Function at 0x102bbe1
Capabilities:
Create thread

Disassembly:
push 0x964
mov eax, 0x1043ae7
call fcn.0102dae7
mov eax, dword [ebp + 8]
mov esi, ecx
xor ebx, ebx
lea ecx, [ebp - 0x970]
mov dword [ebp - 0x828], esi
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x83c], ebx
call fcn.0103ba99
lea ecx, [ebp - 0x870]
mov dword [ebp - 4], ebx
call fcn.0103b6cd
xor eax, eax
push 0x7fe
mov word [ebp - 0x810], ax
lea eax, [ebp - 0x80e]
push ebx
push eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x81c], ebx
mov dword [ebp - 0x820], ebx
mov dword [ebp - 0x840], ebx
mov dword [ebp - 0x834], ebx
mov dword [ebp - 0x838], ebx
call sub.msvcrt.dll_memset
xor eax, eax
mov dword [ebp - 0x848], ebx
lea edi, [ebp - 0x844]
stosd dword es:[edi], eax
mov eax, dword [0x104a794]
mov dword [ebp - 0x82c], ebx
mov dword [ebp - 0x830], ebx
mov ecx, dword [eax + 0x210]
or dword [eax + 0x208], 0xffffffff
mov eax, dword [0x104a794]
or dword [eax + 0x20c], 0xffffffff
mov eax, dword [ebp - 0x814]
mov dword [esi + 4], eax
mov esi, dword [esi]
add esp, 0xc
mov dword [ebp - 0x824], ecx
xor eax, eax
xor ecx, ecx
cmp dword [ecx + 0x104a244], esi
je 0x102bcc6
add ecx, 0xc
inc eax
cmp ecx, 0xa8
jb 0x102bcb0
jmp 0x102bced
mov edx, dword [0x104a794]
imul eax, eax, 0xc
mov ecx, dword [eax + 0x104a248]
mov dword [edx + 0x208], ecx
mov eax, dword [eax + 0x104a240]
mov ecx, dword [0x104a794]
mov dword [ecx + 0x20c], eax
mov eax, dword [0x104a794]
mov edi, dword [sym.imp.USER32.dll_GetParent]
xor ecx, ecx
cmp dword [eax + 0x20c], 0xffffffff
mov eax, dword [eax + 0x208]
setne cl
inc eax
neg eax
sbb eax, eax
and eax, 2
or ecx, eax
or ecx, 0x10
push ecx
push ebx
push 0x470
push dword [ebp - 0x814]
mov dword [ebp - 0x818], ecx
call edi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
push 0x16
push dword [ebp - 0x818]
push 0x48a
push dword [ebp - 0x814]
call edi
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [0x104a794]
mov ecx, dword [ebp - 0x814]
mov dword [eax + 0x1fc], ecx
mov eax, dword [ebp - 0x828]
mov ecx, dword [0x104a794]
push dword [eax]
add ecx, 0x138
call fcn.01030171
mov eax, dword [ebp - 0x828]
mov ecx, dword [eax]
mov eax, 0x7db
cmp ecx, eax
ja 0x102c392
je 0x102c234
sub ecx, 0x6c
je 0x102c1b8
sub ecx, 0x765
je 0x102c149
sub ecx, 3
je 0x102c0fe
dec ecx
dec ecx
je 0x102c00c
sub ecx, 3
je 0x102bf43
dec ecx
jne 0x102c66e
mov eax, dword [ebp - 0x828]
cmp dword [eax + 0x14], 1
jne 0x102be64
xor edi, edi
inc edi
push edi
mov dword [ebp - 0x838], 0x80000225
call fcn.0102208b
test eax, eax
jne 0x102be03
push ebx
push 0x100669c
push 0x4b1
jmp 0x102c182
mov ecx, dword [0x104a794]
push edi
add ecx, 0x138
call fcn.0102fc2b
mov eax, dword [0x104a794]
mov ecx, dword [eax + 0x210]
call fcn.01038745
mov ecx, dword [0x104a794]
push edi
add ecx, 0x138
push edi
test eax, eax
jge 0x102be57
call fcn.0102ff97
mov eax, 0x8000020e
push eax
push 0x100669c
mov dword [ebp - 0x838], eax
push 0x4ba
jmp 0x102c182
call fcn.0102ff97
mov dword [ebp - 0x838], ebx
jmp 0x102bead
push 0x400
lea eax, [ebp - 0x810]
push eax
push 0x1f7
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x102be97
push ebx
push 0x100669c
push 0x4cb
jmp 0x102c182
lea eax, [ebp - 0x810]
push eax
push 0xa
push 0x47e
push dword [ebp - 0x814]
call esi
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x43b
push dword [ebp - 0x814]
call edi
push 0x32
push 1
push 0x40a
push eax
call esi
push 5
push 0x43a
push dword [ebp - 0x814]
call edi
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call esi
push 0x43c
push dword [ebp - 0x814]
call edi
push ebx
push eax
call esi
push 0x10
push dword [ebp - 0x814]
push 0x102acef
call dword [sym.imp.KERNEL32.dll_QueueUserWorkItem]
test eax, eax
jne 0x102c66e
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
test eax, eax
je 0x102bf2e
call esi
cmp eax, ebx
jle 0x102bf33
and eax, 0xffff
or eax, 0x80070000
jmp 0x102bf33
mov eax, 0x80004005
push eax
push 0x100669c
push 0x4e1
jmp 0x102c182
call fcn.0102efd2
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
test al, al
jne 0x102bf80
mov edi, dword [ebp - 0x814]
push ebx
push 0x11e
push edi
call esi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov ecx, dword [0x104a794]
push 0x426d
add ecx, 0x138
call fcn.01030171
jmp 0x102bf9c
mov ecx, dword [0x104a794]
push 0x426e
add ecx, 0x138
call fcn.01030171
mov edi, dword [ebp - 0x814]
mov ecx, dword [0x104a794]
push ebx
add ecx, 0x278
call fcn.01031aa2
cmp eax, 2
jne 0x102bfdc
push ebx
push 0x424
push edi
call esi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push ebx
push 0x128
push edi
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push 0x125
jmp 0x102c004
push 1
push 0x424
push edi
call esi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push ebx
push 0x125
push edi
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push 0x128
push edi
call esi
jmp 0x102c228
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x41f
push dword [ebp - 0x814]
call edi
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x420
push dword [ebp - 0x814]
call edi
push ebx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x41e
push dword [ebp - 0x814]
call edi
push ebx
push eax
mov dword [ebp - 0x818], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
push ebx
push 0x14b
push dword [ebp - 0x818]
call esi
push 0x437
push dword [ebp - 0x814]
call edi
mov edi, eax
push 5
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x32
push 1
push 0x40a
push edi
call esi
push ebx
push ebx
push dword [ebp - 0x814]
push 0x102b501
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x83c], eax
cmp eax, ebx
jne 0x102c66e
push ebx
push 0x100669c
push 0x50d
push 0x1006040
push 0x10018b8
mov ecx, 0x104abe8
call fcn.0102f8f0
push ebx
push 0xfffe
push ebx
push dword [ebp - 0x814]
push 0x28a
push 0x213
call fcn.0102556f
push ebx
push 5
push 0x471
push dword [ebp - 0x814]
call esi
jmp 0x102c66e
push 0x10
push dword [ebp - 0x814]
push 0x102ac6b
call dword [sym.imp.KERNEL32.dll_QueueUserWorkItem]
test eax, eax
jne 0x102c66e
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
test eax, eax
je 0x102c137
call esi
cmp eax, ebx
jle 0x102c13c
and eax, 0xffff
or eax, 0x80070000
jmp 0x102c13c
mov eax, 0x80004005
push eax
push 0x100669c
push 0x4a6
jmp 0x102c182
mov ecx, dword [0x104a794]
call fcn.0100d708
push 0x400
lea eax, [ebp - 0x810]
push eax
push 0x2fa
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x102c19b
push ebx
push 0x100669c
push 0x483
push 0x1006040
push 0x10018c8
mov ecx, 0x104abe8
call fcn.0102f8f0
jmp 0x102c66e
lea eax, [ebp - 0x810]
push eax
push 0x43f
push dword [ebp - 0x814]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x102c66e
mov ecx, dword [0x104a794]
push ebx
add ecx, 0x278
call fcn.01031aa2
push ebx
cmp eax, 2
jne 0x102c217
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x42d
push dword [ebp - 0x814]
call esi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push ebx
push 0x42f
push dword [ebp - 0x814]
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x104a794]
push 4
add ecx, 0x138
call fcn.0102fbb3
jmp 0x102c66e
push 0x125
push dword [ebp - 0x814]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x102c66e
push 0x42c
push dword [ebp - 0x814]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
push 0x184
push eax
mov dword [ebp - 0x818], eax
call esi
push ebx
push ebx
push 0xb
push dword [ebp - 0x818]
call esi
push 2
lea eax, [ebp - 0x970]
push eax
call fcn.01020654
test eax, eax
jl 0x102c292
push 2
lea ecx, [ebp - 0x970]
call fcn.0103bd74
lea eax, [ebp - 0x820]
push eax
lea ecx, [ebp - 0x970]
call fcn.0103bd34
mov dword [ebp - 0x824], ebx
cmp dword [ebp - 0x820], ebx
jbe 0x102c33b
lea eax, [ebp - 0x870]
push eax
push dword [ebp - 0x824]
lea ecx, [ebp - 0x970]
call fcn.0103bd8a
test eax, eax
jl 0x102c323
lea eax, [ebp - 0x840]
push eax
lea ecx, [ebp - 0x870]
call fcn.0103b7b5
test eax, eax
jl 0x102c323
cmp dword [ebp - 0x840], 3
jne 0x102c323
lea eax, [ebp - 0x81c]
push eax
lea ecx, [ebp - 0x870]
call fcn.0103b813
test eax, eax
jl 0x102c323
push dword [ebp - 0x81c]
push ebx
push 0x180
push dword [ebp - 0x818]
call esi
cmp dword [ebp - 0x81c], ebx
je 0x102c323
push dword [ebp - 0x81c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x81c], ebx
inc dword [ebp - 0x824]
mov eax, dword [ebp - 0x824]
cmp eax, dword [ebp - 0x820]
jb 0x102c2a4
push ebx
push 1
push 0xb
push dword [ebp - 0x818]
call esi
push 0x42b
push dword [ebp - 0x814]
mov dword [ebp - 0x818], 0x11
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
test eax, eax
je 0x102c378
mov dword [ebp - 0x818], 0x13
push dword [ebp - 0x818]
push ebx
push 0x470
push dword [ebp - 0x814]
call edi
push eax
jmp 0x102c0f7
sub ecx, 0x7dc
je 0x102c5e6
dec ecx
je 0x102c563
dec ecx
je 0x102c51f
dec ecx
je 0x102c4db
dec ecx
jne 0x102c66e
mov ecx, dword [ebp - 0x824]
lea eax, [ebp - 0x830]
push eax
call fcn.01033e50
cmp eax, ebx
jge 0x102c3e0
push eax
push 0x100669c
push 0x5a7
jmp 0x102c182
mov ecx, dword [ebp - 0x824]
lea eax, [ebp - 0x81c]
push eax
call fcn.01032fd2
cmp eax, ebx
jge 0x102c406
push eax
push 0x100669c
push 0x5a8
jmp 0x102c182
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x81c]
push 0x400
mov dword [ebp - 0x844], eax
lea eax, [ebp - 0x810]
push eax
push 0x21d
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x102c451
push ebx
push 0x100669c
push 0x5b0
jmp 0x102c182
lea eax, [ebp - 0x848]
push eax
push 1
lea eax, [ebp - 0x82c]
push eax
push ebx
push ebx
lea eax, [ebp - 0x810]
push eax
push 0x2500
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
test eax, eax
jne 0x102c489
push ebx
push 0x100669c
push 0x5bb
jmp 0x102c182
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3fd
push dword [ebp - 0x814]
call edi
push dword [ebp - 0x82c]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x400
push dword [ebp - 0x814]
call edi
push 0x32
push 1
push 0x40a
push eax
call esi
push 1
push ebx
push 0x801a
push dword [ebp - 0x814]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x102c66e
push 0x400
lea eax, [ebp - 0x810]
push eax
push 0x2f8
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x102c50e
push ebx
push 0x100669c
push 0x48e
jmp 0x102c182
lea eax, [ebp - 0x810]
push eax
push 0x43e
jmp 0x102c1a7
push 0x400
lea eax, [ebp - 0x810]
push eax
push 0x2f9
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x102c552
push ebx
push 0x100669c
push 0x499
jmp 0x102c182
lea eax, [ebp - 0x810]
push eax
push 0x43d
jmp 0x102c1a7
mov edi, dword [ebp - 0x828]
mov eax, dword [edi + 0xc]
cmp eax, ebx
je 0x102c5a7
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov eax, dword [edi + 0xc]
mov ecx, dword [eax]
lea edx, [ebp - 0x820]
push edx
push eax
call dword [ecx + 0x18]
mov eax, dword [edi + 0xc]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x10]
mov ecx, dword [0x104a794]
push dword [ebp - 0x820]
add ecx, 0x138
call fcn.0102fbc7
cmp dword [ebp - 0x820], ebx
je 0x102c5ca
mov ecx, dword [0x104a794]
push ebx
add ecx, 0x278
call fcn.01031aa2
cmp eax, 2
jne 0x102c66e
push 1
push 0x6b
push 0x6c
pop esi
push esi
mov ecx, edi
call fcn.0102ac13
mov dword [edi], esi
mov dword [ebp - 0x834], esi
jmp 0x102c66e
mov esi, dword [ebp - 0x828]
mov eax, dword [esi + 8]
cmp eax, ebx
je 0x102c620
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov eax, dword [esi + 8]
mov ecx, dword [eax]
lea edx, [ebp - 0x820]
push edx
push eax
call dword [ecx + 0x18]
mov ecx, dword [0x104a794]
push dword [ebp - 0x820]
add ecx, 0x138
call fcn.0102fbc7
cmp dword [ebp - 0x820], ebx
je 0x102c63f
mov ecx, dword [0x104a794]
push ebx
add ecx, 0x278
call fcn.01031aa2
cmp eax, 2
jne 0x102c658
push 1
push 0x6b
mov edi, 0x7d9
push edi
mov ecx, esi
call fcn.0102ac13
mov dword [esi], edi
mov dword [ebp - 0x834], edi
cmp dword [esi + 0x10], 1
jne 0x102c66e
mov eax, 0x7d9
mov dword [esi], eax
mov dword [ebp - 0x834], eax
mov dword [esi + 0x10], ebx
mov esi, dword [ebp - 0x828]
cmp dword [esi], 0x7dd
je 0x102c68b
mov eax, dword [esi + 0xc]
cmp eax, ebx
je 0x102c68b
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x10]
cmp dword [ebp - 0x838], ebx
jge 0x102c6b3
push 1
push dword [ebp - 0x814]
push dword [ebp - 0x838]
call fcn.01026c45
mov eax, 0x7d9
mov dword [esi], eax
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x81c], ebx
je 0x102c6cd
push dword [ebp - 0x81c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x81c], ebx
cmp dword [ebp - 0x830], ebx
je 0x102c6e7
push dword [ebp - 0x830]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x830], ebx
cmp dword [ebp - 0x83c], ebx
je 0x102c6fb
push dword [ebp - 0x83c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x82c], ebx
je 0x102c715
push dword [ebp - 0x82c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x82c], ebx
lea ecx, [ebp - 0x870]
mov byte [ebp - 4], bl
call fcn.0103b6f5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x970]
call fcn.0103c017
mov eax, dword [ebp - 0x834]
call fcn.0102db79
ret 4