Function at 0x10001110
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x160
mov esi, esp
mov eax, 4
mov dword [esi + 0x11c], eax
call fcn.101fc320
mov eax, esp
mov ecx, dword [esi + 0x11c]
mov dword [esi + 0x118], eax
mov eax, ecx
call fcn.101fc320
mov eax, esp
mov ecx, 0x250
mov dword [esi + 0x114], eax
mov eax, ecx
call fcn.101fc320
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0x27f
mov dword [ecx], 0xd8120b
mov ecx, dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [esi + 0x110], eax
call ecx
mov byte [esi + 0x15f], 3
sub esp, 0x1c
mov ecx, esp
lea edx, [esi + 0x15f]
mov dword [ecx], edx
mov dword [ecx + 0x18], 0x4b8
mov dword [ecx + 0x14], 0x46e
mov dword [ecx + 0x10], 0x46e
mov dword [ecx + 0xc], 0xf69
mov dword [ecx + 8], 0x71a
mov dword [ecx + 4], 0xf69
mov ecx, dword [sym.imp.USER32.dll_CreateIconFromResourceEx]
mov dword [esi + 0x10c], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx], 0
mov ecx, dword [sym.imp.KERNEL32.dll_IsDBCSLeadByte]
mov dword [esi + 0x108], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx], 0xc51164
mov ecx, dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [esi + 0x104], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0x55f126
mov dword [ecx], 0x278
mov ecx, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esi + 0x100], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx], 0xbc4
mov ecx, dword [sym.imp.USER32.dll_AllowSetForegroundWindow]
mov dword [esi + 0xfc], eax
call ecx
mov dword [esi + 0x158], 0x4bc
sub esp, 8
mov ecx, esp
lea edx, [esi + 0x158]
mov dword [ecx + 4], edx
mov dword [ecx], 0x2663fd
mov ecx, dword [sym.imp.KERNEL32.dll_IsWow64Process]
mov dword [esi + 0xf8], eax
call ecx
xor ecx, ecx
mov edx, dword [esi + 0x110]
mov dword [esi + 0xf4], eax
mov dword [esi + 0xf0], edx
mov dword [esi + 0xec], ecx
mov eax, dword [esi + 0xec]
mov dword [esi + 0x154], 0x5ede3
sub esp, 0x10
mov ecx, esp
lea edx, [esi + 0x154]
mov dword [ecx + 0xc], edx
mov dword [ecx + 8], 0x3ad
mov dword [ecx + 4], 0x42f
mov dword [ecx], 0xd299f1
mov ecx, dword [sym.imp.ADVAPI32.dll_CryptGenKey]
mov dword [esi + 0xe8], eax
call ecx
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 0xc], 0x429
mov dword [ecx + 8], 0x8aeed7
mov dword [ecx + 4], 0xcb10f2
mov dword [ecx], 0xcb10f2
mov ecx, dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
mov dword [esi + 0xe4], eax
call ecx
sub esp, 8
mov ecx, esp
lea edx, [esi + 0x140]
mov dword [ecx + 4], edx
mov dword [ecx], 0xd98c38
mov ecx, dword [sym.imp.KERNEL32.dll_GetCommTimeouts]
mov dword [esi + 0xe0], eax
call ecx
mov word [esi + 0x13e], 0x1a
mov dword [esi + 0x138], 0x295
sub esp, 0x1c
mov ecx, esp
lea edx, [esi + 0x130]
mov dword [ecx + 0x18], edx
lea edx, [esi + 0x138]
mov dword [ecx + 0x14], edx
mov dword [ecx + 0x10], edx
lea edx, [esi + 0x13e]
mov dword [ecx + 4], edx
mov dword [ecx + 0xc], 0x295
mov dword [ecx + 8], 0xc8e
mov dword [ecx], 0x7e5b81
mov ecx, dword [sym.imp.GDI32.dll_GetTextExtentExPointI]
mov dword [esi + 0xdc], eax
call ecx
xor ecx, ecx
mov dword [esi + 0xd8], eax
mov dword [esi + 0xd4], ecx
jmp 0x10001423
sub esp, 4
mov eax, esp
lea ecx, [esi + 0x120]
mov dword [eax], ecx
mov eax, dword [sym.imp.KERNEL32.dll_GetSystemTime]
call eax
mov eax, dword [esi + 0xe8]
sub eax, 0x12
mov dword [esi + 0xd0], eax
je 0x100013e6
jmp 0x1000139f
mov eax, dword [esi + 0xe8]
sub eax, 0x4e
mov dword [esi + 0xcc], eax
je 0x10001a7c
jmp 0x1000148e
lea esp, [ebp - 8]
pop esi
pop edi
pop ebp
ret
mov eax, dword [esi + 0xc8]
add eax, 1
mov dword [esi + 0xc4], eax
mov eax, dword [esi + 0xc4]
cmp eax, 0x253
mov dword [esi + 0xd4], eax
je 0x10001378
jmp 0x10001423
sub esp, 8
mov eax, esp
mov dword [eax + 4], 0xf1
mov dword [eax], 0x998790
mov eax, dword [sym.imp.USER32.dll_GetGuiResources]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx], 0x546307
mov ecx, dword [sym.imp.USER32.dll_DestroyCursor]
mov dword [esi + 0xc0], eax
call ecx
mov dword [esi + 0xbc], eax
jmp 0x10001ae5
mov eax, dword [esi + 0xd4]
mov ecx, 0xaf286bcb
mov dword [esi + 0xc8], eax
mul ecx
mov eax, dword [esi + 0xc8]
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 4
imul eax, eax, 0x13
mov ecx, dword [esi + 0xc8]
sub ecx, eax
mov dword [esi + 0xb8], ecx
je 0x10001471
jmp 0x1000145a
mov eax, dword [esi + 0xb8]
sub eax, 0xb
mov dword [esi + 0xb4], eax
jne 0x100013c0
jmp 0x10001471
sub esp, 4
mov eax, esp
mov dword [eax], 0xc9
mov eax, dword [sym.imp.KERNEL32.dll_SetConsoleCP]
call eax
mov dword [esi + 0xb0], eax
jmp 0x100013c0
mov eax, dword [esi + 0x118]
mov byte [eax], 7
mov ecx, dword [esi + 0x114]
mov word [ecx], 0x17
sub esp, 0x18
mov edx, esp
mov dword [edx + 0xc], ecx
mov dword [edx + 8], eax
mov dword [edx + 0x14], 0x8d7243
mov dword [edx + 0x10], 0xbd8
mov dword [edx + 4], 0xbd8
mov dword [edx], 0xbd8
mov edx, dword [sym.imp.USER32.dll_ToAsciiEx]
call edx
xor ecx, ecx
mov edx, 0x250
sub esp, 0xc
mov edi, dword [esi + 0xf0]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x250
mov dword [esi + 0xac], eax
mov dword [esi + 0xa8], ecx
mov dword [esi + 0xa4], edx
call fcn.101fc350
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0x110]
mov dword [eax + 4], ecx
mov dword [eax], 0x9cea9e
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileW]
call eax
mov ecx, dword [esi + 0x118]
mov byte [ecx], 7
mov edx, dword [esi + 0x114]
mov word [edx], 0x17
sub esp, 0x18
mov edi, esp
mov dword [edi + 0xc], edx
mov dword [edi + 8], ecx
mov dword [edi + 0x14], 0x8d7243
mov dword [edi + 0x10], 0xbd8
mov dword [edi + 4], 0xbd8
mov dword [edi], 0xbd8
mov edi, dword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [esi + 0xa0], eax
call edi
xor ecx, ecx
mov edx, 0x250
sub esp, 0xc
mov edi, dword [esi + 0xf0]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x250
mov dword [esi + 0x9c], eax
mov dword [esi + 0x98], ecx
mov dword [esi + 0x94], edx
call fcn.101fc350
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0x110]
mov dword [eax + 4], ecx
mov dword [eax], 0x9cea9e
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileW]
call eax
mov ecx, dword [esi + 0x118]
mov byte [ecx], 7
mov edx, dword [esi + 0x114]
mov word [edx], 0x17
sub esp, 0x18
mov edi, esp
mov dword [edi + 0xc], edx
mov dword [edi + 8], ecx
mov dword [edi + 0x14], 0x8d7243
mov dword [edi + 0x10], 0xbd8
mov dword [edi + 4], 0xbd8
mov dword [edi], 0xbd8
mov edi, dword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [esi + 0x90], eax
call edi
xor ecx, ecx
mov edx, 0x250
sub esp, 0xc
mov edi, dword [esi + 0xf0]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x250
mov dword [esi + 0x8c], eax
mov dword [esi + 0x88], ecx
mov dword [esi + 0x84], edx
call fcn.101fc350
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0x110]
mov dword [eax + 4], ecx
mov dword [eax], 0x9cea9e
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileW]
call eax
mov ecx, dword [esi + 0x118]
mov byte [ecx], 7
mov edx, dword [esi + 0x114]
mov word [edx], 0x17
sub esp, 0x18
mov edi, esp
mov dword [edi + 0xc], edx
mov dword [edi + 8], ecx
mov dword [edi + 0x14], 0x8d7243
mov dword [edi + 0x10], 0xbd8
mov dword [edi + 4], 0xbd8
mov dword [edi], 0xbd8
mov edi, dword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [esi + 0x80], eax
call edi
xor ecx, ecx
mov edx, 0x250
sub esp, 0xc
mov edi, dword [esi + 0xf0]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x250
mov dword [esi + 0x7c], eax
mov dword [esi + 0x78], ecx
mov dword [esi + 0x74], edx
call fcn.101fc350
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0x110]
mov dword [eax + 4], ecx
mov dword [eax], 0x9cea9e
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileW]
call eax
mov ecx, dword [esi + 0x118]
mov byte [ecx], 7
mov edx, dword [esi + 0x114]
mov word [edx], 0x17
sub esp, 0x18
mov edi, esp
mov dword [edi + 0xc], edx
mov dword [edi + 8], ecx
mov dword [edi + 0x14], 0x8d7243
mov dword [edi + 0x10], 0xbd8
mov dword [edi + 4], 0xbd8
mov dword [edi], 0xbd8
mov edi, dword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [esi + 0x70], eax
call edi
xor ecx, ecx
mov edx, 0x250
sub esp, 0xc
mov edi, dword [esi + 0xf0]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x250
mov dword [esi + 0x6c], eax
mov dword [esi + 0x68], ecx
mov dword [esi + 0x64], edx
call fcn.101fc350
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0x110]
mov dword [eax + 4], ecx
mov dword [eax], 0x9cea9e
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileW]
call eax
mov ecx, dword [esi + 0x118]
mov byte [ecx], 7
mov edx, dword [esi + 0x114]
mov word [edx], 0x17
sub esp, 0x18
mov edi, esp
mov dword [edi + 0xc], edx
mov dword [edi + 8], ecx
mov dword [edi + 0x14], 0x8d7243
mov dword [edi + 0x10], 0xbd8
mov dword [edi + 4], 0xbd8
mov dword [edi], 0xbd8
mov edi, dword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [esi + 0x60], eax
call edi
xor ecx, ecx
mov edx, 0x250
sub esp, 0xc
mov edi, dword [esi + 0xf0]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x250
mov dword [esi + 0x5c], eax
mov dword [esi + 0x58], ecx
mov dword [esi + 0x54], edx
call fcn.101fc350
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0x110]
mov dword [eax + 4], ecx
mov dword [eax], 0x9cea9e
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileW]
call eax
mov ecx, dword [esi + 0x118]
mov byte [ecx], 7
mov edx, dword [esi + 0x114]
mov word [edx], 0x17
sub esp, 0x18
mov edi, esp
mov dword [edi + 0xc], edx
mov dword [edi + 8], ecx
mov dword [edi + 0x14], 0x8d7243
mov dword [edi + 0x10], 0xbd8
mov dword [edi + 4], 0xbd8
mov dword [edi], 0xbd8
mov edi, dword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [esi + 0x50], eax
call edi
xor ecx, ecx
mov edx, 0x250
sub esp, 0xc
mov edi, dword [esi + 0xf0]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x250
mov dword [esi + 0x4c], eax
mov dword [esi + 0x48], ecx
mov dword [esi + 0x44], edx
call fcn.101fc350
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0x110]
mov dword [eax + 4], ecx
mov dword [eax], 0x9cea9e
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileW]
call eax
mov ecx, dword [esi + 0x118]
mov byte [ecx], 7
mov edx, dword [esi + 0x114]
mov word [edx], 0x17
sub esp, 0x18
mov edi, esp
mov dword [edi + 0xc], edx
mov dword [edi + 8], ecx
mov dword [edi + 0x14], 0x8d7243
mov dword [edi + 0x10], 0xbd8
mov dword [edi + 4], 0xbd8
mov dword [edi], 0xbd8
mov edi, dword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [esi + 0x40], eax
call edi
xor ecx, ecx
mov edx, 0x250
sub esp, 0xc
mov edi, dword [esi + 0xf0]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x250
mov dword [esi + 0x3c], eax
mov dword [esi + 0x38], ecx
mov dword [esi + 0x34], edx
call fcn.101fc350
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0x110]
mov dword [eax + 4], ecx
mov dword [eax], 0x9cea9e
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileW]
call eax
mov ecx, dword [esi + 0x118]
mov byte [ecx], 7
mov edx, dword [esi + 0x114]
mov word [edx], 0x17
sub esp, 0x18
mov edi, esp
mov dword [edi + 0xc], edx
mov dword [edi + 8], ecx
mov dword [edi + 0x14], 0x8d7243
mov dword [edi + 0x10], 0xbd8
mov dword [edi + 4], 0xbd8
mov dword [edi], 0xbd8
mov edi, dword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [esi + 0x30], eax
call edi
xor ecx, ecx
mov edx, 0x250
sub esp, 0xc
mov edi, dword [esi + 0xf0]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x250
mov dword [esi + 0x2c], eax
mov dword [esi + 0x28], ecx
mov dword [esi + 0x24], edx
call fcn.101fc350
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0x110]
mov dword [eax + 4], ecx
mov dword [eax], 0x9cea9e
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileW]
call eax
mov ecx, dword [esi + 0x118]
mov byte [ecx], 7
mov edx, dword [esi + 0x114]
mov word [edx], 0x17
sub esp, 0x18
mov edi, esp
mov dword [edi + 0xc], edx
mov dword [edi + 8], ecx
mov dword [edi + 0x14], 0x8d7243
mov dword [edi + 0x10], 0xbd8
mov dword [edi + 4], 0xbd8
mov dword [edi], 0xbd8
mov edi, dword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [esi + 0x20], eax
call edi
xor ecx, ecx
mov edx, 0x250
sub esp, 0xc
mov edi, dword [esi + 0xf0]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x250
mov dword [esi + 0x1c], eax
mov dword [esi + 0x18], ecx
mov dword [esi + 0x14], edx
call fcn.101fc350
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0x110]
mov dword [eax + 4], ecx
mov dword [eax], 0x9cea9e
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileW]
call eax
mov dword [esi + 0x10], eax
jmp 0x10001ae5
sub esp, 4
mov eax, esp
mov dword [eax], 0xf4ff92
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx], 0x81ab5f
mov ecx, dword [sym.imp.USER32.dll_CopyIcon]
mov dword [esi + 0xc], eax
call ecx
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x14], 0x3d3
mov dword [ecx + 0x10], 0xbbc
mov dword [ecx + 0xc], 0xbbc
mov dword [ecx + 8], 0xbbc
mov dword [ecx + 4], 0xbbc
mov dword [ecx], 0x1c17d0
mov ecx, dword [sym.imp.GDI32.dll_PatBlt]
mov dword [esi + 8], eax
call ecx
mov dword [esi + 4], eax
jmp 0x100013e6
mov eax, dword [esi + 0xe8]
add eax, 1
cmp eax, 0x120
mov dword [esi + 0xec], eax
je 0x100013b9
jmp 0x1000127d