Function at 0x1002dee4
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007765e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa54
push esi
push edi
mov dword [ebp - 0x5e0], 0x9da4d073
mov dword [ebp - 0x764], 7
mov dword [ebp - 0x130], 7
mov dword [ebp - 0x5c8], 0x6c84
mov dword [ebp - 0x910], 0xb2c593c8
mov dword [ebp - 0x1b8], 0
jmp 0x1002df4f
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 4
jge 0x1002df6b
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0xa48], 0xf0f5
jmp 0x1002df42
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x130], eax
jg 0x1002df85
mov dword [ebp - 0x2f8], 1
jmp 0x1002df8c
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x130]
imul eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x130]
jl 0x1002dfad
mov dword [ebp - 0x5d0], 1
jmp 0x1002dfb4
and dword [ebp - 0x5d0], 0
cmp dword [ebp - 0x5d0], 1
je 0x1002dfc9
mov dword [ebp - 0x77c], 1
jmp 0x1002dfd0
and dword [ebp - 0x77c], 0
mov eax, 0x4f88039d
cmp eax, 0x9c2d621e
jae 0x1002dfe8
mov dword [ebp - 0x5d8], 1
jmp 0x1002dfef
and dword [ebp - 0x5d8], 0
mov dword [ebp - 0x5e0], 0x5ba7
mov eax, dword [ebp - 0x764]
sub eax, dword [ebp - 0x5d8]
cmp dword [ebp - 0x5e0], eax
je 0x1002e014
cmp dword [ebp - 0x130], 0
cmp dword [ebp - 0x5c8], 0
jne 0x1002e02f
cmp dword [ebp - 0x5c8], 0
jne 0x1002e02f
and dword [ebp - 0x2d0], 0
jmp 0x1002e039
mov dword [ebp - 0x2d0], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2d0]
mov dword [ebp + eax - 0xa48], ecx
mov dword [ebp - 0x2d4], 0x9da4d073
mov dword [ebp - 0x774], 7
mov dword [ebp - 0x120], 7
mov dword [ebp - 0x524], 0x6c84
mov dword [ebp - 0x8a0], 0xb2c593c8
mov dword [ebp - 0x1b0], 0
jmp 0x1002e097
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 4
jge 0x1002e0b3
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0xa28], 0xf0f5
jmp 0x1002e08a
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x120], eax
jg 0x1002e0cd
mov dword [ebp - 0x584], 1
jmp 0x1002e0d4
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x584]
cmp eax, dword [ebp - 0x120]
jl 0x1002e0f5
mov dword [ebp - 0x2cc], 1
jmp 0x1002e0fc
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 1
je 0x1002e111
mov dword [ebp - 0x76c], 1
jmp 0x1002e118
and dword [ebp - 0x76c], 0
mov eax, 0x4f88039d
cmp eax, 0x9c2d621e
jae 0x1002e130
mov dword [ebp - 0x45c], 1
jmp 0x1002e137
and dword [ebp - 0x45c], 0
mov dword [ebp - 0x2d4], 0x5ba7
mov eax, dword [ebp - 0x774]
sub eax, dword [ebp - 0x45c]
cmp dword [ebp - 0x2d4], eax
je 0x1002e15c
cmp dword [ebp - 0x120], 0
cmp dword [ebp - 0x524], 0
jne 0x1002e177
cmp dword [ebp - 0x524], 0
jne 0x1002e177
and dword [ebp - 0x2dc], 0
jmp 0x1002e181
mov dword [ebp - 0x2dc], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2dc]
mov dword [ebp + eax - 0xa28], ecx
mov dword [ebp - 0x2f4], 0x9da4d073
mov dword [ebp - 0x794], 7
mov dword [ebp - 0x8a8], 4
mov byte [ebp - 0x8b], 0
movzx eax, byte [ebp - 0x8b]
test eax, eax
je 0x1002e1d1
push 0x1418
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1002e1f9
push 0
push 0
push 0x2ea
push 0x1e68
push 0
call dword [sym.imp.USER32.dll_InsertMenuA]
mov dword [ebp - 0x128], 7
mov dword [ebp - 0x52c], 0x6c84
mov dword [ebp - 0x25c], 1
push 1
lea ecx, [ebp - 0x7bc]
call fcn.100136d3
and dword [ebp - 4], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x15c], 0
jmp 0x1002e24b
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 1
jge 0x1002e26d
push dword [ebp - 0x15c]
lea ecx, [ebp - 0x7bc]
call fcn.10013744
mov dword [eax], 8
jmp 0x1002e23e
push 0
lea ecx, [ebp - 0x7bc]
call fcn.10013744
or ecx, 0xffffffff
sub ecx, dword [eax]
cmp ecx, 1
jle 0x1002e290
mov dword [ebp - 0x464], 1
jmp 0x1002e297
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0xfffffffa
jle 0x1002e2b8
mov dword [ebp - 0x630], 1
jmp 0x1002e2bf
and dword [ebp - 0x630], 0
push 0
lea ecx, [ebp - 0x7bc]
call fcn.10013744
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x25c], eax
jg 0x1002e38d
mov dword [ebp - 0x110], 0x10
jmp 0x1002e2f7
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x2e
jge 0x1002e361
mov dword [ebp - 0x140], 0xfebf
mov dword [ebp - 0x140], 2
mov dword [ebp - 0x140], 0
jmp 0x1002e32d
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xfffffffc
jne 0x1002e35f
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x1002e35d
push 0
push 0
push 0xfa5
push 0
push 1
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
jmp 0x1002e320
jmp 0x1002e2ea
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1002e38b
push 1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectPalette]
jmp 0x1002e3e0
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1002e3ac
push 0x66c
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1002e3e0
push 0
push 0
push 0x90e
push 0
push 0x1f72
push 0
push 0xa14
push 0x185a
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7bc]
call fcn.1001373f
push 4
lea ecx, [ebp - 0x850]
call fcn.100136d3
mov dword [ebp - 4], 1
mov dword [ebp - 0x784], 3
mov dword [ebp - 0x7e4], 0xa2a4f402
mov dword [ebp - 0x7e0], 0xa2a4f402
mov dword [ebp - 0x7dc], 0xa2a4f402
mov dword [ebp - 0x7d8], 0xa2a4f402
lea ecx, [ebp - 0x221]
call fcn.10009420
push eax
lea eax, [ebp - 0x7d4]
push eax
lea eax, [ebp - 0x7e4]
push eax
lea ecx, [ebp - 0xa18]
call fcn.10013753
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9ec]
call fcn.10013715
mov byte [ebp - 4], 2
mov dword [ebp - 0x8b0], 0xc660f7e7
mov dword [ebp - 0x8b8], 7
mov dword [ebp - 0x8c0], 0xd857289c
mov dword [ebp - 0x2e4], 0xfffffffa
mov dword [ebp - 0x8c8], 6
mov dword [ebp - 0x214], 0
jmp 0x1002e4b9
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 4
jge 0x1002e4d8
push dword [ebp - 0x214]
lea ecx, [ebp - 0x850]
call fcn.10013744
and dword [eax], 0
jmp 0x1002e4ac
push 1
lea ecx, [ebp - 0x850]
call fcn.10013744
mov eax, dword [eax]
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x2e4]
dec eax
mov dword [ebp - 0x2e4], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9ec]
call fcn.1001373f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x850]
call fcn.1001373f
mov dword [ebp - 0x8d0], 0xb2c593c8
mov dword [ebp - 0x164], 0
jmp 0x1002e53b
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 4
jge 0x1002e557
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0xa38], 0xf0f5
jmp 0x1002e52e
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x128], eax
jg 0x1002e571
mov dword [ebp - 0x5dc], 1
jmp 0x1002e578
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x5dc]
cmp eax, dword [ebp - 0x128]
jl 0x1002e599
mov dword [ebp - 0x2ec], 1
jmp 0x1002e5a0
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 1
je 0x1002e5b5
mov dword [ebp - 0x78c], 1
jmp 0x1002e5bc
and dword [ebp - 0x78c], 0
mov eax, 0x4f88039d
cmp eax, 0x9c2d621e
jae 0x1002e5d4
mov dword [ebp - 0x46c], 1
jmp 0x1002e5db
and dword [ebp - 0x46c], 0
mov dword [ebp - 0x2f4], 0x5ba7
mov eax, dword [ebp - 0x794]
sub eax, dword [ebp - 0x46c]
cmp dword [ebp - 0x2f4], eax
je 0x1002e600
cmp dword [ebp - 0x128], 0
cmp dword [ebp - 0x52c], 0
jne 0x1002e61b
cmp dword [ebp - 0x52c], 0
jne 0x1002e61b
and dword [ebp - 0x2fc], 0
jmp 0x1002e625
mov dword [ebp - 0x2fc], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp + eax - 0xa38], ecx
mov dword [ebp - 0x79c], 0x75c96dd1
mov dword [ebp - 0x138], 0xdf2f4a8b
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x138], 0xc
jmp 0x1002e671
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xfffffff3
jle 0x1002e696
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x1002e694
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x1002e664
mov dword [ebp - 0xa0], 0xfffffff8
mov dword [ebp - 0x75c], 0x9d693ce8
mov dword [ebp - 0x1c4], 0
jmp 0x1002e6c3
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jge 0x1002e6df
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x7a4], 1
jmp 0x1002e6b6
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x1002e70f
push 0x2466
push 0x183b
push 0x2213
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
call dword [sym.imp.USER32.dll_PeekMessageA]
mov dword [ebp - 0xa0], 0
jmp 0x1002e728
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x10
jle 0x1002e9b3
push 3
lea ecx, [ebp - 0x620]
call fcn.100136d3
mov dword [ebp - 4], 3
mov dword [ebp - 0x324], 0x6ce2e7c5
mov dword [ebp - 0x10], 0
jmp 0x1002e763
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1002e77f
push dword [ebp - 0x10]
lea ecx, [ebp - 0x620]
call fcn.10013744
mov dword [eax], 0x5610a143
jmp 0x1002e75c
mov dword [ebp - 0x10], 0
jmp 0x1002e78f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1002e7a5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x790], 0xff57440e
jmp 0x1002e788
mov dword [ebp - 0x10], 0
jmp 0x1002e7b5
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1002e7cb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x958], 0x27b1
jmp 0x1002e7ae
cmp dword [ebp - 0xa0], 0
jne 0x1002e878
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7a4], 1
push 0
lea ecx, [ebp - 0x620]
call fcn.10013744
cmp dword [eax], 1
jg 0x1002e807
mov dword [ebp - 0x474], 1
jmp 0x1002e80e
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x474], eax
jne 0x1002e82e
push 1
lea ecx, [ebp - 0x620]
call fcn.10013744
cmp dword [eax], 0
je 0x1002e849
push 1
lea ecx, [ebp - 0x620]
call fcn.10013744
cmp dword [eax], 0
jne 0x1002e849
and dword [ebp - 0x234], 0
jmp 0x1002e853
mov dword [ebp - 0x234], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x234]
mov dword [ebp + eax - 0x958], ecx
cmp dword [ebp - 0x234], 0
jne 0x1002e878
and dword [ebp - 0x304], 0
jmp 0x1002e882
mov dword [ebp - 0x304], 1
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x304], eax
jle 0x1002e89c
mov dword [ebp - 0x58c], 1
jmp 0x1002e8a3
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 1
jne 0x1002e8b8
mov dword [ebp - 0x30c], 1
jmp 0x1002e8bf
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0
jg 0x1002e8d4
mov dword [ebp - 0x47c], 1
jmp 0x1002e8db
and dword [ebp - 0x47c], 0
cmp dword [ebp - 0x47c], 0xd994
jle 0x1002e903
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x790], 0
je 0x1002e903
mov dword [ebp - 0x314], 1
jmp 0x1002e90a
and dword [ebp - 0x314], 0
push 1
lea ecx, [ebp - 0x620]
call fcn.10013744
mov ecx, dword [ebp - 0x314]
cmp ecx, dword [eax]
jl 0x1002e93a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x958], 0
jne 0x1002e93a
and dword [ebp - 0x534], 0
jmp 0x1002e944
mov dword [ebp - 0x534], 1
cmp dword [ebp - 0x534], 0xad31fc53
je 0x1002e95c
mov dword [ebp - 0x31c], 1
jmp 0x1002e963
and dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 0xf2ca1253
jbe 0x1002e97b
mov dword [ebp - 0x484], 1
jmp 0x1002e982
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
add eax, 0x4f957c33
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x75c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x620]
call fcn.1001373f
jmp 0x1002e71b
mov dword [ebp - 0x664], 0x75c96dd1
mov dword [ebp - 0x114], 0xdf2f4a8b
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x114], 0xc
jmp 0x1002e9ec
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xfffffff3
jle 0x1002ea11
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1002ea0f
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x1002e9df
mov dword [ebp - 0xa8], 0xfffffff8
mov dword [ebp - 0x648], 0x9d693ce8
mov dword [ebp - 0x16c], 0
jmp 0x1002ea3e
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x1002ea5a
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x640], 1
jmp 0x1002ea31
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x1002ea8a
push 0x2466
push 0x183b
push 0x2213
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
call dword [sym.imp.USER32.dll_PeekMessageA]
mov dword [ebp - 0xa8], 0
jmp 0x1002eaa3
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x10
jle 0x1002ed2e
push 3
lea ecx, [ebp - 0x608]
call fcn.100136d3
mov dword [ebp - 4], 4
mov dword [ebp - 0x34c], 0x6ce2e7c5
mov dword [ebp - 0x18], 0
jmp 0x1002eade
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002eafa
push dword [ebp - 0x18]
lea ecx, [ebp - 0x608]
call fcn.10013744
mov dword [eax], 0x5610a143
jmp 0x1002ead7
mov dword [ebp - 0x18], 0
jmp 0x1002eb0a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1002eb20
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6f8], 0xff57440e
jmp 0x1002eb03
mov dword [ebp - 0x18], 0
jmp 0x1002eb30
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002eb46
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x968], 0x27b1
jmp 0x1002eb29
cmp dword [ebp - 0xa8], 0
jne 0x1002ebf3
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x640], 1
push 0
lea ecx, [ebp - 0x608]
call fcn.10013744
cmp dword [eax], 1
jg 0x1002eb82
mov dword [ebp - 0x5bc], 1
jmp 0x1002eb89
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x5bc], eax
jne 0x1002eba9
push 1
lea ecx, [ebp - 0x608]
call fcn.10013744
cmp dword [eax], 0
je 0x1002ebc4
push 1
lea ecx, [ebp - 0x608]
call fcn.10013744
cmp dword [eax], 0
jne 0x1002ebc4
and dword [ebp - 0x274], 0
jmp 0x1002ebce
mov dword [ebp - 0x274], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x274]
mov dword [ebp + eax - 0x968], ecx
cmp dword [ebp - 0x274], 0
jne 0x1002ebf3
and dword [ebp - 0x32c], 0
jmp 0x1002ebfd
mov dword [ebp - 0x32c], 1
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x32c], eax
jle 0x1002ec17
mov dword [ebp - 0x48c], 1
jmp 0x1002ec1e
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 1
jne 0x1002ec33
mov dword [ebp - 0x334], 1
jmp 0x1002ec3a
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0
jg 0x1002ec4f
mov dword [ebp - 0x53c], 1
jmp 0x1002ec56
and dword [ebp - 0x53c], 0
cmp dword [ebp - 0x53c], 0xd994
jle 0x1002ec7e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6f8], 0
je 0x1002ec7e
mov dword [ebp - 0x33c], 1
jmp 0x1002ec85
and dword [ebp - 0x33c], 0
push 1
lea ecx, [ebp - 0x608]
call fcn.10013744
mov ecx, dword [ebp - 0x33c]
cmp ecx, dword [eax]
jl 0x1002ecb5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x968], 0
jne 0x1002ecb5
and dword [ebp - 0x494], 0
jmp 0x1002ecbf
mov dword [ebp - 0x494], 1
cmp dword [ebp - 0x494], 0xad31fc53
je 0x1002ecd7
mov dword [ebp - 0x344], 1
jmp 0x1002ecde
and dword [ebp - 0x344], 0
cmp dword [ebp - 0x344], 0xf2ca1253
jbe 0x1002ecf6
mov dword [ebp - 0x594], 1
jmp 0x1002ecfd
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x594]
add eax, 0x4f957c33
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x648], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x608]
call fcn.1001373f
jmp 0x1002ea96
mov dword [ebp - 0x1f4], 1
mov dword [ebp - 0x1f4], 1
jmp 0x1002ed51
mov eax, dword [ebp - 0x1f4]
dec eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xfffffff3
jl 0x1002edb7
mov dword [ebp - 0x174], 7
mov dword [ebp - 0x174], 2
jmp 0x1002ed7d
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xfffffff2
jl 0x1002edb5
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x1002edb3
push 0x22c
push 0
push 0x2394
push 0
push 0x267f
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
jmp 0x1002ed70
jmp 0x1002ed44
mov dword [ebp - 0x650], 0x75c96dd1
mov dword [ebp - 0x60], 0x7fb0b029
mov dword [ebp - 0x754], 0xffffffff
mov dword [ebp - 0x1cc], 0
jmp 0x1002edeb
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x1002ee07
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x978], 0xf84b8114
jmp 0x1002edde
cmp dword [ebp - 0x60], 0
jne 0x1002ee19
mov dword [ebp - 0x49c], 1
jmp 0x1002ee20
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x754], eax
mov dword [ebp - 0x60], 0
jmp 0x1002ee3c
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jg 0x1002ee60
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x978]
mov dword [ebp + ecx*4 - 0x978], eax
cmp dword [ebp - 0x60], 0
je 0x1002ee5e
jmp 0x1002ee60
jmp 0x1002ee35
mov dword [ebp - 0x11c], 0xdf2f4a8b
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x11c], 0xc
jmp 0x1002ee8f
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xfffffff3
jle 0x1002eeb4
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x1002eeb2
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x1002ee82
mov dword [ebp - 0x184], 1
push 3
lea ecx, [ebp - 0x988]
call fcn.100136d3
mov dword [ebp - 4], 5
mov dword [ebp - 0x544], 0xffffffff
mov dword [ebp - 0x17c], 0
jmp 0x1002eef5
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jge 0x1002ef17
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x988]
call fcn.10013744
mov dword [eax], 0xfffffff6
jmp 0x1002eee8
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x184], eax
jne 0x1002ef31
mov dword [ebp - 0x354], 1
jmp 0x1002ef38
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x184]
cmp eax, dword [ebp - 0x354]
jne 0x1002ef62
mov dword [ebp - 0x8d8], 0xd006
mov eax, dword [ebp - 0x544]
dec eax
mov dword [ebp - 0x544], eax
jmp 0x1002f058
mov dword [ebp - 0x658], 6
mov dword [ebp - 0x20c], 0
jmp 0x1002ef85
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x1002efa1
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x700], 1
jmp 0x1002ef78
cmp dword [ebp - 0x184], 0x37bb
jg 0x1002efb9
mov dword [ebp - 0x35c], 1
jmp 0x1002efc0
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 0xffffffff
jae 0x1002efd5
mov dword [ebp - 0x4a4], 1
jmp 0x1002efdc
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 0x9ddcef98
jae 0x1002eff4
mov dword [ebp - 0x364], 1
jmp 0x1002effb
and dword [ebp - 0x364], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x700]
add eax, dword [ebp - 0x364]
cmp eax, 0x37ac
je 0x1002f021
mov dword [ebp - 0x5d4], 1
jmp 0x1002f028
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x658], eax
mov byte [ebp - 0x7a], 0
movzx eax, byte [ebp - 0x7a]
test eax, eax
je 0x1002f058
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x988]
call fcn.1001373f
mov dword [ebp - 0xb0], 0xfffffff8
mov dword [ebp - 0x708], 0x9d693ce8
mov dword [ebp - 0x1d4], 0
jmp 0x1002f094
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 1
jge 0x1002f0b0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x758], 1
jmp 0x1002f087
mov byte [ebp - 0x7c], 0
movzx eax, byte [ebp - 0x7c]
test eax, eax
je 0x1002f0da
push 0x2466
push 0x183b
push 0x2213
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
call dword [sym.imp.USER32.dll_PeekMessageA]
mov dword [ebp - 0xb0], 0
jmp 0x1002f0f3
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x10
jle 0x1002f37e
push 3
lea ecx, [ebp - 0x614]
call fcn.100136d3
mov dword [ebp - 4], 6
mov dword [ebp - 0x4bc], 0x6ce2e7c5
mov dword [ebp - 0x14], 0
jmp 0x1002f12e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002f14a
push dword [ebp - 0x14]
lea ecx, [ebp - 0x614]
call fcn.10013744
mov dword [eax], 0x5610a143
jmp 0x1002f127
mov dword [ebp - 0x14], 0
jmp 0x1002f15a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002f170
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x660], 0xff57440e
jmp 0x1002f153
mov dword [ebp - 0x14], 0
jmp 0x1002f180
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002f196
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x998], 0x27b1
jmp 0x1002f179
cmp dword [ebp - 0xb0], 0
jne 0x1002f243
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x758], 1
push 0
lea ecx, [ebp - 0x614]
call fcn.10013744
cmp dword [eax], 1
jg 0x1002f1d2
mov dword [ebp - 0x36c], 1
jmp 0x1002f1d9
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x36c], eax
jne 0x1002f1f9
push 1
lea ecx, [ebp - 0x614]
call fcn.10013744
cmp dword [eax], 0
je 0x1002f214
push 1
lea ecx, [ebp - 0x614]
call fcn.10013744
cmp dword [eax], 0
jne 0x1002f214
and dword [ebp - 0x23c], 0
jmp 0x1002f21e
mov dword [ebp - 0x23c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x23c]
mov dword [ebp + eax - 0x998], ecx
cmp dword [ebp - 0x23c], 0
jne 0x1002f243
and dword [ebp - 0x4ac], 0
jmp 0x1002f24d
mov dword [ebp - 0x4ac], 1
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x4ac], eax
jle 0x1002f267
mov dword [ebp - 0x374], 1
jmp 0x1002f26e
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 1
jne 0x1002f283
mov dword [ebp - 0x54c], 1
jmp 0x1002f28a
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0
jg 0x1002f29f
mov dword [ebp - 0x37c], 1
jmp 0x1002f2a6
and dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0xd994
jle 0x1002f2ce
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x660], 0
je 0x1002f2ce
mov dword [ebp - 0x4b4], 1
jmp 0x1002f2d5
and dword [ebp - 0x4b4], 0
push 1
lea ecx, [ebp - 0x614]
call fcn.10013744
mov ecx, dword [ebp - 0x4b4]
cmp ecx, dword [eax]
jl 0x1002f305
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x998], 0
jne 0x1002f305
and dword [ebp - 0x384], 0
jmp 0x1002f30f
mov dword [ebp - 0x384], 1
cmp dword [ebp - 0x384], 0xad31fc53
je 0x1002f327
mov dword [ebp - 0x59c], 1
jmp 0x1002f32e
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x59c], 0xf2ca1253
jbe 0x1002f346
mov dword [ebp - 0x38c], 1
jmp 0x1002f34d
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
add eax, 0x4f957c33
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x708], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x614]
call fcn.1001373f
jmp 0x1002f0e6
push 3
lea ecx, [ebp - 0x2a0]
call fcn.100136d3
mov dword [ebp - 4], 7
mov dword [ebp - 0x24], 0
jmp 0x1002f3a2
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1002f3b8
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x8e0], 0xffffffff
jmp 0x1002f39b
mov dword [ebp - 0x24], 0
jmp 0x1002f3c8
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002f3e4
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2a0]
call fcn.10013744
mov dword [eax], 1
jmp 0x1002f3c1
push 0
lea ecx, [ebp - 0x2a0]
call fcn.10013744
and dword [eax], 0
jmp 0x1002f41a
push 0
lea ecx, [ebp - 0x2a0]
call fcn.10013744
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x394]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2a0]
call fcn.10013744
cmp dword [eax], 0
jg 0x1002f46e
mov byte [ebp - 0x7e], 0
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x1002f440
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov byte [ebp - 0x80], 0
movzx eax, byte [ebp - 0x80]
test eax, eax
je 0x1002f46c
push 0
push 0x376
push 0x790
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
jmp 0x1002f3f6
push 0
lea ecx, [ebp - 0x2a0]
call fcn.10013744
cmp dword [eax], 0xffffffff
jl 0x1002f48c
mov dword [ebp - 0x554], 1
jmp 0x1002f493
and dword [ebp - 0x554], 0
push 0
lea ecx, [ebp - 0x2a0]
call fcn.10013744
mov eax, dword [eax]
cmp eax, dword [ebp - 0x554]
jge 0x1002f4b6
mov dword [ebp - 0x39c], 1
jmp 0x1002f4bd
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0x4e6d
jg 0x1002f4ea
mov dword [ebp - 0x668], 0xee1c
mov esi, dword [ebp - 0x668]
push 0
lea ecx, [ebp - 0x2a0]
call fcn.10013744
mov dword [eax], esi
jmp 0x1002f52c
mov dword [ebp - 0x18c], 0x37a5b7d8
mov dword [ebp - 0x18c], 0xfffffff1
jmp 0x1002f50d
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x12
jge 0x1002f52c
push 0
lea ecx, [ebp - 0x2a0]
call fcn.10013744
cmp dword [eax], 0
je 0x1002f52a
jmp 0x1002f52c
jmp 0x1002f500
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a0]
call fcn.1001373f
mov dword [ebp - 0x1fc], 1
mov dword [ebp - 0x1fc], 1
jmp 0x1002f55e
mov eax, dword [ebp - 0x1fc]
dec eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0xfffffff3
jl 0x1002f5c4
mov dword [ebp - 0x194], 7
mov dword [ebp - 0x194], 2
jmp 0x1002f58a
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xfffffff2
jl 0x1002f5c2
mov byte [ebp - 0x82], 0
movzx eax, byte [ebp - 0x82]
test eax, eax
je 0x1002f5c0
push 0x22c
push 0
push 0x2394
push 0
push 0x267f
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
jmp 0x1002f57d
jmp 0x1002f551
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0xb8], 3
mov dword [ebp - 0x1dc], 0
jmp 0x1002f5ee
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jge 0x1002f60a
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x264], 0xffffffff
jmp 0x1002f5e1
mov dword [ebp - 0x5c], 0
jmp 0x1002f61a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x1002f759
mov dword [ebp - 0x6c], 0xb51dba33
mov dword [ebp - 0x4c4], 0xd9b95031
mov dword [ebp - 0x670], 0x32a1
mov dword [ebp - 0x6c], 0
jmp 0x1002f64f
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x1002f754
mov dword [ebp - 0x710], 0xce6bb2f1
mov dword [ebp - 0x760], 0xab39
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x264]
mov dword [ebp - 0x8e8], eax
mov dword [ebp - 0x4c4], 0xfffd
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x264]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp + eax*4 - 0x264], ecx
mov eax, dword [ebp - 0x4c4]
cmp eax, dword [ebp - 0x3a4]
jge 0x1002f6c1
mov dword [ebp - 0x780], 1
jmp 0x1002f6c8
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x8f0], eax
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xb8], eax
jge 0x1002f703
mov dword [ebp - 0x5c4], 1
jmp 0x1002f70a
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c4], eax
jg 0x1002f721
mov dword [ebp - 0x678], 1
jmp 0x1002f728
and dword [ebp - 0x678], 0
or eax, 0xffffffff
cmp eax, 1
ja 0x1002f73c
mov dword [ebp - 0x3ac], 1
jmp 0x1002f743
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x760], eax
jmp 0x1002f648
jmp 0x1002f613
mov dword [ebp - 0x5c], 0
jmp 0x1002f769
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jle 0x1002f7d2
mov byte [ebp - 0x84], 0
movzx eax, byte [ebp - 0x84]
test eax, eax
je 0x1002f797
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
mov dword [ebp - 0xb8], 0
jmp 0x1002f7b0
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x11
jge 0x1002f7d0
mov dword [ebp - 0x680], 0xfff7
cmp dword [ebp - 0x680], 0
je 0x1002f7ce
jmp 0x1002f7d0
jmp 0x1002f7a3
jmp 0x1002f762
movzx eax, byte [0x11a91d40]
test eax, eax
je 0x1002f7f0
mov esi, 0x10667190
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10032924
mov dword [ebp - 0x19c], 0xfffffffd
mov dword [ebp - 0x19c], 3
jmp 0x1002f813
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x11
jg 0x1002f853
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x1002f834
call dword [sym.imp.USER32.dll_CreateMenu]
mov byte [ebp - 0x88], 0
movzx eax, byte [ebp - 0x88]
test eax, eax
je 0x1002f851
push 0x1bb0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x1002f806
mov dword [ebp - 0x900], 0x10667190
mov dword [ebp - 0x1e4], 1
push 3
lea ecx, [ebp - 0x9a8]
call fcn.100136d3
mov dword [ebp - 4], 8
mov dword [ebp - 0x3b4], 0xffffffff
mov dword [ebp - 0x21c], 0
jmp 0x1002f89e
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x1002f8c0
push dword [ebp - 0x21c]
lea ecx, [ebp - 0x9a8]
call fcn.10013744
mov dword [eax], 0xfffffff6
jmp 0x1002f891
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x1e4], eax
jne 0x1002f8da
mov dword [ebp - 0x4cc], 1
jmp 0x1002f8e1
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x1e4]
cmp eax, dword [ebp - 0x4cc]
jne 0x1002f90b
mov dword [ebp - 0x908], 0xd006
mov eax, dword [ebp - 0x3b4]
dec eax
mov dword [ebp - 0x3b4], eax
jmp 0x1002fa07
mov dword [ebp - 0x688], 6
mov dword [ebp - 0x1a4], 0
jmp 0x1002f92e
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x1002f94a
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x718], 1
jmp 0x1002f921
cmp dword [ebp - 0x1e4], 0x37bb
jg 0x1002f962
mov dword [ebp - 0x55c], 1
jmp 0x1002f969
and dword [ebp - 0x55c], 0
cmp dword [ebp - 0x55c], 0xffffffff
jae 0x1002f97e
mov dword [ebp - 0x3bc], 1
jmp 0x1002f985
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x3bc], 0x9ddcef98
jae 0x1002f99d
mov dword [ebp - 0x4d4], 1
jmp 0x1002f9a4
and dword [ebp - 0x4d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x718]
add eax, dword [ebp - 0x4d4]
cmp eax, 0x37ac
je 0x1002f9ca
mov dword [ebp - 0x3c4], 1
jmp 0x1002f9d1
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x688], eax
mov byte [ebp - 0x8a], 0
movzx eax, byte [ebp - 0x8a]
test eax, eax
je 0x1002fa07
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9a8]
call fcn.1001373f
mov dword [ebp - 0xc0], 0xbe1d925b
mov dword [ebp - 0x4dc], 0
mov dword [ebp - 0x1ac], 0xfd43ddca
push 2
lea ecx, [ebp - 0x808]
call fcn.100136d3
mov dword [ebp - 4], 9
mov dword [ebp - 0x244], 0x7ae9f903
mov dword [ebp - 0x3dc], 0x42c78ef8
mov dword [ebp - 0x698], 8
push 4
lea ecx, [ebp - 0x85c]
call fcn.100136d3
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x2c], 0
jmp 0x1002fa87
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1002faa3
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x808]
call fcn.10013744
mov dword [eax], 0x3f5e
jmp 0x1002fa80
mov dword [ebp - 0x2c], 0
jmp 0x1002fab3
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1002facf
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x85c]
call fcn.10013744
mov dword [eax], 0x4f20077f
jmp 0x1002faac
mov dword [ebp - 0x1ac], 1
cmp dword [ebp - 0x1ac], 0
je 0x1002faf7
mov eax, 0x289f
test eax, eax
je 0x1002faf7
mov dword [ebp - 0x5a4], 1
jmp 0x1002fafe
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x4dc]
cmp dword [ebp - 0x5a4], eax
jl 0x1002fb18
mov dword [ebp - 0x3cc], 1
jmp 0x1002fb1f
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x3cc], eax
jg 0x1002fb39
mov dword [ebp - 0x3d4], 1
jmp 0x1002fb40
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x4dc]
cmp eax, dword [ebp - 0x3d4]
jg 0x1002fb5a
mov dword [ebp - 0x7a0], 1
jmp 0x1002fb61
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x860], eax
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x1ac], eax
je 0x1002fb87
mov dword [ebp - 0x564], 1
jmp 0x1002fb8e
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0xc0]
sub eax, dword [ebp - 0x564]
jne 0x1002fbb7
push 0
lea ecx, [ebp - 0x808]
call fcn.10013744
cmp dword [eax], 0
jne 0x1002fbb7
and dword [ebp - 0x690], 0
jmp 0x1002fbc1
mov dword [ebp - 0x690], 1
mov eax, dword [ebp - 0x244]
inc eax
inc eax
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x3dc], eax
jne 0x1002fbe9
mov dword [ebp - 0x4e4], 1
jmp 0x1002fbf0
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x4e4], eax
je 0x1002fc0a
mov dword [ebp - 0x720], 1
jmp 0x1002fc11
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x918], eax
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x920], eax
mov esi, dword [ebp - 0xc0]
imul esi, dword [ebp - 0xc0]
push 1
lea ecx, [ebp - 0x85c]
call fcn.10013744
mov dword [eax], esi
mov dword [ebp - 0x1ac], 0xf69a7501
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x85c]
call fcn.1001373f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x808]
call fcn.1001373f
mov dword [ebp - 0x928], 0x10667194
push 3
lea ecx, [ebp - 0x2ac]
call fcn.100136d3
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x58], 0
jmp 0x1002fc9b
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1002fcb1
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x930], 0xffffffff
jmp 0x1002fc94
mov dword [ebp - 0x58], 0
jmp 0x1002fcc1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1002fcdd
push dword [ebp - 0x58]
lea ecx, [ebp - 0x2ac]
call fcn.10013744
mov dword [eax], 1
jmp 0x1002fcba
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10013744
and dword [eax], 0
jmp 0x1002fd13
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10013744
mov dword [ebp - 0x3e4], eax
mov eax, dword [ebp - 0x3e4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3e4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10013744
cmp dword [eax], 0
jg 0x1002fd76
mov byte [ebp - 0x8c], 0
movzx eax, byte [ebp - 0x8c]
test eax, eax
je 0x1002fd3f
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x1002fd71
push 0
push 0x376
push 0x790
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
jmp 0x1002fcef
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10013744
cmp dword [eax], 0xffffffff
jl 0x1002fd94
mov dword [ebp - 0x5e4], 1
jmp 0x1002fd9b
and dword [ebp - 0x5e4], 0
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10013744
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5e4]
jge 0x1002fdbe
mov dword [ebp - 0x3ec], 1
jmp 0x1002fdc5
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0x4e6d
jg 0x1002fdf2
mov dword [ebp - 0x768], 0xee1c
mov esi, dword [ebp - 0x768]
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10013744
mov dword [eax], esi
jmp 0x1002fe34
mov dword [ebp - 0x204], 0x37a5b7d8
mov dword [ebp - 0x204], 0xfffffff1
jmp 0x1002fe15
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret