Function at 0x1000137e
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x240
mov esi, esp
lea eax, [esi + 0xc0]
mov dword [esi + 0xbc], eax
xor eax, eax
lea ecx, [esi + 0xc8]
lea edx, [esi + 0x108]
lea edi, [esi + 0x120]
lea ebx, [esi + 0x1d0]
mov dword [esi + 0xb8], eax
mov eax, 0xc
mov dword [esi + 0xb4], ebx
mov dword [esi + 0xb0], ecx
mov dword [esi + 0xac], edx
mov dword [esi + 0xa8], edi
call fcn.100d2500
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, 4
mov dword [esi + 0xa4], eax
mov eax, ecx
mov dword [esi + 0xa0], ecx
call fcn.100d2500
mov eax, esp
mov ecx, dword [esi + 0xa0]
mov dword [esi + 0x9c], eax
mov eax, ecx
call fcn.100d2500
mov eax, esp
mov ecx, 8
mov dword [esi + 0x98], eax
mov eax, ecx
call fcn.100d2500
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, eax
mov edx, dword [esi + 0xb4]
mov edi, dword [esi + 0xa8]
mov ebx, dword [esi + 0xb0]
mov dword [esi + 0x94], eax
mov eax, dword [esi + 0xb8]
mov dword [esi + 0x90], eax
mov dword [esi + 0x8c], ecx
mov dword [esi + 0x88], edx
mov dword [esi + 0x84], edi
mov dword [esi + 0x80], ebx
jmp 0x100014a7
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
sub esp, 8
mov eax, esp
mov dword [eax + 4], 0x9b5
mov dword [eax], str.7HfmVKY_5_CTtr
mov eax, dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
call eax
mov ecx, dword [esi + 0x7c]
add ecx, 1
cmp ecx, 0x102
mov dword [esi + 0x78], eax
mov dword [esi + 0x90], ecx
je 0x1000146c
mov eax, dword [esi + 0x90]
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0x869
mov dword [ecx], 0x79996d
mov ecx, dword [sym.imp.USER32.dll_SetWindowContextHelpId]
mov dword [esi + 0x7c], eax
call ecx
mov ecx, dword [sym.imp.GDI32.dll_GdiFlush]
mov dword [esi + 0x74], eax
call ecx
xor ecx, ecx
mov edx, 0x6c
sub esp, 0xc
mov edi, dword [esi + 0x88]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x6c
mov dword [esi + 0x70], eax
mov dword [esi + 0x6c], ecx
mov dword [esi + 0x68], edx
call sub.msvcrt.dll_memset
add esp, 0xc
sub esp, 0xc
mov eax, esp
lea ecx, [esi + 0x1d0]
mov dword [eax + 8], ecx
mov dword [eax + 4], 0x59b
mov dword [eax], 0xd47f63
mov eax, dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx], 0xdb8f85
mov ecx, dword [sym.imp.USER32.dll_LockWindowUpdate]
mov dword [esi + 0x64], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0x1b7997
mov dword [ecx], 0x1b7997
mov ecx, dword [sym.imp.KERNEL32.dll_DeleteTimerQueueEx]
mov dword [esi + 0x60], eax
call ecx
xor ecx, ecx
mov dword [esi + 0x5c], eax
mov dword [esi + 0x58], ecx
mov eax, dword [esi + 0x58]
mov ecx, 0x38e38e39
mov dword [esi + 0x54], eax
mul ecx
shr edx, 2
imul eax, edx, 0x12
mov ecx, dword [esi + 0x54]
sub ecx, eax
mov eax, ecx
sub eax, 9
mov dword [esi + 0x50], ecx
mov dword [esi + 0x4c], eax
je 0x100015b1
jmp 0x1000158d
mov eax, dword [esi + 0x50]
sub eax, 4
mov dword [esi + 0x48], eax
jne 0x100015d0
jmp 0x1000159a
sub esp, 4
mov eax, esp
lea ecx, [esi + 0x120]
mov dword [eax], ecx
mov eax, dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
call eax
mov dword [esi + 0x44], eax
sub esp, 8
mov eax, esp
mov dword [eax + 4], 0x3f1
mov dword [eax], 0x5c48c5
mov eax, dword [sym.imp.USER32.dll_GetClassWord]
call eax
mov word [esi + 0x42], ax
jmp 0x100015d0
mov eax, dword [esi + 0x54]
add eax, 1
cmp eax, 0x7e
mov dword [esi + 0x58], eax
jne 0x10001566
xor eax, eax
mov ecx, dword [esi + 0xac]
mov dword [ecx + 0x10], 0
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
sub esp, 0xc
mov edx, esp
mov dword [edx + 8], ecx
mov dword [edx + 4], 0xeea
mov dword [edx], 0x39aa02
mov edx, dword [sym.imp.ADVAPI32.dll_SetServiceObjectSecurity]
mov dword [esi + 0x3c], eax
call edx
xor ecx, ecx
mov edx, dword [esi + 0x7c]
sub edx, 5
mov dword [esi + 0x38], eax
mov dword [esi + 0x34], ecx
mov dword [esi + 0x30], edx
je 0x100016bc
jmp 0x10001641
mov eax, dword [esi + 0x7c]
sub eax, 0x3a
mov ecx, dword [esi + 0x34]
mov dword [esi + 0x2c], eax
mov dword [esi + 0x28], ecx
jne 0x10001767
jmp 0x10001658
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], 0x592
mov dword [eax + 4], 0x5b3236
mov dword [eax], 0x246339
mov eax, dword [sym.imp.GDI32.dll_SelectPalette]
call eax
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0x42
mov dword [ecx], 0xe02763
mov ecx, dword [sym.imp.USER32.dll_GetGuiResources]
mov dword [esi + 0x24], eax
call ecx
sub esp, 0xc
mov ecx, esp
mov dword [ecx + 8], 0xe9f
mov dword [ecx + 4], 0x8b5
mov dword [ecx], 0x9d5bd2
mov ecx, dword [sym.imp.KERNEL32.dll_PrepareTape]
mov dword [esi + 0x20], eax
call ecx
mov dword [esi + 0x1c], eax
mov eax, 0x743eb1
sub esp, 4
mov ecx, esp
mov dword [ecx], 0x97ef49
mov ecx, dword [sym.imp.SHLWAPI.dll_SHCreateShellPalette]
mov dword [esi + 0x18], eax
call ecx
sub esp, 8
mov ecx, esp
lea edx, [esi + 0xc8]
mov dword [ecx + 4], edx
mov dword [ecx], 0x2fea1c
mov ecx, dword [sym.imp.KERNEL32.dll_GetCommProperties]
mov dword [esi + 0x14], eax
call ecx
mov dword [esi + 0xc4], 0
mov dword [esi + 0xc0], 0
mov ecx, dword [esi + 0x9c]
mov edx, dword [esi + 0x18]
mov dword [ecx], edx
sub esp, 0x24
mov edi, esp
mov dword [edi + 0x20], ecx
mov ebx, dword [esi + 0xbc]
mov dword [edi + 0x1c], ebx
mov ecx, dword [esi + 0xa4]
mov dword [edi + 0x14], ecx
mov dword [edi + 0xc], ebx
mov dword [edi + 0x18], 0x4db
mov dword [edi + 0x10], 0x2e1
mov dword [edi + 8], 0x58a
mov dword [edi + 4], 0x4db
mov dword [edi], 0x3b14b0
mov edi, dword [sym.imp.ADVAPI32.dll_CreateRestrictedToken]
mov dword [esi + 0x10], eax
call edi
mov dword [esi + 0xc], eax
jmp 0x10001474
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x98]
mov dword [ecx], 0xec9
sub esp, 8
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 0xd055d6
mov edx, dword [sym.imp.KERNEL32.dll_GetCommMask]
mov dword [esi + 8], eax
call edx
mov ecx, dword [esi + 0x94]
mov dword [ecx + 4], 0
mov dword [ecx], 0
sub esp, 4
mov edx, esp
mov edi, dword [esi + 0x8c]
mov dword [edx], edi
mov edx, dword [sym.imp.ADVAPI32.dll_IsValidAcl]
mov dword [esi + 4], eax
call edx
mov ecx, dword [esi + 8]
add ecx, 1
cmp ecx, 0xa
mov dword [esi], eax
mov dword [esi + 0x28], ecx
je 0x10001474
jmp 0x10001767