Function at 0x100013a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xd0
mov esi, esp
mov eax, 0x10
call fcn.1000a4e0
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, 4
mov dword [esi + 0xc4], eax
mov eax, ecx
mov dword [esi + 0xc0], ecx
call fcn.1000a4e0
mov eax, esp
mov ecx, dword [esi + 0xc0]
mov dword [esi + 0xbc], eax
mov eax, ecx
call fcn.1000a4e0
mov eax, esp
mov ecx, 8
mov dword [esi + 0xb8], eax
mov eax, ecx
mov dword [esi + 0xb4], ecx
call fcn.1000a4e0
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, 0x14
mov dword [esi + 0xb0], eax
mov eax, ecx
call fcn.1000a4e0
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, 0x1c
mov dword [esi + 0xac], eax
mov eax, ecx
call fcn.1000a4e0
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, dword [esi + 0xc0]
mov dword [esi + 0xa8], eax
mov eax, ecx
call fcn.1000a4e0
mov eax, esp
mov ecx, dword [esi + 0xb4]
mov dword [esi + 0xa4], eax
mov eax, ecx
call fcn.1000a4e0
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, dword [esi + 0xc0]
mov dword [esi + 0xa0], eax
mov eax, ecx
call fcn.1000a4e0
mov eax, esp
mov ecx, dword [esi + 0xc0]
mov dword [esi + 0x9c], eax
mov eax, ecx
call fcn.1000a4e0
mov eax, esp
mov ecx, dword [esi + 0xb4]
mov dword [esi + 0x98], eax
mov eax, ecx
call fcn.1000a4e0
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov dword [esi + 0xc8], 0
mov dword [esi + 0x94], eax
jmp 0x10001662
mov eax, dword [esi + 0xa0]
sub esp, 4
mov ecx, esp
mov dword [ecx], str.ECzR7D4UNSh
mov ecx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi + 0x90], eax
call ecx
sub esp, 4
mov eax, esp
mov dword [eax], 0xe7721e
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
xor ecx, ecx
mov edx, 8
sub esp, 0xc
mov edi, dword [esi + 0x90]
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 8
mov dword [esi + 0x8c], eax
mov dword [esi + 0x88], ecx
mov dword [esi + 0x84], edx
call fcn.1000a960
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0xa0]
mov dword [eax + 4], ecx
mov dword [eax], 0xd48f94
mov eax, dword [sym.imp.KERNEL32.dll_SetConsoleCursorInfo]
call eax
mov ecx, dword [esi + 0x9c]
mov word [ecx], 0x2c
mov edx, dword [esi + 0x98]
mov dword [edx], 0xe8
sub esp, 0x1c
mov edi, esp
mov ebx, dword [esi + 0x94]
mov dword [edi + 0x18], ebx
mov dword [edi + 0x14], edx
mov dword [edi + 0x10], edx
mov dword [edi + 4], ecx
mov dword [edi + 0xc], 0xcef
mov dword [edi + 8], 0xcef
mov dword [edi], 0x2641e4
mov edi, dword [sym.imp.GDI32.dll_GetTextExtentExPointI]
mov dword [esi + 0x80], eax
call edi
mov dword [esi + 0x7c], eax
jmp 0x100018c3
sub esp, 4
mov eax, esp
mov dword [eax], 0xb95953
mov eax, dword [sym.imp.KERNEL32.dll_DeleteTimerQueue]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx], 0xdbda46
mov ecx, dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [esi + 0x78], eax
call ecx
mov dword [esi + 0x74], eax
jmp 0x100017b1
mov eax, dword [esi + 0xc8]
add eax, 1
mov dword [esi + 0xc8], eax
jmp 0x10001662
jmp 0x100018d5
mov eax, dword [esi + 0xa4]
mov dword [eax], 0
jmp 0x100018ac
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
sub esp, 4
mov eax, esp
mov dword [eax], 0x759b1e
mov eax, dword [sym.imp.GDI32.dll_DeleteMetaFile]
call eax
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0x814
mov dword [ecx], 0x511060
mov ecx, dword [sym.imp.GDI32.dll_SetDCPenColor]
mov dword [esi + 0x70], eax
call ecx
sub esp, 8
mov ecx, esp
mov edx, dword [esi + 0xb0]
mov dword [ecx + 4], edx
mov dword [ecx], 0xf4e29a
mov ecx, dword [sym.imp.GDI32.dll_GetAspectRatioFilterEx]
mov dword [esi + 0x6c], eax
call ecx
mov dword [esi + 0x68], eax
jmp 0x10001819
cmp dword [esi + 0xc8], 0x106
setne al
mov byte [esi + 0x67], al
mov al, byte [esi + 0x67]
test al, 1
jne 0x1000167b
jmp 0x10001604
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], 0x901
mov dword [eax + 4], 0x901
mov dword [eax], 0x3a018b
mov eax, dword [sym.imp.USER32.dll_EnableMenuItem]
call eax
sub esp, 4
mov ecx, esp
mov dword [ecx], 0x662a8f
mov ecx, dword [sym.imp.USER32.dll_SetClipboardViewer]
mov dword [esi + 0x60], eax
call ecx
sub esp, 4
mov ecx, esp
mov dword [ecx], 0xb03ab7
mov ecx, dword [sym.imp.ADVAPI32.dll_CloseEventLog]
mov dword [esi + 0x5c], eax
call ecx
xor ecx, ecx
mov edx, 0x10
mov edi, dword [esi + 0xc4]
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
mov dword [esi + 0x58], eax
mov dword [esi + 0x54], ecx
mov dword [esi + 0x50], edx
call fcn.1000a960
add esp, 0xc
mov eax, dword [esi + 0xbc]
mov dword [eax], 0x13d
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x14], eax
mov edx, dword [esi + 0xc4]
mov dword [ecx + 0x10], edx
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], 0xfb3
mov dword [ecx + 4], 0xb06
mov dword [ecx], 0xbbfc
mov ecx, dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
call ecx
mov ecx, dword [esi + 0xb8]
mov dword [ecx], 0
mov dword [esi + 0x4c], eax
jmp 0x10001748
mov eax, dword [esi + 0xb8]
cmp dword [eax], 0x99
je 0x100017c5
mov eax, 0xf
mov ecx, dword [esi + 0xb8]
mov edx, dword [ecx]
mov dword [esi + 0x48], eax
mov eax, edx
xor edx, edx
mov edi, dword [esi + 0x48]
div edi
mov dword [esi + 0x44], edx
mov eax, dword [esi + 0x44]
sub eax, 7
mov dword [esi + 0x40], eax
je 0x100015ab
jmp 0x10001783
mov eax, dword [esi + 0x44]
sub eax, 2
mov dword [esi + 0x3c], eax
jne 0x100017b1
jmp 0x10001790
sub esp, 8
mov eax, esp
mov dword [eax + 4], 0x6933dc
mov dword [eax], 0x67a3fe
mov eax, dword [sym.imp.USER32.dll_IsChild]
call eax
mov dword [esi + 0x38], eax
jmp 0x100015ab
jmp 0x100017b3
mov eax, dword [esi + 0xb8]
mov ecx, dword [eax]
add ecx, 1
mov dword [eax], ecx
jmp 0x10001748
mov eax, dword [sym.imp.KERNEL32.dll_AllocConsole]
call eax
mov ecx, dword [esi + 0xc8]
mov dword [esi + 0x34], eax
mov dword [esi + 0x30], ecx
mov eax, 0xcc29786d
mov ecx, dword [esi + 0x30]
mov dword [esi + 0x2c], eax
mov eax, ecx
mov edx, dword [esi + 0x2c]
mul edx
shr edx, 8
imul eax, edx, 0x141
sub ecx, eax
mov eax, ecx
sub eax, 0x41
mov dword [esi + 0x28], ecx
mov dword [esi + 0x24], eax
je 0x1000160c
jmp 0x10001808
mov eax, dword [esi + 0x28]
sub eax, 0xb
mov dword [esi + 0x20], eax
jne 0x100015f3
jmp 0x10001819
xor eax, eax
mov ecx, 0x14
mov edx, dword [esi + 0xac]
mov edi, dword [esi + 0xac]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
mov dword [esi + 0x1c], eax
mov dword [esi + 0x18], ecx
mov dword [esi + 0x14], edi
call fcn.1000a960
add esp, 0xc
sub esp, 8
mov eax, esp
mov ecx, dword [esi + 0x14]
mov dword [eax], ecx
mov dword [eax + 4], 0x496
mov eax, dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
call eax
sub esp, 8
mov ecx, esp
mov edx, dword [esi + 0xa8]
mov dword [ecx + 4], edx
mov dword [ecx], 0x536c95
mov ecx, dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
mov dword [esi + 0x10], eax
call ecx
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], 0x1bef0
mov dword [ecx], 0x995066
mov ecx, dword [sym.imp.USER32.dll_KillTimer]
mov dword [esi + 0xc], eax
call ecx
mov dword [esi + 8], eax
jmp 0x100018d5
mov eax, dword [esi + 0xa4]
cmp dword [eax], 0xa
jne 0x100014ca
jmp 0x100015ee
mov eax, dword [esi + 0xa4]
mov ecx, dword [eax]
add ecx, 1
mov dword [eax], ecx
jmp 0x100018ac
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], 0xef5927
mov dword [eax + 4], 0x63573d
mov dword [eax], 0xf5922a
mov eax, dword [sym.imp.GDI32.dll_FillRgn]
call eax
mov dword [esi + 4], eax
jmp 0x100015db