Function at 0x10033f55
Capabilities:
Accept command line arguments
Read .ini file

Disassembly:
mov eax, 0x1005dd3b
call fcn.1005c6c0
sub esp, 0x10c
mov eax, edx
mov dword [ebp - 0x44], ecx
push ebx
push esi
push edi
cmp byte [eax], 0x50
mov dword [ebp - 0x3c], eax
jne 0x10034b17
cmp byte [eax + 1], 0x4b
jne 0x10034b17
xor edi, edi
lea ecx, [ebp - 0x74]
inc edi
push edi
call fcn.10006ab6
mov dword [ebp - 0x18], 2
xor ebx, ebx
mov dword [ebp - 0x14], 0xaa41a80d
mov dword [ebp - 0x10], ebx
jmp 0x10033fb4
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x74]
mov dword [eax + ecx*4], 0x9f9b3198
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10033fa4
mov dword [ebp - 0x10], ebx
jmp 0x10033fcc
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x80], 0x8bd921b0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10033fbe
push 0xfffffffffffffff6
mov dword [ebp - 0x18], ebx
pop esi
jmp 0x1003413e
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x50], 0xfffffffa
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x4c], 0x78470ed9
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x10], ebx
jmp 0x100340f8
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x2c], ebx
jmp 0x10034026
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x68], edi
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jl 0x1003401c
inc dword [ebp - 0x14]
jne 0x10034085
mov eax, dword [ebp - 0x10]
xor ebx, ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x14]
cmp dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x20]
setge bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x38]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x74]
setle dl
xor ecx, ecx
cmp edx, 0x3e629bad
setge cl
sub ecx, dword [eax]
jne 0x10034085
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10]
cmp eax, 0xffff
mov eax, dword [ebp - 0x74]
sbb ecx, ecx
xor ebx, ebx
neg ecx
cmp ecx, dword [eax + edx*4]
mov eax, dword [ebp - 0x68]
setl bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x48]
sete dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x10]
xor ebx, ebx
cmp dword [ebp - 0x10], ebx
jle 0x1003400d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x74]
cmp dword [eax + ecx*4], ebx
je 0x10034125
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1003413b
push ebx
push 0x1b21
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
jmp 0x1003413b
mov dword [ebp - 0x24], ebx
jmp 0x10034136
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x7c], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1003412a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10033fdd
lea ecx, [ebp - 0x74]
call fcn.10006b13
mov dword [ebp - 0x10], 0x54320e32
mov dword [ebp - 0x14], 0xfffffff9
mov dword [ebp - 0x20], 0xd38c
mov dword [ebp - 0x28], 0xffffffff
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1003418e
push 0x2045
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x14], ebx
jne 0x100341ba
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x20], 0xd8da8e97
je 0x100341cd
mov eax, ebx
cmp dword [ebp - 0x10], ebx
je 0x100341cf
mov eax, edi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x3c]
mov al, byte [eax + 2]
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x14], 0x891f782a
mov dword [ebp - 0x20], 0x6968939f
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x38], 0xe5809974
mov dword [ebp - 0x28], 0x39384257
mov dword [ebp - 0x28], 0xe2e4ed
mov byte [ebp - 0x2d], al
cmp dword [ebp - 0x24], ebx
jne 0x1003421e
mov esi, ebx
cmp dword [ebp - 0x14], ebx
je 0x10034220
mov esi, edi
cmp dword [ebp - 0x24], ebx
jne 0x10034239
mov eax, dword [ebp - 0x24]
mov ecx, ebx
neg eax
sbb eax, eax
inc eax
imul eax, eax, 0xafc1
test eax, eax
je 0x1003423b
mov ecx, edi
mov eax, dword [ebp - 0x14]
xor edx, edx
sub ecx, eax
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setg dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
imul eax, esi
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov al, byte [esi + 3]
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x24], 0xd2eb2fc2
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x34], 0x5008d6d
mov dword [ebp - 0x14], 0x8ce324e8
mov dword [ebp - 0x48], 0xfffffffc
mov byte [ebp - 0x19], al
cmp dword [ebp - 0x10], ebx
jne 0x1003431e
mov eax, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setle dl
add edx, dword [ebp - 0x18]
mov edx, ebx
je 0x100342e3
mov edx, edi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x10]
sete cl
xor edx, edx
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x10]
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x18]
jne 0x10034317
mov eax, dword [ebp - 0x10]
mov ecx, ebx
cmp dword [ebp - 0x10], ebx
je 0x10034320
mov ecx, edi
mov eax, dword [ebp - 0x18]
add eax, ecx
je 0x10034384
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x20], 0xcbaa6f4e
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
neg ecx
sub eax, ecx
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x24]
cmp eax, 0xcb81
setle cl
xor edx, edx
cmp ecx, 0xfffffffd
setge dl
xor eax, eax
cmp edx, 0x337672a6
setge al
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x14], eax
jmp 0x1003444c
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x10], ebx
jmp 0x100343a0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x108], 0x9ac04bb9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1003438f
mov dword [ebp - 0x10], ebx
jmp 0x100343b5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x58], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100343ab
mov dword [ebp - 0x10], 0x87d7a760
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x2c], ebx
jne 0x100343d8
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x100], esi
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x58]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x58]
setne dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setle bl
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x3c]
setl cl
imul eax, ebx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x1ee328db
setg al
xor ebx, ebx
mov dword [ebp - 0x34], eax
movzx ecx, byte [ebp - 0x2d]
movzx eax, byte [ebp - 0x19]
add ecx, 4
add eax, 0x18
mov dword [ebp - 0x44], ecx
add eax, ecx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x50], eax
jmp 0x10034478
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xfc], 0x1b3c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10034467
mov dword [ebp - 0x10], ebx
jmp 0x10034491
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x54], 0xfffffff9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10034483
mov dword [ebp - 0x54], edi
cmp dword [ebp - 0x54], ebx
jl 0x100344b9
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x48], 0xfffffffd
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xfc]
dec dword [ebp - 0x54]
jns 0x1003449e
mov edx, dword [ecx + esi]
mov ecx, dword [ecx + esi + 0x14]
call fcn.10033f49
mov dword [ebp - 0x10], 0x324ec2e0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x18], 0x718e5034
mov dword [ebp - 0x28], ebx
push 2
mov dword [ebp - 0x38], eax
call fcn.10006ab6
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ebx
jmp 0x10034501
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100344ee
mov dword [ebp - 0x10], ebx
jmp 0x10034586
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x20], 0xd0374c7a
mov dword [ebp - 0x20], 0xa1405524
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x4c20
mov eax, dword [ebp - 0x34]
setge cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
imul edx, dword [ebp - 0x10]
cmp edx, 0xae7b
setne cl
xor eax, eax
cmp ecx, 0xffffffff
setge al
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x34]
imul eax, eax, 6
sub eax, 0xc715
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffed
jne 0x1003450c
mov dword [ebp - 0x18], ebx
jmp 0x100345e3
mov dword [ebp - 0x28], 0x9cbc21b0
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x28], 0x75761ac7
mov dword [ebp - 0x28], 0xca2589d3
push 2
call fcn.10006ab6
mov dword [ebp - 0x14], ebx
jmp 0x100345c7
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100345b8
mov eax, dword [ebp - 0xac]
lea ecx, [ebp - 0xac]
inc dword [eax]
call fcn.10006b13
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffb
jle 0x10034591
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc8]
call fcn.10006b13
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c], edi
add eax, esi
mov dword [ebp - 0x28], 0xb49d585e
mov dword [ebp - 0x28], 0x89a5a40f
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x20], 0xfededc87
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], ebx
jmp 0x10034638
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe8], 0x841b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10034627
mov dword [ebp - 0x10], ebx
jmp 0x1003464f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x118], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10034642
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jg 0x100346fb
mov eax, 0x843046b6
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], ebx
jl 0x100346d8
mov dword [ebp - 0x28], 0x464f16ef
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x28], 0x37182abb
mov dword [ebp - 0x28], ebx
push 2
call fcn.10006ab6
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x14], ebx
jmp 0x100346bf
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100346af
inc dword [ebp - 0x20]
lea ecx, [ebp - 0xf4]
call fcn.10006b13
dec dword [ebp - 0x34]
jns 0x10034689
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100346ea
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
inc dword [ebp - 0x2c]
mov eax, 0x843046b6
cmp dword [ebp - 0x2c], ebx
jle 0x10034666
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003470a
call dword [sym.imp.USER32.dll_GetMessageTime]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x38]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0xa0256915
mov dword [ebp - 0x14], 0x1ad386cc
mov dword [ebp - 0x18], 0xd53b
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x20], 0x293cc9d6
mov dword [ebp - 0x50], 9
mov dword [ebp - 0x14], ebx
jmp 0x1003474f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x64], 0x47a6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10034741
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
je 0x100347b4
mov dword [ebp - 0x20], 0xa53061ec
mov dword [ebp - 0x18], ebx
jmp 0x100347a9
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 5
setge al
imul edx, dword [ebp - 0x20], 0xffff
sub edx, eax
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x64]
inc edx
cmp eax, edx
setl cl
neg ecx
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10034772
jmp 0x1003488a
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x24], 0x9716e289
mov dword [ebp - 0x10], ebx
jmp 0x10034861
mov dword [ebp - 0x20], 0xfff9
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x48], 0xdbf12959
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x64], ebx
je 0x1003484b
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x64]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x64], 0xc6a81d68
jb 0x1003480b
mov edx, edi
cmp dword [ebp - 0x14], ebx
jne 0x1003480d
mov edx, ebx
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x64]
cmp eax, edx
setg cl
mov dword [ebp - 0x14], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x14]
cmp eax, 0xfffffffd
setne cl
sub ecx, dword [ebp - 0x5c]
cmp ecx, 0x2c7e
jge 0x1003483b
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x64]
mov eax, dword [ebp - 0x28]
mov edx, edi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jne 0x1003484d
mov edx, ebx
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x64]
cmp edx, eax
setle cl
mov dword [ebp - 0x48], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jle 0x100347c6
mov dword [ebp - 0x24], ebx
jmp 0x10034884
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10034881
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe4
jge 0x10034870
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x10034902
push edi
lea ecx, [ebp - 0xd4]
call fcn.10006ab6
push 6
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], ebx
jmp 0x100348c3
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xd4]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100348b0
mov eax, dword [ebp - 0x18]
mov ecx, edi
mov eax, dword [ebp + eax*4 - 0x64]
sub ecx, eax
mov eax, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax*4 - 0x64]
je 0x100348e3
mov ecx, ebx
cmp dword [ebp - 0x50], ebx
je 0x100348e5
mov ecx, edi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x64]
imul eax, ecx
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x28], eax
call fcn.10006b13
dec dword [ebp - 0x18]
jns 0x10034896
mov eax, dword [ebp - 0x38]
shr eax, 2
inc eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x38], eax
jmp 0x10034922
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x94], 0xcb457102
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10034911
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10034946
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x94], eax
mov eax, dword [ecx + esi]
mov dword [ebp - 0xbc], eax
mov eax, dword [ecx + esi + 4]
mov dword [ebp - 0xb8], eax
mov eax, dword [ecx + esi + 8]
mov dword [ebp - 0xb4], eax
mov eax, dword [ecx + esi + 0xc]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x10], 0x1bf506e6
mov dword [ebp - 0x24], 0x9822cb3a
mov dword [ebp - 0x20], 0xd686a37b
mov dword [ebp - 0x3c], 0xb275cf8
mov dword [ebp - 0x44], 5
mov dword [ebp - 0x14], ebx
jmp 0x100349b2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x40], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100349a4
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], 0x3607a988
mov eax, dword [ebp - 0x20]
cmp eax, 0x5f5
setle cl
xor edx, edx
imul eax, ecx, 0x413e
test eax, eax
mov eax, dword [ebp - 0x24]
setg dl
neg eax
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x40]
setg cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setge dl
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x24]
add eax, 0xfffffff8
add ecx, eax
je 0x10034ac5
mov dword [ebp - 0x20], 0x29bad2ce
lea ecx, [ebp - 0xa0]
push edi
call fcn.10006ab6
mov dword [ebp - 0x14], ebx
jmp 0x10034a47
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], 0x6b80f4b4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10034a34
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], ebx
jl 0x10034ab8
mov dword [ebp - 0x44], 0xf8616691
xor edx, edx
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x44], 0x52c43da4
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x40], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setne dl
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], ebx
je 0x10034aa0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffff
jge 0x10034aa9
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x44], 0xffff000f
dec dword [ebp - 0x10]
jns 0x10034a54
lea ecx, [ebp - 0xa0]
call fcn.10006b13
jmp 0x10034ade
cmp dword [ebp - 0x44], ebx
je 0x10034acf
cmp dword [ebp - 0x10], ebx
jne 0x10034ad1
mov edi, ebx
mov eax, dword [ebp - 0x40]
add eax, edi
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov edi, dword [ebp - 0x38]
test edi, edi
je 0x10034bb8
mov ecx, dword [ebp - 0x4c]
sub esi, ecx
mov ecx, dword [ecx]
mov edx, ebx
and edx, 3
mov edx, dword [ebp + edx*4 - 0xbc]
call fcn.10033f49
mov ecx, dword [ebp - 0x4c]
mov dword [esi + ecx], eax
add ecx, 4
inc ebx
mov dword [ebp - 0x4c], ecx
cmp ebx, edi
jb 0x10034aee
jmp 0x10034bb8
xor ebx, ebx
mov dword [ebp - 0x24], 0xc692beaa
mov byte [ebp - 0x19], bl
push 1
pop edi
cmp byte [ebp - 0x19], bl
je 0x10034b42
push 0x512
push 0x2385
push edi
push ebx
push 0xd93
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov dword [ebp - 0x24], 0x18
cmp dword [ebp - 0x24], 0x11
jl 0x10034bb0
push 0xfffffffffffffff6
pop esi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x2c], ebx
jmp 0x10034b9b
push edi
lea ecx, [ebp - 0x8c]
call fcn.10006ab6
mov dword [ebp - 0x14], ebx
jmp 0x10034b7e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x8c]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10034b6b
mov eax, dword [ebp - 0x8c]
lea ecx, [ebp - 0x8c]
cmp dword [eax], ebx
jne 0x10034ba2
call fcn.10006b13
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jl 0x10034b5a
jmp 0x10034ba7
call fcn.10006b13
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x11
jge 0x10034b52
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret