Function at 0x408870
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x418841
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
mov eax, dword [esp + 0x20]
push ebx
push ebp
push esi
push edi
mov edi, ecx
push eax
push 0x85
mov dword [esp + 0x18], edi
call fcn.004167aa
lea esi, [edi + 0x60]
xor ebx, ebx
mov ecx, esi
mov dword [esp + 0x20], ebx
call sub.MFC42.DLL_CWnd::CWnd
mov dword [esi], 0x41b7e0
lea ecx, [edi + 0xb0]
mov byte [esp + 0x20], 1
call sub.MFC42.DLL_CString::CString_3
lea ecx, [edi + 0xb4]
mov byte [esp + 0x20], 2
call sub.MFC42.DLL_CString::CString_3
lea ecx, [edi + 0xb8]
mov byte [esp + 0x20], 3
call sub.MFC42.DLL_CString::CString_3
lea ecx, [edi + 0xbc]
mov byte [esp + 0x20], 4
call sub.MFC42.DLL_CString::CString_3
lea esi, [edi + 0xd0]
mov byte [esp + 0x20], 5
mov dword [esp + 0x30], esi
lea ecx, [esi + 0x14]
call sub.MFC42.DLL_CString::CString_3
lea ecx, [esi + 0x18]
mov byte [esp + 0x20], 6
call sub.MFC42.DLL_CString::CString_3
lea ecx, [esi + 0x1c]
mov byte [esp + 0x20], 7
call sub.MFC42.DLL_CString::CString_3
lea ecx, [esi + 0x24]
mov byte [esp + 0x20], 8
call sub.MFC42.DLL_CString::CString_3
lea ecx, [esi + 0x2c]
mov byte [esp + 0x20], 9
call sub.MFC42.DLL_CString::CString_3
lea ecx, [esi + 0x30]
mov byte [esp + 0x20], 0xa
call sub.MFC42.DLL_CString::CString_3
lea ecx, [esi + 0x34]
mov byte [esp + 0x20], 0xb
call sub.MFC42.DLL_CString::CString_3
lea ecx, [esi + 0x50]
mov byte [esp + 0x20], 0xc
call sub.MFC42.DLL_CString::CString_3
or eax, 0xffffffff
push str.15_15_10_10_10_10_20_30_40_60_70_80_70_80_70_70_60_50_40_30_50_50_40_20
lea ecx, [esi + 0x24]
mov byte [esp + 0x24], 0xd
mov dword [esi], ebx
mov dword [esi + 4], eax
mov byte [esi + 8], bl
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x20], ebx
call fcn.00416726
mov byte [esi + 0x28], 1
mov byte [esi + 0x29], bl
or eax, 0xffffffff
mov byte [esi + 0x2a], bl
mov byte [esi + 0x2b], bl
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], eax
mov dword [esi + 0x40], eax
mov dword [esi + 0x44], ebx
mov dword [esi + 0x48], ebx
mov dword [esi + 0x4c], ebx
lea ebp, [edi + 0xa8]
mov dword [edi], 0x41b8f0
mov dword [edi + 0xa0], ebx
mov dword [edi + 0xa4], ebx
mov dword [ebp], ebx
push 0x422d8c
lea ecx, [edi + 0xb0]
mov byte [esp + 0x24], 0xe
mov dword [edi + 0xac], ebx
call fcn.00416726
push 0x422d8c
lea ecx, [edi + 0xb4]
call fcn.00416726
push 0x422d8c
lea ecx, [edi + 0xb8]
call fcn.00416726
push 0x422d8c
lea ecx, [edi + 0xbc]
call fcn.00416726
lea ecx, [esp + 0x30]
mov dword [edi + 0xc0], ebx
mov dword [edi + 0xc4], ebx
push ecx
mov dword [edi + 0xc8], 0xa
mov dword [edi + 0xa4], 1
call sub.MFC42.DLL_CTime::GetTickCount
mov edx, dword [eax]
push ecx
mov eax, esp
mov dword [edi + 0xac], edx
mov dword [esp + 0x34], esp
lea ecx, [esp + 0x18]
mov dword [eax], 0x278d00
lea eax, [esp + 0x34]
push eax
push ecx
call sub.MFC42.DLL_CTime::GetTickCount
mov ecx, eax
call fcn.00409160
mov edx, dword [eax]
lea eax, [esp + 0x30]
push eax
mov dword [ebp], edx
call sub.MFC42.DLL_CTime::GetTickCount
mov ecx, dword [eax]
lea edx, [esp + 0x30]
push edx
mov dword [edi + 0xc4], ecx
call sub.MFC42.DLL_CTime::GetTickCount
mov eax, dword [eax]
mov cl, byte [esp + 0x28]
mov dword [edi + 0xc0], eax
mov eax, dword [esp + 0x2c]
cmp eax, ebx
mov byte [edi + 0xcc], cl
je 0x408b6d
mov edx, dword [eax]
add eax, 0x14
mov dword [esi], edx
mov ecx, dword [eax - 0x10]
mov dword [esi + 4], ecx
mov dl, byte [eax - 0xc]
mov byte [esi + 8], dl
mov ecx, dword [eax - 8]
mov dword [esi + 0xc], ecx
mov edx, dword [eax - 4]
push eax
lea ecx, [esi + 0x14]
mov dword [esi + 0x10], edx
call fcn.00416708
mov ebx, dword [esp + 0x2c]
lea ecx, [esi + 0x18]
lea eax, [ebx + 0x18]
push eax
call fcn.00416708
lea ecx, [ebx + 0x1c]
push ecx
lea ecx, [esi + 0x1c]
call fcn.00416708
mov edx, dword [ebx + 0x20]
lea eax, [ebx + 0x24]
push eax
lea ecx, [esi + 0x24]
mov dword [esi + 0x20], edx
call fcn.00416708
mov cl, byte [ebx + 0x28]
mov byte [esi + 0x28], cl
mov dl, byte [ebx + 0x29]
mov byte [esi + 0x29], dl
mov al, byte [ebx + 0x2a]
mov byte [esi + 0x2a], al
mov cl, byte [ebx + 0x2b]
lea edx, [ebx + 0x2c]
mov byte [esi + 0x2b], cl
push edx
lea ecx, [esi + 0x2c]
call fcn.00416708
lea eax, [ebx + 0x30]
lea ecx, [esi + 0x30]
push eax
call fcn.00416708
lea ecx, [ebx + 0x34]
push ecx
lea ecx, [esi + 0x34]
call fcn.00416708
mov edx, dword [ebx + 0x38]
add ebx, 0x50
mov dword [esi + 0x38], edx
mov eax, dword [ebx - 0x14]
mov dword [esi + 0x3c], eax
mov ecx, dword [ebx - 0x10]
mov dword [esi + 0x40], ecx
mov edx, dword [ebx - 0xc]
mov dword [esi + 0x44], edx
mov eax, dword [ebx - 8]
mov dword [esi + 0x48], eax
mov ecx, dword [ebx - 4]
mov dword [esi + 0x4c], ecx
push ebx
lea ecx, [esi + 0x50]
call fcn.00416708
lea edx, [edi + 0xe4]
lea ecx, [edi + 0xbc]
push edx
call fcn.00416708
lea eax, [edi + 0xe8]
lea ecx, [edi + 0xb0]
push eax
call fcn.00416708
lea ecx, [edi + 0xec]
push ecx
lea ecx, [edi + 0xb8]
call fcn.00416708
mov edx, dword [edi + 0xf0]
lea eax, [edi + 0xf4]
push eax
lea ecx, [edi + 0xb4]
mov dword [edi + 0xc8], edx
call fcn.00416708
xor ecx, ecx
xor edx, edx
mov cl, byte [edi + 0xf8]
mov dl, byte [edi + 0xfb]
lea esi, [edi + 0xfc]
lea eax, [edi + 0xac]
push esi
push eax
mov dword [edi + 0xa4], ecx
mov dword [edi + 0xa0], edx
call fcn.00401340
lea eax, [edi + 0xc4]
push esi
push eax
call fcn.00401340
lea esi, [edi + 0x100]
push esi
push ebp
call fcn.00401340
lea eax, [edi + 0xc0]
push esi
push eax
call fcn.00401340
mov ecx, dword [esp + 0x38]
add esp, 0x20
mov eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret 0xc