Function at 0x100833a
Capabilities:
Create process on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x13c
mov eax, dword [0x1024778]
push ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
push edi
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp + 0x10]
xor ebx, ebx
push 0x10079a9
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], 0x12c
mov dword [ebp - 0x100], ebx
call fcn.010054ac
inc dword [0x1024f04]
push ebx
push 0xa5
call fcn.01003752
push eax
call fcn.010034b6
push 1
push 0x10016dc
push ebx
mov esi, 0xa6
push esi
call fcn.01003752
push eax
call fcn.01003588
cmp eax, 1
mov edi, 0x1f4
push edi
jle 0x1008411
call fcn.010054c2
cmp eax, ebx
mov dword [ebp - 0xf0], eax
jne 0x10083d2
call fcn.010034e7
jmp 0x100871f
push edi
push 0x10013da
push eax
push 0x1001510
push ebx
push esi
call fcn.01003752
push eax
call fcn.01003601
push 5
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.dll_WinExec]
push dword [ebp - 0xf0]
mov edi, eax
call fcn.01005541
cmp edi, 0x20
jl 0x100857c
jmp 0x10083c8
call fcn.010054c2
cmp eax, ebx
mov dword [ebp - 0xf0], eax
je 0x10083c8
push 1
push 0x10016dc
push ebx
push esi
call fcn.01003752
push eax
call fcn.0100367c
push edi
push dword [ebp - 0xf0]
push dword [0x1028204]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push dword [ebp - 0xf0]
push 0x10016d0
push ebx
push esi
call fcn.01003752
push eax
call fcn.010036e3
push ebx
push 0xa9
call fcn.01003752
push eax
push 0x10016c4
push ebx
push esi
call fcn.01003752
push eax
call fcn.010036e3
push ebx
push esi
call fcn.01003752
push eax
push 0x10016b0
push ebx
call fcn.010036e3
push dword [ebp - 0xf0]
call fcn.01005541
push edi
call fcn.010054c2
cmp eax, ebx
mov dword [ebp - 0xf0], eax
je 0x100857c
push edi
call fcn.010054c2
cmp eax, ebx
mov dword [ebp - 0x108], eax
je 0x1008571
mov dword [ebp - 0x104], ebx
push dword [ebp - 0x104]
lea eax, [ebp - 0x24]
push 0x10016a8
push eax
call dword [sym.imp.msvcrt.dll_sprintf]
add esp, 0xc
push edi
push 0x10013da
push dword [ebp - 0xf0]
lea eax, [ebp - 0x24]
push eax
push ebx
call fcn.01003601
mov eax, dword [ebp - 0xf0]
cmp byte [eax], bl
je 0x1008554
push edi
push 0x10013da
push dword [ebp - 0x108]
push 0x10016c4
push eax
call fcn.01003601
push ebx
push 0xa9
call fcn.01003752
push eax
push dword [ebp - 0x108]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x1008566
mov eax, dword [ebp - 0x108]
cmp byte [eax], bl
je 0x1008554
inc dword [ebp - 0x104]
cmp dword [ebp - 0x104], 0x7fbc
jl 0x10084c9
push ebx
push esi
call fcn.01003752
push eax
lea eax, [ebp - 0x24]
push eax
push ebx
call fcn.010036e3
push dword [ebp - 0x108]
call fcn.01005541
push dword [ebp - 0xf0]
call fcn.01005541
dec dword [0x1024f04]
push 0x10016a0
push dword [ebp - 0xfc]
call dword [sym.imp.msvcrt.dll_strstr]
mov edi, dword [ebp - 0x10c]
pop ecx
pop ecx
neg eax
push 0x12c
sbb eax, eax
push ebx
neg eax
push 0xa8
mov dword [0x102556c], eax
mov dword [0x1028204], edi
call fcn.01003752
push eax
push 0x102543c
push 0x1001690
push ebx
push esi
call fcn.01003752
push eax
call fcn.01003601
push 0x100166c
call dword [sym.imp.USER32.dll_RegisterWindowMessageA]
push ebx
push ebx
mov esi, 0xa7
push esi
mov dword [0x10281e8], eax
call fcn.01003752
push eax
call dword [sym.imp.USER32.dll_FindWindowA]
cmp eax, ebx
je 0x1008610
push ebx
push ebx
push dword [0x10281e8]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x100871f
call fcn.010211d0
test eax, eax
jne 0x100871f
lea eax, [ebp - 0x114]
push eax
mov dword [ebp - 0x114], 8
mov dword [ebp - 0x110], 0x16fd
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0x10015c0
push edi
mov dword [ebp - 0x13c], 0x1008
mov dword [ebp - 0x138], 0x1007a3e
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x12c], edi
call dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push ebx
mov dword [ebp - 0x128], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
push ebx
push esi
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], 0x10
mov dword [ebp - 0x11c], 0x1001664
call fcn.01003752
mov dword [ebp - 0x118], eax
mov eax, 0x1001654
push eax
push eax
push edi
call fcn.01007308
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0x13c]
push eax
call dword [sym.imp.USER32.dll_RegisterClassA]
call fcn.010067f3
push ebx
push 0x26
call fcn.01003752
push eax
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
push edi
push ebx
push ebx
push 0x1e0
push 0x280
push ebx
push ebx
push 0x3ca0000
lea eax, [ebp - 0xec]
push eax
push ebx
push esi
call fcn.01003752
push eax
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExA]
cmp eax, ebx
mov dword [0x10281fc], eax
jne 0x1008726
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
xor eax, eax
jmp 0x1008ad5
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call fcn.01005f69
call fcn.010157e3
call fcn.01014d3d
push 0x1001648
push dword [ebp - 0xfc]
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
je 0x1008767
xor eax, eax
inc eax
push eax
push 0x193
mov dword [0x102822c], eax
call fcn.010056d3
push dword [ebp + 0x14]
push dword [0x10281fc]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x102822c]
call fcn.01003be4
push dword [0x10281fc]
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp dword [ebp - 0xf0], ebx
je 0x10087ab
push dword [ebp - 0xf0]
call fcn.010071a5
push dword [ebp - 0xf0]
call fcn.010071ed
push dword [0x1028230]
call fcn.010079ed
mov edi, dword [sym.imp.WINMM.dll_timeGetTime]
call edi
mov dword [ebp - 0xf0], eax
jmp 0x10087e9
call edi
sub eax, dword [ebp - 0xf0]
cmp eax, 0x7d0
jae 0x10087f3
push 1
push ebx
push ebx
push dword [0x10281fc]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
call edi
cmp eax, dword [ebp - 0xf0]
jae 0x10087c6
push 0x1001640
push dword [ebp - 0xfc]
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
je 0x1008811
call fcn.01015802
jmp 0x1008817
push ebx
call fcn.010153ae
call edi
mov dword [0x10281a0], eax
cmp dword [ebp - 0xf8], ebx
jne 0x100896c
cmp dword [0x1024fe0], ebx
mov dword [ebp - 0xf8], 0x12c
je 0x1008966
call edi
cmp dword [ebp - 0x100], ebx
mov dword [ebp - 0x10c], eax
je 0x1008958
sub eax, dword [ebp - 0x100]
test eax, eax
mov dword [ebp - 0xfc], eax
fild dword [ebp - 0xfc]
jge 0x1008870
fadd qword [0x1001638]
fmul qword [0x10015a0]
push ecx
push ecx
mov esi, 0x1024f88
fdivr qword [0x1001630]
fstp qword [esp]
push 0x1001618
push esi
call dword [sym.imp.msvcrt.dll_sprintf]
add esp, 0x10
push esi
push dword [0x10281fc]
call dword [sym.imp.USER32.dll_SetWindowTextA]
cmp dword [0x1024fe4], ebx
je 0x1008953
cmp dword [0x10281c8], ebx
jne 0x100892d
push 0x400
call dword [sym.imp.msvcrt.dll_malloc]
mov esi, eax
xor edx, edx
pop ecx
xor edi, edi
lea eax, [esi + 0x29]
lea ecx, [edx + 0xa]
cmp ecx, 0x100
jge 0x1008908
cmp edi, 0xff
mov ecx, edi
jle 0x10088e5
mov ecx, 0xff
cmp edi, 0xff
mov byte [eax + 1], cl
mov ecx, edi
jle 0x10088f4
mov ecx, edx
mov byte [eax], cl
mov byte [eax - 1], cl
add edi, 8
add eax, 4
inc edx
cmp edx, 0x100
jl 0x10088cb
push esi
call fcn.010043b9
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
push 0xf
push 0x190
push 0x10281c0
call fcn.0100459a
mov edi, dword [sym.imp.WINMM.dll_timeGetTime]
push 0xa
mov esi, 0x12c
push esi
push ebx
push ebx
push ebx
push ebx
push 0x10281c0
call fcn.01004705
push ebx
push ebx
push ebx
push 0xa
push esi
push 0x10281c0
call fcn.010047fa
mov esi, 0xa7
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x100], eax
jmp 0x100896c
mov dword [ebp - 0x100], ebx
call fcn.01006bb8
call fcn.010082a9
test eax, eax
je 0x1008a88
cmp dword [0x1024fdc], ebx
jne 0x1008a88
cmp dword [0x1024fec], ebx
je 0x100881e
cmp dword [0x1024fe8], ebx
je 0x10089ed
call edi
mov dword [0x10281f0], eax
sub eax, dword [0x10281a0]
cmp eax, 2
jl 0x10089ed
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0xf0]
sub eax, dword [0x10281ec]
push eax
mov eax, dword [0x10281f8]
sub eax, dword [ebp - 0xf4]
push eax
call fcn.01014d8e
push dword [0x10281ec]
push dword [0x10281f8]
call dword [sym.imp.USER32.dll_SetCursorPos]
cmp dword [0x1024fd8], ebx
jne 0x100881e
call edi
cmp dword [0x1024ff4], ebx
mov dword [0x10281f0], eax
je 0x1008a13
mov dword [0x10281a0], eax
mov dword [0x1024ff4], ebx
mov ecx, dword [0x10281a0]
cmp eax, ecx
jne 0x1008a2a
push 8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100881e
sub eax, ecx
push eax
call fcn.01014bf9
test eax, eax
je 0x100881e
cmp dword [0x10281c8], ebx
je 0x1008a78
mov eax, dword [0x10281f0]
sub eax, dword [0x10281a0]
add eax, 0xa
cmp eax, 0xec
jle 0x1008a5c
mov eax, 0xf9
push eax
push ebx
mov eax, 0x12b
sub eax, dword [ebp - 0xf8]
push eax
push 0xa
push 1
push 0x10281c0
call fcn.010047fa
dec dword [ebp - 0xf8]
mov eax, dword [0x10281f0]
jmp 0x1008819
push 0x10281c0
call fcn.0100460c
call fcn.010055f3
call fcn.0100af8e
call fcn.0101566e
call fcn.01006af6
call fcn.01004508
push dword [0x10281fc]
call dword [sym.imp.USER32.dll_DestroyWindow]
call fcn.010034e7
push dword [0x1028204]
push ebx
push esi
call fcn.01003752
push eax
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, dword [0x1028200]
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0101cd9e
leave
ret 0x10