Function at 0x1008a6cc
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100a9498
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov eax, dword [esi]
push ebx
call dword [eax + 0xc4]
mov ecx, dword [esi + 0xb98]
cmp ecx, ebx
je 0x1008a1c8
call sub.mfc42.dll_CWnd::SetFocus
mov eax, dword [esi + 0xc0]
mov dword [esi + 0xb98], ebx
add eax, 0xfffffffb
cmp eax, 0x3b
ja case.0x1008a1e8.35
xor ecx, ecx
mov cl, byte [eax + 0x1008a954]
jmp dword [ecx*4 + 0x1008a8d8]
mov ecx, esi
call fcn.10041420
mov ecx, eax
call fcn.1008a990
push ecx
inc eax
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call sub.mfc42.dll_CString::CString_1
mov ecx, esi
mov dword [esp + 0x34], ebx
call fcn.10041420
mov edx, dword [eax]
mov ecx, eax
mov dword [esp + 0x34], 0xffffffff
call dword [edx + 0x198]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x100c6b64
call sub.mfc42.dll_CString::CString_1
mov ecx, esi
mov dword [esp + 0x34], 1
call fcn.10041420
mov edx, dword [eax]
mov ecx, eax
mov dword [esp + 0x34], 0xffffffff
call dword [edx + 0x1a0]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edi, dword [esi + 0xb9c]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push edi
call sub.mfc42.dll_CString::CString_3
mov ecx, esi
mov dword [esp + 0x34], 2
call fcn.10041420
mov edx, dword [eax]
mov ecx, eax
mov dword [esp + 0x34], 0xffffffff
call dword [edx + 0x1a0]
jmp 0x1008a7c6
mov edi, dword [esi + 0xb9c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edi
call sub.mfc42.dll_CString::CString_3
mov ecx, esi
mov dword [esp + 0x38], 3
call fcn.10041420
mov edx, dword [eax]
mov ecx, eax
mov dword [esp + 0x38], 0xffffffff
call dword [edx + 0x1a4]
jmp 0x1008a7c6
mov al, byte [esi + 0xba0]
mov cx, word [esi + 0xba4]
mov dl, byte [esi + 0xbac]
mov byte [esp + 0x18], al
mov eax, dword [esi + 0x20]
mov word [esp + 0x1a], cx
push eax
mov edi, 1
mov byte [esp + 0x24], dl
mov byte [esp + 0x25], bl
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], bl
mov byte [esp + 0x28], bl
mov byte [esp + 0x29], bl
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov ebx, dword [esp + 0x18]
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], ebx
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x30]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0x34]
mov dword [ecx + 0xc], edi
mov cx, word [esi + 0xb9c]
push ecx
mov ecx, eax
call dword [edx + 0x1d0]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov cl, byte [esi + 0xba4]
mov edx, dword [eax]
push 1
push ecx
mov cl, byte [esi + 0xba0]
push ecx
mov cx, word [esi + 0xb9c]
push ecx
mov ecx, eax
call dword [edx + 0x1d4]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov cx, word [esi + 0xba0]
mov edx, dword [eax]
push ecx
mov cl, byte [esi + 0xb9c]
push ecx
mov ecx, eax
call dword [edx + 0x35c]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x404]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edi, dword [esi + 0xb9c]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push edi
call sub.mfc42.dll_CString::CString_3
mov ecx, esi
mov dword [esp + 0x34], 4
call fcn.10041420
mov edx, dword [eax]
mov ecx, eax
mov dword [esp + 0x34], 0xffffffff
call dword [edx + 0x134]
jmp 0x1008a7c6
mov eax, dword [esi + 0x20]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x210]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov eax, dword [esi + 0x20]
mov edi, dword [esi + 0xb9c]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
push edi
push 1
mov ecx, eax
call dword [edx + 0x240]
jmp 0x1008a7c6
mov eax, dword [esi + 0x20]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x308]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov eax, dword [esi + 0x20]
mov edi, dword [esi + 0xb9c]
mov ebx, dword [esi + 0xba0]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov ecx, dword [ebx]
mov edx, dword [eax]
push ecx
push edi
push 1
mov ecx, eax
call dword [edx + 0x284]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x2a0]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov eax, dword [esi + 0x20]
mov edi, dword [esi + 0xb9c]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
push ebx
push edi
push 1
push 1
mov ecx, eax
call dword [edx + 0x2e8]
jmp 0x1008a7c6
mov eax, dword [esi + 0x20]
mov edi, dword [esi + 0xb9c]
mov ebp, dword [esi + 0xba0]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov ecx, dword [ebp]
mov edx, dword [eax]
push ecx
push edi
push 1
push 2
mov ecx, eax
call dword [edx + 0x2e8]
jmp 0x1008a7c6
mov edx, dword [esi + 0x20]
mov edi, dword [esi + 0xb9c]
push edx
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
push edi
push 1
mov ecx, eax
call dword [edx + 0x2f0]
jmp 0x1008a7c6
mov eax, dword [esi + 0x20]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x2d8]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov eax, dword [esi + 0x20]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
push 2
mov ecx, eax
call dword [edx + 0x2d8]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov eax, dword [esi + 0x20]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x2dc]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov eax, dword [esi + 0x20]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov cl, byte [esi + 0xb9c]
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 0x340]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x364]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edx, dword [esi + 0x20]
mov al, byte [esi + 0xba0]
mov cx, word [esi + 0xba4]
push edx
mov byte [esp + 0x1c], al
mov word [esp + 0x1e], cx
mov edi, 1
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov ebx, dword [esp + 0x18]
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], ebx
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x30]
mov dword [ecx + 8], edi
mov edi, dword [esp + 0x34]
mov dword [ecx + 0xc], edi
mov ecx, dword [esi + 0xbac]
push ecx
mov cx, word [esi + 0xb9c]
push ecx
mov ecx, eax
call dword [edx + 0x3d0]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov cx, word [esi + 0xb9c]
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 0x3dc]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x17c]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov eax, dword [esi + 0x20]
mov edi, dword [esi + 0xb9c]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
push edi
push 1
mov ecx, eax
call dword [edx + 0x3e4]
cmp edi, ebx
je 0x1008a7da
mov ecx, edi
call sub.mfc42.dll_CString::CString
push edi
call sub.mfc42.dll_operatordelete
add esp, 4
mov dword [esi + 0xb9c], ebx
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov eax, dword [esi + 0x20]
push eax
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov cx, word [esi + 0xba4]
mov edx, dword [eax]
push ecx
mov cx, word [esi + 0xba0]
push ecx
mov ecx, eax
call dword [edx + 0x1f4]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov eax, dword [esi + 0x20]
mov dl, byte [esi + 0xb9c]
push eax
mov byte [esp + 0x17], dl
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
lea ecx, [esp + 0x13]
push ecx
mov ecx, eax
call dword [edx + 0x3f4]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov cl, byte [esi + 0xba0]
mov edx, dword [eax]
push ecx
mov cl, byte [esi + 0xb9c]
push ecx
mov ecx, eax
call dword [edx + 0x164]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.user32.dll_GetParent]
push eax
call sub.mfc42.dll_CWnd::FromHandle
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x400]
mov ecx, dword [esp + 0x28]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x24
ret