Function at 0x1008387
Capabilities:
Terminate process

Disassembly:
cmp cx, bx
jne 0x1006daf
movzx ecx, word [eax]
cmp cx, bx
jne 0x100d4a7
test byte [ebp - 0x40], 1
je 0x1006dbd
movzx ecx, word [ebp - 0x3c]
push ecx
push eax
push ebx
push 0x1000000
call fcn.01009d45
mov dword [0x101f824], eax
cmp dword [0x101f7fc], ebx
jne 0x100d4eb
push eax
call dword [sym.imp.msvcrt.dll_exit]
mov edi, dword [ebp - 0x210]
push dword [ebp - 0x214]
lea edi, [edi*4 + 0x101e548]
mov ecx, dword [edi]
mov eax, dword [ecx]
call dword [eax]
test eax, eax
jl 0x1009786
mov ecx, dword [edi]
mov eax, dword [ecx]
mov edi, 0x104
push edi
lea edx, [ebp - 0x20c]
push edx
call dword [eax + 0x10]
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x264]
push eax
push dword [ebp - 0x210]
mov dword [ebp - 0x264], 1
push 0x133e
push dword [ebp - 0x214]
mov dword [ebp - 0x260], ebx
mov dword [ebp - 0x25c], ebx
mov dword [ebp - 0x254], edi
mov dword [ebp - 0x250], ebx
mov dword [ebp - 0x24c], ebx
call esi
inc dword [ebp - 0x210]
mov eax, dword [ebp - 0x210]
cmp eax, dword [0x101e0d8]
jl 0x100539c
call fcn.010049ce
mov eax, dword [0x101e158]
cmp eax, ebx
jl 0x1007fc3
mov ecx, dword [0x101e0d8]
cmp eax, ecx
jl 0x1009799
jmp 0x1007fc3
push ebx
push 0x64
push 0x22c
push dword [0x101e098]
call esi
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01001679
leave
ret 4
push ebx
push eax
push 0x130c
push 0x3e8
push dword [0x101e098]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call esi
mov eax, dword [0x101e158]
mov ecx, dword [eax*4 + 0x101e548]
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x248]
push eax
push dword [ebp - 0x218]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x23c]
sub eax, dword [ebp - 0x244]
push eax
mov eax, dword [ebp - 0x240]
sub eax, dword [ebp - 0x248]
push eax
push ebx
push dword [0x101e098]
call fcn.01005ce3
jmp 0x10097b0
xor ecx, ecx
cmp dword [ebp - 0x1c], ebx
sete cl
mov dword [ebp - 0x1c], ecx
jmp 0x1006eb5
mov dword [0x1020830], esi
jmp 0x1006e4f
cmp dword [ebp - 0x1c], ebx
je 0x100535d
jmp 0x1006eab
push 0xa
pop ecx
jmp 0x1005377
push 0x5c
push 0x1006ee0
call fcn.0100693b
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov dword [ebp - 4], 0xfffffffe
mov dword [ebp - 4], 1
mov eax, dword fs:[0x18]
mov esi, dword [eax + 4]
mov dword [ebp - 0x20], ebx
mov edi, 0x101e470
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
cmp eax, ebx
jne 0x100d459
xor esi, esi
inc esi
mov eax, dword [0x101e104]
cmp eax, esi
je 0x100d478
mov eax, dword [0x101e104]
test eax, eax
jne 0x1006da4
mov dword [0x101e104], esi
push 0x1006edc
push 0x1006ed0
call fcn.0100788d
pop ecx
pop ecx
test eax, eax
jne 0x100d50e
mov eax, dword [0x101e104]
cmp eax, esi
jne 0x1006e73
push 0x1006ecc
push 0x1006ebc
call sub.msvcrt.dll__initterm
pop ecx
pop ecx
mov dword [0x101e104], 2
cmp dword [ebp - 0x20], ebx
jne 0x1006e80
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp dword [0x101fb10], ebx
jne 0x100d485
mov eax, dword [sym.imp.msvcrt.dll__wcmdln]
cmp dword [eax], ebx
je 0x100d50e
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
movzx ecx, word [eax]
cmp cx, 0x20
jbe 0x1005354
cmp cx, 0x22
je 0x1006d94
inc eax
inc eax
jmp 0x1006e9b
xor eax, eax
mov dword [0x101e158], eax
jmp 0x1005c74
call fcn.01008396
jmp 0x1006dc5
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x100541f
cmp ecx, 3
jne 0x1005c74
cmp eax, 2
je 0x1007fc3
jmp 0x1005c74
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push ebx
push 0xfa0
push 0x22b
push dword [0x101e098]
call esi
cmp dword [0x101fdac], ebx
je 0x1005658
mov al, byte [0x101fdb0]
cmp al, 4
jae 0x10097e6
cmp al, bl
jne 0x1005658
mov ecx, dword [0x101fd9c]
mov edx, 0x80010000
and ecx, edx
xor eax, eax
or eax, ecx
je 0x1005658
mov ecx, dword [0x101fda4]
mov eax, ecx
and eax, edx
cmp ebx, dword [0x101fda0]
jne 0x1005658
cmp eax, ecx
jne 0x1005658
push 0x1009838
push dword [0x101fd84]
push dword [0x101fd80]
call fcn.0100dd53
jmp 0x1005658
cmp eax, esi
jne 0x100d468
xor esi, esi
inc esi
mov dword [ebp - 0x20], esi
jmp 0x1006e16
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1006e02
push 0x1f
call sub.msvcrt.dll__amsg_exit
pop ecx
jmp 0x1006e4f
push 0x101fb10
call fcn.0101b14b
pop ecx
test eax, eax
je 0x1006e8c
push ebx
push 2
push ebx
call dword [0x101fb10]
jmp 0x1006e8c
cmp cx, 0x20
ja 0x1005369
inc eax
inc eax
mov dword [ebp - 0x24], eax
jmp 0x100535d
cmp dword [0x1020830], ebx
jne 0x100d4f9
call dword [sym.imp.msvcrt.dll__cexit]
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [0x101f824]
jmp 0x100d51a
mov dword [ebp - 4], 0xfffffffe
mov eax, 0xff
call fcn.010086b4
ret