Function at 0x1002060b
Capabilities:
Link many functions at runtime
Print debug messages

Disassembly:
push esi
mov esi, esp
sub esp, 0x24
mov eax, dword [0x1002d178]
xor eax, esi
mov dword [esi - 4], eax
mov eax, dword [esi + 8]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_EncodePointer]
push ebp
push edi
mov dword [esi - 0x1c], eax
xor ebp, ebp
mov eax, dword [esi + 0xc]
push ebp
mov dword [esi - 0x20], eax
call ebx
mov edi, eax
mov dword [esi - 0x18], edi
call fcn.1001c37f
mov dword [esi - 0x14], eax
cmp dword [0x1003249c], ebp
jne 0x100206fe
push 0x800
push ebp
push str.USER32.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
test edi, edi
jne 0x1002068b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x100207de
push ebp
push ebp
push str.USER32.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
test edi, edi
je 0x100207de
push str.MessageBoxW
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100207de
push eax
call ebx
push str.GetActiveWindow
push edi
mov dword [0x1003249c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call ebx
push str.GetLastActivePopup
push edi
mov dword [0x100324a0], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call ebx
push str.GetUserObjectInformationW
push edi
mov dword [0x100324a4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call ebx
mov dword [0x100324ac], eax
test eax, eax
je 0x100206fb
push str.GetProcessWindowStation
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call ebx
mov dword [0x100324a8], eax
mov edi, dword [esi - 0x18]
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x10020723
mov eax, dword [esi - 0x1c]
test eax, eax
je 0x10020716
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp dword [esi - 0x14], ebp
je 0x10020738
push 4
pop eax
jmp 0x100207e0
cmp dword [esi - 0x14], ebp
je 0x10020738
push dword [0x1003249c]
call dword [sym.imp.KERNEL32.dll_DecodePointer]
push 3
jmp 0x1002071d
mov eax, dword [0x100324a8]
mov ebx, dword [sym.imp.KERNEL32.dll_DecodePointer]
cmp eax, edi
je 0x10020796
cmp dword [0x100324ac], edi
je 0x10020796
push eax
call ebx
push dword [0x100324ac]
mov dword [esi - 0x14], eax
call ebx
mov ecx, dword [esi - 0x14]
test ecx, ecx
mov dword [esi - 0x18], eax
je 0x10020796
test eax, eax
je 0x10020796
call ecx
test eax, eax
je 0x1002078b
lea ecx, [esi - 0x24]
push ecx
push 0xc
lea ecx, [esi - 0x10]
push ecx
push 1
push eax
call dword [esi - 0x18]
test eax, eax
je 0x1002078b
test byte [esi - 8], 1
jne 0x10020796
mov edi, dword [esi + 0x10]
or edi, 0x200000
jmp 0x100207c6
mov eax, dword [0x100324a0]
cmp eax, edi
je 0x100207c3
push eax
call ebx
test eax, eax
je 0x100207c3
call eax
mov ebp, eax
test ebp, ebp
je 0x100207c3
mov eax, dword [0x100324a4]
cmp eax, edi
je 0x100207c3
push eax
call ebx
test eax, eax
je 0x100207c3
push ebp
call eax
mov ebp, eax
mov edi, dword [esi + 0x10]
push dword [0x1003249c]
call ebx
test eax, eax
je 0x100207de
push edi
push dword [esi - 0x20]
push dword [esi - 0x1c]
push ebp
call eax
jmp 0x100207e0
xor eax, eax
pop edi
mov ecx, dword [esi - 4]
xor ecx, esi
pop ebp
pop ebx
call fcn.100171e4
mov esp, esi
pop esi
ret