Function at 0x10078430
Capabilities:
Check for time delay via gettickcount
Create directory
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008f6cd
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
call sub.mfc100.dll_Ordinal_9475
xor ebx, ebx
mov dword [ebp - 0x1f8], ebx
mov dword [ebp - method.CRgn.virtual_0], vtable.CRgn.0
mov ecx, dword [esi + 0x20]
lea eax, [ebp - 0x1e8]
push eax
push ecx
mov dword [ebp - 4], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x1dc]
mov edi, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1e0]
push 6
sub eax, edx
push 6
sub ecx, edi
sub eax, 3
push eax
sub ecx, 3
push ecx
add edx, 3
push edx
add edi, 3
push edi
call dword [sym.imp.GDI32.dll_CreateRoundRectRgn]
push eax
lea ecx, [ebp - 0x1fc]
call sub.mfc100.dll_Ordinal_2184
mov edx, dword [ebp - 0x1f8]
mov eax, dword [esi + 0x20]
push 1
push edx
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1f4
mov dword [ebp - 0x1ec], eax
call sub.mfc100.dll_Ordinal_265
mov ecx, dword [ebp - 0x1ec]
push 0x1011c4d0
push str._sMap__btn_min.png
push ecx
mov edi, eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c4d0
push str._sMap__Background.png
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x20
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
or eax, 0xffffffff
push 0x101c0920
mov dword [ebp - method.ATL::CImage.virtual_0], vtable.ATL::CImage.0
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x214], bx
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x200], ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [0x101c0938]
push 0x101c0920
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 2
call fcn.100043d0
mov eax, dword [ebp - 0x22c]
or ecx, 0xffffffff
mov dword [ebp - 0x210], ecx
mov dword [ebp - 0x20c], ecx
push eax
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x21c], ebx
mov word [ebp - 0x214], bx
call sub.mfc100.dll_Ordinal_2184
mov edx, dword [ebp - 0x1f0]
push edx
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push eax
mov ecx, 0x100ae740
call sub.mfc100.dll_Ordinal_2184
push ecx
mov ecx, esp
mov dword [ebp - 0x238], esp
push edi
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov eax, dword [ebp - 0x1ec]
push ecx
mov ecx, esp
mov dword [ebp - 0x234], esp
push eax
mov byte [ebp - 4], 3
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [esi + 0x338]
mov byte [ebp - 4], 2
call fcn.10004f20
mov ecx, dword [ebp - 0x1e0]
push 1
push 0x15
push 0x1b
add ecx, 0xffffffd3
push 8
push ecx
lea ecx, [esi + 0x338]
call fcn.10005180
mov edx, dword [ebp - 0x1ec]
push edx
call sub.mfc100.dll_Ordinal_1296
push edi
call sub.mfc100.dll_Ordinal_1296
add esp, 8
cmp dword [0x101a46ec], ebx
jne 0x100786a8
mov eax, dword [0x100eaf2c]
push 0x10034f90
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x101a46ec], eax
push ebx
push ebx
push 0x1009b78c
push 1
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b784
push 2
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b77c
push 3
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b770
push 4
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b75c
push 5
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b730
push 6
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b728
push 7
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1a9c
push 8
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b71c
push 9
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b6fc
push 0xa
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b6ec
push 0xb
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1a94
push 0xc
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1a8c
push 0xd
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5b
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5c
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5d
mov ecx, 0x10192dd8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5e
mov ecx, 0x10193f60
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5f
mov ecx, 0x101947e0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b60
mov ecx, 0x101951b0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b61
mov ecx, 0x10195628
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b62
mov ecx, 0x10195948
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b63
mov ecx, 0x10196040
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b64
mov ecx, 0x101971c0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b65
mov ecx, 0x10197ce8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b66
mov ecx, 0x101990f8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b67
mov ecx, 0x10199390
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6a
mov ecx, 0x1019a1e8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6b
mov ecx, 0x1019a6f8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6c
mov ecx, 0x1019ac28
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b77
mov ecx, 0x1019c4f0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b80
mov ecx, 0x1019d410
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b82
mov ecx, 0x1019dd88
call sub.mfc100.dll_Ordinal_2752
mov edx, dword [esi + 0xb4]
lea ecx, [ebp - 0x1d8]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
fild dword [ebp - 0x1d0]
fmul qword [0x1009da20]
call fcn.100867b0
fild dword [ebp - 0x1cc]
mov edi, eax
mov dword [ebp - 0x1d8], edi
fmul qword [0x1009da18]
call fcn.100867b0
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
mov dword [ebp - 0x1d4], eax
push ecx
sub edx, edi
push edx
push eax
push edi
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10192dd8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10193f60
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101947e0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101951b0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10195628
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10195948
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10196040
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101971c0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10197ce8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101990f8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10199390
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019a1e8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019a6f8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019ac28
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019c4f0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019d410
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019dd88
call sub.mfc100.dll_Ordinal_7933
push 5
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_12962
mov ecx, 0x10190e98
call sub.mfc100.dll_Ordinal_6213
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
mov dword [0x100b1b34], eax
mov eax, dword [0x10190eb8]
push 0x31
push eax
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
push ebx
push ebx
mov dword [0x100b1b30], eax
mov ecx, dword [esi + 0x408]
push 0x31
push ecx
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
push ebx
push ebx
mov dword [0x100b1804], eax
mov edx, dword [esi + 0x128]
push 0x31
push edx
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
lea ecx, [esi + 0x220]
mov dword [0x100b1b2c], eax
call sub.mfc100.dll_Ordinal_6213
mov ecx, 0x101a1e04
mov dword [0x100b14dc], eax
mov byte [0x1012d413], bl
call section..text
mov ecx, 0x101a203c
call section..text
mov ecx, 0x101a2048
call section..text
mov ecx, 0x10190d5c
call section..text
mov ecx, 0x1019561c
call section..text
mov ecx, 0x1019593c
call section..text
mov ecx, 0x101971b4
call section..text
mov ecx, 0x10197cdc
call section..text
mov ecx, 0x10199554
call section..text
mov ecx, 0x10199cf4
call section..text
mov ecx, 0x1019a6ec
call section..text
mov ecx, 0x101a20b4
call section..text
mov ecx, 0x101a20c0
call section..text
mov ecx, 0x101a209c
call section..text
mov ecx, 0x101a20a8
call section..text
mov ecx, 0x101a206c
call section..text
mov ecx, 0x101a2084
call section..text
mov ecx, 0x101a2204
call section..text
mov ecx, 0x1019d404
call section..text
mov ecx, 0x1019e914
call section..text
mov ecx, 0x101a20f0
call section..text
mov ecx, 0x101a2108
call section..text
mov ecx, 0x101a2114
call section..text
mov ecx, 0x1019fdd4
call section..text
mov ecx, 0x101a2054
call section..text
mov ecx, 0x101a20fc
call section..text
mov ecx, 0x1019f21c
mov byte [0x1011b6a8], bl
call section..text
mov ecx, 0x1019ecf4
call section..text
mov ecx, 0x101a21f8
call section..text
mov ecx, 0x101a21a4
mov byte [0x100b1f0d], bl
mov dword [0x100b1b28], ebx
mov dword [0x100b1800], ebx
call section..text
push 0x10072600
mov byte [0x1012d410], bl
mov eax, dword [esi + 0x20]
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x101a4960], eax
mov eax, dword [0x36208e4]
cmp eax, ebx
je 0x10078f53
movzx ecx, word [eax + 0x14]
imul ecx, ecx, 0x1cc
mov edx, dword [ecx + 0xfbafd0]
mov dword [0x1011cd1c], edx
call fcn.100487b0
call fcn.10048a80
mov ecx, 0x1019ca24
mov dword [ebp - 0x1ec], ebx
call fcn.10001040
test eax, eax
jle 0x10078fa7
mov eax, dword [0x1019ca24]
mov ecx, dword [ebp - 0x1ec]
mov eax, dword [eax + ecx*4]
mov edx, dword [0x10192d4c]
push eax
push ebx
push 0x143
push edx
call edi
inc dword [ebp - 0x1ec]
mov ecx, 0x1019ca24
call fcn.10001040
cmp dword [ebp - 0x1ec], eax
jl 0x10078f71
mov eax, dword [0x101942b4]
push ebx
push ebx
push 0x146
push eax
mov dword [ebp - 0x1ec], ebx
call edi
test eax, eax
jle 0x1007900d
mov eax, dword [0x100b1b28]
mov ecx, dword [ebp - 0x1ec]
mov edx, dword [0x101942b4]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x100b1808]
push eax
push ecx
push 0x148
push edx
call edi
push ebx
mov eax, 1
add dword [0x100b1b28], eax
add dword [ebp - 0x1ec], eax
mov eax, dword [0x101942b4]
push ebx
push 0x146
push eax
call edi
cmp dword [ebp - 0x1ec], eax
jl 0x10078fc0
mov ecx, dword [0x10194360]
push ebx
push ebx
push 0x146
push ecx
mov dword [ebp - 0x1ec], ebx
call edi
test eax, eax
jle 0x1007907d
jmp 0x10079030
mov eax, dword [0x100b1800]
mov edx, dword [ebp - 0x1ec]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x100b14e0]
push eax
mov eax, dword [0x10194360]
push edx
push 0x148
push eax
call edi
mov ecx, dword [0x10194360]
push ebx
push ebx
mov eax, 1
add dword [0x100b1800], eax
add dword [ebp - 0x1ec], eax
push 0x146
push ecx
call edi
cmp dword [ebp - 0x1ec], eax
jl 0x10079030
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1012d3cc], 0xa
mov dword [0x1011cd68], ebx
call edi
mov edx, eax
mov eax, 0x10624dd3
mul edx
shr edx, 6
mov dword [0x1012d244], edx
call edi
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push ebx
push 5
push 0x1011cbcc
mov dword [0x1012d22c], eax
mov eax, dword [0x100fe7b4]
push 0x511f89
push eax
call edi
mov dword [0xaec55c], 0x43960000
mov dword [0xae4084], 0x437a0000
push 0x32
lea ecx, [ebp - 0x44]
push ebx
push ecx
mov dword [0x1011d1b4], ebx
mov dword [0x1011d1ac], ebx
mov dword [0x1011d1a4], ebx
mov dword [0x1011d19c], ebx
mov dword [0x1011d194], 0xbb8
mov dword [0x1011d18c], 0x1f4
mov dword [0x1011d184], ebx
mov dword [0x1011d17c], ebx
mov dword [0x1011d174], ebx
call sub.MSVCR100.dll_memset
mov eax, dword [0x100fe7b4]
add esp, 0xc
push ebx
push 2
lea edx, [ebp - 0x44]
push edx
push 0x568292
push eax
mov dword [ebp - 0x44], 0x90909090
mov word [ebp - 0x40], 0x9090
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x56493d
push edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 6
lea eax, [ebp - 0x44]
push eax
push 0x5648ea
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
push 0x558d94
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x7631db
push edx
call edi
push ebx
push 2
lea eax, [ebp - 0x44]
mov ecx, dword [0x100fe7b4]
push eax
push 0x8d0806
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 2
lea edx, [ebp - 0x44]
push edx
push 0x55a7e5
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 2
lea ecx, [ebp - 0x44]
push ecx
push 0x55a86f
push edx
call edi
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0x11f6b60]
mov dword [ecx + 0x60058], eax
call dword [sym.imp.WINMM.dll_timeGetTime]
mov edx, dword [0x11f6b60]
mov dword [edx + 0x60060], eax
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0x11f6b60]
push ebx
push 6
lea edx, [ebp - 0x44]
mov dword [ecx + 0x60064], eax
mov eax, dword [0x100fe7b4]
push edx
push 0x52abe5
push eax
mov dword [ebp - 0x44], 0x646e9
mov word [ebp - 0x40], 0x9000
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x512b9e
push edx
mov dword [ebp - 0x44], 0xe6e9
mov word [ebp - 0x40], 0x9000
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 1
lea eax, [ebp - 0x44]
push eax
push 0x7631c3
push ecx
mov byte [ebp - 0x44], 0xf5
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 2
lea edx, [ebp - 0x44]
push edx
push 0x41de53
push eax
mov word [ebp - 0x44], 0x9090
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x723e14
push edx
mov word [ebp - 0x44], 0x7eb
call edi
push ebx
mov byte [ebp - 0x44], 0xeb
push 1
lea eax, [ebp - 0x44]
mov ecx, dword [0x100fe7b4]
push eax
push 0x81aacc
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x40d7df
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x55a530
push edx
mov dword [ebp - 0x44], 0xabbeb
mov word [ebp - 0x40], 0x9000
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 1
lea eax, [ebp - 0x44]
push eax
push 0x74cc03
push ecx
mov byte [ebp - 0x44], 0xeb
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x543b5a
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x5471ea
push edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 1
lea eax, [ebp - 0x44]
push eax
push 0x69c065
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x57ac68
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x5d9651
push edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 1
lea eax, [ebp - 0x44]
push eax
push 0x5d85e3
push ecx
call edi
mov word [ebp - 0x44], 0x1aeb
mov eax, dword [0x100fe7b4]
push ebx
push 2
lea edx, [ebp - 0x44]
push edx
push 0x54ddd6
push eax
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1003de00
push 0x899e50
sub ecx, 0x899e55
push eax
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x10078400
push 0x511f89
sub ecx, 0x511f8e
push eax
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x10077170
push 0x8df4e7
sub ecx, 0x8df4ec
push eax
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1003de30
push 0x512ac3
sub ecx, 0x512ac2
push eax
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], ecx
mov word [ebp - 0x3e], 0x9090
mov byte [ebp - 0x3c], 0x90
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1004b930
push 0x5d85a0
sub ecx, 0x5d85a5
push eax
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
mov ecx, 0x1003de70
lea edx, [ebp - 0x44]
sub ecx, 0x568066
push edx
mov byte [ebp - 0x3f], 0x90
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], ecx
push 0x568061
push eax
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 5
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1003de50
push 0x478cb6
sub ecx, 0x478cbb
push eax
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], ecx
mov word [ebp - 0x3f], 0x9090
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x1003dde0
push 0x53b68a
sub ecx, 0x53b68f
push eax
mov byte [ebp - 0x44], 0xe8
mov byte [ebp - 0x3f], 0x90
mov dword [ebp - 0x43], ecx
call edi
mov ecx, 0x1003de90
lea edx, [ebp - 0x58]
sub ecx, 0x8d39ea
push edx
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], ecx
call dword [sym.imp.MSVCR100.dll__strdate]
push 2
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x80]
push ecx
call fcn.10006d60
push 2
push 3
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x6c]
push eax
call fcn.10006e10
lea ecx, [ebp - 0x58]
push ecx
call dword [sym.imp.MSVCR100.dll__strtime]
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
lea edx, [ebp - 0x52]
push edx
lea eax, [ebp - 0x55]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x80]
push eax
push 0x100a1a74
push 0x1011b6e8
mov byte [ebp - 0x56], bl
mov byte [ebp - 0x53], bl
call edi
add esp, 0x40
cmp byte [0x1012d41c], bl
jne 0x1007957e
mov eax, 0x33ccf58
mov edx, 0x1012d41c
mov cl, byte [eax]
mov byte [edx + eax - 0x33ccf58], cl
inc eax
cmp cl, bl
jne 0x10079570
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1012d41c
push 0x1011c4d0
push str._s_s.txt
push eax
mov dword [ebp - 0x1ec], eax
call edi
mov ecx, dword [ebp - 0x1ec]
push 0x100946b8
push ecx
call dword [sym.imp.MSVCR100.dll_fopen]
mov edx, dword [ebp - 0x1ec]
add esp, 0x1c
test eax, eax
je 0x100795e9
push edx
call fcn.10056070
push 0x1012d41c
lea eax, [ebp - 0xe4]
push 0x100a1a5c
push eax
call edi
lea ecx, [ebp - 0xe4]
push ecx
call fcn.100080a0
add esp, 0x14
jmp 0x10079629
push str.default
push 0x1011c4d0
push str._s_s.txt
push edx
call edi
mov eax, dword [ebp - 0x1ec]
push eax
call fcn.10056070
push 0x1012d41c
lea ecx, [ebp - 0xe4]
push 0x100a1a3c
push ecx
call edi
lea edx, [ebp - 0xe4]
push edx
call fcn.100080a0
add esp, 0x24
mov eax, dword [ebp - 0x1ec]
push eax
call sub.mfc100.dll_Ordinal_1296
push 0x1012d41c
lea ecx, [ebp - 0x148]
push str._s
push ecx
call edi
mov eax, dword [0x1011d1bc]
mov ecx, dword [eax + 0x20]
add esp, 0x10
lea edx, [ebp - 0x148]
push edx
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov edx, dword [0x100eaf2c]
push 0x1012d41c
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp - 0x148]
push eax
lea ecx, [esi + 0x3e8]
call sub.mfc100.dll_Ordinal_12868
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1012d41c
push 0x1011c4d0
push 0x1009561c
push eax
mov dword [ebp - 0x1ec], eax
call edi
mov ecx, dword [ebp - 0x1ec]
add esp, 0x14
push ecx
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
jne 0x100796c9
mov edx, dword [ebp - 0x1ec]
push ebx
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, dword [ebp - 0x1ec]
push eax
call sub.mfc100.dll_Ordinal_1296
mov ecx, dword [esi + 0x20]
add esp, 4
push ecx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push ebx
push 0x1006f530
push 3
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
push 0x7d
lea edx, [ebp - 0x1c8]
push ebx
push edx
mov dword [0x101a4964], eax
call sub.MSVCR100.dll_memset
push 0x35f6968
lea eax, [ebp - 0x1c8]
push 0x1009648c
push eax
call edi
add esp, 0x18
lea ecx, [ebp - 0x1c8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, dword [0x1011956c]
push eax
push 0x2719
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1ec], eax
movzx ecx, word [ebp - 0x1ea]
movzx eax, ax
mov dword [0x101b899c], eax
mov dword [0x101b8998], ecx
mov byte [0x1012d41c], bl
call esi
mov edx, eax
mov eax, 0x10624dd3
mul edx
shr edx, 6
mov dword [0x1012d8fc], edx
call esi
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
mov eax, dword [ebp - 0x22c]
shr edx, 6
or edi, 0xffffffff
mov dword [0x1011cd78], edx
mov dword [0x1012d214], 0xfffff8f8
mov dword [0x1012d764], ebx
mov dword [0x1012d3e4], ebx
mov dword [ebp - method.ATL::CImage.virtual_0], vtable.ATL::CImage.0
cmp eax, ebx
je 0x100797fb
push eax
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x210], edi
mov dword [ebp - 0x20c], edi
mov word [ebp - 0x214], bx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x101c0920
call esi
dec dword [0x101c0938]
jne 0x10079837
push 0x101c0920
call esi
mov eax, dword [0x101c091c]
cmp eax, ebx
je 0x10079826
push eax
call sub.gdiplus.dll_GdiplusShutdown
push 0x101c0920
mov dword [0x101c091c], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x101c0920
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], bl
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
call fcn.10001540
lea ecx, [ebp - 0x1fc]
mov dword [ebp - 4], edi
mov dword [ebp - method.CRgn.virtual_0], vtable.CRgn.0
call fcn.10001540
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10086746
mov esp, ebp
pop ebp
ret