Function at 0x10078480
Capabilities:
Check for time delay via gettickcount
Create directory
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008f76d
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
call sub.mfc100.dll_Ordinal_9475
xor ebx, ebx
mov dword [ebp - 0x1f8], ebx
mov dword [ebp - method.CRgn.virtual_0], vtable.CRgn.0
mov ecx, dword [esi + 0x20]
lea eax, [ebp - 0x1e8]
push eax
push ecx
mov dword [ebp - 4], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x1dc]
mov edi, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1e0]
push 6
sub eax, edx
push 6
sub ecx, edi
sub eax, 3
push eax
sub ecx, 3
push ecx
add edx, 3
push edx
add edi, 3
push edi
call dword [sym.imp.GDI32.dll_CreateRoundRectRgn]
push eax
lea ecx, [ebp - 0x1fc]
call sub.mfc100.dll_Ordinal_2184
mov edx, dword [ebp - 0x1f8]
mov eax, dword [esi + 0x20]
push 1
push edx
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1f4
mov dword [ebp - 0x1ec], eax
call sub.mfc100.dll_Ordinal_265
mov ecx, dword [ebp - 0x1ec]
push 0x1011c4d0
push str._sMap__btn_min.png
push ecx
mov edi, eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c4d0
push str._sMap__Background.png
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x20
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
or eax, 0xffffffff
push 0x101c0920
mov dword [ebp - method.ATL::CImage.virtual_0], vtable.ATL::CImage.0
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x214], bx
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x200], ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [0x101c0938]
push 0x101c0920
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 2
call fcn.100043c0
mov eax, dword [ebp - 0x22c]
or ecx, 0xffffffff
mov dword [ebp - 0x210], ecx
mov dword [ebp - 0x20c], ecx
push eax
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x21c], ebx
mov word [ebp - 0x214], bx
call sub.mfc100.dll_Ordinal_2184
mov edx, dword [ebp - 0x1f0]
push edx
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push eax
mov ecx, 0x100ae740
call sub.mfc100.dll_Ordinal_2184
push ecx
mov ecx, esp
mov dword [ebp - 0x238], esp
push edi
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov eax, dword [ebp - 0x1ec]
push ecx
mov ecx, esp
mov dword [ebp - 0x234], esp
push eax
mov byte [ebp - 4], 3
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [esi + 0x338]
mov byte [ebp - 4], 2
call fcn.10004f10
mov ecx, dword [ebp - 0x1e0]
push 1
push 0x15
push 0x1b
add ecx, 0xffffffd3
push 8
push ecx
lea ecx, [esi + 0x338]
call fcn.10005170
mov edx, dword [ebp - 0x1ec]
push edx
call sub.mfc100.dll_Ordinal_1296
push edi
call sub.mfc100.dll_Ordinal_1296
add esp, 8
cmp dword [0x101a46f0], ebx
jne 0x100786f8
mov eax, dword [0x100eaf2c]
push 0x10035000
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x101a46f0], eax
push ebx
push ebx
push 0x1009b7b4
push 1
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b7ac
push 2
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b7a4
push 3
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b798
push 4
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b784
push 5
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b758
push 6
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b750
push 7
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1aec
push 8
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b744
push 9
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b724
push 0xa
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b714
push 0xb
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1ae4
push 0xc
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1adc
push 0xd
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5b
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5c
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5d
mov ecx, 0x10192dd8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5e
mov ecx, 0x10193f60
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5f
mov ecx, 0x101947e0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b60
mov ecx, 0x101951b0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b61
mov ecx, 0x10195628
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b62
mov ecx, 0x10195948
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b63
mov ecx, 0x10196040
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b64
mov ecx, 0x101971c0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b65
mov ecx, 0x10197ce8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b66
mov ecx, 0x101990f8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b67
mov ecx, 0x10199390
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6a
mov ecx, 0x1019a1e8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6b
mov ecx, 0x1019a6f8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6c
mov ecx, 0x1019ac28
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b77
mov ecx, 0x1019c4f0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b80
mov ecx, 0x1019d410
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b82
mov ecx, 0x1019dd88
call sub.mfc100.dll_Ordinal_2752
mov edx, dword [esi + 0xb4]
lea ecx, [ebp - 0x1d8]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
fild dword [ebp - 0x1d0]
fmul qword [0x1009da48]
call fcn.10086850
fild dword [ebp - 0x1cc]
mov edi, eax
mov dword [ebp - 0x1d8], edi
fmul qword [0x1009da40]
call fcn.10086850
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
mov dword [ebp - 0x1d4], eax
push ecx
sub edx, edi
push edx
push eax
push edi
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10192dd8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10193f60
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101947e0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101951b0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10195628
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10195948
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10196040
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101971c0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10197ce8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101990f8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10199390
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019a1e8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019a6f8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019ac28
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019c4f0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019d410
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019dd88
call sub.mfc100.dll_Ordinal_7933
push 5
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_12962
mov ecx, 0x10190e98
call sub.mfc100.dll_Ordinal_6213
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
mov dword [0x100b1b34], eax
mov eax, dword [0x10190eb8]
push 0x31
push eax
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
push ebx
push ebx
mov dword [0x100b1b30], eax
mov ecx, dword [esi + 0x408]
push 0x31
push ecx
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
push ebx
push ebx
mov dword [0x100b1804], eax
mov edx, dword [esi + 0x128]
push 0x31
push edx
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
lea ecx, [esi + 0x220]
mov dword [0x100b1b2c], eax
call sub.mfc100.dll_Ordinal_6213
mov ecx, 0x101a1e04
mov dword [0x100b14dc], eax
mov byte [0x1012d413], bl
call section..text
mov ecx, 0x101a203c
call section..text
mov ecx, 0x101a2048
call section..text
mov ecx, 0x10190d5c
call section..text
mov ecx, 0x1019561c
call section..text
mov ecx, 0x1019593c
call section..text
mov ecx, 0x101971b4
call section..text
mov ecx, 0x10197cdc
call section..text
mov ecx, 0x10199554
call section..text
mov ecx, 0x10199cf4
call section..text
mov ecx, 0x1019a6ec
call section..text
mov ecx, 0x101a20b4
call section..text
mov ecx, 0x101a20c0
call section..text
mov ecx, 0x101a209c
call section..text
mov ecx, 0x101a20a8
call section..text
mov ecx, 0x101a206c
call section..text
mov ecx, 0x101a2084
call section..text
mov ecx, 0x101a2204
call section..text
mov ecx, 0x1019d404
call section..text
mov ecx, 0x1019e914
call section..text
mov ecx, 0x101a20f0
call section..text
mov ecx, 0x101a2108
call section..text
mov ecx, 0x101a2114
call section..text
mov ecx, 0x1019fdd4
call section..text
mov ecx, 0x101a2054
call section..text
mov ecx, 0x101a20fc
call section..text
mov ecx, 0x1019f21c
mov byte [0x1011b6a8], bl
call section..text
mov ecx, 0x1019ecf4
call section..text
mov ecx, 0x101a21f8
call section..text
mov ecx, 0x101a21a4
mov byte [0x100b1f0d], bl
mov dword [0x100b1b28], ebx
mov dword [0x100b1800], ebx
call section..text
push 0x10072640
mov byte [0x1012d410], bl
mov eax, dword [esi + 0x20]
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x101a4960], eax
mov eax, dword [0x2fb7ac4]
cmp eax, ebx
je 0x10078fa3
movzx ecx, word [eax + 0x14]
imul ecx, ecx, 0x1cc
mov edx, dword [ecx + 0x333bb68]
mov dword [0x1011cd1c], edx
call fcn.10048690
call fcn.10048960
mov ecx, 0x1019ca24
mov dword [ebp - 0x1ec], ebx
call fcn.10001240
test eax, eax
jle 0x10078ff7
mov eax, dword [0x1019ca24]
mov ecx, dword [ebp - 0x1ec]
mov eax, dword [eax + ecx*4]
mov edx, dword [0x10192d4c]
push eax
push ebx
push 0x143
push edx
call edi
inc dword [ebp - 0x1ec]
mov ecx, 0x1019ca24
call fcn.10001240
cmp dword [ebp - 0x1ec], eax
jl 0x10078fc1
mov eax, dword [0x101942b4]
push ebx
push ebx
push 0x146
push eax
mov dword [ebp - 0x1ec], ebx
call edi
test eax, eax
jle 0x1007905d
mov eax, dword [0x100b1b28]
mov ecx, dword [ebp - 0x1ec]
mov edx, dword [0x101942b4]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x100b1808]
push eax
push ecx
push 0x148
push edx
call edi
push ebx
mov eax, 1
add dword [0x100b1b28], eax
add dword [ebp - 0x1ec], eax
mov eax, dword [0x101942b4]
push ebx
push 0x146
push eax
call edi
cmp dword [ebp - 0x1ec], eax
jl 0x10079010
mov ecx, dword [0x10194360]
push ebx
push ebx
push 0x146
push ecx
mov dword [ebp - 0x1ec], ebx
call edi
test eax, eax
jle 0x100790cd
jmp 0x10079080
mov eax, dword [0x100b1800]
mov edx, dword [ebp - 0x1ec]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x100b14e0]
push eax
mov eax, dword [0x10194360]
push edx
push 0x148
push eax
call edi
mov ecx, dword [0x10194360]
push ebx
push ebx
mov eax, 1
add dword [0x100b1800], eax
add dword [ebp - 0x1ec], eax
push 0x146
push ecx
call edi
cmp dword [ebp - 0x1ec], eax
jl 0x10079080
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1012d3cc], 0xa
mov dword [0x1011cd68], ebx
call edi
mov edx, eax
mov eax, 0x10624dd3
mul edx
shr edx, 6
mov dword [0x1012d244], edx
call edi
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push ebx
push 5
push 0x1011cbcc
mov dword [0x1012d22c], eax
mov eax, dword [0x100fe7b4]
push 0x67b3b5
push eax
call edi
mov dword [0xd941b8], 0x43960000
mov dword [0xd9419c], 0x437a0000
push 0x32
lea ecx, [ebp - 0x44]
push ebx
push ecx
mov dword [0x1011d1b4], ebx
mov dword [0x1011d1ac], ebx
mov dword [0x1011d1a4], ebx
mov dword [0x1011d19c], ebx
mov dword [0x1011d194], 0xbb8
mov dword [0x1011d18c], 0x1f4
mov dword [0x1011d184], ebx
mov dword [0x1011d17c], ebx
mov dword [0x1011d174], ebx
call sub.MSVCR100.dll_memset
mov eax, dword [0x100fe7b4]
add esp, 0xc
push ebx
push 2
lea edx, [ebp - 0x44]
push edx
push 0x5b1fb7
push eax
mov dword [ebp - 0x44], 0x90909090
mov word [ebp - 0x40], 0x9090
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x5a64bc
push edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 6
lea eax, [ebp - 0x44]
push eax
push 0x6b6da9
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
push 0x6b3309
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x6b32ca
push edx
call edi
push ebx
push 6
lea eax, [ebp - 0x44]
mov ecx, dword [0x100fe7b4]
push eax
push 0x902350
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 2
lea edx, [ebp - 0x44]
push edx
push 0x6c52e6
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 2
lea ecx, [ebp - 0x44]
push ecx
push 0x6c5361
push edx
call edi
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0xe77dfc]
mov dword [ecx + 0x60054], eax
call dword [sym.imp.WINMM.dll_timeGetTime]
mov edx, dword [0xe77dfc]
mov dword [edx + 0x6005c], eax
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0xe77dfc]
push ebx
push 6
lea edx, [ebp - 0x44]
mov dword [ecx + 0x60060], eax
mov eax, dword [0x100fe7b4]
push edx
push 0x68f209
push eax
mov dword [ebp - 0x44], 0xfff0dce9
mov word [ebp - 0x40], 0x90ff
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x67cad5
push edx
mov dword [ebp - 0x44], 0xe2e9
mov word [ebp - 0x40], 0x9000
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 0xb
lea eax, [ebp - 0x44]
push eax
push 0x90231d
push ecx
mov dword [ebp - 0x44], 0x90909090
mov dword [ebp - 0x40], 0x90909090
mov dword [ebp - 0x3c], 0x90909090
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 2
lea edx, [ebp - 0x44]
push edx
push 0x553d6f
push eax
mov word [ebp - 0x44], 0x9090
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x8d1225
push edx
mov word [ebp - 0x44], 0x7eb
call edi
mov byte [ebp - 0x44], 0xeb
push ebx
mov ecx, dword [0x100fe7b4]
push 1
lea eax, [ebp - 0x44]
push eax
push 0x9ec4e4
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x54c723
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x6c4ffc
push edx
mov dword [ebp - 0x44], 0xabbeb
mov word [ebp - 0x40], 0x9000
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 6
lea eax, [ebp - 0x44]
push eax
push 0x83402e
push ecx
mov dword [ebp - 0x44], 0xb9e9
mov word [ebp - 0x40], 0x9000
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x901488
push eax
mov byte [ebp - 0x44], 0xeb
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x6d46c9
push edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 1
lea eax, [ebp - 0x44]
push eax
push 0x6bfe28
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x6ef297
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x759c09
push edx
call edi
push ebx
push 1
lea eax, [ebp - 0x44]
push eax
push 0x757b70
mov ecx, dword [0x100fe7b4]
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 2
lea edx, [ebp - 0x44]
push edx
push 0x6ac86b
push eax
mov word [ebp - 0x44], 0x13eb
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1003deb0
push 0xa7d190
sub ecx, 0xa7d195
push eax
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x10078450
push 0x67b3b5
sub ecx, 0x67b3ba
push eax
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x100771b0
push 0xace19c
sub ecx, 0xace1a1
push eax
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1003dee0
push 0x67ca03
sub ecx, 0x67ca02
push eax
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], ecx
mov word [ebp - 0x3e], 0x9090
mov byte [ebp - 0x3c], 0x90
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1004b840
push 0x757b10
sub ecx, 0x757b15
push eax
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], ecx
call edi
mov ecx, 0x1003df20
sub ecx, 0x6b6b8f
push ebx
mov byte [ebp - 0x3f], 0x90
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], ecx
push 8
mov eax, dword [0x100fe7b4]
lea edx, [ebp - 0x44]
push edx
push 0x6b6b8a
push eax
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1003df00
push 0x5c9bd3
sub ecx, 0x5c9bd8
push eax
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], ecx
mov word [ebp - 0x3f], 0x9090
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1003de90
push 0x6c19de
sub ecx, 0x6c19e3
push eax
mov byte [ebp - 0x44], 0xe8
mov byte [ebp - 0x3f], 0x90
mov dword [ebp - 0x43], ecx
call edi
lea ecx, [ebp - 0x58]
push ecx
mov byte [ebp - 0x44], 0xe8
call dword [sym.imp.MSVCR100.dll__strdate]
push 2
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x80]
push eax
call fcn.10006df0
push 2
push 3
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x6c]
push edx
call fcn.10006ea0
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.MSVCR100.dll__strtime]
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
lea ecx, [ebp - 0x52]
push ecx
lea edx, [ebp - 0x55]
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x80]
push edx
push 0x100a1ac4
push 0x1011b6e8
mov byte [ebp - 0x56], bl
mov byte [ebp - 0x53], bl
call edi
add esp, 0x40
cmp byte [0x1012d41c], bl
jne 0x100795de
mov eax, 0x34d28e8
mov edx, 0x1012d41c
mov cl, byte [eax]
mov byte [edx + eax - 0x34d28e8], cl
inc eax
cmp cl, bl
jne 0x100795d0
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1012d41c
push 0x1011c4d0
push str._s_s.txt
push eax
mov dword [ebp - 0x1ec], eax
call edi
mov eax, dword [ebp - 0x1ec]
push 0x100946e0
push eax
call dword [sym.imp.MSVCR100.dll_fopen]
mov ecx, dword [ebp - 0x1ec]
add esp, 0x1c
test eax, eax
je 0x10079649
push ecx
call fcn.10055f90
push 0x1012d41c
lea edx, [ebp - 0xe4]
push 0x100a1aac
push edx
call edi
lea eax, [ebp - 0xe4]
push eax
call fcn.10008130
add esp, 0x14
jmp 0x10079689
push str.default
push 0x1011c4d0
push str._s_s.txt
push ecx
call edi
mov edx, dword [ebp - 0x1ec]
push edx
call fcn.10055f90
push 0x1012d41c
lea eax, [ebp - 0xe4]
push 0x100a1a8c
push eax
call edi
lea ecx, [ebp - 0xe4]
push ecx
call fcn.10008130
add esp, 0x24
mov edx, dword [ebp - 0x1ec]
push edx
call sub.mfc100.dll_Ordinal_1296
push 0x1012d41c
lea eax, [ebp - 0x148]
push str._s
push eax
call edi
mov edx, dword [0x1011d1bc]
mov eax, dword [edx + 0x20]
add esp, 0x10
lea ecx, [ebp - 0x148]
push ecx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov ecx, dword [0x100eaf2c]
push 0x1012d41c
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea edx, [ebp - 0x148]
push edx
lea ecx, [esi + 0x3e8]
call sub.mfc100.dll_Ordinal_12868
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1012d41c
push 0x1011c4d0
push 0x10095644
push eax
mov dword [ebp - 0x1ec], eax
call edi
mov eax, dword [ebp - 0x1ec]
add esp, 0x14
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
jne 0x1007972a
mov ecx, dword [ebp - 0x1ec]
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov edx, dword [ebp - 0x1ec]
push edx
call sub.mfc100.dll_Ordinal_1296
mov eax, dword [esi + 0x20]
add esp, 4
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push ebx
push 0x1006f560
push 3
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
push 0x7d
lea ecx, [ebp - 0x1c8]
push ebx
push ecx
mov dword [0x101a4964], eax
call sub.MSVCR100.dll_memset
push 0x36f2cd8
lea edx, [ebp - 0x1c8]
push 0x100964b4
push edx
call edi
add esp, 0x18
lea eax, [ebp - 0x1c8]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [0x1011956c]
push eax
push 0x2719
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
movzx edx, ax
mov dword [ebp - 0x1ec], eax
movzx eax, word [ebp - 0x1ea]
mov dword [0x101b899c], edx
mov dword [0x101b8998], eax
mov byte [0x1012d41c], bl
call esi
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov dword [0x1012d8fc], edx
call esi
mov edx, eax
mov eax, 0x10624dd3
mul edx
mov eax, dword [ebp - 0x22c]
shr edx, 6
or edi, 0xffffffff
mov dword [0x1011cd78], edx
mov dword [0x1012d214], 0xfffff8f8
mov dword [0x1012d764], ebx
mov dword [0x1012d3e4], ebx
mov dword [ebp - method.ATL::CImage.virtual_0], vtable.ATL::CImage.0
cmp eax, ebx
je 0x1007985c
push eax
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x210], edi
mov dword [ebp - 0x20c], edi
mov word [ebp - 0x214], bx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x101c0920
call esi
dec dword [0x101c0938]
jne 0x10079898
push 0x101c0920
call esi
mov eax, dword [0x101c091c]
cmp eax, ebx
je 0x10079887
push eax
call sub.gdiplus.dll_GdiplusShutdown
push 0x101c0920
mov dword [0x101c091c], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x101c0920
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], bl
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
call fcn.10001540
lea ecx, [ebp - 0x1fc]
mov dword [ebp - 4], edi
mov dword [ebp - method.CRgn.virtual_0], vtable.CRgn.0
call fcn.10001540
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret