Function at 0x10078410
Capabilities:
Check for time delay via gettickcount
Create directory
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008f6cd
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
call sub.mfc100.dll_Ordinal_9475
xor ebx, ebx
mov dword [ebp - 0x1f8], ebx
mov dword [ebp - method.CRgn.virtual_0], vtable.CRgn.0
mov ecx, dword [esi + 0x20]
lea eax, [ebp - 0x1e8]
push eax
push ecx
mov dword [ebp - 4], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x1dc]
mov edi, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1e0]
push 6
sub eax, edx
push 6
sub ecx, edi
sub eax, 3
push eax
sub ecx, 3
push ecx
add edx, 3
push edx
add edi, 3
push edi
call dword [sym.imp.GDI32.dll_CreateRoundRectRgn]
push eax
lea ecx, [ebp - 0x1fc]
call sub.mfc100.dll_Ordinal_2184
mov edx, dword [ebp - 0x1f8]
mov eax, dword [esi + 0x20]
push 1
push edx
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1f4
mov dword [ebp - 0x1ec], eax
call sub.mfc100.dll_Ordinal_265
mov ecx, dword [ebp - 0x1ec]
push 0x1011c4d0
push str._sMap__btn_min.png
push ecx
mov edi, eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c4d0
push str._sMap__Background.png
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x20
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
or eax, 0xffffffff
push 0x101c0920
mov dword [ebp - method.ATL::CImage.virtual_0], vtable.ATL::CImage.0
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x214], bx
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x200], ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [0x101c0938]
push 0x101c0920
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 2
call fcn.100043c0
mov eax, dword [ebp - 0x22c]
or ecx, 0xffffffff
mov dword [ebp - 0x210], ecx
mov dword [ebp - 0x20c], ecx
push eax
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x21c], ebx
mov word [ebp - 0x214], bx
call sub.mfc100.dll_Ordinal_2184
mov edx, dword [ebp - 0x1f0]
push edx
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push eax
mov ecx, 0x100ae740
call sub.mfc100.dll_Ordinal_2184
push ecx
mov ecx, esp
mov dword [ebp - 0x238], esp
push edi
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov eax, dword [ebp - 0x1ec]
push ecx
mov ecx, esp
mov dword [ebp - 0x234], esp
push eax
mov byte [ebp - 4], 3
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [esi + 0x338]
mov byte [ebp - 4], 2
call fcn.10004f10
mov ecx, dword [ebp - 0x1e0]
push 1
push 0x15
push 0x1b
add ecx, 0xffffffd3
push 8
push ecx
lea ecx, [esi + 0x338]
call fcn.10005170
mov edx, dword [ebp - 0x1ec]
push edx
call sub.mfc100.dll_Ordinal_1296
push edi
call sub.mfc100.dll_Ordinal_1296
add esp, 8
cmp dword [0x101a46f0], ebx
jne 0x10078688
mov eax, dword [0x100eaf2c]
push 0x10034f60
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x101a46f0], eax
push ebx
push ebx
push 0x1009b78c
push 1
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b784
push 2
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b77c
push 3
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b770
push 4
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b75c
push 5
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b730
push 6
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b728
push 7
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1ac4
push 8
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b71c
push 9
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b6fc
push 0xa
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x1009b6ec
push 0xb
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1abc
push 0xc
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push ebx
push ebx
push 0x100a1ab4
push 0xd
push 1
lea ecx, [esi + 0x94]
call sub.mfc100.dll_Ordinal_7214
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5b
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5c
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5d
mov ecx, 0x10192dd8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5e
mov ecx, 0x10193f60
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b5f
mov ecx, 0x101947e0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b60
mov ecx, 0x101951b0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b61
mov ecx, 0x10195628
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b62
mov ecx, 0x10195948
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b63
mov ecx, 0x10196040
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b64
mov ecx, 0x101971c0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b65
mov ecx, 0x10197ce8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b66
mov ecx, 0x101990f8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b67
mov ecx, 0x10199390
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6a
mov ecx, 0x1019a1e8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6b
mov ecx, 0x1019a6f8
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b6c
mov ecx, 0x1019ac28
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b77
mov ecx, 0x1019c4f0
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b80
mov ecx, 0x1019d410
call sub.mfc100.dll_Ordinal_2752
push 0x1b58
mov ecx, esi
call sub.mfc100.dll_Ordinal_4785
push eax
push 0x1b82
mov ecx, 0x1019dd88
call sub.mfc100.dll_Ordinal_2752
mov edx, dword [esi + 0xb4]
lea ecx, [ebp - 0x1d8]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
fild dword [ebp - 0x1d0]
fmul qword [0x1009da20]
call fcn.100867a0
fild dword [ebp - 0x1cc]
mov edi, eax
mov dword [ebp - 0x1d8], edi
fmul qword [0x1009da18]
call fcn.100867a0
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
mov dword [ebp - 0x1d4], eax
push ecx
sub edx, edi
push edx
push eax
push edi
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101917c0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10192dd8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10193f60
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101947e0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101951b0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10195628
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10195948
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10196040
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101971c0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10197ce8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x101990f8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x10199390
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019a1e8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019a6f8
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019ac28
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019c4f0
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019d410
call sub.mfc100.dll_Ordinal_7933
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x1d0]
push 1
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x1d8]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, 0x1019dd88
call sub.mfc100.dll_Ordinal_7933
push 5
mov ecx, 0x10190d68
call sub.mfc100.dll_Ordinal_12962
mov ecx, 0x10190e98
call sub.mfc100.dll_Ordinal_6213
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
mov dword [0x100b1b34], eax
mov eax, dword [0x10190eb8]
push 0x31
push eax
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
push ebx
push ebx
mov dword [0x100b1b30], eax
mov ecx, dword [esi + 0x408]
push 0x31
push ecx
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
push ebx
push ebx
mov dword [0x100b1804], eax
mov edx, dword [esi + 0x128]
push 0x31
push edx
call edi
push eax
call sub.mfc100.dll_Ordinal_4341
lea ecx, [esi + 0x220]
mov dword [0x100b1b2c], eax
call sub.mfc100.dll_Ordinal_6213
mov ecx, 0x101a1e04
mov dword [0x100b14dc], eax
mov byte [0x1012d413], bl
call section..text
mov ecx, 0x101a203c
call section..text
mov ecx, 0x101a2048
call section..text
mov ecx, 0x10190d5c
call section..text
mov ecx, 0x1019561c
call section..text
mov ecx, 0x1019593c
call section..text
mov ecx, 0x101971b4
call section..text
mov ecx, 0x10197cdc
call section..text
mov ecx, 0x10199554
call section..text
mov ecx, 0x10199cf4
call section..text
mov ecx, 0x1019a6ec
call section..text
mov ecx, 0x101a20b4
call section..text
mov ecx, 0x101a20c0
call section..text
mov ecx, 0x101a209c
call section..text
mov ecx, 0x101a20a8
call section..text
mov ecx, 0x101a206c
call section..text
mov ecx, 0x101a2084
call section..text
mov ecx, 0x101a2204
call section..text
mov ecx, 0x1019d404
call section..text
mov ecx, 0x1019e914
call section..text
mov ecx, 0x101a20f0
call section..text
mov ecx, 0x101a2108
call section..text
mov ecx, 0x101a2114
call section..text
mov ecx, 0x1019fdd4
call section..text
mov ecx, 0x101a2054
call section..text
mov ecx, 0x101a20fc
call section..text
mov ecx, 0x1019f21c
mov byte [0x1011b6a8], bl
call section..text
mov ecx, 0x1019ecf4
call section..text
mov ecx, 0x101a21f8
call section..text
mov ecx, 0x101a21a4
mov byte [0x100b1f0d], bl
mov dword [0x100b1b28], ebx
mov dword [0x100b1800], ebx
call section..text
push 0x100725d0
mov byte [0x1012d410], bl
mov eax, dword [esi + 0x20]
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x101a4960], eax
mov eax, dword [0x2fb6ac4]
cmp eax, ebx
je 0x10078f33
movzx ecx, word [eax + 0x14]
imul ecx, ecx, 0x1cc
mov edx, dword [ecx + 0x333ab68]
mov dword [0x1011cd1c], edx
call fcn.100485f0
call fcn.100488c0
mov ecx, 0x1019ca24
mov dword [ebp - 0x1ec], ebx
call fcn.10001240
test eax, eax
jle 0x10078f87
mov eax, dword [0x1019ca24]
mov ecx, dword [ebp - 0x1ec]
mov eax, dword [eax + ecx*4]
mov edx, dword [0x10192d4c]
push eax
push ebx
push 0x143
push edx
call edi
inc dword [ebp - 0x1ec]
mov ecx, 0x1019ca24
call fcn.10001240
cmp dword [ebp - 0x1ec], eax
jl 0x10078f51
mov eax, dword [0x101942b4]
push ebx
push ebx
push 0x146
push eax
mov dword [ebp - 0x1ec], ebx
call edi
test eax, eax
jle 0x10078fed
mov eax, dword [0x100b1b28]
mov ecx, dword [ebp - 0x1ec]
mov edx, dword [0x101942b4]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x100b1808]
push eax
push ecx
push 0x148
push edx
call edi
push ebx
mov eax, 1
add dword [0x100b1b28], eax
add dword [ebp - 0x1ec], eax
mov eax, dword [0x101942b4]
push ebx
push 0x146
push eax
call edi
cmp dword [ebp - 0x1ec], eax
jl 0x10078fa0
mov ecx, dword [0x10194360]
push ebx
push ebx
push 0x146
push ecx
mov dword [ebp - 0x1ec], ebx
call edi
test eax, eax
jle 0x1007905d
jmp 0x10079010
mov eax, dword [0x100b1800]
mov edx, dword [ebp - 0x1ec]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x100b14e0]
push eax
mov eax, dword [0x10194360]
push edx
push 0x148
push eax
call edi
mov ecx, dword [0x10194360]
push ebx
push ebx
mov eax, 1
add dword [0x100b1800], eax
add dword [ebp - 0x1ec], eax
push 0x146
push ecx
call edi
cmp dword [ebp - 0x1ec], eax
jl 0x10079010
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1012d3cc], 0xa
mov dword [0x1011cd68], ebx
call edi
mov edx, eax
mov eax, 0x10624dd3
mul edx
shr edx, 6
mov dword [0x1012d244], edx
call edi
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push ebx
push 5
push 0x1011cbcc
mov dword [0x1012d22c], eax
mov eax, dword [0x100fe7b4]
push 0x67b3b5
push eax
call edi
mov dword [0xd93198], 0x43960000
mov dword [0xd9317c], 0x437a0000
push 0x32
lea ecx, [ebp - 0x44]
push ebx
push ecx
mov dword [0x1011d1b4], ebx
mov dword [0x1011d1ac], ebx
mov dword [0x1011d1a4], ebx
mov dword [0x1011d19c], ebx
mov dword [0x1011d194], 0xbb8
mov dword [0x1011d18c], 0x1f4
mov dword [0x1011d184], ebx
mov dword [0x1011d17c], ebx
mov dword [0x1011d174], ebx
call sub.MSVCR100.dll_memset
mov eax, dword [0x100fe7b4]
add esp, 0xc
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
push 0x6b6d99
push eax
mov dword [ebp - 0x44], 0x90909090
mov word [ebp - 0x40], 0x9090
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x6b32f9
push edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 6
lea eax, [ebp - 0x44]
push eax
push 0x6b32ba
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
push 0x901ef0
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 2
lea ecx, [ebp - 0x44]
push ecx
push 0x6c52b6
push edx
call edi
push ebx
push 2
lea eax, [ebp - 0x44]
mov ecx, dword [0x100fe7b4]
push eax
push 0x6c5331
push ecx
call edi
call dword [sym.imp.WINMM.dll_timeGetTime]
mov edx, dword [0xe76df8]
mov dword [edx + 0x60054], eax
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [0xe76df8]
mov dword [ecx + 0x6005c], eax
call dword [sym.imp.WINMM.dll_timeGetTime]
mov edx, dword [0xe76df8]
push ebx
mov dword [edx + 0x60060], eax
mov ecx, dword [0x100fe7b4]
push 6
lea eax, [ebp - 0x44]
push eax
push 0x68f209
push ecx
mov dword [ebp - 0x44], 0xfff0dce9
mov word [ebp - 0x40], 0x90ff
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 6
lea edx, [ebp - 0x44]
push edx
push 0x67cad5
push eax
mov dword [ebp - 0x44], 0xe2e9
mov word [ebp - 0x40], 0x9000
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 0xb
lea ecx, [ebp - 0x44]
push ecx
push 0x901ebd
push edx
mov dword [ebp - 0x44], 0x90909090
mov dword [ebp - 0x40], 0x90909090
mov dword [ebp - 0x3c], 0x90909090
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 2
lea eax, [ebp - 0x44]
push eax
push 0x553d6f
push ecx
mov word [ebp - 0x44], 0x9090
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x8d0dc5
push eax
mov word [ebp - 0x44], 0x7eb
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x9ec014
push edx
mov byte [ebp - 0x44], 0xeb
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 1
lea eax, [ebp - 0x44]
push eax
push 0x54c723
push ecx
call edi
mov dword [ebp - 0x44], 0xabbeb
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x6c4fcc
push eax
mov word [ebp - 0x40], 0x9000
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 6
lea ecx, [ebp - 0x44]
push ecx
push 0x833bce
push edx
mov dword [ebp - 0x44], 0xb9e9
mov word [ebp - 0x40], 0x9000
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 1
lea eax, [ebp - 0x44]
push eax
push 0x901028
push ecx
mov byte [ebp - 0x44], 0xeb
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x6d4699
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x6bfdf8
push edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 1
lea eax, [ebp - 0x44]
push eax
push 0x6ef267
push ecx
call edi
mov eax, dword [0x100fe7b4]
push ebx
push 1
lea edx, [ebp - 0x44]
push edx
push 0x759799
push eax
call edi
mov edx, dword [0x100fe7b4]
push ebx
push 1
lea ecx, [ebp - 0x44]
push ecx
push 0x757700
push edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 2
lea eax, [ebp - 0x44]
push eax
push 0x6ac85b
push ecx
mov word [ebp - 0x44], 0x13eb
call edi
mov edx, 0x1003de20
sub edx, 0xa7ccc5
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], edx
mov ecx, dword [0x100fe7b4]
push ebx
push 5
lea eax, [ebp - 0x44]
push eax
push 0xa7ccc0
push ecx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 5
lea eax, [ebp - 0x44]
push eax
mov edx, 0x100783e0
push 0x67b3b5
sub edx, 0x67b3ba
push ecx
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 5
lea eax, [ebp - 0x44]
push eax
mov edx, 0x10077150
push 0xacdccc
sub edx, 0xacdcd1
push ecx
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 5
lea eax, [ebp - 0x44]
push eax
mov edx, 0x1003de50
push 0x67ca03
sub edx, 0x67ca02
push ecx
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], edx
mov word [ebp - 0x3e], 0x9090
mov byte [ebp - 0x3c], 0x90
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 6
lea eax, [ebp - 0x44]
push eax
mov edx, 0x1004b7a0
push 0x7576a0
sub edx, 0x7576a5
push ecx
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], edx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 8
lea eax, [ebp - 0x44]
push eax
mov edx, 0x1003de90
push 0x6b6b7a
sub edx, 0x6b6b7f
push ecx
mov byte [ebp - 0x3f], 0x90
mov byte [ebp - 0x44], 0xe8
mov dword [ebp - 0x43], edx
call edi
push ebx
push 5
mov edx, 0x1003de70
lea eax, [ebp - 0x44]
sub edx, 0x5c9bd8
push eax
mov byte [ebp - 0x44], 0xe9
mov dword [ebp - 0x43], edx
mov word [ebp - 0x3f], 0x9090
push 0x5c9bd3
mov ecx, dword [0x100fe7b4]
push ecx
call edi
mov ecx, dword [0x100fe7b4]
push ebx
push 6
lea eax, [ebp - 0x44]
push eax
mov edx, 0x1003de00
push 0x6c19ae
sub edx, 0x6c19b3
push ecx
mov byte [ebp - 0x44], 0xe8
mov byte [ebp - 0x3f], 0x90
mov dword [ebp - 0x43], edx
call edi
lea edx, [ebp - 0x58]
push edx
mov byte [ebp - 0x44], 0xe8
call dword [sym.imp.MSVCR100.dll__strdate]
push 2
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x80]
push ecx
call fcn.10006d20
push 2
push 3
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x6c]
push eax
call fcn.10006dd0
lea ecx, [ebp - 0x58]
push ecx
call dword [sym.imp.MSVCR100.dll__strtime]
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
lea edx, [ebp - 0x52]
push edx
lea eax, [ebp - 0x55]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x80]
push eax
push 0x100a1a9c
push 0x1011b6e8
mov byte [ebp - 0x56], bl
mov byte [ebp - 0x53], bl
call edi
add esp, 0x40
cmp byte [0x1012d41c], bl
jne 0x1007954e
mov eax, 0x34d18e8
mov edx, 0x1012d41c
mov cl, byte [eax]
mov byte [edx + eax - 0x34d18e8], cl
inc eax
cmp cl, bl
jne 0x10079540
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1012d41c
push 0x1011c4d0
push str._s_s.txt
push eax
mov dword [ebp - 0x1ec], eax
call edi
mov ecx, dword [ebp - 0x1ec]
push 0x100946b8
push ecx
call dword [sym.imp.MSVCR100.dll_fopen]
mov edx, dword [ebp - 0x1ec]
add esp, 0x1c
test eax, eax
je 0x100795b9
push edx
call fcn.10055f00
push 0x1012d41c
lea eax, [ebp - 0xe4]
push 0x100a1a84
push eax
call edi
lea ecx, [ebp - 0xe4]
push ecx
call fcn.10008080
add esp, 0x14
jmp 0x100795f9
push str.default
push 0x1011c4d0
push str._s_s.txt
push edx
call edi
mov eax, dword [ebp - 0x1ec]
push eax
call fcn.10055f00
push 0x1012d41c
lea ecx, [ebp - 0xe4]
push 0x100a1a64
push ecx
call edi
lea edx, [ebp - 0xe4]
push edx
call fcn.10008080
add esp, 0x24
mov eax, dword [ebp - 0x1ec]
push eax
call sub.mfc100.dll_Ordinal_1296
push 0x1012d41c
lea ecx, [ebp - 0x148]
push str._s
push ecx
call edi
mov eax, dword [0x1011d1bc]
mov ecx, dword [eax + 0x20]
add esp, 0x10
lea edx, [ebp - 0x148]
push edx
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov edx, dword [0x100eaf2c]
push 0x1012d41c
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp - 0x148]
push eax
lea ecx, [esi + 0x3e8]
call sub.mfc100.dll_Ordinal_12868
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1012d41c
push 0x1011c4d0
push 0x1009561c
push eax
mov dword [ebp - 0x1ec], eax
call edi
mov ecx, dword [ebp - 0x1ec]
add esp, 0x14
push ecx
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
jne 0x10079699
mov edx, dword [ebp - 0x1ec]
push ebx
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, dword [ebp - 0x1ec]
push eax
call sub.mfc100.dll_Ordinal_1296
mov ecx, dword [esi + 0x20]
add esp, 4
push ecx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push ebx
push 0x1006f4f0
push 3
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
push 0x7d
lea edx, [ebp - 0x1c8]
push ebx
push edx
mov dword [0x101a4964], eax
call sub.MSVCR100.dll_memset
push 0x36f1cd8
lea eax, [ebp - 0x1c8]
push 0x1009648c
push eax
call edi
add esp, 0x18
lea ecx, [ebp - 0x1c8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, dword [0x1011956c]
push eax
push 0x2719
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1ec], eax
movzx ecx, word [ebp - 0x1ea]
movzx eax, ax
mov dword [0x101b899c], eax
mov dword [0x101b8998], ecx
mov byte [0x1012d41c], bl
call esi
mov edx, eax
mov eax, 0x10624dd3
mul edx
shr edx, 6
mov dword [0x1012d8fc], edx
call esi
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
mov eax, dword [ebp - 0x22c]
shr edx, 6
or edi, 0xffffffff
mov dword [0x1011cd78], edx
mov dword [0x1012d214], 0xfffff8f8
mov dword [0x1012d764], ebx
mov dword [0x1012d3e4], ebx
mov dword [ebp - method.ATL::CImage.virtual_0], vtable.ATL::CImage.0
cmp eax, ebx
je 0x100797cb
push eax
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x210], edi
mov dword [ebp - 0x20c], edi
mov word [ebp - 0x214], bx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x101c0920
call esi
dec dword [0x101c0938]
jne 0x10079807
push 0x101c0920
call esi
mov eax, dword [0x101c091c]
cmp eax, ebx
je 0x100797f6
push eax
call sub.gdiplus.dll_GdiplusShutdown
push 0x101c0920
mov dword [0x101c091c], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x101c0920
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], bl
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
call fcn.10001540
lea ecx, [ebp - 0x1fc]
mov dword [ebp - 4], edi
mov dword [ebp - method.CRgn.virtual_0], vtable.CRgn.0
call fcn.10001540
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10086738
mov esp, ebp
pop ebp
ret