Function at 0x4101a8
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb0
push ebx
xor edx, edx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x44], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x410c2e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x3f]
xor ecx, ecx
mov edx, 0x33
call fcn.00402c68
push 0x32
lea eax, [ebp - 0x3f]
push eax
push ebx
call sub.user32.dll_GetClassNameA
lea eax, [ebp - 0x44]
lea edx, [ebp - 0x3f]
mov ecx, 0x33
call fcn.00403a80
mov eax, dword [ebp - 0x44]
mov edx, 0x410c44
call fcn.00403c38
je 0x41024f
lea eax, [ebp - 0x48]
lea edx, [ebp - 0x3f]
mov ecx, 0x33
call fcn.00403a80
mov eax, dword [ebp - 0x48]
mov edx, 0x410c64
call fcn.00403c38
je 0x41024f
lea eax, [ebp - 0x4c]
lea edx, [ebp - 0x3f]
mov ecx, 0x33
call fcn.00403a80
mov eax, dword [ebp - 0x4c]
mov edx, 0x410c84
call fcn.00403c38
jne 0x410c06
lea eax, [ebp - 8]
mov edx, 0x410ca4
call fcn.004038d4
push 0xb
call sub.gdi32.dll_GetColorSpace
push 1
call sub.gdi32.dll_GetDCBrushColor
push 0xb
call sub.user32.dll_WindowFromDC
mov eax, dword [0x412994]
mov dword [eax], ebx
mov eax, dword [0x412948]
mov edx, 0x410cbc
call fcn.00403890
mov eax, dword [0x4127f4]
call fcn.0040383c
lea eax, [ebp - 0x50]
push eax
mov ecx, dword [0x41292c]
mov edx, dword [0x41287c]
mov eax, ebx
call fcn.00407a24
mov edx, dword [ebp - 0x50]
mov eax, dword [0x412934]
call fcn.00403890
mov eax, dword [0x41292c]
cmp dword [eax], 0
je 0x4102d1
mov eax, dword [0x41292c]
mov eax, dword [eax]
add eax, 4
mov edx, dword [0x412770]
mov dword [edx], eax
mov edx, dword [0x41287c]
mov edx, dword [edx]
mov eax, ebx
call fcn.00407608
mov edx, dword [0x412794]
mov dword [edx], eax
mov edx, dword [0x41287c]
mov edx, dword [edx]
mov eax, ebx
call fcn.004078a4
mov edx, dword [0x4127ac]
mov dword [edx], eax
mov eax, dword [0x41287c]
mov eax, dword [eax]
dec eax
je 0x410323
dec eax
je 0x410558
dec eax
je 0x41078d
dec eax
je 0x4109b9
jmp 0x410bce
mov eax, dword [0x412874]
mov dword [eax], 0x138
mov eax, dword [0x412874]
mov eax, dword [eax]
sub eax, 4
mov edx, dword [0x412860]
mov dword [edx], eax
mov eax, dword [0x41292c]
mov eax, dword [eax]
sub eax, 0x5ec
mov edx, dword [0x412980]
mov dword [edx], eax
mov eax, dword [0x412790]
mov dword [eax], 4
mov eax, dword [0x4127b4]
mov dword [eax], 8
mov eax, dword [0x412958]
mov dword [eax], 0x624
mov eax, dword [0x4128c0]
mov dword [eax], 0x84
mov eax, dword [0x412754]
mov dword [eax], 0x18
mov eax, dword [0x41276c]
mov dword [eax], 0x20
mov eax, dword [0x412938]
mov dword [eax], 0x4fc
mov eax, dword [0x4127ac]
mov eax, dword [eax]
sub eax, 0xc
mov edx, dword [0x41285c]
mov dword [edx], eax
mov eax, dword [0x4127ac]
mov eax, dword [eax]
add eax, 4
mov edx, dword [0x4127f8]
mov dword [edx], eax
mov eax, dword [0x4127ac]
mov eax, dword [eax]
add eax, 0x3c
mov edx, dword [0x4129b0]
mov dword [edx], eax
mov eax, dword [0x412810]
mov dword [eax], 0x20
mov eax, dword [0x412830]
mov dword [eax], 0x10
mov eax, dword [0x412768]
mov dword [eax], 0xc
mov eax, dword [0x412940]
mov dword [eax], 0xc
mov eax, dword [0x412854]
mov dword [eax], 0xd4
mov eax, dword [0x412854]
mov eax, dword [eax]
add eax, 8
mov edx, dword [0x4127c4]
mov dword [edx], eax
mov eax, dword [0x412854]
mov eax, dword [eax]
sub eax, 0x5c
mov edx, dword [0x4128a8]
mov dword [edx], eax
mov eax, dword [0x4128a8]
mov eax, dword [eax]
sub eax, 0x34
mov edx, dword [0x412840]
mov dword [edx], eax
mov eax, dword [0x41279c]
mov dword [eax], 0x20
mov eax, dword [0x4127bc]
mov dword [eax], 0x9dc
mov eax, dword [0x41289c]
mov dword [eax], 4
mov eax, dword [0x4128c8]
mov dword [eax], 8
mov eax, dword [0x4127e4]
mov dword [eax], 0x2d0
mov eax, dword [0x41274c]
mov dword [eax], 0x13c
mov eax, dword [0x412850]
mov dword [eax], 4
mov eax, dword [0x412814]
mov dword [eax], 8
mov eax, dword [0x412970]
mov dword [eax], 0x1240
mov eax, dword [0x412890]
mov dword [eax], 0x565cc5
mov eax, dword [0x4128c4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x41283c]
mov dword [eax], 4
mov eax, dword [0x412858]
mov dword [eax], 8
mov eax, dword [0x412788]
mov dword [eax], 0x58
mov eax, dword [0x412974]
mov dword [eax], 0x48
mov eax, dword [0x4127f0]
mov dword [eax], 0x138
mov eax, dword [0x4127cc]
mov dword [eax], 0xc
mov eax, dword [0x4127dc]
mov dword [eax], 0x98
mov eax, dword [0x4127e8]
mov dword [eax], 0x74
mov eax, dword [0x4129a4]
mov dword [eax], 0x130
mov eax, dword [0x412910]
mov dword [eax], 0xc
mov eax, dword [0x412920]
mov dword [eax], 8
mov eax, dword [0x412838]
mov dword [eax], 0x1240
mov eax, dword [0x41292c]
mov eax, dword [eax]
add eax, 0x2774
mov edx, dword [0x41278c]
mov dword [edx], eax
jmp 0x410bce
mov eax, dword [0x412874]
mov dword [eax], 0x138
mov eax, dword [0x412874]
mov eax, dword [eax]
sub eax, 4
mov edx, dword [0x412860]
mov dword [edx], eax
mov eax, dword [0x41292c]
mov eax, dword [eax]
sub eax, 0x5ec
mov edx, dword [0x412980]
mov dword [edx], eax
mov eax, dword [0x412790]
mov dword [eax], 4
mov eax, dword [0x4127b4]
mov dword [eax], 8
mov eax, dword [0x412958]
mov dword [eax], 0x624
mov eax, dword [0x4128c0]
mov dword [eax], 0x84
mov eax, dword [0x412754]
mov dword [eax], 0x18
mov eax, dword [0x41276c]
mov dword [eax], 0x20
mov eax, dword [0x412938]
mov dword [eax], 0x4fc
mov eax, dword [0x4127ac]
mov eax, dword [eax]
sub eax, 0xc
mov edx, dword [0x41285c]
mov dword [edx], eax
mov eax, dword [0x4127ac]
mov eax, dword [eax]
add eax, 4
mov edx, dword [0x4127f8]
mov dword [edx], eax
mov eax, dword [0x4127ac]
mov eax, dword [eax]
add eax, 0x3c
mov edx, dword [0x4129b0]
mov dword [edx], eax
mov eax, dword [0x412810]
mov dword [eax], 0x20
mov eax, dword [0x412830]
mov dword [eax], 0xc
mov eax, dword [0x412768]
mov dword [eax], 0xc
mov eax, dword [0x412940]
mov dword [eax], 0xc
mov eax, dword [0x412854]
mov dword [eax], 0xdc
mov eax, dword [0x412854]
mov eax, dword [eax]
add eax, 8
mov edx, dword [0x4127c4]
mov dword [edx], eax
mov eax, dword [0x412854]
mov eax, dword [eax]
sub eax, 0x5c
mov edx, dword [0x4128a8]
mov dword [edx], eax
mov eax, dword [0x4128a8]
mov eax, dword [eax]
sub eax, 0x34
mov edx, dword [0x412840]
mov dword [edx], eax
mov eax, dword [0x41279c]
mov dword [eax], 0x20
mov eax, dword [0x4127bc]
mov dword [eax], 0xa14
mov eax, dword [0x41289c]
mov dword [eax], 4
mov eax, dword [0x4128c8]
mov dword [eax], 8
mov eax, dword [0x4127e4]
mov dword [eax], 0x2e4
mov eax, dword [0x41274c]
mov dword [eax], 0x148
mov eax, dword [0x412850]
mov dword [eax], 4
mov eax, dword [0x412814]
mov dword [eax], 8
mov eax, dword [0x412970]
mov dword [eax], 0x1244
mov eax, dword [0x412890]
mov dword [eax], 0x55b32a
mov eax, dword [0x4128c4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x41283c]
mov dword [eax], 4
mov eax, dword [0x412858]
mov dword [eax], 8
mov eax, dword [0x412788]
mov dword [eax], 0x58
mov eax, dword [0x412974]
mov dword [eax], 0xc
mov eax, dword [0x4127f0]
mov dword [eax], 0x144
mov eax, dword [0x4127cc]
mov dword [eax], 0xc
mov eax, dword [0x4127dc]
mov dword [eax], 0x68
mov eax, dword [0x4127e8]
mov dword [eax], 0x74
mov eax, dword [0x4129a4]
mov dword [eax], 0x130
mov eax, dword [0x412910]
mov dword [eax], 0xc
mov eax, dword [0x412920]
mov dword [eax], 8
mov eax, dword [0x412838]
mov dword [eax], 0x74
mov eax, dword [0x41292c]
mov eax, dword [eax]
add eax, 0x277c
mov edx, dword [0x41278c]
mov dword [edx], eax
jmp 0x410bce
mov eax, dword [0x412874]
mov dword [eax], 0x128
mov eax, dword [0x412874]
mov eax, dword [eax]
sub eax, 4
mov edx, dword [0x412860]
mov dword [edx], eax
mov eax, dword [0x41292c]
mov eax, dword [eax]
sub eax, 0x3a48
mov edx, dword [0x412980]
mov dword [edx], eax
mov eax, dword [0x412790]
mov dword [eax], 4
mov eax, dword [0x4127b4]
mov dword [eax], 8
mov eax, dword [0x412958]
mov dword [eax], 0x1e4
mov eax, dword [0x4128c0]
mov dword [eax], 0x70
mov eax, dword [0x412754]
mov dword [eax], 0x14
mov eax, dword [0x41276c]
mov dword [eax], 0x24
mov eax, dword [0x412938]
mov dword [eax], 0x2dc
mov eax, dword [0x4127ac]
mov eax, dword [eax]
sub eax, 0x10
mov edx, dword [0x41285c]
mov dword [edx], eax
mov eax, dword [0x4127ac]
mov eax, dword [eax]
add eax, 4
mov edx, dword [0x4127f8]
mov dword [edx], eax
mov eax, dword [0x4127ac]
mov eax, dword [eax]
add eax, 0x3c
mov edx, dword [0x4129b0]
mov dword [edx], eax
mov eax, dword [0x412810]
mov dword [eax], 0x24
mov eax, dword [0x412830]
mov dword [eax], 0xc
mov eax, dword [0x412768]
mov dword [eax], 0xc
mov eax, dword [0x412768]
mov eax, dword [eax]
sub eax, 8
mov edx, dword [0x412940]
mov dword [edx], eax
mov eax, dword [0x412854]
mov dword [eax], 0x68
mov eax, dword [0x412854]
mov eax, dword [eax]
sub eax, 8
mov edx, dword [0x4127c4]
mov dword [edx], eax
mov eax, dword [0x4128a8]
mov dword [eax], 0x6e
mov eax, dword [0x412840]
mov dword [eax], 0x78
mov eax, dword [0x41279c]
mov dword [eax], 0x24
mov eax, dword [0x4127bc]
mov dword [eax], 0x7e0
mov eax, dword [0x41289c]
mov dword [eax], 4
mov eax, dword [0x4128c8]
mov dword [eax], 8
mov eax, dword [0x4127e4]
mov dword [eax], 0x5c
mov eax, dword [0x41274c]
mov dword [eax], 0x1f0
mov eax, dword [0x412850]
mov dword [eax], 0x180
mov eax, dword [0x412814]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x412970]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x412890]
mov dword [eax], 0x537d34
mov eax, dword [0x4128c4]
mov dword [eax], 0x4415c1
mov eax, dword [0x41283c]
mov dword [eax], 4
mov eax, dword [0x412858]
mov dword [eax], 8
mov eax, dword [0x412788]
mov dword [eax], 0x5c
mov eax, dword [0x412974]
mov dword [eax], 0x14
mov eax, dword [0x4127f0]
mov dword [eax], 0x160
mov eax, dword [0x4127cc]
mov dword [eax], 0xc
mov eax, dword [0x4127dc]
mov dword [eax], 0x68
mov eax, dword [0x4127e8]
mov dword [eax], 0x88
mov eax, dword [0x4129a4]
mov dword [eax], 0x130
mov eax, dword [0x412910]
mov dword [eax], 0xc
mov eax, dword [0x412920]
mov dword [eax], 8
mov eax, dword [0x412838]
mov dword [eax], 0x1260
mov eax, dword [0x41292c]
mov eax, dword [eax]
add eax, 0x1c10
mov edx, dword [0x41278c]
mov dword [edx], eax
jmp 0x410bce
mov eax, dword [0x412874]
mov dword [eax], 0x128
mov eax, dword [0x412874]
mov eax, dword [eax]
sub eax, 4
mov edx, dword [0x412860]
mov dword [edx], eax
mov eax, dword [0x41292c]
mov eax, dword [eax]
sub eax, 0x3a48
mov edx, dword [0x412980]
mov dword [edx], eax
mov eax, dword [0x412790]
mov dword [eax], 4
mov eax, dword [0x4127b4]
mov dword [eax], 8
mov eax, dword [0x412958]
mov dword [eax], 0x1e4
mov eax, dword [0x4128c0]
mov dword [eax], 0x70
mov eax, dword [0x412754]
mov dword [eax], 0x14
mov eax, dword [0x41276c]
mov dword [eax], 0x28
mov eax, dword [0x412938]
mov dword [eax], 0x2d4
mov eax, dword [0x4127ac]
mov dword [eax], 0x864
mov eax, dword [0x4127ac]
mov eax, dword [eax]
sub eax, 0x10
mov edx, dword [0x41285c]
mov dword [edx], eax
mov eax, dword [0x4127ac]
mov eax, dword [eax]
add eax, 4
mov edx, dword [0x4127f8]
mov dword [edx], eax
mov eax, dword [0x4127ac]
mov eax, dword [eax]
add eax, 0x3c
mov edx, dword [0x4129b0]
mov dword [edx], eax
mov eax, dword [0x412810]
mov dword [eax], 0x28
mov eax, dword [0x412830]
mov dword [eax], 0xc
mov eax, dword [0x412768]
mov dword [eax], 0xc
mov eax, dword [0x412940]
mov dword [eax], 4
mov eax, dword [0x412854]
mov dword [eax], 0x68
mov eax, dword [0x412854]
mov eax, dword [eax]
sub eax, 8
mov edx, dword [0x4127c4]
mov dword [edx], eax
mov eax, dword [0x4128a8]
mov dword [eax], 0x6e
mov eax, dword [0x412840]
mov dword [eax], 0x78
mov eax, dword [0x41279c]
mov dword [eax], 0x28
mov eax, dword [0x4127bc]
mov dword [eax], 0x7c4
mov eax, dword [0x41289c]
mov dword [eax], 4
mov eax, dword [0x4128c8]
mov dword [eax], 8
mov eax, dword [0x4127e4]
mov dword [eax], 0x28
mov eax, dword [0x41274c]
mov dword [eax], 8
mov eax, dword [0x412850]
mov dword [eax], 0x180
mov eax, dword [0x412814]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x412970]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x41283c]
mov dword [eax], 4
mov eax, dword [0x412858]
mov dword [eax], 8
mov eax, dword [0x412788]
mov dword [eax], 0x5c
mov eax, dword [0x412974]
mov dword [eax], 0x14
mov eax, dword [0x4127f0]
mov dword [eax], 0x160
mov eax, dword [0x4127cc]
mov dword [eax], 0xc
mov eax, dword [0x4127dc]
mov dword [eax], 0x68
mov eax, dword [0x4127e8]
mov dword [eax], 0x88
mov eax, dword [0x4129a4]
mov dword [eax], 0x130
mov eax, dword [0x412910]
mov dword [eax], 0xc
mov eax, dword [0x412920]
mov dword [eax], 8
mov eax, dword [0x412838]
mov dword [eax], 0x1260
mov eax, dword [0x41292c]
mov eax, dword [eax]
add eax, 0x1fd8
mov edx, dword [0x41278c]
mov dword [edx], eax
mov eax, dword [0x4127c8]
mov byte [eax], 0
lea eax, [ebp - 4]
push eax
push 0
push 0
push 0x40e050
push 0
push 0
call sub.kernel32.dll_CreateThread
lea ecx, [ebp - 0xc]
mov eax, 0x4125bc
mov edx, 0xb
call fcn.004050a8
mov eax, dword [ebp - 0xc]
call fcn.0040629c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x410c35
lea eax, [ebp - 0x50]
mov edx, 4
call fcn.00403860
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00403860
ret