Function at 0x40f288
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1f0
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x40f54b
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x194], eax
lea eax, [ebp + 0x38]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x160]
movzx eax, byte [eax]
test eax, eax
je 0x40f50a
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x180], eax
push 0
mov ecx, dword [ebp - 0x78]
call fcn.00401484
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
imul ecx, dword [eax]
test ecx, ecx
jne 0x40f4a9
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
inc ecx
mov edx, dword [ebp - 0x28]
mov dword [edx], ecx
test eax, eax
jne 0x40f425
mov eax, 0xffff
test eax, eax
jne 0x40f425
and dword [ebp - 0x134], 0
jmp 0x40f42f
mov dword [ebp - 0x134], 1
push 0
mov ecx, dword [ebp - 0x78]
call fcn.00401484
mov ecx, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax], 0
jne 0x40f463
push 0
mov ecx, dword [ebp - 0xd8]
call fcn.00401484
cmp dword [eax], 0
jne 0x40f463
and dword [ebp - 0x16c], 0
jmp 0x40f46d
mov dword [ebp - 0x16c], 1
push 0
mov ecx, dword [ebp - 0xd8]
call fcn.00401484
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x13c]
mov ecx, dword [ecx]
cmp dword [eax], ecx
jg 0x40f492
mov dword [ebp - 0x5c], 1
jmp 0x40f496
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x5c]
sub eax, 0xb5ea
jne 0x40f4a9
and dword [ebp - 0xa0], 0
jmp 0x40f4b3
mov dword [ebp - 0xa0], 1
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
cmp dword [ebp - 0xa0], eax
jle 0x40f4cc
mov dword [ebp - 0xc0], 1
jmp 0x40f4d3
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
add eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x180]
cmp eax, dword [ecx]
jne 0x40f4f9
mov eax, dword [ebp - 0x34]
cmp dword [eax], 0
je 0x40f4f9
mov dword [ebp - 0x6c], 1
jmp 0x40f4fd
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
jmp 0x40f546
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
movzx eax, byte [eax]
test eax, eax
je 0x40f546
push 0x928
push 0xeea
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckDlgButton]
jmp 0x40fe2c
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x18c], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x170]
movzx eax, byte [eax]
test eax, eax
je 0x40f594
push 0
push 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
jmp 0x40fe2c
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x48], eax
push 1
lea ecx, [ebp - 0x17c]
call fcn.004113a6
mov dword [ebp - 0x1c0], 0xfffffff7
push 2
lea ecx, [ebp - 0x1f0]
call fcn.004113a6
lea eax, [ebp - 0xf8]
push eax
push 0x1c06
push 0x34c
lea edx, [ebp - 0x17c]
xor cl, cl
call fcn.0045eccf
add esp, 0xc
lea eax, [ebp - 0x1f0]
push eax
push 0
lea eax, [ebp - 0xf8]
push eax
mov edx, 0x14d3
mov ecx, 0x423b
call fcn.004567c4
add esp, 0xc
push 0
lea ecx, [ebp - 0x17c]
call fcn.00401484
and dword [eax], 0
jmp 0x40f65e
push 0
lea ecx, [ebp - 0x17c]
call fcn.00401484
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xa8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x17c]
call fcn.00401484
cmp dword [eax], 0xfffffff2
jle 0x40f76e
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1d0], 0xee28fdeb
mov dword [ebp - 0x1d4], 3
push 1
lea ecx, [ebp - 0x1e0]
call fcn.004113a6
mov dword [ebp - 0x1b4], 5
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x2c], 0
jmp 0x40f6d7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x40f6f0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1e0]
call fcn.00401484
and dword [eax], 0
jmp 0x40f6d0
cmp dword [ebp - 0x100], 0
je 0x40f726
push 0x15a7
push 0
push 0x4a3b
push 0x66b0
call fcn.00401a10
add esp, 0x10
push 0x4371
xor dl, dl
mov ecx, 0xa4
call fcn.00421679
pop ecx
jmp 0x40f74a
mov dword [ebp - 0x1bc], 0xffffffff
mov dword [ebp - 0x1e4], 1
push 0
lea eax, [ebp - 0x108]
push eax
call fcn.004019db
pop ecx
pop ecx
push 0x12d6
push 0
push 0x2966
call fcn.00401b34
add esp, 0xc
lea ecx, [ebp - 0x1e0]
call fcn.00411478
jmp 0x40f63a
lea ecx, [ebp - 0x1f0]
call fcn.00411478
lea ecx, [ebp - 0x17c]
call fcn.00411478
mov eax, dword [ebp - 0x110]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 0xd3f7bf4
mov dword [ebp - 0xb0], 0
push 4
lea ecx, [ebp - 0x1a4]
call fcn.004113a6
mov dword [ebp - 0x90], 0x986d6dbc
mov dword [ebp - 0x120], 0xfffffffd
mov dword [ebp - 4], 0
jmp 0x40f7d2
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x40f7e8
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x118], 0xfffffff9
jmp 0x40f7cb
mov dword [ebp - 4], 0
jmp 0x40f7f8
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x40f80e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xe4], 0xab61
jmp 0x40f7f1
push 0
lea eax, [ebp - 4]
push eax
push 0x2565
push 0xe68
push 0
lea eax, [ebp - 0x1a4]
push eax
call fcn.004053e5
add esp, 0x18
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x4c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c]
mov dword [ebp + eax - 0x118], ecx
cmp dword [ebp - 0x4c], 0
je 0x40f85a
cmp dword [ebp - 0x3c], 0
je 0x40f85a
mov dword [ebp - 0x80], 1
jmp 0x40f85e
and dword [ebp - 0x80], 0
cmp dword [ebp - 0x3c], 0
jne 0x40f89c
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0xe4], 0xfff8
mov dword [ebp - 0x74], eax
push 1
lea ecx, [ebp - 0x1a4]
call fcn.00401484
mov ecx, dword [ebp - 0x74]
mov dword [eax], ecx
cmp dword [ebp - 0x74], 0x8bc0
jge 0x40f89c
and dword [ebp - 0xd0], 0
jmp 0x40f8a6
mov dword [ebp - 0xd0], 1
imul eax, dword [ebp - 0xd0], 0x2076
test eax, eax
je 0x40f8d2
push 2
lea ecx, [ebp - 0x1a4]
call fcn.00401484
cmp dword [eax], 0
je 0x40f8d2
mov dword [ebp - 0x88], 1
jmp 0x40f8d9
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x88]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xe4]
cmp eax, 0x473e
jge 0x40f90e
mov dword [ebp - 0xc8], 1
jmp 0x40f915
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x90], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x90], eax
jle 0x40f942
mov dword [ebp - 0xb8], 1
jmp 0x40f949
and dword [ebp - 0xb8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
imul eax, dword [ebp - 0xb8]
mov dword [ebp - 0x120], eax
lea ecx, [ebp - 0x1a4]
call fcn.00411478
cmp dword [ebp - 0x40], 0
jle 0x40fe2c
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x44], 0x4320e32c
mov dword [ebp - 0x38], 0x3bd6525
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x14], 0x491b
mov dword [ebp - 0x128], 0xce68266c
push 0x44a1
lea eax, [ebp - 8]
push eax
push 0
lea eax, [ebp - 0x24]
push eax
mov edx, 0x40d7
lea ecx, [ebp - 0x1c]
call fcn.0045e6c1
add esp, 0x10
cmp dword [ebp - 8], 0
je 0x40f9f1
mov dword [ebp - 0x38], 0x23a266d2
cmp dword [ebp - 0x38], 0
je 0x40f9f1
mov dword [ebp - 0x98], 1
jmp 0x40f9f8
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c4], eax
imul eax, dword [ebp - 0x98], 0
cmp eax, dword [ebp - 0x1c]
jl 0x40fa16
mov dword [ebp - 0x50], 1
jmp 0x40fa1a
and dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x50]
jl 0x40fa2b
mov dword [ebp - 0x58], 1
jmp 0x40fa2f
and dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x44]
je 0x40fa3b
cmp dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x24], eax
je 0x40fa4f
cmp dword [ebp - 8], 0
jne 0x40fa4f
and dword [ebp - 0x60], 0
jmp 0x40fa56
mov dword [ebp - 0x60], 1
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x14], 3
ja 0x40fd5f
mov dword [ebp - 0x10], 0x253d9751
mov dword [ebp - 8], 0xfffffff4
jmp 0x40fa7d
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x1c
jle 0x40fd2b
mov dword [ebp - 0x94], 0xfffffff6
mov dword [ebp - 0x30], 0
jmp 0x40faa1
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x40fab4
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc], 5
jmp 0x40fa9a
mov dword [ebp - 0x1c], 0xffffffff
jmp 0x40fac4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x39
jle 0x40faff
mov dword [ebp - 0x14], 0
jmp 0x40fada
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x40faee
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xc], 0
je 0x40faec
jmp 0x40faee
jmp 0x40fad3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
je 0x40fafd
jmp 0x40faff
jmp 0x40fabd
imul eax, dword [ebp - 0x10], 0xf725
test eax, eax
jne 0x40fb15
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x10]
cmp dword [ebp + eax - 0xc], ecx
je 0x40fb2d
mov dword [ebp - 0x68], 1
jmp 0x40fb31
and dword [ebp - 0x68], 0
cmp dword [ebp - 0x68], 1
je 0x40fb40
mov dword [ebp - 0x70], 1
jmp 0x40fb44
and dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x70]
neg eax
jne 0x40fb54
mov dword [ebp - 0x7c], 1
jmp 0x40fb58
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x24], eax
jl 0x40fb75
mov dword [ebp - 0x84], 1
jmp 0x40fb7c
and dword [ebp - 0x84], 0
cmp dword [ebp - 0x84], 0xb224
jge 0x40fb94
mov dword [ebp - 0x8c], 1
jmp 0x40fb9b
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x94], eax
imul eax, dword [ebp - 0x94], 9
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc]
jl 0x40fbc6
mov dword [ebp - 0x9c], 1
jmp 0x40fbcd
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x10]
cmp eax, 0xfffe
jb 0x40fbed
mov dword [ebp - 0x130], 1
jmp 0x40fbf4
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1ac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x10], eax
jge 0x40fc21
mov dword [ebp - 0xa4], 1
jmp 0x40fc28
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x20], eax
jl 0x40fc45
mov dword [ebp - 0xac], 1
jmp 0x40fc4c
and dword [ebp - 0xac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp eax, dword [ebp - 0xac]
jge 0x40fc6a
mov dword [ebp - 0xb4], 1
jmp 0x40fc71
and dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0xf09d
jge 0x40fc89
mov dword [ebp - 0xbc], 1
jmp 0x40fc90
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xbc], eax
jge 0x40fca7
mov dword [ebp - 0xc4], 1
jmp 0x40fcae
and dword [ebp - 0xc4], 0
cmp dword [ebp - 0xc4], 0x3e9becc4
jle 0x40fcc6
mov dword [ebp - 0x138], 1
jmp 0x40fccd
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1b8], eax
imul eax, dword [ebp - 0x10], 0xdb9c
cmp eax, 1
jg 0x40fcee
mov dword [ebp - 0xcc], 1
jmp 0x40fcf5
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xcc], eax
jg 0x40fd0c
mov dword [ebp - 0xd4], 1
jmp 0x40fd13
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
shl eax, 2
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc], eax
jmp 0x40fa76
push 0x2d3d
push 0x644f
push 1
push 0x3beb
push 0x639
lea eax, [ebp - 0x14]
push eax
push 0x25a8
lea eax, [ebp - 0x38]
push eax
xor dl, dl
mov ecx, 0x20c
call fcn.00421c67
add esp, 0x20
jmp 0x40fda8
mov byte [ebp - 0x15], 0
push 0x4b98
push 0x7e2d
push 0x6a7f
push 0x7f66
push 0
lea eax, [ebp - 0x15]
push eax
push 0x7888
push 0x3fa1
push 0x1871
push 0x60c5
push 0x3f88
mov edx, 0x41db
mov ecx, 0x14d9
call fcn.004567ef
add esp, 0x2c
push 4
push 0x1000
push dword [ebp - 0x40]
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x140]
add ecx, dword [eax + 0xc]
push ecx
push 0x10916
push 0x1100f
call fcn.0043fae6
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
push 0x88
xor dl, dl
mov ecx, 0x62d5
call fcn.0045e8fa
pop ecx
lea eax, [ebp - 0xdc]
push eax
push 0x5c49
lea eax, [ebp - 0x48]
push eax
push 0x36c
push 0x6d1a
push 0
push 0x982
push 0x1636
call fcn.00404045
add esp, 0x20
push dword [ebp - 0x40]
push 0
mov eax, dword [ebp - 0x48]
push dword [eax]
call fcn.0044042e
add esp, 0xc
mov esp, ebp
pop ebp
ret