Function at 0x10078410
Capabilities:
Check for time delay via gettickcount
Create directory
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008f70d
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
call sub.mfc100.dll_Ordinal_9475
xor ebx, ebx
mov dword [ebp - 0x1f8], ebx
mov dword [ebp - method.CRgn.virtual_0], vtable.CRgn.0
mov ecx, dword [esi + 0x20]
lea eax, [ebp - 0x1e8]
push eax
push ecx
mov dword [ebp - 4], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x1dc]
mov edi, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1e0]
push 6
sub eax, edx
push 6
sub ecx, edi
sub eax, 3
push eax
sub ecx, 3
push ecx
add edx, 3
push edx
add edi, 3
push edi
call dword [sym.imp.GDI32.dll_CreateRoundRectRgn]
push eax
lea ecx, [ebp - 0x1fc]
call sub.mfc100.dll_Ordinal_2184
mov edx, dword [ebp - 0x1f8]
mov eax, dword [esi + 0x20]
push 1
push edx
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1f4
mov dword [ebp - 0x1ec], eax
call sub.mfc100.dll_Ordinal_265
mov ecx, dword [ebp - 0x1ec]
push 0x1011c4d0
push str._sMap__btn_min.png
push ecx
mov edi, eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c4d0
push str._sMap__Background.png
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x20
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
or eax, 0xffffffff
push 0x101c0920
mov dword [ebp - method.ATL::CImage.virtual_0], vtable.ATL::CImage.0
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x214], bx
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x200], ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [0x101c0938]
push 0x101c0920
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 2
call fcn.100043c0
mov eax, dword [ebp - 0x22c]
or ecx, 0xffffffff
mov dword [ebp - 0x210], ecx
mov dword [ebp - 0x20c], ecx
push eax
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x21c], ebx
mov word [ebp - 0x214], bx
call sub.mfc100.dll_Ordinal_2184
mov edx, dword [ebp - 0x1f0]
push edx
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push eax
mov ecx, 0x100ae740
call sub.mfc100.dll_Ordinal_2184
push ecx
mov ecx, esp
mov dword [ebp - 0x238], esp
push edi
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov eax, dword [ebp - 0x1ec]
push ecx
mov ecx, esp
mov dword [ebp - 0x234], esp
push eax
mov byte [ebp - 4], 3
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [esi + 0x338]
mov byte [ebp - 4], 2
call fcn.10004f10
mov ecx, dword [ebp - 0x1e0]
push 1
push 0x15
push 0x1b
add ecx, 0xffffffd3
push 8
push ecx
lea ecx, [esi + 0x338]
call fcn.10005170
mov edx, dword [ebp - 0x1ec]
push edx
call sub.mfc100.dll_Ordinal_1296
push edi
call sub.mfc100.dll_Ordinal_1296
add esp, 8
cmp dword [0x101a46f0], ebx
jne 0x10078688
mov eax, dword [0x100eaf2c]
push 0x10034f50
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x101a46f0], eax
push ebx
push ebx
push 0x1009b7b4
push 1
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b7ac
push 2
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b7a4
push 3
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b798
push 4
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b784
push 5
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b758
push 6
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b750
push 7
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1aec
push 8
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b744
push 9
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b724
push 0xa
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b714
push 0xb
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1ae4
push 0xc
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1adc
push 0xd
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5b
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5c
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5d
mov ecx, 0x10192dd8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5e
mov ecx, 0x10193f60
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5f
mov ecx, 0x101947e0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b60
mov ecx, 0x101951b0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b61
mov ecx, 0x10195628
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b62
mov ecx, 0x10195948
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b63
mov ecx, 0x10196040
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b64
mov ecx, 0x101971c0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b65
mov ecx, 0x10197ce8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b66
mov ecx, 0x101990f8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b67
mov ecx, 0x10199390
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6a
mov ecx, 0x1019a1e8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6b
mov ecx, 0x1019a6f8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6c
mov ecx, 0x1019ac28
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b77
mov ecx, 0x1019c4f0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b80
mov ecx, 0x1019d410
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b82
mov ecx, 0x1019dd88
call sub.mfc100.dll_Ordinal_2752
mov edx, dword [esi + 0xb4]
lea ecx, [ebp - 0x1d8]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
fild dword [ebp - 0x1d0]
fmul qword [0x1009da48]
call fcn.100867f0
fild dword [ebp - 0x1cc]
mov edi, eax
mov dword [ebp - 0x1d8], edi
fmul qword [0x1009da40]
call fcn.100867f0
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
mov dword [ebp - 0x1d4], eax
push ecx
sub edx, edi
push edx
push eax
push edi
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10192dd8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10193f60
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101947e0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101951b0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10195628
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10195948
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10196040
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101971c0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10197ce8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101990f8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10199390
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019a1e8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019a6f8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019ac28
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019c4f0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019d410
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019dd88
call sub.mfc100.dll_Ordinal_7933
push 5
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_12962
mov ecx, 0x10190e98
call sub.mfc100.dll_Ordinal_6213
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
mov dword [0x100b1b34], eax
mov eax, dword [0x10190eb8]
push 0x31
push eax
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
push ebx
push ebx
mov dword [0x100b1b30], eax
mov ecx, dword [esi + 0x408]
push 0x31
push ecx
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
push ebx
push ebx
mov dword [0x100b1804], eax
mov edx, dword [esi + 0x128]
push 0x31
push edx
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
lea ecx, [esi + 0x220]
mov dword [0x100b1b2c], eax
call sub.mfc100.dll_Ordinal_6213
mov ecx, 0x101a1e04
mov dword [0x100b14dc], eax
mov byte [0x1012d413], bl
call fcn.10001040
mov ecx, 0x101a203c
call fcn.10001040
mov ecx, 0x101a2048
call fcn.10001040
mov ecx, 0x10190d5c
call fcn.10001040
mov ecx, 0x1019561c
call fcn.10001040
mov ecx, 0x1019593c
call fcn.10001040
mov ecx, 0x101971b4
call fcn.10001040
mov ecx, 0x10197cdc
call fcn.10001040
mov ecx, 0x10199554
call fcn.10001040
mov ecx, 0x10199cf4
call fcn.10001040
mov ecx, 0x1019a6ec
call fcn.10001040
mov ecx, 0x101a20b4
call fcn.10001040
mov ecx, 0x101a20c0
call fcn.10001040
mov ecx, 0x101a209c
call fcn.10001040
mov ecx, 0x101a20a8
call fcn.10001040
mov ecx, 0x101a206c
call fcn.10001040
mov ecx, 0x101a2084
call fcn.10001040
mov ecx, 0x101a2204
call fcn.10001040
mov ecx, 0x1019d404
call fcn.10001040
mov ecx, 0x1019e914
call fcn.10001040
mov ecx, 0x101a20f0
call fcn.10001040
mov ecx, 0x101a2108
call fcn.10001040
mov ecx, 0x101a2114
call fcn.10001040
mov ecx, 0x1019fdd4
call fcn.10001040
mov ecx, 0x101a2054
call fcn.10001040
mov ecx, 0x101a20fc
call fcn.10001040
mov ecx, 0x1019f21c
mov byte [0x1011b6a8], bl
call fcn.10001040
mov ecx, 0x1019ecf4
call fcn.10001040
mov ecx, 0x101a21f8
call fcn.10001040
mov ecx, 0x101a21a4
mov byte [0x100b1f0d], bl
mov dword [0x100b1b28], ebx
mov dword [0x100b1800], ebx
call fcn.10001040
push 0x100725d0
mov byte [0x1012d410], bl
mov eax, dword [esi + 0x20]
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x101a4960], eax
mov eax, dword [0x2feacec]
cmp eax, ebx
je 0x10078f33
movzx ecx, word [eax + 0x14]
imul ecx, ecx, 0x1cc
mov edx, dword [ecx + 0x336ed79]
mov dword [0x1011cd1c], edx
call fcn.100485f0
call fcn.100488c0
mov ecx, 0x1019ca24
mov dword [ebp - 0x1ec], ebx
call fcn.10001080
test eax, eax
jle 0x10078f87
mov eax, dword [0x1019ca24]
mov ecx, dword [ebp - 0x1ec]
mov eax, dword [eax + ecx*4]
mov edx, dword [0x10192d4c]
push eax
push ebx
push 0x143
push edx
call edi
inc dword [ebp - 0x1ec]
mov ecx, 0x1019ca24
call fcn.10001080
cmp dword [ebp - 0x1ec], eax
jl 0x10078f51
mov eax, dword [0x101942b4]
push ebx
push ebx
push 0x146
push eax
mov dword [ebp - 0x1ec], ebx
call edi
test eax, eax
jle 0x10078fed
mov eax, dword [0x100b1b28]
mov ecx, dword [ebp - 0x1ec]
mov edx, dword [0x101942b4]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x100b1808]
push eax
push ecx
push 0x148
push edx
call edi
push ebx
mov eax, 1
add dword [0x100b1b28], eax
add dword [ebp - 0x1ec], eax
mov eax, dword [0x101942b4]
push ebx
push 0x146
push eax
call edi
cmp dword [ebp - 0x1ec], eax
jl 0x10078fa0
mov ecx, dword [0x10194360]
push ebx
push ebx
push 0x146
push ecx
mov dword [ebp - 0x1ec], ebx
call edi
test eax, eax
jle 0x1007905d
jmp 0x10079010
mov eax, dword [0x100b1800]
mov edx, dword [ebp - 0x1ec]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x100b14e0]
push eax
mov eax, dword [0x10194360]
push edx
push 0x148
push eax
call edi
mov ecx, dword [0x10194360]
push ebx
push ebx
mov eax, 1
add dword [0x100b1800], eax
add dword [ebp - 0x1ec], eax
push 0x146
push ecx
call edi
cmp dword [ebp - 0x1ec], eax
jl 0x10079010
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1012d3cc], 0xa
mov dword [0x1011cd68], ebx
call edi
mov edx, eax
mov eax, 0x10624dd3
mul edx
shr edx, 6
mov dword [0x1012d244], edx
call edi
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push ebx
push 5
push 0x1011cbcc
mov dword [0x1012d22c], eax
mov eax, dword [0x100fe7b4]
push 0x6979ff
push eax
call edi
mov dword [0xdc9d48], 0x43960000
mov dword [0xdc9d2c], 0x437a0000
push 0x32
lea ecx, [ebp - 0x44]
push ebx
push ecx
mov dword [0x1011d1b4], ebx
mov dword [0x1011d1ac], ebx
mov dword [0x1011d1a4], ebx
mov dword [0x1011d19c], ebx
mov dword [0x1011d194], 0xbb8
mov dword [0x1011d18c], 0x1f4
mov dword [0x1011d184], ebx
mov dword [0x1011d17c], ebx
mov dword [0x1011d174], ebx
call sub.MSVCR100.dll_memset
mov eax, dword [0x100fe7b4]
add esp, 0xc
push ebx
push 2
lea edx, [ebp - 0x44]
push edx
push 0x5b6fc7
push eax
mov dword [ebp - 0x44], 0x90909090
mov word [ebp - 0x40], 0x9090
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x5ab4a3
push edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 6
lea eax, [ebp - 0x44]
push eax
push 0x6d3cd9
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
push 0x6d01d4
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x6d0195
push edx
call edi
push ebx
push 6
lea eax, [ebp - 0x44]
mov ecx, dword [0x100fe7b4]
push eax
push 0x9292bf
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 2
lea edx, [ebp - 0x44]
push edx
push 0x6e25d3
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 2
lea ecx, [ebp - 0x44]
push ecx
push 0x6e265c
push edx
call edi
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0xea7b80]
mov dword [ecx + 0x60054], eax
call dword [sym.imp.WINMM.dll_timeGetTime]
mov edx, dword [0xea7b80]
mov dword [edx + 0x6005c], eax
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0xea7b80]
push ebx
push 6
lea edx, [ebp - 0x44]
mov dword [ecx + 0x60060], eax
mov eax, dword [0x100fe7b4]
push edx
push 0x6abb72
push eax
mov dword [ebp - 0x44], 0xfff0fae9
mov word [ebp - 0x40], 0x90ff
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x699405
push edx
mov dword [ebp - 0x44], 0xe2e9
mov word [ebp - 0x40], 0x9000
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 0xb
lea eax, [ebp - 0x44]
push eax
push 0x92928c
push ecx
mov dword [ebp - 0x44], 0x90909090
mov dword [ebp - 0x40], 0x90909090
mov dword [ebp - 0x3c], 0x90909090
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 2
lea edx, [ebp - 0x44]
push edx
push 0x55740f
push eax
mov word [ebp - 0x44], 0x9090
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x8f7941
push edx
mov word [ebp - 0x44], 0x7eb
call edi
mov byte [ebp - 0x44], 0xeb
push ebx
mov ecx, dword [0x100fe7b4]
push 1
lea eax, [ebp - 0x44]
push eax
push 0xa18ce6
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x54ce43
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x85746e
push edx
mov dword [ebp - 0x44], 0xb9e9
mov word [ebp - 0x40], 0x9000
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 1
lea eax, [ebp - 0x44]
push eax
push 0x928338
push ecx
mov byte [ebp - 0x44], 0xeb
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x6f2719
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x6dca68
push edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 1
lea eax, [ebp - 0x44]
push eax
push 0x400c04
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x77a7e9
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x778710
push edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 2
lea eax, [ebp - 0x44]
push eax
mov word [ebp - 0x44], 0x13eb
push 0x6c930b
push ecx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 5
lea eax, [ebp - 0x44]
push eax
mov edx, 0x1003de00
push 0xaac8c0
sub edx, 0xaac8c5
push ecx
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 5
lea eax, [ebp - 0x44]
push eax
mov edx, 0x100783e0
push 0x6979ff
sub edx, 0x697a04
push ecx
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 5
lea eax, [ebp - 0x44]
push eax
mov edx, 0x10077150
push 0xafdf4d
sub edx, 0xafdf52
push ecx
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 5
lea eax, [ebp - 0x44]
push eax
mov edx, 0x1003de30
push 0x699333
sub edx, 0x699332
push ecx
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], edx
mov word [ebp - 0x3e], 0x9090
mov byte [ebp - 0x3c], 0x90
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
push 0x921e4f
push eax
mov dword [ebp - 0x44], 0xd8fe9
mov word [ebp - 0x40], 0x9000
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1004b790
push 0x7786b0
sub ecx, 0x7786b5
push eax
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], ecx
call edi
mov ecx, 0x1003de70
sub ecx, 0x6d3ac6
push ebx
mov byte [ebp - 0x3f], 0x90
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], ecx
push 8
mov eax, dword [0x100fe7b4]
lea edx, [ebp - 0x44]
push edx
push 0x6d3ac1
push eax
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1003de50
push 0x5dd423
sub ecx, 0x5dd428
push eax
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], ecx
mov word [ebp - 0x3f], 0x9090
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1003dde0
push 0x6de626
sub ecx, 0x6de62b
push eax
mov byte [ebp - 0x44], 0xe8
mov byte [ebp - 0x3f], 0x90
mov dword [ebp - 0x43], ecx
call edi
lea ecx, [ebp - 0x58]
push ecx
mov byte [ebp - 0x44], 0xe8
call dword [sym.imp.MSVCR100.dll__strdate]
push 2
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x80]
push eax
call fcn.10006dd0
push 2
push 3
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x6c]
push edx
call fcn.10006e80
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.MSVCR100.dll__strtime]
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
lea ecx, [ebp - 0x52]
push ecx
lea edx, [ebp - 0x55]
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x80]
push edx
push 0x100a1ac4
push 0x1011b6e8
mov byte [ebp - 0x56], bl
mov byte [ebp - 0x53], bl
call edi
add esp, 0x40
cmp byte [0x1012d41c], bl
jne 0x10079572
mov eax, 0x3505b08
mov edx, 0x1012d41c
mov cl, byte [eax]
mov byte [edx + eax - 0x3505b08], cl
inc eax
cmp cl, bl
jne 0x10079564
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1012d41c
push 0x1011c4d0
push str._s_s.txt
push eax
mov dword [ebp - 0x1ec], eax
call edi
mov eax, dword [ebp - 0x1ec]
push 0x100946e0
push eax
call dword [sym.imp.MSVCR100.dll_fopen]
mov ecx, dword [ebp - 0x1ec]
add esp, 0x1c
test eax, eax
je 0x100795dd
push ecx
call fcn.10055f00
push 0x1012d41c
lea edx, [ebp - 0xe4]
push 0x100a1aac
push edx
call edi
lea eax, [ebp - 0xe4]
push eax
call fcn.10008110
add esp, 0x14
jmp 0x1007961d
push str.default
push 0x1011c4d0
push str._s_s.txt
push ecx
call edi
mov edx, dword [ebp - 0x1ec]
push edx
call fcn.10055f00
push 0x1012d41c
lea eax, [ebp - 0xe4]
push 0x100a1a8c
push eax
call edi
lea ecx, [ebp - 0xe4]
push ecx
call fcn.10008110
add esp, 0x24
mov edx, dword [ebp - 0x1ec]
push edx
call sub.mfc100.dll_Ordinal_1296
push 0x1012d41c
lea eax, [ebp - 0x148]
push str._s
push eax
call edi
mov edx, dword [0x1011d1bc]
mov eax, dword [edx + 0x20]
add esp, 0x10
lea ecx, [ebp - 0x148]
push ecx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov ecx, dword [0x100eaf2c]
push 0x1012d41c
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea edx, [ebp - 0x148]
push edx
lea ecx, [esi + 0x3e8]
call sub.mfc100.dll_Ordinal_12868
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1012d41c
push 0x1011c4d0
push 0x10095644
push eax
mov dword [ebp - 0x1ec], eax
call edi
mov eax, dword [ebp - 0x1ec]
add esp, 0x14
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
jne 0x100796be
mov ecx, dword [ebp - 0x1ec]
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov edx, dword [ebp - 0x1ec]
push edx
call sub.mfc100.dll_Ordinal_1296
mov eax, dword [esi + 0x20]
add esp, 4
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push ebx
push 0x1006f4f0
push 3
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
push 0x7d
lea ecx, [ebp - 0x1c8]
push ebx
push ecx
mov dword [0x101a4964], eax
call sub.MSVCR100.dll_memset
push 0x3726068
lea edx, [ebp - 0x1c8]
push 0x100964b4
push edx
call edi
add esp, 0x18
lea eax, [ebp - 0x1c8]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [0x1011956c]
push eax
push 0x2719
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
movzx edx, ax
mov dword [ebp - 0x1ec], eax
movzx eax, word [ebp - 0x1ea]
mov dword [0x101b899c], edx
mov dword [0x101b8998], eax
mov byte [0x1012d41c], bl
call esi
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov dword [0x1012d8fc], edx
call esi
mov edx, eax
mov eax, 0x10624dd3
mul edx
mov eax, dword [ebp - 0x22c]
shr edx, 6
or edi, 0xffffffff
mov dword [0x1011cd78], edx
mov dword [0x1012d214], 0xfffff8f8
mov dword [0x1012d764], ebx
mov dword [0x1012d3e4], ebx
mov dword [ebp - method.ATL::CImage.virtual_0], vtable.ATL::CImage.0
cmp eax, ebx
je 0x100797f0
push eax
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x210], edi
mov dword [ebp - 0x20c], edi
mov word [ebp - 0x214], bx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x101c0920
call esi
dec dword [0x101c0938]
jne 0x1007982c
push 0x101c0920
call esi
mov eax, dword [0x101c091c]
cmp eax, ebx
je 0x1007981b
push eax
call sub.gdiplus.dll_GdiplusShutdown
push 0x101c0920
mov dword [0x101c091c], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x101c0920
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], bl
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
call fcn.10001550
lea ecx, [ebp - 0x1fc]
mov dword [ebp - 4], edi
mov dword [ebp - method.CRgn.virtual_0], vtable.CRgn.0
call fcn.10001550
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10086786
mov esp, ebp
pop ebp
ret