Function at 0x10007f6d
Capabilities:
Check for time delay via gettickcount
Get file size

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffacc
push 0x10058818
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.kernel32.dll_lstrcpy]
jmp 0x10007f96
push 0x10007f8a
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.kernel32.dll_lstrcat]
mov byte [0x10058980], 0
push 0x10058d9c
call dword [sym.imp.kernel32.dll_GetLocalTime]
movzx eax, word [0x10058da4]
jmp 0x10007fca
push eax
push 0x10007fc3
lea eax, [ebp - 0x3bc]
push eax
call sub.user32.dll_wsprintfA
add esp, 0xc
jmp 0x10007fe6
lea eax, [ebp - 0x524]
push eax
push 0x64
push 0x10058980
lea eax, [ebp - 0x3bc]
push eax
push 0x10007fe1
call fcn.10002175
cmp byte [0x10058980], 0
jne 0x10008039
jmp 0x10008015
jmp 0x1000801c
lea eax, [ebp - 0x524]
push eax
push 0x64
push 0x10058980
push 0x10008017
push 0x10008010
call fcn.10002175
cmp byte [0x10058980], 0
je 0x10008c41
push 0x10
lea eax, [ebp - 0x534]
push eax
call fcn.10001000
mov dword [ebp - 0x534], 1
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x534]
push eax
lea eax, [ebp - 0x1c]
push eax
call sub.gdiplus.dll_GdiplusStartup
push 0
call dword [sym.imp.user32.dll_GetDC]
or eax, eax
je 0x10008c39
mov dword [ebp - 4], eax
push 0
call dword [sym.imp.user32.dll_GetSystemMetrics]
mov dword [ebp - 0x14], eax
push 1
call dword [sym.imp.user32.dll_GetSystemMetrics]
mov dword [ebp - 0x18], eax
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call sub.gdiplus.dll_GdipCreateFromHDC
or eax, eax
jne 0x10008c2e
mov dword [ebp - 0xc], 0
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push dword [ebp - 0x18]
push dword [ebp - 0x14]
call sub.gdiplus.dll_GdipCreateBitmapFromGraphics
or eax, eax
jne 0x10008c1b
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x10], 0
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0xc]
call sub.gdiplus.dll_GdipGetImageGraphicsContext
or eax, eax
jne 0x100089aa
push 7
push dword [ebp - 0x10]
call sub.gdiplus.dll_GdipSetInterpolationMode
jmp 0x10008113
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
push 0x1000810a
push 0x10058980
call fcn.10002175
push dword [ebp - 0x18]
push dword [ebp - 0x14]
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x10]
call fcn.100066d0
jmp 0x10008151
jmp 0x10008158
lea eax, [ebp - 0x524]
push eax
push 0x64
lea eax, [ebp - 0xa4]
push eax
push 0x10008153
push 0x1000814c
call fcn.10002175
jmp 0x1000817c
push 0x10008179
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.kernel32.dll_lstrcmp]
or eax, eax
jne 0x100081f1
jmp 0x1000819d
lea eax, [ebp - 0x524]
push eax
push 0x168
lea eax, [ebp - 0x3bc]
push eax
push 0x10008194
push 0x10058980
call fcn.10002175
cmp byte [ebp - 0x3bc], 0
je 0x100081e8
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x3bc]
push eax
call fcn.10002a16
or eax, eax
je 0x1000821e
mov byte [ebp - 0x254], 0
jmp 0x1000821e
mov byte [ebp - 0x254], 0
jmp 0x1000821e
jmp 0x100081fc
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
push 0x100081f3
push 0x10058980
call fcn.10002175
push dword [ebp - 0x18]
push dword [ebp - 0x14]
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x10]
call fcn.1000608c
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push 0
push 0
push 0x10058dac
call dword [sym.imp.user32.dll_SetRect]
push 0x10058c28
push 0x10058b60
call fcn.10001fcc
mov byte [0x100589e4], 0
mov byte [0x10058a0c], 0
mov byte [0x10058a48], 0
mov byte [0x10058a4e], 0
mov byte [0x10058a70], 0
mov byte [0x10058a76], 0
mov byte [0x10058ac0], 0
mov byte [0x10058ac6], 0
mov byte [0x10058cb4], 0
mov byte [0x10058ccc], 0
mov byte [0x10058cf4], 0
mov byte [0x10058d08], 0
mov byte [0x10058d10], 0
mov byte [0x10058d4c], 0
push 0x10058d08
push 0x10058d10
push 0x10058cf4
push 0x10058ccc
push 0x10058d9c
call fcn.1000365c
push 0x10058d4c
push 0x10058d9c
call fcn.10003246
push 0x10058d9c
push 0x10058cb4
call fcn.100014af
movzx eax, word [0x10058d9e]
movzx edx, word [0x10058da2]
jmp 0x10008311
push edx
push eax
push 0x10008305
push 0x10058cc0
call sub.user32.dll_wsprintfA
add esp, 0x10
jmp 0x1000832c
jmp 0x10008333
lea eax, [ebp - 0x524]
push eax
push 0x28
push 0x100589e4
push 0x1000832e
push 0x10008327
call fcn.10002175
cmp byte [0x100589e4], 0
je 0x100083f4
jmp 0x1000837c
call dword [sym.imp.kernel32.dll_GetTickCount]
sub eax, dword [section..data]
cmp eax, 0xbb8
jbe 0x10008374
jmp 0x1000838e
push 1
call dword [sym.imp.kernel32.dll_Sleep]
cmp dword [section..data], 0
je 0x1000838e
cmp dword [0x1000b004], 0
je 0x1000835f
cmp dword [0x1000b004], 0
jne 0x100083cb
push 0x100589e4
call fcn.10006041
or eax, eax
je 0x100083f4
push eax
call fcn.1000520b
push 0x1000b02c
push 0x1000b028
push 0x1000b024
push 0x1000b020
call fcn.100057cb
mov dword [0x1000b01c], eax
jmp 0x100083f4
push dword [0x1000b004]
call fcn.100055b5
push 0x1000b02c
push 0x1000b028
push 0x1000b024
push 0x1000b020
call fcn.100057cb
mov dword [0x1000b01c], eax
jmp 0x100083ff
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
push 0x100083f6
push 0x10058980
call fcn.10002175
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x10]
call fcn.1000798b
jmp 0x1000843b
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
push 0x10008432
push 0x10058980
call fcn.10002175
push 0x10
push 0x10058dbc
call fcn.10001000
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push 0x10058dbc
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x10]
call fcn.100061e8
mov dword [ebp - 0x34], 1
jmp 0x10008497
push dword [ebp - 0x34]
push 0x1000848c
lea eax, [ebp - 0xa4]
push eax
call sub.user32.dll_wsprintfA
add esp, 0xc
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0xa4]
push eax
push 0x10058980
call fcn.10002175
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push 0
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x10]
call fcn.100061e8
or eax, eax
je 0x100084ef
jmp 0x100084f4
inc dword [ebp - 0x34]
jmp 0x1000848a
cmp byte [0x10058b60], 0
je 0x100085d4
jmp 0x1000850a
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
push 0x10008503
push 0x10058980
call fcn.10002175
or eax, eax
je 0x100085d4
push 0
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x3bc]
push eax
call fcn.100014eb
lea eax, [ebp - 0x3bc]
push eax
push 0x10058c3c
push 0x10058b60
call 0x10002788
or eax, eax
je 0x100085d4
mov dword [ebp - 0x34], 1
jmp 0x10008577
push dword [ebp - 0x34]
push 0x1000856c
lea eax, [ebp - 0xa4]
push eax
call sub.user32.dll_wsprintfA
add esp, 0xc
lea eax, [ebp - 0x3bc]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0xa4]
push eax
push 0x10058c3c
call fcn.10002175
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push 0
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x10]
call fcn.100061e8
or eax, eax
je 0x100085cf
jmp 0x100085d4
inc dword [ebp - 0x34]
jmp 0x1000856a
cmp byte [0x10058a0c], 0
je 0x1000861e
jmp 0x100085e8
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
push 0x100085df
push 0x10058980
call fcn.10002175
push 0x10058d9c
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x10]
call fcn.10007300
jmp 0x1000863d
call dword [sym.imp.kernel32.dll_GetTickCount]
sub eax, dword [section..data]
cmp eax, 0xbb8
jbe 0x10008635
jmp 0x1000864f
push 1
call dword [sym.imp.kernel32.dll_Sleep]
cmp dword [section..data], 0
je 0x1000864f
cmp dword [0x1000b008], 0
je 0x10008620
cmp dword [0x1000b008], 0
jne 0x100086c7
mov dword [ebp - 0x34], 1
jmp 0x1000866c
push dword [ebp - 0x34]
push 0x10008661
lea eax, [ebp - 0xa4]
push eax
call sub.user32.dll_wsprintfA
add esp, 0xc
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0xa4]
push eax
push 0x10058980
call fcn.10002175
push 0
push 0
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x10]
call fcn.10006e6a
or eax, eax
jne 0x100086c0
jmp 0x100086e2
inc dword [ebp - 0x34]
jmp 0x1000865f
mov eax, dword [0x1000b008]
cmp dword [eax + 4], 0
jne 0x100086d4
jmp 0x10008658
push dword [0x1000b008]
push dword [ebp - 0x10]
call fcn.10007b3f
jmp 0x10008701
call dword [sym.imp.kernel32.dll_GetTickCount]
sub eax, dword [section..data]
cmp eax, 0xbb8
jbe 0x100086f9
jmp 0x10008713
push 1
call dword [sym.imp.kernel32.dll_Sleep]
cmp dword [section..data], 0
je 0x10008713
cmp dword [0x1000b00c], 0
je 0x100086e4
cmp dword [0x1000b00c], 0
jne 0x1000875a
jmp 0x10008727
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
push 0x1000871e
push 0x10058980
call fcn.10002175
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x10]
call fcn.10007a19
jmp 0x10008775
mov eax, dword [0x1000b00c]
cmp dword [eax + 4], 0
jne 0x10008767
jmp 0x1000871c
push dword [0x1000b00c]
push dword [ebp - 0x10]
call fcn.10007ac2
jmp 0x10008780
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
push 0x10008777
push 0x10058980
call fcn.10002175
or eax, eax
je 0x1000884b
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x254]
push eax
push 9
call sym.MZDDESK.EXE_GetStrFromString
or eax, eax
je 0x1000884b
push 0
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x524]
push eax
call fcn.100014eb
movzx eax, word [0x10058da4]
jmp 0x100087e8
push eax
push 0x100087e5
lea eax, [ebp - 0xa4]
push eax
call sub.user32.dll_wsprintfA
add esp, 0xc
jmp 0x10008808
lea eax, [ebp - 0x524]
push eax
push 0x168
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0xa4]
push eax
push 0x100087ff
call fcn.10002175
push 0
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x10]
call fcn.10006e6a
mov dword [ebp - 0x3c], 1
cmp byte [0x10058b60], 0
je 0x100089aa
jmp 0x10008877
call dword [sym.imp.kernel32.dll_GetTickCount]
sub eax, dword [section..data]
cmp eax, 0xbb8
jbe 0x1000886f
jmp 0x10008889
push 1
call dword [sym.imp.kernel32.dll_Sleep]
cmp dword [section..data], 0
je 0x10008889
cmp dword [0x1000b010], 0
je 0x1000885a
cmp dword [0x1000b010], 0
jne 0x1000898c
cmp byte [0x10058c3c], 0
je 0x100089aa
push 0x10058818
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.kernel32.dll_lstrcpy]
jmp 0x100088c3
push 0x100088b7
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.kernel32.dll_lstrcat]
jmp 0x100088de
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
push 0x100088d7
push 0x10058980
call fcn.10002175
or eax, eax
je 0x1000898a
push 0
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x524]
push eax
call fcn.100014eb
mov dword [ebp - 0x34], 1
jmp 0x10008931
push dword [ebp - 0x34]
push 0x10008926
lea eax, [ebp - 0xa4]
push eax
call sub.user32.dll_wsprintfA
add esp, 0xc
lea eax, [ebp - 0x524]
push eax
push 0x190
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0xa4]
push eax
push 0x10058c3c
call fcn.10002175
push 0
push 0
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x10]
call fcn.10006e6a
or eax, eax
jne 0x10008985
jmp 0x1000898a
inc dword [ebp - 0x34]
jmp 0x10008924
jmp 0x100089aa
mov eax, dword [0x1000b010]
cmp dword [eax + 4], 0
jne 0x1000899c
jmp 0x10008896
push dword [0x1000b010]
push dword [ebp - 0x10]
call fcn.10007b3f
xor eax, eax
jmp 0x100089b2
mov eax, 1
mov eax, dword [0x10058814]
add eax, dword [eax + 0x3c]
movzx eax, word [eax + 6]
cmp eax, 7
jne 0x100089cc
push 0x168
lea eax, [ebp - 0x524]
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
push eax
push 0
push eax
call dword [sym.imp.kernel32.dll_GetFileSize]
pop edx
push eax
push edx
call dword [sym.imp.kernel32.dll_CloseHandle]
pop eax
cmp eax, 0x9b078
jbe 0x10008a1e
cmp eax, 0x9d788
jae 0x10008a29
cmp dword [ebp - 0x10], 0
jmp 0x10008af0
push 0x1000924d
lea eax, [ebp - 0x254]
push eax
call dword [sym.imp.kernel32.dll_lstrcpy]
jmp 0x10008b10
push 0x10008b04
lea eax, [ebp - 0x254]
push eax
call dword [sym.imp.kernel32.dll_lstrcat]
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0xc]
call fcn.10006659
push 1
lea eax, [ebp - 0x254]
push eax
push 0
push 0x14
call dword [sym.imp.user32.dll_SystemParametersInfoA]
push dword [ebp - 0xc]
call sub.gdiplus.dll_GdipDisposeImage
push dword [ebp - 4]
push dword [ebp - 8]
call sub.gdiplus.dll_GdipReleaseDC
push dword [ebp - 8]
call sub.gdiplus.dll_GdipDeleteGraphics
push dword [ebp - 4]
push 0
call dword [sym.imp.user32.dll_ReleaseDC]
push dword [ebp - 0x1c]
call sub.gdiplus.dll_GdiplusShutdown
call fcn.100050a2
cmp dword [ebp - 0x3c], 0
je 0x10008c03
jmp 0x10008b9c
push 0
push 0x10008b83
call dword [sym.imp.user32.dll_FindWindowA]
or eax, eax
jne 0x10008c03
push 0x10058818
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.kernel32.dll_lstrcpy]
jmp 0x10008bcd
push 0x10008bc1
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.kernel32.dll_lstrcat]
jmp 0x10008be6
push 0xa
push 0x10058818
push 0
lea eax, [ebp - 0x524]
push eax
push 0x10008be1
push 0
call dword [sym.imp.shell32.dll_ShellExecuteA]
push 0
push 0
push 0x10
push dword [ebp + 8]
call dword [sym.imp.user32.dll_SendMessageA]
mov eax, 1
leave
ret 4
push dword [ebp - 4]
push dword [ebp - 8]
call sub.gdiplus.dll_GdipReleaseDC
push dword [ebp - 8]
call sub.gdiplus.dll_GdipDeleteGraphics
push dword [ebp - 4]
push 0
call dword [sym.imp.user32.dll_ReleaseDC]
push dword [ebp - 0x1c]
call sub.gdiplus.dll_GdiplusShutdown
push 0
push 0
push 0x10
push dword [ebp + 8]
call dword [sym.imp.user32.dll_SendMessageA]
mov eax, 1
leave
ret 4