Function at 0x10018210
Capabilities:
Enumerate gui resources
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10084f95
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x190
push ebx
push esi
push edi
mov dword [esp + 0x3c], edx
mov esi, ecx
mov dword [esp + 0x10], 0xffffffff
lea ecx, [esp + 0x130]
mov dword [esp + 0x24], 0xffff
push 2
call fcn.10015766
push 3
xor ebx, ebx
lea ecx, [esp + 0x10c]
mov dword [esp + 0x1a8], ebx
pop edi
mov dword [esp + 0x1c], 6
mov dword [esp + 0x28], 0x7bd55fd0
push edi
call fcn.10015766
mov dword [esp + 0x10], ebx
jmp 0x1001829d
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x130]
mov dword [eax + ecx*4], 0xafbd13d8
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x10018287
mov dword [esp + 0x10], ebx
jmp 0x100182bc
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x108]
mov dword [eax + ecx*4], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x100182aa
mov dword [esp + 0x10], 0x905c
cmp dword [esp + 0x10], ebx
je 0x1001830f
cmp dword [esp + 0x24], ebx
jne 0x100182f6
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x108]
xor ecx, ecx
cmp dword [eax], ebx
setne cl
mov dword [eax], ecx
test ecx, ecx
je 0x1001830f
xor eax, eax
inc eax
jmp 0x10018311
mov eax, ebx
mov dword [esp + 0x28], eax
lea ecx, [esp + 0x108]
call fcn.10015f83
or dword [esp + 0x1a4], 0xffffffff
lea ecx, [esp + 0x130]
call fcn.10015f83
mov dword [esp + 0x18], 0x13b91020
lea ecx, [esp + 0xe4]
push edi
call fcn.10015766
mov dword [esp + 0x18], ebx
jmp 0x10018366
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xe4]
mov dword [eax + ecx*4], 0x751c
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edi
jl 0x10018350
mov dword [esp + 0x18], 0xf
jmp 0x1001838f
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [eax]
mov dword [esp + 0x1c], eax
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 1
jge 0x10018376
lea ecx, [esp + 0xe4]
call fcn.10015f83
mov dword [esp + 0x1c], 0xf0b96ca2
xor ecx, ecx
mov dword [esp + 0x24], 0xad2086bd
inc ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 0xa41637c1
mov dword [esp + 0x24], 0xec560449
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x24], ebx
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], bl
je 0x100183f2
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
xor ecx, ecx
inc ecx
mov eax, dword [esp + 0x1c]
sub eax, 4
je 0x1001848f
mov dword [esp + 0x1c], 6
mov dword [esp + 0x1c], 0xc4ab274b
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x13c]
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x1c], 0xdaab72b2
mov dword [esp + 0x1c], 0x420452a2
mov dword [esp + 0x1c], 0xe2f9d44c
push edi
call fcn.10015766
mov dword [esp + 0x10], ebx
jmp 0x1001845c
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x13c]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x10018446
mov dword [esp + 0x10], ebx
jmp 0x10018478
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x4c], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x10018468
dec dword [esp + 0x4c]
lea ecx, [esp + 0x13c]
jmp 0x1001858e
push dword [esp + 0x64]
movdqa xmm0, xmmword [0x10008110]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x20], 0xfffffffa
mov eax, 0x3f908025
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x28], 0x8f585950
mov dword [esp + 0x28], 6
mov dword [esp + 0x28], 0x5ff57440
mov dword [esp + 0x28], 0x8ef34ea8
mov dword [esp + 0x28], 0xe42506ed
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], eax
lea eax, [esp + 0x174]
push eax
lea eax, [esp + 0x168]
mov dword [esp + 0xa0], ebx
push eax
push ebx
movdqu xmmword [esp + 0x170], xmm0
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
call fcn.10016cdb
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
neg edx
mov eax, dword [esp + 0x98]
sbb edx, edx
xor ecx, ecx
neg edx
dec dword [eax + 4]
cmp edx, 0x8fda
setg cl
sub ecx, dword [eax + 4]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x98]
imul eax, dword [esp + 0x24], 0xffff5197
sub eax, dword [esp + 0x28]
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x24], eax
call fcn.10015f83
cmp dword [esi + 0x10], ebx
jne 0x1001859f
xor al, al
jmp 0x10018feb
mov dword [esp + 0x20], ebx
lea ecx, [esp + 0x88]
mov dword [esp + 0x1c], 0x4f84b811
mov dword [esp + 0x28], 0xaa39ed08
mov dword [esp + 0x24], 0x3859
push 1
call fcn.10015766
mov dword [esp + 0x1c], 9
mov dword [esp + 0x18], ebx
jmp 0x100185ed
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x88]
mov dword [eax + ecx*4], 0x4fda7ef5
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 1
jl 0x100185d7
inc dword [esp + 0x20]
je 0x1001860b
mov dword [esp + 0x24], 0x509978f3
dec dword [esp + 0x24]
jmp 0x100186d4
mov eax, dword [esp + 0x88]
mov dword [esp + 0x18], 0xef99
mov dword [esp + 0x10], 0xb8b0d58e
inc dword [eax]
jne 0x100186b7
mov eax, dword [esp + 0x18]
xor ecx, ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x28]
cmp dword [eax], 6
mov eax, dword [esp + 0x20]
setle cl
add edx, ecx
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
cmp dword [esp + 0x20], eax
jl 0x10018680
mov eax, dword [esp + 0x88]
cmp dword [eax], ebx
je 0x10018680
xor ecx, ecx
inc ecx
jmp 0x10018682
mov ecx, ebx
mov eax, dword [esp + 0x24]
imul eax, ecx
dec eax
dec eax
jne 0x10018691
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x88]
mov edx, dword [eax]
mov eax, dword [esp + 0x10]
sub edx, ecx
sub edx, 2
add eax, edx
jne 0x100186b7
mov edx, ebx
jmp 0x100186ba
xor edx, edx
inc edx
mov eax, dword [esp + 0x24]
xor ecx, ecx
cmp edx, eax
setg cl
sub ecx, 0xf4fe10ef
neg ecx
sbb ecx, ecx
inc ecx
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x88]
call fcn.10015f83
mov dword [esp + 0x10], 0x3ae35568
mov dword [esp + 0x34], 0xc02a3062
mov dword [esp + 0x38], 0x4ed09eb
mov dword [esp + 0x1c], 0xfffffffd
mov dword [esp + 0x10], 6
cmp dword [esp + 0x10], 0x13
jne 0x100187f2
mov eax, 0x7c2076a
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x18], ebx
jmp 0x10018747
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x170], 7
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 4
jl 0x10018734
mov eax, dword [esp + 0x78]
xor edx, edx
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x78]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x80]
mov eax, dword [esp + 0x174]
mov dword [esp + 0x174], eax
lea ecx, [eax - 7]
mov eax, dword [esp + 0x78]
cmp ecx, eax
mov eax, dword [esp + 0x78]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x78]
setne cl
xor edx, edx
imul eax, ecx
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x10]
cmp eax, ecx
mov eax, dword [esp + 0x34]
setl dl
xor ecx, ecx
cmp edx, eax
lea eax, [esp + 0x38]
push eax
push 0x5b3c
push ebx
lea eax, [esp + 0x40]
setle cl
push eax
mov dword [esp + 0x2c], ecx
push 0x48af
call fcn.1001a179
add esp, 0x14
mov eax, 0x7c2076a
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0x13
je 0x10018718
lea eax, [esp + 0x3c]
xor dl, dl
push eax
mov ecx, 0x6fe2
call fcn.10017654
pop ecx
push 1
lea ecx, [esp + 0xa8]
call fcn.10015766
mov dword [esp + 0x1c], 0xfffffffa
mov dword [esp + 0x18], 0x3e58bfc4
mov dword [esp + 0x10], ebx
jmp 0x1001883b
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x150], 0xc64a6847
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x10018828
mov dword [esp + 0x10], ebx
jmp 0x1001885e
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xa4]
mov dword [eax + ecx*4], 0xfb871c7b
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x10018848
mov eax, dword [esp + 0xa4]
mov dword [eax], edi
mov eax, dword [eax]
cmp dword [esp + eax*4 + 0x150], ebx
je 0x100188a2
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], bl
je 0x100188c1
push ebx
push 0x16cb
push 0x1e59
push ebx
push 0x6f6
push 0x18b3
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
jmp 0x100188c1
push 7
pop eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x18], ebx
jmp 0x100188bb
mov dword [esp + 0x1c], eax
inc dword [esp + 0x1c]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edi
jle 0x100188af
mov eax, dword [esp + 0xa4]
mov eax, dword [eax]
cmp dword [esp + eax*4 + 0x150], ebx
jne 0x100188de
mov eax, dword [esp + 0xa4]
dec dword [eax]
jns 0x1001886e
mov dword [esp + 0x18], 0x18
jmp 0x100188fe
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], bl
je 0x100188fa
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xfffffff3
jl 0x100188e8
lea ecx, [esp + 0xa4]
call fcn.10015f83
mov dword [esp + 0x18], 8
lea ecx, [esp + 0xfc]
mov dword [esp + 0x20], 0xb22489af
push edi
call fcn.10015766
mov dword [esp + 0x1a4], 1
mov dword [esp + 0x1c], 0x77405739
mov dword [esp + 0x10], ebx
jmp 0x10018957
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x40], 6
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x10018947
mov dword [esp + 0x10], ebx
jmp 0x10018979
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xfc]
mov dword [eax + ecx*4], 0xe0b5dae8
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x10018963
mov eax, dword [esp + 0x18]
xor ecx, ecx
cmp eax, 0x1f90ef30
mov edx, 0x8d3c891c
setne cl
sub ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
neg ecx
sbb ecx, ecx
add eax, dword [esp + 0x18]
inc ecx
cmp edx, eax
sbb eax, eax
inc eax
imul ecx, eax
mov dword [esp + 0x44], ecx
test ecx, ecx
je 0x10018a1c
mov dword [esp + 0x10], 1
mov eax, 0xf758fc5
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x40]
mov eax, dword [esp + 0x48]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x44]
mov eax, dword [esp + 0x10]
sub eax, 7
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], 0xfff7
dec dword [esp + 0x1c]
jmp 0x10018b56
mov eax, 0xcb06a9be
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x1c], 0x82d77871
mov eax, dword [esp + 0x20]
dec dword [esp + 0x20]
test eax, eax
jne 0x10018a49
mov eax, dword [esp + 0x40]
mov eax, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x68]
mov eax, 0x6d7d0454
dec ecx
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
je 0x10018a8f
mov dword [esp + 0x1c], 0xa52e
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10018a82
push ebx
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x6c], eax
jmp 0x10018b3d
mov dword [esp + 0x28], ebx
lea ecx, [esp + 0xf0]
push edi
call fcn.10015766
xor edx, edx
inc edx
mov dword [esp + 0x24], edx
mov dword [esp + 0x10], ebx
jmp 0x10018ac0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xf0]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x10018aad
mov eax, dword [esp + 0xf0]
cmp dword [eax + 8], ebx
jne 0x10018ad6
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
xor ecx, ecx
cmp eax, edx
setge cl
cmp ecx, 0xffff
je 0x10018af1
mov ecx, ebx
cmp dword [esp + 0x6c], ebx
je 0x10018af3
mov ecx, edx
mov eax, dword [esp + 0xfc]
mov dword [eax + 8], ecx
test ecx, ecx
je 0x10018b05
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0xf0]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x6c]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x44]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov eax, dword [esp + 0x24]
call fcn.10015f83
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10018b56
push ebx
push 1
push 0xd50
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
or dword [esp + 0x1a4], 0xffffffff
lea ecx, [esp + 0xfc]
call fcn.10015f83
cmp dword [esi + 0x14], 0x10
jb 0x10018b74
mov ecx, dword [esi]
jmp 0x10018b76
mov ecx, esi
cmp dword [esi + 0x14], 0x10
mov dword [esp + 0x30], ecx
jb 0x10018b84
mov edx, dword [esi]
jmp 0x10018b86
mov edx, esi
mov eax, dword [esi + 0x10]
add eax, edx
cmp ecx, eax
je 0x10018e72
push 2
lea ecx, [esp + 0x124]
call fcn.10015766
push 2
pop edx
mov dword [esp + 0x1a4], edx
mov dword [esp + 0xcc], 0x57976326
mov dword [esp + 0x1c], 0xa485bf25
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x20], ebx
jmp 0x10018be2
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x120]
mov dword [eax + ecx*4], 0xffff
inc dword [esp + 0x20]
cmp dword [esp + 0x20], edx
jl 0x10018bcc
push 0x7e90
mov dl, 1
lea ecx, [esp + 0xd0]
call fcn.10017654
or dword [esp + 0x1a8], 0xffffffff
pop ecx
lea ecx, [esp + 0x120]
call fcn.10015f83
mov eax, dword [esp + 0x30]
mov al, byte [eax]
cmp al, 0x30
jl 0x10018db0
cmp al, 0x39
jg 0x10018db0
mov dword [esp + 0x10], 1
mov dword [esp + 0x1c], 0x1e66c619
mov dword [esp + 0x1c], 0x3a4df6f9
mov dword [esp + 0x1c], 0xe9378f1e
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x10], ebx
jmp 0x10018c63
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x180], 9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x10018c50
mov dword [esp + 0x10], ebx
jmp 0x10018c83
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x188], 6
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x10018c70
mov dword [esp + 0x10], ebx
jmp 0x10018d83
mov dword [esp + 0x18], 0x67a876e6
mov dword [esp + 0x1c], 0xcc92ea21
mov dword [esp + 0x1c], 0x32b96ce0
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x1c], 0x395e2de4
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x1c], 1
mov dword [esp + 0x1c], 0x915bb002
mov dword [esp + 0x18], ebx
jmp 0x10018d70
mov dword [esp + 0x20], 0xf25cbd94
mov dword [esp + 0x20], ebx
jmp 0x10018d49
push 4
lea ecx, [esp + 0x118]
call fcn.10015766
lea eax, [esp + 0x148]
mov dword [esp + 0x1a4], edi
push eax
lea eax, [esp + 0x118]
push eax
push ebx
push 0x3f13
call fcn.10019248
push ebx
lea eax, [esp + 0x128]
push eax
push 0x73f5
push 0x7f82
call fcn.1001907c
or dword [esp + 0x1c4], 0xffffffff
lea ecx, [esp + 0x134]
add esp, 0x20
call fcn.10015f83
dec dword [esp + 0x20]
cmp dword [esp + 0x20], 0xfffffff6
jle 0x10018ce6
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10018d6c
push ebx
push 0x8c0
push 0x59d
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 8
je 0x10018cd8
inc dword [esp + 0x1c]
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 0xffffffe3
jne 0x10018c93
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x34]
push eax
push 0x4419
push ebx
call fcn.1001a93b
mov ecx, dword [esp + 0x40]
add esp, 0x10
inc ecx
jmp 0x10018b76
mov dword [esp + 0x2c], ebx
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x2c], ebx
jmp 0x10018dfc
lea eax, [esp + 0x2c]
push eax
push ebx
lea eax, [esp + 0xb8]
push eax
push 0x4ebf
call fcn.1001a11c
mov byte [esp + 0x27], bl
add esp, 0x10
cmp byte [esp + 0x17], 0
je 0x10018df8
push ebx
push 0x596e
call fcn.1001903e
pop ecx
pop ecx
dec dword [esp + 0x2c]
cmp dword [esp + 0x2c], 0xffffffed
jge 0x10018dc5
mov eax, dword [esp + 0x3c]
mov dword [eax], ebx
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x20], 1
jmp 0x10018e66
lea eax, [esp + 0xb4]
mov dword [esp + 0xb4], 0x2fd4914d
push eax
lea eax, [esp + 0xbc]
mov dword [esp + 0xbc], 0x555b7cef
push eax
push ebx
call fcn.1001a9a7
mov byte [esp + 0x23], bl
add esp, 0xc
cmp byte [esp + 0x17], 0
je 0x10018e62
push ebx
push 0x6161
call fcn.100191a1
pop ecx
pop ecx
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 0x1b
jne 0x10018e1b
jmp 0x10018598
mov dword [esp + 0x54], 0xc7bf0b96
lea ecx, [esp + 0xd8]
push 1
call fcn.10015766
mov dword [esp + 0x1a4], 4
xor eax, eax
mov dword [esp + 0x60], 0xffffffff
inc eax
mov dword [esp + 0x50], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0x58], eax
lea eax, [esp + 0xd8]
push ebx
mov dword [esp + 0xd8], ebx
push eax
mov dword [esp + 0x64], 0x40e708be
lea eax, [esp + 0x154]
mov dword [esp + 0x6c], 0xfffffffd
mov dword [esp + 0x9c], ebx
push eax
call fcn.1001ac1f
add esp, 0xc
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x70]
push eax
push ebx
push 0x73a7
lea eax, [esp + 0xf4]
push eax
push 0x17a1
call fcn.1001a48f
add esp, 0x2c
lea eax, [esp + 0x94]
push eax
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0x68]
push eax
push ebx
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x68]
push eax
push 0x5e15
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x78]
push eax
call fcn.1001b5ec
add esp, 0x28
lea ecx, [esp + 0xd8]
call fcn.10015f83
mov dword [esp + 0x20], 0xee76f502
mov dword [esp + 0x20], ebx
jmp 0x10018f94
mov eax, dword [esp + 0x20]
mov dword [esp + eax*4 + 0x12c], 9
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 1
jl 0x10018f81
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10018fb4
push 0x2182
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_CombineRgn]
mov dword [esp + 0x20], ebx
jmp 0x10018fe3
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10018fcc
push ebx
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10018fdf
push ebx
push ebx
call dword [sym.imp.USER32.dll_EnumWindows]
inc dword [esp + 0x20]
cmp dword [esp + 0x20], ebx
jle 0x10018fba
mov al, 1
mov ecx, dword [esp + 0x19c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret