This output is automatically generated by the disassembler I wrote. Feb 2006, diStorm + diSlib + disasm ----Function_0x1007147:---- X-Refs: 0x100517EL(PUSH) 01007147 (06) 3b0d 04960001 CMP ECX, [0x1009604] 0100714d (02) 75 09 JNZ 0x1007158 0100714f (06) f7c1 0000ffff TEST ECX, 0xffff0000 01007155 (02) 75 01 JNZ 0x1007158 01007157 (01) c3 RET 01007158 (05) e9 05000000 JMP 0x1007162 ----Function_Chunk_0x1007162:---- 01007162 (02) 8bff MOV EDI, EDI 01007164 (01) 55 PUSH EBP 01007165 (02) 8bec MOV EBP, ESP 01007167 (06) 81ec 30030000 SUB ESP, 0x330 0100716d (01) 57 PUSH EDI 0100716e (06) 8985 d8fdffff MOV [EBP-0x228], EAX 01007174 (06) 898d d4fdffff MOV [EBP-0x22c], ECX 0100717a (06) 8995 d0fdffff MOV [EBP-0x230], EDX 01007180 (06) 899d ccfdffff MOV [EBP-0x234], EBX 01007186 (06) 89b5 c8fdffff MOV [EBP-0x238], ESI 0100718c (06) 89bd c4fdffff MOV [EBP-0x23c], EDI 01007192 (07) 66 8c95 f0fdffff MOV WORD [EBP-0x210], SS 01007199 (07) 66 8c8d e4fdffff MOV WORD [EBP-0x21c], CS 010071a0 (07) 66 8c9d c0fdffff MOV WORD [EBP-0x240], DS 010071a7 (07) 66 8c85 bcfdffff MOV WORD [EBP-0x244], ES 010071ae (07) 66 8ca5 b8fdffff MOV WORD [EBP-0x248], FS 010071b5 (07) 66 8cad b4fdffff MOV WORD [EBP-0x24c], GS 010071bc (01) 9c PUSHF 010071bd (06) 8f85 e8fdffff POP DWORD [EBP-0x218] 010071c3 (0a) c785 28fdffff 01000100 MOV DWORD [EBP-0x2d8], 0x10001 010071cd (03) 8b45 04 MOV EAX, [EBP+0x4] 010071d0 (06) 8985 e0fdffff MOV [EBP-0x220], EAX 010071d6 (03) 8d45 04 LEA EAX, [EBP+0x4] 010071d9 (06) 8985 ecfdffff MOV [EBP-0x214], EAX 010071df (03) 8d45 04 LEA EAX, [EBP+0x4] 010071e2 (03) 8b40 fc MOV EAX, [EAX-0x4] 010071e5 (06) 8985 dcfdffff MOV [EBP-0x224], EAX 010071eb (02) 6a 14 PUSH 0x14 010071ed (01) 59 POP ECX 010071ee (02) 33c0 XOR EAX, EAX 010071f0 (06) 8dbd d0fcffff LEA EDI, [EBP-0x330] 010071f6 (02) f3 ab REP STOSD 010071f8 (0a) c785 d0fcffff 090400c0 MOV DWORD [EBP-0x330], 0xc0000409 01007202 (03) 8b45 04 MOV EAX, [EBP+0x4] 01007205 (06) 8985 dcfcffff MOV [EBP-0x324], EAX 0100720b (06) 8d85 d0fcffff LEA EAX, [EBP-0x330] 01007211 (03) 8945 f8 MOV [EBP-0x8], EAX 01007214 (06) 8d85 28fdffff LEA EAX, [EBP-0x2d8] 0100721a (03) 8945 fc MOV [EBP-0x4], EAX 0100721d (05) a1 04960001 MOV EAX, [0x1009604] 01007222 (06) 8985 20fdffff MOV [EBP-0x2e0], EAX 01007228 (05) a1 00960001 MOV EAX, [0x1009600] 0100722d (06) 8985 24fdffff MOV [EBP-0x2dc], EAX 01007233 (02) 6a 00 PUSH 0x0 01007235 (06) ff15 c4100001 CALL KERNEL32.dll!SetUnhandledExceptionFilter 0100723b (03) 8d45 f8 LEA EAX, [EBP-0x8] 0100723e (01) 50 PUSH EAX 0100723f (06) ff15 6c110001 CALL KERNEL32.dll!UnhandledExceptionFilter 01007245 (05) 68 02050000 PUSH 0x502 0100724a (06) ff15 c0100001 CALL KERNEL32.dll!GetCurrentProcess 01007250 (01) 50 PUSH EAX 01007251 (06) ff15 bc100001 CALL KERNEL32.dll!TerminateProcess 01007257 (01) 5f POP EDI 01007258 (01) c9 LEAVE 01007259 (01) c3 RET ----Function_0x10044D7:---- X-Refs: 0x100462EL(CALL) 010044d7 (02) 8bff MOV EDI, EDI 010044d9 (01) 55 PUSH EBP 010044da (02) 8bec MOV EBP, ESP 010044dc (03) 83ec 30 SUB ESP, 0x30 010044df (01) 57 PUSH EDI 010044e0 (02) 6a 29 PUSH 0x29 010044e2 (07) c745 d0 30000000 MOV DWORD [EBP-0x30], 0x30 010044e9 (06) ff15 1c120001 CALL USER32.dll!GetSystemMetrics 010044ef (02) f7d8 NEG EAX 010044f1 (02) 1bc0 SBB EAX, EAX 010044f3 (05) 05 017f0000 ADD EAX, 0x7f01 010044f8 (01) 50 PUSH EAX 010044f9 (02) 33ff XOR EDI, EDI 010044fb (01) 57 PUSH EDI 010044fc (06) ff15 d8110001 CALL USER32.dll!LoadCursorW 01004502 (02) 6a 02 PUSH 0x2 01004504 (01) 56 PUSH ESI 01004505 (03) 8945 ec MOV [EBP-0x14], EAX 01004508 (06) ff15 ec110001 CALL USER32.dll!LoadIconW 0100450e (01) 57 PUSH EDI 0100450f (02) 6a 10 PUSH 0x10 01004511 (02) 6a 10 PUSH 0x10 01004513 (02) 6a 01 PUSH 0x1 01004515 (02) 6a 02 PUSH 0x2 01004517 (01) 56 PUSH ESI 01004518 (03) 8945 e8 MOV [EBP-0x18], EAX 0100451b (06) ff15 d4110001 CALL USER32.dll!LoadImageW 01004521 (03) 8945 fc MOV [EBP-0x4], EAX 01004524 (03) 8d45 d0 LEA EAX, [EBP-0x30] 01004527 (01) 50 PUSH EAX 01004528 (07) c745 f4 01000000 MOV DWORD [EBP-0xc], 0x1 0100452f (03) 8975 e4 MOV [EBP-0x1c], ESI 01004532 (07) c745 f8 20900001 MOV DWORD [EBP-0x8], 0x1009020 01004539 (07) c745 d8 29340001 MOV DWORD [EBP-0x28], 0x1003429 01004540 (07) c745 f0 06000000 MOV DWORD [EBP-0x10], 0x6 01004547 (03) 897d d4 MOV [EBP-0x2c], EDI 0100454a (03) 897d dc MOV [EBP-0x24], EDI 0100454d (03) 897d e0 MOV [EBP-0x20], EDI 01004550 (06) ff15 d0110001 CALL USER32.dll!RegisterClassExW 01004556 (03) 66 f7d8 NEG AX 01004559 (01) 5f POP EDI 0100455a (02) 1bc0 SBB EAX, EAX 0100455c (02) f7d8 NEG EAX 0100455e (01) c9 LEAVE 0100455f (01) c3 RET