Function at 0x101036a
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x54
push ebx
push esi
push edi
push 1
push 0x259
push 0x1002298
lea ecx, [ebp - 0x54]
call fcn.01014882
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
xor eax, eax
lea edi, [ebp - 0x30]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor esi, esi
stosd dword es:[edi], eax
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
push 0xb
mov dword [ebp - 0x20], 0x10032b8
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], esi
mov dword [edi + 0x128], eax
call ebx
push 0xc
mov dword [ebp - 8], eax
call ebx
push 0x31
mov dword [ebp + 8], eax
call ebx
push 0x32
mov dword [ebp - 0x10], eax
call ebx
mov dword [ebp - 0xc], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push dword [ebp + 0xc]
call fcn.0100ce48
mov ebx, dword [sym.imp.USER32.dll_LoadImageW]
push esi
push dword [ebp + 8]
push dword [ebp - 8]
push 1
push 0x82
push dword [0x101b308]
call ebx
mov dword [edi + 0xcc], eax
cmp eax, esi
jne 0x1010420
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x277
mov word [ebp - 0x4e], ax
jmp 0x101089f
push esi
push dword [ebp + 8]
mov eax, 0x277
push dword [ebp - 8]
mov dword [ebp - 0x54], esi
push 1
push 0x89
push dword [0x101b308]
mov word [ebp - 0x50], ax
call ebx
mov dword [edi + 0xd8], eax
cmp eax, esi
jne 0x101045b
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x27a
jmp 0x1010417
push esi
push dword [ebp - 0xc]
mov eax, 0x27a
push dword [ebp - 0x10]
mov dword [ebp - 0x54], esi
push 1
push 0x8d
push dword [0x101b308]
mov word [ebp - 0x50], ax
call ebx
mov dword [edi + 0xd4], eax
cmp eax, esi
jne 0x1010496
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x27f
jmp 0x1010417
push esi
push dword [ebp - 0xc]
mov eax, 0x27f
push dword [ebp - 0x10]
mov dword [ebp - 0x54], esi
push 1
push 0x88
push dword [0x101b308]
mov word [ebp - 0x50], ax
call ebx
mov dword [edi + 0xd0], eax
cmp eax, esi
jne 0x10104d4
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x282
jmp 0x1010417
push dword [edi + 0xcc]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push esi
push 0x80
push dword [ebp + 0xc]
mov eax, 0x282
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call ebx
push 0x44e
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp eax, esi
jne 0x101051b
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x287
jmp 0x1010417
push esi
push dword [edi + 0xcc]
mov ecx, 0x287
push 0x170
push eax
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], cx
call ebx
push 0x403
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp eax, esi
jne 0x101055a
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x28c
jmp 0x1010417
push esi
push dword [0x101b3b8]
mov ecx, 0x28c
push 0x30
push eax
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], cx
call ebx
push 0x44d
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [ebp - 0x30]
push ecx
push eax
mov dword [ebp + 8], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x10105a4
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x291
jmp 0x1010417
push 2
mov eax, 0x291
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
push 1
push eax
push esi
push esi
push esi
push dword [ebp + 8]
mov dword [ebp - 0x54], esi
call dword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
jne 0x10105dd
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x292
jmp 0x1010417
push 0x454
push dword [ebp + 0xc]
mov eax, 0x292
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [ebp - 0x30]
push ecx
push eax
mov dword [ebp + 8], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x101061b
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x294
jmp 0x1010417
mov eax, 0x294
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
push 2
push 1
dec eax
push eax
push esi
push esi
push esi
push dword [ebp + 8]
mov dword [ebp - 0x54], esi
call dword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
jne 0x1010655
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x295
jmp 0x1010417
push 0x456
push dword [ebp + 0xc]
mov eax, 0x295
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [ebp - 0x30]
push ecx
push eax
mov dword [ebp + 8], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x1010693
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x297
jmp 0x1010417
mov eax, 0x297
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
push 2
push 1
dec eax
push eax
push esi
push esi
push esi
push dword [ebp + 8]
mov dword [ebp - 0x54], esi
call dword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
jne 0x10106cd
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x298
jmp 0x1010417
push 0x3ea
push dword [ebp + 0xc]
mov eax, 0x298
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp + 8], eax
cmp eax, esi
jne 0x1010700
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x29d
jmp 0x1010417
push 0x450
push dword [ebp + 0xc]
mov eax, 0x29d
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x10], eax
cmp eax, esi
jne 0x1010733
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x2a0
jmp 0x1010417
push 0x3e9
push dword [ebp + 0xc]
mov eax, 0x2a0
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0xc], eax
cmp eax, esi
jne 0x1010766
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x2a3
jmp 0x1010417
push 1
push esi
push 0x160c
push dword [ebp + 8]
mov eax, 0x2a3
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call ebx
push 1
push esi
push 0x160c
push dword [ebp - 0x10]
call ebx
push 1
push esi
push 0x160c
push dword [ebp - 0xc]
call ebx
mov ebx, dword [ebp + 0xc]
push ebx
push edi
mov dword [edi + 0x7c], esi
call fcn.0100d8d1
mov dword [ebp - 0x54], eax
cmp eax, esi
mov eax, 0x2ac
jl 0x1010417
push ebx
push edi
mov word [ebp - 0x50], ax
call fcn.010101ee
mov dword [ebp - 0x54], eax
cmp eax, esi
mov eax, 0x2af
jl 0x1010417
push ebx
push edi
mov word [ebp - 0x50], ax
mov dword [edi + 0x7c], 1
call fcn.0100dbfc
mov dword [ebp - 0x54], eax
cmp eax, esi
mov eax, 0x2b6
jl 0x1010417
mov word [ebp - 0x50], ax
mov eax, dword [edi + 0xfc]
dec eax
je 0x101081d
dec eax
je 0x1010809
dec eax
je 0x1010813
dec eax
jne 0x101082f
push esi
push ebx
push edi
call fcn.01010015
jmp 0x101082f
push esi
push ebx
push edi
call fcn.01010101
jmp 0x101082f
push esi
push 0x3ea
push 0x111
push ebx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0100846e
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
push 0x1002db8
push eax
call dword [ecx]
mov dword [ebp - 0x54], eax
cmp eax, esi
mov eax, 0x2ca
jl 0x1010417
push esi
push esi
push dword [ebp - 0x14]
mov word [ebp - 0x50], ax
push 0x100edd7
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 0xbc], eax
cmp eax, esi
jne 0x1010893
call fcn.01015b4b
mov dword [ebp - 0x54], eax
mov eax, 0x2ce
jmp 0x1010417
mov eax, 0x2ce
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 4]
mov edi, dword [ebp - 0x54]
cmp eax, esi
je 0x10108af
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x20]
call fcn.01016fc9
lea ecx, [ebp - 0x54]
call fcn.01014a83
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 8