Function at 0x4104f3
Capabilities:
Accept command line arguments

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0x49c
push ebx
push esi
push edi
lea eax, [ebp + 0x70]
push eax
mov dword [ebp + 0x6c], ecx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ecx, dword [ebp + 0x6c]
mov dword [ebp + 0x68], eax
call fcn.0040ff48
lea ecx, [ebp + 0x60]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
xor eax, eax
mov esi, 0x206
push esi
mov word [ebp - 0x424], ax
xor ebx, ebx
lea eax, [ebp - 0x422]
push ebx
push eax
call fcn.0042c331
add esp, 0xc
push dword [ebp + 0x60]
push ebx
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp + 0x64], eax
cmp eax, ebx
je 0x4106b4
mov edi, 0x104
push edi
lea ecx, [ebp - 0x424]
push ecx
push ebx
push eax
call sub.PSAPI.DLL_GetModuleFileNameExW
test eax, eax
je 0x4106ab
xor eax, eax
push esi
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x21a]
push ebx
push eax
call fcn.0042c331
add esp, 0xc
push edi
lea eax, [ebp - 0x21c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 4]
call fcn.00404cea
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp + 0x20]
call fcn.00404cea
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp + 0x20]
call fcn.0040504d
mov edi, eax
lea eax, [ebp + 0x3c]
push eax
lea ecx, [ebp + 0x20]
call fcn.0040b46d
mov ebx, eax
lea eax, [ebp + 0x18]
push eax
lea ecx, [ebp + 0x20]
call fcn.0040504d
mov esi, fcn.0042c5ad
push esi
push dword [edi + 4]
push dword [edi]
push dword [ebx + 4]
push dword [ebx]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x14]
push eax
call fcn.0040f3fd
add esp, 0x20
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 4]
call fcn.0040504d
mov edi, eax
lea eax, [ebp + 0x18]
push eax
lea ecx, [ebp - 4]
call fcn.0040b46d
mov ebx, eax
lea eax, [ebp + 0x3c]
push eax
lea ecx, [ebp - 4]
call fcn.0040504d
push esi
push dword [edi + 4]
push dword [edi]
push dword [ebx + 4]
push dword [ebx]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0xc]
push eax
call fcn.0040f3fd
add esp, 0x20
lea eax, [ebp + 0x20]
push eax
lea ecx, [ebp - 4]
call fcn.0040f388
test eax, eax
je 0x410691
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 1
lea ecx, [ebp + 0x20]
call fcn.004049f8
push 0
lea ecx, [ebp - 4]
push 1
call fcn.004049f8
mov al, 1
pop edi
pop esi
pop ebx
add ebp, 0x78
leave
ret
push 0
push 1
lea ecx, [ebp + 0x20]
call fcn.004049f8
push 0
push 1
lea ecx, [ebp - 4]
call fcn.004049f8
xor ebx, ebx
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str._123pr123i123nt123:
lea ecx, [ebp + 0x44]
call fcn.00404cea
mov esi, 0x42e058
jmp 0x4106d8
push 0x42d93c
push 3
push eax
lea ecx, [ebp + 0x44]
call fcn.00409970
push 3
push ebx
push esi
lea ecx, [ebp + 0x44]
call fcn.0040634d
cmp eax, 0xffffffff
jne 0x4106c8
xor edi, edi
inc edi
cmp dword [ebp + 0x70], edi
jle 0x410754
mov esi, dword [ebp + 0x68]
push str._click
push dword [esi + edi*4]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x41075a
cmp dword [ebp + 0x5c], 8
mov eax, dword [ebp + 0x48]
jae 0x410712
lea eax, [ebp + 0x48]
mov esi, dword [esi + edi*4]
push eax
mov eax, dword [ebp + 0x68]
push dword [eax + edi*4]
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
cmp eax, esi
je 0x410774
cmp word [esi], 0x2d
jne 0x41074e
cmp word [esi + 2], 0x6b
jne 0x41074e
cmp word [esi + 4], 0x69
jne 0x41074e
cmp word [esi + 6], 0x6c
jne 0x41074e
cmp word [esi + 8], 0x6c
jne 0x41074e
cmp word [esi + 0xa], bx
je 0x410796
inc edi
cmp edi, dword [ebp + 0x70]
jl 0x4106f1
mov byte [ebp + 0x77], 0
jmp 0x4107a2
inc edi
cmp edi, dword [ebp + 0x70]
jge 0x41076b
push dword [esi + edi*4]
mov ecx, dword [ebp + 0x6c]
call fcn.0041034c
push ebx
lea ecx, [ebp + 0x44]
jmp 0x410680
mov ecx, dword [ebp + 0x68]
mov eax, dword [ecx + edi*4]
add eax, 0xe
cmp word [eax], bx
je 0x41076b
inc edi
cmp edi, dword [ebp + 0x70]
jge 0x41076b
push dword [ecx + edi*4]
mov ecx, dword [ebp + 0x6c]
push eax
call fcn.0041041b
jmp 0x41076b
mov ecx, dword [ebp + 0x6c]
call fcn.0040fe04
mov byte [ebp + 0x77], 1
push ebx
push 1
lea ecx, [ebp + 0x44]
call fcn.004049f8
mov al, byte [ebp + 0x77]
jmp 0x410689