Function at 0x10000f22c
Capabilities:
Create thread

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc8
mov rbp, rdx
mov rsi, rcx
lea rdx, [0x100006768]
lea rcx, [rsp + 0x80]
mov r9d, 1
mov r8d, 0x259
call fcn.100018110
xor eax, eax
lea r11, [0x100005940]
lea rcx, [rsp + 0x40]
lea r8d, [rax + 0x10]
xor edx, edx
mov qword [rsp + 0x70], r11
mov qword [rsp + 0x78], rax
mov rbx, rax
mov qword [rsp + 0x128], rax
call sub.msvcrt.dll_memset
lea ecx, [rbx + 0xb]
mov qword [rsi + 0x1b0], rbp
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea ecx, [rbx + 0xc]
mov dword [rsp + 0x118], eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea ecx, [rbx + 0x31]
mov dword [rsp + 0x110], eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea ecx, [rbx + 0x32]
mov r14d, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r15d, eax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
xor ecx, ecx
mov r13, rax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea ecx, [rbx + 1]
mov r12d, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov edi, eax
xor eax, eax
mov dword [rsp + 0x124], eax
mov dword [rsp + 0x120], eax
cmp r13, rax
je 0x10000f32b
lea rdx, [rsp + 0x120]
mov rcx, r13
call qword [sym.imp.USER32.dll_ClientToScreen]
lea rdx, [rsp + 0x50]
mov rcx, r13
call qword [sym.imp.USER32.dll_GetClientRect]
xor r13d, r13d
jmp 0x10000f341
xor r13d, r13d
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x5c], edi
mov dword [rsp + 0x50], r13d
mov dword [rsp + 0x54], r13d
lea rdx, [rsp + 0x60]
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r11d, dword [rsp + 0x68]
mov eax, dword [rsp + 0x58]
sub r11d, dword [rsp + 0x60]
mov r8d, dword [rsp + 0x6c]
sub r8d, dword [rsp + 0x64]
inc r11d
sub eax, r11d
inc r8d
sub eax, dword [rsp + 0x50]
inc eax
cdq
sub eax, edx
sar eax, 1
mov r9d, eax
mov eax, dword [rsp + 0x5c]
add r9d, dword [rsp + 0x120]
sub eax, r8d
sub eax, dword [rsp + 0x54]
lea ecx, [r9 + r11]
inc eax
cdq
sub eax, edx
sar eax, 1
mov edx, eax
add edx, dword [rsp + 0x124]
cmp ecx, r12d
jle 0x10000f3af
sub r12d, r11d
jmp 0x10000f3b9
mov r12d, r9d
cmp r9d, r13d
cmovl r12d, r13d
lea eax, [rdx + r8]
cmp eax, edi
jle 0x10000f3c6
sub edi, r8d
jmp 0x10000f3cf
mov edi, edx
cmp edx, r13d
cmovl edi, r13d
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r8d
mov r9d, r11d
mov r8d, edi
mov edx, r12d
mov rcx, rbp
call qword [sym.imp.USER32.dll_MoveWindow]
mov edi, dword [rsp + 0x118]
mov r12d, dword [rsp + 0x110]
mov rcx, qword [0x1000209c8]
mov r9d, edi
mov edx, 0x82
mov r8d, 1
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rsi + 0x120], rax
cmp rax, r13
jne 0x10000f44b
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x277
mov word [rsp + 0x86], ax
jmp 0x10000faeb
mov rcx, qword [0x1000209c8]
mov eax, 0x277
mov r9d, edi
mov edx, 0x89
mov r8d, 1
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x80], r13d
mov word [rsp + 0x84], ax
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rsi + 0x138], rax
cmp rax, r13
jne 0x10000f4a6
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x27a
jmp 0x10000f43e
mov rcx, qword [0x1000209c8]
mov eax, 0x27a
mov r9d, r14d
mov edx, 0x8d
mov r8d, 1
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x80], r13d
mov word [rsp + 0x84], ax
mov dword [rsp + 0x20], r15d
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rsi + 0x130], rax
cmp rax, r13
jne 0x10000f504
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x27f
jmp 0x10000f43e
mov rcx, qword [0x1000209c8]
mov eax, 0x27f
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r15d
mov r15d, 1
mov r9d, r14d
mov edx, 0x88
mov r8d, r15d
mov dword [rsp + 0x80], r13d
mov word [rsp + 0x84], ax
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rsi + 0x128], rax
cmp rax, r13
jne 0x10000f565
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x282
jmp 0x10000f43e
mov r9, qword [rsi + 0x120]
mov eax, 0x282
xor r8d, r8d
mov edx, 0x80
mov rcx, rbp
mov dword [rsp + 0x80], r13d
mov word [rsp + 0x84], ax
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x44e
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
cmp rax, r13
jne 0x10000f5c0
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x287
jmp 0x10000f43e
mov r8, qword [rsi + 0x120]
mov eax, 0x287
xor r9d, r9d
mov edx, 0x170
mov dword [rsp + 0x80], r13d
mov word [rsp + 0x84], ax
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x403
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
cmp rax, r13
jne 0x10000f618
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x28c
jmp 0x10000f43e
mov r8, qword [0x100020b50]
xor r9d, r9d
mov eax, 0x28c
lea edx, [r9 + 0x30]
mov dword [rsp + 0x80], r13d
mov word [rsp + 0x84], ax
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x44d
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp eax, r13d
jne 0x10000f67d
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x291
jmp 0x10000f43e
mov eax, 0x291
mov r12d, 2
xor r9d, r9d
mov word [rsp + 0x84], ax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x30], r12d
sub eax, dword [rsp + 0x40]
xor r8d, r8d
xor edx, edx
mov rcx, rdi
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x80], r13d
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SetWindowPos]
cmp eax, r13d
jne 0x10000f6dc
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x292
jmp 0x10000f43e
mov eax, 0x292
mov edx, 0x454
mov rcx, rbp
mov word [rsp + 0x84], ax
mov dword [rsp + 0x80], r13d
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp eax, r13d
jne 0x10000f72d
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x294
jmp 0x10000f43e
mov eax, 0x294
mov dword [rsp + 0x30], r12d
xor r9d, r9d
mov word [rsp + 0x84], ax
mov eax, dword [rsp + 0x48]
xor r8d, r8d
sub eax, dword [rsp + 0x40]
xor edx, edx
mov rcx, rdi
sub eax, r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x80], r13d
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SetWindowPos]
cmp eax, r13d
jne 0x10000f789
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x295
jmp 0x10000f43e
mov eax, 0x295
mov edx, 0x456
mov rcx, rbp
mov word [rsp + 0x84], ax
mov dword [rsp + 0x80], r13d
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp eax, r13d
jne 0x10000f7da
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x297
jmp 0x10000f43e
mov eax, 0x297
mov dword [rsp + 0x30], r12d
xor r9d, r9d
mov word [rsp + 0x84], ax
mov eax, dword [rsp + 0x48]
xor r8d, r8d
sub eax, dword [rsp + 0x40]
xor edx, edx
mov rcx, rdi
sub eax, r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x80], r13d
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SetWindowPos]
cmp eax, r13d
jne 0x10000f836
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x298
jmp 0x10000f43e
mov eax, 0x298
mov edx, 0x3ea
mov rcx, rbp
mov word [rsp + 0x84], ax
mov dword [rsp + 0x80], r13d
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rdi, rax
cmp rax, r13
jne 0x10000f879
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x29d
jmp 0x10000f43e
mov eax, 0x29d
mov edx, 0x450
mov rcx, rbp
mov word [rsp + 0x84], ax
mov dword [rsp + 0x80], r13d
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r12, rax
cmp rax, r13
jne 0x10000f8bc
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x2a0
jmp 0x10000f43e
mov eax, 0x2a0
mov edx, 0x3e9
mov rcx, rbp
mov word [rsp + 0x84], ax
mov dword [rsp + 0x80], r13d
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r13, rax
xor eax, eax
cmp r13, rax
jne 0x10000f90c
call fcn.100019734
xor r13d, r13d
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x2a3
mov word [rsp + 0x86], ax
jmp 0x10000faeb
mov dword [rsp + 0x80], eax
mov eax, 0x2a3
mov r14d, 0x160c
mov r9, r15
xor r8d, r8d
mov rcx, rdi
mov edx, r14d
mov word [rsp + 0x84], ax
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, r15
xor r8d, r8d
mov edx, r14d
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, r15
xor r8d, r8d
mov edx, r14d
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageW]
xor r13d, r13d
mov rdx, rbp
mov rcx, rsi
mov dword [rsi + 0xbc], r13d
call fcn.10000ed80
mov edi, eax
mov dword [rsp + 0x80], eax
cmp eax, r13d
mov eax, 0x2ac
jl 0x10000f43e
mov rdx, rbp
mov rcx, rsi
mov word [rsp + 0x84], ax
call fcn.10001251c
mov edi, eax
mov dword [rsp + 0x80], eax
cmp eax, r13d
mov eax, 0x2af
jl 0x10000f43e
mov rdx, rbp
mov rcx, rsi
mov word [rsp + 0x84], ax
mov dword [rsi + 0xbc], r15d
call fcn.10000fb98
mov edi, eax
mov dword [rsp + 0x80], eax
cmp eax, r13d
mov eax, 0x2b6
jl 0x10000f43e
mov ecx, dword [rsi + 0x170]
mov word [rsp + 0x84], ax
sub ecx, r15d
je 0x10000fa25
sub ecx, r15d
je 0x10000fa05
sub ecx, r15d
je 0x10000fa15
cmp ecx, r15d
jne 0x10000fa3c
xor r8d, r8d
mov rdx, rbp
mov rcx, rsi
call fcn.100010f44
jmp 0x10000fa3c
xor r8d, r8d
mov rdx, rbp
mov rcx, rsi
call fcn.100011080
jmp 0x10000fa3c
xor r9d, r9d
mov edx, 0x111
mov r8d, 0x3ea
mov rcx, rbp
call qword [sym.imp.USER32.dll_PostMessageW]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x20]
mov rbx, rax
cmp rax, r13
je 0x10000fa56
mov rax, qword [rax]
mov rcx, rbx
call qword [rax + 8]
mov rax, qword [rbx]
lea r8, [rsp + 0x128]
lea rdx, [0x100005a38]
mov rcx, rbx
call qword [rax]
mov edi, eax
mov dword [rsp + 0x80], eax
cmp eax, r13d
mov eax, 0x2ca
jl 0x10000f43e
mov r9, qword [rsp + 0x128]
lea r8, [0x100011d28]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], r13
mov word [rsp + 0x84], ax
mov dword [rsp + 0x20], r13d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsi + 0x108], rax
cmp rax, r13
jne 0x10000fad3
call fcn.100019734
mov edi, eax
mov dword [rsp + 0x80], eax
mov eax, 0x2ce
jmp 0x10000f43e
mov eax, 0x2ce
mov edi, r13d
mov dword [rsp + 0x80], r13d
mov word [rsp + 0x84], ax
cmp rbx, r13
je 0x10000faf9
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x10]
lea rcx, [rsp + 0x70]
call fcn.10001ae2c
lea rcx, [rsp + 0x80]
call fcn.100018228
mov eax, edi
add rsp, 0xc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret