Function at 0x6870f260
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea esi, [ebp - 0x1a]
push ebx
lea ebx, [ebp - 0x220]
mov eax, ebx
sub esp, 0x37c
mov edx, dword [ebp + 0xc]
lea esi, [esi]
movzx ecx, word [edx]
test cx, cx
je 0x6870f296
add eax, 2
add edx, 2
mov word [eax - 2], cx
cmp eax, esi
jne 0x6870f280
xor edi, edi
mov word [eax], di
mov eax, ebx
movzx edx, word [eax]
cmp dx, 0x5c
je 0x6870f2b2
cmp dx, 0x2f
je 0x6870f2b2
cmp dx, 0x2e
jne 0x6870f2d0
mov esi, 0x5f
add eax, 2
mov word [eax - 2], si
movzx edx, word [eax]
cmp dx, 0x5c
jne 0x6870f2a6
jmp 0x6870f2b2
test dx, dx
je 0x6870f2e0
add eax, 2
jmp 0x6870f29d
mov eax, dword [ebp + 8]
mov edi, dword [sym.imp.kernel32.dll_lstrcmpiW]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + 0x228]
mov esi, ecx
test ecx, ecx
jne 0x6870f30a
jmp 0x6870f350
mov esi, dword [esi + 0x210]
test esi, esi
je 0x6870f350
mov dword [ebp - 0x35c], esi
mov dword [esp + 4], esi
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
jne 0x6870f300
mov ecx, esi
mov esi, dword [ebp - 0x35c]
test byte [0x68719058], 8
jne 0x6870f630
mov edi, dword [ebp + 0x10]
mov eax, dword [ecx + 0x20c]
mov dword [edi], eax
mov eax, dword [ecx + 0x208]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], 0x214
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov esi, eax
mov dword [esp + 0x14], 0x2000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], ebx
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov dword [esp], eax
call sym._LoadImageW_24
mov edi, dword [ebp + 0x10]
sub esp, 0x18
mov dword [esi + 0x208], eax
mov dword [edi], 0
test eax, eax
je 0x6870f810
lea edx, [ebp - 0x34c]
mov dword [esp + 4], 0x54
mov dword [esp + 8], edx
mov dword [esp], eax
call sym._GetObjectW_12
sub esp, 0xc
cmp eax, 0x54
jne 0x6870f488
cmp word [ebp - 0x33a], 0x20
jne 0x6870f488
mov eax, dword [ebp - 0x324]
test eax, eax
jne 0x6870f488
mov edi, dword [ebp - 0x330]
imul edi, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x338]
test edi, edi
jle 0x6870f488
mov dword [ebp - 0x35c], esi
xor edx, edx
mov esi, dword [ebp + 0x10]
jmp 0x6870f43b
add edx, 1
cmp edx, edi
je 0x6870f80a
xor ecx, ecx
cmp byte [eax + edx*4 + 3], 0xff
setne cl
mov dword [esi], ecx
je 0x6870f430
mov esi, dword [ebp - 0x35c]
sub edi, 1
lea esi, [esi]
movzx edx, byte [eax + 3]
movzx ecx, byte [eax]
add eax, 4
add edx, 1
imul ecx, edx
mov byte [eax - 4], ch
movzx ecx, byte [eax - 3]
imul ecx, edx
mov byte [eax - 3], ch
movzx ecx, byte [eax - 2]
imul edx, ecx
mov byte [eax - 2], dh
sub edi, 1
jae 0x6870f458
lea esi, [esi]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [esi + 0x20c], eax
xor eax, eax
lea esi, [esi]
movzx edx, word [ebx + eax]
mov word [esi + eax], dx
add eax, 2
test dx, dx
jne 0x6870f498
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x228]
mov dword [esi + 0x210], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov dword [eax + 0x228], esi
test byte [0x68719058], 8
jne 0x6870f4e0
mov eax, dword [esi + 0x208]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, esi
mov edi, dword [esi + 0x208]
mov ebx, esi
shr eax, 0x10
je 0x6870f817
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov ecx, eax
sub esp, 8
mov eax, 0x6871bacd
test ecx, ecx
jne 0x6870f5f4
cmp word [esi], 0
je 0x6870f93d
mov edx, ecx
lea ecx, [ecx + 1]
cmp word [esi + edx*2 + 2], 0
jne 0x6870f520
mov eax, 0x224c
mov dword [ebp - 0x360], esi
mov word [ebp - 0x34c], ax
lea eax, [ebp - 0x34a]
mov dword [ebp - 0x35c], ebx
jmp 0x6870f583
cmp cx, 9
je 0x6870f7af
cmp cx, 0xa
jne 0x6870f860
mov esi, 0x6e5c
add eax, 2
mov word [eax - 2], si
sub edx, 1
jb 0x6870f915
lea ecx, [ebp - 0x22a]
cmp ecx, eax
jb 0x6870f5c2
add dword [ebp - 0x35c], 2
mov ebx, dword [ebp - 0x35c]
movzx ecx, word [ebx - 2]
cmp cx, 0xd
je 0x6870f79c
jbe 0x6870f550
cmp cx, 0x22
je 0x6870f7c0
cmp cx, 0x5c
jne 0x6870f84d
mov ecx, 0x5c5c
add eax, 2
mov word [eax - 2], cx
jmp 0x6870f570
mov byte [eax], 0x22
mov esi, dword [ebp - 0x360]
test edx, edx
je 0x6870f91e
mov byte [eax + 3], 0x2e
mov edx, 0x2e2e
mov word [eax + 1], dx
lea edx, [eax + 4]
lea eax, [ebp - 0x34c]
mov byte [edx], 0
mov dword [esp], eax
call sym.___wine_dbg_strdup
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], str.new__p__s:__p_n
mov dword [esp + 8], str.MSSTYLES_LoadBitmap
mov dword [esp + 4], 0x68719058
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x6870f4cf
mov eax, ecx
mov edi, dword [ecx + 0x208]
shr eax, 0x10
je 0x6870f82c
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
mov dword [ebp - 0x35c], ecx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov ecx, dword [ebp - 0x35c]
mov ebx, eax
sub esp, 8
mov eax, 0x6871bacd
test ebx, ebx
jne 0x6870f75b
cmp word [ecx], 0
je 0x6870f95b
lea esi, [esi]
mov eax, ebx
lea ebx, [ebx + 1]
cmp word [ecx + eax*2 + 2], 0
jne 0x6870f680
mov edx, 0x224c
mov dword [ebp - 0x35c], ecx
lea ebx, [ebp - 0x34a]
mov word [ebp - 0x34c], dx
mov dword [ebp - 0x360], edi
jmp 0x6870f6e3
cmp cx, 9
je 0x6870f7e6
cmp cx, 0xa
jne 0x6870f8c4
mov edi, 0x6e5c
add ebx, 2
mov word [ebx - 2], di
sub eax, 1
jb 0x6870f926
lea ecx, [ebp - 0x22a]
cmp ecx, ebx
jb 0x6870f717
movzx ecx, word [esi]
add esi, 2
cmp cx, 0xd
je 0x6870f7d3
jbe 0x6870f6b0
cmp cx, 0x22
je 0x6870f7f7
cmp cx, 0x5c
jne 0x6870f8b1
mov edx, 0x5c5c
add ebx, 2
mov word [ebx - 2], dx
jmp 0x6870f6d0
mov ecx, dword [ebp - 0x35c]
mov edi, dword [ebp - 0x360]
mov byte [ebx], 0x22
test eax, eax
je 0x6870f935
mov byte [ebx + 3], 0x2e
mov eax, 0x2e2e
mov word [ebx + 1], ax
lea eax, [ebx + 4]
mov byte [eax], 0
lea eax, [ebp - 0x34c]
mov dword [ebp - 0x35c], ecx
mov dword [esp], eax
call sym.___wine_dbg_strdup
mov ecx, dword [ebp - 0x35c]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], eax
mov dword [ebp - 0x35c], ecx
mov dword [esp + 0xc], str.found__p__s:__p_n
mov dword [esp + 8], str.MSSTYLES_LoadBitmap
mov dword [esp + 4], 0x68719058
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
mov ecx, dword [ebp - 0x35c]
jmp 0x6870f335
movzx ebx, word [str._r__]
add eax, 2
mov word [eax - 2], bx
jmp 0x6870f570
mov ebx, 0x745c
add eax, 2
mov word [eax - 2], bx
jmp 0x6870f570
movzx ebx, word [0x6871c0ca]
add eax, 2
mov word [eax - 2], bx
jmp 0x6870f570
movzx edi, word [str._r__]
add ebx, 2
mov word [ebx - 2], di
jmp 0x6870f6d0
mov ecx, 0x745c
add ebx, 2
mov word [ebx - 2], cx
jmp 0x6870f6d0
movzx edi, word [0x6871c0ca]
add ebx, 2
mov word [ebx - 2], di
jmp 0x6870f6d0
mov esi, dword [ebp - 0x35c]
xor eax, eax
jmp 0x6870f48d
mov dword [esp + 4], esi
mov dword [esp], 0x6871bac0
call sym._wine_dbg_sprintf.constprop.0_1
jmp 0x6870f5f4
mov dword [esp + 4], ecx
mov dword [ebp - 0x35c], ecx
mov dword [esp], 0x6871bac0
call sym._wine_dbg_sprintf.constprop.0_1
mov ecx, dword [ebp - 0x35c]
jmp 0x6870f75b
lea esi, [ecx - 0x20]
cmp si, 0x5e
ja 0x6870f860
mov byte [eax], cl
add eax, 1
jmp 0x6870f570
mov esi, ecx
mov byte [eax], 0x5c
add eax, 5
shr si, 0xc
movzx esi, si
movzx ebx, byte [esi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov esi, ecx
shr si, 8
and esi, 0xf
mov byte [eax - 4], bl
movzx ebx, byte [esi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov esi, ecx
and ecx, 0xf
shr si, 4
movzx ecx, byte [ecx + str.0123456789abcdefMSSTYLES_OpenThemeFile]
and esi, 0xf
mov byte [eax - 3], bl
movzx ebx, byte [esi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov byte [eax - 1], cl
mov byte [eax - 2], bl
jmp 0x6870f570
lea edi, [ecx - 0x20]
cmp di, 0x5e
ja 0x6870f8c4
mov byte [ebx], cl
add ebx, 1
jmp 0x6870f6d0
mov edi, ecx
mov byte [ebx], 0x5c
add ebx, 5
shr di, 0xc
movzx edi, di
movzx edx, byte [edi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov edi, ecx
shr di, 8
and edi, 0xf
mov byte [ebx - 4], dl
movzx edx, byte [edi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov edi, ecx
and ecx, 0xf
shr di, 4
movzx ecx, byte [ecx + str.0123456789abcdefMSSTYLES_OpenThemeFile]
and edi, 0xf
mov byte [ebx - 3], dl
movzx edx, byte [edi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov byte [ebx - 1], cl
mov byte [ebx - 2], dl
jmp 0x6870f6d0
mov byte [eax], 0x22
mov esi, dword [ebp - 0x360]
lea edx, [eax + 1]
jmp 0x6870f5e3
mov ecx, dword [ebp - 0x35c]
mov edi, dword [ebp - 0x360]
mov byte [ebx], 0x22
lea eax, [ebx + 1]
jmp 0x6870f73e
mov eax, 0x224c
mov byte [ebp - 0x34a], 0x22
lea edx, [ebp - 0x349]
mov word [ebp - 0x34c], ax
jmp 0x6870f5e3
mov ebx, 0x224c
mov byte [ebp - 0x34a], 0x22
lea eax, [ebp - 0x349]
mov word [ebp - 0x34c], bx
jmp 0x6870f73e