Function at 0x10002120
Capabilities:
Get file size
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x270
lea eax, [esp + 0x1cc]
lea ecx, [esp + 0x1b8]
mov edx, esp
lea esi, [esp + 0x250]
mov dword [edx + 4], esi
mov dword [edx], 0x40136d
mov edx, dword [sym.imp.GDI32.dll_GetViewportOrgEx]
mov dword [esp + 0x1b4], ecx
mov dword [esp + 0x1b0], eax
call edx
sub esp, 8
mov ecx, esp
mov dword [ecx], 0xea4f4b
mov ecx, dword [sym.imp.GDI32.dll_GetMapMode]
mov dword [esp + 0x1ac], eax
call ecx
sub esp, 4
mov ecx, esp
lea edx, [esp + 0x1f0]
mov dword [ecx + 4], edx
mov dword [ecx], 0x61d
mov ecx, dword [sym.imp.KERNEL32.dll_GetCPInfo]
mov dword [esp + 0x1a8], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0x563
mov dword [ecx], 0x1f82f4
mov ecx, dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esp + 0x1a4], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0xa0b
mov dword [ecx], 0xb2c568
mov ecx, dword [sym.imp.GDI32.dll_SetTextCharacterExtra]
mov dword [esp + 0x1a0], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x70b194
mov ecx, dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov dword [esp + 0x19c], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 4], 0xd73
mov dword [ecx], 0xd8c2fb
mov ecx, dword [sym.imp.GDI32.dll_SetStretchBltMode]
mov dword [esp + 0x198], eax
call ecx
sub esp, 8
mov ecx, esp
lea edx, [esp + 0x1c0]
mov dword [ecx + 0x10], edx
lea edx, [esp + 0x260]
mov dword [ecx + 0xc], edx
mov dword [ecx + 8], edx
mov dword [ecx + 4], edx
mov dword [ecx], 0xacebf6
mov ecx, dword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov dword [esp + 0x194], eax
call ecx
sub esp, 0x14
mov ecx, esp
mov dword [ecx + 8], 0x2f5
mov dword [ecx + 4], 0xbd7
mov dword [ecx], 0x7c6148
mov ecx, dword [sym.imp.USER32.dll_EnableScrollBar]
mov dword [esp + 0x190], eax
call ecx
sub esp, 0xc
xor ecx, ecx
lea edx, [esp + 0x220]
lea esi, [esp + 0x208]
lea edi, [esp + 0x1d0]
lea ebx, [esp + 0x238]
mov dword [esp + 0x18c], eax
mov dword [esp + 0x188], edx
mov dword [esp + 0x184], edi
mov dword [esp + 0x180], esi
mov dword [esp + 0x17c], ebx
mov dword [esp + 0x178], ecx
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x17c]
mov dword [ecx + 0x10], 0
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx], 0
mov edx, esp
mov dword [edx], ecx
mov edx, dword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorLength]
mov dword [esp + 0x174], eax
call edx
sub esp, 4
mov ecx, esp
mov dword [ecx + 4], 0xde9ca5
mov dword [ecx], 0xff0ec0
mov ecx, dword [sym.imp.GDI32.dll_SetColorSpace]
mov dword [esp + 0x170], eax
call ecx
sub esp, 8
mov dword [esp + 0x1bc], 0
mov dword [esp + 0x1b8], 0
mov ecx, esp
mov edx, dword [esp + 0x1b4]
mov dword [ecx + 4], edx
mov dword [ecx], str.eYNIvT
mov ecx, dword [sym.imp.ADVAPI32.dll_AddUsersToEncryptedFile]
mov dword [esp + 0x16c], eax
call ecx
sub esp, 8
mov ecx, dword [sym.imp.USER32.dll_GetMessageExtraInfo]
mov dword [esp + 0x168], eax
call ecx
mov ecx, esp
mov dword [ecx + 8], 0xba3
mov dword [ecx + 4], 0x88c
mov dword [ecx], 0x5ca
mov ecx, dword [sym.imp.KERNEL32.dll_OpenThread]
mov dword [esp + 0x164], eax
call ecx
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6358f7
mov ecx, dword [sym.imp.GDI32.dll_GetTextColor]
mov dword [esp + 0x160], eax
call ecx
sub esp, 4
xor ecx, ecx
mov dword [esp + 0x15c], eax
mov dword [esp + 0x158], ecx
mov eax, dword [esp + 0x158]
mov ecx, 0x88888889
mov dword [esp + 0x154], eax
mul ecx
shr edx, 3
imul eax, edx, 0xf
mov ecx, dword [esp + 0x154]
sub ecx, eax
mov eax, ecx
sub eax, 3
mov dword [esp + 0x150], ecx
mov dword [esp + 0x14c], eax
je 0x10002419
jmp 0x10002404
mov eax, dword [esp + 0x150]
sub eax, 9
mov dword [esp + 0x148], eax
jne 0x10002439
jmp 0x10002419
mov eax, esp
mov dword [eax + 4], 0xd05
mov dword [eax], 0xfeb85d
mov eax, dword [sym.imp.GDI32.dll_SetDCBrushColor]
call eax
sub esp, 8
mov dword [esp + 0x144], eax
mov eax, dword [esp + 0x154]
add eax, 1
cmp eax, 0x2c5
mov dword [esp + 0x158], eax
jne 0x100023c9
mov eax, esp
mov dword [eax], 0xa75b8
mov eax, dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
call eax
sub esp, 4
mov ecx, dword [esp + 0x174]
sub ecx, 0xa
mov dword [esp + 0x140], eax
mov dword [esp + 0x13c], ecx
je 0x10002bf3
jmp 0x10002489
mov eax, dword [esp + 0x174]
sub eax, 0x40
mov dword [esp + 0x138], eax
je 0x10002b7a
jmp 0x100024a2
mov eax, esp
mov dword [eax + 4], 0x8af309
mov dword [eax], 0x4a85b2
mov eax, dword [sym.imp.USER32.dll_ChangeClipboardChain]
call eax
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x16d2cd
mov ecx, dword [sym.imp.KERNEL32.dll_HeapUnlock]
mov dword [esp + 0x134], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 8], 0x17
mov dword [ecx + 4], 0x9b16a3
mov dword [ecx], 0x9b16a3
mov ecx, dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov dword [esp + 0x130], eax
call ecx
sub esp, 0xc
xor ecx, ecx
mov edx, 0x18
mov esi, dword [esp + 0x188]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x18
mov dword [esp + 0x12c], eax
mov dword [esp + 0x128], ecx
mov dword [esp + 0x124], edx
call fcn.10104200
mov eax, esp
lea ecx, [esp + 0x220]
mov dword [eax], ecx
mov eax, dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx + 4], 0x8af309
mov dword [ecx], 0x4a85b2
mov ecx, dword [sym.imp.USER32.dll_ChangeClipboardChain]
mov dword [esp + 0x120], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x16d2cd
mov ecx, dword [sym.imp.KERNEL32.dll_HeapUnlock]
mov dword [esp + 0x11c], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 8], 0x17
mov dword [ecx + 4], 0x9b16a3
mov dword [ecx], 0x9b16a3
mov ecx, dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov dword [esp + 0x118], eax
call ecx
sub esp, 0xc
xor ecx, ecx
mov edx, 0x18
mov esi, dword [esp + 0x188]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x18
mov dword [esp + 0x114], eax
mov dword [esp + 0x110], ecx
mov dword [esp + 0x10c], edx
call fcn.10104200
mov eax, esp
lea ecx, [esp + 0x220]
mov dword [eax], ecx
mov eax, dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx + 4], 0x8af309
mov dword [ecx], 0x4a85b2
mov ecx, dword [sym.imp.USER32.dll_ChangeClipboardChain]
mov dword [esp + 0x108], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x16d2cd
mov ecx, dword [sym.imp.KERNEL32.dll_HeapUnlock]
mov dword [esp + 0x104], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 8], 0x17
mov dword [ecx + 4], 0x9b16a3
mov dword [ecx], 0x9b16a3
mov ecx, dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov dword [esp + 0x100], eax
call ecx
sub esp, 0xc
xor ecx, ecx
mov edx, 0x18
mov esi, dword [esp + 0x188]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x18
mov dword [esp + 0xfc], eax
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xf4], edx
call fcn.10104200
mov eax, esp
lea ecx, [esp + 0x220]
mov dword [eax], ecx
mov eax, dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx + 4], 0x8af309
mov dword [ecx], 0x4a85b2
mov ecx, dword [sym.imp.USER32.dll_ChangeClipboardChain]
mov dword [esp + 0xf0], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x16d2cd
mov ecx, dword [sym.imp.KERNEL32.dll_HeapUnlock]
mov dword [esp + 0xec], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 8], 0x17
mov dword [ecx + 4], 0x9b16a3
mov dword [ecx], 0x9b16a3
mov ecx, dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov dword [esp + 0xe8], eax
call ecx
sub esp, 0xc
xor ecx, ecx
mov edx, 0x18
mov esi, dword [esp + 0x188]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x18
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xdc], edx
call fcn.10104200
mov eax, esp
lea ecx, [esp + 0x220]
mov dword [eax], ecx
mov eax, dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx + 4], 0x8af309
mov dword [ecx], 0x4a85b2
mov ecx, dword [sym.imp.USER32.dll_ChangeClipboardChain]
mov dword [esp + 0xd8], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x16d2cd
mov ecx, dword [sym.imp.KERNEL32.dll_HeapUnlock]
mov dword [esp + 0xd4], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 8], 0x17
mov dword [ecx + 4], 0x9b16a3
mov dword [ecx], 0x9b16a3
mov ecx, dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov dword [esp + 0xd0], eax
call ecx
sub esp, 0xc
xor ecx, ecx
mov edx, 0x18
mov esi, dword [esp + 0x188]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x18
mov dword [esp + 0xcc], eax
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xc4], edx
call fcn.10104200
mov eax, esp
lea ecx, [esp + 0x220]
mov dword [eax], ecx
mov eax, dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx + 4], 0x8af309
mov dword [ecx], 0x4a85b2
mov ecx, dword [sym.imp.USER32.dll_ChangeClipboardChain]
mov dword [esp + 0xc0], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x16d2cd
mov ecx, dword [sym.imp.KERNEL32.dll_HeapUnlock]
mov dword [esp + 0xbc], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 8], 0x17
mov dword [ecx + 4], 0x9b16a3
mov dword [ecx], 0x9b16a3
mov ecx, dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov dword [esp + 0xb8], eax
call ecx
sub esp, 0xc
xor ecx, ecx
mov edx, 0x18
mov esi, dword [esp + 0x188]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x18
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xac], edx
call fcn.10104200
mov eax, esp
lea ecx, [esp + 0x220]
mov dword [eax], ecx
mov eax, dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx + 4], 0x8af309
mov dword [ecx], 0x4a85b2
mov ecx, dword [sym.imp.USER32.dll_ChangeClipboardChain]
mov dword [esp + 0xa8], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x16d2cd
mov ecx, dword [sym.imp.KERNEL32.dll_HeapUnlock]
mov dword [esp + 0xa4], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 8], 0x17
mov dword [ecx + 4], 0x9b16a3
mov dword [ecx], 0x9b16a3
mov ecx, dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov dword [esp + 0xa0], eax
call ecx
sub esp, 0xc
xor ecx, ecx
mov edx, 0x18
mov esi, dword [esp + 0x188]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x18
mov dword [esp + 0x9c], eax
mov dword [esp + 0x98], ecx
mov dword [esp + 0x94], edx
call fcn.10104200
mov eax, esp
lea ecx, [esp + 0x220]
mov dword [eax], ecx
mov eax, dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx + 4], 0x8af309
mov dword [ecx], 0x4a85b2
mov ecx, dword [sym.imp.USER32.dll_ChangeClipboardChain]
mov dword [esp + 0x90], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x16d2cd
mov ecx, dword [sym.imp.KERNEL32.dll_HeapUnlock]
mov dword [esp + 0x8c], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 8], 0x17
mov dword [ecx + 4], 0x9b16a3
mov dword [ecx], 0x9b16a3
mov ecx, dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov dword [esp + 0x88], eax
call ecx
sub esp, 0xc
xor ecx, ecx
mov edx, 0x18
mov esi, dword [esp + 0x188]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x18
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], ecx
mov dword [esp + 0x7c], edx
call fcn.10104200
mov eax, esp
lea ecx, [esp + 0x220]
mov dword [eax], ecx
mov eax, dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx + 4], 0x8af309
mov dword [ecx], 0x4a85b2
mov ecx, dword [sym.imp.USER32.dll_ChangeClipboardChain]
mov dword [esp + 0x78], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x16d2cd
mov ecx, dword [sym.imp.KERNEL32.dll_HeapUnlock]
mov dword [esp + 0x74], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 8], 0x17
mov dword [ecx + 4], 0x9b16a3
mov dword [ecx], 0x9b16a3
mov ecx, dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov dword [esp + 0x70], eax
call ecx
sub esp, 0xc
xor ecx, ecx
mov edx, 0x18
mov esi, dword [esp + 0x188]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x18
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x64], edx
call fcn.10104200
mov eax, esp
lea ecx, [esp + 0x220]
mov dword [eax], ecx
mov eax, dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx + 4], 0x8af309
mov dword [ecx], 0x4a85b2
mov ecx, dword [sym.imp.USER32.dll_ChangeClipboardChain]
mov dword [esp + 0x60], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x16d2cd
mov ecx, dword [sym.imp.KERNEL32.dll_HeapUnlock]
mov dword [esp + 0x5c], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx + 8], 0x17
mov dword [ecx + 4], 0x9b16a3
mov dword [ecx], 0x9b16a3
mov ecx, dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov dword [esp + 0x58], eax
call ecx
sub esp, 0xc
xor ecx, ecx
mov edx, 0x18
mov esi, dword [esp + 0x188]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x18
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x4c], edx
call fcn.10104200
mov eax, esp
lea ecx, [esp + 0x220]
mov dword [eax], ecx
mov eax, dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
call eax
sub esp, 4
mov dword [esp + 0x48], eax
jmp 0x10002cac
mov eax, esp
mov dword [eax], 0xe475dd
mov eax, dword [sym.imp.GDI32.dll_SaveDC]
call eax
sub esp, 4
xor ecx, ecx
mov edx, 0x1c
mov esi, dword [esp + 0x184]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1c
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], edx
call fcn.10104200
mov eax, esp
lea ecx, [esp + 0x1d0]
mov dword [eax + 4], ecx
mov dword [eax], 0xac8dc2
call sub.KERNEL32.dll_Thread32Next
sub esp, 8
mov ecx, esp
mov dword [ecx], 0x2b0ae5
mov ecx, dword [sym.imp.USER32.dll_SetThreadDesktop]
mov dword [esp + 0x38], eax
call ecx
sub esp, 4
mov dword [esp + 0x34], eax
xor eax, eax
mov ecx, 0x14
mov edx, dword [esp + 0x180]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], ecx
call fcn.10104200
mov eax, esp
mov ecx, dword [esp + 0x180]
mov dword [eax], ecx
mov dword [eax + 8], 1
mov dword [eax + 4], 0x3d
mov eax, dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorControl]
call eax
sub esp, 0xc
mov ecx, esp
mov dword [ecx + 4], 0x831
mov dword [ecx], 0x93309
mov ecx, dword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov dword [esp + 0x28], eax
call ecx
sub esp, 8
mov dword [esp + 0x258], 0x5a4
mov ecx, esp
lea edx, [esp + 0x258]
mov dword [ecx + 0x10], edx
mov edx, dword [esp + 0x1b0]
mov esi, dword [edx]
mov dword [ecx + 0xc], esi
mov dword [ecx + 8], 0xcf0
mov dword [ecx + 4], 0x58
mov dword [ecx], 0x325aa4
mov ecx, dword [sym.imp.KERNEL32.dll_FillConsoleOutputCharacterA]
mov dword [esp + 0x24], eax
call ecx
sub esp, 0x14
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x174]
add eax, 1
mov dword [esp + 0x25c], 0x390
mov ecx, esp
lea edx, [esp + 0x25c]
mov dword [ecx + 4], edx
mov dword [ecx], 0x6078b6
mov ecx, dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [esp + 0x1c], eax
call ecx
sub esp, 8
mov ecx, dword [esp + 0x1c]
cmp ecx, 0xb0
mov dword [esp + 0x18], eax
mov dword [esp + 0x178], ecx
jne 0x100022c7
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret