Function at 0x10002d40
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ecx
movzx eax, byte [eax + 4]
push ebx
push esi
push edi
cmp eax, 0xb
ja case.default.0x10002d54
jmp dword [eax*4 + 0x10003818]
push 0x1388
mov ecx, 0xc
call fcn.10006570
push eax
push 1
mov eax, 0x1001e378
call fcn.1000bb40
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, 0xe
call fcn.10006570
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], eax
mov eax, dword [0x1001e254]
xor edi, edi
cmp eax, edi
je 0x10002dc4
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push ecx
push edx
mov dword [0x1001e254], edi
call esi
jmp 0x10002dca
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1001e37c]
cmp eax, edi
je 0x10002def
push edi
push edi
push 0x10
push eax
call ebx
mov eax, dword [0x1001e984]
mov ecx, dword [str.SPLASH]
push eax
push ecx
mov dword [0x1001e37c], edi
call esi
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10002e14
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
push edx
push eax
mov dword [0x1001e4a4], edi
call esi
mov eax, dword [ebp - 4]
push 0xff
push 0x6a
mov esi, 0x1001e4a0
call fcn.1000b1c0
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push edi
push edi
push esi
push 0x1000baa0
push edi
push edi
mov dword [0x1001e4a8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [0x1001e4a8]
push 0xffffffffffffffff
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [0x1001e4a8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10002e97
push edi
push edi
push 0x10
push eax
call ebx
mov eax, dword [0x1001e984]
mov ecx, dword [str.SPLASH]
push eax
mov dword [0x1001e4a4], edi
push ecx
call dword [sym.imp.USER32.dll_UnregisterClassA]
call fcn.1000b720
mov ecx, 0xf
call fcn.10006570
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], eax
mov eax, dword [0x1001e254]
xor edi, edi
cmp eax, edi
je 0x10002ede
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push edx
push eax
mov dword [0x1001e254], edi
call esi
jmp 0x10002ee4
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1001e37c]
cmp eax, edi
je 0x10002f0a
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
push ecx
push edx
mov dword [0x1001e37c], edi
call esi
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10002f2f
push edi
push edi
push 0x10
push eax
call ebx
mov eax, dword [0x1001e984]
mov ecx, dword [str.SPLASH]
push eax
push ecx
mov dword [0x1001e4a4], edi
call esi
mov eax, dword [ebp - 4]
push 0xff
push 0x6a
mov esi, 0x1001e4a0
call fcn.1000b1c0
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push edi
push edi
push esi
push 0x1000baa0
push edi
push edi
mov dword [0x1001e4a8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, dword [0x1001e4a8]
push 0xffffffffffffffff
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x1001e4a8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10002fb2
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
push ecx
push edx
mov dword [0x1001e4a4], edi
call dword [sym.imp.USER32.dll_UnregisterClassA]
call fcn.1000b720
mov ecx, 0x10
call fcn.10006570
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], eax
mov eax, dword [0x1001e254]
xor edi, edi
cmp eax, edi
je 0x10002ff9
push edi
push edi
push 0x10
push eax
call ebx
mov eax, dword [0x1001e984]
mov ecx, dword [str.SPLASH]
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push eax
push ecx
mov dword [0x1001e254], edi
call esi
jmp 0x10002fff
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1001e37c]
cmp eax, edi
je 0x10003024
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
push edx
push eax
mov dword [0x1001e37c], edi
call esi
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x1000304a
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
push ecx
push edx
mov dword [0x1001e4a4], edi
call esi
mov eax, dword [ebp - 4]
push 0xff
push 0x6a
mov esi, 0x1001e4a0
call fcn.1000b1c0
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push edi
push edi
push esi
push 0x1000baa0
push edi
push edi
mov dword [0x1001e4a8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x1001e4a8]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x1001e4a8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x100030cc
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
push edx
push eax
mov dword [0x1001e4a4], edi
call dword [sym.imp.USER32.dll_UnregisterClassA]
call fcn.1000b720
mov ecx, 0x11
call fcn.10006570
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], eax
mov eax, dword [0x1001e254]
xor edi, edi
cmp eax, edi
je 0x10003114
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push ecx
push edx
mov dword [0x1001e254], edi
call esi
jmp 0x1000311a
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1001e37c]
cmp eax, edi
je 0x1000313f
push edi
push edi
push 0x10
push eax
call ebx
mov eax, dword [0x1001e984]
mov ecx, dword [str.SPLASH]
push eax
push ecx
mov dword [0x1001e37c], edi
call esi
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10003164
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
push edx
push eax
mov dword [0x1001e4a4], edi
call esi
mov eax, dword [ebp - 4]
push 0xff
push 0x6a
mov esi, 0x1001e4a0
call fcn.1000b1c0
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push edi
push edi
push esi
push 0x1000baa0
push edi
push edi
mov dword [0x1001e4a8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [0x1001e4a8]
push 0xffffffffffffffff
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [0x1001e4a8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10002e97
jmp 0x10002e77
mov ecx, 0x12
call fcn.10006570
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], eax
mov eax, dword [0x1001e254]
xor edi, edi
cmp eax, edi
je 0x10003212
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push edx
push eax
mov dword [0x1001e254], edi
call esi
jmp 0x10003218
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1001e37c]
cmp eax, edi
je 0x1000323e
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
push ecx
push edx
mov dword [0x1001e37c], edi
call esi
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10003263
push edi
push edi
push 0x10
push eax
call ebx
mov eax, dword [0x1001e984]
mov ecx, dword [str.SPLASH]
push eax
push ecx
mov dword [0x1001e4a4], edi
call esi
mov eax, dword [ebp - 4]
push 0xff
push 0x6a
mov esi, 0x1001e4a0
call fcn.1000b1c0
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push edi
push edi
push esi
push 0x1000baa0
push edi
push edi
mov dword [0x1001e4a8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, dword [0x1001e4a8]
push 0xffffffffffffffff
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x1001e4a8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10002e97
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
push ecx
mov dword [0x1001e4a4], edi
push edx
jmp 0x10002e91
mov ecx, 0x13
call fcn.10006570
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], eax
mov eax, dword [0x1001e254]
xor edi, edi
cmp eax, edi
je 0x1000332b
push edi
push edi
push 0x10
push eax
call ebx
mov eax, dword [0x1001e984]
mov ecx, dword [str.SPLASH]
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push eax
push ecx
mov dword [0x1001e254], edi
call esi
jmp 0x10003331
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1001e37c]
cmp eax, edi
je 0x10003356
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
push edx
push eax
mov dword [0x1001e37c], edi
call esi
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x1000337c
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
push ecx
push edx
mov dword [0x1001e4a4], edi
call esi
mov eax, dword [ebp - 4]
push 0xff
push 0x6a
mov esi, 0x1001e4a0
call fcn.1000b1c0
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push edi
push edi
push esi
push 0x1000baa0
push edi
push edi
mov dword [0x1001e4a8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x1001e4a8]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x1001e4a8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10002e97
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
push edx
mov dword [0x1001e4a4], edi
push eax
jmp 0x10002e91
mov ecx, 0x14
call fcn.10006570
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], eax
mov eax, dword [0x1001e254]
xor edi, edi
cmp eax, edi
je 0x10003444
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push ecx
push edx
mov dword [0x1001e254], edi
call esi
jmp 0x1000344a
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1001e37c]
cmp eax, edi
je 0x1000346f
push edi
push edi
push 0x10
push eax
call ebx
mov eax, dword [0x1001e984]
mov ecx, dword [str.SPLASH]
push eax
push ecx
mov dword [0x1001e37c], edi
call esi
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10003494
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
push edx
push eax
mov dword [0x1001e4a4], edi
call esi
mov eax, dword [ebp - 4]
push 0xff
push 0x6a
mov esi, 0x1001e4a0
call fcn.1000b1c0
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push edi
push edi
push esi
push 0x1000baa0
push edi
push edi
mov dword [0x1001e4a8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [0x1001e4a8]
push 0xffffffffffffffff
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [0x1001e4a8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10002e97
jmp 0x10002e77
mov ecx, 0x16
call fcn.10006570
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], eax
mov eax, dword [0x1001e254]
xor edi, edi
cmp eax, edi
je 0x10003542
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push edx
push eax
mov dword [0x1001e254], edi
call esi
jmp 0x10003548
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1001e37c]
cmp eax, edi
je 0x1000356e
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
push ecx
push edx
mov dword [0x1001e37c], edi
call esi
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10003263
jmp 0x10003247
mov ecx, 0x18
call fcn.10006570
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], eax
mov eax, dword [0x1001e254]
xor edi, edi
cmp eax, edi
je 0x100035c2
push edi
push edi
push 0x10
push eax
call ebx
mov eax, dword [0x1001e984]
mov ecx, dword [str.SPLASH]
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push eax
push ecx
mov dword [0x1001e254], edi
call esi
jmp 0x100035c8
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1001e37c]
cmp eax, edi
je 0x100035ed
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
push edx
push eax
mov dword [0x1001e37c], edi
call esi
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10003613
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
push ecx
push edx
mov dword [0x1001e4a4], edi
call esi
mov eax, dword [ebp - 4]
push 0xff
push 0x6a
mov esi, 0x1001e4a0
call fcn.1000b1c0
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push edi
push edi
push esi
push 0x1000baa0
push edi
push edi
mov dword [0x1001e4a8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x1001e4a8]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x1001e4a8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10002e97
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
push edx
mov dword [0x1001e4a4], edi
push eax
jmp 0x10002e91
mov ecx, 0x19
call fcn.10006570
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], eax
mov eax, dword [0x1001e254]
xor edi, edi
cmp eax, edi
je 0x100036db
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push ecx
push edx
mov dword [0x1001e254], edi
call esi
jmp 0x100036e1
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1001e37c]
cmp eax, edi
je 0x10003706
push edi
push edi
push 0x10
push eax
call ebx
mov eax, dword [0x1001e984]
mov ecx, dword [str.SPLASH]
push eax
push ecx
mov dword [0x1001e37c], edi
call esi
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x1000372b
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
push edx
push eax
mov dword [0x1001e4a4], edi
call esi
mov eax, dword [ebp - 4]
push 0xff
push 0x6a
mov esi, 0x1001e4a0
call fcn.1000b1c0
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push edi
push edi
push esi
push 0x1000baa0
push edi
push edi
mov dword [0x1001e4a8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [0x1001e4a8]
push 0xffffffffffffffff
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [0x1001e4a8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10002e97
jmp 0x10002e77
mov ecx, 0x15
call fcn.10006570
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], eax
mov eax, dword [0x1001e254]
xor edi, edi
cmp eax, edi
je 0x100037d9
push edi
push edi
push 0x10
push eax
call ebx
mov edx, dword [0x1001e984]
mov eax, dword [str.SPLASH]
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
push edx
push eax
mov dword [0x1001e254], edi
call esi
jmp 0x100037df
mov esi, dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1001e37c]
cmp eax, edi
je 0x10003805
push edi
push edi
push 0x10
push eax
call ebx
mov ecx, dword [0x1001e984]
mov edx, dword [str.SPLASH]
push ecx
push edx
mov dword [0x1001e37c], edi
call esi
mov eax, dword [0x1001e4a4]
cmp eax, edi
je 0x10003263
jmp 0x10003247