Function at 0x100203d4
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10067bce
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2d0
push esi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1002040e
push 0
push 0x129
call fcn.10024533
pop ecx
pop ecx
jmp 0x100215ea
mov eax, dword [ebp + 8]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x168], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x190], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
movzx eax, byte [eax]
test eax, eax
je 0x100215bf
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x1fc], 0x713b9102
mov dword [ebp - 0x1f8], 0x713b9102
mov dword [ebp - 0x1f4], 0x713b9102
mov dword [ebp - 0x1f0], 0x713b9102
lea ecx, [ebp - 0x9d]
call fcn.1000f7b3
push eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.10032cd7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1c4]
call fcn.10032c46
and dword [ebp - 4], 0
push 0
lea ecx, [ebp - 0x1c4]
call fcn.1000ed9f
and dword [eax], 0
jmp 0x10020504
push 0
lea ecx, [ebp - 0x1c4]
call fcn.1000ed9f
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x114]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1c4]
call fcn.1000ed9f
cmp dword [eax], 0x1a
jg 0x1002063b
push 2
lea ecx, [ebp - 0x208]
call fcn.1000ecc1
mov byte [ebp - 4], 1
push 3
lea ecx, [ebp - 0x1a8]
call fcn.1000ecc1
mov byte [ebp - 4], 2
push 0x1696
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x208]
push eax
push 0
call fcn.1001ecc2
add esp, 0x10
mov dword [ebp - 0x44], 0
jmp 0x10020566
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1002057f
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1a8]
call fcn.1000ed9f
or dword [eax], 0xffffffff
jmp 0x1002055f
push 1
lea ecx, [ebp - 0x208]
call fcn.1000ed9f
mov dword [eax], 0x6e838462
push 2
lea ecx, [ebp - 0x1a8]
call fcn.1000ed9f
mov dword [eax], 0xfffffff3
jmp 0x100205cb
push 2
lea ecx, [ebp - 0x1a8]
call fcn.1000ed9f
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x100]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x1a8]
call fcn.1000ed9f
cmp dword [eax], 7
je 0x10020618
mov dword [ebp - 0x70], 0xfffffffd
mov dword [ebp - 0x70], 1
jmp 0x100205f4
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x10020616
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x10020614
push 0
push 0x2de9
call fcn.1002033f
pop ecx
pop ecx
jmp 0x100205ed
jmp 0x100205a7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1a8]
call fcn.1000ed74
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x208]
call fcn.1000ed74
jmp 0x100204e0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c4]
call fcn.1000ed74
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x180]
add ecx, dword [eax]
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x250], 1
mov dword [ebp - 0x220], 0xfffffffc
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x230], 0x25260
push 3
lea ecx, [ebp - 0x264]
call fcn.1000ecc1
mov dword [ebp - 4], 3
mov dword [ebp - 0x130], 0x2282d564
push 1
push 0
push 0x82c
push 0x527e
lea eax, [ebp - 0x238]
push eax
push 0x6eb
lea eax, [ebp - 0x264]
push eax
call fcn.1001a5be
add esp, 0x1c
push 0
lea eax, [ebp - 0x130]
push eax
push 0x7335
call fcn.10023e33
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x264]
call fcn.1000ed74
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x78], eax
push 2
lea ecx, [ebp - 0x58]
call fcn.1000ecc1
mov dword [ebp - 4], 4
mov dword [ebp - 0x4c], 0
jmp 0x1002071d
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x10020730
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x1c], 0xfffffff9
jmp 0x10020716
lea eax, [ebp - 0x4c]
push eax
push 1
push 0x7d4c
push 1
push 0xb0f
push 1
lea eax, [ebp - 0x58]
push eax
push 0x587e
call fcn.10019e09
add esp, 0x20
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
and dword [eax], 0
jmp 0x10020785
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xfc]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
cmp dword [eax], 0
jg 0x10020905
mov dword [ebp - 0x1b8], 4
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x1c]
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
mov eax, dword [eax]
imul esi, dword [ebp + eax*4 - 0x1c]
test esi, esi
jne 0x100207d3
mov dword [ebp - 0xb0], 1
jmp 0x100207da
and dword [ebp - 0xb0], 0
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x1c]
add eax, dword [ebp - 0xb0]
imul eax, eax, 0xe39f
cmp eax, 0xaa32
jle 0x10020809
mov dword [ebp - 0xe8], 1
jmp 0x10020810
and dword [ebp - 0xe8], 0
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0xe8], eax
jge 0x10020834
mov dword [ebp - 0xb8], 1
jmp 0x1002083b
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0
jb 0x10020850
mov dword [ebp - 0x184], 1
jmp 0x10020857
and dword [ebp - 0x184], 0
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0x240], eax
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x1c], 0
je 0x10020895
mov eax, 0xb94d
test eax, eax
je 0x10020895
mov dword [ebp - 0x110], 1
jmp 0x1002089c
and dword [ebp - 0x110], 0
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
mov ecx, dword [ebp - 0x110]
sub ecx, dword [eax]
cmp ecx, 0xfffffffc
jl 0x100208bf
mov dword [ebp - 0x144], 1
jmp 0x100208c6
and dword [ebp - 0x144], 0
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0x248], eax
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
mov esi, eax
push 1
lea ecx, [ebp - 0x58]
call fcn.1000ed9f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x1c]
add eax, dword [esi]
mov dword [ebp - 0x1b8], eax
jmp 0x10020764
mov byte [ebp - 0x26], 0
lea eax, [ebp - 0x26]
push eax
push 0x65d3
push 0
push 0x1a1c
call fcn.1001febf
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.1000ed74
and dword [ebp - 0x98], 0
jmp 0x1002094b
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x78]
inc eax
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov eax, dword [eax + 4]
sub eax, 8
shr eax, 1
cmp dword [ebp - 0x98], eax
jae 0x10020fd1
push 1
lea ecx, [ebp - 0x284]
call fcn.1000ecc1
mov dword [ebp - 4], 5
push 2
lea ecx, [ebp - 0x274]
call fcn.1000ecc1
mov byte [ebp - 4], 6
mov dword [ebp - 0x218], 5
push 1
lea ecx, [ebp - 0x214]
call fcn.1000ecc1
mov byte [ebp - 4], 7
mov dword [ebp - 0x2b8], 0x6088b922
push 0
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.1001f87a
add esp, 0xc
push 0x1271
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x274]
push eax
push 1
push 1
push 0x24cb
call fcn.10019f4b
add esp, 0x18
lea eax, [ebp - 0xc0]
push eax
push 0x55d9
push 0x7496
push 0x79b0
lea eax, [ebp - 0x214]
push eax
push 0x3dec
push 0x7a7f
push 1
push 0x25d0
push 1
push 0
call fcn.10024b05
add esp, 0x2c
mov dword [ebp - 0x14c], 0x2011
cmp dword [ebp - 0x14c], 0x1382
jge 0x10020bc4
lea eax, [ebp - 0x8c]
push eax
push 0x1000784c
call fcn.1004f8bb
pop ecx
pop ecx
mov eax, dword [ebp - 0x8c]
inc eax
push eax
lea ecx, [ebp - 0x12c]
call fcn.1003300f
mov byte [ebp - 4], 8
mov dword [ebp - 0x7c], 2
jmp 0x10020a78
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x8c]
jg 0x10020ab4
lea eax, [ebp - 0x18c]
push eax
push 0x1000784c
call fcn.1004f8bb
pop ecx
pop ecx
lea eax, [ebp - 0x7c]
push eax
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x12c]
call fcn.1003307b
mov ecx, eax
call fcn.10032ceb
jmp 0x10020a71
mov byte [ebp - 0xd], 1
mov dword [ebp - 0x3c], 1
jmp 0x10020ac8
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x8c]
jg 0x10020b8b
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x12c]
call fcn.1003307b
mov ecx, eax
call fcn.1000ed96
test eax, eax
jne 0x10020af2
jmp 0x10020ac1
and dword [ebp - 0x9c], 0
and dword [ebp - 0x5c], 0
jmp 0x10020b06
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x12c]
call fcn.1003307b
mov ecx, eax
call fcn.1000ed96
cmp dword [ebp - 0x5c], eax
jae 0x10020b77
push dword [ebp - 0x5c]
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x12c]
call fcn.1003307b
mov ecx, eax
call fcn.1000ed9f
push dword [eax]
lea ecx, [ebp - 0x12c]
call fcn.1003307b
mov ecx, eax
call fcn.1000ed96
test eax, eax
jne 0x10020b5c
mov dword [ebp - 0xf0], 1
jmp 0x10020b63
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xf0]
mov dword [ebp - 0x9c], eax
jmp 0x10020aff
cmp dword [ebp - 0x9c], 3
jge 0x10020b86
mov byte [ebp - 0xd], 0
jmp 0x10020b8b
jmp 0x10020ac1
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x10020b9f
mov dword [ebp - 0xc8], 0x10007d00
jmp 0x10020ba9
mov dword [ebp - 0xc8], 0x10007d04
push dword [ebp - 0xc8]
call fcn.1004fca6
pop ecx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x12c]
call fcn.10033076
push 0
lea ecx, [ebp - 0x214]
call fcn.1000ed9f
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x108]
mov dword [ecx], eax
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x10020c08
push 0x1c11
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x214]
call fcn.1000ed74
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x274]
call fcn.1000ed74
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
call fcn.1000ed74
push 1
push 0x4643
push 1
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x16c]
push eax
push 0x69a
call fcn.1001a200
add esp, 0x18
mov dword [ebp - 0x2b4], 0xfffffffd
mov dword [ebp - 0x298], 0xb50bf34f
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x224], 0xdd688769
push 3
lea ecx, [ebp - 0x294]
call fcn.1000ecc1
mov dword [ebp - 4], 9
mov dword [ebp - 0x268], 0xfffffffe
mov dword [ebp - 0x1d4], 0x878ed7c3
mov dword [ebp - 0x1d0], 0x878ed7c3
mov dword [ebp - 0x1cc], 0x878ed7c3
mov dword [ebp - 0x1c8], 0x878ed7c3
mov dword [ebp - 0x68], 0
jmp 0x10020cd4
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10020cf0
push dword [ebp - 0x68]
lea ecx, [ebp - 0x294]
call fcn.1000ed9f
mov dword [eax], 1
jmp 0x10020ccd
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1d4]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x1d4], eax
push 0x5044
push 0x5b63
push 0x2598
push 0
call fcn.10025fc1
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x294]
call fcn.1000ed74
lea eax, [ebp - 0x1b0]
push eax
push 0x7a89
push 0x7ebb
push 0x27b0
push 1
push 0x7f4a
lea eax, [ebp - 0x78]
push eax
push 0x4cf2
push 1
call fcn.1001a2bb
add esp, 0x24
push 2
lea ecx, [ebp - 0x120]
call fcn.1000ecc1
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x154], 0x1d0c
cmp dword [ebp - 0x154], 0x10c7
jge 0x10020e26
lea eax, [ebp - 0x84]
push eax
push 0x100078b0
call fcn.1004f8bb
pop ecx
pop ecx
and dword [ebp - 0x60], 0
and dword [ebp - 0x80], 0
and dword [ebp - 0xa4], 0
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
js 0x10020e17
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa4]
push eax
push 0x100078a8
call fcn.1004f8bb
add esp, 0xc
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x60]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x80]
jle 0x10020e15
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x80], eax
jmp 0x10020dcb
push dword [ebp - 0x80]
push 0x100078b0
call fcn.1004faef
pop ecx
pop ecx
mov dword [ebp - 0x64], 0
jmp 0x10020e36
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10020e4f
push dword [ebp - 0x64]
lea ecx, [ebp - 0x120]
call fcn.1000ed9f
and dword [eax], 0
jmp 0x10020e2f
push 0
lea ecx, [ebp - 0x120]
call fcn.1000ed9f
mov dword [eax], 0x17
jmp 0x10020e88
push 0
lea ecx, [ebp - 0x120]
call fcn.1000ed9f
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xd8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x120]
call fcn.1000ed9f
cmp dword [eax], 0xfffffff5
jle 0x10020eed
mov dword [ebp - 0x1b4], 1
mov dword [ebp - 0x15c], 0xfffffffb
push 1
push 0x5772
push 0x51cb
push 0x77df
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 1
lea eax, [ebp - 0x15c]
push eax
push 0x28b8
push 0x5e77
call fcn.1001a458
add esp, 0x28
jmp 0x10020e64
mov dword [ebp - 0x48], 0
jmp 0x10020efd
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xfffffff4
jne 0x10020f65
mov dword [ebp - 0x1ac], 3
mov dword [ebp - 0x164], 0x4defc72f
push 0
push 0x1566
lea eax, [ebp - 0x48]
push eax
push 1
lea eax, [ebp - 0x194]
push eax
push 0x649b
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x164]
push eax
push 0x2746
push 1
lea eax, [ebp - 0x1ac]
push eax
push 0x1930
push 0x5388
push 0x4008
call fcn.10023f3a
add esp, 0x38
jmp 0x10020ef6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
call fcn.1000ed74
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
je 0x10020f8d
jmp 0x10020fcc
mov eax, dword [ebp - 0x174]
add eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x134], eax
push 0x6180
push dword [ebp - 0x17c]
push 0x6b0d
push 0x5725
push 1
push 1
push 0x3780
lea eax, [ebp - 0x134]
push eax
call fcn.1001a6a4
add esp, 0x20
jmp 0x10020936
mov dword [ebp - 0x18], 0x477862fd
mov dword [ebp - 0x90], 0x300ce3d9
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x34], 0x8fb
mov dword [ebp - 0x10c], 0x6ba8a7e8
mov dword [ebp - 0x138], 0x143f
cmp dword [ebp - 0x138], 0xb96
jge 0x1002109c
lea eax, [ebp - 0xf8]
push eax
mov ecx, 0x1065aaa0
call fcn.1000e663
mov eax, dword [ebp - 0xf8]
and eax, 0x80000001
jns 0x1002103a
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x10021081
cmp dword [ebp - 0xf8], 2
jne 0x10021064
push fcn.10013226
mov edx, 0x10007880
mov ecx, 0x1065a9f8
call fcn.10013431
mov ecx, eax
call fcn.1000e967
jmp 0x1002107f
push fcn.10013226
mov edx, 0x1000787c
mov ecx, 0x1065a9f8
call fcn.10013431
mov ecx, eax
call fcn.1000e967
jmp 0x1002109c
push fcn.10013226
mov edx, 0x10007880
mov ecx, 0x1065a9f8
call fcn.10013431
mov ecx, eax
call fcn.1000e967
mov dword [ebp - 0x22c], 0
push 3
lea ecx, [ebp - 0x2a4]
call fcn.1000ecc1
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x150], 8
mov dword [ebp - 0x14], 0
jmp 0x100210de
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100210f4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x258], 0xdeea39b
jmp 0x100210d7
mov dword [ebp - 0x14], 0
jmp 0x10021104
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10021120
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2a4]
call fcn.1000ed9f
mov dword [eax], 0xadab8f5b
jmp 0x100210fd
mov dword [ebp - 0x18], 0
jmp 0x10021130
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xb
jle 0x1002158f
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x24], 2
mov dword [ebp - 0x40], 0x477a14a9
mov dword [ebp - 0x2b0], 5
mov dword [ebp - 0x234], 6
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x140], 0x153b
cmp dword [ebp - 0x140], 0x618
jge 0x1002123c
lea eax, [ebp - 0x148]
push eax
push 0x1000784c
call fcn.1004f8bb
pop ecx
pop ecx
and dword [ebp - 0x38], 0
and dword [ebp - 0x88], 0
jmp 0x100211b4
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x148]
jge 0x1002123c
lea eax, [ebp - 0x2c]
push eax
push 0x1000784c
call fcn.1004f8bb
pop ecx
pop ecx
mov eax, dword [ebp - 0x2c]
and eax, 0x80000001
jns 0x100211e1
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x100211fb
cmp dword [ebp - 0x38], 0
jl 0x100211fb
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
jmp 0x10021222
mov eax, dword [ebp - 0x2c]
and eax, 0x80000001
jns 0x1002120a
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10021222
cmp dword [ebp - 0x38], 0
jge 0x10021222
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2c]
cdq
sub eax, edx
sar eax, 1
push eax
push 0x100078c8
call fcn.1004faef
pop ecx
pop ecx
jmp 0x100211a7
mov dword [ebp - 0x6c], 0
jmp 0x1002124c
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10021262
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x2d4], 0xf19
jmp 0x10021245
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x90], eax
imul eax, dword [ebp - 0x90], 9
cmp eax, dword [ebp - 0x24]
jl 0x1002128f
cmp dword [ebp - 0x24], 0
jne 0x1002128f
and dword [ebp - 0xe0], 0
jmp 0x10021299
mov dword [ebp - 0xe0], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xe0], eax
jle 0x100212b0
mov dword [ebp - 0xa8], 1
jmp 0x100212b7
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xa8], eax
jne 0x100212ce
mov dword [ebp - 0xac], 1
jmp 0x100212d5
and dword [ebp - 0xac], 0
cmp dword [ebp - 0xac], 0x299f
jl 0x100212ed
mov dword [ebp - 0xb4], 1
jmp 0x100212f4
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xb4], eax
je 0x1002130b
mov dword [ebp - 0xbc], 1
jmp 0x10021312
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0xbc]
add eax, ecx
je 0x10021337
mov eax, 0x4879
test eax, eax
je 0x10021337
mov dword [ebp - 0xc4], 1
jmp 0x1002133e
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xc4], eax
je 0x10021355
mov dword [ebp - 0xcc], 1
jmp 0x1002135c
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
sub eax, 0x52f0
sub eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x34]
cmp eax, 0xd1a9
jle 0x100213a2
cmp dword [ebp - 0x90], 0
je 0x100213b7
mov eax, 0xa84b
test eax, eax
je 0x100213b7
mov dword [ebp - 0xdc], 1
jmp 0x100213be
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xdc], eax
je 0x100213d5
mov dword [ebp - 0xe4], 1
jmp 0x100213dc
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
add eax, 0x2510a741
imul eax, dword [ebp - 0x18]
sub eax, 0x7067
cmp eax, dword [ebp - 0x34]
jl 0x10021401
mov dword [ebp - 0xec], 1
jmp 0x10021408
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xec]
dec ecx
add eax, ecx
imul eax, dword [ebp - 0x18]
cmp eax, 1
jae 0x1002142f
mov dword [ebp - 0xf4], 1
jmp 0x10021436
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x24], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x258]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x20], 0
je 0x100214f4
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x2ac], 0x8a5f0362
mov dword [ebp - 0x1e8], 0xca929efc
mov dword [ebp - 0x1e4], 0xca929efc
mov dword [ebp - 0x1e0], 0xca929efc
mov dword [ebp - 0x1dc], 0xca929efc
lea ecx, [ebp - 0x91]
call fcn.1000f7b3
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.10032cd7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2c4]
call fcn.10032c46
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
lea ecx, [ebp - 0x2c4]
call fcn.1000ed74
jmp 0x1002158a
mov dword [ebp - 0x160], 1
mov dword [ebp - 0x34], 0xffffffff
jmp 0x1002150e
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xd
jge 0x10021530
mov byte [ebp - 0x27], 0
movzx eax, byte [ebp - 0x27]
test eax, eax
je 0x1002152e
push 0
push 0x93a
call fcn.1001f5d2
pop ecx
pop ecx
jmp 0x10021507
mov dword [ebp - 0x20], 0
jmp 0x10021540
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x12
jge 0x1002158a
mov dword [ebp - 0x158], 0x17d3e822
push 1
push 0x3c6e
lea eax, [ebp - 0x34]
push eax
push 0x27c8
push 1
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x160]
push eax
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.10024568
add esp, 0x28
jmp 0x10021539
jmp 0x10021129
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a4]
call fcn.1000ed74
push 1
lea eax, [ebp - 0x74]
push eax
push 0x3426
push 0
push 0xd3e
push 0x20cb
call fcn.1001a985
add esp, 0x18
jmp 0x100215ea
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x178], eax
push 1
mov ecx, dword [ebp - 0x178]
call fcn.1000ed9f
mov dword [eax], 0x6e838462
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret