Function at 0x410c00
Capabilities:
Create thread

Disassembly:
sub esp, 0x124
mov eax, dword [0x451050]
xor eax, esp
mov dword [esp + 0x11c], eax
cmp dword [0x45a160], 0
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [0x459f80], esi
jne 0x410c62
mov ecx, dword [0x459f78]
lea eax, [esp + 0x98]
push eax
push str.Button
push ecx
mov dword [esp + 0xa4], 0x30
call dword [sym.imp.USER32.dll_GetClassInfoExW]
mov edx, dword [esp + 0xa0]
mov edi, esi
mov dword [0x45a174], edx
call fcn.0041c1e0
mov eax, 0x2d
mov ecx, 0x4580d0
call fcn.00409850
mov eax, 6
mov ecx, 0x4583a0
call fcn.00409850
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
push 0xc
call edi
push eax
push 0xb
call edi
mov ebx, dword [sym.imp.USER32.dll_LoadImageW]
push eax
mov eax, dword [0x459f78]
push 1
push 0xc8
push eax
call ebx
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 1
push 0x80
push esi
call ebp
push 0
push 0x32
call edi
push eax
push 0x31
call edi
mov ecx, dword [0x459f78]
push eax
push 1
push 0xc8
push ecx
call ebx
push eax
push 0
push 0x80
push esi
call ebp
mov eax, dword [0x45a15c]
test eax, eax
je 0x410ced
push 6
push esi
call eax
test dword [0x459f88], 0x20000000
je 0x410d21
cmp dword [0x45a378], 0
jne 0x410d21
lea edx, [esp + 0x10]
push edx
push 0
push 0
push 0x42c680
push 0
push 0
call fcn.004342e0
add esp, 0x18
mov dword [0x45a378], eax
call fcn.004102c0
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x44b
push esi
call ebx
mov ebp, dword [sym.imp.USER32.dll_GetWindowLongW]
mov edi, eax
push 0xfffffffffffffffc
push edi
mov dword [esp + 0x18], edi
call ebp
push 0x410a10
push 0xfffffffffffffffc
push edi
mov edi, dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [0x45a00c], eax
call edi
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0xc8]
push eax
push 0x5c
push 0
push 0
push 0x31
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
test eax, eax
je 0x410da9
lea edx, [esp + 0xc8]
push edx
mov dword [esp + 0xdc], 0x2bc
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push 0
push eax
mov eax, dword [esp + 0x18]
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x447
push esi
call ebx
push 0xfffffffffffffffc
push eax
mov dword [esp + 0x18], eax
call ebp
mov ecx, dword [esp + 0x10]
push 0x4104d0
push 0xfffffffffffffffc
push ecx
mov dword [0x45a004], eax
call edi
mov eax, dword [0x459fb8]
cmp eax, 0x64
jge 0x410de3
mov dword [0x459fb8], 0x64
jmp 0x410df4
cmp eax, 0xe8
jle 0x410df4
mov dword [0x459fb8], 0xe8
push 0x446
push esi
call ebx
push 0xfffffffffffffffc
push eax
mov dword [esp + 0x18], eax
call ebp
mov edx, dword [esp + 0x10]
push 0x4105a0
push 0xfffffffffffffffc
push edx
mov dword [0x45a008], eax
call edi
push 0x448
push esi
call ebx
mov ebx, eax
push 0xfffffffffffffff0
push ebx
call ebp
or eax, 0xb
push eax
push 0xfffffffffffffff0
push ebx
call edi
push 0x10
call fcn.00434866
add esp, 4
push 0
push 0x10
push 0x10
mov ebp, eax
mov eax, dword [0x459f78]
push 1
push 0xc9
push eax
mov dword [ebp], 1
mov dword [ebp + 0xc], 0x4710
call dword [sym.imp.USER32.dll_LoadImageW]
push ebp
push 0xffffffffffffffeb
push ebx
mov dword [ebp + 4], eax
mov dword [ebp + 8], 0
call edi
push 0x41d540
push 0xfffffffffffffffc
push ebx
call edi
push 0x3e9
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, eax
push 0xfffffffffffffff0
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0xb
push eax
push 0xfffffffffffffff0
push ebx
call edi
push 0x10
call fcn.00434866
mov ecx, dword [0x459f78]
add esp, 4
push 0
push 0x18
push 0x18
push 1
mov ebp, eax
push 0xdc
push ecx
mov dword [ebp], 1
mov dword [ebp + 0xc], 0x18
call dword [sym.imp.USER32.dll_LoadImageW]
push ebp
push 0xffffffffffffffeb
push ebx
mov dword [ebp + 4], eax
mov dword [ebp + 8], 0
call edi
push 0x41d540
push 0xfffffffffffffffc
push ebx
call edi
push 0x3e8
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, eax
push 0xfffffffffffffff0
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0xb
push eax
push 0xfffffffffffffff0
push ebx
call edi
push 0x10
call fcn.00434866
mov edx, dword [0x459f78]
add esp, 4
push 0
push 0x18
push 0x18
push 1
mov ebp, eax
push 0xdd
push edx
mov dword [ebp], 1
mov dword [ebp + 0xc], 0x18
call dword [sym.imp.USER32.dll_LoadImageW]
push ebp
push 0xffffffffffffffeb
push ebx
mov dword [ebp + 4], eax
mov dword [ebp + 8], 0
call edi
push 0x41d540
push 0xfffffffffffffffc
push ebx
call edi
mov eax, dword [0x459fa8]
add eax, 0xfffffe20
cmp eax, 0x148
ja 0x410f7d
mov eax, dword [0x459fac]
cmp eax, 0x154
jl 0x410f7d
cmp eax, 0x270
jle 0x410fa4
lea ecx, [esp + 0x14]
push ecx
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [esp + 0x1c]
sub edx, dword [esp + 0x14]
mov eax, dword [esp + 0x20]
sub eax, dword [esp + 0x18]
mov dword [0x459fa8], edx
mov dword [0x459fac], eax
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x4c
call edi
push 0x4e
mov dword [esp + 0x18], eax
call edi
add eax, dword [esp + 0x14]
push 0x4d
mov dword [esp + 0x20], eax
call edi
push 0x4f
mov dword [esp + 0x1c], eax
call edi
mov ecx, dword [esp + 0x18]
mov ebx, eax
add ebx, ecx
test dword [0x452498], 0x40000
mov dword [esp + 0x20], ebx
je 0x41101b
mov edx, dword [0x45250c]
mov eax, dword [0x452510]
cmp edx, 0xffffffff
jne 0x410ff7
cmp eax, 0xffffffff
je 0x41101b
cmp edx, dword [esp + 0x14]
jl 0x41101b
cmp eax, ecx
jl 0x41101b
mov ecx, dword [esp + 0x1c]
sub ecx, dword [0x459fa8]
cmp edx, ecx
jg 0x41101b
mov ecx, dword [0x459fac]
sub ebx, ecx
cmp eax, ebx
jle 0x41104b
push 0
call edi
sub eax, dword [0x459fa8]
push 1
cdq
sub eax, edx
sar eax, 1
mov dword [0x45250c], eax
call edi
mov ecx, dword [0x459fac]
sub eax, ecx
cdq
sub eax, edx
mov edx, dword [0x45250c]
sar eax, 1
mov dword [0x452510], eax
push 0x14
push ecx
mov ecx, dword [0x459fa8]
push ecx
push eax
push edx
xor ebp, ebp
push ebp
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edx, dword [0x459f78]
mov eax, dword [0x459fac]
mov ecx, dword [0x459fa8]
push ebp
push edx
push ebp
push esi
push eax
push ecx
push ebp
push ebp
push 0x5680a641
push ebp
push str.ReBarWindow32
push 0x80
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
lea edx, [esp + 0x24]
push edx
push ebp
push 0x404
push eax
mov dword [0x459f84], eax
mov dword [esp + 0x34], 0xc
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], ebp
call edi
mov ecx, esi
call fcn.004175c0
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call ebx
push eax
push ebp
mov ebp, dword [sym.imp.USER32.dll_SetWindowsHookExW]
push 0x410b60
push 0xffffffffffffffff
call ebp
push 0x64
mov dword [0x45a010], eax
lea eax, [esp + 0x34]
push 0
push eax
call fcn.00437610
mov eax, dword [0x458724]
add esp, 0xc
push 0
push 0
push 0x43a
push eax
mov dword [esp + 0x40], 0x50
mov dword [esp + 0x44], 0x31
mov dword [esp + 0x48], 0x24
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], 0xc8
call edi
mov edx, dword [0x459f84]
lea ecx, [esp + 0x30]
push ecx
push 0xffffffffffffffff
shr eax, 0x10
push 0x40a
inc eax
push edx
mov dword [esp + 0x68], eax
call edi
push str.Windows_Snapshot_Maker_v3.1
push esi
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0
push 0
push 0x464
push esi
call edi
mov eax, esi
call fcn.00414860
mov ecx, dword [0x45249c]
mov eax, dword [0x4524a0]
test ecx, ecx
js 0x411180
mov edx, eax
xor edx, ecx
and edx, 0x13110100
xor eax, edx
mov dword [0x4524a0], eax
mov edi, dword [sym.imp.USER32.dll_CheckDlgButton]
shr eax, 8
and eax, 1
push eax
push 0x3f2
push esi
call edi
mov eax, dword [0x4524a0]
shr eax, 0x1c
and eax, 1
push eax
push 0x3f3
push esi
call edi
movzx ecx, word [0x4524a2]
and ecx, 1
push ecx
push 0x3f4
push esi
call edi
mov edx, dword [0x4524a0]
shr edx, 0x14
and edx, 1
push edx
push 0x3f7
push esi
call edi
movzx eax, byte [0x4524a3]
and eax, 1
push eax
push 0x3f5
push esi
call edi
mov ecx, dword [0x4524a0]
shr ecx, 0x19
and ecx, 1
push ecx
push 0x3f6
push esi
call edi
mov edx, dword [0x459f78]
push 0x1f4
push edx
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov dword [0x45a018], eax
call ebx
push eax
xor edi, edi
push edi
push 0x410ba0
push 3
call ebp
push 1
push esi
mov dword [0x45a014], eax
call dword [sym.imp.SHELL32.dll_DragAcceptFiles]
mov eax, dword [0x459ffc]
cmp eax, edi
je 0x411249
push 1
push 0x49
call eax
push 1
push 0x233
call dword [0x459ffc]
call fcn.00403d80
mov eax, dword [0x452498]
and eax, 0xf
mov dword [0x459f90], eax
cmp eax, 4
jbe 0x411266
mov dword [0x459f90], edi
mov ecx, esi
call fcn.00415530
mov eax, dword [0x459f8c]
test eax, 0x20000
je 0x411281
push 1
push edi
jmp 0x411310
test al, al
je 0x4112d4
test eax, 0x400
je 0x4112bd
and eax, 0xfffffbff
mov dword [0x459f8c], eax
lea eax, [esp + 0x10]
push eax
push 0x408dc0
push edi
mov dword [esp + 0x1c], edi
call dword [sym.imp.USER32.dll_EnumDesktopWindows]
mov eax, dword [esp + 0x10]
cmp eax, edi
je 0x4112b8
call fcn.00408c20
mov eax, dword [0x459f8c]
movzx ecx, al
push 1
dec ecx
call fcn.0040fe00
add esp, 4
mov ecx, esi
call fcn.00415530
jmp 0x411320
mov ecx, dword [0x452498]
test ecx, 0x40000000
je 0x411307
test eax, 0x400
je 0x4112f8
and eax, 0xfffffbff
mov dword [0x459f8c], eax
call fcn.00408e60
push 1
or ecx, 0xffffffff
call fcn.0040fe00
add esp, 4
jmp 0x411320
and ecx, 0x1000
push ecx
push 1
xor eax, eax
call fcn.00416ab0
push edi
call fcn.00410330
add esp, 0xc
lea ecx, [esp + 0x14]
push ecx
push 0x44b
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
sub edx, dword [esp + 0x14]
sub eax, dword [esp + 0x18]
mov dword [0x459fb0], edx
mov dword [0x459fb4], eax
call fcn.004100b0
push edi
push 0x64
push 0xbadabab
push esi
mov esi, dword [sym.imp.USER32.dll_SetTimer]
call esi
mov eax, dword [0x459cd0]
cmp eax, edi
je 0x411376
cmp dword [eax], edi
jne 0x41138a
mov ecx, dword [0x459f80]
push edi
push 0x1f4
push 0xbadf00d
push ecx
call esi
mov ecx, dword [esp + 0x12c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
mov eax, 1
call fcn.00433c32
add esp, 0x124
ret