Function at 0x100d68fc
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push ebx
push esi
mov dword [ebp - 0x10], 0xd6c05baf
xor ebx, ebx
push edi
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0xc], 0x1188e17b
mov dword [ebp - 0x10], ebx
jmp 0x100d6999
push 1
lea ecx, [ebp - 0x40]
call fcn.100141a5
mov dword [ebp - 8], 0xfffffff8
mov dword [ebp - 0xc], ebx
jmp 0x100d6946
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x40]
mov dword [eax + ecx*4], 0xe0b4074d
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 1
jl 0x100d6936
mov dword [ebp - 8], ebx
cmp dword [ebp - 8], ebx
jl 0x100d697f
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100d6966
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_EndPaint]
mov esi, dword [ebp - 8]
xor edx, edx
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 8]
cmp dword [ecx + esi*4], eax
setl dl
mov dword [ebp - 0xc], edx
dec dword [ebp - 8]
jns 0x100d6954
cmp dword [ebp - 0x40], ebx
je 0x100d6996
push dword [ebp - 0x40]
call fcn.10123626
pop ecx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jle 0x100d6920
xor ecx, ecx
inc ecx
call fcn.100d5d98
test al, al
je 0x100d6cab
xor cl, cl
call fcn.100bc0e8
mov esi, dword [sym.imp.USER32.dll_GetDC]
test al, al
je 0x100d6ab3
mov dword [ebp - 8], 0x60477862
mov dword [ebp - 0x24], 0xe3ff14eb
mov dword [ebp - 8], 0xffffffff
jmp 0x100d6a73
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x100d69f8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x68], 6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100d69ea
mov dword [ebp - 0x64], 4
jmp 0x100d6a11
mov dword [ebp - 0xc], 0xfffffff8
dec dword [ebp - 0x64]
cmp dword [ebp - 0x64], 0xfffffffb
jg 0x100d6a07
mov dword [ebp - 0xc], ebx
jmp 0x100d6a6a
mov dword [ebp - 0x10], ebx
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100d6a3d
push 0x5ba
push 0x178f
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
mov dword [ebp - 0x10], ebx
jmp 0x100d6a61
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100d6a5e
push ebx
push 0x2043
push ebx
push ebx
push 0x1014
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jle 0x100d6a42
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jle 0x100d6a1c
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffff6
jle 0x100d69de
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 8], eax
call fcn.1003bfbf
push ebx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x28], 2
push eax
push 1
lea eax, [ebp - 0x28]
push eax
push ebx
call fcn.100d46b6
add esp, 0x14
cmp dword [ebp - 0x14], ebx
je 0x100d6ab3
push fcn.100d46b6
call dword [ebp - 0x14]
mov dword [ebp - 0x24], 0x91a0
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100d6acb
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnionRect]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100d6b04
push ebx
push 0x1e7e
push 0xecb
push 0x1c47
push 0xc8f
push 0x39b
push 0x273
push 0x1d9a
push 0x1e69
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
xor ecx, ecx
xor dl, dl
inc ecx
call fcn.100983e7
test al, al
je 0x100d6bcd
xor ecx, ecx
inc ecx
call fcn.100b084a
push ebx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x2c], 2
push eax
push 3
lea eax, [ebp - 0x2c]
push eax
push ebx
call fcn.100d46b6
add esp, 0x14
cmp dword [ebp - 0x18], ebx
je 0x100d6b46
push fcn.100d46b6
call dword [ebp - 0x18]
push 2
lea ecx, [ebp - 0x4c]
call fcn.100141a5
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x10], ebx
jmp 0x100d6b6f
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x4c]
mov dword [eax + ecx*4], 0x9b55bb2c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100d6b5f
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], 1
jg 0x100d6bb6
mov dword [ebp - 0x24], 0xffffffff
xor edx, edx
mov dword [ebp - 0xc], 0xfffffff9
mov dword [ebp - 0xc], 1
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, 0xfffa
setl dl
cmp eax, edx
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x100d6b7e
cmp dword [ebp - 0x4c], ebx
je 0x100d6bcd
push dword [ebp - 0x4c]
call fcn.10123626
pop ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
push 4
xor dl, dl
pop ecx
call fcn.100983e7
test al, al
je 0x100d6c0b
push 4
pop ecx
call fcn.100b084a
push ebx
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x30], 2
push eax
push 4
lea eax, [ebp - 0x30]
push eax
push ebx
call fcn.100d46b6
add esp, 0x14
cmp dword [ebp - 0x1c], ebx
je 0x100d6c0b
push fcn.100d46b6
call dword [ebp - 0x1c]
mov dword [ebp - 0x24], 0xf57a7c2
lea ecx, [ebp - 0x58]
push 1
call fcn.100141a5
mov dword [ebp - 0x10], ebx
jmp 0x100d6c31
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x58]
mov dword [eax + ecx*4], 0x7fa5c62e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x100d6c21
mov eax, dword [ebp - 0x24]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100d6c49
push ebx
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100d6c5f
push ebx
push ebx
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_SelectPalette]
cmp dword [ebp - 0x58], ebx
je 0x100d6c6d
push dword [ebp - 0x58]
call fcn.10123626
pop ecx
push 7
xor dl, dl
pop ecx
call fcn.100983e7
test al, al
je 0x100d6cab
push 7
pop ecx
call fcn.100b084a
push ebx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x34], 2
push eax
push 5
lea eax, [ebp - 0x34]
push eax
push ebx
call fcn.100d46b6
add esp, 0x14
cmp dword [ebp - 0x20], ebx
je 0x100d6cab
push fcn.100d46b6
call dword [ebp - 0x20]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret