi, eax
jmp 0x40c5a4
push 0
push 1
lea esi, [esp + 0x44]
call fcn.00401452
push 0xfffffffffffffffe
pop esi
lea edi, [esp + 0x58]
call fcn.004097d1
lea edi, [esp + 0xb0]
call fcn.004097f7
lea eax, [esp + 0x2d8]
push eax
call fcn.004098e9
mov eax, esi
mov ecx, dword [esp + 0x674]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004328eb
mov esp, ebp
pop ebp
ret
push 0
push 1
lea esi, [esp + 0x44]
call fcn.00401452
lea edi, [esp + 0x58]
call fcn.004097d1
lea edi, [esp + 0xb0]
call fcn.004097f7
lea eax, [esp + 0x2d8]
push eax
call fcn.004098e9
push 0xfffffffffffffffe
pop eax
jmp 0x40c5c8