Function at 0x40e1b3
Capabilities:
Accept command line arguments

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0x49c
push ebx
push esi
push edi
lea eax, [ebp + 0x70]
push eax
mov dword [ebp + 0x6c], ecx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ecx, dword [ebp + 0x6c]
mov dword [ebp + 0x68], eax
call fcn.0040dc08
lea ecx, [ebp + 0x60]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
xor eax, eax
mov esi, 0x206
push esi
mov word [ebp - 0x424], ax
xor ebx, ebx
lea eax, [ebp - 0x422]
push ebx
push eax
call fcn.0042878d
add esp, 0xc
push dword [ebp + 0x60]
push ebx
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp + 0x64], eax
cmp eax, ebx
je 0x40e374
mov edi, 0x104
push edi
lea ecx, [ebp - 0x424]
push ecx
push ebx
push eax
call sub.PSAPI.DLL_GetModuleFileNameExW
test eax, eax
je 0x40e36b
xor eax, eax
push esi
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x21a]
push ebx
push eax
call fcn.0042878d
add esp, 0xc
push edi
lea eax, [ebp - 0x21c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 4]
call fcn.00404cca
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp + 0x20]
call fcn.00404cca
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp + 0x20]
call fcn.0040502d
mov edi, eax
lea eax, [ebp + 0x3c]
push eax
lea ecx, [ebp + 0x20]
call fcn.0040504b
mov ebx, eax
lea eax, [ebp + 0x18]
push eax
lea ecx, [ebp + 0x20]
call fcn.0040502d
mov esi, fcn.0042898e
push esi
push dword [edi + 4]
push dword [edi]
push dword [ebx + 4]
push dword [ebx]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x14]
push eax
call fcn.0040d0bd
add esp, 0x20
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 4]
call fcn.0040502d
mov edi, eax
lea eax, [ebp + 0x18]
push eax
lea ecx, [ebp - 4]
call fcn.0040504b
mov ebx, eax
lea eax, [ebp + 0x3c]
push eax
lea ecx, [ebp - 4]
call fcn.0040502d
push esi
push dword [edi + 4]
push dword [edi]
push dword [ebx + 4]
push dword [ebx]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0xc]
push eax
call fcn.0040d0bd
add esp, 0x20
lea eax, [ebp + 0x20]
push eax
lea ecx, [ebp - 4]
call fcn.0040d048
test eax, eax
je 0x40e351
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 1
lea ecx, [ebp + 0x20]
call fcn.004049d8
push 0
lea ecx, [ebp - 4]
push 1
call fcn.004049d8
mov al, 1
pop edi
pop esi
pop ebx
add ebp, 0x78
leave
ret
push 0
push 1
lea ecx, [ebp + 0x20]
call fcn.004049d8
push 0
push 1
lea ecx, [ebp - 4]
call fcn.004049d8
xor ebx, ebx
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str._123pr123i123nt123:
lea ecx, [ebp + 0x44]
call fcn.00404cca
mov esi, 0x429e98
jmp 0x40e398
push 0x429900
push 3
push eax
lea ecx, [ebp + 0x44]
call fcn.00408847
push 3
push ebx
push esi
lea ecx, [ebp + 0x44]
call fcn.004062dc
cmp eax, 0xffffffff
jne 0x40e388
xor edi, edi
inc edi
cmp dword [ebp + 0x70], edi
jle 0x40e414
mov esi, dword [ebp + 0x68]
push str._click
push dword [esi + edi*4]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x40e41a
cmp dword [ebp + 0x5c], 8
mov eax, dword [ebp + 0x48]
jae 0x40e3d2
lea eax, [ebp + 0x48]
mov esi, dword [esi + edi*4]
push eax
mov eax, dword [ebp + 0x68]
push dword [eax + edi*4]
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
cmp eax, esi
je 0x40e434
cmp word [esi], 0x2d
jne 0x40e40e
cmp word [esi + 2], 0x6b
jne 0x40e40e
cmp word [esi + 4], 0x69
jne 0x40e40e
cmp word [esi + 6], 0x6c
jne 0x40e40e
cmp word [esi + 8], 0x6c
jne 0x40e40e
cmp word [esi + 0xa], bx
je 0x40e456
inc edi
cmp edi, dword [ebp + 0x70]
jl 0x40e3b1
mov byte [ebp + 0x77], 0
jmp 0x40e462
inc edi
cmp edi, dword [ebp + 0x70]
jge 0x40e42b
push dword [esi + edi*4]
mov ecx, dword [ebp + 0x6c]
call fcn.0040e00c
push ebx
lea ecx, [ebp + 0x44]
jmp 0x40e340
mov ecx, dword [ebp + 0x68]
mov eax, dword [ecx + edi*4]
add eax, 0xe
cmp word [eax], bx
je 0x40e42b
inc edi
cmp edi, dword [ebp + 0x70]
jge 0x40e42b
push dword [ecx + edi*4]
mov ecx, dword [ebp + 0x6c]
push eax
call fcn.0040e0db
jmp 0x40e42b
mov ecx, dword [ebp + 0x6c]
call fcn.0040dac4
mov byte [ebp + 0x77], 1
push ebx
push 1
lea ecx, [ebp + 0x44]
call fcn.004049d8
mov al, byte [ebp + 0x77]
jmp 0x40e349