Function at 0x1003ceef
Capabilities:
Create thread
Resume thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
push ebx
push esi
push edi
xor edi, edi
mov ebx, ecx
mov esi, edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebx + 0x274], eax
lea eax, [esp + 0x10]
push edi
push eax
lea eax, [ebx + 0x278]
mov dword [esp + 0x18], 1
push eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
test eax, eax
je 0x1003cf44
mov esi, 0x80004005
jmp 0x1003d1db
push 0x2713
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], edi
call fcn.10027c9a
cmp dword [esp + 0xc], esi
jne 0x1003cf61
mov esi, 0x80004005
push dword [esp + 0xc]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
js 0x1003d1db
mov ecx, ebx
call fcn.100429c6
mov esi, eax
test esi, esi
js 0x1003d1db
push 0x7f86
push edi
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [ebx + 0x21c], eax
test eax, eax
jne 0x1003cf9f
mov esi, 0x80004005
test esi, esi
js 0x1003d1db
push 0x7f00
push edi
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [ebx + 0x214], eax
test eax, eax
jne 0x1003cfc2
mov esi, 0x80004005
test esi, esi
js 0x1003d1db
push 0x7f02
push edi
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [ebx + 0x218], eax
test eax, eax
jne 0x1003cfe5
mov esi, 0x80004005
test esi, esi
js 0x1003d1db
movzx edx, word [ebx + 0x23c]
push 0x9ec
call fcn.1003bcea
push eax
push edx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
call fcn.100c54df
mov dword [ebx + 0x210], eax
test eax, eax
jne 0x1003d01c
mov esi, 0x80004005
test esi, esi
js 0x1003d1db
push 0x2774
push dword [0x100d5398]
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [ebx + 0x20c], eax
test eax, eax
jne 0x1003d044
mov esi, 0x80004005
test esi, esi
js 0x1003d1db
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebx + 0x1cc], eax
test eax, eax
jne 0x1003d065
mov esi, 0x80004005
test esi, esi
js 0x1003d1db
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebx + 0x1d4], eax
test eax, eax
jne 0x1003d086
mov esi, 0x80004005
test esi, esi
js 0x1003d1db
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebx + 0x1d0], eax
test eax, eax
jne 0x1003d0a7
mov esi, 0x80004005
test esi, esi
js 0x1003d1db
lea edx, [ebx + 0x1b0]
xor eax, eax
push 6
pop ecx
mov edi, edx
rep stosd dword es:[edi], eax
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [ebx + 0x1c8]
mov dword [ebx + 0xb8], 1
push eax
push 4
push ebx
push 0x100410e0
xor edi, edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebx + 0x1ac], eax
test eax, eax
je 0x1003d109
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push dword [ebx + 0x1ac]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x1003d10e
mov esi, 0x80004005
test esi, esi
js 0x1003d1db
lea eax, [esp + 0x20]
push eax
push 0x10008f40
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_GetClassInfoW]
test eax, eax
jne 0x1003d188
push edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], 0x1003cb50
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x7f00
push edi
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edi
call dword [sym.imp.USER32.dll_LoadCursorW]
push 5
mov dword [esp + 0x3c], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], 0x10008f40
call dword [sym.imp.USER32.dll_RegisterClassW]
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push edi
push 0xfffffffffffffffd
push edi
push edi
push edi
push edi
push edi
push edi
push 0x10008f40
push edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebx + 0x220], eax
test eax, eax
je 0x1003d1bf
push ebx
push 0x10008f84
push eax
call dword [sym.imp.USER32.dll_SetPropW]
jmp 0x1003d1c4
mov esi, 0x80004005
test esi, esi
js 0x1003d1db
push dword [ebx + 0x220]
lea ecx, [ebx + 0x130]
call fcn.10045fe3
mov esi, eax
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret