Function at 0xa444e0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0xa8e3fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x23c
push ebx
push ebp
push esi
mov esi, dword [esp + 0x258]
lea eax, [esp + 0xc]
push edi
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
add ecx, 0xffffff47
add edx, 0xffffff7e
push str.Please_read_the_Thinstall_Runtime_License_Agreement
push str.EulaMsg
mov edi, eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0x30], edx
call fcn.00a352d0
mov ecx, dword [esp + 0x20]
add esp, 8
add ecx, 0xffffff56
push 0
push edi
push 0
push esi
push 0x14
push ecx
push 0xa
push 0xaa
push 0x50000000
push eax
push str.STATIC
push 0x20
call fcn.00a24440
mov edx, dword [0xaf4f04]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push edx
push 0x30
push eax
call ebx
lea ecx, [esp + 0x3c]
call fcn.00a155c0
push 2
mov dword [esp + 0x258], 0
call fcn.00a358e0
push 3
mov ebp, eax
call fcn.00a358e0
mov ecx, dword [0xaf4f0c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x24]
push ecx
add eax, 0xffffffdd
mov dword [esp + 0x2c], eax
call fcn.00a444a0
add esp, 0xc
mov dword [esp + 0x2c], eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edx, dword [esp + 0x20]
push eax
push 0
add edx, 0xffffffce
push esi
push edx
push 0x96
push 0xa
push 0xa
push 0x5000000e
push 0
push 0xaaa4e8
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, dword [esp + 0x2c]
push ecx
push 0
push 0x172
push eax
call ebx
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
push 0
push edi
push 0
push esi
add edx, 0xffffff56
push 0x14
add eax, 0xffffffb2
push edx
push eax
push 0xaa
push 0x50010002
push str.I_accept_the_terms_in_the_License_Agreement
push str.BUTTON
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, dword [0xaf4f04]
push 0
push ecx
push 0x30
push eax
mov dword [0xaf4f18], eax
call ebx
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
push 0
push edi
push 0
push esi
push edx
mov edx, dword [esp + 0x2c]
lea ecx, [ebp + ebp + 0x1e]
push ebp
sub edx, ecx
push eax
push edx
lea eax, [esp + 0x5c]
push 0x56030000
push eax
push 4
call fcn.00a35890
add esp, 8
push eax
push 0xaaa4a4
call fcn.00a242c0
push 0
push eax
mov dword [0xaf4f14], eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov ecx, dword [0xaf4f04]
mov edx, dword [0xaf4f14]
push 0
push ecx
push 0x30
push edx
call ebx
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
push 0
push edi
push 0
push esi
sub ecx, eax
push 2
add edx, 0xffffffd1
push ecx
push edx
push eax
push 0x50000010
push 0xab4cd8
push 0xaaa4e8
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0
push edi
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push 0
push esi
sub edx, ebp
push eax
push ebp
sub edx, 0xa
push ecx
push edx
lea eax, [esp + 0x5c]
push 0x56030000
push eax
push 5
call fcn.00a35890
add esp, 8
push eax
push 0xaaa4a4
call fcn.00a242c0
mov ecx, dword [0xaf4f04]
xor edi, edi
push edi
push ecx
push 0x30
push eax
mov dword [0xaf4f10], eax
call ebx
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x38]
push edi
push esi
push edx
push eax
push 0x23
push 0xaa
push 0x50202804
push 0xab4cd8
push str.RICHEDIT
push 0x220
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, dword [0xaf4f08]
lea edx, [esp + 0x34]
push ecx
push edx
push 0x461
push eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], edi
call ebx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x254], 0xffffffff
call fcn.00a155e0
mov ecx, dword [esp + 0x24c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x248
ret