Function at 0x10002ca0
Capabilities:
Access peb ldr_data
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10008a00
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x34
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
push esi
cmp eax, ebx
push edi
jne 0x10002d42
mov eax, dword [0x1000df24]
push 0x4f0
mov ecx, dword [eax + 0x490]
mov dword [0x1000d024], ecx
lea ecx, [eax + 0x60]
call sub.MFC42.DLL_CWnd::GetDlgItem
mov dword [esp + 0xc], 0x1000004
mov edx, dword [eax + 0x20]
push ebx
push ebx
push 0xf0
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x10002d0d
mov dword [esp + 0xc], 4
mov ecx, dword [0x1000d024]
push ebx
lea eax, [esp + 0x10]
push 4
mov edx, dword [ecx*4 + 0x1000d730]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 1
jne 0x10002d5e
call fcn.10001790
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 2
jne 0x10002d7a
call fcn.10001940
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 3
jne 0x10002d96
call fcn.10001be0
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 4
jne 0x10002db2
call fcn.10001aa0
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 5
jne 0x10002e15
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::CString_1
mov ecx, dword [0x1000df24]
lea eax, [esp + 0xc]
push eax
push 0x509
add ecx, 0x400
mov dword [esp + 0x50], ebx
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
push ebx
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::GetBuffer
push eax
call fcn.10002620
add esp, 4
lea ecx, [esp + 0xc]
mov dword [esp + 0x48], 0xffffffff
call fcn.10007404
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 6
jne 0x10002e7b
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [0x1000df24]
lea edx, [esp + 0xc]
push edx
push 0x50e
lea ecx, [eax + 0x400]
mov dword [esp + 0x50], 1
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
push ebx
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::GetBuffer
push eax
call fcn.10002620
add esp, 4
lea ecx, [esp + 0xc]
mov dword [esp + 0x48], 0xffffffff
call fcn.10007404
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 7
jne 0x10002f0f
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::CString_1
mov edx, dword [0x1000df24]
lea ecx, [esp + 0xc]
push ecx
push 0x4e6
lea ecx, [edx + 0x400]
mov dword [esp + 0x50], 2
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
push ebx
push ebx
xor eax, eax
push ebx
push ebx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x30], eax
push 0x418
push ecx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x3c], eax
call fcn.10002520
add esp, 0x18
lea ecx, [esp + 0xc]
push ebx
call sub.MFC42.DLL_CString::GetBuffer
lea edx, [esp + 0x1c]
push eax
push edx
call fcn.100015f0
add esp, 8
lea ecx, [esp + 0xc]
mov dword [esp + 0x48], 0xffffffff
call fcn.10007404
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 8
jne 0x10002fa3
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::CString_1
mov ecx, dword [0x1000df24]
lea eax, [esp + 0xc]
push eax
push 0x4e8
add ecx, 0x400
mov dword [esp + 0x50], 3
call sub.MFC42.DLL_CWnd::GetDlgItemTextA
push ebx
push ebx
xor edx, edx
push ebx
push ebx
lea eax, [esp + 0x2c]
mov dword [esp + 0x30], edx
push 0x418
push eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x3c], edx
call fcn.10002520
add esp, 0x18
lea ecx, [esp + 0xc]
push ebx
call sub.MFC42.DLL_CString::GetBuffer
lea ecx, [esp + 0x1c]
push eax
push ecx
call fcn.100015f0
add esp, 8
lea ecx, [esp + 0xc]
mov dword [esp + 0x48], 0xffffffff
call fcn.10007404
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x15
jne 0x10003086
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x10]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x18]
push 4
add eax, 0x292
push edx
push eax
call esi
push eax
call edi
mov edx, dword [esp + 0xc]
push ebx
lea ecx, [esp + 0x1c]
push 4
add edx, 0x29a
push ecx
push edx
call esi
push eax
call edi
fild dword [esp + 0x14]
mov eax, dword [0x1000df24]
push 1
push ebx
push 0x4de
fidiv dword [esp + 0x24]
lea ecx, [eax + 0x1f8]
fmul qword [0x10009460]
fstp qword [esp + 0x28]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x1c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x1000df24]
push eax
push 0x4e7
add ecx, 0x1f8
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10003924
push ebx
push ebx
push ebx
push 0x10002a10
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x16
jne 0x1000316a
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x10]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x18]
push 4
add eax, 0x292
push edx
push eax
call esi
push eax
call edi
mov edx, dword [esp + 0xc]
push ebx
lea ecx, [esp + 0x1c]
push 4
add edx, 0x29a
push ecx
push edx
call esi
push eax
call edi
fild dword [esp + 0x14]
mov eax, dword [0x1000df24]
push 1
push ebx
push 0x4e0
fidiv dword [esp + 0x24]
lea ecx, [eax + 0x1f8]
fmul qword [0x10009460]
fstp qword [esp + 0x28]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x1c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x1000df24]
push eax
push 0x4e7
add ecx, 0x1f8
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10003924
push ebx
push ebx
push 1
push 0x10002a10
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x17
jne 0x1000325f
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x10]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x18]
push 4
add eax, 0x292
push edx
push eax
call esi
push eax
call edi
mov edx, dword [esp + 0xc]
push ebx
lea ecx, [esp + 0x1c]
push 4
add edx, 0x29a
push ecx
push edx
call esi
push eax
call edi
fild dword [esp + 0x14]
fidiv dword [esp + 0x18]
fmul qword [0x10009460]
fst qword [esp + 0x1c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003924
mov eax, dword [0x1000df24]
push 1
push ebx
push 0x4e8
lea ecx, [eax + 0x1f8]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x1c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x1000df24]
push eax
push 0x4e7
add ecx, 0x1f8
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10003924
push ebx
push ebx
push 2
push 0x10002a10
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x18
jne 0x10003354
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x10]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x18]
push 4
add eax, 0x296
push edx
push eax
call esi
push eax
call edi
mov edx, dword [esp + 0xc]
push ebx
lea ecx, [esp + 0x1c]
push 4
add edx, 0x29e
push ecx
push edx
call esi
push eax
call edi
fild dword [esp + 0x14]
fidiv dword [esp + 0x18]
fmul qword [0x10009460]
fst qword [esp + 0x1c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003924
mov eax, dword [0x1000df24]
push 1
push ebx
push 0x4ed
lea ecx, [eax + 0x1f8]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x1c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x1000df24]
push eax
push 0x4ec
add ecx, 0x1f8
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10003924
push ebx
push ebx
push 3
push 0x10002a10
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x19
jne 0x10003449
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x10]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x18]
push 4
add eax, 0x296
push edx
push eax
call esi
push eax
call edi
mov edx, dword [esp + 0xc]
push ebx
lea ecx, [esp + 0x1c]
push 4
add edx, 0x29e
push ecx
push edx
call esi
push eax
call edi
fild dword [esp + 0x14]
fidiv dword [esp + 0x18]
fmul qword [0x10009460]
fst qword [esp + 0x1c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003924
mov eax, dword [0x1000df24]
push 1
push ebx
push 0x50f
lea ecx, [eax + 0x1f8]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x1c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x1000df24]
push eax
push 0x4ec
add ecx, 0x1f8
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10003924
push ebx
push ebx
push 4
push 0x10002a10
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x1a
jne 0x10003563
mov eax, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea edx, [esp + 0x14]
mov ecx, dword [eax*4 + 0x1000d0f0]
push 4
push edx
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov eax, dword [0x1000d024]
push ebx
lea edx, [esp + 0x10]
push 4
mov ecx, dword [eax*4 + 0x1000d410]
push edx
add ecx, dword [esp + 0x1c]
push ecx
call esi
push eax
call edi
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x10003924
push ebx
lea edx, [esp + 0x20]
push 4
add eax, 0x292
push edx
push eax
call esi
push eax
call edi
mov ecx, dword [esp + 0xc]
push ebx
lea eax, [esp + 0x24]
push 4
add ecx, 0x29a
push eax
push ecx
call esi
push eax
call edi
fild dword [esp + 0x1c]
fidiv dword [esp + 0x20]
fmul qword [0x10009460]
fst qword [esp + 0x2c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003924
mov edx, dword [0x1000df24]
push 1
push ebx
push 0x515
lea ecx, [edx + 0x288]
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x2c]
mov dword [esp + 0x14], eax
push 1
call sub.MSVCRT.dll__ftol
push eax
mov eax, dword [0x1000df24]
push 0x513
lea ecx, [eax + 0x288]
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x14]
fcomp qword [esp + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x10003924
push ebx
push ebx
push ebx
push 0x10002b90
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x1b
jne 0x10003682
mov edx, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea ecx, [esp + 0x18]
mov eax, dword [edx*4 + 0x1000d0f0]
push 4
push ecx
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov edx, dword [0x1000d024]
push ebx
lea ecx, [esp + 0x10]
push 4
mov eax, dword [edx*4 + 0x1000d410]
mov edx, dword [esp + 0x1c]
add eax, edx
push ecx
push eax
call esi
push eax
call edi
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x10003924
push ebx
lea ecx, [esp + 0x20]
push 4
add eax, 0x292
push ecx
push eax
call esi
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x24]
push 4
add eax, 0x29a
push edx
push eax
call esi
push eax
call edi
fild dword [esp + 0x1c]
fidiv dword [esp + 0x20]
fmul qword [0x10009460]
fst qword [esp + 0x2c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003924
mov ecx, dword [0x1000df24]
push 1
push ebx
push 0x516
add ecx, 0x288
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x2c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov edx, dword [0x1000df24]
push eax
push 0x513
lea ecx, [edx + 0x288]
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x10003924
push ebx
push ebx
push 1
push 0x10002b90
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x1c
jne 0x100037a1
mov ecx, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea eax, [esp + 0x18]
mov edx, dword [ecx*4 + 0x1000d0f0]
push 4
push eax
push edx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push eax
call edi
mov ecx, dword [0x1000d024]
push ebx
lea eax, [esp + 0x10]
push 4
mov edx, dword [ecx*4 + 0x1000d410]
mov ecx, dword [esp + 0x1c]
add edx, ecx
push eax
push edx
call esi
push eax
call edi
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x10003924
push ebx
lea ecx, [esp + 0x20]
push 4
add eax, 0x292
push ecx
push eax
call esi
push eax
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x24]
push 4
add eax, 0x29a
push edx
push eax
call esi
push eax
call edi
fild dword [esp + 0x1c]
fidiv dword [esp + 0x20]
fmul qword [0x10009460]
fst qword [esp + 0x2c]
fcomp qword [0x10009458]
fnstsw ax
test ah, 0x41
jne 0x10003924
mov ecx, dword [0x1000df24]
push 1
push ebx
push 0x517
add ecx, 0x288
call sub.MFC42.DLL_CWnd::GetDlgItemInt
fld qword [esp + 0x2c]
mov dword [esp + 0x10], eax
push 1
call sub.MSVCRT.dll__ftol
mov edx, dword [0x1000df24]
push eax
push 0x513
lea ecx, [edx + 0x288]
call sub.MFC42.DLL_CWnd::SetDlgItemInt
fild dword [esp + 0x10]
fcomp qword [esp + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x10003924
push ebx
push ebx
push 2
push 0x10002b90
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x1d
jne 0x100037e4
push ebx
push ebx
xor eax, eax
push ebx
push ebx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x30], eax
push 0x51
push ecx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x3c], eax
call fcn.10002520
lea edx, [esp + 0x34]
push ebx
push edx
call fcn.100015f0
add esp, 0x20
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x28
jne 0x1000381c
mov eax, dword [0x1000df24]
cmp dword [eax + 0x3fc], ebx
je 0x10003924
push ebx
push ebx
push ebx
push 0x10002550
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0xc8
jne 0x10003924
mov ecx, dword [0x1000df24]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
mov edx, dword [ecx + 0x190]
push 0x400
push edx
call esi
mov dword [esp + 0x2c], eax
mov eax, dword [0x1000df24]
push ebx
push ebx
mov ecx, dword [eax + 0x150]
push 0x400
push ecx
call esi
mov edx, dword [0x1000df24]
mov dword [esp + 0x30], eax
push ebx
push ebx
mov eax, dword [edx + 0x110]
push 0x400
push eax
call esi
mov ecx, dword [esp + 0x2c]
mov edx, dword [0x1000df24]
push 1
push ecx
push 0x501
lea ecx, [edx + 0x60]
mov dword [esp + 0x40], eax
call sub.MFC42.DLL_CWnd::SetDlgItemInt
mov eax, dword [esp + 0x30]
mov ecx, dword [0x1000df24]
push 1
push eax
push 0x502
add ecx, 0x60
call sub.MFC42.DLL_CWnd::SetDlgItemInt
mov edx, dword [esp + 0x34]
mov eax, dword [0x1000df24]
push 1
push edx
push 0x500
lea ecx, [eax + 0x60]
call sub.MFC42.DLL_CWnd::SetDlgItemInt
mov edx, dword [0x1000d024]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push ebx
lea ecx, [esp + 0x30]
mov eax, dword [edx*4 + 0x1000d7f8]
push 4
push ecx
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call edi
mov edx, dword [0x1000d024]
push ebx
lea ecx, [esp + 0x34]
push 4
mov eax, dword [edx*4 + 0x1000d8c0]
push ecx
push eax
call esi
push eax
call edi
mov edx, dword [0x1000d024]
push ebx
lea ecx, [esp + 0x38]
push 4
mov eax, dword [edx*4 + 0x1000d988]
push ecx
push eax
call esi
push eax
call edi
mov ecx, dword [esp + 0x40]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret