Function at 0x40773b
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x60
mov eax, dword [0x41200c]
xor eax, esp
mov dword [esp + 0x5c], eax
mov eax, dword [ebp + 8]
push esi
push edi
push 1
mov dword [esp + 0x34], eax
push 0x401a80
mov eax, 0x1f0
lea esi, [esp + 0x14]
call fcn.0040df9a
xor eax, eax
mov esi, eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x44], eax
lea edi, [esp + 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [esp + 0x30]
mov edi, ebx
mov dword [esp + 0x48], 0x4013c0
mov dword [esp + 0x3c], esi
mov dword [ebx + reloc.ADVAPI32.dll_TraceMessage], eax
call fcn.0040331c
mov edi, eax
mov dword [esp + 0xc], edi
mov eax, 0x202
test edi, edi
jns 0x4077bd
mov word [esp + 0x12], ax
jmp 0x407d39
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0xb
mov word [esp + 0x14], ax
call edi
push 0xc
mov dword [esp + 0x38], eax
call edi
push 0x31
mov dword [esp + 0x44], eax
call edi
push 0x32
mov dword [esp + 0xc], eax
call edi
mov dword [esp + 0x38], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov edi, dword [esp + 0x30]
push edi
mov ecx, eax
call fcn.00406edf
push 0x401498
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x4133ac], eax
test eax, eax
jne 0x407824
call fcn.0040f196
mov edi, eax
mov eax, 0x210
mov word [esp + 0x12], ax
jmp 0x407d35
and dword [esp + 0xc], esi
push 0
push 1
push eax
mov ecx, 0x210
push edi
mov word [esp + 0x20], cx
call dword [sym.imp.USER32.dll_ChangeWindowMessageFilterEx]
push 0
push dword [esp + 0x44]
push dword [esp + 0x3c]
push 1
push 0x82
push dword [0x4133b4]
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebx + 0xac], eax
test eax, eax
jne 0x407873
call fcn.0040f196
mov edi, eax
mov eax, 0x217
jmp 0x40781a
and dword [esp + 0xc], esi
push 0
push dword [esp + 0x44]
mov eax, 0x217
push dword [esp + 0x3c]
mov word [esp + 0x1c], ax
push 1
push 0x89
push dword [0x4133b4]
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebx + 0xb8], eax
test eax, eax
jne 0x4078b9
call fcn.0040f196
mov edi, eax
mov eax, 0x21a
jmp 0x40781a
and dword [esp + 0xc], esi
push 0
push dword [esp + 0x3c]
mov eax, 0x21a
push dword [esp + 0x10]
mov word [esp + 0x1c], ax
push 1
push 0x8d
push dword [0x4133b4]
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebx + 0xb4], eax
test eax, eax
jne 0x4078ff
call fcn.0040f196
mov edi, eax
mov eax, 0x21f
jmp 0x40781a
and dword [esp + 0xc], esi
push 0
push dword [esp + 0x3c]
mov eax, 0x21f
push dword [esp + 0x10]
mov word [esp + 0x1c], ax
push 1
push 0x88
push dword [0x4133b4]
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebx + 0xb0], eax
test eax, eax
jne 0x407945
call fcn.0040f196
mov edi, eax
mov eax, 0x222
jmp 0x40781a
push dword [ebx + 0xac]
and dword [esp + 0x10], esi
push 0
push 0x80
mov eax, 0x222
push edi
mov word [esp + 0x20], ax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x403
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
jne 0x407988
call fcn.0040f196
mov edi, eax
mov eax, 0x228
jmp 0x40781a
and dword [esp + 0xc], esi
push 0
push dword [0x4133b0]
mov ecx, 0x228
push 0x30
push eax
mov word [esp + 0x20], cx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x44d
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esp + 8], eax
lea eax, [esp + 0x54]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x4079d8
call fcn.0040f196
mov edi, eax
mov eax, 0x22d
jmp 0x40781a
push 2
mov eax, 0x22d
mov word [esp + 0x14], ax
mov eax, dword [esp + 0x60]
sub eax, dword [esp + 0x58]
push 1
xor ecx, ecx
push eax
push ecx
push ecx
push ecx
push dword [esp + 0x20]
mov dword [esp + 0x28], ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
jne 0x407a17
call fcn.0040f196
mov edi, eax
mov eax, 0x22e
jmp 0x40781a
and dword [esp + 0xc], esi
push 0x454
mov eax, 0x22e
push edi
mov word [esp + 0x18], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [esp + 0x54]
push ecx
push eax
mov dword [esp + 0x10], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x407a56
call fcn.0040f196
mov edi, eax
mov eax, 0x230
jmp 0x40781a
mov eax, 0x230
mov word [esp + 0x10], ax
mov eax, dword [esp + 0x5c]
sub eax, dword [esp + 0x54]
push 2
xor ecx, ecx
push 1
dec eax
push eax
push ecx
push ecx
push ecx
push dword [esp + 0x20]
mov dword [esp + 0x28], ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
jne 0x407a96
call fcn.0040f196
mov edi, eax
mov eax, 0x231
jmp 0x40781a
and dword [esp + 0xc], esi
push 0x456
mov eax, 0x231
push edi
mov word [esp + 0x18], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [esp + 0x54]
push ecx
push eax
mov dword [esp + 0x10], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x407ad5
call fcn.0040f196
mov edi, eax
mov eax, 0x233
jmp 0x40781a
mov eax, 0x233
mov word [esp + 0x10], ax
mov eax, dword [esp + 0x5c]
sub eax, dword [esp + 0x54]
push 2
xor ecx, ecx
push 1
dec eax
push eax
push ecx
push ecx
push ecx
push dword [esp + 0x20]
mov dword [esp + 0x28], ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
jne 0x407b15
call fcn.0040f196
mov edi, eax
mov eax, 0x234
jmp 0x40781a
and dword [esp + 0xc], esi
push 0x3ea
mov eax, 0x234
push edi
mov word [esp + 0x18], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esp + 8], eax
test eax, eax
jne 0x407b48
call fcn.0040f196
mov edi, eax
mov eax, 0x239
jmp 0x40781a
and dword [esp + 0xc], esi
push 0x450
mov eax, 0x239
push edi
mov word [esp + 0x18], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esp + 0x38], eax
test eax, eax
jne 0x407b7b
call fcn.0040f196
mov edi, eax
mov eax, 0x23c
jmp 0x40781a
and dword [esp + 0xc], esi
push 0x3e9
mov eax, 0x23c
push edi
mov word [esp + 0x18], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esp + 0x34], eax
test eax, eax
jne 0x407bae
call fcn.0040f196
mov edi, eax
mov eax, 0x23f
jmp 0x40781a
and dword [esp + 0xc], esi
mov eax, 0x23f
mov word [esp + 0x10], ax
mov eax, dword [0x413478]
cmp eax, 2
je 0x407c04
cmp eax, 1
je 0x407c04
push 1
push 0
push 0x160c
push dword [esp + 0x14]
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0
push 0x160c
push dword [esp + 0x44]
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0
push 0x160c
push dword [esp + 0x40]
call dword [sym.imp.USER32.dll_SendMessageW]
and dword [ebx + 0x70], esi
push ebx
mov ecx, edi
call fcn.00407334
mov edi, eax
mov dword [esp + 0xc], edi
mov eax, 0x24b
test edi, edi
js 0x4077b3
mov word [esp + 0x10], ax
mov eax, dword [esp + 0x30]
push eax
push ebx
call fcn.00409e94
mov edi, eax
mov dword [esp + 0xc], edi
mov eax, 0x24e
test edi, edi
js 0x4077b3
mov word [esp + 0x10], ax
mov eax, dword [esp + 0x30]
push ebx
mov dword [ebx + 0x70], 1
call fcn.00407dc7
mov edi, eax
mov dword [esp + 0xc], edi
mov eax, 0x255
test edi, edi
js 0x4077b3
mov word [esp + 0x10], ax
mov eax, dword [ebx + 0xdc]
dec eax
je 0x407ca8
dec eax
je 0x407c85
dec eax
je 0x407c97
dec eax
jne 0x407cbe
cmp dword [ebx + 0x74], esi
je 0x407cbe
push dword [esp + 0x30]
mov edi, ebx
call fcn.00408c5c
jmp 0x407cbe
cmp dword [ebx + 0x74], esi
je 0x407cbe
push dword [esp + 0x30]
push ebx
call fcn.00408d52
jmp 0x407cbe
push 0
push 0x3ea
push 0x111
push dword [esp + 0x3c]
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x10]
mov esi, eax
lea edi, [esp + 0x3c]
call fcn.00406dcf
mov esi, dword [esp + 0x3c]
mov eax, dword [esi]
lea ecx, [esp + 0x44]
push ecx
push 0x401324
push esi
call dword [eax]
mov edi, eax
mov dword [esp + 0xc], edi
mov eax, 0x26b
test edi, edi
js 0x4077b3
xor edi, edi
push edi
push edi
push dword [esp + 0x4c]
mov word [esp + 0x1c], ax
push 0x409710
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebx + 0x9c], eax
test eax, eax
jne 0x407d2b
call fcn.0040f196
mov edi, eax
mov eax, 0x26f
jmp 0x40781a
mov eax, 0x26f
mov word [esp + 0x10], ax
mov dword [esp + 0xc], edi
test esi, esi
je 0x407d43
mov ecx, dword [esi]
push esi
call dword [ecx + UnregisterTraceGuids]
lea esi, [esp + 0x48]
call fcn.0040fca0
lea eax, [esp + 0xc]
call fcn.0040e073
mov ecx, dword [esp + 0x64]
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.00410d69
mov esp, ebp
pop ebp
ret 4