Function at 0x1000d9ba
Capabilities:
Create thread

Disassembly:
push ecx
push ecx
mov eax, dword [esp + 0x10]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
push edi
mov edi, str.Hello_World
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x1c]
push edi
xor ebx, ebx
push ebx
mov dword [esp + 0x18], ecx
mov dword [ecx + 8], eax
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
mov eax, dword [esp + 0x10]
cmp dword [eax + 4], ebx
mov dword [esp + 0x1c], ebx
jle 0x1000dc24
mov dword [esp + 0x20], ebx
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x20]
add eax, ecx
cmp dword [eax + 8], ebx
je 0x1000db3d
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x20]
call dword [eax + ecx + 8]
jmp 0x1000db50
push dword [eax + 0x10]
push dword [eax + 0xc]
push dword [eax + 4]
push dword [eax]
call fcn.1000d4b7
add esp, 0x10
push ebx
call fcn.1000c536
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 8]
mov edx, dword [esp + 0x24]
push ebx
mov dword [ecx + edx + 0x14], eax
call fcn.1000c536
mov edx, dword [esp + 0x28]
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 8]
push edi
push ebx
mov dword [ecx + edx + 0x18], eax
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 8]
add eax, dword [esp + 0x24]
push ebx
push eax
push 0x1000d6f1
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 8]
mov edx, dword [esp + 0x20]
inc dword [esp + 0x1c]
add dword [esp + 0x20], 0x20
mov dword [ecx + edx + 0x1c], eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
cmp ecx, dword [eax + 4]
jl 0x1000da5a
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
push edi
push ebx
call esi
push ebx
push ebx
call ebp
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
pop ecx
pop ecx
ret 8