Function at 0x10002d00
Capabilities:
Access peb ldr_data
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10008a50
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x34
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
push esi
cmp eax, ebx
push edi
jne 0x10002da2
mov eax, dword [0x1000df34]
push 0x4f0
mov ecx, dword [eax + 0x48c]
mov dword [0x1000d024], ecx
lea ecx, [eax + 0x60]
call sub.MFC42.DLL_CWnd::GetDlgItem
mov dword [esp + 0xc], 0x1000004
mov edx, dword [eax + 0x20]
push ebx
push ebx
push 0xf0
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x10002d6d
mov dword [esp + 0xc], 4
mov ecx, dword [0x1000d024]
push ebx
lea eax, [esp + 0x10]
push 4
mov edx, dword [ecx*4 + 0x1000d730]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 1
jne 0x10002dbe
call fcn.10001790
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 2
jne 0x10002dda
call fcn.10001940
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 3
jne 0x10002df6
call fcn.10001be0
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 4
jne 0x10002e12
call fcn.10001aa0
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 5
jne 0x10002e75
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::CString_1
mov ecx, dword [0x1000df34]
lea eax, [esp + 0xc]
push eax
push 0x509
add ecx, 0x3fc
mov dword [esp + 0x50], ebx
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
push ebx
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::GetBuffer
push eax
call fcn.10002680
add esp, 4
lea ecx, [esp + 0xc]
mov dword [esp + 0x48], 0xffffffff
call fcn.10007454
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 6
jne 0x10002edb
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [0x1000df34]
lea edx, [esp + 0xc]
push edx
push 0x50e
lea ecx, [eax + 0x3fc]
mov dword [esp + 0x50], 1
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
push ebx
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::GetBuffer
push eax
call fcn.10002680
add esp, 4
lea ecx, [esp + 0xc]
mov dword [esp + 0x48], 0xffffffff
call fcn.10007454
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 7
jne 0x10002f6f
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::CString_1
mov edx, dword [0x1000df34]
lea ecx, [esp + 0xc]
push ecx
push 0x4e6
lea ecx, [edx + 0x3fc]
mov dword [esp + 0x50], 2
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
push ebx
push ebx
xor eax, eax
push ebx
push ebx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x30], eax
push 0x418
push ecx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x3c], eax
call fcn.10002580
add esp, 0x18
lea ecx, [esp + 0xc]
push ebx
call sub.MFC42.DLL_CString::GetBuffer
lea edx, [esp + 0x1c]
push eax
push edx
call fcn.100015f0
add esp, 8
lea ecx, [esp + 0xc]
mov dword [esp + 0x48], 0xffffffff
call fcn.10007454
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 8
jne 0x10003003
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::CString_1
mov ecx, dword [0x1000df34]
lea eax, [esp + 0xc]
push eax
push 0x4e8
add ecx, 0x3fc
mov dword [esp + 0x50], 3
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
push ebx
push ebx
xor edx, edx
push ebx
push ebx
lea eax, [esp + 0x2c]
mov dword [esp + 0x30], edx
push 0x418
push eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x3c], edx
call fcn.10002580
add esp, 0x18
lea ecx, [esp + 0xc]
push ebx
call sub.MFC42.DLL_CString::GetBuffer
lea ecx, [esp + 0x1c]
push eax
push ecx
call fcn.100015f0
add esp, 8
lea ecx, [esp + 0xc]
mov dword [esp + 0x48], 0xffffffff
call fcn.10007454
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x15
jne 0x100030e6
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x10]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x18]
push 4
add eax, 0x292
push edx
push eax
call esi
push eax
call edi
mov edx, dword [esp + 0xc]
push ebx
lea ecx, [esp + 0x1c]
push 4
add edx, 0x29a
push ecx
push edx
call esi
push eax
call edi
fild dword [esp + 0x14]
mov eax, dword [0x1000df34]
push 1
push ebx
push 0x4de
fidiv dword [esp + 0x24]
lea ecx, [eax + 0x1f8]
fmul qword [0x10009460]
fstp qword [esp + 0x28]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x1c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x1000df34]
push eax
push 0x4e7
add ecx, 0x1f8
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10003984
push ebx
push ebx
push ebx
push 0x10002a70
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x16
jne 0x100031ca
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x10]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x18]
push 4
add eax, 0x292
push edx
push eax
call esi
push eax
call edi
mov edx, dword [esp + 0xc]
push ebx
lea ecx, [esp + 0x1c]
push 4
add edx, 0x29a
push ecx
push edx
call esi
push eax
call edi
fild dword [esp + 0x14]
mov eax, dword [0x1000df34]
push 1
push ebx
push 0x4e0
fidiv dword [esp + 0x24]
lea ecx, [eax + 0x1f8]
fmul qword [0x10009460]
fstp qword [esp + 0x28]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x1c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x1000df34]
push eax
push 0x4e7
add ecx, 0x1f8
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10003984
push ebx
push ebx
push 1
push 0x10002a70
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x17
jne 0x100032bf
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x10]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x18]
push 4
add eax, 0x292
push edx
push eax
call esi
push eax
call edi
mov edx, dword [esp + 0xc]
push ebx
lea ecx, [esp + 0x1c]
push 4
add edx, 0x29a
push ecx
push edx
call esi
push eax
call edi
fild dword [esp + 0x14]
fidiv dword [esp + 0x18]
fmul qword [0x10009460]
fst qword [esp + 0x1c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003984
mov eax, dword [0x1000df34]
push 1
push ebx
push 0x4e8
lea ecx, [eax + 0x1f8]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x1c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x1000df34]
push eax
push 0x4e7
add ecx, 0x1f8
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10003984
push ebx
push ebx
push 2
push 0x10002a70
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x18
jne 0x100033b4
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x10]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x18]
push 4
add eax, 0x296
push edx
push eax
call esi
push eax
call edi
mov edx, dword [esp + 0xc]
push ebx
lea ecx, [esp + 0x1c]
push 4
add edx, 0x29e
push ecx
push edx
call esi
push eax
call edi
fild dword [esp + 0x14]
fidiv dword [esp + 0x18]
fmul qword [0x10009460]
fst qword [esp + 0x1c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003984
mov eax, dword [0x1000df34]
push 1
push ebx
push 0x4ed
lea ecx, [eax + 0x1f8]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x1c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x1000df34]
push eax
push 0x4ec
add ecx, 0x1f8
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10003984
push ebx
push ebx
push 3
push 0x10002a70
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x19
jne 0x100034a9
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x10]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x18]
push 4
add eax, 0x296
push edx
push eax
call esi
push eax
call edi
mov edx, dword [esp + 0xc]
push ebx
lea ecx, [esp + 0x1c]
push 4
add edx, 0x29e
push ecx
push edx
call esi
push eax
call edi
fild dword [esp + 0x14]
fidiv dword [esp + 0x18]
fmul qword [0x10009460]
fst qword [esp + 0x1c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003984
mov eax, dword [0x1000df34]
push 1
push ebx
push 0x50f
lea ecx, [eax + 0x1f8]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x1c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x1000df34]
push eax
push 0x4ec
add ecx, 0x1f8
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10003984
push ebx
push ebx
push 4
push 0x10002a70
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x1a
jne 0x100035c3
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x14]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [0x1000d024]
push ebx
lea edx, [esp + 0x10]
push 4
mov ecx, dword [eax*4 + 0x1000d410]
push edx
add ecx, dword [esp + 0x1c]
push ecx
call esi
push eax
call edi
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x10003984
push ebx
lea edx, [esp + 0x20]
push 4
add eax, 0x292
push edx
push eax
call esi
push eax
call edi
mov ecx, dword [esp + 0xc]
push ebx
lea eax, [esp + 0x24]
push 4
add ecx, 0x29a
push eax
push ecx
call esi
push eax
call edi
fild dword [esp + 0x1c]
fidiv dword [esp + 0x20]
fmul qword [0x10009460]
fst qword [esp + 0x2c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003984
mov edx, dword [0x1000df34]
push 1
push ebx
push 0x515
lea ecx, [edx + 0x288]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x2c]
mov dword [esp + 0x14], eax
push 1
call sub.MSVCRT.dll__ftol
push eax
mov eax, dword [0x1000df34]
push 0x513
lea ecx, [eax + 0x288]
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x14]
fcomp qword [esp + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x10003984
push ebx
push ebx
push ebx
push 0x10002bf0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x1b
jne 0x100036e2
mov edx, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea ecx, [esp + 0x18]
mov eax, dword [edx*4 + 0x1000d0f0]
push 4
push ecx
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov edx, dword [0x1000d024]
push ebx
lea ecx, [esp + 0x10]
push 4
mov eax, dword [edx*4 + 0x1000d410]
mov edx, dword [esp + 0x1c]
add eax, edx
push ecx
push eax
call esi
push eax
call edi
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x10003984
push ebx
lea ecx, [esp + 0x20]
push 4
add eax, 0x292
push ecx
push eax
call esi
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x24]
push 4
add eax, 0x29a
push edx
push eax
call esi
push eax
call edi
fild dword [esp + 0x1c]
fidiv dword [esp + 0x20]
fmul qword [0x10009460]
fst qword [esp + 0x2c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003984
mov ecx, dword [0x1000df34]
push 1
push ebx
push 0x516
add ecx, 0x288
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x2c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov edx, dword [0x1000df34]
push eax
push 0x513
lea ecx, [edx + 0x288]
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x10003984
push ebx
push ebx
push 1
push 0x10002bf0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x1c
jne 0x10003801
mov ecx, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea eax, [esp + 0x18]
mov edx, dword [ecx*4 + 0x1000d0f0]
push 4
push eax
push edx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov ecx, dword [0x1000d024]
push ebx
lea eax, [esp + 0x10]
push 4
mov edx, dword [ecx*4 + 0x1000d410]
mov ecx, dword [esp + 0x1c]
add edx, ecx
push eax
push edx
call esi
push eax
call edi
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x10003984
push ebx
lea ecx, [esp + 0x20]
push 4
add eax, 0x292
push ecx
push eax
call esi
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x24]
push 4
add eax, 0x29a
push edx
push eax
call esi
push eax
call edi
fild dword [esp + 0x1c]
fidiv dword [esp + 0x20]
fmul qword [0x10009460]
fst qword [esp + 0x2c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003984
mov ecx, dword [0x1000df34]
push 1
push ebx
push 0x517
add ecx, 0x288
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x2c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov edx, dword [0x1000df34]
push eax
push 0x513
lea ecx, [edx + 0x288]
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x10003984
push ebx
push ebx
push 2
push 0x10002bf0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x1d
jne 0x10003844
push ebx
push ebx
xor eax, eax
push ebx
push ebx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x30], eax
push 0x51
push ecx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x3c], eax
call fcn.10002580
lea edx, [esp + 0x34]
push ebx
push edx
call fcn.100015f0
add esp, 0x20
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x28
jne 0x1000387c
mov eax, dword [0x1000df34]
cmp dword [eax + 0x3f8], ebx
je 0x10003984
push ebx
push ebx
push ebx
push 0x100025b0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0xc8
jne 0x10003984
mov ecx, dword [0x1000df34]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
mov edx, dword [ecx + 0x190]
push 0x400
push edx
call esi
mov dword [esp + 0x2c], eax
mov eax, dword [0x1000df34]
push ebx
push ebx
mov ecx, dword [eax + 0x150]
push 0x400
push ecx
call esi
mov edx, dword [0x1000df34]
mov dword [esp + 0x30], eax
push ebx
push ebx
mov eax, dword [edx + 0x110]
push 0x400
push eax
call esi
mov ecx, dword [esp + 0x2c]
mov edx, dword [0x1000df34]
push 1
push ecx
push 0x501
lea ecx, [edx + 0x60]
mov dword [esp + 0x40], eax
call sub.MFC42.DLL_CWnd::SetDlgItemInt
mov eax, dword [esp + 0x30]
mov ecx, dword [0x1000df34]
push 1
push eax
push 0x502
add ecx, 0x60
call sub.MFC42.DLL_CWnd::SetDlgItemInt
mov edx, dword [esp + 0x34]
mov eax, dword [0x1000df34]
push 1
push edx
push 0x500
lea ecx, [eax + 0x60]
call sub.MFC42.DLL_CWnd::SetDlgItemInt
mov edx, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea ecx, [esp + 0x30]
mov eax, dword [edx*4 + 0x1000d7f8]
push 4
push ecx
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call edi
mov edx, dword [0x1000d024]
push ebx
lea ecx, [esp + 0x34]
push 4
mov eax, dword [edx*4 + 0x1000d8c0]
push ecx
push eax
call esi
push eax
call edi
mov edx, dword [0x1000d024]
push ebx
lea ecx, [esp + 0x38]
push 4
mov eax, dword [edx*4 + 0x1000d988]
push ecx
push eax
call esi
push eax
call edi
mov ecx, dword [esp + 0x40]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret