Function at 0x10141d3
Capabilities:
Create thread
Get graphical window text
Resume thread

Disassembly:
push 0xd8
mov eax, 0x104fbed
call fcn.01001957
mov eax, dword [ebp + 0x14]
and dword [eax], 0
mov ebx, ecx
mov dword [ebp - 0x90], eax
mov eax, dword [ebx + 4]
push 0x100
mov dword [ebp - 0x8c], eax
call fcn.01003860
pop ecx
mov dword [ebp - 0x70], eax
and dword [ebp - 4], 0
test eax, eax
je 0x10148d9
mov ecx, eax
call fcn.01016dc9
or edi, 0xffffffff
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01005db8
lea ecx, [ebx + 0x24]
push eax
mov dword [ebp - 4], 1
call fcn.01003c1f
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01001cb1
push 0x128
call fcn.01003860
pop ecx
mov dword [ebp - 0x70], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x10148e0
mov ecx, eax
call fcn.01016f5f
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01005db8
lea ecx, [ebx + 0x2c]
push eax
mov dword [ebp - 4], 3
call fcn.01003c1f
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01001cb1
push 0x2c
call fcn.01003860
pop ecx
mov dword [ebp - 0x70], eax
mov dword [ebp - 4], 4
test eax, eax
je 0x10148e7
mov ecx, eax
call fcn.0101551d
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01003811
lea ecx, [ebx + 0x44]
push eax
mov dword [ebp - 4], 5
call fcn.01001f73
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01001fc3
push 0x158
call fcn.01003860
pop ecx
mov dword [ebp - 0x70], eax
mov dword [ebp - 4], 6
test eax, eax
je 0x10148ee
mov ecx, eax
call fcn.010166d1
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01003811
lea esi, [ebx + 0x4c]
push eax
mov ecx, esi
mov dword [ebp - 4], 7
call fcn.01001f73
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01001fc3
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
push esi
call fcn.01001e9d
mov ecx, esi
mov dword [ebp - 4], 8
call fcn.01001d0f
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.01014fe9
push 0x9c
call fcn.01003860
pop ecx
mov dword [ebp - 0x70], eax
xor esi, esi
mov dword [ebp - 4], 9
cmp eax, esi
je 0x10148f5
mov ecx, eax
call fcn.01016659
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01005db8
lea ecx, [ebx + 0x34]
push eax
mov dword [ebp - 4], 0xa
call fcn.01003c1f
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01001cb1
cmp byte [ebx + 0x75], 0
jne 0x10143e7
push 0xb8
call fcn.01003860
pop ecx
mov dword [ebp - 0x70], eax
mov dword [ebp - 4], 0xb
cmp eax, esi
je 0x10148fc
mov ecx, eax
call fcn.010164e1
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01005db8
push eax
lea ecx, [ebx + 0x3c]
mov dword [ebp - 4], 0xc
call fcn.01003c1f
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], edi
call fcn.01001cb1
xor eax, eax
mov dword [ebp - 0xa4], esi
lea edi, [ebp - 0xa0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0xa4]
push eax
push dword [ebx + 4]
mov dword [ebp - 0x94], 0x11d
call dword [sym.imp.USER32.dll_GetClientRect]
test eax, eax
je 0x1014428
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa4]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
push esi
push ecx
mov dword [ebp - 0xbc], eax
mov eax, esp
mov dword [ebp - 0x70], esp
push esi
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xb8], esi
mov dword [eax], esi
mov esi, 0x42010000
push esi
push 0x1014994
push ecx
mov eax, esp
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x70], esp
push dword [ebp - 0x8c]
mov dword [eax], ecx
lea edi, [ebx + 0x24]
mov ecx, edi
call fcn.01001d0f
mov ecx, eax
call fcn.01013eb6
cmp byte [ebx + 0x75], 0
jne 0x101d3c0
xor ecx, ecx
mov dword [ebp - 0xe4], ecx
xor eax, eax
push ecx
lea edi, [ebp - 0xe0]
stosd dword es:[edi], eax
push ecx
stosd dword es:[edi], eax
mov dword [ebp - 0x70], esp
stosd dword es:[edi], eax
mov eax, esp
push ecx
push esi
push 0x101497c
push ecx
mov dword [eax], ecx
mov eax, esp
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x70], esp
push dword [ebp - 0x8c]
mov dword [eax], ecx
lea ecx, [ebx + 0x2c]
call fcn.01001d0f
mov ecx, eax
call fcn.0100d2a7
mov edi, dword [sym.imp.COMCTL32.dll_Ordinal_380]
lea esi, [ebx + 0xa8]
push esi
push 0
push 0x6b
push dword [0x105b718]
call edi
push dword [esi]
mov eax, dword [0x105b0ac]
mov eax, dword [eax + 4]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x80
push eax
call esi
lea eax, [ebx + 0xac]
push eax
push 1
push 0x6b
push dword [0x105b718]
call edi
push dword [ebx + 0xac]
mov eax, dword [0x105b0ac]
mov eax, dword [eax + 4]
xor edi, edi
inc edi
push edi
push 0x80
push eax
call esi
and dword [ebp - 0x78], 0
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 4], 0xd
call fcn.010041a2
push dword [eax]
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xe
call fcn.010066bb
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xd
call fcn.01001f30
lea eax, [ebp - 0x70]
push eax
call fcn.010068e7
push dword [eax]
lea ecx, [ebp - 0x78]
call fcn.0100e733
test eax, eax
lea ecx, [ebp - 0x70]
setl byte [ebp - 0x71]
call fcn.01001f30
cmp byte [ebp - 0x71], 0
jne 0x101d3d3
lea eax, [ebp - 0x70]
push eax
call fcn.0100b0db
push dword [eax]
lea ecx, [ebp - 0x78]
call fcn.0100e733
test eax, eax
lea ecx, [ebp - 0x70]
setl byte [ebp - 0x71]
call fcn.01001f30
cmp byte [ebp - 0x71], 0
jne 0x101d3d3
push ecx
push ecx
lea eax, [ebx + 0x44]
mov ecx, esp
mov dword [ebp - 0x70], esp
push eax
call fcn.01001e9d
push ecx
lea eax, [ebp - 0x78]
mov ecx, esp
mov dword [ebp - 0x7c], esp
push eax
mov byte [ebp - 4], 0xf
call fcn.01007eed
lea esi, [ebx + 0x4c]
mov ecx, esi
mov byte [ebp - 4], 0x10
call fcn.01001d0f
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.01011c4b
test al, al
je 0x101d3d3
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x7c], esp
push esi
call fcn.01001e9d
lea ecx, [ebx + 0x44]
mov byte [ebp - 4], 0x11
call fcn.01001d0f
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.010120e1
test eax, eax
je 0x101d3f3
mov eax, dword [ebp - 0xd8]
and dword [ebp - 0x88], 0
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x98]
lea ecx, [eax - 0x1e]
mov dword [ebp - 0x7c], ecx
lea esi, [ebp - 0x88]
lea edi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
push edi
push ecx
mov dword [ebp - 0x7c], esp
mov dword [ebp - 0xa8], eax
mov eax, esp
push edi
push 0x46010000
mov dword [ebp - 0xb0], ecx
push 0x101495c
push ecx
mov dword [eax], edi
mov eax, esp
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x7c], esp
push dword [ebp - 0x8c]
mov dword [eax], ecx
lea ecx, [ebx + 0x34]
call fcn.01001d0f
mov ecx, eax
call fcn.0100d3ad
cmp dword [ebx + 0x40], edi
je 0x1014709
mov eax, dword [ebp - 0xa8]
lea esi, [ebp - 0xb4]
lea edi, [ebp - 0xd4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor ecx, ecx
push ecx
push ecx
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x7c], esp
mov dword [ebp - 0xc8], eax
mov eax, esp
push ecx
push 0x46010000
push 0x101493c
push ecx
mov dword [eax], ecx
mov eax, esp
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x7c], esp
push dword [ebp - 0x8c]
mov dword [eax], ecx
lea ecx, [ebx + 0x3c]
call fcn.01001d0f
mov ecx, eax
call fcn.0100d4bd
xor edi, edi
lea ecx, [ebx + 0x24]
call fcn.01001d0f
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x7c], esp
lea esi, [ebx + 0x4c]
push esi
mov dword [ebp - 0x70], eax
call fcn.01001e9d
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [ebx + 0x30], edi
je 0x1014751
lea ecx, [ebx + 0x2c]
call fcn.01001d0f
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x7c], esp
push esi
mov dword [ebp - 0x70], eax
call fcn.01001e9d
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
call dword [eax + 0x10]
lea ecx, [ebx + 0x34]
call fcn.01001d0f
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x7c], esp
push esi
mov dword [ebp - 0x70], eax
call fcn.01001e9d
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [ebx + 0x40], edi
je 0x1014796
lea ecx, [ebx + 0x3c]
call fcn.01001d0f
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x7c], esp
push esi
mov dword [ebp - 0x70], eax
call fcn.01001e9d
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, ebx
call fcn.0100dcd4
push 0x1014918
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push edi
push 4
push ebx
push 0x10054c9
push 0x1000
push edi
mov dword [ebx + 0x7c], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebx + 0x78], eax
cmp eax, edi
je 0x10147d1
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp byte [ebx + 0xb4], 0
lea ecx, [ebx + 0x44]
jne 0x101d40a
push 1
call fcn.01001d0f
mov ecx, eax
call fcn.010080ef
push 0x58
lea eax, [ebp - 0x68]
push edi
push eax
mov dword [ebp - 0x6c], edi
call sub.msvcrt.dll_memset
add esp, 0xc
push edi
lea eax, [ebp - 0x6c]
push eax
push 0x5c
push 0x1f
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push 1
push eax
lea ecx, [ebx + 4]
mov dword [ebx + 0xb0], eax
call fcn.0100b22e
push 0x7f00
push edi
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [ebx + 0x6c], eax
mov eax, dword [ebx + 0x64]
sub eax, dword [ebx + 0x5c]
mov esi, 0x1014908
push eax
push 0x412
push edi
push esi
call fcn.0100d134
mov eax, dword [ebx + 0x60]
sub eax, dword [ebx + 0x58]
push eax
push 0x415
push edi
push esi
call fcn.0100d134
push dword [ebx + 0x58]
push 0x413
push edi
push esi
call fcn.0100d134
push dword [ebx + 0x5c]
push 0x414
push edi
push esi
call fcn.0100d134
add ebx, 0x54
mov ecx, ebx
call fcn.0101023b
movzx eax, al
push eax
push 0x40f
push edi
push esi
call fcn.0100d134
mov ecx, ebx
call fcn.0101230d
movzx eax, al
push eax
push 0x40e
push edi
push esi
call fcn.0100d134
push 1
push 0x411
push edi
push 0x100aa98
call fcn.0100d134
push dword [ebp - 0x78]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, edi
call fcn.01001994
ret 0x10
xor eax, eax
jmp 0x101421a
xor eax, eax
jmp 0x1014268
xor eax, eax
jmp 0x10142b0
xor eax, eax
jmp 0x10142fb
xor eax, eax
jmp 0x101436f
xor eax, eax
jmp 0x10143c0
mov ecx, edi
call fcn.01001d0f
mov ecx, eax
call fcn.0103436f
jmp 0x101448a
mov eax, dword [ebp - 0x90]
push dword [ebp - 0x78]
mov dword [eax], edi
mov byte [ebx + 0x98], 1
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
or eax, 0xffffffff
jmp 0x10148d1
mov eax, dword [ebp - 0x90]
mov dword [eax], edi
mov byte [ebx + 0x98], 1
or edi, 0xffffffff
jmp 0x10148c6
push 3
jmp 0x10147e3