Function at 0x100182e1
Capabilities:
Accept command line arguments

Disassembly:
mov eax, 0x100803b0
call fcn.1007fad8
sub esp, 0x198
push ebx
push esi
push edi
mov dword [ebp - 0x10], 0xffffffff
xor ebx, ebx
mov dword [ebp - 0x14], 0xec326874
push 1
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x80], edx
pop ecx
cmp dword [ebp - 0x10], ebx
jne 0x10018348
mov eax, dword [ebp - 0x10]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0xb785
setne al
imul eax, dword [ebp - 0x10]
test eax, eax
jne 0x1001833d
mov eax, ebx
jmp 0x10018342
xor ecx, ecx
inc ecx
mov eax, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x10018378
push 0x49a
push 0xdb6
call edi
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x10c]
sub eax, 5
neg eax
push 1
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov eax, 0xb3cf8132
mov dword [ebp - 0x1c], 0xd386cce5
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 2
call fcn.10016499
mov dword [ebp - 0x20], 0x289a
xor edx, edx
mov dword [ebp - 0x28], 0x8c2a
inc edx
mov dword [ebp - 0x10], ebx
jmp 0x100183eb
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x100183d8
mov dword [ebp - 0x10], ebx
jmp 0x10018402
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1a4], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100183f5
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add eax, 0x1780eec2
mov dword [ebp - 0xac], eax
cmp eax, 0xffffffff
jge 0x10018433
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x1c]
sub ecx, eax
cmp dword [ebp - 0x1c], ecx
jne 0x10018446
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xac]
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x28]
call fcn.1001651b
push 3
pop esi
push esi
lea ecx, [ebp - 0xc0]
call fcn.10016499
mov dword [ebp - 0x10], 0xcdf98a59
mov dword [ebp - 0x14], ebx
jmp 0x10018487
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10018478
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], ebx
jmp 0x100184af
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 0x33efc07e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001849c
lea ecx, [ebp - 0xc0]
call fcn.1001651b
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], ebx
jmp 0x100184d8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x154], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100184c7
mov dword [ebp - 0x10], ebx
jmp 0x100184f8
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x100184f5
push 1
call edi
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jle 0x100184e2
mov dword [ebp - 0x10], 0xfffffff4
jmp 0x100185ad
push 1
lea ecx, [ebp - 0xcc]
call fcn.10016499
xor edx, edx
mov dword [ebp - 0x14], ebx
inc edx
jmp 0x10018532
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1001851f
mov eax, dword [ebp - 0xcc]
push 2
pop edx
mov dword [eax], ebx
mov dword [ebp - 0x30], 0x365653d4
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], ebx
jl 0x10018593
mov dword [ebp - 0x14], 0x8eb98764
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], ebx
jl 0x10018579
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x154]
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x154], ecx
dec dword [ebp - 0x14]
jns 0x10018560
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1001858e
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 2
pop edx
dec dword [ebp - 0x30]
jns 0x10018551
mov eax, dword [ebp - 0xcc]
inc dword [eax]
cmp dword [eax], edx
jle 0x10018542
lea ecx, [ebp - 0xcc]
call fcn.1001651b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x12
jle 0x1001850a
push esi
lea ecx, [ebp - 0xf0]
call fcn.10016499
push 2
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], ebx
call fcn.10016499
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], 0xfffffff6
push 2
call fcn.10016499
mov dword [ebp - 0x20], 0x6a4137d6
mov dword [ebp - 0x20], 0x2d50fa8f
mov dword [ebp - 0x38], 0xffffffff
push 2
mov dword [ebp - 0x20], 0xf57f54ab
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x10018626
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x70]
mov dword [eax + ecx*4], 0x5d6c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10018616
mov dword [ebp - 0x10], ebx
jmp 0x10018640
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x148]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10018630
xor eax, eax
mov dword [ebp - 0x10], ebx
inc eax
cmp dword [ebp - 0x10], eax
jg 0x100186e8
mov esi, dword [ebp - 0x70]
mov dword [ebp - 0x14], 0xfe23a266
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
dec dword [ebp - 0x28]
je 0x1001866c
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov dword [ebp - 0x28], 0xffffffff
mov eax, dword [ebp - 0x28]
cmp eax, 0xfffffff6
setl cl
xor edx, edx
test ecx, ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x70]
sets dl
cmp edx, dword [eax + ecx*4]
jg 0x100186a8
cmp dword [ebp - 0x14], ebx
je 0x100186a8
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x70]
cmp dword [eax + ecx*4], ebx
je 0x100186a8
xor ecx, ecx
inc ecx
jmp 0x100186aa
mov ecx, ebx
mov eax, dword [esi + 4]
imul eax, ecx
mov dword [ebp - 0x14], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100186d6
push ebx
push ebx
push 0x1a1a
push ebx
push 0x5d0
push ebx
push 0x870
push ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jle 0x10018657
push 3
pop esi
dec dword [ebp - 0x38]
lea ecx, [ebp - 0x148]
call fcn.1001651b
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], bl
call fcn.1001651b
push dword [ebp - 0x4c]
movdqa xmm0, xmmword [0x10008120]
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x24], 0x249aaed6
push eax
mov dword [ebp - 0x28], ebx
lea ecx, [ebp - 0x7c]
push ebx
movdqu xmmword [ebp - 0x17c], xmm0
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
call fcn.10017ac8
push esi
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 2
call fcn.10016499
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], 0xac507b39
mov dword [ebp - 0x14], ebx
jmp 0x10018774
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], 0xd40a7fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10018761
mov dword [ebp - 0x14], 0xfc37
xor edx, edx
mov dword [ebp - 0x24], 0xb3a0
mov dword [ebp - 0x2c], 0xffffffff
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
add ecx, dword [ebp - 0x14]
cmp ecx, 4
jne 0x100187b7
cmp dword [ebp - 0x28], ebx
je 0x100187b7
xor ecx, ecx
inc ecx
jmp 0x100187b9
mov ecx, ebx
xor eax, eax
cmp ecx, 0x9cc099a5
setne al
xor edx, edx
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x7c]
cmp eax, dword [ecx]
setg dl
xor eax, eax
cmp edx, dword [ecx + 0xc]
setle al
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100187f4
push ebx
push 0x32d
call edi
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
lea ecx, [ebp - 0x130]
call fcn.1001651b
lea ecx, [ebp - 0x7c]
call fcn.1001651b
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x10018821
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x58], 0x31713b91
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10018813
mov dword [ebp - 0x10], ebx
jmp 0x1001883c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x188], 7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001882b
mov dword [ebp - 0x58], 0x17
jmp 0x1001890d
xor ecx, ecx
mov dword [ebp - 0x10], 0xaa43b2b
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x2c], 0x300d
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x10]
setg cl
imul eax, ecx
xor ecx, ecx
imul eax, eax, 0xffff
cmp eax, 0x48abb75d
setne cl
xor edx, edx
imul ecx, dword [ebp - 0x10]
imul eax, ecx, 0xbec0
or ecx, 0xffffffff
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x10]
sub ecx, eax
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x10]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x58]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x58]
setle cl
add eax, ecx
mov ecx, dword [ebp - 0x10]
add ecx, eax
cmp ecx, dword [ebp - 0x10]
jg 0x10018905
cmp dword [ebp - 0x10], ebx
je 0x10018905
mov dword [ebp - 0x24], 0x28464d91
mov dword [ebp - 0x24], 0x76522452
cmp dword [ebp - 0x14], ebx
jmp 0x10018908
cmp dword [ebp - 0x2c], ebx
jne 0x10018917
dec dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0xfffffffa
jne 0x1001884d
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x14], ebx
jmp 0x10018936
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf0]
mov dword [eax + ecx*4], 0xb7c7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10018923
mov dword [ebp - 0x14], 0xfd3df75d
xor edx, edx
mov dword [ebp - 0x10], 0xe7308f47
inc edx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x28], 0xc7be0218
mov dword [ebp - 0x30], 0x7289c089
mov dword [ebp - 0x14], ebx
jmp 0x10018976
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x88], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10018965
mov dword [ebp - 0x14], 0x14
jmp 0x10018b00
mov dword [ebp - 0x2c], 0x1ad67a4b
mov dword [ebp - 0x30], 0x11e7bff4
mov dword [ebp - 0x3c], 0xee1d1102
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x24], 0x836ea0e4
mov dword [ebp - 0x1c], 0x31cf6a12
cmp dword [ebp - 0x2c], ebx
jne 0x10018a25
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor edx, edx
imul ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x3c]
imul ecx, ecx, 0x95d
cmp ecx, eax
mov ecx, dword [ebp - 0x28]
setne dl
xor eax, eax
inc eax
cmp eax, edx
sbb eax, eax
inc eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
sub eax, 0x296e8fb3
je 0x10018a1c
mov eax, dword [ebp - 0x2c]
inc dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x24]
xor ecx, ecx
imul edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x10], ecx
inc edx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0x17
jl 0x10018afd
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], ebx
jl 0x10018af5
mov dword [ebp - 0x24], 0x5aad
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0x2c], 0xb13f4b1a
mov dword [ebp - 0x10], ebx
jmp 0x10018ae7
mov dword [ebp - 0x2c], 0xbfad241d
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x88], ecx
xor eax, eax
cmp ecx, 0xfffffffb
mov ecx, 0xd1afc438
setne al
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, 0xfffc
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x2c]
jge 0x10018acb
mov eax, edx
cmp dword [ebp - 0x20], ebx
jne 0x10018acd
mov eax, ebx
cmp eax, dword [ebp - 0x24]
je 0x10018ad9
mov eax, edx
cmp dword [ebp - 0x24], ebx
jne 0x10018adb
mov eax, ebx
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x10018a80
dec dword [ebp - 0x30]
jns 0x10018a55
inc dword [ebp - 0x1c]
jmp 0x10018a3f
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffee
jne 0x10018988
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10018b2a
push 0x84c
push 0x1bea
push ebx
push 0xdaa
push ebx
call dword [sym.imp.USER32.dll_GetMenuStringW]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xf0]
cmp dword [ebp - 0x24], 0xfffffffc
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
or dword [ebp - 4], 0xffffffff
call fcn.1001651b
mov dword [ebp - 0x10], 0xffffffff
lea ecx, [ebp - 0x94]
push esi
call fcn.10016499
mov dword [ebp - 0x14], ebx
jmp 0x10018b82
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0xe3e45bbb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10018b6f
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
je 0x10018c5b
mov dword [ebp - 0x24], 0x53e1e01b
mov dword [ebp - 0x14], ebx
jmp 0x10018bb3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x15c], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10018ba2
mov dword [ebp - 0x10], 0xf
cmp dword [ebp - 0x10], 0xffffffe7
jl 0x10018c4d
mov esi, dword [ebp - 0x94]
mov dword [ebp - 0x2c], 0x8ee4
cmp dword [ebp - 0x10], 0xfffffffb
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x274
setl cl
cmp ecx, dword [ebp - 0x24]
jne 0x10018bf6
cmp dword [ebp - 0x10], ebx
jne 0x10018bf6
mov edx, ebx
jmp 0x10018bfb
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
mov dword [esi + 4], edx
setg cl
cmp ecx, dword [ebp - 0x2c]
jge 0x10018c1e
mov eax, dword [ebp - 0x94]
cmp dword [eax], ebx
je 0x10018c1e
xor eax, eax
lea edx, [eax + 1]
jmp 0x10018c20
mov edx, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0x66bafcb1
setg cl
imul ecx, edx
sub ecx, 0x105fa2ef
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x158], ecx
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe7
jge 0x10018bd0
push 3
pop esi
mov eax, dword [ebp - 0x94]
mov eax, dword [eax + 4]
mov dword [ebp - 0x10], eax
jmp 0x10018c65
mov dword [ebp - 0x24], 0xdfb1af9d
inc dword [ebp - 0x24]
lea ecx, [ebp - 0x94]
call fcn.1001651b
xor eax, eax
mov dword [ebp - 0x98], 0xea5d6c05
inc eax
lea ecx, [ebp - 0x13c]
push eax
call fcn.10016499
mov dword [ebp - 0x20], 0x439beb06
xor edx, edx
mov dword [ebp - 0x20], 0x4e1265ab
inc edx
mov dword [ebp - 0x20], 0x24cdb8fa
mov dword [ebp - 0x20], 0xe77ab392
mov dword [ebp - 0x20], 0x44455595
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x24], 0x85e0710
mov dword [ebp - 0x10], ebx
jmp 0x10018cd5
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x13c]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10018cc2
mov dword [ebp - 0x10], ebx
jmp 0x10018cf0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x194], 0xa7fe64fd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10018cdf
dec dword [ebp - 0x24]
lea ecx, [ebp - 0x13c]
call fcn.1001651b
mov byte [ebp - 0x31], bl
lea ecx, [ebp - 0xd8]
push 4
call fcn.10016499
mov dword [ebp - 4], 4
xor eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], 0xaf066b7a
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x14], ebx
jmp 0x10018d46
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xd8]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10018d36
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], esi
jg 0x10018ec0
push 4
lea ecx, [ebp - 0xe4]
call fcn.10016499
xor eax, eax
mov byte [ebp - 4], 5
inc eax
mov dword [ebp - 0x20], 0x39ab1b57
push eax
lea ecx, [ebp - 0x118]
call fcn.10016499
mov byte [ebp - 4], 6
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x10018da2
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0xcce1e2c0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10018d8f
xor ecx, ecx
mov dword [ebp - 0x10], ebx
inc ecx
cmp dword [ebp - 0x10], ecx
jge 0x10018dd0
xor ebx, ebx
inc ebx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x118]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10018db6
xor ecx, ecx
xor ebx, ebx
inc ecx
mov esi, dword [ebp - 0xe4]
mov dword [esi + 4], 3
mov dword [ebp - 0x20], 0xfffffffc
xor edx, edx
mov dword [ebp - 0x24], 0x8e2294b
mov dword [ebp - 0x3c], 0x3265c9e2
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ebp - 0xd8]
setg dl
push 0
cmp dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x2c]
pop edx
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, 0x6c89
je 0x10018e7c
push 3
lea ecx, [ebp - 0x124]
call fcn.10016499
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x10018e55
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x124]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10018e42
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
test eax, eax
setns cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x20], 0xffffffff
call fcn.1001651b
jmp 0x10018e8d
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10018e8d
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
dec dword [esi + 4]
push 1
pop ecx
jns 0x10018ddd
lea ecx, [ebp - 0x118]
call fcn.1001651b
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 4
call fcn.1001651b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x10018d58
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.1001651b
lea eax, [ebp - 0x31]
push eax
sub esp, 0x14
push 0x55c2
push 0x7de7
push ebx
push ecx
push ecx
call fcn.10019b74
mov dword [ebp - 0x10], 0x2a43
xor ecx, ecx
mov dword [ebp - 0x1c], 0x46e3
add esp, 0x2c
mov dword [ebp - 0x28], 7
inc ecx
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x24], 0xdfcc86f8
mov dword [ebp - 0x14], ebx
jmp 0x10018f20
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x64], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10018f16
cmp dword [ebp - 0x10], ebx
je 0x10018f39
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp edx, eax
setne cl
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x10], ecx
jg 0x10018f7a
cmp dword [ebp - 0x1c], ebx
jne 0x10018f7a
mov eax, ebx
jmp 0x10018f7d
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x14], 0xfffffff0
jmp 0x10018fa6
cmp byte [ebp - 0x15], 0
je 0x10018fa3
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xe
mov byte [ebp - 0x15], bl
jl 0x10018f96
cmp byte [ebp - 0x15], 0
je 0x10018fc5
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndPage]
lea eax, [ebp - 0x98]
push eax
push ebx
call fcn.1001bb59
movdqa xmm0, xmmword [0x10008090]
lea eax, [ebp - 0x15c]
pop ecx
pop ecx
push dword [ebp - 0x4c]
mov dword [ebp - 0x10], 0xfffffffe
lea ecx, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x24], 0xffffffff
push eax
push ebx
movdqu xmmword [ebp - 0x16c], xmm0
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
call fcn.10017ac8
mov dword [ebp - 0x14], ebx
jmp 0x10019034
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x44], 0xffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10019026
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
jne 0x1001904e
cmp dword [ebp - 0x44], ebx
je 0x10019051
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x10]
setne dl
mov dword [ebp - 0x20], edx
xor edx, edx
cmp eax, 0x2703d9b9
mov eax, dword [ebp - 0x44]
setge dl
imul edx, dword [ebp - 0x20]
add ecx, edx
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x44]
setne dl
add ecx, edx
cmp dword [ebp - 0x44], 0xfffd
sbb eax, eax
xor edx, edx
neg eax
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setg cl
neg ecx
mov dword [ebp - 0x20], ecx
xor ecx, ecx
cmp dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xa4]
setl cl
mov dword [eax + 0xc], ecx
xor eax, eax
mov dword [ebp - 0x10], ebx
inc eax
jmp 0x100190e2
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100190df
push ebx
call dword [sym.imp.USER32.dll_SetKeyboardState]
xor eax, eax
inc eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x100190cc
lea ecx, [ebp - 0xa4]
call fcn.1001651b
mov dword [ebp - 0x20], 0x82eac453
mov dword [ebp - 0x14], ebx
jmp 0x1001910c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x60], 0x2c03342e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100190fe
mov dword [ebp - 0x60], 0x1b
jmp 0x10019123
cmp dword [ebp - 0x5c], ebx
jne 0x10019129
dec dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0xffffffe7
jl 0x1001911b
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10019139
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x80]
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [ebp - 0x4c]
mov edi, edx
mov esi, eax
call fcn.1001826f
mov ecx, dword [ebp - 0xc]
add eax, esi
add eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret