Function at 0x468d28
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d0
push esi
push edi
mov esi, edx
mov dword [ebp - 0x48], ecx
xor eax, eax
mov dword [ebp - 0x20], 0xfffffffd
push 4
mov dword [ebp - 0xc4], esi
mov dword [ebp - 8], eax
pop edx
jmp 0x468d60
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x124], 0xd327cb3f
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x468d4f
mov dword [ebp - 8], eax
jmp 0x468d78
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x80], 0x61f6656
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x468d6a
mov dword [ebp - 0x74], 3
push 1
pop edi
cmp dword [ebp - 0x74], eax
jl 0x468e28
mov dword [ebp - 0x1c], eax
xor edx, edx
mov dword [ebp - 0x14], 0x3691f6f4
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ebp + ecx*4 - 0x124]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ebp + ecx*4 - 0x124]
mov ecx, dword [ebp - 0x74]
cmp ecx, edi
mov ecx, dword [ebp - 0x74]
setl dl
mov dword [ebp - 0x14], edx
xor edx, edx
cmp dword [ebp - 0x14], ecx
setl dl
xor ecx, ecx
cmp edx, 0x5d367296
setl cl
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x14]
setle dl
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x118]
mov edx, dword [ebp - 0x20]
sub edx, ecx
neg edx
sbb edx, edx
inc edx
cmp edx, 0xffffffff
jb 0x468dfa
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x74]
push 0
mov edx, dword [ebp + ecx*4 - 0x124]
mov ecx, dword [ebp - 0x1c]
cmp ecx, edx
mov ecx, dword [ebp - 0x74]
pop edx
setg dl
mov ecx, dword [ebp + ecx*4 - 0x124]
imul ecx, edx
mov dword [ebp - 0x14], ecx
dec dword [ebp - 0x74]
jns 0x468d90
mov byte [ebp - 9], al
cmp byte [ebp - 9], al
je 0x468e3e
push 0x1b47
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
xor eax, eax
mov ecx, dword [0xa94bd4]
test cl, 1
jne 0x468ec5
push eax
or ecx, edi
mov dword [0xa94be0], eax
push eax
mov dword [0xa94bd4], ecx
mov dword [0xa94be4], eax
call fcn.0041053f
mov dword [0xa94be0], eax
xor ecx, ecx
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xd4]
push eax
push 0x10
push ecx
lea eax, [ebp - 0x160]
mov dword [0xa94be8], ecx
mov dword [0xa94bf0], ecx
mov dword [0xa94bec], ecx
mov ecx, 0xa94be8
push eax
mov dword [0xa94bfc], 0x3f800000
call fcn.00410275
push 0x49a994
mov dword [0xa94bf4], 7
mov dword [0xa94bf8], 8
call fcn.0048478f
pop ecx
mov dword [ebp - 0x20], 0x3fde7504
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], 0xa1dd
mov dword [ebp - 0x1c], 0xffffffff
push 2
mov dword [ebp - 0x14], 0x3978d11e
mov dword [ebp - 8], eax
pop edx
jmp 0x468efc
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x38], 0xeb90
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x468eee
mov dword [ebp - 8], eax
jmp 0x468f17
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x94], 7
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x468f06
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x90], ecx
mov ecx, dword [ebp - 4]
inc ecx
neg ecx
sbb ecx, ecx
neg ecx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jle 0x468f3d
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x1c], 0x82aa
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 4]
cmp edx, ecx
mov ecx, dword [ebp - 0x38]
push 0
pop edx
setg dl
add ecx, edx
xor edx, edx
cmp ecx, 0xfffffff8
mov ecx, dword [ebp - 0x38]
setl dl
imul ecx, edx
mov dword [ebp - 0x14], ecx
imul ecx, dword [ebp - 0x48], 0x2710
add ecx, esi
mov dword [ebp - 0x70], ecx
mov dword [ebp - 4], 0xddc85f70
mov dword [ebp - 4], eax
jmp 0x468fcd
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0x190], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x468fbc
mov dword [ebp - 4], 0x13
jmp 0x469039
mov dword [ebp - 0x1c], 0x58a835a
mov dword [ebp - 8], eax
jmp 0x468ff6
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x68], 0xbd697e78
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x468fe8
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 0x1c]
add edx, 0xd19c
cmp ecx, edx
push 0
pop edx
setge dl
sub edx, dword [ebp - 0x68]
mov ecx, dword [ebp - 4]
sub edx, 2
neg edx
sbb edx, edx
inc edx
add ecx, edx
xor edx, edx
cmp ecx, 0xffab
setl dl
mov dword [ebp - 0x188], edx
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xfffffffc
jle 0x468fdc
mov byte [ebp - 9], al
cmp byte [ebp - 9], al
je 0x469056
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
lea eax, [ebp - 0x70]
push eax
call fcn.0046a030
mov edi, dword [eax]
xor eax, eax
mov dword [ebp - 0x10], 0xec4f3f7e
mov dword [ebp - 0x1c], 0x62d7bc3
mov dword [ebp - 0x20], 0xf3b8c105
mov dword [ebp - 8], 0xa4d59ff4
mov dword [ebp - 0x24], 0xfec46bc2
mov dword [ebp - 4], 0xf1fcc103
mov dword [ebp - 0x18], 0x2375
mov dword [ebp - 8], eax
jmp 0x4690aa
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x14c], 0x36ee
inc dword [ebp - 8]
cmp dword [ebp - 8], 1
jl 0x469099
mov ecx, dword [ebp - 0x1c]
add ecx, 0x40ca7005
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x1c], ecx
jne 0x4690cc
cmp dword [ebp - 0x1c], eax
jne 0x4690cc
mov esi, eax
jmp 0x4690cf
xor esi, esi
inc esi
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp edx, ecx
push 0
pop ecx
setne cl
cmp ecx, 3
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x10]
cmp ecx, esi
mov ecx, dword [ebp - 0x20]
setne dl
mov dword [ebp - 0x14], edx
xor edx, edx
cmp dword [ebp - 0x14], ecx
setle dl
add edx, 7
mov dword [ebp - 0x20], edx
mov dword [ebp - 8], 0xfffffff8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 0xfffffffa
je 0x46911a
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 4]
xor edx, edx
mov ecx, dword [ebp - 4]
xor esi, esi
push 5
pop ecx
sub ecx, dword [ebp - 4]
inc esi
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 4]
cmp ecx, esi
setge dl
sub edx, dword [ebp - 4]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, esi
setg cl
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 0x14]
setl dl
mov dword [ebp - 0x20], edx
test edi, edi
je 0x46921b
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1c], 0xf9b2cfb6
push 0xfffffffffffffff7
mov dword [edx], edi
pop edi
mov dword [ebp + 8], edi
mov dword [ebp - 0x14], 0x6e82
mov dword [ebp + 8], 0xffffffff
mov dword [ebp + 8], eax
jmp 0x469194
mov ecx, dword [ebp + 8]
mov dword [ebp + ecx*4 - 0x158], 0xfffffff9
inc dword [ebp + 8]
cmp dword [ebp + 8], 3
jl 0x469183
mov dword [ebp + 8], eax
jmp 0x4691b0
mov ecx, dword [ebp + 8]
mov dword [ebp + ecx*4 - 0xd0], 0xee973417
inc dword [ebp + 8]
cmp dword [ebp + 8], esi
jl 0x46919f
mov dword [ebp + 8], eax
jmp 0x4691cb
mov ecx, dword [ebp + 8]
mov dword [ebp + ecx*4 - 0x1c0], 0x1fb8
inc dword [ebp + 8]
cmp dword [ebp + 8], 4
jl 0x4691ba
mov dword [ebp + 8], eax
jmp 0x4691e0
mov ecx, dword [ebp + 8]
mov dword [ebp + ecx*4 - 0x4c], edi
inc dword [ebp + 8]
cmp dword [ebp + 8], esi
jl 0x4691d6
cmp dword [ebp - 0x154], eax
je 0x4691f8
cmp dword [ebp - 0x1c], eax
je 0x4691f8
mov eax, dword [ebp - 0x4c]
inc dword [ebp - 0x4c]
mov dword [ebp - 0xd0], 0x3b3bbbb5
mov eax, edx
mov ecx, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x154], esi
jmp 0x469fbb
mov dword [ebp - 0x1c], 0xb5c29478
mov dword [ebp - 0x1c], 0x5734cb44
push 3
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], eax
pop edi
jmp 0x469246
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0x44], 0xfe1ca2
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x469238
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], 0xd004
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
sub edx, 9
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, 0xe0cd9796
setne cl
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 4], ecx
mov dword [ebp - 4], 8
cmp dword [ebp - 4], 0x12
jg 0x4692eb
mov dword [ebp - 8], eax
jmp 0x4692be
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x178], 0xc47a
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x4692ad
cmp dword [ebp - 0x178], eax
je 0x4692d0
cmp dword [ebp - 0x40], eax
jne 0x4692d2
mov esi, eax
mov ecx, dword [ebp - 0x40]
xor edx, edx
cmp esi, ecx
push 1
setge dl
mov dword [ebp - 0x1c], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x12
pop esi
jle 0x4692a8
mov ecx, dword [0xa94bd4]
test cl, 2
jne 0x469375
push eax
or ecx, 2
mov dword [0xa94c00], eax
push eax
mov dword [0xa94bd4], ecx
mov dword [0xa94c04], eax
call fcn.0041053f
mov dword [0xa94c00], eax
xor ecx, ecx
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0xb4]
push eax
push 0x10
push ecx
lea eax, [ebp - 0x15c]
mov dword [0xa94c08], ecx
mov dword [0xa94c10], ecx
mov dword [0xa94c0c], ecx
mov ecx, 0xa94c08
push eax
mov dword [0xa94c1c], 0x3f800000
call fcn.00410275
push 0x49a98f
mov dword [0xa94c14], 7
mov dword [0xa94c18], 8
call fcn.0048478f
pop ecx
xor eax, eax
xorps xmm0, xmm0
movdqu xmmword [ebp - 0xe4], xmm0
mov dword [ebp - 4], 0xfffffffe
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], 0x25cf162c
mov dword [ebp - 0x10], eax
jmp 0x4693aa
mov ecx, dword [ebp - 0x10]
mov dword [ebp + ecx*4 - 0x9c], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x46939d
mov dword [ebp - 0x10], eax
jmp 0x4693c6
mov ecx, dword [ebp - 0x10]
mov dword [ebp + ecx*4 - 0xb0], 0x58a60016
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x4693b5
mov dword [ebp - 0x10], eax
jmp 0x4693dd
mov ecx, dword [ebp - 0x10]
mov dword [ebp + ecx*4 - 0xa8], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x4693d0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [ebp - 0xb0], eax
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x98]
cmp ecx, eax
push 0xfffffffffffffff7
setl dl
xor eax, eax
cmp edx, 0x9ec13488
setne al
xor edx, edx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xa4]
cmp ecx, eax
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xa4]
setne dl
add ecx, edx
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x98]
cmp eax, ecx
mov eax, dword [ebp - 0xa8]
setge dl
xor ecx, ecx
cmp edx, eax
pop eax
setle cl
cmp eax, ecx
mov eax, dword [ebp - 0xa0]
sbb edx, edx
add edx, 0x871ef5c6
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
sete cl
xor eax, eax
cmp ecx, 0x45beac3e
setne al
xor edx, edx
lea ecx, [eax + 0x16765654]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0x3407
setg al
xor ecx, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x14], eax
setle cl
xor eax, eax
cmp ecx, 0xfffffff9
setle al
sub eax, dword [ebp - 4]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xa4]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xa4]
setl cl
add eax, ecx
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x48]
push eax
call fcn.0046a092
mov edi, dword [eax]
mov dword [ebp - 0x10], edi
mov al, byte [ebp + 0xc]
test al, al
jne 0x4694f1
test edi, edi
jne 0x4696c5
lea ecx, [ebp - 0x1a0]
mov dl, al
push ecx
mov ecx, dword [ebp - 0x48]
call fcn.004510db
mov esi, eax
lea edi, [ebp - 0xe4]
xor edx, edx
inc edx
xor eax, eax
pop ecx
movsd dword es:[edi], dword [esi]
push 2
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x50], 0x70ade216
mov dword [ebp - 0x18], 0x8974b666
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x20], 0xd9a924c0
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 0xa095a979
mov dword [ebp - 0x24], 0xb95ae64
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0xfc3a065
mov dword [ebp - 8], 0xcd908fbd
mov dword [ebp - 0x14], 0x7a847e08
mov dword [ebp - 4], eax
pop edi
jmp 0x46957c
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0xcc], 0xfffffffe
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x46956b
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], edx
xor edx, edx
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0xd3351f4a
mov ecx, dword [ebp - 0xc8]
setne dl
add ecx, 0x315b
cmp ecx, edx
push 0
pop ecx
setl cl
xor edx, edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x20]
cmp dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x24]
setne dl
mov dword [ebp - 0x18], edx
xor edx, edx
cmp dword [ebp - 0x18], ecx
setge dl
cmp edx, dword [ebp - 0x20]
jl 0x4695ee
cmp dword [ebp - 0xc8], eax
je 0x4695ee
xor esi, esi
inc esi
mov edx, esi
jmp 0x4695f3
xor esi, esi
mov edx, eax
inc esi
dec dword [ebp - 8]
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x50]
imul ecx, edx
sub ecx, 0x3adab8f5
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
dec dword [ebp - 0x14]
cmp byte [ebp + 0xc], al
je 0x4696a6
cmp dword [ebp - 0xdc], eax
je 0x4696a6
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], 0x299
mov dword [ebp - 8], eax
jmp 0x46963e
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x64], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x469634
mov dword [ebp - 8], eax
jmp 0x469659
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x180], 0xfffffffd
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x469648
mov dword [ebp - 0x60], eax
jmp 0x46968b
mov dword [ebp - 4], 0xe2c0d37a
mov dword [ebp - 0x18], 0xbc781ced
mov dword [ebp - 4], eax
jmp 0x469683
mov dword [ebp - 0x18], 0xe64f1479
dec dword [ebp - 0x14]
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jle 0x469676
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0xd
jg 0x469663
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0xd8]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xdc]
mov dword [edx + 8], ecx
mov edi, dword [ebp - 0x10]
mov dword [ebp - 0x20], esi
push 2
mov dword [ebp - 4], 7
pop edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x18], 0x5f43260
mov dword [ebp - 4], eax
jmp 0x4696da
xor eax, eax
jmp 0x4696a9
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0x168], 0x26bdde0b
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x4696c9
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x4697b7
mov dword [ebp - 4], eax
jmp 0x4696fe
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0x6c], 0x97341720
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x4696f0
mov dword [ebp - 4], 0x6210b999
mov dword [ebp - 4], eax
jmp 0x4697a5
mov dword [ebp - 8], 0x5b7f37c0
mov dword [ebp - 0x14], 0xb9e9d60a
mov dword [ebp - 8], eax
jmp 0x46979d
mov dword [ebp - 0x14], 0x7a329ef
mov dword [ebp - 0x1c], esi
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x469740
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
xor eax, eax
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x6c]
cmp edx, ecx
push 0
pop ecx
setg cl
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 8]
cmp edx, ecx
push 0
pop ecx
setne cl
mov edx, 0xfce2949f
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x14]
sub edx, ecx
xor ecx, ecx
cmp edx, dword [ebp - 0x18]
push 0
setg cl
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x6c]
cmp edx, ecx
pop ecx
setne cl
xor esi, esi
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
inc dword [ebp - 8]
inc esi
cmp dword [ebp - 8], esi
jle 0x469725
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jle 0x469712
dec dword [ebp - 0x20]
jns 0x4696eb
test edi, edi
jne 0x469c94
cmp dword [ebp - 0xe4], edi
jle 0x469c94
mov dword [ebp - 4], 8
mov ecx, 0x3b6f
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0x18], 7
mov dword [ebp - 4], 0xfffffff6
jmp 0x4698a2
mov dword [ebp - 0x14], 0xfc39
push 3
pop ecx
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x108], ecx
mov dword [ebp - 0x18], 0x26a9d9e1
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0xf0]
cmp ecx, 0x816f93bd
mov ecx, dword [ebp - 0xf0]
sbb edx, edx
inc edx
imul ecx, edx
mov edx, dword [ebp - 4]
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, 7
setg cl
cmp ecx, 0xffffffff
jle 0x469867
mov edx, eax
cmp dword [ebp - 0xf4], eax
je 0x469869
mov edx, esi
mov ecx, dword [ebp - 4]
sub ecx, edx
mov edx, dword [ebp - 0x14]
neg ecx
push 0
sbb ecx, ecx
inc ecx
sub edx, ecx
mov ecx, dword [ebp - 0x110]
cmp edx, ecx
pop edx
setne dl
mov dword [ebp - 0x110], edx
mov ecx, dword [ebp - 0xf4]
imul ecx, edx
mov edx, dword [ebp - 0x18]
inc ecx
imul edx, ecx
mov dword [ebp - 0x18], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffff
jle 0x469802
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 8], 0xc19583e3
mov dword [ebp - 4], 0x951fe511
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x10], eax
jmp 0x4698d8
cmp dword [ebp - 0x10], eax
jne 0x4698de
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xc
jl 0x4698d0
cmp dword [ebp - 0x10], esi
jge 0x4698e8
cmp dword [ebp - 0x10], eax
jne 0x4698ea
mov esi, eax
mov ecx, dword [ebp - 0x10]
xor edx, edx
cmp esi, ecx
push 0
sete dl
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp edx, ecx
pop ecx
setl cl
xor edx, edx
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
test ecx, ecx
setns dl
mov dword [ebp - 8], edx
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
sub edx, ecx
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 4]
cmp edx, 0xffffffff
jle 0x46994a
cmp dword [ebp - 8], eax
je 0x46994a
xor esi, esi
inc esi
jmp 0x46994c
mov esi, eax
mov ecx, dword [ebp - 4]
xor edx, edx
cmp esi, ecx
setle dl
cmp edx, dword [ebp - 4]
jle 0x469965
cmp dword [ebp - 0x20], eax
jne 0x469965
xor edx, edx
inc edx
jmp 0x469967
mov edx, eax
xor ecx, ecx
cmp edx, 0xccba
setg cl
cmp ecx, dword [ebp - 4]
jg 0x469ac2
mov dword [ebp - 0x24], 0x3eb1
mov ecx, 0x4e60d2e6
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x134], ecx
mov dword [ebp - 8], eax
jmp 0x4699b2
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x2c], 0x14b7
inc dword [ebp - 8]
cmp dword [ebp - 8], 1
jl 0x4699a4
mov dword [ebp - 8], eax
jmp 0x469ab7
mov dword [ebp - 0x18], 0x35a02a90
mov edx, 0xe0c8
mov dword [ebp - 0x14], 0x5bb54a03
mov dword [ebp - 0x28], 1
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp + ecx*4 - 0x2c]
sub edx, ecx
mov ecx, dword [ebp - 8]
sub edx, dword [ebp + ecx*4 - 0x2c]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x18], edx
je 0x469a01
cmp dword [ebp - 0x2c], eax
je 0x469a01
xor esi, esi
inc esi
jmp 0x469a03
mov esi, eax
mov ecx, dword [ebp - 4]
xor edx, edx
cmp esi, ecx
mov ecx, dword [ebp - 8]
push 0
setle dl
mov dword [ebp - 0x18], edx
xor edx, edx
mov ecx, dword [ebp + ecx*4 - 0x2c]
cmp dword [ebp - 0x18], ecx
setg dl
mov dword [ebp - 0x14], edx
xor edx, edx
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x762a
setl dl
mov dword [ebp - 4], edx
mov edx, dword [ebp - 4]
sub edx, 0xd142
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 2
cmp edx, 0xc95c
setge cl
xor edx, edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x28]
cmp dword [ebp - 0x18], ecx
setg dl
xor ecx, ecx
cmp edx, 0xa9ad
setg cl
xor edx, edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp + ecx*4 - 0x2c]
add ecx, 4
cmp ecx, dword [ebp - 0x18]
setle dl
sub edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x24]
cmp edx, ecx
pop ecx
setg cl
sub ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 8]
cmp dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x2c]
setle dl
mov dword [ebp - 0x18], edx
xor edx, edx
cmp dword [ebp - 0x18], ecx
setg dl
mov dword [ebp - 0x134], edx
inc dword [ebp - 8]
cmp dword [ebp - 8], eax
jle 0x4699c0
jmp 0x469af6
mov dword [ebp - 4], eax
jmp 0x469ad8
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0xfc], 0x9c84d8bc
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x469ac7
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x469af0
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
dec dword [ebp - 0xf8]
mov dword [ebp - 0x18], 0xa7bc
xor esi, esi
mov dword [ebp - 0x18], 0xffffffff
inc esi
mov dword [ebp - 8], eax
jmp 0x469b1a
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x30], 0x4a8c6a53
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x469b0c
mov dword [ebp - 8], eax
jmp 0x469b35
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x1b0], 0x137b1891
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x469b24
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x469b4d
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
mov dword [ebp - 0x30], 0x13
jmp 0x469bca
mov dword [ebp - 0x18], 0xd4782549
mov dword [ebp - 0x18], 0x9c1c73b0
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x10], eax
jmp 0x469b81
mov ecx, dword [ebp - 0x10]
mov dword [ebp + ecx*4 - 0x16c], 0x3629aa8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x469b70
mov dword [ebp - 0x10], eax
jmp 0x469b9c
mov ecx, dword [ebp - 0x10]
mov dword [ebp + ecx*4 - 0xac], 0xfa1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x469b8b
mov dword [ebp - 0x10], eax
jmp 0x469bb7
mov ecx, dword [ebp - 0x10]
mov dword [ebp + ecx*4 - 0x144], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x469ba6
dec dword [ebp - 0x14]
cmp dword [ebp - 0xac], eax
jne 0x469bd0
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x10
jge 0x469b56
mov ecx, dword [ebp - 0xe0]
test ecx, ecx
je 0x469c94
call fcn.00468c5d
xor ecx, ecx
mov dword [ebp - 8], 0xac204e2
mov edi, eax
mov dword [ebp - 4], ecx
jmp 0x469c04
mov edx, dword [ebp - 4]
mov dword [ebp + edx*4 - 0x130], 0xbc42206d
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x469bf3
mov dword [ebp - 8], 0x1d
cmp dword [ebp - 8], 0xffffffff
jne 0x469c66
mov dword [ebp - 4], 0xde9
mov dword [ebp - 0x14], 0x6173948b
mov eax, dword [ebp - 4]
cmp dword [ebp - 8], eax
je 0x469c34
mov eax, esi
cmp dword [ebp - 4], ecx
jne 0x469c36
mov eax, ecx
cmp eax, dword [ebp - 4]
jg 0x469c3e
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [ebp - 0x14], eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
sub esi, 7
cmp esi, eax
push 1
setge dl
mov dword [ebp - 0x128], edx
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffff
pop esi
je 0x469c17
mov dword [ebp - 8], 0xffffffe3
jmp 0x469c83
mov eax, dword [ebp - 0x12c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x130], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffe5
je 0x469c6f
lea eax, [ebp - 0x48]
push eax
call fcn.0046a092
mov dword [eax], edi
xor eax, eax
mov dword [ebp - 4], 0x2fe22364
mov dword [ebp - 8], eax
jmp 0x469cb3
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x1d0], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x469ca2
mov dword [ebp - 8], eax
jmp 0x469ccf
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x148], 0x4dfbd6c3
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x469cbe
mov dword [ebp - 4], eax
jmp 0x469cfc
mov dword [ebp - 0x18], 0x73d2d672
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x469cf2
push eax
call dword [sym.imp.USER32.dll_CharUpperW]
xor eax, eax
mov dword [ebp - 0x18], 0x260417be
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jle 0x469cd9
lea ecx, [ebp - 0xe4]
call fcn.0045dd58
xor eax, eax
mov dword [ebp - 4], 0xe0648261
mov byte [ebp - 9], al
cmp byte [ebp - 9], al
je 0x469d38
push eax
push 0x1a3e
push 0x795
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemInt]
xor eax, eax
push 3
pop edx
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0xfffffffa
jle 0x469d7e
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x469d60
push 0x2488
push 0x2234
push eax
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
xor eax, eax
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x469d72
push eax
call dword [sym.imp.ole32.dll_CoInitialize]
xor eax, eax
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xfffffffa
jg 0x469d44
push 3
pop edx
test edi, edi
je 0x469ed4
mov dword [ebp - 0x18], 0x7e8e
mov dword [ebp - 0x20], 0xe2c0d37a
mov dword [ebp - 0x18], 0xe468
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 8], 0xfffffff8
mov dword [ebp - 0x18], 0x29e5e26c
mov dword [ebp - 0x14], 0xcf720afd
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], eax
jmp 0x469dd3
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0xc0], 0xaeef20fe
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x469dc2
inc dword [ebp - 8]
mov dword [ebp - 8], eax
jmp 0x469ea8
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], 0x1183d964
mov dword [ebp - 0x1c], 0x2d4e203d
mov dword [ebp - 4], eax
jmp 0x469e0e
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0x104], 0x9e4e412c
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x469dfd
mov edx, dword [ebp - 0xb8]
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0xc0], edx
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp + ecx*4 - 0xc0]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0xbc]
mov ecx, dword [ebp - 8]
neg edx
sbb edx, edx
add edx, 0x6390
mov dword [ebp + ecx*4 - 0xc0], edx
mov edx, 0xc6715623
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
cmp edx, ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
cmp ecx, esi
setge dl
cmp edx, dword [ebp - 0x20]
jl 0x469e8a
cmp dword [ebp - 0x100], eax
jne 0x469e8c
mov esi, eax
mov ecx, dword [ebp - 0x100]
xor edx, edx
cmp esi, ecx
push 1
setl dl
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
inc dword [ebp - 8]
pop esi
cmp dword [ebp - 8], 2
jle 0x469de3
push dword [ebp - 0xc4]
push edi
call fcn.00450ff7
mov esi, dword [ebp + 8]
pop ecx
pop ecx
mov dword [esi], eax
lea eax, [ebp - 0x70]
push eax
call fcn.0046a030
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x469ed7
mov esi, dword [ebp + 8]
mov dword [ebp + 8], 0xccb03629
xor eax, eax
mov dword [ebp + 8], 0xffffffff
push 3
mov dword [ebp + 8], eax
mov dword [ebp + 8], eax
pop edx
jmp 0x469f03
mov ecx, dword [ebp + 8]
mov dword [ebp + ecx*4 - 0x8c], 6
inc dword [ebp + 8]
cmp dword [ebp + 8], edx
jl 0x469ef2
mov dword [ebp + 8], eax
jmp 0x469f1b
mov ecx, dword [ebp + 8]
mov dword [ebp + ecx*4 - 0x5c], 0xfffffff8
inc dword [ebp + 8]
cmp dword [ebp + 8], edx
jl 0x469f0d
mov byte [ebp + 0xb], al
cmp byte [ebp + 0xb], al
je 0x469f32
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
xor eax, eax
push 2
mov dword [ebp - 0x5c], eax
pop edi
jmp 0x469fb4
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ebp + ecx*4 - 0x8c]
mov dword [ebp + 8], ecx
cmp dword [ebp + 8], eax
je 0x469f93
mov ecx, dword [ebp - 0x5c]
push 0
mov ecx, dword [ebp + ecx*4 - 0x8c]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ebp + ecx*4 - 0x8c]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ebp + ecx*4 - 0x8c]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp + ecx*4 - 0x8c]
mov ecx, dword [ebp - 0x5c]
cmp edx, ecx
pop ecx
setl cl
mov dword [ebp + 8], ecx
cmp dword [ebp + 8], 8
ja 0x469f93
xor ecx, ecx
inc ecx
jmp 0x469f95
mov ecx, eax
mov dword [ebp + 8], ecx
mov dword [ebp + 8], eax
jmp 0x469fac
mov ecx, dword [ebp + 8]
cmp dword [ebp + ecx*4 - 0x8c], eax
jne 0x469fb1
inc dword [ebp + 8]
cmp dword [ebp + 8], edi
jle 0x469f9d
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], edi
jle 0x469f3a
mov eax, esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret