Function at 0x10001300
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x100
mov esi, esp
mov eax, 0x10
call fcn.100e8780
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, 8
mov dword [esi + 0xa4], eax
mov eax, ecx
call fcn.100e8780
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, 0x14
mov dword [esi + 0xa0], eax
mov eax, ecx
call fcn.100e8780
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, 4
mov dword [esi + 0x9c], eax
mov eax, ecx
call fcn.100e8780
mov eax, esp
sub esp, 4
mov ecx, esp
lea edx, [esi + 0xe8]
mov dword [ecx], edx
mov ecx, dword [sym.imp.USER32.dll_CreateIconIndirect]
mov dword [esi + 0x98], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0x75f
mov dword [ecx], 0x7935a6
mov ecx, dword [sym.imp.GDI32.dll_ResizePalette]
mov dword [esi + 0x94], eax
call ecx
sub esp, 8
mov ecx, esp
lea edx, [esi + 0xe0]
mov dword [ecx + 4], edx
mov dword [ecx], 0xd1f7a4
mov ecx, dword [sym.imp.USER32.dll_ScreenToClient]
mov dword [esi + 0x90], eax
call ecx
mov dword [esi + 0xdc], 0x225
mov ecx, dword [esi + 0xd8]
mov dword [esi + 0xd0], ecx
sub esp, 0x14
mov ecx, esp
lea edx, [esi + 0xdc]
mov dword [ecx + 0x10], edx
mov edx, dword [esi + 0xd0]
mov dword [ecx + 0xc], edx
mov dword [ecx + 8], 0x225
mov dword [ecx + 4], 0x1f
mov dword [ecx], 0x31e43e
mov ecx, dword [sym.imp.KERNEL32.dll_FillConsoleOutputAttribute]
mov dword [esi + 0x8c], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx], 0xccd31a
mov ecx, dword [sym.imp.GDI32.dll_BeginPath]
mov dword [esi + 0x88], eax
call ecx
mov dword [esi + 0xcc], 0
mov dword [esi + 0x84], eax
jmp 0x1000155b
mov eax, dword [esi + 0xc8]
mov dword [esi + 0x80], eax
mov eax, 0xaaaaaaab
mov ecx, dword [esi + 0x80]
mov dword [esi + 0x7c], eax
mov eax, ecx
mov edx, dword [esi + 0x7c]
mul edx
shr edx, 3
imul eax, edx, 0xc
sub ecx, eax
mov eax, ecx
sub eax, 6
mov dword [esi + 0x78], ecx
mov dword [esi + 0x74], eax
je 0x100015f3
jmp 0x1000147d
mov eax, dword [esi + 0x78]
sub eax, 9
mov dword [esi + 0x70], eax
je 0x10001526
jmp 0x1000148e
jmp 0x10001490
mov eax, dword [esi + 0xc8]
add eax, 1
mov dword [esi + 0xc8], eax
jmp 0x100015d7
sub esp, 4
mov eax, esp
mov dword [eax], 0x35b
mov eax, dword [sym.imp.KERNEL32.dll_SetThreadExecutionState]
call eax
mov dword [esi + 0x6c], eax
jmp 0x10001817
sub esp, 4
mov eax, esp
mov dword [eax], 0xa415c8
mov eax, dword [sym.imp.GDI32.dll_StartPage]
call eax
sub esp, 0xc
mov ecx, esp
mov dword [ecx + 8], 0x67e
mov dword [ecx + 4], 0x707a82
mov dword [ecx], 0x7e03d3
mov ecx, dword [sym.imp.USER32.dll_GetUpdateRgn]
mov dword [esi + 0x68], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0x14
mov dword [ecx], 0xffad6c
mov ecx, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [esi + 0x64], eax
call ecx
mov ecx, dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [esi + 0x60], eax
call ecx
mov dword [esi + 0x5c], eax
jmp 0x10001800
sub esp, 0xc
mov eax, esp
mov ecx, dword [esi + 0xa4]
mov dword [eax], ecx
mov dword [eax + 8], 0x147
mov dword [eax + 4], 0x803
mov eax, dword [sym.imp.USER32.dll_AdjustWindowRect]
call eax
mov ecx, dword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov dword [esi + 0x58], eax
call ecx
mov dword [esi + 0x54], eax
jmp 0x1000148e
cmp dword [esi + 0xcc], 0x103
setne al
mov byte [esi + 0x53], al
mov al, byte [esi + 0x53]
test al, 1
jne 0x10001577
jmp 0x1000182d
sub esp, 4
mov eax, esp
mov dword [eax], 0xe99619
mov eax, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call eax
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0xc49
mov dword [ecx], 0x28a1f
mov ecx, dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
mov dword [esi + 0x4c], eax
call ecx
sub esp, 0xc
mov ecx, esp
mov dword [ecx + 8], 0xdf7acf
mov dword [ecx + 4], 0x98d4e9
mov dword [ecx], 0x32e
mov ecx, dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [esi + 0x48], eax
call ecx
mov dword [esi + 0xc8], 0
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0xc8]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x40]
cmp eax, 0x1eb
jne 0x10001441
jmp 0x1000168d
lea eax, [esi + 0xb0]
mov ecx, eax
sub esp, 0xc
mov edx, esp
mov dword [edx + 8], 0xd6e
mov dword [edx + 4], 0xd2129
mov dword [edx], 0x9dd2aa
mov edx, dword [sym.imp.USER32.dll_InvalidateRgn]
mov dword [esi + 0x3c], ecx
mov dword [esi + 0x38], eax
call edx
xor ecx, ecx
mov edx, 0x14
sub esp, 0xc
mov edi, dword [esi + 0x3c]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
mov dword [esi + 0x34], eax
mov dword [esi + 0x30], ecx
mov dword [esi + 0x2c], edx
call fcn.100e87b0
add esp, 0xc
mov dword [esi + 0xac], 0x5c8
sub esp, 0x10
mov eax, esp
lea ecx, [esi + 0xac]
mov dword [eax + 0xc], ecx
mov ecx, dword [esi + 0x38]
mov dword [eax + 8], ecx
mov dword [eax + 4], 0x722
mov dword [eax], 0xc744e2
mov eax, dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
call eax
mov dword [esi + 0x28], eax
jmp 0x10001526
mov eax, dword [esi + 0xcc]
mov ecx, 0xcc29786d
mov dword [esi + 0x24], eax
mul ecx
shr edx, 8
imul eax, edx, 0x141
mov ecx, dword [esi + 0x24]
sub ecx, eax
mov eax, ecx
sub eax, 8
mov dword [esi + 0x20], ecx
mov dword [esi + 0x1c], eax
je 0x10001766
jmp 0x100016be
mov eax, dword [esi + 0x20]
sub eax, 0x3d
mov dword [esi + 0x18], eax
jne 0x100017de
jmp 0x100016cf
sub esp, 4
mov eax, esp
mov ecx, dword [esi + 0xa0]
mov dword [eax], ecx
mov eax, dword [sym.imp.ADVAPI32.dll_AllocateLocallyUniqueId]
call eax
sub esp, 0x24
mov ecx, esp
mov dword [ecx + 0x20], 0x600
mov dword [ecx + 0x1c], 0x8c89df
mov dword [ecx + 0x18], 0x600
mov dword [ecx + 0x14], 0xeb9
mov dword [ecx + 0x10], 0x87e
mov dword [ecx + 0xc], 0xf02a6
mov dword [ecx + 8], 0x87e
mov dword [ecx + 4], 0x87e
mov dword [ecx], 0xa71142
mov ecx, dword [sym.imp.USER32.dll_DrawIconEx]
mov dword [esi + 0x14], eax
call ecx
sub esp, 0x14
mov ecx, esp
mov dword [ecx + 0x10], 0xa4f
mov dword [ecx + 0xc], 0xa6c
mov dword [ecx + 8], 0xa4f
mov dword [ecx + 4], 0xbba
mov dword [ecx], 0xc1d1e3
mov ecx, dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [esi + 0x10], eax
call ecx
mov dword [esi + 0xc], eax
sub esp, 0x18
mov eax, esp
mov ecx, dword [esi + 0x9c]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], 0x404
mov dword [eax + 0xc], 0xb0e
mov dword [eax + 8], 0xa30
mov dword [eax + 4], 0xa30
mov dword [eax], 0xcd3996
mov eax, dword [sym.imp.KERNEL32.dll_LockFileEx]
call eax
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0xe8c
mov dword [ecx], 0x79e
mov ecx, dword [sym.imp.ole32.dll_CoCancelCall]
mov dword [esi + 8], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0x3a7404
mov dword [ecx], 0x3a7404
mov ecx, dword [sym.imp.ADVAPI32.dll_RegOverridePredefKey]
mov dword [esi + 4], eax
call ecx
mov dword [esi], eax
jmp 0x100014a6
mov eax, dword [esi + 0x98]
mov dword [eax], 0
jmp 0x100017ec
mov eax, dword [esi + 0x98]
cmp dword [eax], 0xa
jne 0x100014c0
jmp 0x10001812
mov eax, dword [esi + 0x98]
mov ecx, dword [eax]
add ecx, 1
mov dword [eax], ecx
jmp 0x100017ec
jmp 0x100014a6
mov eax, dword [esi + 0xcc]
add eax, 1
mov dword [esi + 0xcc], eax
jmp 0x1000155b
lea esp, [ebp - 8]
pop esi
pop edi
pop ebp
ret