Function at 0x10014c20
Capabilities:
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10079ccf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x130
push ebx
push esi
push edi
push 0
mov dword [esp + 0x4c], edx
mov edi, ecx
pop ebx
mov dword [esp + 0xc], 0xfffffff7
push 2
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x40], edi
mov dword [esp + 0x10], 0xffffffed
pop esi
jmp 0x10014ce3
push 3
lea ecx, [esp + 0xdc]
call fcn.10008f68
mov dword [esp + 0x14], ebx
jmp 0x10014c94
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0xd8]
mov dword [eax + ecx*4], ebx
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jl 0x10014c82
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
neg ecx
mov edx, dword [esp + 0xd8]
sbb ecx, ecx
neg ecx
sub ecx, eax
xor eax, eax
cmp ecx, 1
setle al
sub eax, esi
cmp eax, dword [edx + 4]
jne 0x10014cc9
mov eax, dword [esp + 0xc]
imul eax, dword [edx + 4], 0xde90829f
lea ecx, [esp + 0xd8]
mov dword [edx + 4], eax
call fcn.10008fed
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 0xfffffff6
jl 0x10014c6e
cmp dword [esp + 0xc], ebx
jne 0x10014cfe
cmp dword [esp + 0xc], 0x7f59ec13
jl 0x10014cfe
mov eax, ebx
jmp 0x10014d01
xor eax, eax
inc eax
mov dword [esp + 0xc], eax
xor edx, edx
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp ecx, eax
mov eax, dword [esp + 0x10]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0xc]
push 3
setge cl
xor edx, edx
cmp eax, ecx
setle dl
xor ecx, ecx
imul edx, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp edx, eax
setle cl
xor eax, eax
imul ecx, dword [esp + 0x14]
cmp ecx, 0xffffffff
lea ecx, [esp + 0xfc]
setge al
mov dword [esp + 0x14], eax
xor eax, eax
inc eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x28], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x20], 0xfffffffc
mov dword [esp + 0x20], eax
mov dword [esp + 0x20], 0xfffffffb
pop eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], 0xbdbaf9eb
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x1c], 0xf2b8319b
mov dword [esp + 0x1c], 0x3e2e1665
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x1c], 0xd8b26de0
push eax
call fcn.10008f68
mov dword [esp + 0x144], ebx
mov dword [esp + 0x14], ebx
jmp 0x10014dd5
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jl 0x10014dbf
mov dword [esp + 0x10], 0xffffffed
jmp 0x10014f4e
mov dword [esp + 0x18], 0x60b0
mov dword [esp + 0x2c], 0x3e38693
mov dword [esp + 0x14], ebx
jmp 0x10014e0b
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x70], esi
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 1
jl 0x10014dff
inc dword [esp + 0x18]
jne 0x10014ec3
mov ecx, dword [esp + 0x18]
xor edx, edx
mov eax, dword [esp + 0x10]
cmp eax, ecx
mov eax, dword [esp + 0x24]
setl dl
xor ecx, ecx
cmp eax, edx
mov edx, dword [esp + 0x2c]
setl cl
sub edx, ecx
mov dword [esp + 0x70], edx
mov eax, dword [esp + 0x10]
add eax, edx
je 0x10014e53
cmp dword [esp + 0x24], ebx
je 0x10014e53
xor edx, edx
inc edx
jmp 0x10014e55
mov edx, ebx
mov eax, dword [esp + 0x10]
xor ecx, ecx
cmp eax, edx
setge cl
sub ecx, dword [esp + 0x2c]
neg ecx
sbb ecx, ecx
add ecx, 8
cmp ecx, dword [esp + 0x2c]
jle 0x10014ec3
mov dword [esp + 0x28], 0x41a4
mov dword [esp + 0x14], ebx
jmp 0x10014eb3
push 0x204
push 0x6889
push 0x5902
push 0x3977
push 0x12c2
push ebx
lea eax, [esp + 0x4b]
mov byte [esp + 0x4b], bl
push eax
push 0x74f0
call fcn.10018063
add esp, 0x20
dec dword [esp + 0x14]
cmp dword [esp + 0x14], 0xffffffe3
jl 0x10014e7f
mov eax, dword [esp + 0x28]
jmp 0x10014f4a
push dword [esp + 0x1c]
movdqa xmm0, xmmword [0x10007d50]
lea eax, [esp + 0x118]
push eax
lea eax, [esp + 0x10c]
mov dword [esp + 0x80], ebx
push eax
push ebx
lea ecx, [esp + 0x88]
mov dword [esp + 0x8c], ebx
movdqu xmmword [esp + 0x114], xmm0
mov dword [esp + 0x90], ebx
call fcn.100094be
push 0x1bce
push ebx
mov byte [esp + 0x14c], 1
lea eax, [esp + 0x70]
push 0x34ef
mov dword [esp + 0x28], 1
push eax
mov dword [esp + 0x78], 0x8da91e53
call fcn.10015bad
add esp, 0x10
mov byte [esp + 0x144], bl
lea ecx, [esp + 0x78]
call fcn.10008fed
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 0xffffffe5
jle 0x10014de9
or dword [esp + 0x144], 0xffffffff
lea ecx, [esp + 0xf8]
call fcn.10008fed
cmp dword [edi + 0x10], ebx
jne 0x10014f79
xor al, al
jmp 0x10015983
mov dword [esp + 0x10], ebx
lea ecx, [esp + 0x90]
push 1
call fcn.10008f68
mov dword [esp + 0x144], esi
lea ecx, [esp + 0x84]
mov dword [esp + 0x18], 0xfffffff8
push esi
call fcn.10008f68
mov dword [esp + 0x28], 0x4ed09eb8
mov dword [esp + 0x24], 0x1cc545e2
mov dword [esp + 0xc], ebx
jmp 0x10014fcf
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x90]
mov dword [eax + ecx*4], esi
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 1
jl 0x10014fbd
mov dword [esp + 0xc], ebx
jmp 0x10014ff2
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x84]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x10014fdc
mov eax, dword [esp + 0x10]
xor edx, edx
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
add ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x84]
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x28]
mov dword [eax], esi
mov eax, dword [esp + 0x84]
cmp dword [eax], ecx
mov eax, dword [esp + 0x10]
setg dl
add eax, esi
imul ecx, edx, 0x9ce
xor edx, edx
cmp eax, ecx
mov eax, dword [esp + 0x10]
setne dl
sub edx, 0xfffffffa
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x84]
call fcn.10008fed
or dword [esp + 0x144], 0xffffffff
lea ecx, [esp + 0x90]
call fcn.10008fed
push 2
mov dword [esp + 0x14], 5
lea ecx, [esp + 0xd0]
pop esi
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0xc], 0x5561
push esi
call fcn.10008f68
mov dword [esp + 0x144], 3
mov dword [esp + 0x38], ebx
jmp 0x100150db
mov eax, dword [esp + 0x38]
mov dword [esp + eax*4 + 0xe4], 0x7f3e76e5
inc dword [esp + 0x38]
cmp dword [esp + 0x38], esi
jl 0x100150c8
lea eax, [esp + 0xcc]
push eax
push 0x3f76
lea eax, [esp + 0x40]
push eax
push 0x607f
push ebx
call fcn.10015a3d
mov eax, dword [esp + 0x24]
add esp, 0x14
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
sub eax, 0xd4a1cf04
neg eax
sbb eax, eax
inc eax
cmp eax, dword [esp + 0x10]
jge 0x10015125
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xe4]
mov eax, dword [esp + 0xcc]
mov dword [eax + 4], ecx
mov dword [esp + 0x10], 0x10
jmp 0x10015195
mov dword [esp + 0x24], 0xffffffff
mov byte [esp + 0x23], bl
cmp byte [esp + 0x23], 0
je 0x1001515a
push ebx
call fcn.10017d49
pop ecx
mov dword [esp + 0xc], 0xffffffeb
jmp 0x1001518a
dec dword [esp + 0x24]
mov byte [esp + 0x23], bl
cmp byte [esp + 0x23], 0
je 0x10015186
push 0x35a4
push 0x7dd9
push ebx
call fcn.10017148
add esp, 0xc
dec dword [esp + 0xc]
cmp dword [esp + 0xc], 0xffffffe2
jne 0x10015164
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0x19
jle 0x10015140
or dword [esp + 0x144], 0xffffffff
lea ecx, [esp + 0xcc]
call fcn.10008fed
mov dword [esp + 0xc], 0xfffffffe
mov dword [esp + 0x10], 0xd2f2
mov dword [esp + 0x28], 0xe62699ff
mov dword [esp + 0x28], 0x1f205951
mov dword [esp + 0xc], ebx
jmp 0x100151e6
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x40], 0x8bbca631
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x100151d6
mov dword [esp + 0xc], ebx
jmp 0x10015202
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x4c], 0xf58aae07
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x100151f2
mov dword [esp + 0xc], ebx
jmp 0x1001525d
mov dword [esp + 0x14], 0x65ab3e90
mov dword [esp + 0x14], 1
cmp dword [esp + 0x14], ebx
jl 0x10015259
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + eax*4 + 0x40]
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x40], ecx
mov byte [esp + 0x23], bl
cmp byte [esp + 0x23], 0
je 0x10015253
push 0x11a5
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
dec dword [esp + 0x14]
jns 0x10015225
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 1
jle 0x1001520f
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x54]
sub eax, 0xa814
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
jle 0x10015286
mov eax, dword [esp + 0x40]
mov eax, dword [esp + 0x54]
xor edx, edx
mov eax, dword [esp + 0x54]
mov eax, dword [esp + 0x54]
mov eax, dword [esp + 0x54]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp ecx, eax
setge dl
sub edx, dword [esp + 0x10]
je 0x100152b7
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
xor edx, edx
mov eax, dword [esp + 0xc]
cmp ecx, eax
setge dl
imul edx, dword [esp + 0x54]
mov dword [esp + 0xc], edx
cmp dword [esp + 0xc], ebx
je 0x100152e0
cmp dword [esp + 0x4c], ebx
je 0x100152e0
xor eax, eax
inc eax
jmp 0x100152e2
mov eax, ebx
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x44]
sub ecx, dword [esp + 0x10]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xfbc0
setl al
xor ecx, ecx
mov dword [esp + 0x28], eax
inc ecx
mov eax, dword [esp + 0x48]
mov dword [eax], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x14], ebx
jmp 0x10015329
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x34], 0x8c6a53d0
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ecx
jl 0x10015319
mov dword [esp + 0xc], ebx
jmp 0x10015343
mov eax, dword [esp + 0xc]
cmp dword [esp + eax*4 + 0x34], ebx
jne 0x10015349
inc dword [esp + 0xc]
cmp dword [esp + 0xc], ebx
jle 0x10015335
mov dword [esp + 0xc], ebx
cmp dword [esp + 0xc], ebx
jl 0x100153b3
mov dword [esp + 0x10], ebx
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x10], ebx
jl 0x100153ad
mov eax, dword [esp + 0x10]
cmp dword [esp + eax*4 + 0x34], ebx
jne 0x1001539b
mov eax, dword [esp + 0x10]
cmp dword [esp + eax*4 + 0x34], ebx
jne 0x10015393
cmp dword [esp + 0xc], 0x9689
je 0x10015383
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + eax*4 + 0x34]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x28], eax
dec dword [esp + 0x10]
jns 0x10015361
dec dword [esp + 0xc]
jns 0x10015353
push ecx
lea ecx, [esp + 0xa0]
call fcn.10008f68
push esi
lea ecx, [esp + 0xc4]
mov dword [esp + 0x148], 4
call fcn.10008f68
mov byte [esp + 0x144], 5
lea ecx, [esp + 0xa8]
mov dword [esp + 0x18], 1
push esi
call fcn.10008f68
mov dword [esp + 0xc], ebx
jmp 0x1001540b
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x58], 0x8256
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x100153fb
xor edx, edx
mov dword [esp + 0xc], ebx
inc edx
jmp 0x10015430
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x9c]
mov dword [eax + ecx*4], 0x4888999d
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1001541a
mov dword [esp + 0xc], ebx
jmp 0x10015452
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xc0]
mov dword [eax + ecx*4], 0xa831d26e
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x1001543c
mov dword [esp + 0xc], ebx
jmp 0x10015474
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xa8]
mov dword [eax + ecx*4], 0x36717b38
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x1001545e
cmp dword [esp + 0x5c], ebx
jne 0x1001549a
mov eax, dword [esp + 0x9c]
xor ecx, ecx
cmp dword [eax], 0x3281d21f
setge cl
cmp dword [esp + 0x58], ecx
mov ecx, ebx
je 0x1001549c
mov ecx, edx
mov eax, dword [esp + 0xc0]
neg ecx
mov dword [eax + 4], ecx
jne 0x100154ae
mov eax, dword [esp + 0x58]
dec dword [esp + 0x18]
lea ecx, [esp + 0xa8]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
mov eax, dword [esp + 0xa8]
mov dword [eax + 4], edx
call fcn.10008fed
lea ecx, [esp + 0xc0]
call fcn.10008fed
or dword [esp + 0x144], 0xffffffff
lea ecx, [esp + 0x9c]
call fcn.10008fed
cmp dword [edi + 0x14], 0x10
jb 0x100154fe
mov esi, dword [edi]
jmp 0x10015500
mov esi, edi
cmp dword [edi + 0x14], 0x10
jb 0x1001550a
mov ecx, dword [edi]
jmp 0x1001550c
mov ecx, edi
mov eax, dword [edi + 0x10]
add eax, ecx
cmp esi, eax
je 0x10015823
mov al, byte [esi]
cmp al, 0x30
jl 0x10015718
cmp al, 0x39
jg 0x10015718
mov dword [esp + 0x24], 0xfffffff8
mov dword [esp + 0xc], 1
mov dword [esp + 0x14], 0xbe1d925b
mov dword [esp + 0x10], 0xf37d45db
mov dword [esp + 0x18], 0xfffffffc
mov dword [esp + 0x74], ebx
mov dword [esp + 0x14], ebx
jmp 0x10015570
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0xec], 0xfffffffb
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jl 0x1001555d
lea eax, [esp + 0x74]
push eax
push 0x5fa7
push 0x4bb1
push ebx
call fcn.10015b37
mov dword [esp + 0x28], 2
add esp, 0x10
cmp dword [esp + 0x18], ebx
jl 0x10015701
mov dword [esp + 0x2c], 1
mov dword [esp + 0x10], 2
cmp dword [esp + 0x10], ebx
jl 0x100156f3
push 2
lea ecx, [esp + 0xb8]
call fcn.10008f68
mov dword [esp + 0x144], 6
mov dword [esp + 0x14], ebx
jmp 0x100155f0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0xb4]
mov dword [eax + ecx*4], 0x8e1ce43c
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 2
jl 0x100155da
mov dword [esp + 0xc], 2
cmp dword [esp + 0xc], ebx
jl 0x10015622
push 0x3c77
lea eax, [esp + 0x36]
mov byte [esp + 0x36], bl
push ebx
push eax
call fcn.1001721e
add esp, 0xc
dec dword [esp + 0xc]
jns 0x10015605
cmp dword [esp + 0x2c], ebx
mov edi, dword [esp + 0xb4]
mov dword [esp + 0x28], edi
jne 0x1001563d
cmp dword [edi + 4], ebx
je 0x1001563d
xor edx, edx
inc edx
jmp 0x1001563f
mov edx, ebx
mov eax, dword [esp + 0x2c]
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 1
setle al
xor edx, edx
add eax, dword [esp + 0x24]
cmp eax, dword [edi + 4]
mov eax, dword [esp + 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
mov edi, dword [esp + eax*4 + 0xec]
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0xec], edi
cmp dword [esp + 0x10], 0xd5ab883e
mov eax, dword [esp + 0x24]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [esp + 0xc]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x2c]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [esp + 0x28]
setne dl
xor ecx, ecx
sub edx, dword [eax + 4]
cmp edi, 0x390f3bd7
setle cl
xor eax, eax
cmp ecx, edx
lea ecx, [esp + 0xb4]
setg al
mov dword [esp + 0xc], eax
or dword [esp + 0x144], 0xffffffff
call fcn.10008fed
dec dword [esp + 0x10]
jns 0x100155bb
dec dword [esp + 0x18]
jns 0x100155a1
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x48]
movsx eax, byte [esi]
imul ecx, dword [edx], 0xa
add ecx, 0xffffffd0
add eax, ecx
inc esi
mov dword [edx], eax
jmp 0x10015500
push 0x1ba3
lea eax, [esp + 0x4c]
push ebx
push eax
call fcn.1001734e
mov dword [esp + 0x18], 0xaeef
add esp, 0xc
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x18], 0xa3ea
mov dword [esp + 0x28], 0x50169ff9
mov dword [esp + 0x10], 0xcb51404f
mov dword [esp + 0x2c], 0xd4763c6d
mov dword [esp + 0x14], ebx
jmp 0x10015774
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x114], 0xffffffff
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jl 0x10015761
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x18]
jg 0x100157a7
cmp dword [esp + 0xc], ebx
je 0x100157aa
xor ebx, ebx
inc ebx
mov eax, dword [esp + 0x24]
xor ecx, ecx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x18]
cmp ebx, eax
setne cl
xor edx, edx
imul ecx, dword [esp + 0x28]
mov eax, dword [esp + 0xc]
cmp ecx, eax
setge dl
sub edx, dword [esp + 0xc]
sub edx, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
xor ebx, ebx
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x2c]
imul ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
cmp ecx, eax
setg bl
xor edx, edx
add ebx, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
cmp ebx, eax
mov eax, dword [esp + 0xc]
setg dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [esp + 0x11c], ecx
jmp 0x10014f72
mov dword [esp + 0x1c], 0xe56f
mov dword [esp + 0x14], 0xfffffff7
mov dword [esp + 0x6c], 0xb999fb02
mov dword [esp + 0x1c], 0xde05dae5
push 5
pop eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x1c], 6
mov dword [esp + 0x60], 0xe8e1b881
mov dword [esp + 0x18], 0xd9bacc5d
mov dword [esp + 0x1c], 0xfffffff9
mov dword [esp + 0x1c], 0x5ee28fde
mov dword [esp + 0x3c], 0x8fa8f90a
mov dword [esp + 0x1c], 0x949f4ffc
mov dword [esp + 0x28], 0x3e93d0b5
mov dword [esp + 0x1c], 0xfffffff8
mov dword [esp + 0x10], 8
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x1c], 0x1720348f
mov dword [esp + 0x2c], 0x307a329e
mov dword [esp + 0x24], ebx
mov dword [esp + 0x24], 0xfffffffc
mov dword [esp + 0x24], eax
mov dword [esp + 0xc], ebx
jmp 0x100158db
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x120], 0x85f88e10
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x100158c8
mov dword [esp + 0xc], ebx
jmp 0x100158fb
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x128], 0x9192
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x100158e8
mov dword [esp + 0xc], ebx
jmp 0x10015918
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x64], 0x9b45c761
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 1
jl 0x10015908
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x14]
jne 0x10015933
cmp dword [esp + 0x28], ebx
jne 0x10015936
xor ebx, ebx
inc ebx
dec dword [esp + 0x24]
xor ecx, ecx
mov eax, dword [esp + 0x18]
cmp ebx, eax
setge cl
imul ecx, dword [esp + 0x24]
mov dword [esp + 0x12c], ecx
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x64]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x6c]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
sub ecx, dword [esp + 0x60]
imul edx, ecx, 6
mov ecx, dword [esp + 0x18]
cmp edx, ecx
setge al
sub eax, dword [esp + 0x1c]
mov dword [esp + 0x2c], eax
mov al, 1
mov ecx, dword [esp + 0x13c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret