Function at 0x40b29f
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4473d8
mov eax, dword fs:[0]
push eax
sub esp, 0x6c8
mov eax, dword [0x459210]
xor eax, esp
mov dword [esp + 0x6c0], eax
push ebx
push esi
push edi
mov eax, dword [0x459210]
xor eax, esp
push eax
lea eax, [esp + 0x6d8]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [0x45da10], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, eax
lea eax, [esp + 0x2dc]
push eax
mov dword [esp + 0x24], ecx
call fcn.004084be
lea eax, [esp + 0xb4]
xor esi, esi
push eax
mov dword [esp + 0x6e4], esi
call fcn.004065cf
push 7
pop eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], esi
mov word [esp + 0x60], si
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], esi
mov word [esp + 0x7c], si
mov dword [esp + 0xb0], eax
mov dword [esp + 0xac], esi
mov word [esp + 0x9c], si
mov byte [esp + 0x6e0], 2
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x98], 0
mov byte [esp + 0x99], 1
mov dword [esp + 0x20], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ebx, eax
cmp ebx, esi
je 0x40b649
xor eax, eax
inc eax
cmp dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
jle 0x40b642
mov dword [esp + 0x14], 2
mov edi, dword [esp + 0x18]
shl edi, 2
mov eax, dword [edi + ebx]
lea ecx, [esp + 0x40]
call fcn.00401222
push 0x44a374
lea esi, [esp + 0x44]
mov byte [esp + 0x6e4], 3
call fcn.004082df
test al, al
pop ecx
jne 0x40b5f2
push 0x44a37c
call fcn.004082df
test al, al
pop ecx
jne 0x40b5f2
push 0x44a384
call fcn.004082df
test al, al
pop ecx
jne 0x40b5f2
push 0x44a38c
call fcn.004082df
test al, al
pop ecx
jne 0x40b5f2
push 0x44a394
call fcn.004082df
test al, al
pop ecx
jne 0x40b5de
push 0x44a39c
call fcn.004082df
test al, al
pop ecx
jne 0x40b5de
push 0x44a3a4
call fcn.004082df
test al, al
pop ecx
jne 0x40b5de
push 0x44a3ac
call fcn.004082df
test al, al
pop ecx
jne 0x40b5de
push 0x44a3b4
call fcn.004082df
test al, al
pop ecx
jne 0x40b5d4
push 0x44a3bc
call fcn.004082df
test al, al
pop ecx
jne 0x40b5d4
push 0x44a3c4
call fcn.004082df
test al, al
pop ecx
jne 0x40b5d4
push 0x44a3cc
call fcn.004082df
test al, al
pop ecx
jne 0x40b5d4
push 0x44a3d4
call fcn.004082df
test al, al
pop ecx
jne 0x40b5d4
push 0x44a3dc
call fcn.004082df
test al, al
pop ecx
jne 0x40b5d4
push 0x44a3e4
call fcn.004082df
test al, al
pop ecx
jne 0x40b5d4
push 0x44a3ec
call fcn.004082df
test al, al
pop ecx
jne 0x40b5d4
push 0x44a3f4
call fcn.004082df
test al, al
pop ecx
jne 0x40b5ca
push 0x44a3fc
call fcn.004082df
test al, al
pop ecx
jne 0x40b5ca
push 0x44a404
call fcn.004082df
test al, al
pop ecx
jne 0x40b5ca
push 0x44a40c
call fcn.004082df
test al, al
pop ecx
jne 0x40b5ca
push 0x44a414
call fcn.004082df
test al, al
pop ecx
jne 0x40b5b3
push 0x44a41c
call fcn.004082df
test al, al
pop ecx
jne 0x40b5b3
push 0x44a424
call fcn.004082df
test al, al
pop ecx
jne 0x40b5b3
push 0x44a42c
call fcn.004082df
test al, al
pop ecx
jne 0x40b5b3
push 0x44a434
call fcn.004082df
test al, al
pop ecx
jne 0x40b5b3
push 0x44a43c
call fcn.004082df
test al, al
pop ecx
jne 0x40b5b3
push 0x44a444
call fcn.004082df
test al, al
pop ecx
jne 0x40b5b3
push 0x44a44c
call fcn.004082df
test al, al
pop ecx
je 0x40b615
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b6bd
lea esi, [esp + 0x98]
jmp 0x40b604
mov byte [esp + 0x95], 0
jmp 0x40b615
mov byte [esp + 0x94], 1
jmp 0x40b615
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b71d
lea esi, [esp + 0x78]
jmp 0x40b604
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jge 0x40b71d
lea esi, [esp + 0x5c]
mov eax, dword [edi + ebx + 4]
call fcn.00401248
inc dword [esp + 0x18]
inc dword [esp + 0x14]
push 0
push 1
lea esi, [esp + 0x48]
mov byte [esp + 0x6e8], 2
call fcn.004012b6
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
inc dword [esp + 0x14]
cmp eax, dword [esp + 0x1c]
jl 0x40b3a0
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea edi, [esp + 0x5c]
lea eax, [esp + 0x2dc]
call fcn.0040ae4f
cmp dword [esp + 0x204], esi
je 0x40b6a9
cmp dword [esp + 0x1e8], esi
jne 0x40b6a9
lea eax, [esp + 0x24]
push 0x522b
push eax
call fcn.00402c83
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [esp + 0x1d8]
push ecx
xor ebx, ebx
mov byte [esp + 0x6e8], 4
call fcn.00401322
push ebx
push 1
lea esi, [esp + 0x2c]
mov byte [esp + 0x6e8], 2
call fcn.004012b6
push dword [esp + 0x20]
lea ecx, [esp + 0x2e0]
call fcn.0040ae8d
mov esi, eax
jmp 0x40b6cd
push 0
push 1
lea esi, [esp + 0x48]
call fcn.004012b6
push 0xfffffffffffffffe
pop esi
lea edi, [esp + 0x5c]
call fcn.00408654
lea edi, [esp + 0xb4]
call fcn.0040867a
or dword [esp + 0x6e0], 0xffffffff
lea eax, [esp + 0x2dc]
push eax
call fcn.0040876c
mov eax, esi
mov ecx, dword [esp + 0x6d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x6c0]
xor ecx, esp
call fcn.004351c0
mov esp, ebp
pop ebp
ret
push 0
push 1
lea esi, [esp + 0x48]
call fcn.004012b6
lea edi, [esp + 0x5c]
call fcn.00408654
lea edi, [esp + 0xb4]
call fcn.0040867a
or dword [esp + 0x6e0], 0xffffffff
lea eax, [esp + 0x2dc]
push eax
call fcn.0040876c
push 0xfffffffffffffffe
pop eax
jmp 0x40b6f9