Function at 0x416e90
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
push edi
jmp 0x416eee
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA_1]
test byte [ebp - 0x18], 1
je 0x416f19
mov eax, dword [ebp - 0x14]
and eax, 0xffff
mov dword [ebp + 0x14], eax
jmp 0x416f20
mov dword [ebp + 0x14], 0xa
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA_1]
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], 0
call dword [sym.imp.KERNEL32.dll_GetCommandLineA_1]
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x4c], eax
mov word [0x41c1b8], 0
mov word [0x41fc42], 0
cmp dword [ebp + 0xc], 0
jne 0x416f74
mov ecx, dword [ebp + 8]
call fcn.00417df0
test eax, eax
jne 0x416f74
xor eax, eax
jmp 0x41733c
push 0x104
push 0x41fa70
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA_1]
test eax, eax
jne 0x416f97
xor eax, eax
jmp 0x41733c
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
call fcn.00417e40
test eax, eax
jne 0x416fc5
push 0
push 0x41c0b8
push 0x41c214
push 0
call dword [sym.imp.USER32.dll_MessageBoxA_1]
xor eax, eax
jmp 0x41733c
mov dword [ebp - 0x50], 1
mov eax, dword [ebp + 0x10]
mov dword [0x41f9d0], eax
mov edx, 0x41fa50
lea ecx, [0x41f9b1]
call fcn.00419bb0
call fcn.00419be0
test eax, eax
je 0x417009
mov word [0x41c1b8], 1
mov dword [0x41c168], 1
jmp 0x4172a3
mov ecx, 1
call fcn.00419a90
xor eax, eax
mov ax, word [0x41fc42]
test ah, 0xc0
jne 0x417052
xor eax, eax
mov ax, word [0x41fc42]
test ah, 0x10
je 0x417052
push 0
push 0x8003
push 0x111
mov eax, dword [0x41fb90]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x417057
call fcn.00417670
cmp dword [0x41c170], 0
je 0x41707a
mov ecx, dword [ebp - 0x50]
call fcn.00419cb0
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
call fcn.00419d70
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jne 0x4170ab
xor eax, eax
mov ax, word [0x41c1b8]
test eax, eax
je 0x4170ab
xor eax, eax
mov ax, word [0x41f9af]
test eax, eax
je 0x4170ab
dec word [0x41f9af]
cmp dword [ebp - 0x50], 1
jne 0x4171c1
xor eax, eax
mov ax, word [0x41c1b8]
test eax, eax
je 0x4171c1
xor eax, eax
mov ax, word [0x41c17c]
test al, 2
jne 0x4170f3
cmp dword [0x41c178], 0
je 0x4170f3
xor eax, eax
mov ax, word [0x41c17c]
or eax, 2
mov word [0x41c17c], ax
xor eax, eax
mov ax, word [0x41c17c]
test al, 2
je 0x417132
call fcn.0041a240
mov word [0x41c1b8], ax
xor eax, eax
mov ax, word [0x41c1b8]
test eax, eax
jne 0x417132
push 0
push 0x41c0b8
push 0x41c204
push 0
call dword [sym.imp.USER32.dll_MessageBoxA_1]
xor eax, eax
mov ax, word [0x41c17c]
test al, 1
jne 0x4171c1
cmp dword [0x41c174], 0
je 0x417184
movsx eax, word [0x41f9c1]
test eax, eax
jl 0x417184
movsx eax, word [0x41f9c1]
shl eax, 2
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
mov ecx, dword [0x41fc4c]
xor edx, edx
mov dx, word [eax + ecx + 0x28]
test dl, 8
jne 0x4171b0
cmp dword [0x41c174], 0
je 0x4171c1
movsx eax, word [0x41f9c1]
test eax, eax
jge 0x4171c1
xor eax, eax
mov ax, word [0x41fc54]
test al, 8
je 0x4171c1
xor eax, eax
mov ax, word [0x41c17c]
or eax, 1
mov word [0x41c17c], ax
xor eax, eax
mov ax, word [0x41c17c]
test eax, eax
je 0x4172a3
cmp dword [ebp - 0x50], 1
jne 0x4172a3
xor eax, eax
mov ax, word [0x41c1b8]
test eax, eax
je 0x4172a3
lea eax, [ebp - 0x64]
push eax
mov edx, 0x41fb80
lea ecx, [0x41f9b1]
call fcn.0041ab40
mov ecx, 0x41f950
add ecx, 0x61
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
call fcn.00419630
test eax, eax
jne 0x417239
mov edx, 0x41c1fc
mov ecx, 0x41c1e0
call fcn.0041a5f0
mov edx, 0x41fa50
lea ecx, [0x41f9b1]
call fcn.00419bb0
mov ecx, dword [ebp + 0x10]
call fcn.0041a0f0
test eax, eax
je 0x417281
call fcn.0041a070
mov dword [ebp - 0x50], eax
push 0
push 0
push 0x10
mov eax, dword [0x41fb90]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov word [0x41c1b8], 0
jmp 0x4172a3
mov dword [ebp - 0x50], 0
mov word [0x41c1b8], 0
push 0
push 0
push 0x10
mov eax, dword [0x41fb90]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x54]
call fcn.004173c0
mov dword [ebp - 0x48], eax
push 0
push 0
push 0x10
mov eax, dword [0x41fb90]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x41c180], 2
je 0x417318
cmp dword [ebp - 0x50], 1
jne 0x417318
xor eax, eax
mov ax, word [0x41c1b8]
test eax, eax
je 0x417318
mov eax, dword [ebp + 8]
push eax
push 0x41c1a8
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ax, word [0x41c1bc]
test eax, eax
je 0x417318
mov eax, dword [ebp - 0x4c]
push eax
lea edx, [ebp - 0x54]
mov ecx, dword [ebp - 0x48]
call fcn.00417350
cmp dword [ebp - 0x54], 0
je 0x41732a
mov ecx, dword [ebp - 0x54]
call fcn.0041a5e0
mov eax, dword [ebp - 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess_1]
pop edi
pop esi
pop ebx
leave
ret 0x10