Function at 0x10008aa8
Capabilities:
Enumerate gui resources
Set current directory

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x2b8
mov eax, dword [0x100fe040]
xor eax, esp
mov dword [esp + 0x2b4], eax
cmp byte [0x101000cc], 0
push esi
push edi
jne 0x10009016
push 6
pop ecx
xor eax, eax
mov byte [0x101000cc], 1
lea edi, [esp + 0x24]
rep stosd dword es:[edi], eax
push ecx
lea ecx, [esp + 0x28]
call fcn.1000669d
lea eax, [esp + 0x1f]
mov byte [esp + 0x1f], 0
push eax
lea ecx, [esp + 0x2c]
call fcn.100246f1
mov esi, dword [esp + 0x38]
push esi
call fcn.10045eb0
mov dword [esp], 0x100089b5
push esi
call fcn.10045e30
push 2
push 0x100344d3
push esi
call fcn.10045d30
add esp, 0x14
push 0x100f2254
push esi
call fcn.100462b0
push 0xffffffffffffffff
push esi
call fcn.100464d0
call fcn.100062f3
push dword [esp + 0x38]
and dword [esp + 0x28], 0
mov esi, eax
mov dword [esp + 0x24], 0x100b9a92
call fcn.10045920
add esp, 0x10
lea edx, [esp + 0x14]
mov edi, eax
push esi
mov esi, dword [esp + 0x30]
mov ecx, esi
call fcn.1000633e
push esi
call fcn.10045920
add esp, 0xc
sub eax, edi
test esi, esi
je 0x10008b86
not eax
push eax
push esi
call fcn.100464d0
pop ecx
pop ecx
lea ecx, [esp + 0x24]
call fcn.10006717
xor eax, eax
lea edi, [esp + 0x3c]
stosd dword es:[edi], eax
lea ecx, [esp + 0x3c]
push 7
pop esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
and dword [esp + 0x4c], 0
mov edi, 0x1000
push eax
push edi
mov dword [esp + 0x58], esi
mov word [esp + 0x44], ax
call fcn.1000aa8a
call fcn.10008341
push ecx
push 2
mov ecx, eax
call fcn.1002d106
call fcn.10008341
push ecx
push 4
mov ecx, eax
call fcn.1002d106
cmp dword [esp + 0x50], esi
lea eax, [esp + 0x3c]
push edi
cmova eax, dword [esp + 0x40]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
and dword [esp + 0x28], 0
lea eax, [esp + 0x60]
fld1
lea ecx, [esp + 0x24]
fstp qword [esp + 0x60]
fld qword [0x100f6c58]
xor esi, esi
mov dword [esp + 0x24], eax
inc esi
lea eax, [esp + 0x10]
mov dword [esp + 0x2c], esi
push eax
fstp qword [esp + 0x14]
mov dword [esp + 0x34], esi
call fcn.1000903a
fld qword [0x100f6c60]
lea ecx, [esp + 0x10]
push ecx
mov ecx, eax
fstp qword [esp + 0x14]
call fcn.1000903a
fld qword [0x100f6c70]
lea ecx, [esp + 0x10]
push ecx
mov ecx, eax
fstp qword [esp + 0x14]
call fcn.1000903a
fld qword [0x100f6c78]
lea eax, [esp + 0xa0]
and dword [esp + 0x28], 0
lea ecx, [esp + 0x24]
fstp qword [esp + 0xa0]
fld qword [0x100f6c80]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x10]
push eax
fstp qword [esp + 0x14]
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
call fcn.1000903a
fld qword [0x100f6c88]
lea ecx, [esp + 0x10]
push ecx
fstp qword [esp + 0x14]
mov ecx, eax
call fcn.1000903a
fld qword [0x100f6c90]
lea ecx, [esp + 0x10]
push ecx
mov ecx, eax
fstp qword [esp + 0x14]
call fcn.1000903a
and dword [esp + 0x28], 0
lea eax, [esp + 0x80]
fld1
lea ecx, [esp + 0x24]
fstp qword [esp + 0x80]
fld qword [0x100f6c58]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x10]
push eax
fstp qword [esp + 0x14]
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
call fcn.1000903a
fld qword [0x100f6c58]
lea ecx, [esp + 0x10]
push ecx
mov ecx, eax
fstp qword [esp + 0x14]
call fcn.1000903a
fld qword [0x100f6c60]
lea ecx, [esp + 0x10]
push ecx
mov ecx, eax
fstp qword [esp + 0x14]
call fcn.1000903a
push 2
lea eax, [esp + 0xe4]
fldz
pop ecx
fst qword [eax]
fst qword [eax + 8]
add eax, 0x10
sub ecx, 1
jne 0x10008d2d
xor eax, eax
lea ecx, [esp + 0xc0]
mov word [esp + 0x100], ax
or edi, 0xffffffff
mov byte [esp + 0x1a0], al
fstp st(0)
mov word [esp + 0x1b4], ax
lea eax, [esp + 0x80]
push esi
push eax
mov dword [esp + 0x1c0], edi
call fcn.1002929c
cmp dword [esp + 0x50], 7
lea edx, [esp + 0x3c]
mov esi, dword [esp + 0x4c]
cmova edx, dword [esp + 0x3c]
test esi, esi
je 0x10008dae
lea eax, [esi - 1]
mov ecx, edi
cmp eax, edi
push 0x5c
cmovb ecx, eax
pop eax
lea ecx, [edx + ecx*2]
jmp 0x10008da3
cmp ecx, edx
je 0x10008dae
sub ecx, 2
cmp word [ecx], ax
jne 0x10008d9c
sub ecx, edx
sar ecx, 1
jmp 0x10008db0
mov ecx, edi
xor eax, eax
lea edi, [esp + 0x24]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esp + 0x3c]
and dword [esp + 0x34], 0
and dword [esp + 0x38], 0
cmp esi, ecx
cmovb ecx, esi
cmp dword [esp + 0x50], 7
push ecx
cmova eax, dword [esp + 0x40]
lea ecx, [esp + 0x28]
push eax
call fcn.10024e8d
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x40]
call fcn.1000a022
lea ecx, [esp + 0x24]
call fcn.1000aa5c
cmp dword [esp + 0x50], 7
lea eax, [esp + 0x3c]
cmova eax, dword [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
test eax, eax
jne 0x10008e7b
push 0x100f2258
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov byte [esp + 0x38], al
mov dword [esp + 0x3c], eax
call fcn.1000b2a2
push 0
push ecx
push 3
push 0x100f225c
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0xd4]
call fcn.10024811
mov al, byte [esp + 0x120]
test al, al
je 0x10008eb7
lea ecx, [esp + 0xc0]
call fcn.100023d7
cmp byte [esp + 0x34], 0
jne 0x10008e7b
push dword [esp + 0x38]
call fcn.1006f00c
pop ecx
push str.awebform.resources.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
xor eax, eax
lea edi, [esp + 0x54]
stosd dword es:[edi], eax
xor esi, esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
and dword [esp + 0x58], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x5c], eax
mov eax, 0x7ffffffe
sub eax, dword [esp + 0x4c]
mov dword [esp + 0x54], esi
cmp eax, 1
jb 0x1000902a
jmp 0x10008eef
xor cl, cl
mov byte [esp + 0x123], cl
test al, al
jne 0x10008e5e
test cl, cl
jne 0x10008e5a
call fcn.100017c5
push 0xffffffffffffffff
push dword [eax]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov al, byte [esp + 0x120]
test al, al
jne 0x10008e5e
mov cl, byte [esp + 0x123]
jmp 0x10008ec4
cmp dword [esp + 0x50], 7
lea eax, [esp + 0x3c]
push 1
cmova eax, dword [esp + 0x40]
push ecx
push dword [esp + 0x54]
push eax
push ecx
push dword [esp + 0x24]
lea ecx, [esp + 0x3c]
call fcn.100281b3
push 0x13
push str.updatesproject.wav
lea ecx, [esp + 0x2c]
call fcn.10009f89
push eax
lea ecx, [esp + 0x64]
call fcn.1000a059
lea ecx, [esp + 0x24]
call fcn.1000aa5c
cmp dword [esp + 0x74], 7
lea eax, [esp + 0x60]
lea ecx, [esp + 0x80]
cmova eax, dword [esp + 0x60]
push eax
call fcn.1000a094
push ecx
push ecx
lea edx, [esp + 0x88]
lea ecx, [esp + 0x2c]
call fcn.100089eb
mov edi, eax
xor eax, eax
mov dword [esp + 0x28], eax
lea eax, [esp + 0x5c]
pop ecx
pop ecx
cmp eax, edi
je 0x10008f93
mov ecx, eax
call fcn.1000a2aa
mov eax, dword [edi + 8]
mov esi, dword [edi]
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov dword [esp + 0x20], esi
lea ecx, [esp + 0x24]
call fcn.1000a2aa
lea ecx, [esp + 0x80]
call fcn.1000aa5c
push str.wodCertificateUE.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0x23ed
push 0
lea edi, [eax + 0x1000]
push edi
call fcn.10071590
mov eax, dword [esp + 0x2c]
add esp, 0xc
xor ecx, ecx
mov edx, 0x23ed
add byte [ecx + eax], 0x94
inc ecx
cmp ecx, edx
jb 0x10008fd4
push edx
push esi
push edi
call fcn.10071010
add esp, 0xc
push 0
push edi
call dword [sym.imp.USER32.dll_EnumWindows]
lea ecx, [esp + 0x60]
call fcn.1000aa5c
test esi, esi
je 0x1000900d
mov eax, dword [esp + 0x10]
sub eax, esi
push eax
push esi
call fcn.1002510b
pop ecx
pop ecx
lea ecx, [esp + 0x3c]
call fcn.1000aa5c
mov ecx, dword [esp + 0x2bc]
pop edi
pop esi
xor ecx, esp
call fcn.1006effe
mov esp, ebp
pop ebp
ret
call fcn.100012a3
int3