Function at 0x100183b1
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x94
mov eax, dword [0x10041334]
mov ecx, 0x5a5a
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x68], eax
push edi
mov dword [ebp - 0x6c], edx
mov eax, ebx
mov dword [ebp - 0x30], 0x1ca2
mov dword [ebp - 0x2c], 0x188a
mov dword [ebp - 0x28], 0x1660
mov dword [ebp - 0x24], 0x18d3
mov dword [ebp - 0x20], 0xd48
mov dword [ebp - 0x1c], 0x2518
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ecx
cmp eax, 6
je 0x1001840c
inc eax
cmp eax, 8
jl 0x10018401
mov eax, dword [ebp + eax*4 - 0x30]
mov ecx, 0x4550
xor eax, 0x17
mov dword [ebp - 0x3c], 0x1f8a
mov dword [ebp - 0x80], eax
mov eax, ebx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], 0x1d46
mov dword [ebp - 0x30], 0x1655
mov dword [ebp - 0x2c], 0x137d
mov dword [ebp - 0x28], 0xd12
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], 0x13cf
mov dword [ebp - 0x1c], 0x16d
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0xdd9
cmp eax, 1
je 0x10018469
inc eax
cmp eax, 0xb
jl 0x1001845e
mov eax, dword [ebp + eax*4 - 0x3c]
lea edi, [ebp - 0x1c]
mov esi, str.dev.static
mov dword [ebp - 0x84], eax
mov al, byte [0x1003fb44]
mov byte [ebp - 1], al
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [ebp - 0x1c]
jne 0x100184b8
mov esi, ebx
test al, al
je 0x100184b8
cmp byte [ebp + esi - 0x1c], bl
je 0x100184b8
push str.40545l5p5t5x5
push ecx
mov ecx, str.GdipCreateFromHWND
call fcn.10017970
mov al, byte [esi + 0x1003fb45]
inc esi
pop ecx
pop ecx
cmp al, byte [ebp + esi - 0x1c]
je 0x1001848f
push 8
pop ecx
mov esi, str.GdipDeletePrivateFontCollection
lea edi, [ebp - 0x30]
mov eax, ebx
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x30], 0x43
mov dword [ebp - 0x10], eax
jne 0x10018542
mov cl, 0x43
test cl, cl
je 0x100184f4
cmp byte [ebp + eax - 0x30], bl
je 0x100184f4
call fcn.10017f38
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
mov cl, byte [eax + str.Couldnt_retrieve_information_about_list_control_item__d.]
cmp cl, byte [ebp + eax - 0x30]
je 0x100184d2
mov edi, dword [ebp - 0x6c]
cmp edi, eax
jae 0x10018542
mov eax, dword [0x1003fb64]
mov ebx, dword [0x1003fc14]
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov edx, str.judygarland
call fcn.10017794
cmp edi, 0x13cf
jne 0x1001852d
mov eax, ebx
xor eax, 0x91b78738
mov dword [ebp - 0xc], eax
call fcn.10016fe7
mov ebx, dword [ebp - 0xc]
xor ebx, 0xf6c18380
inc edi
cmp edi, esi
jb 0x1001850c
mov esi, dword [ebp - 0xc]
xor ebx, ebx
jmp 0x10018548
mov esi, dword [0x1003fb64]
mov eax, 0x2000
mov dword [ebp - 0x3c], 0x1346
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x14], eax
mov eax, ebx
mov dword [ebp - 0x34], 0x8dc
mov dword [ebp - 0x30], 0xe34
mov dword [ebp - 0x2c], 0x1dc6
mov dword [ebp - 0x28], 0x1ca8
mov dword [ebp - 0x24], 0x2478
mov dword [ebp - 0x20], 0xd45
mov dword [ebp - 0x1c], 0x606
mov dword [ebp - 0x18], 0x45d
cmp eax, 1
je 0x1001859f
inc eax
cmp eax, 0xb
jl 0x10018594
mov eax, dword [ebp + eax*4 - 0x3c]
push 0x37
pop ecx
mov dword [ebp - 0x88], eax
mov eax, ebx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], 0x1b29
mov dword [ebp - 0x34], 0x2376
mov dword [ebp - 0x30], 0x268a
mov dword [ebp - 0x2c], 0x18c2
mov dword [ebp - 0x28], 0x13f4
mov dword [ebp - 0x24], 0x14ef
mov dword [ebp - 0x20], 0x19ec
mov dword [ebp - 0x1c], 0x868
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ecx
cmp eax, 1
je 0x100185fd
inc eax
cmp eax, 0xc
jl 0x100185f2
mov eax, dword [ebp + eax*4 - 0x40]
xor eax, ecx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x8c], eax
mov eax, ebx
mov dword [ebp - 0x34], 0x1aea
mov dword [ebp - 0x30], 0x1212
mov dword [ebp - 0x2c], 0xeb
mov dword [ebp - 0x28], 0x73b
mov dword [ebp - 0x24], 0x526
mov dword [ebp - 0x20], 0x947
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x4f3
cmp eax, 7
je 0x10018650
inc eax
cmp eax, 0xa
jl 0x10018645
mov eax, dword [ebp + eax*4 - 0x38]
push 0x54
pop ecx
mov dword [ebp - 0x94], eax
mov eax, ebx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], 0xd53
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], 0x4f
mov dword [ebp - 0x2c], 0x1795
mov dword [ebp - 0x28], 0xee5
mov dword [ebp - 0x24], 0x1ed9
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0x10a7
mov dword [ebp - 0x18], 0x2a0
mov dword [ebp - 0x14], 0x89
cmp eax, 7
je 0x100186ab
inc eax
cmp eax, 0xb
jl 0x100186a0
mov eax, dword [ebp + eax*4 - 0x3c]
xor eax, ecx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x90], eax
mov eax, ebx
mov dword [ebp - 0x3c], 0x17a5
mov dword [ebp - 0x38], 0x1a6e
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0x26b2
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], 0x26d4
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0x203a
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0x1150
mov dword [ebp - 0x14], 0xcb4
cmp eax, 5
je 0x10018704
inc eax
cmp eax, 0xc
jl 0x100186f9
mov eax, dword [ebp + eax*4 - 0x40]
mov ecx, str.Couldnt_retrieve_information_about_list_control_item__d.
mov dword [ebp - 0x74], eax
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0x2342
mov dword [ebp - 0x2c], 0x5f5
mov dword [ebp - 0x28], 0xbfe
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0x23c5
mov dword [ebp - 0x18], 0xb04
mov dword [ebp - 0x14], 0xc1e
call fcn.10017add
add esi, 0x4096d0
mov dword [ebp - 0x10], esi
mov dword [0x1003fc14], esi
mov esi, str.40545l5p5t5x5
call fcn.10017f38
inc esi
cmp byte [esi], 0
jne 0x10018761
mov esi, dword [ebp - 0x10]
cmp edi, 5
je 0x1001877a
inc edi
cmp edi, 0xa
jl 0x1001876f
mov eax, dword [ebp + edi*4 - 0x38]
mov ecx, ebx
mov dword [ebp - 0x70], eax
mov eax, esi
xor eax, 0x1209c56d
mov dword [ebp - 0x40], 0x2470
mov dword [ebp - 0xc], eax
mov dword [0x1003fb64], eax
mov dword [ebp - 0x3c], 0x39d
mov dword [ebp - 0x38], 0x1c60
mov dword [ebp - 0x34], 0x247c
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0x35f
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], 0x218b
mov dword [ebp - 0x20], 0xa63
mov dword [ebp - 0x1c], 0x567
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
cmp ecx, 4
je 0x100187e1
inc ecx
cmp ecx, 0xc
jl 0x100187d6
mov eax, dword [ebp + ecx*4 - 0x40]
lea edi, [ebp - 0x64]
push 0x15
pop ecx
mov esi, str.._AVRandomizedTrapdoorFunction_CryptoPP__
mov dword [ebp - 0x78], eax
rep movsd dword es:[edi], dword [esi]
push 0x47
pop ecx
mov dword [ebp - 8], ebx
cmp cx, word [ebp - 0x64]
jne 0x1001884a
mov eax, ebx
test cx, cx
je 0x10018831
cmp word [ebp + eax - 0x64], bx
je 0x10018831
mov ecx, str.GdipCreateFromHWND
call fcn.10018055
mov edx, dword [ebp - 8]
inc edx
mov dword [ebp - 8], edx
lea eax, [edx + edx]
movzx ecx, word [eax + str.GdipCreateFromHWND]
cmp cx, word [ebp + eax - 0x64]
je 0x10018803
mov cl, byte [0x1003fb44]
mov eax, dword [0x1003fb64]
mov esi, dword [0x1003fc14]
mov byte [ebp - 1], cl
mov dword [ebp - 0xc], eax
jmp 0x10018850
mov esi, dword [ebp - 0x10]
mov cl, byte [ebp - 1]
push 0x3c
pop edx
add esi, 0x60b66cfc
mov dword [ebp - 0x34], 0x2091
mov dword [ebp - 0x10], esi
mov eax, ebx
mov dword [0x1003fc14], esi
mov dword [ebp - 0x30], 0x58c
mov dword [ebp - 0x2c], 0x4b1
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], 0xff7
mov dword [ebp - 0x20], 0x243b
mov dword [ebp - 0x1c], 0x25c0
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], edx
cmp eax, 3
je 0x100188a2
inc eax
cmp eax, 9
jl 0x10018897
mov eax, dword [ebp + eax*4 - 0x34]
xor eax, edx
mov dword [ebp - 0x7c], eax
mov eax, ebx
mov dword [ebp - 8], eax
test cl, cl
je 0x100188d0
add esi, 0x580a89ea
inc eax
mov dword [0x1003fc14], esi
cmp byte [eax + 0x1003fb44], 0
jne 0x100188b4
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], esi
call fcn.1001729c
mov edi, dword [ebp - 0x6c]
mov eax, dword [ebp - 8]
cmp edi, eax
jae 0x10018914
cmp edi, 0x1a95
jne 0x100188fb
and esi, 0x56bd1c00
mov dword [0x1003fc14], esi
call fcn.1001729c
mov eax, dword [ebp - 8]
lea ebx, [esi - 0x12a24a2c]
inc edi
mov dword [ebp - 0xc], ebx
mov dword [0x1003fb64], ebx
cmp edi, eax
jb 0x100188df
mov dword [ebp - 0x10], esi
xor ebx, ebx
call fcn.10017415
mov cl, byte [ebp - 1]
lea edi, [ebp - 0x24]
mov esi, str.IDocHostUIHandler
mov eax, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp cl, byte [ebp - 0x24]
jmp 0x10018954
test cl, cl
je 0x10018959
cmp byte [ebp + eax - 0x24], 0
je 0x10018959
mov edx, str.40545l5p5t5x5
call fcn.10017794
mov eax, dword [ebp - 8]
inc eax
mov cl, byte [eax + 0x1003fb44]
cmp cl, byte [ebp + eax - 0x24]
mov dword [ebp - 8], eax
je 0x10018931
push str.mistyrose
mov ecx, str.Couldnt_retrieve_information_about_list_control_item__d.
call fcn.10017cf0
mov edx, dword [ebp - 0xc]
pop ecx
mov ecx, dword [ebp - 8]
movzx eax, byte [ebp + ecx - 0x24]
movzx ecx, byte [ecx + 0x1003fb44]
sub ecx, eax
cmp ecx, 0x1da3
jne 0x100189a2
mov esi, edx
and esi, 0x94834dbf
push str.judygarland
push ecx
mov dword [0x1003fc14], esi
call fcn.1001739e
pop ecx
pop ecx
jmp 0x100189b4
mov esi, dword [ebp - 0x10]
xor edx, 0x467c0e02
mov dword [ebp - 0xc], edx
mov dword [0x1003fb64], edx
push 0x70
pop ecx
push 0xb
mov dword [ebp - 0x3c], 0x1b6b
mov eax, ebx
mov dword [ebp - 0x38], 0x103d
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], 0x14ee
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], 0xc05
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], 0x1ff7
mov dword [ebp - 0x1c], 0x148c
mov dword [ebp - 0x18], 0x1a93
mov dword [ebp - 0x14], 0xd32
pop edi
cmp eax, 4
je 0x10018a07
inc eax
cmp eax, edi
jl 0x100189fd
mov eax, dword [ebp + eax*4 - 0x3c]
mov edx, dword [ebp - 0x68]
xor eax, ecx
mov dword [ebp - 0x10], eax
movzx eax, word [edx]
cmp eax, dword [ebp - 0x80]
je 0x10018a88
lea eax, [esi + 0x20b0cd0d]
mov dword [ebp - 0x44], 0xbea
mov dword [ebp - 0x40], 0x1349
mov dword [ebp - 0x3c], 0x1fd2
mov dword [ebp - 0x38], 0x7a6
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xb6f
mov dword [ebp - 0x2c], 0x196
mov dword [ebp - 0x28], 0x16da
mov dword [ebp - 0x24], 0x2021
mov dword [ebp - 0x20], 0x2212
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x19a2
mov dword [0x1003fb64], eax
cmp ebx, edi
je 0x10018a7f
inc ebx
cmp ebx, 0xd
jl 0x10018a75
mov eax, dword [ebp + ebx*4 - 0x44]
jmp 0x10018c5d
mov ecx, dword [edx + 0x3c]
mov eax, dword [ebp - 0x84]
add ecx, edx
cmp dword [ecx], eax
je 0x10018ae6
push 0x2a
pop ecx
mov dword [ebp - 0x3c], 0x19e7
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], 0x1b33
mov dword [ebp - 0x28], 0x1d54
mov dword [ebp - 0x24], 0x988
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], 0xb1c
mov dword [ebp - 0x14], 0x113b
cmp ebx, 3
je 0x10018add
inc ebx
cmp ebx, edi
jl 0x10018ad3
mov eax, dword [ebp + ebx*4 - 0x3c]
jmp 0x10018c5b
movzx eax, word [ecx + 0x16]
and eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x8c]
je 0x10018c0e
mov esi, dword [ebp - 0x94]
mov eax, dword [ebp - 0x90]
cmp dword [ecx + esi*8 + 0x78], eax
je 0x10018c0e
mov esi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x70]
cmp dword [ecx + esi*8 + 0x7c], eax
je 0x10018c0e
mov eax, dword [ebp - 0x78]
mov eax, dword [ecx + eax*8 + 0x78]
add eax, edx
mov dword [ebp - 0x78], eax
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x20]
mov dword [ebp - 8], ecx
add eax, edx
add ecx, edx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], ecx
call fcn.10017415
mov al, byte [ebp - 1]
lea edi, [ebp - 0x38]
push 0xa
pop ecx
mov esi, str.StartProcessAsUser_error_B_lasterror_d
rep movsd dword es:[edi], dword [esi]
cmp al, byte [ebp - 0x38]
jne 0x10018bc4
test al, al
je 0x10018b73
cmp byte [ebp + ebx - 0x38], 0
je 0x10018b73
mov al, byte [ebx + 0x1003fb45]
inc ebx
cmp al, byte [ebp + ebx - 0x38]
je 0x10018b5b
mov esi, dword [ebp - 0x6c]
jmp 0x10018bc0
push str.GdipCreateFromHWND
mov ecx, str.Couldnt_retrieve_information_about_list_control_item__d.
call fcn.10017cf0
pop ecx
cmp esi, 0x554
jne 0x10018ba1
imul eax, dword [ebp - 0xc], 0x50c51e4e
mov dword [ebp - 0xc], eax
mov dword [0x1003fb64], eax
jmp 0x10018ba4
mov eax, dword [ebp - 0xc]
imul eax, eax, 0xa8ef8446
mov ecx, str.judygarland
push str.mistyrose
mov dword [0x1003fc14], eax
call fcn.10017cf0
pop ecx
inc esi
cmp esi, ebx
jb 0x10018b78
mov edi, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x7c]
mov edi, dword [edi + 0x24]
add edi, ecx
jmp 0x10018bf5
mov eax, dword [ebp - 0x74]
mov esi, dword [eax + ebx*4]
add esi, ecx
mov ecx, esi
call fcn.10010221
mov edx, eax
mov ecx, esi
call fcn.1001816d
cmp eax, dword [ebp - 0x6c]
je 0x10018bff
mov ecx, dword [ebp - 0x68]
inc ebx
cmp ebx, dword [ebp - 8]
jb 0x10018bd4
mov eax, dword [ebp - 0x10]
jmp 0x10018c5d
movzx eax, word [edi + ebx*2]
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx + eax*4]
add eax, dword [ebp - 0x68]
jmp 0x10018c5d
push 0x67
pop ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], 0x2135
mov dword [ebp - 0x30], 0x1cfa
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], 0x1d72
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], 0x15ed
mov dword [ebp - 0x1c], 0x2bc
mov dword [ebp - 0x18], 0x18ef
mov dword [ebp - 0x14], 0x1daf
test ebx, ebx
je 0x10018c57
inc ebx
cmp ebx, edi
jl 0x10018c4e
mov eax, dword [ebp + ebx*4 - 0x3c]
xor eax, ecx
pop edi
pop esi
pop ebx
leave
ret