Function at 0x1008ae4
Capabilities:
Create process on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2a0
mov eax, dword [0x100eb54]
push ebx
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
mov esi, 0xf0
push esi
mov ebx, ecx
push 0x41d
push dword [ebx + 4]
mov dword [ebp - 4], eax
call edi
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push esi
push 0x41e
push dword [ebx + 4]
mov dword [ebp - 0x258], eax
call edi
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push esi
push 0x41f
push dword [ebx + 4]
mov dword [ebp - 0x264], eax
call edi
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
xor esi, esi
cmp dword [ebp - 0x258], esi
mov dword [ebp - 0x260], eax
je 0x1008c05
cmp dword [ebx + 0x348], esi
jne 0x1008c1d
push 1
push 0x5e5
push 0x5e6
push dword [ebx + 4]
call fcn.0100384a
cmp eax, 1
jne 0x1008be3
mov eax, dword [ebx + 0x14]
imul eax, eax, 0xe0
add eax, dword [ebx + 0xc]
push 2
push eax
call dword [sym.imp.USER32.dll_ChangeDisplaySettingsW]
test eax, eax
jne 0x1008bbc
mov eax, dword [ebx + 0x14]
imul eax, eax, 0xe0
add eax, dword [ebx + 0xc]
push 9
push eax
call dword [sym.imp.USER32.dll_ChangeDisplaySettingsW]
push 1
push 0x5e7
push 0x5e8
push dword [ebx + 4]
call fcn.0100384a
xor ecx, ecx
inc ecx
cmp eax, ecx
je 0x1008bfd
push 9
lea eax, [ebx + 0x18]
push eax
call dword [sym.imp.USER32.dll_ChangeDisplaySettingsW]
push esi
push esi
push 0xf1
push 0x41d
push dword [ebx + 4]
call edi
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1008c1d
mov dword [ebx + 0x348], ecx
jmp 0x1008c1d
lea eax, [ebx + 0x348]
cmp dword [eax], esi
je 0x1008c1d
mov dword [eax], esi
push 9
lea eax, [ebx + 0x18]
push eax
call dword [sym.imp.USER32.dll_ChangeDisplaySettingsW]
cmp dword [ebp - 0x264], esi
lea eax, [ebx + 0x34c]
je 0x1008dbb
cmp dword [eax], esi
jne 0x1008e39
push 0x7d
pop ecx
mov dword [eax], 1
xor eax, eax
lea edi, [ebp - 0x254]
rep stosd dword es:[edi], eax
push esi
lea ecx, [ebp - 0x254]
mov eax, 0x1f4
push ecx
push eax
push 0x29
mov dword [ebp - 0x254], eax
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
push 0x17
pop ecx
push 0x48
push dword [0x100eb84]
xor eax, eax
push dword [0x100eb88]
lea edi, [ebp - 0x60]
rep stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp - 0x60], eax
mov al, byte [0x100eb90]
push 0x20
mov byte [ebp - 0x49], al
lea eax, [ebp - 0x44]
push eax
push 0xfa6
push dword [0x100eb74]
mov dword [ebp - 0x50], 0x2bc
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x17
pop ecx
push 0x17
pop eax
lea esi, [ebp - 0x60]
lea edi, [ebp - 0x23c]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x50], 0x190
mov ecx, eax
lea esi, [ebp - 0x60]
lea edi, [ebp - 0x1d8]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea esi, [ebp - 0x60]
lea edi, [ebp - 0x174]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea esi, [ebp - 0x60]
lea edi, [ebp - 0x118]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [ebp - 0x60]
lea esi, [ebp - 0x60]
lea edi, [ebp - 0xbc]
rep movsd dword es:[edi], dword [esi]
push eax
mov dword [ebp - 0x50], 0x2bc
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push dword [ebx + 4]
mov esi, eax
mov dword [ebp - 0x50], 0x190
call dword [sym.imp.USER32.dll_GetDC]
push esi
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
mov edi, eax
push edi
call esi
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x2a0]
push eax
push edi
call dword [sym.imp.GDI32.dll_GetTextMetricsW]
cmp dword [ebp - 0x258], 0
je 0x1008d50
push dword [ebp - 0x258]
push edi
call esi
push edi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp dword [0x100eb88], 0xe
push 0x12
pop eax
jl 0x1008d77
push 0x1a
pop ecx
mov dword [ebp - 0x240], ecx
mov dword [ebp - 0x244], ecx
jmp 0x1008d83
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x244], eax
mov esi, dword [sym.imp.USER32.dll_SystemParametersInfoW]
push 0xf
pop ecx
push 3
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x254]
push eax
push 0x1f4
push 0x2a
mov dword [ebp - 0x1e0], ecx
mov dword [ebp - 0x1dc], ecx
call esi
lea eax, [ebp - 0x60]
jmp 0x1008ddf
cmp dword [eax], esi
je 0x1008e39
mov dword [eax], esi
mov esi, dword [sym.imp.USER32.dll_SystemParametersInfoW]
push 3
lea eax, [ebx + 0xf4]
push eax
push 0x1f4
push 0x2a
call esi
lea eax, [ebx + 0x2e8]
push 3
push eax
push 0x5c
push 0x22
call esi
lea eax, [ebp - 0x25c]
push eax
mov esi, 0x1388
push esi
push 2
push 0
push 0
push 0x15
mov edi, 0xffff
push edi
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
lea eax, [ebp - 0x25c]
push eax
push esi
push 2
push 0x100250c
push 0x2a
push 0x1a
push edi
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
mov ecx, 0x100ecb4
call fcn.01008904
mov ecx, 0x101101c
call fcn.01008904
xor esi, esi
add ebx, 0x344
cmp dword [ebp - 0x260], esi
je 0x1008e62
cmp dword [ebx], esi
jne 0x1008ea2
xor eax, eax
inc eax
push eax
push esi
push esi
push 0x10024f4
push esi
push esi
mov dword [ebx], eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x1008ea2
cmp dword [ebx], esi
je 0x1008ea2
push 0xc8
lea eax, [ebp - 0x1f0]
push eax
push 0x1f41
mov dword [ebx], esi
push dword [0x100eb74]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x1f0]
push eax
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, esi
je 0x1008ea2
push esi
push esi
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0100bd20
leave
ret