Function at 0x100835f
Capabilities:
Terminate process

Disassembly:
cmp cx, bx
jne 0x1006db7
movzx ecx, word [eax]
cmp cx, bx
jne 0x100d490
test byte [ebp - 0x40], 1
je 0x1006dc5
movzx ecx, word [ebp - 0x3c]
push ecx
push eax
push ebx
push 0x1000000
call fcn.01009d35
mov dword [0x101f824], eax
cmp dword [0x101f7fc], ebx
jne 0x100d4d4
push eax
call dword [sym.imp.msvcrt.dll_exit]
mov edi, dword [ebp - 0x210]
push dword [ebp - 0x214]
lea edi, [edi*4 + 0x101e548]
mov ecx, dword [edi]
mov eax, dword [ecx]
call dword [eax]
test eax, eax
jl 0x1009776
mov ecx, dword [edi]
mov eax, dword [ecx]
mov edi, 0x104
push edi
lea edx, [ebp - 0x20c]
push edx
call dword [eax + 0x10]
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x264]
push eax
push dword [ebp - 0x210]
mov dword [ebp - 0x264], 1
push 0x133e
push dword [ebp - 0x214]
mov dword [ebp - 0x260], ebx
mov dword [ebp - 0x25c], ebx
mov dword [ebp - 0x254], edi
mov dword [ebp - 0x250], ebx
mov dword [ebp - 0x24c], ebx
call esi
inc dword [ebp - 0x210]
mov eax, dword [ebp - 0x210]
cmp eax, dword [0x101e0d8]
jl 0x100533c
call fcn.01004972
mov eax, dword [0x101e158]
cmp eax, ebx
jl 0x1007f9b
mov ecx, dword [0x101e0d8]
cmp eax, ecx
jl 0x1009789
jmp 0x1007f9b
push ebx
push 0x64
push 0x22c
push dword [0x101e098]
call esi
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01001679
leave
ret 4
push ebx
push eax
push 0x130c
push 0x3e8
push dword [0x101e098]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call esi
mov eax, dword [0x101e158]
mov ecx, dword [eax*4 + 0x101e548]
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x248]
push eax
push dword [ebp - 0x218]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x23c]
sub eax, dword [ebp - 0x244]
push eax
mov eax, dword [ebp - 0x240]
sub eax, dword [ebp - 0x248]
push eax
push ebx
push dword [0x101e098]
call fcn.01005c83
jmp 0x10097a0
xor ecx, ecx
cmp dword [ebp - 0x1c], ebx
sete cl
mov dword [ebp - 0x1c], ecx
jmp 0x1006ebd
mov dword [0x1020830], esi
jmp 0x1006e57
cmp dword [ebp - 0x1c], ebx
je 0x10052fd
jmp 0x1006eb3
push 0xa
pop ecx
jmp 0x1005317
push 0x5c
push 0x1006ee8
call fcn.010068db
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov dword [ebp - 4], 0xfffffffe
mov dword [ebp - 4], 1
mov eax, dword fs:[0x18]
mov esi, dword [eax + 4]
mov dword [ebp - 0x20], ebx
mov edi, 0x101e470
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
cmp eax, ebx
jne 0x100d442
xor esi, esi
inc esi
mov eax, dword [0x101e104]
cmp eax, esi
je 0x100d461
mov eax, dword [0x101e104]
test eax, eax
jne 0x1006dac
mov dword [0x101e104], esi
push 0x1006ee4
push 0x1006ed8
call fcn.01007895
pop ecx
pop ecx
test eax, eax
jne 0x100d4f7
mov eax, dword [0x101e104]
cmp eax, esi
jne 0x1006e7b
push 0x1006ed4
push 0x1006ec4
call sub.msvcrt.dll__initterm
pop ecx
pop ecx
mov dword [0x101e104], 2
cmp dword [ebp - 0x20], ebx
jne 0x1006e88
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp dword [0x101fb10], ebx
jne 0x100d46e
mov eax, dword [sym.imp.msvcrt.dll__wcmdln]
cmp dword [eax], ebx
je 0x100d4f7
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
movzx ecx, word [eax]
cmp cx, 0x20
jbe 0x10052f4
cmp cx, 0x22
je 0x1006d9c
inc eax
inc eax
jmp 0x1006ea3
xor eax, eax
mov dword [0x101e158], eax
jmp 0x1005c14
call fcn.0100836e
jmp 0x1006dcd
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x10053bf
cmp ecx, 3
jne 0x1005c14
cmp eax, 2
je 0x1007f9b
jmp 0x1005c14
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push ebx
push 0xfa0
push 0x22b
push dword [0x101e098]
call esi
cmp dword [0x101fdac], ebx
je 0x10055f8
mov al, byte [0x101fdb0]
cmp al, 4
jae 0x10097d6
cmp al, bl
jne 0x10055f8
mov ecx, dword [0x101fd9c]
mov edx, 0x80010000
and ecx, edx
xor eax, eax
or eax, ecx
je 0x10055f8
mov ecx, dword [0x101fda4]
mov eax, ecx
and eax, edx
cmp ebx, dword [0x101fda0]
jne 0x10055f8
cmp eax, ecx
jne 0x10055f8
push 0x1009828
push dword [0x101fd84]
push dword [0x101fd80]
call fcn.0100dd43
jmp 0x10055f8
cmp eax, esi
jne 0x100d451
xor esi, esi
inc esi
mov dword [ebp - 0x20], esi
jmp 0x1006e1e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1006e0a
push 0x1f
call sub.msvcrt.dll__amsg_exit
pop ecx
jmp 0x1006e57
push 0x101fb10
call fcn.0101b140
pop ecx
test eax, eax
je 0x1006e94
push ebx
push 2
push ebx
call dword [0x101fb10]
jmp 0x1006e94
cmp cx, 0x20
ja 0x1005309
inc eax
inc eax
mov dword [ebp - 0x24], eax
jmp 0x10052fd
cmp dword [0x1020830], ebx
jne 0x100d4e2
call dword [sym.imp.msvcrt.dll__cexit]
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [0x101f824]
jmp 0x100d503
mov dword [ebp - 4], 0xfffffffe
mov eax, 0xff
call fcn.0100868c
ret