Function at 0x1002f350
Capabilities:
Create pipe
Get geographical location
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1007dc15
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1f0
push ebx
xor ebx, ebx
mov dword [esp + 0x24], 0xd8c4
push esi
mov byte [esp + 0xf], bl
push edi
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [esp + 0xb4], edx
mov dword [esp + 0xc4], ecx
cmp byte [esp + 0x13], bl
je 0x1002f3a8
call edi
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_SetParent]
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1002f3c0
push 0x259a
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_CombineRgn]
mov dword [esp + 0x1c], 0x4a8c6a53
mov dword [esp + 0x30], 0xfffffff9
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1002f3ec
push ebx
push 0x1d0e
push 0x20f3
push ebx
call dword [sym.imp.GDI32.dll_SetPaletteEntries]
push 3
mov dword [esp + 0x20], ebx
pop esi
jmp 0x1002f427
mov dword [esp + 0x14], ebx
jmp 0x1002f40e
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x1a4], 0xffffffff
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1002f3fb
mov dword [esp + 0x30], 9
inc dword [esp + 0x1a8]
dec dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0xfffffff6
jl 0x1002f3f5
mov dword [esp + 0x18], 0x2799ac78
lea ecx, [esp + 0x198]
push esi
call fcn.10024520
mov dword [esp + 0x2c], 8
mov dword [esp + 0x24], 0x8f59172d
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0xc], ebx
jmp 0x1002f474
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x198]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x1002f461
mov dword [esp + 0xc], ebx
jmp 0x1002f493
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x124], 0x33e34b64
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x1002f480
push 1
mov dword [esp + 0x1c], ebx
pop esi
jmp 0x1002f548
mov dword [esp + 0xc], 0x4173
mov dword [esp + 0x24], 0xbffbefa5
mov dword [esp + 0x24], 0x283bc1b0
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1002f4d2
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
inc dword [esp + 0x128]
xor ecx, ecx
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x24], esi
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x198]
push 5
mov dword [eax], edx
mov eax, dword [esp + 0x1c]
cmp edx, eax
sete cl
mov dword [esp + 0x28], ecx
xor ecx, ecx
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0x4ad744d0
pop eax
setne cl
sub eax, ecx
add eax, dword [esp + 0xc]
mov dword [esp + 0x24], eax
mov edx, dword [esp + 0x1c]
sub edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
mov dword [esp + 0x1c], ecx
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x16
jl 0x1002f4a6
mov dword [esp + 0x1c], 0xfffffffd
cmp dword [esp + 0x1c], 0xffffffff
jge 0x1002f589
xor ebx, ebx
inc ebx
mov dword [esp + 0x30], 0x1b55
mov dword [esp + 0x28], ebx
mov eax, dword [esp + 0x30]
mov dword [esp + 0x28], eax
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0xffffffff
jl 0x1002f565
xor esi, esi
xor ebx, ebx
inc esi
lea ecx, [esp + 0x198]
call fcn.100245d2
mov eax, 0x7f6af112
lea ecx, [esp + 0x180]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x20], 0x8cccddd1
push esi
call fcn.10024520
mov dword [esp + 0x204], ebx
lea ecx, [esp + 0xb8]
mov dword [esp + 0x14], 0x722ba7b7
mov dword [esp + 0x24], 0xffff
push 2
call fcn.10024520
xor eax, eax
lea ecx, [esp + 0x18c]
inc eax
push eax
mov byte [esp + 0x208], al
call fcn.10024520
xor edx, edx
mov dword [esp + 0x18], ebx
inc edx
jmp 0x1002f626
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x180]
mov dword [eax + ecx*4], 5
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edx
jl 0x1002f610
mov dword [esp + 0x18], ebx
jmp 0x1002f648
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xb8]
mov dword [eax + ecx*4], 0xb168f92
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 2
jl 0x1002f632
mov dword [esp + 0x18], ebx
jmp 0x1002f66b
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x18c]
mov dword [eax + ecx*4], 0xe3bf118c
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edx
jl 0x1002f655
mov eax, dword [esp + 0x20]
neg eax
sbb eax, eax
neg eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [esp + 0x20]
imul ecx, dword [esp + 0x20]
mov eax, dword [esp + 0xb8]
imul ecx, ecx, 0xb89b
mov dword [eax], ecx
test ecx, ecx
jne 0x1002f6b2
cmp dword [esp + 0x24], ebx
jne 0x1002f6b2
mov edx, ebx
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x180]
mov dword [eax], ecx
xor eax, eax
cmp ecx, 0xfffffffb
sete al
xor ecx, ecx
cmp eax, edx
setge cl
sub ecx, 0x365fe389
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, 5
ja 0x1002f702
mov eax, dword [esp + 0xb8]
cmp dword [eax + 4], ebx
je 0x1002f702
cmp dword [esp + 0x14], ebx
je 0x1002f702
mov eax, dword [esp + 0xb8]
cmp dword [eax], ebx
je 0x1002f702
xor eax, eax
lea ecx, [eax + 1]
jmp 0x1002f704
mov ecx, ebx
mov eax, dword [esp + 0x18c]
mov dword [eax], ecx
lea ecx, [esp + 0x18c]
call fcn.100245d2
lea ecx, [esp + 0xb8]
call fcn.100245d2
or dword [esp + 0x204], 0xffffffff
lea ecx, [esp + 0x180]
call fcn.100245d2
mov dword [esp + 0x2c], 0x54fddd3f
lea ecx, [esp + 0x144]
mov dword [esp + 0x2c], 0xe559
xor eax, eax
mov dword [esp + 0x2c], ebx
inc eax
mov dword [esp + 0x2c], 0x8070ade2
mov dword [esp + 0x2c], 0x64d07ddb
mov dword [esp + 0x2c], 0xfffffffc
push eax
call fcn.10024520
xor edx, edx
mov dword [esp + 0xc], ebx
inc edx
jmp 0x1002f78a
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x74], ebx
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1002f77e
mov dword [esp + 0xc], ebx
jmp 0x1002f7ac
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x144]
mov dword [eax + ecx*4], 0x955
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1002f796
mov eax, dword [esp + 0x144]
inc dword [eax]
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1002f7cc
call dword [sym.imp.USER32.dll_EndMenu]
lea ecx, [esp + 0x144]
call fcn.100245d2
push 3
pop esi
mov dword [esp + 0xc], 0x76820624
lea ecx, [esp + 0x174]
push esi
call fcn.10024520
mov dword [esp + 0x14], ebx
jmp 0x1002f80c
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x174]
mov dword [eax + ecx*4], 0x60d2f38d
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1002f7f6
mov dword [esp + 0xc], 0xd
jmp 0x1002f83b
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1002f837
push 0x178a
push ebx
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 0x17
jge 0x1002f81c
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
neg edx
mov ecx, dword [esp + 0x174]
sbb edx, edx
xor eax, eax
neg edx
test edx, edx
setle al
mov dword [ecx + 8], eax
mov eax, dword [esp + 0xc]
mov eax, dword [ecx + 8]
lea ecx, [esp + 0x174]
add eax, 0x7ebd
mov dword [esp + 0xc], eax
call fcn.100245d2
movdqa xmm0, xmmword [0x10007e60]
lea ecx, [esp + 0x80]
push 0xfffffffffffffff9
pop eax
push dword [esp + 0x74]
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
lea eax, [esp + 0x1f0]
push eax
lea eax, [esp + 0x1e4]
mov dword [esp + 0x34], 0xfffffffa
push eax
mov dword [esp + 0x18], 2
push ebx
movdqu xmmword [esp + 0x1ec], xmm0
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
call fcn.1002573b
mov dword [esp + 0x20], ebx
mov dword [esp + 0x14], 0xf63588c5
mov dword [esp + 0x1c], ebx
mov dword [esp + 0xc], 0x16
jmp 0x1002f93a
mov dword [esp + 0x14], 0x876942a1
mov dword [esp + 0x14], ebx
jmp 0x1002f930
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1002f92c
call dword [sym.imp.USER32.dll_DestroyCaret]
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jle 0x1002f91b
dec dword [esp + 0xc]
cmp dword [esp + 0xc], 0x14
jg 0x1002f90d
mov dword [esp + 0xc], ebx
cmp dword [esp + 0xc], esi
jg 0x1002faa6
mov edi, dword [esp + 0x80]
xor ecx, ecx
inc ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], 0x57f6cc9c
mov dword [esp + 0x30], 0xcf041577
mov dword [esp + 0x18], 0xe283d1f0
mov dword [esp + 0x34], 0xfffffffe
mov dword [esp + 0x38], 0x909d
mov dword [esp + 0x14], ebx
jmp 0x1002f99b
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x50], 0xb4956e74
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ecx
jl 0x1002f98b
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x50], eax
jne 0x1002f9b7
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x14], 5
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
sub ecx, eax
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
jne 0x1002f9e3
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x28]
sub edx, 0xacb2d505
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 8
cmp edx, eax
setne cl
imul eax, ecx, 0xffff
xor ecx, ecx
cmp eax, dword [edi + 8]
mov eax, dword [esp + 0x80]
setle cl
xor edx, edx
cmp dword [eax + esi*4], ecx
setg dl
xor eax, eax
cmp edx, 5
setne al
xor esi, esi
mov dword [esp + 0x1c], eax
inc esi
mov eax, dword [esp + 0x50]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
cmp esi, eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0xec7d
setne cl
xor edx, edx
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x1c]
neg eax
add eax, eax
mov dword [esp + 0x14], eax
imul ecx, dword [esp + 0x20], 0x1401
mov eax, dword [esp + 0x14]
cmp ecx, eax
setg dl
cmp edx, 0xe240
jge 0x1002fa82
mov ecx, esi
cmp dword [esp + 0x18], ebx
jne 0x1002fa84
mov ecx, ebx
xor eax, eax
test ecx, ecx
push 3
sete al
mov dword [esp + 0x54], eax
inc dword [esp + 0x10]
pop esi
cmp dword [esp + 0xc], esi
jle 0x1002f956
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
lea ecx, [esp + 0x80]
call fcn.100245d2
push esi
lea ecx, [esp + 0x160]
call fcn.10024520
push 2
pop edx
mov dword [esp + 0x204], edx
mov dword [esp + 0xc], 0x394643cd
mov dword [esp + 0x30], 0x25189d9e
mov dword [esp + 0x2c], 0xafa0b2b0
mov dword [esp + 0x2c], 0x875f
mov dword [esp + 0xc], ebx
jmp 0x1002fb05
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x15c]
mov dword [eax + ecx*4], 0xc93b
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x1002faef
xor ecx, ecx
mov dword [esp + 0xc], ebx
inc ecx
jmp 0x1002fb27
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x9c], 0x457a23a
inc dword [esp + 0xc]
cmp dword [esp + 0xc], ecx
jl 0x1002fb14
mov dword [esp + 0xc], ebx
cmp dword [esp + 0xc], edx
jg 0x1002fc91
mov esi, dword [esp + 0x15c]
mov dword [esp + 0x24], 0xcd49
mov dword [esp + 0x1c], 0x1874da8
mov dword [esp + 0x2c], 0xfffffffd
mov dword [esp + 0x34], 0xd3b0
mov dword [esp + 0x14], ebx
jmp 0x1002fb78
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x78], 0x47f59ec1
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ecx
jl 0x1002fb68
cmp dword [esp + 0x24], ebx
je 0x1002fba1
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
sub eax, dword [esp + 0xc]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [esp + 0xc]
mov eax, ecx
jle 0x1002fba3
mov eax, ebx
add eax, 0x87a7
neg eax
sbb eax, eax
neg eax
imul eax, eax, 0x5ebd
test eax, eax
je 0x1002fbbe
cmp dword [esp + 0xc], ebx
jne 0x1002fbc0
mov ecx, ebx
mov eax, dword [esi + 4]
imul eax, ecx
mov dword [esp + 0x78], eax
imul eax, eax, 0xcec7
neg eax
sbb eax, eax
xor edx, edx
neg eax
cmp dword [esi + 8], eax
mov eax, dword [esp + 0x24]
sete dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [esp + 0x30], ecx
mov dword [esp + 0x1c], ebx
jmp 0x1002fc72
push dword [esp + 0x74]
movdqa xmm0, xmmword [0x10007e90]
lea eax, [esp + 0x1e0]
push eax
lea eax, [esp + 0x1d4]
mov dword [esp + 0x34], 0x40f213ed
push eax
mov dword [esp + 0x38], 0xa0435e45
lea ecx, [esp + 0x10c]
mov dword [esp + 0x38], 0x6c8c
push ebx
movdqu xmmword [esp + 0x1dc], xmm0
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebx
call fcn.1002573b
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x100]
mov dword [esp + eax*4 + 0x78], 0x78b15b45
inc dword [esp + 0x34]
call fcn.100245d2
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], ebx
jle 0x1002fbf3
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
push 1
pop ecx
jle 0x1002fb42
push 3
pop esi
mov dword [esp + 0x9c], 0xe161e417
lea ecx, [esp + 0x15c]
or dword [esp + 0x204], 0xffffffff
call fcn.100245d2
push 2
lea ecx, [esp + 0x1b4]
call fcn.10024520
mov dword [esp + 0x14], 0xeef20fe6
mov dword [esp + 0x2c], 0xfffffffd
mov dword [esp + 0x14], ebx
jmp 0x1002fcea
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1b0]
mov dword [eax + ecx*4], 0x571177e8
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 2
jl 0x1002fcd4
xor eax, eax
mov dword [esp + 0x14], ebx
inc eax
jmp 0x1002fd0a
mov dword [esp + 0x24], 0x363f
inc dword [esp + 0x24]
inc dword [esp + 0x14]
cmp dword [esp + 0x14], eax
jle 0x1002fcfa
lea ecx, [esp + 0x1b0]
call fcn.100245d2
mov dword [esp + 0x2c], 0x2d71
mov dword [esp + 0xc], 0x7e17
mov dword [esp + 0x14], 0xa7525d2d
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x28], 4
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1002fd5f
push 0x21d1
push 0x114f
call dword [sym.imp.USER32.dll_SetCaretPos]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp dword [esp + 0x20], ebx
jne 0x1002fd81
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xc]
xor edx, edx
mov eax, dword [esp + 0xc]
cmp ecx, eax
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
setg dl
mov dword [esp + 0x30], edx
xor edx, edx
cmp ecx, eax
setge dl
xor eax, eax
cmp dword [esp + 0x30], edx
setle al
sub eax, dword [esp + 0x28]
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x20], eax
cmp dword [esp + 0x20], 0xfffffffd
jl 0x1002fe03
mov dword [esp + 0x30], 0x4ddc8777
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1002fde0
push 0x86d
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
xor eax, eax
inc eax
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0x89d9e62b
mov eax, dword [esp + 0xc]
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setl cl
mov dword [esp + 0x30], ecx
jmp 0x1002fe34
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1002fe34
push ebx
push 0x383
push 0xaee
push 0x7f5
push 0x1435
push 0xa7b
push 0x15d5
push ebx
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x14], 0xfffffff2
jmp 0x1002fe63
cmp byte [esp + 0x13], 0
je 0x1002fe5f
push ebx
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xfffffff8
mov byte [esp + 0x13], bl
jl 0x1002fe46
cmp byte [esp + 0x13], 0
je 0x1002fe7c
push ebx
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
push 2
pop edi
push edi
lea ecx, [esp + 0x13c]
call fcn.10024520
mov dword [esp + 0x204], esi
mov dword [esp + 0x2c], 0xedfa
mov dword [esp + 0xc], ebx
jmp 0x1002feb4
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x1ec], 0x85f70ad6
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x1002fea1
mov dword [esp + 0xc], ebx
jmp 0x1002fed6
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x138]
mov dword [eax + ecx*4], 0x20f89b54
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edi
jl 0x1002fec0
mov eax, dword [esp + 0x138]
mov dword [esp + 0x38], eax
mov dword [eax + 4], ebx
mov dword [esp + 0x18], 9
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1002ff0e
push ebx
push ebx
push 0xf14
call dword [sym.imp.ADVAPI32.dll_CopySid]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], edi
cmp dword [esp + 0x18], ebx
jl 0x1003008f
mov dword [esp + 0x20], 0xd962ee6d
lea ecx, [esp + 0x12c]
push esi
call fcn.10024520
mov dword [esp + 0x14], ebx
jmp 0x1002ff4d
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x12c]
mov dword [eax + ecx*4], 0xa9f8d19c
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1002ff37
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1002ff65
push ebx
call dword [sym.imp.USER32.dll_IsRectEmpty]
mov dword [esp + 0x20], edi
cmp dword [esp + 0x20], ebx
jl 0x10030075
mov dword [esp + 0x14], 5
mov dword [esp + 0x14], edi
cmp dword [esp + 0x14], ebx
jl 0x10030068
mov dword [esp + 0x1c], 0x3631e19e
mov dword [esp + 0x34], 0x17a68fa
inc dword [esp + 0x1c]
mov dword [esp + 0x1c], ebx
jmp 0x10030054
mov dword [esp + 0xc], 0xfffffffb
mov dword [esp + 0x24], 0xe11914cc
mov dword [esp + 0xc], edi
cmp dword [esp + 0xc], ebx
jl 0x1003004c
mov edi, dword [esp + 0x12c]
mov eax, dword [esp + 0x14]
cmp dword [esp + eax*4 + 0x1ec], ebx
jne 0x1002ffe5
cmp dword [esp + 0xc], ebx
jne 0x1002ffe5
xor eax, eax
mov esi, ebx
inc eax
jmp 0x1002ffea
xor eax, eax
inc eax
mov esi, eax
mov dword [esp + 0x24], 0x3b15a8d
cmp dword [esp + 0x24], eax
jne 0x1002fffe
cmp dword [esp + 0x18], ebx
jne 0x10030000
mov eax, ebx
xor edx, edx
cmp eax, 7
mov eax, dword [esp + 0xc]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, 0x8e60
jle 0x10030025
cmp dword [esp + 0x1c], ebx
jne 0x10030025
mov eax, ebx
jmp 0x10030028
xor eax, eax
inc eax
add eax, esi
mov dword [edi + 4], eax
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x10030043
push 0x1d7f
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
dec dword [esp + 0xc]
jns 0x1002ffcb
push 2
pop edi
dec dword [esp + 0x34]
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jle 0x1002ffa6
dec dword [esp + 0x14]
jns 0x1002ff89
dec dword [esp + 0x20]
jns 0x1002ff73
push 3
pop esi
lea ecx, [esp + 0x12c]
call fcn.100245d2
dec dword [esp + 0x18]
jns 0x1002ff1c
mov eax, dword [esp + 0x38]
inc dword [eax + 4]
cmp dword [eax + 4], edi
jle 0x1002feea
or dword [esp + 0x204], 0xffffffff
lea ecx, [esp + 0x138]
call fcn.100245d2
mov dword [esp + 0x2c], 0x76fbfcc0
lea ecx, [esp + 0x10c]
mov dword [esp + 0xc], 0xfffa
xor eax, eax
mov dword [esp + 0x14], 0x19716e28
inc eax
mov dword [esp + 0x20], 9
mov dword [esp + 0x3c], 0x5fef4072
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], 0xde726f2c
mov dword [esp + 0x38], 0xfff8
push eax
call fcn.10024520
mov dword [esp + 0x1c], 0xd85d5fca
xor edx, edx
inc edx
mov dword [esp + 0x34], edx
push 0xfffffffffffffff8
pop esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x24], 0x7898a801
mov dword [esp + 0x2c], 0xfffffffc
mov dword [esp + 0x2c], edx
mov dword [esp + 0x28], 0xffff
mov dword [esp + 0x18], ebx
jmp 0x1003013f
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x7c], edx
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edx
jl 0x10030133
mov dword [esp + 0x18], ebx
jmp 0x10030161
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x10c]
mov dword [eax + ecx*4], 0xfffc
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edx
jl 0x1003014b
mov dword [esp + 0x18], ebx
jmp 0x1003017c
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x1bc], edx
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edi
jl 0x1003016d
mov ecx, dword [esp + 0xc]
xor edx, edx
mov eax, dword [esp + 0xc]
cmp ecx, eax
mov eax, dword [esp + 0xc]
setne dl
xor ecx, ecx
sub eax, edx
cmp eax, 0x44fa3fda
setge cl
xor edx, edx
mov dword [esp + 0x14], ecx
inc edx
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0xc]
cmp dword [esp + 0x20], edx
jge 0x100301c6
mov eax, ebx
cmp dword [esp + 0x20], ebx
je 0x100301c8
mov eax, edx
xor ecx, ecx
cmp eax, 0x27eed050
setge cl
xor eax, eax
sub ecx, dword [esp + 0x3c]
cmp ecx, 0xcc9d
setl al
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x24], 7
mov eax, dword [esp + 0x24]
imul eax, dword [esp + 0xc]
test eax, eax
je 0x1003021e
mov eax, edx
cmp dword [esp + 0xc], ebx
jne 0x10030220
mov eax, ebx
cmp eax, dword [esp + 0x20]
jge 0x1003022e
mov eax, ebx
cmp dword [esp + 0xc], ebx
je 0x10030230
mov eax, edx
mov dword [esp + 0x7c], eax
xor edx, edx
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x10c]
mov eax, dword [eax]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x34]
add ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
cmp ecx, eax
mov eax, dword [esp + 0x10c]
setge dl
xor ecx, ecx
cmp edx, dword [eax]
mov eax, dword [esp + 0x3c]
setge cl
sub ecx, eax
mov eax, dword [esp + 0x30]
cmp ecx, 0xfff6
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setge cl
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x24]
xor eax, eax
inc eax
cmp dword [esp + 0x38], eax
jl 0x1003029a
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x7c]
xor ecx, ecx
cmp eax, 0x53bc
setl cl
cmp ecx, 0xfffffff7
jle 0x100302b1
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x10c]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1bc], eax
dec dword [esp + 0x28]
call fcn.100245d2
mov dword [esp + 0x2c], 0xffffffff
xor ecx, ecx
mov dword [esp + 0x2c], 0x8a6b950b
inc ecx
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x14], ebx
jmp 0x10030301
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x40], 0xc75b57fd
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ecx
jl 0x100302f1
mov dword [esp + 0x40], ebx
cmp dword [esp + 0x40], 0xffffffef
je 0x10030382
mov dword [esp + 0x30], 0xfffffffb
mov dword [esp + 0xc8], esi
mov dword [esp + 0xcc], esi
mov dword [esp + 0xd0], esi
mov dword [esp + 0xd4], esi
inc dword [esp + 0x28]
cmp dword [esp + 0x40], ebx
je 0x10030364
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x10030374
push ebx
push 0x13e9
push ebx
push 0x1980
push 0x13df
call dword [sym.imp.GDI32.dll_ExtCreatePen]
jmp 0x10030374
mov dword [esp + 0x24], 0xaf42
mov eax, dword [esp + 0x30]
mov dword [esp + 0x24], eax
dec dword [esp + 0x40]
cmp dword [esp + 0x40], 0xffffffef
jne 0x10030312
xor ecx, ecx
inc ecx
mov dword [esp + 0x30], 0x5a74
mov dword [esp + 0x1c], 0xfffffffc
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0x14], ebx
jmp 0x100303b0
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x44], 0x2799ac78
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ecx
jl 0x100303a0
mov dword [esp + 0x1c], ebx
jmp 0x10030521
mov dword [esp + 0x18], 0xf38c0887
mov eax, dword [esp + 0x1c]
cmp dword [esp + eax*4 + 0x44], ebx
je 0x1003040e
mov dword [esp + 0x20], 0xc7555b7c
mov dword [esp + 0x28], 4
mov dword [esp + 0x20], ebx
cmp dword [esp + 0x20], ebx
jl 0x100304d9
mov dword [esp + 0x2c], 0x5f0b
mov dword [esp + 0x18], 0xfffffffe
mov dword [esp + 0x28], ecx
dec dword [esp + 0x20]
jns 0x100303ef
jmp 0x100304d9
mov dword [esp + 0x20], 0xfffffffd
lea ecx, [esp + 0x150]
push edi
call fcn.10024520
mov dword [esp + 0x14], ebx
jmp 0x1003043c
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x150]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jl 0x10030429
mov eax, dword [esp + 0x20]
sub eax, dword [esp + 0x20]
jne 0x10030461
mov eax, dword [esp + 0x44]
cmp dword [esp + 0x20], 0xfbde283b
ja 0x10030461
xor esi, esi
mov edx, ebx
inc esi
jmp 0x10030466
xor esi, esi
inc esi
mov edx, esi
mov eax, dword [esp + 0x44]
xor ecx, ecx
cmp eax, edx
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
setl cl
imul edx, ecx
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], ebx
jmp 0x100304c4
mov dword [esp + 0x28], 0xbfe7
mov eax, dword [esp + 0x28]
cmp dword [esp + 0x28], ebx
jne 0x100304a7
mov eax, ebx
cmp dword [esp + 0xc], ebx
je 0x100304a9
mov eax, esi
xor ecx, ecx
cmp eax, 0xffffffff
mov eax, dword [esp + 0x150]
setne cl
mov dword [eax], ecx
cmp dword [esp + 0x1c], ebx
jne 0x100304ca
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ebx
jle 0x1003048d
lea ecx, [esp + 0x150]
call fcn.100245d2
xor ecx, ecx
inc ecx
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x18], ebx
jl 0x1003051d
mov dword [esp + 0xc], ebx
cmp dword [esp + 0xc], ebx
jl 0x100304fd
mov eax, dword [esp + 0x18]
cmp dword [esp + eax*4 + 0x44], ebx
jne 0x100304fd
dec dword [esp + 0xc]
jns 0x100304ed
mov dword [esp + 0xc], ebx
jmp 0x10030511
mov eax, dword [esp + 0x1c]
cmp dword [esp + eax*4 + 0x44], ebx
jne 0x10030517
inc dword [esp + 0xc]
cmp dword [esp + 0xc], ebx
jle 0x10030503
dec dword [esp + 0x18]
jns 0x100304e3
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], ebx
jle 0x100303bf
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x10030546
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
xor eax, eax
lea ecx, [esp + 0xe8]
inc eax
push eax
call fcn.10024520
push 3
lea ecx, [esp + 0x16c]
mov dword [esp + 0x208], 4
call fcn.10024520
mov dword [esp + 0x2c], ebx
xor edx, edx
mov dword [esp + 0x28], 0xfffffffc
inc edx
mov dword [esp + 0x18], ebx
jmp 0x1003059a
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xe8]
mov dword [eax + ecx*4], 0x5d6c05ba
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edx
jl 0x10030584
mov dword [esp + 0x18], ebx
jmp 0x100305b5
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0xd8], ebx
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edx
jl 0x100305a6
mov dword [esp + 0x18], ebx
jmp 0x100305d7
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x168]
mov dword [eax + ecx*4], 0xd7249aae
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 3
jl 0x100305c1
mov eax, dword [esp + 0xe8]
mov esi, 0x17b8
mov ecx, dword [esp + 0x168]
mov dword [eax], ebx
mov dword [esp + 0x34], 0xfffffff6
mov dword [esp + 0x24], 0xc4c8d3c8
mov dword [esp + 0x28], 0x97e7c14a
mov eax, dword [esp + 0x34]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], edx
mov eax, dword [esp + 0x28]
mov dword [esp + 0xd8], esi
mov eax, dword [esp + 0x24]
mov dword [ecx + 8], esi
sub eax, 0x17b6
je 0x10030637