Function at 0x1001d290
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x1005b165
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x1006c3ac]
xor eax, esp
mov dword [esp + 0xd0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1006c3ac]
xor eax, esp
push eax
lea eax, [esp + 0xe8]
mov dword fs:[0], eax
mov edi, ecx
lea ebp, [edi + 0x1c]
xor ebx, ebx
mov dword [esp + 0x54], edi
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebx
cmp ebp, ebx
je 0x1001d2f1
push ebp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [esp + 0x1c], 1
mov dword [esp + 0xf0], ebx
cmp byte [edi + 0x34], bl
jne 0x1001d315
cmp ebp, ebx
je 0x1001d30e
cmp dword [esp + 0x1c], ebx
je 0x1001d30e
push ebp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, 1
jmp 0x1001d7de
push 0x20
call fcn.1003f860
mov esi, eax
add esp, 4
mov dword [esp + 0x24], esi
mov byte [esp + 0xf0], 1
cmp esi, ebx
je 0x1001d33d
push esi
call fcn.100162f0
mov dword [esp + 0x14], esi
jmp 0x1001d341
mov dword [esp + 0x14], ebx
mov byte [esp + 0xf0], bl
cmp dword [esp + 0x14], ebx
je 0x1001d7cb
push 0x18
call fcn.1003f860
add esp, 4
mov dword [esp + 0x24], eax
mov byte [esp + 0xf0], 2
cmp eax, ebx
je 0x1001d378
push eax
call fcn.1002f390
mov dword [esp + 0x28], eax
jmp 0x1001d37c
mov dword [esp + 0x28], ebx
mov byte [esp + 0xf0], bl
cmp dword [esp + 0x28], ebx
je 0x1001d7cb
mov esi, dword [edi + 0x10]
cmp esi, dword [edi + 0x14]
jbe 0x1001d39a
call fcn.1003f767
mov eax, dword [edi + 4]
mov ebp, esi
mov esi, dword [edi + 0x14]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x24], esi
cmp dword [edi + 0x10], esi
jbe 0x1001d3b4
call fcn.1003f767
mov ecx, dword [edi + 4]
mov dword [esp + 0x58], ecx
jmp 0x1001d3c0
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x1001d3ce
cmp eax, dword [esp + 0x58]
je 0x1001d3d3
call fcn.1003f767
cmp ebp, esi
je 0x1001d62b
mov eax, dword [esp + 0x4c]
cmp eax, ebx
jne 0x1001d444
call fcn.1003f767
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x1001d3f4
call fcn.1003f767
mov edx, dword [ebp + 8]
cmp dword [edx - 0xc], ebx
je 0x1001d5f8
mov eax, dword [ebp + 4]
cmp eax, 2
jg 0x1001d5f8
cmp eax, ebx
jl 0x1001d5f8
mov eax, dword [ebp]
cmp dword [eax - 0xc], ebx
je 0x1001d5f8
push 0x20
call fcn.1003f860
mov edi, eax
add esp, 4
mov dword [esp + 0x20], edi
mov byte [esp + 0xf0], 3
cmp edi, ebx
je 0x1001d448
push edi
call fcn.100162f0
jmp 0x1001d44a
mov eax, dword [eax]
jmp 0x1001d3ea
xor edi, edi
mov byte [esp + 0xf0], bl
cmp edi, ebx
je 0x1001d61d
push 0x68
call fcn.1003f860
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0xf0], 4
cmp eax, ebx
je 0x1001d480
mov ecx, dword [ebp]
push eax
call fcn.10014330
mov esi, eax
jmp 0x1001d482
xor esi, esi
mov byte [esp + 0xf0], bl
cmp esi, ebx
je 0x1001d61d
mov eax, 0x10060a30
lea ecx, [esp + 0x30]
call fcn.1000b630
lea ecx, [esp + 0x30]
push ecx
push edi
mov byte [esp + 0xf8], 5
call fcn.100157e0
mov dword [eax], esi
lea esi, [esp + 0x30]
mov byte [esp + 0xf0], bl
call fcn.10002040
push 0x68
call fcn.1003f860
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0xf0], 6
cmp eax, ebx
je 0x1001d4f1
fild dword [ebp + 4]
sub esp, 8
fstp qword [esp]
push eax
call fcn.1001c770
mov esi, eax
jmp 0x1001d4f3
xor esi, esi
mov byte [esp + 0xf0], bl
cmp esi, ebx
je 0x1001d61d
mov eax, str.local
lea ecx, [esp + 0x30]
call fcn.1000b630
lea edx, [esp + 0x30]
push edx
push edi
mov byte [esp + 0xf8], 7
call fcn.100157e0
mov dword [eax], esi
lea esi, [esp + 0x30]
mov byte [esp + 0xf0], bl
call fcn.10002040
push 0x68
call fcn.1003f860
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0xf0], 8
cmp eax, ebx
je 0x1001d55c
mov ecx, dword [ebp + 8]
push eax
call fcn.10014330
mov esi, eax
jmp 0x1001d55e
xor esi, esi
mov byte [esp + 0xf0], bl
cmp esi, ebx
je 0x1001d61d
mov eax, 0x10060a44
lea ecx, [esp + 0x30]
call fcn.1000b630
lea eax, [esp + 0x30]
push eax
push edi
mov byte [esp + 0xf8], 9
call fcn.100157e0
mov dword [eax], esi
lea esi, [esp + 0x30]
mov byte [esp + 0xf0], bl
call fcn.10002040
push 0x68
call fcn.1003f860
mov esi, eax
add esp, 4
mov dword [esp + 0x20], esi
mov byte [esp + 0xf0], 0xa
cmp esi, ebx
je 0x1001d5d4
sub esp, 0x20
mov dword [esp + 0x4c], esp
mov eax, esp
push edi
push eax
call fcn.10015900
push esi
call fcn.10014410
jmp 0x1001d5d6
xor eax, eax
mov byte [esp + 0xf0], bl
mov dword [esp + 0x20], eax
cmp eax, ebx
je 0x1001d61d
mov edi, dword [esp + 0x28]
lea ebx, [esp + 0x20]
call fcn.1001e430
mov esi, dword [esp + 0x24]
xor ebx, ebx
mov eax, dword [esp + 0x4c]
cmp eax, ebx
jne 0x1001d619
call fcn.1003f767
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x1001d611
call fcn.1003f767
add ebp, 0xc
jmp 0x1001d3c0
mov eax, dword [eax]
jmp 0x1001d607
lea ecx, [esp + 0x18]
call fcn.100013f0
jmp 0x1001d7dc
push 0x68
call fcn.1003f860
mov esi, eax
add esp, 4
mov dword [esp + 0x2c], esi
mov byte [esp + 0xf0], 0xb
cmp esi, ebx
je 0x1001d664
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x3c], esp
push ecx
mov ecx, dword [esp + 0x44]
call fcn.1001e250
push esi
call fcn.1001c7f0
mov edi, eax
jmp 0x1001d666
xor edi, edi
mov byte [esp + 0xf0], bl
cmp edi, ebx
je 0x1001d7ba
xor edx, edx
push 4
mov eax, str.list
lea esi, [esp + 0x34]
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], ebx
mov word [esp + 0x38], dx
call fcn.1000b540
mov eax, esi
mov byte [esp + 0xf0], 0xc
mov esi, dword [esp + 0x14]
push eax
push esi
call fcn.100157e0
mov dword [eax], edi
mov byte [esp + 0xf0], bl
cmp dword [esp + 0x48], 8
jb 0x1001d6ca
mov ecx, dword [esp + 0x34]
push ecx
call fcn.1003f2c6
add esp, 4
sub esp, 0x20
mov dword [esp + 0x4c], esp
mov eax, esp
push esi
push eax
call fcn.10015900
lea edx, [esp + 0x9c]
push edx
call fcn.10014410
lea ecx, [esp + 0x7c]
lea eax, [esp + 0x60]
mov byte [esp + 0xf0], 0xd
call fcn.10014e30
lea esi, [esp + 0x14]
mov byte [esp + 0xf0], 0xe
call fcn.1001b240
push 0x21
push str.WallPaperHistoryHistorySet.json
mov eax, esi
push eax
mov byte [esp + 0xfc], 0xf
call fcn.10013900
lea ebx, [esp + 0x60]
mov eax, esi
call fcn.1002b8e0
mov edx, dword [esp + 0x54]
mov bl, al
test bl, bl
sete cl
mov byte [esp + 0xf0], 0xe
mov eax, dword [esp + 0x14]
mov byte [edx + 0x34], cl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001d765
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x78], 8
jb 0x1001d779
mov ecx, dword [esp + 0x64]
push ecx
call fcn.1003f2c6
add esp, 4
xor edx, edx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], dx
mov byte [esp + 0xf0], dl
call fcn.100144e0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x1001d7b6
cmp dword [esp + 0x1c], 0
je 0x1001d7b6
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, bl
jmp 0x1001d7de
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x1001d7dc
cmp dword [esp + 0x1c], ebx
je 0x1001d7dc
push eax
jmp 0x1001d7d6
cmp ebp, ebx
je 0x1001d7dc
cmp dword [esp + 0x1c], ebx
je 0x1001d7dc
push ebp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor al, al
mov ecx, dword [esp + 0xe8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xd0]
xor ecx, esp
call fcn.1003f2d1
add esp, 0xe0
ret