Function at 0x10015e8a
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006ce5b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2e0
lea eax, [ebp - 0x140]
push eax
push 1
call fcn.10015dbf
pop ecx
pop ecx
mov dword [ebp - 0x18], 0
jmp 0x10015ec8
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10015ede
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x21c], 0xffffffff
jmp 0x10015ec1
mov dword [ebp - 0x18], 0
jmp 0x10015eee
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10015f04
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x18c], 0xfebaeef2
jmp 0x10015ee7
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x18c], 0
jmp 0x10015f2f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x18c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x18c], 3
jg 0x10016062
mov dword [ebp - 0x198], 0xfffffff8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18c]
cmp dword [ebp + eax*4 - 0x21c], 0xffff
ja 0x10015f71
mov dword [ebp - 0xbc], 1
jmp 0x10015f78
and dword [ebp - 0xbc], 0
cmp dword [ebp - 0xbc], 0x9e923e64
jne 0x10015f90
mov dword [ebp - 0x15c], 1
jmp 0x10015f97
and dword [ebp - 0x15c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18c]
cmp dword [ebp + eax*4 - 0x21c], 0xfffffffb
jne 0x10015fc0
push 6
pop eax
test eax, eax
je 0x10015fc0
mov dword [ebp - 0x154], 1
jmp 0x10015fc7
and dword [ebp - 0x154], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18c]
mov eax, dword [ebp + eax*4 - 0x21c]
cmp dword [ebp - 0x154], eax
je 0x10015fee
mov dword [ebp - 0x98], 1
jmp 0x10015ff5
and dword [ebp - 0x98], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x18c]
add ecx, dword [ebp - 0x98]
cmp dword [ebp + eax*4 - 0x21c], ecx
jg 0x10016029
mov dword [ebp - 0xa0], 1
jmp 0x10016030
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0xa0]
je 0x1001604a
mov dword [ebp - 0x164], 1
jmp 0x10016051
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x198], eax
jmp 0x10015f16
cmp dword [ebp - 0x140], 0
je 0x10016fa1
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2ac], 0xd5181448
mov dword [ebp - 0x294], 0x13297949
mov dword [ebp - 0x254], 0xf39ab1b5
mov dword [ebp - 0x80], 0xfffe
mov dword [ebp - 0x20], 0
jmp 0x100160bc
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x100160d2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1a0], 0x81d4b4ea
jmp 0x100160b5
mov dword [ebp - 0x20], 0
jmp 0x100160e2
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100160f8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2ec], 0xa6c15a2d
jmp 0x100160db
mov dword [ebp - 0x38], 0
jmp 0x10016108
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jg 0x100164e1
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x168], 0x38aa138
mov dword [ebp - 0x78], 0
jmp 0x1001613d
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x10016153
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x1ec], 0x7f3c88fe
jmp 0x10016136
mov dword [ebp - 0x2c], 0xffffffee
jmp 0x10016163
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x19
jne 0x100164cd
mov dword [ebp - 0x1b8], 0xfffffff9
mov dword [ebp - 0x258], 0xa4abff1e
mov dword [ebp - 0x1dc], 0x169ff9e
mov dword [ebp - 0x1d8], 0x169ff9e
mov dword [ebp - 0x1d4], 0x169ff9e
mov dword [ebp - 0x1d0], 0x169ff9e
mov dword [ebp - 0x1a4], 0xffffffff
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x290], 0xc5bb
cmp dword [ebp - 0x2c], 0
je 0x100163aa
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x100163aa
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x80], eax
jge 0x100161ff
mov dword [ebp - 0xa8], 1
jmp 0x10016206
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0xa8]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x1dc]
jge 0x1001622e
mov dword [ebp - 0x1e0], 1
jmp 0x10016235
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x298], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1dc], 0x572dbe42
jle 0x1001625c
mov dword [ebp - 0x16c], 1
jmp 0x10016263
and dword [ebp - 0x16c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1dc]
cmp dword [ebp - 0x16c], eax
jl 0x10016284
mov dword [ebp - 0xb0], 1
jmp 0x1001628b
and dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 0
jge 0x1001629b
cmp dword [ebp - 0x168], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1ec], 0
je 0x100162bf
mov eax, 0xa04a8f9b
test eax, eax
je 0x100162bf
mov dword [ebp - 0x174], 1
jmp 0x100162c6
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x174], eax
jne 0x100162dd
mov dword [ebp - 0xb8], 1
jmp 0x100162e4
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 1
ja 0x100162f9
mov dword [ebp - 0x17c], 1
jmp 0x10016300
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x17c], eax
jl 0x1001631d
cmp dword [ebp - 0x2c], 0
je 0x1001631d
mov dword [ebp - 0x120], 1
jmp 0x10016324
and dword [ebp - 0x120], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ec]
cmp dword [ebp - 0x120], eax
jl 0x10016345
mov dword [ebp - 0xc4], 1
jmp 0x1001634c
and dword [ebp - 0xc4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc4]
mov dword [ebp + eax - 0x2ec], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1dc]
add eax, dword [ebp - 0x50]
je 0x1001637d
mov dword [ebp - 0xc8], 1
jmp 0x10016384
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
add eax, 0x51f5ed1a
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1a0]
jne 0x100163aa
mov dword [ebp - 0x150], 1
jmp 0x100163b1
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x150], eax
jne 0x100163c8
mov dword [ebp - 0xd0], 1
jmp 0x100163cf
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0xd0]
jle 0x100163e9
mov dword [ebp - 0x128], 1
jmp 0x100163f0
and dword [ebp - 0x128], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a0]
cmp dword [ebp - 0x128], eax
jge 0x10016411
mov dword [ebp - 0xd8], 1
jmp 0x10016418
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd8]
sub eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xe0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe0]
mov dword [ebp + eax - 0x1ec], ecx
mov eax, dword [ebp - 0x168]
imul eax, dword [ebp - 0xe0]
neg eax
jne 0x1001645f
cmp dword [ebp - 0x84], 0
jne 0x1001645f
and dword [ebp - 0x130], 0
jmp 0x10016469
mov dword [ebp - 0x130], 1
imul eax, dword [ebp - 0x130], 0xeb3d
test eax, eax
je 0x10016499
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x10016497
push 0
push 0x162f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
jmp 0x100164c8
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x100164b3
push 0
push 0xcfc
call fcn.10015e40
pop ecx
pop ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1a0], 0
je 0x100164c8
jmp 0x1001615c
jmp 0x1001615c
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2c]
mov dword [ebp + eax - 0x1ec], ecx
jmp 0x10016101
push dword [ebp + 8]
lea ecx, [ebp - 0x234]
call fcn.100125ee
and dword [ebp - 4], 0
mov dword [ebp - 0x138], 0x44accb24
mov dword [ebp - 0x44], 0xfffe
mov dword [ebp - 0x48], 0x5a83d87
mov dword [ebp - 0x2a0], 0x28451d77
mov dword [ebp - 0x1c], 0
jmp 0x10016525
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1001653b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1b4], 0xaabecba2
jmp 0x1001651e
mov dword [ebp - 0x1c], 0
jmp 0x1001654b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10016561
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1f4], 0xd62e
jmp 0x10016544
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b4]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x138], 0
jne 0x100165eb
push 4
pop eax
shl eax, 1
push 3
pop ecx
sub ecx, dword [ebp + eax - 0x1b4]
mov dword [ebp - 0xe8], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe8]
mov dword [ebp + eax - 0x1f4], ecx
cmp dword [ebp - 0xe8], 0
je 0x100165ce
cmp dword [ebp - 0x44], 0
je 0x100165ce
mov dword [ebp - 0x158], 1
jmp 0x100165d5
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
sub eax, 0x7005
jne 0x100165eb
and dword [ebp - 0xf0], 0
jmp 0x100165f5
mov dword [ebp - 0xf0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b4]
imul eax, dword [ebp - 0xf0]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1b4]
jl 0x10016624
mov dword [ebp - 0xf8], 1
jmp 0x1001662b
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0xf8], eax
je 0x10016645
mov dword [ebp - 0x178], 1
jmp 0x1001664c
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x178]
test eax, eax
je 0x100166ed
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b4], 0
je 0x10016696
mov dword [ebp - 0x44], 0
jmp 0x1001667e
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x10016694
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1b4], 0
jmp 0x10016677
jmp 0x100166eb
mov dword [ebp - 0x48], 0
jmp 0x100166a6
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jg 0x100166d1
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x1f4], 0
je 0x100166bb
jmp 0x100166d1
mov byte [ebp - 0x3b], 0
movzx eax, byte [ebp - 0x3b]
test eax, eax
je 0x100166cf
push 0
call fcn.100170a4
pop ecx
jmp 0x1001669f
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x100166eb
push 0
push 0x14f0
call fcn.1001bc5a
pop ecx
pop ecx
jmp 0x10016704
mov dword [ebp - 0x100], 0xfcc1
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
lea eax, [ebp - 0x2b0]
push eax
lea ecx, [ebp - 0x234]
call fcn.10012cf6
push dword [eax]
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x234]
call fcn.10012d0a
push dword [eax]
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x234]
call fcn.10012cf6
push dword [eax]
mov edx, 0x10015562
lea ecx, [ebp - 0x2c8]
call fcn.1001ef04
add esp, 0xc
mov eax, dword [ebp - 0x140]
mov eax, dword [eax + 0xc]
add eax, 0x14
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x2c4], 0xf9b3198a
mov dword [ebp - 0x2c0], 0xf9b3198a
mov dword [ebp - 0x2bc], 0xf9b3198a
mov dword [ebp - 0x2b8], 0xf9b3198a
mov dword [ebp - 0x5c], 0xa18885c6
mov dword [ebp - 0x5c], 0
jmp 0x100167a4
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jg 0x100167bd
mov byte [ebp - 0x3d], 0
push 1
lea eax, [ebp - 0x3d]
push eax
call fcn.10015e40
pop ecx
pop ecx
jmp 0x1001679d
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
jmp 0x100167d9
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x108]
je 0x10016f92
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
push dword [eax + 0x28]
lea ecx, [ebp - 0x24c]
call fcn.1001eb37
mov byte [ebp - 4], 1
mov dword [ebp - 0x7c], 0xfe7d8a87
mov dword [ebp - 0x1c0], 0xffffffff
mov dword [ebp - 0x64], 0
jmp 0x1001682a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10016840
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x27c], 0
jmp 0x10016823
mov dword [ebp - 0x7c], 2
jmp 0x10016850
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x1001697a
mov dword [ebp - 0x6c], 0x5b3b9da4
mov dword [ebp - 0x6c], 2
jmp 0x10016871
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x10016958
mov dword [ebp - 0x4c], 0x1ea66e58
mov dword [ebp - 0x4c], 2
jmp 0x10016892
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x10016943
mov dword [ebp - 0x54], 0x7b568be1
mov dword [ebp - 0x54], 2
jmp 0x100168b3
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10016919
mov dword [ebp - 0x58], 0x9c213245
mov dword [ebp - 0x58], 2
jmp 0x100168d0
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x10016906
mov dword [ebp - 0x60], 0x4d035725
mov dword [ebp - 0x60], 2
jmp 0x100168ed
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x10016904
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x27c], 0
je 0x10016902
jmp 0x10016904
jmp 0x100168e6
jmp 0x100168c9
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x27c], 0
je 0x10016917
jmp 0x100168ac
jmp 0x100168ac
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x1001693e
push 0x2134
push 0x3892
push 0x3a81
push 0
call fcn.1001bc03
add esp, 0x10
jmp 0x1001688b
lea eax, [ebp - 0x1c0]
push eax
push 0
call fcn.100170d6
pop ecx
pop ecx
jmp 0x1001686a
mov byte [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x3c]
test eax, eax
je 0x10016975
push 0x1f28
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
jmp 0x10016849
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x24c]
call fcn.10012cf6
push dword [eax]
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x24c]
call fcn.10012d0a
push dword [eax]
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x24c]
call fcn.10012cf6
push dword [eax]
mov edx, 0x10015562
lea ecx, [ebp - 0x250]
call fcn.1001ef04
add esp, 0xc
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x148], 0xc27f355c
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 0
jmp 0x100169f7
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x12
jne 0x10016cb6
mov dword [ebp - 0x1bc], 0x7eb6652f
mov dword [ebp - 0x10], 0
jmp 0x10016a1b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10016a31
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x204], 0x61e3ff14
jmp 0x10016a14
mov dword [ebp - 0x10], 0
jmp 0x10016a41
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10016a57
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2e0], 4
jmp 0x10016a3a
mov dword [ebp - 0x10], 0
jmp 0x10016a67
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10016a7d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x264], 0xfffffff9
jmp 0x10016a60
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x28], 0
je 0x10016aa8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x204], 0
je 0x10016aa8
mov dword [ebp - 0xd4], 1
jmp 0x10016aaf
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0x30], 0
jne 0x10016bb3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
mov dword [ebp - 0x1c8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp + eax - 0x2e0], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2a4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e0], 0
je 0x10016b09
cmp dword [ebp - 0x30], 0
je 0x10016b09
mov dword [ebp - 0x160], 1
jmp 0x10016b10
and dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 0x1466ac3a
jge 0x10016b28
mov dword [ebp - 0x110], 1
jmp 0x10016b2f
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x280], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x264]
cmp dword [ebp + eax - 0x204], ecx
jle 0x10016b6f
mov dword [ebp - 0x118], 1
jmp 0x10016b76
and dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0x748bbe26
jne 0x10016b8e
mov dword [ebp - 0x170], 1
jmp 0x10016b95
and dword [ebp - 0x170], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x170]
sub ecx, dword [ebp + eax - 0x204]
jne 0x10016bb3
and dword [ebp - 0xc0], 0
jmp 0x10016bbd
mov dword [ebp - 0xc0], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xc0], eax
jle 0x10016bd4
mov dword [ebp - 0x8c], 1
jmp 0x10016bdb
and dword [ebp - 0x8c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x204]
cmp dword [ebp - 0x8c], eax
jne 0x10016bfc
mov dword [ebp - 0xcc], 1
jmp 0x10016c03
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0x9ef8169c
je 0x10016c1b
mov dword [ebp - 0xdc], 1
jmp 0x10016c22
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0xdc]
jle 0x10016c3c
mov dword [ebp - 0xe4], 1
jmp 0x10016c43
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 9
jne 0x10016c58
mov dword [ebp - 0xec], 1
jmp 0x10016c5f
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0xec]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x30], eax
jge 0x10016c7f
mov dword [ebp - 0xf4], 1
jmp 0x10016c86
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 0xfff7
jae 0x10016c9e
mov dword [ebp - 0xfc], 1
jmp 0x10016ca5
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x1bc], eax
jmp 0x100169f0
lea edx, [ebp - 0x24c]
lea ecx, [ebp - 0x234]
call fcn.1001ef6d
movzx eax, al
test eax, eax
je 0x10016f7e
mov dword [ebp - 0x14], 0x8a137b18
mov dword [ebp - 0x10c], 0x187110e6
mov dword [ebp - 0x68], 0x9740826f
mov dword [ebp - 0x24], 0
jmp 0x10016cfa
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10016d10
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x20c], 0x58900fdb
jmp 0x10016cf3
mov dword [ebp - 0x24], 0
jmp 0x10016d20
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10016d36
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb4], 1
jmp 0x10016d19
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jne 0x10016d5c
mov dword [ebp - 0x114], 1
jmp 0x10016d63
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x14]
neg eax
mov dword [ebp - 0x104], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x104]
mov dword [ebp + eax - 0x20c], ecx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x114]
je 0x10016da7
mov dword [ebp - 0x11c], 1
jmp 0x10016dae
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0
jae 0x10016dc3
mov dword [ebp - 0x124], 1
jmp 0x10016dca
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x124], eax
jle 0x10016de1
mov dword [ebp - 0x12c], 1
jmp 0x10016de8
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x68]
jne 0x10016e02
mov dword [ebp - 0x134], 1
jmp 0x10016e09
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0x4257
jne 0x10016e21
mov dword [ebp - 0x13c], 1
jmp 0x10016e28
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x13c], eax
jg 0x10016e3f
mov dword [ebp - 0x144], 1
jmp 0x10016e46
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x68], eax
jg 0x10016e63
mov dword [ebp - 0x14c], 1
jmp 0x10016e6a
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0x2e4ed383
jge 0x10016e82
mov dword [ebp - 0x90], 1
jmp 0x10016e89
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x90], eax
jg 0x10016ea0
mov dword [ebp - 0x94], 1
jmp 0x10016ea7
and dword [ebp - 0x94], 0
imul eax, dword [ebp - 0x94], 0x47e0
test eax, eax
jne 0x10016ec7
mov eax, 0xa8f1
test eax, eax
jne 0x10016ec7
and dword [ebp - 0x9c], 0
jmp 0x10016ed1
mov dword [ebp - 0x9c], 1
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x9c]
jne 0x10016ee8
mov dword [ebp - 0xa4], 1
jmp 0x10016eef
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
add eax, 0xedb6
cmp eax, dword [ebp - 0x14]
jg 0x10016f0b
mov dword [ebp - 0xac], 1
jmp 0x10016f12
and dword [ebp - 0xac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xac]
mov dword [ebp + eax - 0xb4], ecx
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0xb4]
mov dword [ebp + ecx - 0x20c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x88]
mov eax, dword [ecx + eax + 0x10]
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x24c]
call fcn.10012673
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.10012673
mov eax, dword [ebp - 0x1cc]
jmp 0x10017043
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x24c]
call fcn.10012673
jmp 0x100167d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.10012673
mov dword [ebp - 0x28c], 0x748f69f7
mov dword [ebp - 0x70], 0
jmp 0x10016fbb
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x10016fd1
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x194], 6
jmp 0x10016fb4
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x10016fec
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x194], 0xffffffef
jmp 0x1001701a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x194]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x194], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x194], 0xfffffff8
je 0x10017041
mov dword [ebp - 0x1c4], 1
cmp dword [ebp - 0x1c4], 0
je 0x1001703f
jmp 0x10017041
jmp 0x10016fff
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret