Function at 0x10015b18
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005e067
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x2e0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x10016ea2
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x16c], eax
lea eax, [ebp + 0x24]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x118], 0x3c74
mov dword [ebp - 0x220], str.gabt_fyop_evuvxescn_hodzuznej_ylbzh_jckmpndj_jsenzstuu_xees_dyoq
cmp dword [ebp - 0x118], 0x3e8d
jle 0x10015c70
push 0x26b
push 0
push 0x173f
call dword [sym.imp.USER32.dll_GetWindowTextW]
and dword [ebp - 0x78], 0
jmp 0x10015ba7
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x3954
jge 0x10015c70
and dword [ebp - 0x70], 0
jmp 0x10015bc1
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x7961
jge 0x10015c6b
and dword [ebp - 0x9c], 0
jmp 0x10015be4
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x78bf
jge 0x10015c66
and dword [ebp - 0x68], 0
jmp 0x10015bfd
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x2787
jge 0x10015c61
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x68]
or eax, dword [ebp - 0x78]
cdq
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], edx
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0x2d8]
call fcn.10001ace
pop ecx
pop ecx
mov dword [ebp - 0x1d4], eax
mov ecx, dword [ebp - 0x1d4]
call fcn.100053c9
push eax
call fcn.1004699c
pop ecx
lea ecx, [ebp - 0x2d8]
call fcn.10005329
jmp 0x10015bf6
jmp 0x10015bd7
jmp 0x10015bba
jmp 0x10015ba0
lea eax, [ebp + 0x18]
mov dword [ebp - 0x1a0], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x118], 0x3998
jge 0x10015c95
push dword [ebp - 0x220]
call fcn.1004699c
pop ecx
jmp 0x10015cb1
or dword [ebp - 4], 0xffffffff
jmp 0x10015cbb
mov eax, dword [ebp + 8]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x158], eax
lea eax, [ebp + 0x34]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a0]
movzx eax, byte [eax]
test eax, eax
je 0x10015d65
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
lea eax, [ebp - 0x1bc]
push eax
mov ecx, dword [ebp - 0x184]
call fcn.1001783b
mov ecx, dword [ebp - 0x1c4]
mov cx, word [ecx]
mov word [eax], cx
jmp 0x10016e9d
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x168], eax
lea ecx, [ebp - 0x2a4]
call fcn.1000abf7
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
shr eax, 1
push eax
lea ecx, [ebp - 0x2a4]
call fcn.100172f3
mov dword [ebp - 0x234], 0xbdde
mov dword [ebp - 0x230], 0xbdde
mov dword [ebp - 0x22c], 0xbdde
mov dword [ebp - 0x228], 0xbdde
mov dword [ebp - 0x128], 0x7562
mov dword [ebp - 0x19c], str.arxhjdv_xgxbhitak_svw_lnkrnr_svst_azuiqi
cmp dword [ebp - 0x128], 0x7860
jle 0x10015eb4
and dword [ebp - 0x94], 0
jmp 0x10015e1f
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x64e9
jge 0x10015eb4
and dword [ebp - 0x84], 0
jmp 0x10015e45
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x2307
jge 0x10015eaf
and dword [ebp - 0xa4], 0
jmp 0x10015e67
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x7700
jge 0x10015ead
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0xa4]
sar eax, cl
cdq
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], edx
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
mov ecx, 0x10078bb8
call fcn.100055e4
jmp 0x10015e5a
jmp 0x10015e38
jmp 0x10015e12
mov dword [ebp - 0x18], 0xe56f9b2c
mov byte [ebp - 4], 3
cmp dword [ebp - 0x128], 0x731d
jge 0x10015edb
mov edx, dword [ebp - 0x19c]
mov ecx, 0x10078bb8
call fcn.10009472
jmp 0x10015ef7
mov dword [ebp - 4], 2
jmp 0x10015f07
mov dword [ebp - 0x1a8], 0x7f05f432
mov dword [ebp - 0x18], 3
jmp 0x10015f21
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10016090
mov dword [ebp - 0x104], 2
mov dword [ebp - 0x8c], 0
jmp 0x10015f4e
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x10015f6a
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x1e4], 9
jmp 0x10015f41
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x234], 1
jge 0x10015f9b
mov dword [ebp - 0x1dc], 0x46cdead9
lea eax, [ebp - 0x1dc]
push eax
push 1
push 1
push 0
call fcn.1001050c
add esp, 0x10
jmp 0x1001608b
mov dword [ebp - 0x6c], 0
jmp 0x10015fab
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x10015fc1
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x2b4], 0x90a3
jmp 0x10015fa4
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x2b4]
cmp ecx, dword [ebp + eax - 0x2b4]
jle 0x10015fe7
mov dword [ebp - 0xc4], 1
jmp 0x10015fee
and dword [ebp - 0xc4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
mov dword [ebp - 0xbc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbc]
mov dword [ebp + eax - 0x1e4], ecx
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x18]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x234]
sub ecx, dword [ebp - 0x104]
add ecx, dword [ebp + eax*4 - 0x234]
cmp dword [ebp - 0xc4], ecx
jle 0x10016050
mov dword [ebp - 0x124], 1
jmp 0x10016057
and dword [ebp - 0x124], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2b4]
cmp eax, dword [ebp - 0x124]
jg 0x10016077
mov dword [ebp - 0xcc], 1
jmp 0x1001607e
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0x1a8], eax
jmp 0x10015f1a
mov dword [ebp - 0x18], 0x12
jmp 0x100160a0
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffef
jge 0x100160e9
mov dword [ebp - 0x74], 0
jmp 0x100160b6
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x100160cc
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x10c], 0xfb8eb5ea
jmp 0x100160af
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x10c], eax
jmp 0x10016099
mov dword [ebp - 0x1e8], 0x1647
cmp dword [ebp - 0x1e8], 0x5f5
jge 0x10016290
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x10078c70
call fcn.100053e9
mov ecx, eax
call fcn.100053e9
mov ecx, eax
call fcn.100053e9
mov ecx, eax
call fcn.100053e9
mov ecx, eax
call fcn.100053e9
mov ecx, eax
call fcn.100053e9
cmp dword [ebp - 0x40], 0
jne 0x10016180
cmp dword [ebp - 0x50], 0
jne 0x10016180
cmp dword [ebp - 0x54], 0
jne 0x10016180
cmp dword [ebp - 0x44], 0
jne 0x10016180
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x4c]
je 0x10016180
push fcn.100097f9
push 0
mov ecx, 0x10078bb8
call fcn.100171aa
mov ecx, eax
call fcn.100055d8
cmp dword [ebp - 0x40], 0
jne 0x10016192
cmp dword [ebp - 0x50], 0
jne 0x10016192
cmp dword [ebp - 0x48], 0
je 0x100161a4
cmp dword [ebp - 0x54], 0
jne 0x100161bc
cmp dword [ebp - 0x44], 0
jne 0x100161bc
cmp dword [ebp - 0x4c], 0
jne 0x100161bc
push fcn.100097f9
push 0xffffffffffffffff
mov ecx, 0x10078bb8
call fcn.100171aa
mov ecx, eax
call fcn.100055d8
cmp dword [ebp - 0x40], 0
jne 0x100161ce
cmp dword [ebp - 0x50], 0
jne 0x100161ce
cmp dword [ebp - 0x48], 0
jne 0x100161e8
cmp dword [ebp - 0x54], 0
jne 0x10016200
cmp dword [ebp - 0x44], 0
jne 0x10016200
cmp dword [ebp - 0x4c], 0
je 0x10016200
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x4c]
jne 0x10016200
push fcn.100097f9
push 0
mov ecx, 0x10078bb8
call fcn.100171aa
mov ecx, eax
call fcn.100055d8
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x40]
imul ecx, dword [ebp - 0x44]
cmp ecx, eax
jne 0x1001624e
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x44]
imul ecx, dword [ebp - 0x48]
cmp ecx, eax
jne 0x1001624e
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x54]
cmp ecx, eax
jne 0x1001624e
push fcn.100097f9
push 0xffffffffffffffff
mov ecx, 0x10078bb8
call fcn.100171aa
mov ecx, eax
call fcn.100055d8
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x40]
imul ecx, dword [ebp - 0x44]
sub ecx, eax
jne 0x10016278
push fcn.100097f9
push 0
mov ecx, 0x10078bb8
call fcn.100171aa
mov ecx, eax
call fcn.100055d8
push fcn.100097f9
push 1
mov ecx, 0x10078bb8
call fcn.100171aa
mov ecx, eax
call fcn.100055d8
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [eax]
jae 0x10016dd5
push 2
lea ecx, [ebp - 0x240]
call fcn.1000580e
mov byte [ebp - 4], 5
mov dword [ebp - 0x154], 0xfffffff8
mov dword [ebp - 0x150], 0xfffffff8
mov dword [ebp - 0x14c], 0xfffffff8
mov dword [ebp - 0x148], 0xfffffff8
mov dword [ebp - 0x138], 3
mov dword [ebp - 0x1f4], 0xffffffff
mov dword [ebp - 0x258], 0x4c3f4f88
mov dword [ebp - 0x1b0], 6
push 0x2cb5
push 0x5da2
push 0xb27
push 0x310b
push 0x439f
push 0
push 0xa04
push 1
push 1
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.10013722
add esp, 0x2c
mov dword [ebp - 0x58], 0
jmp 0x1001634d
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10016363
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x208], 0xffff
jmp 0x10016346
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x154], 0
jmp 0x10016391
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x154]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x154], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x154], 1
jg 0x10016565
mov dword [ebp - 0x26c], 0x8421705
push 1
lea ecx, [ebp - 0x268]
call fcn.1000580e
mov byte [ebp - 4], 6
push 0x44ed
push 0x7927
lea eax, [ebp - 0x268]
push eax
push 0
lea eax, [ebp - 0x60]
push eax
call fcn.10016f6a
add esp, 0x14
mov dword [ebp - 0x60], 0
jmp 0x100163ef
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10016405
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x2c0], 0xc62b
jmp 0x100163e8
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x154]
lea ecx, [ebp - 0x240]
call fcn.10005887
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c0]
sub eax, 0x7966d0e2
jne 0x10016443
cmp dword [ebp - 0x1b0], 0
jne 0x10016443
and dword [ebp - 0xdc], 0
jmp 0x1001644d
mov dword [ebp - 0xdc], 1
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x208]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x154]
lea ecx, [ebp - 0x240]
call fcn.10005887
mov eax, dword [eax]
add eax, 0x677b
imul eax, esi
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x208]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x208], eax
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x1b8]
jl 0x100164cf
mov dword [ebp - 0x114], 1
jmp 0x100164d6
and dword [ebp - 0x114], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x154]
lea ecx, [ebp - 0x240]
call fcn.10005887
mov eax, dword [eax]
cmp eax, dword [ebp - 0x114]
jl 0x10016504
mov dword [ebp - 0xe4], 1
jmp 0x1001650b
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 6
jne 0x10016520
mov dword [ebp - 0x130], 1
jmp 0x10016527
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x1f4], eax
mov byte [ebp - 0x32], 0
push 0
lea eax, [ebp - 0x32]
push eax
push 0x4aaf
push 1
push 0x6930
call fcn.10012a08
add esp, 0x14
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x268]
call fcn.1000586b
jmp 0x10016376
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x240]
call fcn.1000586b
mov dword [ebp - 0x2c], 0xbe4438be
mov dword [ebp - 0x98], 0xf703c576
mov dword [ebp - 0x28], 0x94d0e83
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0x1c], 0
jmp 0x100165a6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x100165bc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x248], 5
jmp 0x1001659f
mov dword [ebp - 0x1c], 0
jmp 0x100165cc
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x100165e2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa0], 0xfffffff6
jmp 0x100165c5
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jle 0x100165ff
mov dword [ebp - 0xec], 1
jmp 0x10016606
and dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 0xfffffff6
jne 0x1001661b
mov dword [ebp - 0x11c], 1
jmp 0x10016622
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0xffff
ja 0x10016632
cmp dword [ebp - 0x2c], 0
cmp dword [ebp - 0x2c], 0
jne 0x1001664a
cmp dword [ebp - 0x2c], 0
jne 0x1001664a
mov dword [ebp - 0xf4], 1
jmp 0x10016651
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xf4], eax
jle 0x10016668
mov dword [ebp - 0x140], 1
jmp 0x1001666f
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 0xe2db58e4
jae 0x1001669d
push 1
push 1
push 0x180d
push 1
push 0x639b
push 0x3289
call fcn.1000e4e9
add esp, 0x18
jmp 0x1001686c
mov dword [ebp - 0x200], 9
mov dword [ebp - 0xfc], 0x6904
mov dword [ebp - 0x21c], str.fmmltwgef_yoa_eylueuekw_mxnimk_xcwhgsef_vuf_poexnrz_xgznd_kupvizv_dfhhhxo_ayuzgoose_kywma_znmglbsi_fvc
cmp dword [ebp - 0xfc], 0x6c40
jle 0x1001679c
push 0
push 0
call dword [sym.imp.USER32.dll_LoadMenuW]
and dword [ebp - 0x90], 0
jmp 0x100166eb
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x452d
jge 0x1001679c
and dword [ebp - 0x80], 0
jmp 0x10016708
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x4520
jge 0x10016797
and dword [ebp - 0x88], 0
jmp 0x1001672b
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x5d61
jge 0x10016792
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x88]
or eax, dword [ebp - 0x90]
cdq
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], edx
push dword [ebp - 0x210]
push dword [ebp - 0x214]
lea ecx, [ebp - 0x2f0]
call fcn.10001ace
pop ecx
pop ecx
mov dword [ebp - 0x1c0], eax
mov ecx, dword [ebp - 0x1c0]
call fcn.100053c9
push eax
call fcn.1004699c
pop ecx
lea ecx, [ebp - 0x2f0]
call fcn.10005329
jmp 0x1001671e
jmp 0x10016701
jmp 0x100166de
mov dword [ebp - 0x1c8], 0
mov byte [ebp - 4], 7
cmp dword [ebp - 0xfc], 0x68ce
jge 0x100167c2
push dword [ebp - 0x21c]
call fcn.1004699c
pop ecx
jmp 0x100167de
mov dword [ebp - 4], 2
jmp 0x100167ee
push 0x77ae
push 0x38a6
push 1
push 1
push 0
push 0x33ae
call fcn.1000eb7b
add esp, 0x18
push 1
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x1c8]
push eax
push 0x4ca1
push 0x535a
lea eax, [ebp - 0x2c]
push eax
push 0x44f7
push 0x133e
push 0x193a
push 0x4ee1
push 0x4d56
push 0
push 0x7bc7
lea eax, [ebp - 0x200]
push eax
push 0x2943
push 0x3566
push 0x6688
push 0x946
call fcn.10013d6a
add esp, 0x48
cmp dword [ebp - 0x98], 0x72920796
jl 0x10016884
mov dword [ebp - 0xc0], 1
jmp 0x1001688b
and dword [ebp - 0xc0], 0
cmp dword [ebp - 0x28], 0xffffffff
jb 0x1001689d
mov dword [ebp - 0xb4], 1
jmp 0x100168a4
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0xc0], eax
je 0x100168ca
mov dword [ebp - 0xc8], 1
jmp 0x100168d1
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x28]
je 0x100168f4
mov dword [ebp - 0xd0], 1
jmp 0x100168fb
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0x28]
sub eax, 0x24a5d932
cmp dword [ebp - 0x2c], eax
jl 0x1001691a
mov dword [ebp - 0xd8], 1
jmp 0x10016921
and dword [ebp - 0xd8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd8]
mov dword [ebp + eax - 0x248], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa0], 0xac06e326
mov eax, 0xac06e326
test eax, eax
je 0x10016a94
mov dword [ebp - 0x20], 0x576660b2
push 1
push 0
lea eax, [ebp - 0x20]
push eax
push 1
push 0x4c77
push 0x45ec
call fcn.1000e4e9
add esp, 0x18
mov dword [ebp - 0x20], 0xffffffe3
jmp 0x10016985
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xa
jge 0x10016a92
push 2
lea ecx, [ebp - 0x254]
call fcn.1000580e
mov byte [ebp - 4], 9
push 0
push 1
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.1000ff60
add esp, 0x10
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa0], 0
jne 0x100169e3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x248], 0
jne 0x100169e3
and dword [ebp - 0xf0], 0
jmp 0x100169ed
mov dword [ebp - 0xf0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x20], 0xfffffffd
je 0x10016a1b
mov dword [ebp - 0xe0], 1
jmp 0x10016a22
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
dec eax
cmp eax, 0x218a
jge 0x10016a3c
mov dword [ebp - 0xe8], 1
jmp 0x10016a43
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
add ecx, eax
cmp dword [ebp - 0xf0], ecx
jl 0x10016a65
mov dword [ebp - 0x1d0], 1
jmp 0x10016a6c
and dword [ebp - 0x1d0], 0
mov esi, dword [ebp - 0x28]
push 0
lea ecx, [ebp - 0x254]
call fcn.10005887
mov dword [eax], esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x254]
call fcn.1000586b
jmp 0x1001697e
jmp 0x10016aba
mov dword [ebp - 0x28], 0
jmp 0x10016aa4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10016aba
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xa0], 0xad3f04e2
jmp 0x10016a9d
lea eax, [ebp - 0xac]
mov dword [ebp - 0x1e0], eax
and dword [ebp - 0x7c], 0
jmp 0x10016ada
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x7c], 2
jae 0x10016d9d
mov dword [ebp - 0x14], 0x937d
mov dword [ebp - 0x30], 0x434678dc
mov dword [ebp - 0x20c], 0xc5c2
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jge 0x10016b10
mov dword [ebp - 0x100], 1
jmp 0x10016b17
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x14], 0x8b6b
jne 0x10016b56
mov dword [ebp - 0xf8], 1
jmp 0x10016b5d
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
add eax, 0xa
cmp dword [ebp - 0x100], eax
je 0x10016b93
cmp dword [ebp - 0x14], 0
je 0x10016b93
push 1
push 0x7024
push 0x47c0
lea eax, [ebp - 0x30]
push eax
push 1
call fcn.1000e344
add esp, 0x14
jmp 0x10016d51
mov dword [ebp - 0xa8], 0
jmp 0x10016bac
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x10016bc5
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x3c], 1
jmp 0x10016b9f
mov dword [ebp - 0x14], 0
jmp 0x10016bd5
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x39
jl 0x10016c0f
mov byte [ebp - 0x34], 0
movzx eax, byte [ebp - 0x34]
test eax, eax
je 0x10016bef
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov byte [ebp - 0x31], 0
push 0x1e9e
push 0x5c73
lea eax, [ebp - 0x31]
push eax
push 1
push 1
call fcn.1000e402
add esp, 0x14
jmp 0x10016bce
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jle 0x10016c23
mov dword [ebp - 0x108], 1
jmp 0x10016c2a
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x108]
jg 0x10016c44
mov dword [ebp - 0x110], 1
jmp 0x10016c4b
and dword [ebp - 0x110], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x110], eax
jle 0x10016c69
mov dword [ebp - 0xb0], 1
jmp 0x10016c70
and dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 1
jle 0x10016c92
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0
je 0x10016c92
mov dword [ebp - 0x120], 1
jmp 0x10016c99
and dword [ebp - 0x120], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x120], eax
jl 0x10016cb7
mov dword [ebp - 0x12c], 1
jmp 0x10016cbe
and dword [ebp - 0x12c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x12c], eax
jle 0x10016cdc
mov dword [ebp - 0x224], 1
jmp 0x10016ce3
and dword [ebp - 0x224], 0
imul eax, dword [ebp - 0x30], 0xe159
sub eax, dword [ebp - 0x30]
cmp eax, 0x4cbed562
jge 0x10016d0a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0
jne 0x10016d0a
and dword [ebp - 0x1d8], 0
jmp 0x10016d14
mov dword [ebp - 0x1d8], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x270], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp eax, dword [ebp - 0x20c]
jne 0x10016d41
cmp dword [ebp - 0x30], 0
je 0x10016d41
mov dword [ebp - 0x134], 1
jmp 0x10016d48
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x13c]
mov eax, dword [eax]
add eax, dword [ebp - 0x5c]
xor edx, edx
div dword [0x100755dc]
mov eax, dword [ebp - 0x144]
mov eax, dword [eax + 4]
movzx edx, byte [eax + edx]
mov eax, dword [ebp - 0x13c]
mov eax, dword [eax]
add eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x144]
mov ecx, dword [ecx]
movzx ecx, byte [ecx + eax]
call fcn.1000b056
mov ecx, dword [ebp - 0x1e0]
add ecx, dword [ebp - 0x7c]
mov byte [ecx], al
jmp 0x10016acc
push 0x486
push 0x3ea1
push 0x441f
push 0x2b02
push 1
push 0x4b5a
lea eax, [ebp - 0xac]
push eax
push 0
lea eax, [ebp - 0x2a4]
push eax
call fcn.10010657
add esp, 0x24
jmp 0x10016294
mov dword [ebp - 0x24], 0xfe0a8eac
mov dword [ebp - 0x24], 0xffffffe5
jmp 0x10016dec
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffffb
jg 0x10016e19
mov byte [ebp - 0x33], 0
push 1
push 0x5fd7
lea eax, [ebp - 0x33]
push eax
push 0x4159
push 0x5197
push 1
push 0
call fcn.1001559b
add esp, 0x1c
jmp 0x10016de5
mov dword [ebp - 0x24], 0
jmp 0x10016e29
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 6
jg 0x10016e68
mov dword [ebp - 0x160], 0x6e5b
mov dword [ebp - 0x15c], 0xca31
push 0
push 1
push 0x9ec
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.1000ea8a
add esp, 0x18
jmp 0x10016e22
lea eax, [ebp - 0x2a4]
push eax
mov ecx, dword [ebp - 0x168]
call fcn.1000a81a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a4]
call fcn.1000571e
jmp 0x10016f59
jmp 0x10016f59
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x178], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x170]
movzx eax, byte [eax]
test eax, eax
je 0x10016f2f
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
jmp 0x10016f0d
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
cmp dword [eax], 1
jge 0x10016f2d
mov eax, dword [ebp - 0x64]
push dword [eax]
mov ecx, dword [ebp - 0x198]
call fcn.10005887
mov dword [eax], 0xb40
jmp 0x10016f02
jmp 0x10016f59
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x10016f59
push 0x49d1
push 0x6bd0
push 0
push 0x3996
push 0x1c2f
call fcn.10015459
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret