Function at 0x101038a
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x54
push ebx
push esi
push edi
push 1
push 0x259
push 0x1002298
lea ecx, [ebp - 0x54]
call fcn.010148a2
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
xor eax, eax
lea edi, [ebp - 0x30]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor esi, esi
stosd dword es:[edi], eax
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
push 0xb
mov dword [ebp - 0x20], 0x10032b8
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], esi
mov dword [edi + 0x128], eax
call ebx
push 0xc
mov dword [ebp - 8], eax
call ebx
push 0x31
mov dword [ebp + 8], eax
call ebx
push 0x32
mov dword [ebp - 0x10], eax
call ebx
mov dword [ebp - 0xc], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push dword [ebp + 0xc]
call fcn.0100ce68
mov ebx, dword [sym.imp.USER32.dll_LoadImageW]
push esi
push dword [ebp + 8]
push dword [ebp - 8]
push 1
push 0x82
push dword [0x101b308]
call ebx
mov dword [edi + 0xcc], eax
cmp eax, esi
jne 0x1010440
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x277
mov word [ebp - 0x4e], ax
jmp 0x10108bf
push esi
push dword [ebp + 8]
mov eax, 0x277
push dword [ebp - 8]
mov dword [ebp - 0x54], esi
push 1
push 0x89
push dword [0x101b308]
mov word [ebp - 0x50], ax
call ebx
mov dword [edi + 0xd8], eax
cmp eax, esi
jne 0x101047b
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x27a
jmp 0x1010437
push esi
push dword [ebp - 0xc]
mov eax, 0x27a
push dword [ebp - 0x10]
mov dword [ebp - 0x54], esi
push 1
push 0x8d
push dword [0x101b308]
mov word [ebp - 0x50], ax
call ebx
mov dword [edi + 0xd4], eax
cmp eax, esi
jne 0x10104b6
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x27f
jmp 0x1010437
push esi
push dword [ebp - 0xc]
mov eax, 0x27f
push dword [ebp - 0x10]
mov dword [ebp - 0x54], esi
push 1
push 0x88
push dword [0x101b308]
mov word [ebp - 0x50], ax
call ebx
mov dword [edi + 0xd0], eax
cmp eax, esi
jne 0x10104f4
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x282
jmp 0x1010437
push dword [edi + 0xcc]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push esi
push 0x80
push dword [ebp + 0xc]
mov eax, 0x282
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call ebx
push 0x44e
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp eax, esi
jne 0x101053b
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x287
jmp 0x1010437
push esi
push dword [edi + 0xcc]
mov ecx, 0x287
push 0x170
push eax
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], cx
call ebx
push 0x403
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp eax, esi
jne 0x101057a
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x28c
jmp 0x1010437
push esi
push dword [0x101b3b8]
mov ecx, 0x28c
push 0x30
push eax
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], cx
call ebx
push 0x44d
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [ebp - 0x30]
push ecx
push eax
mov dword [ebp + 8], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x10105c4
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x291
jmp 0x1010437
push 2
mov eax, 0x291
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
push 1
push eax
push esi
push esi
push esi
push dword [ebp + 8]
mov dword [ebp - 0x54], esi
call dword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
jne 0x10105fd
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x292
jmp 0x1010437
push 0x454
push dword [ebp + 0xc]
mov eax, 0x292
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [ebp - 0x30]
push ecx
push eax
mov dword [ebp + 8], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x101063b
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x294
jmp 0x1010437
mov eax, 0x294
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
push 2
push 1
dec eax
push eax
push esi
push esi
push esi
push dword [ebp + 8]
mov dword [ebp - 0x54], esi
call dword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
jne 0x1010675
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x295
jmp 0x1010437
push 0x456
push dword [ebp + 0xc]
mov eax, 0x295
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [ebp - 0x30]
push ecx
push eax
mov dword [ebp + 8], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x10106b3
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x297
jmp 0x1010437
mov eax, 0x297
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
push 2
push 1
dec eax
push eax
push esi
push esi
push esi
push dword [ebp + 8]
mov dword [ebp - 0x54], esi
call dword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
jne 0x10106ed
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x298
jmp 0x1010437
push 0x3ea
push dword [ebp + 0xc]
mov eax, 0x298
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp + 8], eax
cmp eax, esi
jne 0x1010720
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x29d
jmp 0x1010437
push 0x450
push dword [ebp + 0xc]
mov eax, 0x29d
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x10], eax
cmp eax, esi
jne 0x1010753
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x2a0
jmp 0x1010437
push 0x3e9
push dword [ebp + 0xc]
mov eax, 0x2a0
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0xc], eax
cmp eax, esi
jne 0x1010786
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x2a3
jmp 0x1010437
push 1
push esi
push 0x160c
push dword [ebp + 8]
mov eax, 0x2a3
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
call ebx
push 1
push esi
push 0x160c
push dword [ebp - 0x10]
call ebx
push 1
push esi
push 0x160c
push dword [ebp - 0xc]
call ebx
mov ebx, dword [ebp + 0xc]
push ebx
push edi
mov dword [edi + 0x7c], esi
call fcn.0100d8f1
mov dword [ebp - 0x54], eax
cmp eax, esi
mov eax, 0x2ac
jl 0x1010437
push ebx
push edi
mov word [ebp - 0x50], ax
call fcn.0101020e
mov dword [ebp - 0x54], eax
cmp eax, esi
mov eax, 0x2af
jl 0x1010437
push ebx
push edi
mov word [ebp - 0x50], ax
mov dword [edi + 0x7c], 1
call fcn.0100dc1c
mov dword [ebp - 0x54], eax
cmp eax, esi
mov eax, 0x2b6
jl 0x1010437
mov word [ebp - 0x50], ax
mov eax, dword [edi + 0xfc]
dec eax
je 0x101083d
dec eax
je 0x1010829
dec eax
je 0x1010833
dec eax
jne 0x101084f
push esi
push ebx
push edi
call fcn.01010035
jmp 0x101084f
push esi
push ebx
push edi
call fcn.01010121
jmp 0x101084f
push esi
push 0x3ea
push 0x111
push ebx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0100848e
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
push 0x1002db8
push eax
call dword [ecx]
mov dword [ebp - 0x54], eax
cmp eax, esi
mov eax, 0x2ca
jl 0x1010437
push esi
push esi
push dword [ebp - 0x14]
mov word [ebp - 0x50], ax
push 0x100edf7
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 0xbc], eax
cmp eax, esi
jne 0x10108b3
call fcn.01015b6b
mov dword [ebp - 0x54], eax
mov eax, 0x2ce
jmp 0x1010437
mov eax, 0x2ce
mov dword [ebp - 0x54], esi
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 4]
mov edi, dword [ebp - 0x54]
cmp eax, esi
je 0x10108cf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x20]
call fcn.01016fe9
lea ecx, [ebp - 0x54]
call fcn.01014aa3
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 8