Function at 0x10042a75
Capabilities:
Check for software breakpoints
Check for time delay via gettickcount
Enumerate pe sections
Parse credit card information

Disassembly:
push 0x8a8
push 0x100a4338
call fcn.100841c0
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x800], ebx
wait
and dword [ebp - 4], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [0x1035fd44], eax
mov esi, dword [0x307809c]
mov dword [ebp - 0x810], esi
mov eax, dword [0x1035ff64]
cmp eax, 1
jne 0x10042bcc
test esi, esi
jne 0x10042b52
cmp dword [ebx + 6], 0x1b0014
jne 0x10042b52
push 0x7d
push esi
lea eax, [ebp - 0xcc]
push eax
call sub.MSVCR100.dll_memset
push 0x10114294
mov ebx, 0x10114364
push ebx
push 0x1008d900
lea eax, [ebp - 0xcc]
push eax
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
add esp, 0x1c
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x291
push dword [0x100f415c]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
call edi
push ebx
push 0x10098fb0
lea eax, [ebp - 0xcc]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0xcc]
push eax
push dword [0x100dfd8c]
push 0x2712
push dword [0x100f415c]
call edi
wait
jmp 0x10045cca
cmp eax, 1
jne 0x10042bcc
test esi, esi
jne 0x10042bd4
cmp dword [ebx + 6], 0x190014
jne 0x10042bcc
push 0x7d
push esi
lea eax, [ebp - 0xcc]
push eax
call sub.MSVCR100.dll_memset
push 0x10098fd0
push 0x10098ff0
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x18
lea eax, [ebp - 0xcc]
push eax
push dword [0x100dfd8c]
push 0x2712
push dword [0x100f415c]
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x10033630
push 0x7d0
mov eax, dword [0x10114474]
add eax, 0x44
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x10042b4c
test esi, esi
je 0x10042b4c
call edi
mov dword [0x1035fd48], eax
movzx eax, word [esi + 0x14]
mov dword [ebp - 0x7f4], eax
mov ecx, ebx
call fcn.1004045b
mov ecx, ebx
call fcn.1003e700
cmp dword [ebx + 4], 0xc0089
jne 0x10042c13
mov eax, 0x23e
cmp word [ebx + 0xc], ax
jne 0x10042c13
call edi
movzx ecx, word [ebx]
mov dword [ecx*4 + 0x1017fd00], eax
movzx eax, word [ebx + 4]
cmp eax, 0x65
je 0x10042c2b
cmp eax, 0x2f
je 0x10042c26
cmp eax, 0xa
jne 0x10042c5f
cmp eax, 0x65
jne 0x10042c49
mov eax, dword [ebx + 0xc]
mov edx, dword [ebx + 0x14]
mov esi, dword [ebx + 0x20]
cmp eax, dword [ebx + 0x18]
jne 0x10042c3d
cmp edx, esi
je 0x10042c5f
movzx eax, word [ebx]
mov byte [eax + 0x1012fd00], 0
jmp 0x10042c5f
movzx eax, word [ebx]
mov byte [eax + 0x1012fd00], 0
call edi
movzx ecx, word [ebx]
mov dword [ecx*4 + 0x1013fd00], eax
mov eax, dword [ebx + 4]
cmp eax, 0x40080
jne 0x10042c72
and dword [ebx + 8], 0
jmp 0x10042db9
cmp eax, 0xb80051
jne 0x10042db9
mov al, byte [ebx + 8]
cmp al, 0x15
jne 0x10042c97
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x10098ff4
jmp 0x10042d96
cmp al, 0x16
jne 0x10042cae
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x1009900c
jmp 0x10042d96
cmp al, 0x17
jne 0x10042cc5
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x10099024
jmp 0x10042d96
cmp al, 0xb
je 0x10042d88
cmp al, 0x29
je 0x10042d88
cmp al, 0xc
je 0x10042d78
cmp al, 0x2a
je 0x10042d78
cmp al, 0xd
je 0x10042d68
cmp al, 0x2b
je 0x10042d68
cmp al, 0x3d
jne 0x10042d04
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x10099078
jmp 0x10042d96
cmp al, 0x3e
jne 0x10042d18
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x1009908c
jmp 0x10042d96
cmp al, 0x3f
jne 0x10042d2c
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x100990a0
jmp 0x10042d96
cmp al, 0xc9
jne 0x10042d40
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x100990b4
jmp 0x10042d96
cmp al, 0xca
jne 0x10042d54
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x100990c8
jmp 0x10042d96
cmp al, 0xcb
jne 0x10042db9
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x100990e0
jmp 0x10042d96
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x10099064
jmp 0x10042d96
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x10099050
jmp 0x10042d96
call edi
sub eax, dword [0x102ffcec]
push eax
push 0x10099038
mov dword [0x1035fd4c], eax
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea eax, [ebp - 0x194]
push eax
call fcn.1003ce54
add esp, 0x14
movzx edx, word [ebx]
mov dword [ebp - 0x808], edx
mov esi, dword [ebp - 0x7f4]
cmp edx, esi
jne 0x10042ea2
cmp word [ebx + 4], 0x3b
jne 0x10042ea2
mov eax, dword [ebx + 0xc]
cmp eax, 0x3b9acd40
jne 0x10042e55
call edi
mov dword [0x1035fda8], eax
movzx edx, word [ebx]
mov esi, edx
cmp esi, dword [ebp - 0x7f4]
jne 0x100435f2
cmp word [ebx + 4], 0x6a
jne 0x100435f2
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebx + 0x34]
test ecx, ecx
jl 0x100435f2
jg 0x10042e20
test eax, eax
je 0x100435f2
mov edx, dword [0x35969cc]
mov esi, dword [0x35969d0]
sub eax, edx
sbb ecx, esi
add dword [0x1035fd10], eax
adc dword [0x1035fd14], ecx
mov eax, dword [0x1035fd10]
mov dword [0x1035fd20], eax
mov eax, dword [0x1035fd14]
mov dword [0x1035fd24], eax
jmp 0x10042b4c
cmp eax, 0x3b9acd44
jne 0x10042e65
call edi
mov dword [0x1035fdac], eax
jmp 0x10042dec
cmp eax, 0x3b9acd5d
jne 0x10042e78
call edi
mov dword [0x1035fdb0], eax
jmp 0x10042dec
cmp eax, 0x3b9acd3f
jne 0x10042e8b
call edi
mov dword [0x1035fdb4], eax
jmp 0x10042dec
cmp eax, 0x3b9acd3e
jne 0x10042dec
call edi
mov dword [0x1035fdb8], eax
jmp 0x10042dec
mov ecx, dword [ebx + 4]
cmp ecx, 0x280074
je 0x10042dec
cmp ecx, 0x381540
jne 0x1004313f
movzx eax, word [ebx + 0x10]
mov dword [ebp - 0x7fc], eax
xor esi, esi
mov dword [ebp - 0x8a8], esi
mov eax, dword [0x103ccd94]
mov dword [ebp - 0x80c], eax
cmp esi, eax
jge 0x10042f79
call edi
mov ecx, dword [0x103cdf24]
mov ecx, dword [ecx + esi*4]
sub eax, dword [ecx]
cmp eax, 0x1b58
jbe 0x10042f5f
mov eax, dword [0x103ccd8c]
mov eax, dword [eax + esi*4]
cmp dword [eax], 0x2c
jne 0x10042f5f
push 0x64
push 0
lea eax, [ebp - 0xb4]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea eax, [esi + 1]
mov dword [ebp - 0x80c], eax
push eax
mov esi, 0x103cd52c
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103ccd8c
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103cdf24
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103cf29c
call fcn.100011d0
jmp 0x10042ec7
call edi
mov ecx, dword [0x103cdf24]
mov ecx, dword [ecx + esi*4]
sub eax, dword [ecx]
cmp eax, 0x2bf20
ja 0x10042f03
inc esi
jmp 0x10042ec9
xor esi, esi
mov ecx, dword [ebp - 0x7fc]
mov dword [ebp - 0x89c], esi
mov dword [ebp - 0x80c], eax
cmp esi, eax
jge 0x10043058
mov eax, dword [0x103cd52c]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x808]
jne 0x100430a8
mov edx, dword [0x103ccd8c]
mov edx, dword [edx + esi*4]
cmp dword [edx], ecx
jne 0x10042fc7
cmp dword [ebx + 0x1c], 0
jne 0x10042fc7
cmp ecx, 0x2c
je 0x10043058
cmp eax, dword [ebp - 0x808]
jne 0x100430a8
mov eax, dword [0x103ccd8c]
mov eax, dword [eax + esi*4]
cmp dword [eax], ecx
jne 0x100430a8
push 0x64
push 0
lea eax, [ebp - 0x25c]
push eax
call sub.MSVCR100.dll_memset
push dword [ebp - 0x808]
push dword [ebp - 0x7fc]
push 0x100990f8
lea eax, [ebp - 0x25c]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
lea eax, [esi + 1]
mov dword [ebp - 0x80c], eax
push eax
mov esi, 0x103cd52c
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103ccd8c
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103cdf24
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103cf29c
call fcn.100011d0
cmp dword [ebx + 0x1c], 0
je 0x10042dec
push dword [ebp - 0x7fc]
mov esi, 0x103ccd8c
call fcn.1000117c
push dword [ebp - 0x808]
mov esi, 0x103cd52c
call fcn.1000117c
call edi
mov esi, eax
mov eax, dword [0x103cdf2c]
inc eax
mov dword [0x103cdf2c], eax
cmp eax, 1
jne 0x100430b3
push 4
push 0
push dword [0x103cdf28]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
jmp 0x100430cb
inc esi
mov eax, dword [0x103ccd94]
jmp 0x10042f81
shl eax, 2
push eax
push dword [0x103cdf24]
push 0
push dword [0x103cdf28]
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov dword [0x103cdf24], eax
push 4
call dword [sym.imp.mfc100.dll_Ordinal_1294]
pop ecx
mov ecx, dword [0x103cdf24]
mov edx, dword [0x103cdf2c]
mov dword [ecx + edx*4 - 4], eax
mov eax, dword [0x103cdf2c]
mov ecx, dword [0x103cdf24]
mov eax, dword [ecx + eax*4 - 4]
mov dword [eax], esi
movzx eax, word [ebx + 8]
push eax
mov esi, 0x103cf29c
call fcn.1000117c
push 0x64
push 0
lea eax, [ebp - 0x1f8]
push eax
call sub.MSVCR100.dll_memset
push dword [ebp - 0x808]
push dword [ebp - 0x7fc]
push 0x10099104
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
jmp 0x10042dec
cmp ecx, 0x380069
jne 0x10043158
cmp edx, esi
jne 0x10043158
cmp dword [0x103d4d54], 1
je 0x10042dec
cmp ecx, 0xc0089
jne 0x100431e8
movzx eax, word [ebx + 8]
cmp eax, esi
jne 0x100431be
mov eax, 0x3f6
cmp word [ebx + 0xc], ax
jne 0x10042dec
cmp dword [0x103d4d54], 1
jne 0x10042dec
call edi
sub eax, dword [0x1035fd90]
mov ecx, dword [0x103d57d0]
imul ecx, ecx, 0x3e8
cmp eax, ecx
jbe 0x10042dec
push 3
push 0x10099110
call fcn.1003ce54
pop ecx
pop ecx
call edi
mov dword [0x1035fd90], eax
jmp 0x10042dec
cmp ecx, 0xc0089
jne 0x100431e8
cmp edx, esi
jne 0x100431e8
mov eax, 0xfc
cmp word [ebx + 0xc], ax
jne 0x10042dec
mov dword [0x1035fdbc], 1
jmp 0x10042dec
cmp ecx, 0xf081913
jne 0x10043258
cmp edx, esi
jne 0x10043258
cmp dword [0x103d4d50], 1
jne 0x10043258
movzx eax, word [ebx + 0xc]
mov cl, byte [ebx + 0x5c]
mov byte [eax + 0x1030fcf0], cl
mov cl, byte [ebx + 0x17c]
mov byte [eax + 0x102ffcf0], cl
push eax
push dword [ebx + 0x17c]
push dword [ebx + 0x5c]
push 0x1009911c
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
cmp dword [0x103d4d50], 1
jne 0x10042dec
cmp dword [0x1035ff94], 1
jne 0x10042dec
and dword [ebx + 4], 0
jmp 0x10042dec
cmp ecx, 0x342201
jne 0x100433b0
cmp dword [0x103ca808], 1
jne 0x100433b0
mov dword [ebp - 0x870], 0x3086b20
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0x88c]
cmp eax, dword [0x3078050]
jge 0x10042dec
mov eax, dword [ebp - 0x870]
mov esi, dword [eax]
add dword [ebp - 0x870], 4
cmp dword [esi], 0xe23bd4
jne 0x100433a5
cmp dword [esi + 0x10a8], 0
je 0x100433a5
movzx eax, word [ebx]
cmp dword [esi + 0x14], eax
jne 0x100433a5
lea eax, [esi + 0x360]
mov dword [ebp - 0x80c], eax
mov eax, dword [esi + 0x10a8]
fld dword [eax + 0x280]
call fcn.100840a0
mov dword [ebp - 0x808], eax
mov eax, dword [esi + 0x10a8]
fld dword [eax + 0x288]
call fcn.100840a0
mov dword [ebp - 0x7fc], eax
cmp dword [esi + 0x3b0], 0x40d8
jne 0x1004336b
push eax
push dword [ebp - 0x808]
push 0x10099128
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
xor eax, eax
cmp dword [0x101127c4], 2
setne al
mov dword [0x1035fef4], eax
test eax, eax
je 0x1004336b
push dword [ebp - 0x7f4]
push 0x10095554
call fcn.10006394
fld dword [ebx + 0x1c]
call fcn.100840a0
mov esi, eax
fld dword [ebx + 0x24]
call fcn.100840a0
push eax
push esi
call fcn.10069042
add esp, 0x10
push 0xc8
push 0
lea eax, [ebp - 0x324]
push eax
call sub.MSVCR100.dll_memset
push dword [ebp - 0x7fc]
push dword [ebp - 0x808]
push dword [ebp - 0x80c]
push str._s._d._d
lea eax, [ebp - 0x324]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x20
inc dword [ebp - 0x88c]
jmp 0x10043282
mov eax, 0xa40501
cmp edx, esi
jne 0x10042dec
cmp ecx, eax
jne 0x10043415
cmp dword [ebx + 8], 0x260008
jne 0x10043415
mov esi, 0x103c286c
call fcn.1000102f
mov esi, 0x103c3c6c
call fcn.1000102f
mov esi, 0x103c542c
call fcn.1000102f
mov esi, 0x103c761c
call fcn.1000102f
mov esi, 0x103c8b24
call fcn.1000102f
mov esi, 0x103c664c
call fcn.1000102f
mov esi, 0x103c8804
call fcn.1000102f
jmp 0x10042dec
cmp edx, esi
jne 0x10042dec
cmp ecx, eax
jne 0x100434f7
cmp dword [ebx + 8], 0x1f0008
jne 0x100434f7
cmp word [ebx + 0x40], 0
jne 0x100434f7
movzx eax, word [ebx + 0x28]
push eax
mov esi, 0x103c664c
call fcn.1000117c
movzx eax, word [ebx + 0x18]
push eax
mov esi, 0x103c3c6c
call fcn.1000117c
movzx eax, word [ebx + 0x30]
push eax
mov esi, 0x103c761c
call fcn.1000117c
movzx eax, word [ebx + 0x20]
push eax
mov esi, 0x103c542c
call fcn.1000117c
movzx eax, word [ebx + 0x10]
push eax
mov esi, 0x103c286c
call fcn.1000117c
call edi
push eax
mov esi, 0x103c8804
call fcn.1000117c
push str.111111111111111
mov esi, 0x103c8b24
call fcn.10001109
and dword [ebp - 0x864], 0
mov eax, dword [0x103c6654]
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x864], eax
jge 0x10042dec
mov eax, dword [ebp - 0x864]
mov ecx, dword [0x103c664c]
mov ecx, dword [ecx + eax*4]
movzx edx, word [ebx + 0x28]
cmp dword [ecx], edx
jne 0x100434ef
push 0x1008ade4
mov ecx, dword [0x103c8b24]
push dword [ecx + eax*4]
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
inc dword [ebp - 0x864]
jmp 0x100434ab
cmp edx, esi
jne 0x10042dec
cmp ecx, eax
jne 0x1004355f
cmp dword [ebx + 8], 0x290008
jne 0x1004355f
and dword [ebp - 0x848], 0
mov eax, dword [0x103c6654]
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x848], eax
jge 0x10042dec
mov eax, dword [ebp - 0x848]
mov ecx, dword [0x103c664c]
mov ecx, dword [ecx + eax*4]
movzx edx, word [ebx + 0x30]
cmp dword [ecx], edx
jne 0x10043557
push 0x1008ade4
mov ecx, dword [0x103c8b24]
push dword [ecx + eax*4]
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
inc dword [ebp - 0x848]
jmp 0x10043513
cmp edx, esi
jne 0x10042dec
cmp ecx, eax
jne 0x100435d0
cmp dword [ebx + 8], 0x200008
jne 0x100435d0
and dword [ebp - 0x828], 0
mov eax, dword [0x103c6654]
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x828], eax
jge 0x10042dec
mov eax, dword [ebp - 0x828]
mov ecx, dword [0x103c664c]
mov ecx, dword [ecx + eax*4]
movzx edx, word [ebx + 0x30]
cmp dword [ecx], edx
jne 0x100435c8
cmp word [ebx + 0x28], 1
jne 0x100435c8
lea ecx, [ebx + 0x88]
push ecx
mov ecx, dword [0x103c8b24]
push dword [ecx + eax*4]
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
inc dword [ebp - 0x828]
jmp 0x1004357b
cmp edx, esi
jne 0x10042dec
cmp word [ebx + 4], 4
jne 0x10042dec
mov dword [0x1035ff8c], 1
jmp 0x10042b4c
movzx ecx, word [ebx + 4]
cmp ecx, 0x7b
jne 0x1004377d
cmp dword [0x103c3d0c], 1
jne 0x1004377d
xor eax, eax
mov dword [ebp - 0x8b0], eax
movzx ecx, byte [0x100a70a0]
cmp eax, ecx
jge 0x1004363b
movzx ecx, word [ebx + 0x10]
cmp dword [eax*4 + 0x100a70a4], ecx
jne 0x10043638
imul eax, eax, 0x14
add eax, 0x100a70f4
mov esi, eax
jmp 0x1004363d
inc eax
jmp 0x1004360e
xor esi, esi
test esi, esi
je 0x10042b4c
fld dword [ebx + 0x1e]
call fcn.100840a0
mov dword [ebp - 0x808], eax
fld dword [ebx + 0x26]
call fcn.100840a0
mov dword [ebp - 0x800], eax
mov ecx, 0xe23bd4
mov eax, dword [ebp - 0x810]
mov eax, dword [eax + 0x1d20]
call fcn.10006651
test eax, eax
jne 0x10042b4c
cmp dword [0x10112bfc], eax
je 0x10042b4c
xor edi, edi
inc edi
cmp dword [0x103c3d20], edi
jne 0x100436d1
xor edi, edi
and dword [ebp - 0x874], edi
mov eax, dword [0x103d70e4]
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x874]
cmp ecx, eax
jge 0x100436d1
mov eax, dword [0x103d70dc]
mov eax, dword [eax + ecx*4]
push esi
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x100436da
inc dword [ebp - 0x874]
jmp 0x1004369e
cmp edi, 1
jne 0x10042b4c
fild dword [ebp - 0x800]
fstp dword [ebp - 0x7fc]
fild dword [ebp - 0x808]
fstp dword [ebp - 0x808]
sub esp, 0x10
fld dword [ebp - 0x7fc]
fstp dword [esp + 0xc]
fld dword [ebp - 0x808]
fstp dword [esp + 8]
fld dword [0x1035fdc8]
fstp dword [esp + 4]
fld dword [0x1035fdc4]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
fild dword [0x1035fde8]
fcompp
fnstsw ax
test ah, 0x41
jnp 0x10042b4c
push ecx
push ecx
fld dword [ebp - 0x7fc]
fstp dword [esp + 4]
fld dword [ebp - 0x808]
fstp dword [esp]
call fcn.1003a10c
fld dword [ebp - 0x7fc]
fstp dword [esp + 4]
fld dword [ebp - 0x808]
fstp dword [esp]
movzx eax, word [ebx]
push eax
push 0xffffffffffffffff
call fcn.1003a15c
movzx eax, word [ebx]
push eax
call fcn.1003a046
jmp 0x10044ba5
cmp esi, dword [ebp - 0x7f4]
jne 0x100437e1
mov eax, 0x84
cmp cx, ax
jne 0x100437e1
movzx eax, word [ebx + 0xa]
cmp eax, 0xb
je 0x100437a6
mov ecx, 0x3f3
cmp ax, cx
jne 0x10042b4c
movzx ecx, word [ebx + 0xc]
mov dword [ebp - 0x800], ecx
movzx edx, word [ebx + 8]
mov eax, dword [0x359b0fc]
mov esi, dword [0x359b100]
mov dword [ebp - 0x8b8], eax
cmp eax, esi
je 0x10042b4c
movzx edi, word [eax]
cmp edi, edx
jne 0x100437da
mov byte [eax + 0xb8], cl
add eax, 0xc0
jmp 0x100437bf
cmp ecx, 0x65
jne 0x10043bae
cmp dword [ebp - 0x7f4], esi
jne 0x1004383b
cmp dword [0x1035ffa8], 1
jne 0x1004383b
cmp dword [0x1035fef4], 0
jne 0x1004383b
fld dword [ebx + 0xc]
call fcn.100840a0
mov esi, eax
fld dword [ebx + 0x14]
call fcn.100840a0
push eax
push esi
push 0x10099150
lea eax, [ebp - 0x25c]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0xf
lea eax, [ebp - 0x25c]
push eax
call fcn.1003ce54
add esp, 0x18
cmp dword [0x103cb758], 1
jne 0x10042b4c
call edi
sub eax, dword [0x1035fd84]
cmp eax, 0x1388
jb 0x10042b4c
xor edi, edi
cmp dword [0x3592ee8], edi
jle 0x10042b4c
cmp dword [0x103cb4b0], 1
jne 0x10042b4c
cmp dword [0x1035fef4], 1
jne 0x10042b4c
fld dword [ebx + 0xc]
call fcn.100840a0
mov dword [ebp - 0x7f4], eax
fld dword [ebx + 0x14]
call fcn.100840a0
mov dword [ebp - 0x808], eax
movzx ecx, word [ebx]
mov dword [ebp - 0x878], edi
mov eax, 0x33fc070
mov dword [ebp - 0x8a4], eax
cmp eax, 0x354cf10
jge 0x10043a3f
cmp byte [eax], 0
je 0x10043a2f
cmp dword [ebp - 0x878], ecx
jne 0x10043a2f
add eax, 3
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
mov byte [ebp - 0x811], 1
movzx eax, word [ebx]
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.10041068
mov esi, dword [ebp - 0x810]
fld dword [esi + 0x1f74]
fstp dword [esp + 4]
fld dword [esi + 0x1f6c]
fstp dword [esp]
fild dword [ebp - 0x808]
push ecx
push ecx
fstp dword [esp + 4]
fild dword [ebp - 0x7f4]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
fild dword [0x103cb4ac]
fcompp
fnstsw ax
test ah, 0x41
jne 0x10042b4c
mov dword [ebp - 0x82c], edi
mov ebx, dword [sym.imp.MSVCR100.dll_strcmp]
mov eax, dword [0x103d71ec]
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0x82c], eax
jge 0x10043a8f
mov edi, dword [ebp - 0x82c]
mov eax, dword [0x103d71e4]
push dword [eax + edi*4]
lea eax, [ebp - 0x1f8]
push eax
call ebx
pop ecx
pop ecx
test eax, eax
jne 0x10043a84
cmp dword [0x101127c4], 2
jne 0x100439df
cmp dword [0x103cb748], 1
jne 0x100439df
sub esp, 0x10
fld dword [0x1035fdc8]
fstp dword [esp + 0xc]
fld dword [0x1035fdc4]
fstp dword [esp + 8]
fild dword [ebp - 0x808]
fstp dword [esp + 4]
fild dword [ebp - 0x7f4]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
fcomp dword [0x1009eeec]
fnstsw ax
test ah, 1
je 0x10043a8f
push dword [ebp - 0x808]
push dword [ebp - 0x7f4]
call fcn.1003c835
pop ecx
pop ecx
test al, al
je 0x10043a8f
fld dword [esi + 0x1f74]
call fcn.100840a0
push eax
fld dword [esi + 0x1f6c]
call fcn.100840a0
push eax
call fcn.1003c835
pop ecx
pop ecx
test al, al
je 0x10043a8f
mov eax, dword [0x103d71e4]
push dword [eax + edi*4]
push 0x10098b88
jmp 0x10043b72
inc dword [ebp - 0x878]
add eax, 0x1cc
jmp 0x100438ad
mov byte [ebp - 0x811], 0
jmp 0x10042b4c
push 3
jmp 0x10043a71
cmp eax, ecx
jne 0x10043a60
cmp dword [0x103cc92c], 0
jne 0x10043a60
push 2
jmp 0x10043a71
test eax, eax
jne 0x10043a6f
cmp dword [0x103cc92c], ecx
jne 0x10043a6f
push ecx
jmp 0x10043a71
push 0
lea eax, [ebp - 0x194]
push eax
call fcn.1003788e
pop ecx
pop ecx
jmp 0x10042b4c
inc dword [ebp - 0x82c]
jmp 0x10043952
and dword [ebp - 0x834], 0
mov eax, dword [0x103d7204]
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0x834], eax
jge 0x10042b4c
mov edi, dword [ebp - 0x834]
mov eax, dword [0x103d71fc]
push dword [eax + edi*4]
lea eax, [ebp - 0xb4]
push eax
call ebx
pop ecx
pop ecx
test eax, eax
jne 0x10043ba3
cmp dword [0x101127c4], 2
jne 0x10043b23
cmp dword [0x103cb748], 1
jne 0x10043b23
sub esp, 0x10
fld dword [0x1035fdc8]
fstp dword [esp + 0xc]
fld dword [0x1035fdc4]
fstp dword [esp + 8]
fild dword [ebp - 0x808]
fstp dword [esp + 4]
fild dword [ebp - 0x7f4]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
fcomp dword [0x1009eeec]
fnstsw ax
test ah, 1
je 0x10042b4c
push dword [ebp - 0x808]
push dword [ebp - 0x7f4]
call fcn.1003c835
pop ecx
pop ecx
test al, al
je 0x10042b4c
fld dword [esi + 0x1f74]
call fcn.100840a0
push eax
fld dword [esi + 0x1f6c]
call fcn.100840a0
push eax
call fcn.1003c835
pop ecx
pop ecx
test al, al
je 0x10042b4c
mov eax, dword [0x103d71fc]
push dword [eax + edi*4]
push 0x10098ba8
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
xor ecx, ecx
add esp, 0xc
inc ecx
mov eax, dword [0x103cb4b8]
cmp eax, ecx
jne 0x10043a60
cmp dword [0x103cc92c], ecx
je 0x10043a4b
jmp 0x10043a4f
inc dword [ebp - 0x834]
jmp 0x10043a96
cmp dword [ebp - 0x7f4], esi
je 0x10043bdc
cmp dword [ebx + 6], 0x10070
jne 0x10043bd4
mov eax, dword [ebx + 0x28]
mov dword [0x101110b8], eax
mov eax, dword [ebx + 0x2c]
mov dword [0x101110bc], eax
jmp 0x10042b4c
cmp dword [ebp - 0x7f4], esi
jne 0x10043c43
cmp ecx, 0x78
jne 0x10043c2d
mov cl, cl
mov dl, dl
mov al, al
mov eax, dword [0xf39a68]
mov eax, dword [eax + 0x4cc]
mov ecx, dword [0x307809c]
mov eax, dword [eax + 0x388]
cmp eax, dword [ecx + 0x14]
jne 0x10042b4c
mov eax, dword [0x103cade4]
test eax, eax
jle 0x10042b4c
movzx ecx, word [ebx + 0x30]
inc ecx
cmp eax, ecx
je 0x10042b4c
dec eax
push eax
call fcn.1003de68
jmp 0x10043a7e
cmp dword [ebp - 0x7f4], esi
jne 0x10043c43
mov eax, 0x93
cmp cx, ax
je 0x10042b4c
mov eax, 0x88
cmp cx, ax
jne 0x10043da1
cmp esi, dword [ebp - 0x7f4]
jne 0x10043ce9
cmp word [ebx + 0x1c], 0
jne 0x10043ce9
call edi
sub eax, dword [0x103d8a30]
cmp eax, 0x3e8
jbe 0x10042b4c
movzx eax, word [ebx + 6]
cmp eax, 0x1c
jne 0x10043cd7
cmp word [ebx + 0xc], 2
jne 0x10043c9a
and dword [0x1035ff54], 0
inc dword [0x1035fe98]
jmp 0x10043cd7
cmp eax, 0x1c
jne 0x10043cd7
cmp word [ebx + 0xc], 0
jne 0x10043cd7
mov dword [0x1035ff54], 1
mov eax, dword [0x3052d08]
cmp eax, 0x321
je 0x10043cd7
cmp eax, 0xfa1
je 0x10043cd7
cmp eax, 0x1c85
je 0x10043cd7
cmp eax, 0x9ca5
je 0x10043cd7
inc dword [0x1035fe9c]
call edi
mov dword [0x103d8a30], eax
inc dword [0x1035fea0]
jmp 0x10042b4c
mov eax, dword [ebp - 0x810]
mov eax, dword [eax + 0x1d20]
mov ecx, 0xe23bd4
call fcn.10006651
test eax, eax
je 0x10042b4c
cmp dx, word [eax + 0x14]
jne 0x10042b4c
mov ecx, dword [0x3052d08]
cmp ecx, 0x515
je 0x10043d37
cmp ecx, 0x7594
je 0x10043d37
cmp ecx, 0x75f8
je 0x10043d37
cmp ecx, 0x765c
jne 0x10043d68
mov ecx, dword [eax + 0x10a8]
mov edx, dword [ebp - 0x810]
fld dword [ecx + 0x284]
fsub dword [edx + 0x1f70]
fcomp qword [0x1009ef90]
fnstsw ax
test ah, 0x41
jne 0x10043d68
mov eax, dword [ecx + 0x284]
mov dword [edx + 0x1f70], eax
inc dword [0x1035feec]
cmp dword [0x10112c04], 0
jle 0x10043d95
cmp dword [0x103c3d0c], 1
jne 0x10043d95
cmp dword [0x103c3d14], 1
jne 0x10043d90
call fcn.100416e4
jmp 0x10043d95
call fcn.10041624
and dword [0x1035ff24], 0
jmp 0x10042b4c
mov eax, 0x1540
cmp cx, ax
jne 0x10043e02
cmp esi, dword [ebp - 0x7f4]
jne 0x10042b4c
cmp word [ebx + 8], 0
jbe 0x10042b4c
movzx eax, word [ebx + 0x10]
cmp eax, 0x13
jne 0x10043de4
cmp dword [0x1035fef4], 1
jne 0x10043de4
push esi
push 0x10095554
call fcn.10006394
jmp 0x10043a7d
cmp dword [0x103d2c08], 1
jne 0x10042b4c
push eax
call fcn.1007ce04
pop ecx
cmp al, 1
jne 0x10042b4c
jmp 0x10043dd4
cmp ecx, 0x72
jne 0x1004402e
cmp dword [0x103c88a4], 1
jne 0x1004402e
cmp dword [0x101127c4], 2
je 0x1004402e
mov al, al
mov cl, cl
mov al, al
mov cl, cl
mov al, al
and dword [ebp - 0x884], 0
lea esi, [ebx + 0xc]
mov dword [ebp - 0x8b4], esi
and dword [ebp - 0x844], 0
movzx eax, byte [ebx + 8]
cmp dword [ebp - 0x844], eax
jge 0x10042b4c
cmp dword [ebp - 0x844], 0xa
jg 0x10042b4c
fld dword [esi + 0x14]
call fcn.100840a0
mov dword [ebp - 0x808], eax
fld dword [esi + 0x1c]
call fcn.100840a0
mov dword [ebp - 0x7fc], eax
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x7f4], eax
fild dword [ebp - 0x7fc]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [ebp - 0x808]
fstp dword [esp + 8]
mov eax, dword [ebp - 0x810]
fld dword [eax + 0x1f74]
fstp dword [esp + 4]
fld dword [eax + 0x1f6c]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
call fcn.100840a0
mov dword [ebp - 0x800], eax
xor ecx, ecx
mov dword [ebp - 0x83c], ecx
mov eax, dword [0x101108ac]
cmp dword [ebp - 0x83c], eax
jge 0x10043ef9
mov edx, dword [ebp - 0x83c]
mov edx, dword [edx*4 + 0x1010ef48]
cmp edx, dword [esi]
je 0x10043f3d
inc dword [ebp - 0x83c]
jmp 0x10043ed8
test ecx, ecx
jne 0x10043f3d
cmp dword [0x103c88b8], 1
jne 0x10043f3d
mov ecx, dword [esi]
mov dword [eax*4 + 0x1010ef48], ecx
call edi
mov ecx, dword [0x101108ac]
mov dword [ecx*4 + 0x1010f718], eax
mov eax, dword [0x101108ac]
mov byte [eax + 0x1010fee8], 0
mov eax, dword [0x101108ac]
and dword [eax*4 + 0x101100dc], 0
inc dword [0x101108ac]
cmp dword [ebp - 0x800], 0x96
jg 0x10044007
cmp dword [0x103c88c4], 1
jne 0x10043f99
fild dword [0x1035fedc]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [0x1035fed8]
fstp dword [esp + 8]
fild dword [ebp - 0x7fc]
fstp dword [esp + 4]
fild dword [ebp - 0x808]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
fcomp dword [0x1009ee3c]
fnstsw ax
test ah, 5
jnp 0x10042b4c
fild dword [0x100a629c]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [0x100a6298]
fstp dword [esp + 8]
fild dword [ebp - 0x7fc]
fstp dword [esp + 4]
fild dword [ebp - 0x808]
fstp dword [esp]
call fcn.100063eb
add esp, 0x10
fcomp dword [0x1009ee3c]
fnstsw ax
test ah, 5
jnp 0x10042b4c
push dword [ebp - 0x7f4]
push dword [esi + 4]
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [esi + 8]
call fcn.1003ff51
pop ecx
push dword [esi]
mov edi, eax
call fcn.1003ffe1
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esi, 0x68
mov dword [ebp - 0x8b4], esi
inc dword [ebp - 0x884]
cmp dword [ebp - 0x884], 0x10
jg 0x10042b4c
inc dword [ebp - 0x844]
jmp 0x10043e46
cmp ecx, 0xc
jne 0x100441ac
movzx esi, word [ebx + 8]
imul esi, esi, 0x1cc
and dword [ebp - 0x84c], 0
mov eax, dword [0x103d71bc]
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0x84c], eax
jge 0x100440ab
mov eax, dword [ebp - 0x84c]
shl eax, 2
mov dword [ebp - 0x800], eax
lea ecx, [esi + 0x33fc073]
push ecx
mov ecx, dword [0x103d719c]
push dword [ecx + eax]
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x1004411b
movzx eax, word [ebx]
mov ecx, dword [0x103d71b4]
mov esi, dword [ebp - 0x800]
mov ecx, dword [ecx + esi]
mov dword [ecx], eax
call edi
mov ecx, dword [0x103d71a8]
mov ecx, dword [ecx + esi]
mov dword [ecx], eax
xor esi, esi
inc esi
cmp dword [0x103c3de0], esi
jne 0x10042b4c
movzx eax, word [ebx + 8]
cmp dword [ebp - 0x7f4], eax
jne 0x10042b4c
mov dword [ebp - 0x890], 0x3086b20
and dword [ebp - 0x87c], 0
mov edx, 0xe23bd4
mov eax, dword [ebp - 0x87c]
cmp eax, dword [0x3078050]
jge 0x1004412e
mov eax, dword [ebp - 0x890]
mov eax, dword [eax]
add dword [ebp - 0x890], 4
test eax, eax
je 0x10044126
cmp dword [eax], edx
jne 0x10044126
cmp dword [eax + 0x10a8], 0
je 0x10044126
movzx ecx, word [ebx]
cmp ecx, dword [eax + 0x14]
jne 0x10044126
mov eax, dword [eax + 0xc]
jmp 0x10044130
inc dword [ebp - 0x84c]
jmp 0x10044048
inc dword [ebp - 0x87c]
jmp 0x100440e0
xor eax, eax
test eax, eax
jle 0x10042b4c
mov ecx, dword [eax*4 + 0x30780a0]
cmp dword [ecx], edx
jne 0x10042b4c
mov dword [ecx + 0x354], esi
xor edx, edx
mov dword [ebp - 0x854], edx
cmp dword [ebp - 0x854], 0x1e
jge 0x10044179
mov ecx, dword [ebp - 0x854]
cmp dword [ecx*4 + 0x1035fdf8], eax
je 0x10042b4c
inc dword [ebp - 0x854]
jmp 0x10044155
mov dword [ebp - 0x85c], edx
cmp dword [ebp - 0x85c], 0x1e
jge 0x10042b4c
mov ecx, dword [ebp - 0x85c]
lea ecx, [ecx*4 + 0x1035fdf8]
cmp dword [ecx], edx
jne 0x100441a4
mov dword [ecx], eax
jmp 0x10042b4c
inc dword [ebp - 0x85c]
jmp 0x1004417f
cmp ecx, 0xa
jne 0x100447cb
xor eax, eax
cmp dword [ebx + 0x10], eax
je 0x10042b4c
mov ecx, 0xbb8
cmp dx, cx
jbe 0x100442f7
mov dword [ebp - 0x898], eax
mov dword [ebp - 0x824], eax
mov eax, dword [0x103ccd94]
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0x824], eax
jge 0x10044232
mov ecx, dword [ebp - 0x824]
mov edx, dword [0x103cf29c]
mov edx, dword [edx + ecx*4]
mov edx, dword [edx]
cmp edx, dword [ebp - 0x7f4]
je 0x10044273
push 0xc8
push 0
lea eax, [ebp - 0x324]
push eax
call sub.MSVCR100.dll_memset
push esi
push dword [ebx + 0x10]
push 0x10099160
lea eax, [ebp - 0x324]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
cmp dword [ebp - 0x898], 0
jne 0x10042b4c
push 0xc8
push 0
lea eax, [ebp - 0x324]
push eax
call sub.MSVCR100.dll_memset
movzx eax, word [ebx]
push eax
push dword [ebx + 0x10]
push 0x10099188
lea eax, [ebp - 0x324]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
jmp 0x10042b4c
mov edx, dword [0x103cd52c]
mov edx, dword [edx + ecx*4]
cmp esi, dword [edx]
jne 0x100442ec
mov edx, dword [0x103ccd8c]
mov ecx, dword [edx + ecx*4]
cmp dword [ecx], 0x2c
jne 0x100442ec
mov dword [ebp - 0x898], 1
push 0xc8
push 0
lea eax, [ebp - 0x324]
push eax
call sub.MSVCR100.dll_memset
push esi
push dword [ebx + 0x10]
push 0x10099174
lea eax, [ebp - 0x324]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
mov eax, dword [ebp - 0x810]
cmp dword [eax + 0x2a60], 0xd
jne 0x10044232
mov eax, dword [ebx + 0x10]
cdq
add dword [0x10360a20], eax
adc dword [0x10360a24], edx
jmp 0x10044232
inc dword [ebp - 0x824]
jmp 0x100441df
cmp dword [ebp - 0x7f4], esi
jne 0x10042b4c
push 0x3e8
push 0
lea eax, [ebp - 0x7f0]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
and dword [ebp - 0x868], 0
xor esi, esi
inc esi
cmp dword [ebp - 0x868], 0x64
jge 0x100443e5
push 0x10
lea eax, [ebp - 0x80c]
push eax
mov eax, dword [ebp - 0x868]
movzx eax, byte [eax + ebx]
push eax
call dword [sym.imp.MSVCR100.dll__itoa]
lea eax, [ebp - 0x80c]
push eax
call dword [sym.imp.MSVCR100.dll_strlen]
add esp, 0x10
cmp eax, esi
jne 0x10044378
mov byte [ebp - 0x80a], 0
mov al, byte [ebp - 0x80c]
mov byte [ebp - 0x80b], al
mov byte [ebp - 0x80c], 0x30
and dword [ebp - 0x86c], 0
cmp dword [ebp - 0x86c], 2
jge 0x100443b1
mov eax, dword [ebp - 0x86c]
lea eax, [ebp + eax - 0x80c]
mov cl, byte [eax]
cmp cl, 0x61
jl 0x100443a9
cmp cl, 0x7a
jg 0x100443a9
movsx ecx, cl
sub ecx, 0x20
mov byte [eax], cl
inc dword [ebp - 0x86c]
jmp 0x1004437f
push 0x10099194
lea eax, [ebp - 0x7f0]
push eax
call dword [sym.imp.MSVCR100.dll_strcat]
lea eax, [ebp - 0x80c]
push eax
lea eax, [ebp - 0x7f0]
push eax
call dword [sym.imp.MSVCR100.dll_strcat]
add esp, 0x10
inc dword [ebp - 0x868]
jmp 0x10044323
call edi
mov dword [0x1035fda4], eax
call edi
add eax, 0x44c
mov dword [0x101127e0], eax
call edi
mov dword [0x1035fd50], eax
mov eax, dword [0x307809c]
mov ecx, 0xe23bd4
mov eax, dword [eax + 0x1d20]
call fcn.10006651
mov dword [ebp - 0x7f4], eax
mov dword [0x1035ff30], esi
movzx esi, word [ebx + 8]
mov dword [ebp - 0x80c], esi
mov eax, dword [ebx + 0x3c]
mov dword [ebp - 0x808], eax
cmp eax, 0x7e
je 0x1004443d
cmp eax, 0x7f
jne 0x10044444
and dword [0x1035fda4], 0
fld dword [ebx + 0x40]
call fcn.100840a0
mov dword [0x10112774], eax
fld dword [ebx + 0x44]
call fcn.100840a0
mov dword [0x10112770], eax
fld dword [ebx + 0x48]
call fcn.100840a0
mov dword [0x1011276c], eax
movzx eax, word [ebx + 0x8f]
mov dword [0x1035fee8], eax
cmp eax, 6
jne 0x10044483
xor eax, eax
mov dword [0x1035fee8], eax
cmp esi, 0xbb8
jl 0x100444b5
cmp byte [ebx + 0x53], 0
jne 0x100444b5
mov ecx, dword [ebx + 0x10]
mov eax, ecx
cdq
add dword [0x10360a20], eax
adc dword [0x10360a24], edx
mov dword [0x1035fef8], ecx
call edi
mov dword [0x1035fd38], eax
mov eax, dword [0x1035fee8]
mov esi, dword [ebp - 0x810]
mov ecx, dword [0x100a62a8]
inc ecx
cmp eax, ecx
je 0x100444cb
cmp eax, 1
jne 0x100444f9
cmp dword [0x103d303c], 1
jne 0x100444e2
cmp dword [0x1035ff94], 1
jne 0x100444e2
call fcn.10041810
cmp dword [0x10112c04], 0
jle 0x100444f9
cmp dword [0x103c3d0c], 1
jne 0x100444f9
call fcn.10041810
cmp dword [0x103d30f8], 1
jne 0x10044556
cmp dword [0x1035ff94], 1
jne 0x10044556
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
fld dword [esi + 0x1f6c]
call fcn.100840a0
mov dword [ebp - 0x7fc], eax
fld dword [esi + 0x1f74]
call fcn.100840a0
mov dword [ebp - 0x800], eax
fild dword [ebp - 0x800]
fstp dword [esp + 4]
fild dword [ebp - 0x7fc]
fstp dword [esp]
call fcn.1003a10c
pop ecx
pop ecx
mov eax, dword [ebp - 0x7f4]
test eax, eax
je 0x10044576
movzx eax, word [eax + 0x14]
cmp eax, dword [ebp - 0x80c]
jne 0x10044576
mov dword [0x1035ff20], 1
cmp dword [ebp - 0x808], 0xc9
jne 0x100445e3
cmp dword [ebx + 0x38], 0x7a5d3
jne 0x100445e3
inc dword [0x1011277c]
mov eax, dword [0x1011277c]
cmp eax, dword [0x103c4298]
jl 0x100445e3
call edi
mov dword [0x101127dc], eax
fld dword [esi + 0x1f6c]
call fcn.100840a0
mov dword [ebp - 0x7fc], eax
fld dword [esi + 0x1f74]
call fcn.100840a0
mov dword [ebp - 0x800], eax
fild dword [ebp - 0x800]
push ecx
push ecx
fstp dword [esp + 4]
fild dword [ebp - 0x7fc]
fstp dword [esp]
call fcn.1003a10c
pop ecx
pop ecx
cmp dword [0x1035ff2c], 1
jne 0x10044678
push 0x64
push 0
lea eax, [ebp - 0xb4]
push eax
call sub.MSVCR100.dll_memset
push dword [ebx + 0x38]
mov esi, dword [ebp - 0x808]
push esi
push str._d_d
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
cmp esi, 0xc9
je 0x1004463b
cmp esi, 0xcd
je 0x1004463b
cmp esi, 0xa6
jne 0x10042b4c
mov ebx, dword [ebx + 0x38]
cmp ebx, 0x7a5d1
je 0x10042b4c
cmp ebx, 0x7a5d2
je 0x10042b4c
cmp ebx, 0x7a5d3
je 0x10042b4c
call edi
mov dword [0x1035fd54], eax
mov dword [0x1035ff34], 1
jmp 0x10042b4c
cmp dword [0x103cb710], 1
jne 0x100446d5
cmp dword [0x101127c4], 5
jne 0x100446d5
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
fld dword [esi + 0x1f6c]
call fcn.100840a0
mov dword [ebp - 0x7fc], eax
fld dword [esi + 0x1f74]
call fcn.100840a0
mov dword [ebp - 0x800], eax
fild dword [ebp - 0x800]
fstp dword [esp + 4]
fild dword [ebp - 0x7fc]
fstp dword [esp]
call fcn.1003a10c
pop ecx
pop ecx
xor eax, eax
inc eax
cmp dword [0x103c3d18], eax
jne 0x100446ff
cmp dword [0x1035ff58], eax
jne 0x100446ff
cmp dword [0x1035ff28], eax
jne 0x100446ff
cmp dword [0x1035fef4], eax
jne 0x100446ff
and dword [ebx], 0
and dword [ebx + 4], 0
cmp dword [ebp - 0x808], 0xd2
je 0x10044723
cmp dword [ebp - 0x808], 0xd3
je 0x10044723
cmp dword [ebp - 0x808], 0xd4
jne 0x10044771
mov eax, dword [0x10114474]
add eax, 0x47
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_KillTimer]
mov al, byte [0x10360a36]
cmp al, 1
jne 0x10044762
push 0x10041ff0
push 0x7d0
mov eax, dword [0x10114474]
add eax, 0x4e
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x10044771
movzx eax, al
mov dword [0x1035ff58], eax
and dword [0x1035ff24], 0
xor eax, eax
inc eax
mov dword [0x1035ff38], eax
mov dword [0x1035ff3c], eax
mov dword [0x1035ff40], eax
mov dword [0x1035ff44], eax
xor ecx, ecx
mov dword [0x1035fdbc], ecx
mov dword [0x1035fd5c], ecx
mov dword [0x1035ff0c], ecx
cmp dword [0x103c3de4], eax
jne 0x10042b4c
cmp dword [0x10112c04], ecx
jle 0x10042b4c
cmp dword [0x103c0bb8], eax
je 0x10042b4c
push ecx
call fcn.100384dc
jmp 0x10043a7e
cmp ecx, 0x2f
jne 0x10044a8d
cmp dword [ebp - 0x7f4], esi
jne 0x10042b4c
cmp dword [0x100a62ac], 1
je 0x10042b4c
call edi
mov dword [0x1035fd50], eax
mov dword [0x1035ff30], 1
mov esi, dword [ebx + 0x16]
mov dword [ebp - 0x800], esi
fld dword [ebx + 0x1a]
call fcn.100840a0
mov dword [0x10112774], eax
fld dword [ebx + 0x1e]
call fcn.100840a0
mov dword [0x10112770], eax
fld dword [ebx + 0x22]
call fcn.100840a0
mov dword [0x1011276c], eax
and dword [0x1035fda4], 0
and dword [0x1035fee8], 0
cmp byte [ebx + 0x26], 0
jne 0x1004489a
and dword [ebp - 0x830], 0
cmp dword [ebp - 0x830], 0x14
jge 0x1004489a
mov eax, dword [ebp - 0x830]
lea ecx, [ebx + eax*4]
movzx eax, word [ecx + 0x52]
test eax, eax
je 0x1004489a
cmp eax, 0xbb8
jl 0x10044892
mov ecx, dword [ecx + 0xa2]
mov eax, ecx
cdq
add dword [0x10360a20], eax
adc dword [0x10360a24], edx
mov dword [0x1035fef8], ecx
call edi
mov dword [0x1035fd38], eax
mov esi, dword [ebp - 0x800]
inc dword [ebp - 0x830]
jmp 0x10044849
xor edx, edx
inc edx
cmp dword [0x103d30f8], edx
jne 0x10044907
cmp dword [0x1035ff94], edx
jne 0x10044907
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov eax, dword [ebp - 0x810]
fld dword [eax + 0x1f6c]
call fcn.100840a0
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0x810]
fld dword [eax + 0x1f74]
call fcn.100840a0
mov dword [ebp - 0x800], eax
fild dword [ebp - 0x800]
fstp dword [esp + 4]
fild dword [ebp - 0x7fc]
fstp dword [esp]
call fcn.1003a10c
pop ecx
pop ecx
xor edx, edx
inc edx
mov eax, dword [0x307809c]
mov ecx, 0xe23bd4
mov eax, dword [eax + 0x1d20]
call fcn.10006651
test eax, eax
je 0x10044930
mov ax, word [eax + 0x14]
cmp ax, word [ebx + 8]
jne 0x10044930
mov dword [0x1035ff20], edx
cmp esi, 0xc9
jne 0x100449a8
cmp dword [ebx + 0x12], 0x7a5d3
jne 0x100449a8
inc dword [0x1011277c]
mov eax, dword [0x1011277c]
cmp eax, dword [0x103c4298]
jl 0x100449a8
call edi
mov dword [0x101127dc], eax
mov eax, dword [ebp - 0x810]
fld dword [eax + 0x1f6c]
call fcn.100840a0
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0x810]
fld dword [eax + 0x1f74]
call fcn.100840a0
mov dword [ebp - 0x800], eax
fild dword [ebp - 0x800]
push ecx
push ecx
fstp dword [esp + 4]
fild dword [ebp - 0x7fc]
fstp dword [esp]
call fcn.1003a10c
pop ecx
pop ecx
xor edx, edx
inc edx
cmp dword [0x1035ff2c], edx
jne 0x100449fd
push 0x64
push 0
lea eax, [ebp - 0xb4]
push eax
call sub.MSVCR100.dll_memset
push dword [ebx + 0x12]
push esi
push str._d__d
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
cmp esi, 0xc9
je 0x100449f5
cmp esi, 0xcd
je 0x100449f5
cmp esi, 0xa6
jne 0x10042b4c
mov ebx, dword [ebx + 0x12]
jmp 0x1004463e
cmp dword [0x103cb710], edx
jne 0x10044a62
cmp dword [0x101127c4], 5
jne 0x10044a62
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov esi, dword [ebp - 0x810]
fld dword [esi + 0x1f6c]
call fcn.100840a0
mov dword [ebp - 0x7fc], eax
fld dword [esi + 0x1f74]
call fcn.100840a0
mov dword [ebp - 0x800], eax
fild dword [ebp - 0x800]
fstp dword [esp + 4]
fild dword [ebp - 0x7fc]
fstp dword [esp]
call fcn.1003a10c
pop ecx
pop ecx
xor edx, edx
inc edx
mov dword [0x1035ff38], edx
mov dword [0x1035ff3c], edx
mov dword [0x1035ff40], edx
mov dword [0x1035ff44], edx
and dword [0x1035fdbc], 0
and dword [0x1035ff0c], 0
jmp 0x10042b4c
mov eax, 0x270f
cmp dx, ax
jne 0x10044aca
mov eax, 0x1709
cmp cx, ax
jne 0x10044aca
mov al, al
mov al, al
mov dl, dl
mov dl, dl
cmp dword [ebx + 8], 3
jne 0x10042b4c
lea esi, [ebx + 0x10]
call fcn.1003c2e6
push 0x100991a0
call fcn.100060db
jmp 0x10043a7e
mov eax, dword [ebp - 0x7f4]
cmp eax, esi
jne 0x10044b0c
cmp dword [ebx + 4], 0x38177a
jne 0x10044af6
cmp dword [ebx + 8], 0x13
jne 0x10042b4c
mov dword [0x1035fd2c], 0xfffff8f8
jmp 0x10042b4c
cmp eax, esi
jne 0x10044b0c
mov edx, 0xe1
cmp cx, dx
jne 0x10044b0c
and dword [ebx], 0
jmp 0x10042b4c
cmp eax, dword [ebx + 0x10]
jne 0x10044bad
mov edx, 0x98
cmp cx, dx
jne 0x10044bad
cmp dword [ebx + 8], 1
jne 0x10044b40
cmp dword [ebx + 0xc], 1
jne 0x10044b40
lea eax, [ebx + 0x14]
push eax
push 0x10112114
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
cmp byte [ebx + 8], 1
jne 0x10042b4c
cmp dword [0x103c80a0], 1
jne 0x10042b4c
push 0x1f4
call dword [sym.imp.mfc100.dll_Ordinal_265]
mov edi, eax
mov dword [esp], 0x10111f10
push 0x10098e90
push edi
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
add esp, 0xc
push 0x11
push 0
push edi
call dword [sym.imp.WINMM.dll_PlaySoundA]
push edi
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add ebx, 0x14
push ebx
push 0x100991ac
mov edi, 0x10112128
push edi
call esi
push edi
call fcn.100060db
add esp, 0x14
jmp 0x10042b4c
cmp eax, esi
jne 0x10044e20
cmp ecx, 0x35
jne 0x10044bf7
cmp word [ebx + 6], 4
je 0x10044bf7
cmp dword [0x103c5630], 1
jne 0x10042b4c
cmp dword [0x1035fef4], 1
jne 0x10042b4c
cmp dword [0x103c54ec], 1
jne 0x10042b4c
mov dword [0x1035feb0], 0xffff8ad0
jmp 0x10042b4c
cmp eax, esi
jne 0x10044e20
cmp dword [ebx + 4], 0x1c0079
jne 0x10044e20
xor eax, eax
inc eax
cmp dword [0x100a62ac], eax
je 0x10042b4c
mov dword [0x1035ff60], eax
mov ecx, dword [ebx + 0x18]
mov dword [0x1035fea8], ecx
cmp ecx, 0x321
jne 0x10044c44
mov dword [ebp - 0x7fc], 0x20ade9
mov byte [ebp - 0x7f8], 0
jmp 0x10044c5f
cmp ecx, 0x4b1
jne 0x10044c5f
mov dword [ebp - 0x808], 0x20ac8e0f
mov word [ebp - 0x804], 0
mov edx, dword [0x1035ff5c]
cmp edx, 1
jne 0x10044e0d
fld dword [0x103d8a34]
fld dword [ebx + 8]
fucompp
fnstsw ax
test ah, 0x44
jp 0x10044df6
fld dword [0x103d8a38]
fld dword [ebx + 0x10]
fucompp
fnstsw ax
test ah, 0x44
jp 0x10044df6
fld dword [0x103c13c0]
fld qword [0x1009ef88]
fucompp
fnstsw ax
test ah, 0x44
jp 0x10044d02
and dword [ebp - 0x850], 0
mov eax, dword [0x103c2360]
dec eax
cmp dword [ebp - 0x850], eax
jge 0x10044cfc
mov eax, dword [ebp - 0x850]
fld dword [eax*4 + 0x103c0bf4]
fstp dword [eax*4 + 0x103c0bf0]
fld dword [eax*4 + 0x103c13c4]
fstp dword [eax*4 + 0x103c13c0]
fld dword [eax*4 + 0x103c1b94]
fstp dword [eax*4 + 0x103c1b90]
inc dword [ebp - 0x850]
jmp 0x10044cb6
dec dword [0x103c2360]
fldz
fst dword [0x103d8a34]
fstp dword [0x103d8a38]
and dword [ebp - 0x818], 0
mov eax, dword [0x103c2360]
cmp dword [ebp - 0x818], eax
jge 0x10044d70
sub eax, dword [ebp - 0x818]
lea eax, [eax*4 + 0x103c0bf0]
fld dword [eax - 4]
fstp dword [eax]
mov eax, dword [0x103c2360]
sub eax, dword [ebp - 0x818]
fld dword [eax*4 + 0x103c13bc]
fstp dword [eax*4 + 0x103c13c0]
mov eax, dword [0x103c2360]
sub eax, dword [ebp - 0x818]
fld dword [eax*4 + 0x103c1b8c]
fstp dword [eax*4 + 0x103c1b90]
inc dword [ebp - 0x818]
jmp 0x10044d17
inc eax
mov dword [0x103c2360], eax
mov esi, dword [ebp - 0x810]
fld dword [esi + 0x1f6c]
call fcn.100840a0
mov edi, eax
fld dword [esi + 0x1f74]
call fcn.100840a0
mov ebx, eax
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
pop ecx
pop ecx
mov esi, dword [sym.imp.MSVCR100.dll_rand]
call esi
cdq
push 0x3c
pop ecx
idiv ecx
add edx, edi
mov dword [ebp - 0x800], edx
fild dword [ebp - 0x800]
fstp dword [0x103c0bf0]
fld dword [0x1009ef80]
fstp dword [0x103c13c0]
call esi
cdq
push 0x3c
pop ecx
idiv ecx
add edx, ebx
mov dword [ebp - 0x800], edx
fild dword [ebp - 0x800]
fstp dword [0x103c1b90]
jmp 0x10042b4c
cmp edx, 1
jne 0x10044e0d
fld dword [ebx + 8]
fstp dword [0x103d8a34]
fld dword [ebx + 0x10]
fstp dword [0x103d8a38]
push ecx
call fcn.100067cc
pop ecx
call edi
mov dword [0x1035fd58], eax
jmp 0x10042b4c
mov edx, 0xd6
cmp cx, dx
jne 0x10044e45
call edi
mov dword [0x101127d8], eax
mov ebx, dword [ebx + 0xd]
mov dword [0x1035fea8], ebx
push ebx
call fcn.100067cc
jmp 0x10043a7e
cmp eax, esi
jne 0x10044fe7
cmp dword [ebx + 4], 0x180031
jne 0x10044fe7
cmp word [ebx + 0x10], 0
jne 0x10042b4c
call edi
sub eax, dword [0x1035fd98]
cmp eax, 0xea60
ja 0x10044ec5
push 0x14
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x103cabec
call dword [sym.imp.mfc100.dll_Ordinal_6969]
lea edi, [ebx + 0x12]
lea eax, [ebp - 0x4c]
push eax
push edi
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x10044ec5
movzx eax, word [ebx + 0xe]
push eax
push 2
call fcn.1003bb64
push edi
push 0x100991c0
mov edi, 0x10112128
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
push edi
call fcn.100060db
add esp, 0x18
jmp 0x10042b4c
cmp dword [0x103ca998], 1
jne 0x10044ee5
movzx eax, word [ebx + 0xe]
push eax
push 1
call fcn.1003bb64
add ebx, 0x12
push ebx
push 0x100991d8
jmp 0x10044eab
cmp dword [0x103cade0], 1
jne 0x10044f54
movzx eax, word [ebx + 0xe]
imul eax, eax, 0x1cc
add eax, 0x33fc086
push eax
mov eax, dword [ebp - 0x810]
add eax, 0x7d0
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
movzx eax, word [ebx + 0xe]
push eax
jne 0x10044f42
push 1
call fcn.1003bb64
lea eax, [ebx + 0x12]
push eax
push 0x100991d8
mov edi, 0x10112128
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
push edi
call fcn.100060db
add esp, 0x18
jmp 0x10044f59
push 2
call fcn.1003bb64
lea eax, [ebx + 0x12]
push eax
push 0x100991e8
jmp 0x10044f2b
mov edi, 0x10112128
cmp dword [0x103ca994], 1
jne 0x10042b4c
and dword [ebp - 0x838], 0
mov eax, 0x103ca9a8
call fcn.10001a25
cmp dword [ebp - 0x838], eax
jge 0x10044fcd
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x838]
push 0x189
push dword [0x103ca9c8]
call dword [sym.imp.USER32.dll_SendMessageA]
lea esi, [ebx + 0x12]
push esi
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x10044fc5
movzx eax, word [ebx + 0xe]
push eax
push 1
call fcn.1003bb64
push esi
push 0x100991d8
jmp 0x10044eb0
inc dword [ebp - 0x838]
jmp 0x10044f6d
movzx eax, word [ebx + 0xe]
push eax
push 2
call fcn.1003bb64
add ebx, 0x12
push ebx
push 0x100991e8
jmp 0x10044eb0
mov eax, dword [ebx + 4]
cmp eax, 0x5c3125
jne 0x1004500e
cmp dword [ebx + 0xc], 0xd
jne 0x10042b4c
cmp dword [ebx + 8], 1
jne 0x10042b4c
and dword [ebx + 4], 0
jmp 0x10042b4c
cmp esi, dword [ebp - 0x7f4]
jne 0x10045110
cmp ecx, 0x3d
jne 0x10045110
cmp dword [0x103c54e8], 1
jne 0x10042b4c
movzx eax, word [ebx + 8]
mov ecx, 0x2c0d
cmp ax, cx
je 0x10045062
inc ecx
cmp ax, cx
je 0x10045062
mov ecx, 0x2c0f
cmp ax, cx
je 0x10045062
mov ecx, 0x468d
cmp ax, cx
je 0x10045062
inc ecx
cmp ax, cx
jne 0x10042b4c
cmp byte [ebx + 0xc], 1
jne 0x10042b4c
cmp byte [ebx + 0xd], 0
jne 0x10042b4c
call edi
sub eax, dword [0x1035fd58]
cmp eax, 0x7d0
jb 0x10042b4c
mov dl, dl
mov eax, eax
mov al, al
mov cl, cl
mov eax, dword [0x103c3ebc]
xor ecx, ecx
cmp eax, 1
jne 0x100450e3
cmp dword [0x101127c4], 2
je 0x100450b2
cmp dword [0x1035fef4], ecx
jne 0x10042b4c
mov eax, dword [0x103c562c]
sub eax, ecx
je 0x10045100
dec eax
je 0x100450e7
dec eax
je 0x100450db
dec eax
je 0x100450d3
dec eax
jne 0x10042b4c
push ecx
push 0xf468e
jmp 0x10045106
push ecx
push 0xf468d
jmp 0x10045106
push ecx
push 0x92c0f
jmp 0x10045106
cmp eax, ecx
jmp 0x100450ac
push ecx
push 0x92c0e
call fcn.1003c172
pop ecx
pop ecx
call edi
mov dword [0x1035fd28], eax
jmp 0x10042b4c
push ecx
push 0x92c0d
call fcn.1003c172
jmp 0x10043a7d
cmp eax, 0xbc0066
jne 0x10045892
xor eax, eax
lea edi, [ebp - 0x38]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea esi, [ebx + 0x21]
push 4
push esi
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
and dword [ebp - 0x860], 0
push esi
call dword [sym.imp.MSVCR100.dll_strlen]
pop ecx
cmp dword [ebp - 0x860], eax
jae 0x10045165
mov eax, dword [ebp - 0x860]
cmp byte [ebx + eax + 0x21], 0xff
jne 0x1004533a
xor eax, eax
mov word [ebx + 4], ax
cmp byte [ebx + 8], 5
ja 0x1004536c
movzx eax, word [ebx]
cmp dword [ebp - 0x7f4], eax
je 0x1004536c
push str.rxjhshenqi.com
push esi
mov edi, dword [sym.imp.MSVCR100.dll_strstr]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10045372
push 0x10099208
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x100451ce
push 0x1009920c
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x100451ce
push 0x10099210
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x100451ce
push 0x10099214
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x100451d4
xor eax, eax
mov word [ebx + 4], ax
push 0x10099218
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x10045204
push 0x1009921c
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x10045204
push 0x10099220
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x10045204
xor eax, eax
mov word [ebx + 4], ax
push 0x10099224
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10045232
push 0x10099228
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10045232
push 0x1009922c
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x100452b6
push 0x10099230
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x1004525c
push 0x10099234
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x1004525c
push 0x10099238
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x100452b6
push 0x1009923c
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10045286
push 0x10099240
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10045286
push 0x10099244
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x100452b6
push 0x10099248
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x100452b0
push 0x10098660
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x100452b0
push 0x1009924c
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x100452b6
xor eax, eax
mov word [ebx + 4], ax
and dword [ebp - 0x81c], 0
mov eax, dword [0x103d71d4]
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x81c]
cmp ecx, eax
jge 0x10045372
mov eax, dword [0x103d71cc]
mov eax, dword [eax + ecx*4]
cmp byte [eax], 0x56
jne 0x10045354
xor esi, esi
mov dword [ebp - 0x880], esi
mov eax, dword [0x103d71cc]
mov ecx, dword [ebp - 0x81c]
push dword [eax + ecx*4]
call dword [sym.imp.MSVCR100.dll_strlen]
pop ecx
lea ecx, [eax - 1]
mov eax, dword [ebp - 0x880]
cmp eax, ecx
jae 0x10045345
mov ecx, dword [0x103d71cc]
mov edx, dword [ebp - 0x81c]
mov ecx, dword [ecx + edx*4]
movsx eax, byte [ecx + eax + 1]
push eax
lea eax, [ebx + 0x21]
push eax
call dword [sym.imp.MSVCR100.dll_strchr]
pop ecx
pop ecx
test eax, eax
je 0x10045361
inc dword [ebp - 0x880]
jmp 0x100452eb
inc dword [ebp - 0x860]
jmp 0x1004513e
test esi, esi
jne 0x10045361
xor eax, eax
mov word [ebx + 4], ax
jmp 0x10042b4c
push eax
lea eax, [ebx + 0x21]
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10045349
inc dword [ebp - 0x81c]
jmp 0x100452bd
mov edi, dword [sym.imp.MSVCR100.dll_strstr]
movzx eax, word [ebx]
mov esi, dword [ebp - 0x7f4]
cmp esi, eax
je 0x10045550
cmp byte [ebx + 8], 4
jne 0x10045550
push 0x10099250
lea eax, [ebx + 0x21]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x10045550
cmp dword [0x103ca9a4], 1
jne 0x1004541f
push 0x14
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x103cabec
call dword [sym.imp.mfc100.dll_Ordinal_6969]
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebx + 0xa]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x1004541f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1035fd98], eax
mov dword [ebp - 0x2c], 0
mov byte [ebp - 0x28], 0x36
xor eax, eax
lea edi, [ebp - 0x27]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x7fc], eax
mov dword [ebp - 0x808], 0x10
push dword [ebp - 0x808]
push dword [ebp - 0x7fc]
mov ecx, 0xf34f30
mov ecx, dword [ecx]
mov eax, 0x6bdcb0
call eax
mov edi, 0x10112128
cmp byte [ebx + 8], 2
jne 0x100454e2
cmp dword [0x103cb730], 1
jne 0x100454e2
mov eax, dword [0x101127c4]
cmp eax, 5
je 0x100454e2
cmp eax, 2
je 0x100454e2
lea eax, [ebx + 0x25]
push eax
push 0x3592e68
mov esi, dword [sym.imp.MSVCR100.dll_strcmp]
call esi
pop ecx
pop ecx
test eax, eax
je 0x100454e2
push 0x10098944
lea eax, [ebp - 0x38]
push eax
call esi
pop ecx
pop ecx
test eax, eax
jne 0x100454e2
and dword [ebp - 0x894], eax
mov esi, 0x33fc070
mov dword [ebp - 0x8a0], esi
cmp esi, 0x354cf10
jge 0x100454e2
cmp byte [esi], 0
je 0x10045859
lea eax, [ebx + 0x25]
mov dword [ebp - 0x7fc], eax
push eax
lea eax, [esi + 3]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x10045859
push dword [ebp - 0x7fc]
push 0x10099280
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
push edi
call fcn.100060db
add esp, 0x10
mov ebx, esi
call fcn.1003e52c
mov ebx, dword [ebp - 0x800]
mov al, byte [ebx + 8]
cmp al, 4
jne 0x1004586a
cmp dword [0x103c8090], 1
jne 0x1004586a
movzx eax, word [ebx]
cmp dword [ebp - 0x7f4], eax
je 0x10042b4c
push 0x1f4
call dword [sym.imp.mfc100.dll_Ordinal_265]
mov esi, eax
mov dword [esp], 0x10111f10
push 0x10098e90
push esi
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
push 0x11
push 0
push esi
call dword [sym.imp.WINMM.dll_PlaySoundA]
push esi
call dword [sym.imp.mfc100.dll_Ordinal_1296]
lea eax, [ebx + 0x21]
push eax
add ebx, 0xa
push ebx
push 0x10099294
jmp 0x10044eb0
movzx eax, word [ebx]
cmp esi, eax
je 0x100455e9
cmp byte [ebx + 8], 4
jne 0x100455e9
push str.GetMap
lea eax, [ebx + 0x21]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x100455e9
mov edi, dword [ebp - 0x810]
fld dword [edi + 0x1f74]
call fcn.100840a0
push eax
fld dword [edi + 0x1f6c]
call fcn.100840a0
push eax
push dword [0x3052d08]
push 0x10099264
lea eax, [ebp - 0x1c8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
mov eax, dword [0xf39a68]
mov eax, dword [eax + 0x444]
mov eax, dword [eax + 0x334]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x33c]
add ecx, 0x344
lea ebx, [ebp - 0x1c8]
call fcn.1003d9fe
mov ebx, dword [ebp - 0x800]
jmp 0x1004541f
movzx ecx, word [ebx]
cmp esi, ecx
je 0x1004541f
cmp byte [ebx + 8], 4
jne 0x10045669
lea eax, [ebx + 0x21]
cmp byte [eax], 0x23
jne 0x10045669
cmp byte [ebx + 0x22], 0x23
jne 0x10045669
push 0x10098564
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10042b4c
lea eax, [ebx + 0x23]
cmp byte [eax], 0x23
je 0x10045635
push eax
push 0x10128400
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
jmp 0x1004541f
lea eax, [ebx + 0x24]
push eax
lea eax, [ebx + 0xa]
push eax
push 0x10099270
lea eax, [ebp - 0x1c8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
lea eax, [ebp - 0x1c8]
push eax
push 0x10360048
call dword [sym.imp.MSVCR100.dll_strcpy]
add esp, 0x18
jmp 0x1004541f
cmp esi, ecx
je 0x1004541f
cmp byte [ebx + 8], 2
jne 0x1004541f
lea eax, [ebx + 0x21]
cmp byte [eax], 0x23
jne 0x1004541f
cmp byte [ebx + 0x22], 0x23
jne 0x1004541f
push 0x10098564
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10042b4c
push 0x32
push eax
lea eax, [ebp - 0x1c8]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
or dword [ebp - 0x7fc], 0xffffffff
xor esi, esi
mov dword [ebp - 0x8ac], esi
lea eax, [ebx + 0x23]
push eax
call dword [sym.imp.MSVCR100.dll_strlen]
pop ecx
cmp esi, eax
jae 0x100456f7
mov al, byte [ebx + esi + 0x23]
cmp al, 0x2d
je 0x100456e5
mov byte [ebp + esi - 0x1c8], al
inc esi
jmp 0x100456be
lea eax, [ebx + esi + 0x24]
push eax
call dword [sym.imp.MSVCR100.dll_atoi]
pop ecx
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x7fc], 0
jl 0x10042b4c
and dword [ebp - 0x820], 0
mov esi, 0x103d0f8c
mov eax, esi
call fcn.1000b961
cmp dword [ebp - 0x820], eax
jge 0x100457cd
push dword [ebp - 0x820]
mov ecx, esi
call dword [sym.imp.mfc100.dll_Ordinal_4554]
cmp eax, 1
jne 0x100457c2
push 0x64
push 0
lea eax, [ebp - 0x25c]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x64
lea eax, [ebp - 0x25c]
push eax
push 0
push dword [ebp - 0x820]
mov ecx, esi
call dword [sym.imp.mfc100.dll_Ordinal_5176]
lea eax, [ebp - 0x25c]
push eax
call fcn.10020de9
pop ecx
mov edi, eax
cmp edi, 0xffffffff
je 0x100457c2
mov eax, dword [edi + 0x50]
mov edx, dword [edi + 0xb8]
mov dword [ebp - 0x808], edx
sub eax, dword [edi + 0x4c]
cdq
mov ecx, 0x134
idiv ecx
mov dword [ebp - 0x810], eax
lea eax, [ebp - 0x1c8]
push eax
call dword [sym.imp.MSVCR100.dll_atoi]
pop ecx
cmp eax, dword [edi]
jne 0x100457c2
mov eax, dword [ebp - 0x808]
cmp dword [ebp - 0x810], eax
jle 0x100457c2
cmp eax, dword [ebp - 0x7fc]
jle 0x100457e0
inc dword [ebp - 0x820]
jmp 0x10045710
xor eax, eax
jne 0x100457e0
lea edi, [ebx + 0x21]
push 2
call fcn.1003bc30
jmp 0x1004562f
mov byte [0x10112128], 0
lea eax, [ebx + 0x21]
push eax
lea eax, [ebx + 0xa]
push eax
push 0x10099278
mov edi, 0x10112128
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
xor esi, esi
mov dword [ebp - 0x888], esi
mov eax, dword [0x103d73cc]
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x888]
cmp ecx, eax
jge 0x10045841
push edi
mov eax, dword [0x103d73c4]
push dword [eax + ecx*4]
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x10045424
inc dword [ebp - 0x888]
jmp 0x1004580b
test esi, esi
jne 0x10045424
push edi
mov esi, 0x103d73c4
call fcn.10001109
jmp 0x10045424
inc dword [ebp - 0x894]
add esi, 0x1cc
jmp 0x10045485
cmp al, 0xb
jne 0x10042b4c
push 0xa
add ebx, 0x21
push ebx
push 0x10112104
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
mov byte [0x1011210e], 0
jmp 0x10042b4c
mov edx, 0xe51
cmp word [ebx + 5], dx
jne 0x100459cb
push 0x12c
xor edi, edi
push edi
lea eax, [ebp - 0x388]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
mov dword [ebp - 0x858], edi
mov esi, dword [sym.imp.MSVCR100.dll_strcat]
cmp dword [ebp - 0x858], 0x32
jge 0x1004597e
push 0x10
lea eax, [ebp - 0x7f4]
push eax
mov eax, dword [ebp - 0x858]
movzx eax, byte [ebx + eax]
push eax
call dword [sym.imp.MSVCR100.dll__itoa]
lea eax, [ebp - 0x7f4]
push eax
call dword [sym.imp.MSVCR100.dll_strlen]
add esp, 0x10
cmp eax, 1
jne 0x1004591a
mov byte [ebp - 0x7f2], 0
mov al, byte [ebp - 0x7f4]
mov byte [ebp - 0x7f3], al
mov byte [ebp - 0x7f4], 0x30
mov dword [ebp - 0x840], edi
cmp dword [ebp - 0x840], 2
jge 0x10045952
mov eax, dword [ebp - 0x840]
lea eax, [ebp + eax - 0x7f4]
mov cl, byte [eax]
cmp cl, 0x61
jl 0x1004594a
cmp cl, 0x7a
jg 0x1004594a
movsx ecx, cl
sub ecx, 0x20
mov byte [eax], cl
inc dword [ebp - 0x840]
jmp 0x10045920
push 0x10099194
lea eax, [ebp - 0x388]
push eax
call esi
lea eax, [ebp - 0x7f4]
push eax
lea eax, [ebp - 0x388]
push eax
call esi
add esp, 0x10
inc dword [ebp - 0x858]
jmp 0x100458c4
lea eax, [ebp - 0x388]
push eax
call fcn.100060db
pop ecx
cmp dword [0x103d4d3c], 1
jne 0x10042b4c
mov eax, dword [ebx + 4]
cmp eax, 0xe5103
jne 0x100459a6
push 4
jmp 0x100459b3
cmp eax, 0xe5105
jne 0x10042b4c
push 6
movzx eax, word [ebx + 0x10]
push eax
push dword [ebx + 0xc]
mov ebx, dword [ebx + 0x12]
call fcn.1003e1ec
add esp, 0xc
jmp 0x10042b4c
mov edi, 0x270f
movzx edx, word [ebx]
cmp dx, di
jne 0x10045b54
mov edx, 0x2213
cmp cx, dx
jne 0x10045b54
mov al, al
mov dl, dl
mov ecx, ecx
mov ecx, ecx
cmp word [ebx + 8], 1
jne 0x10042b4c
movzx eax, word [ebx + 0x14]
cmp eax, 1
jne 0x10045aac
movzx eax, word [ebx + 0xc]
push eax
push 0x1009c8cc
mov edi, 0x10112128
push edi
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
push edi
call fcn.100060db
add esp, 0x10
cmp dword [0x103d4544], 1
jne 0x10045a4d
movzx eax, word [ebx + 0xc]
push eax
movzx eax, word [ebx + 0xa]
push eax
push 1
movzx eax, word [ebx + 0x14]
push eax
call fcn.1003d911
add esp, 0x10
movzx eax, word [ebx + 0xa]
mov dword [0x103c24c4], eax
movzx eax, word [ebx + 0xc]
mov dword [0x103c24c0], eax
push 0x7d
push 0
lea eax, [ebp - 0xcc]
push eax
call sub.MSVCR100.dll_memset
push dword [ebx + 0xa]
push 0x37b33c8
push 0x100992a0
lea eax, [ebp - 0xcc]
push eax
call esi
add esp, 0x1c
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x271a
push dword [0x100f415c]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x10042b4c
cmp eax, 2
jne 0x10042b4c
cmp dword [0x103d4544], 1
jne 0x10042b4c
xor eax, eax
cmp dword [0x103c24c4], eax
jne 0x10045b33
cmp dword [0x103c24c0], eax
jne 0x10045b33
movzx ecx, word [ebx + 0xa]
mov dword [0x103c24c4], ecx
movzx ecx, word [ebx + 0xc]
mov dword [0x103c24c0], ecx
push 0x7d
push eax
lea eax, [ebp - 0x408]
push eax
call sub.MSVCR100.dll_memset
push dword [ebx + 0xa]
push 0x37b33c8
push 0x100992a0
lea eax, [ebp - 0x408]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
lea eax, [ebp - 0x408]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x271a
push dword [0x100f415c]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x103d4548]
imul eax, eax, 0x3e8
inc eax
push 0x1003e4f6
push eax
mov eax, dword [0x10114474]
add eax, 0x281c
jmp 0x10042bbd
mov edx, dword [ebp - 0x7f4]
cmp esi, edx
jne 0x10042b4c
cmp eax, 0x180091
je 0x10042b4c
cmp esi, edx
jne 0x10042b4c
cmp ecx, 0x69
jne 0x10045c2a
cmp dword [0x3592ee8], 0
jne 0x10045bcc
cmp dword [ebx + 0xc], 0
jle 0x10045bcc
cmp dword [0x103d2c14], 1
jne 0x10045ba3
push edx
push 0x10095554
call fcn.10006394
pop ecx
pop ecx
cmp dword [0x103d453c], 1
jne 0x10045bcc
mov eax, 0x3e8
push eax
push eax
cmp dword [0x103d4540], 0
jne 0x10045bc0
push 2
jmp 0x10045bc2
push 1
push 4
call fcn.1003d911
add esp, 0x10
cmp dword [0x1035fef4], 1
jne 0x10042b4c
cmp dword [0x103cb760], 1
jne 0x10042b4c
mov ebx, dword [ebx + 0xc]
test ebx, ebx
jle 0x10042b4c
mov eax, dword [0x3592ee8]
sub eax, ebx
cmp eax, dword [0x103cb75c]
jl 0x10042b4c
cmp dword [0x101127c4], 2
je 0x10042b4c
cmp dword [0x103cb4b8], 1
jne 0x10045c1e
push 2
jmp 0x10045c20
push 0
push 0x100992a8
jmp 0x10043a78
cmp esi, edx
jne 0x10042b4c
cmp ecx, 0x6b
jne 0x10042b4c
imul edx, edx, 0x1cc
mov cl, byte [ebx + 8]
mov byte [edx + 0x33fc099], cl
mov ecx, dword [ebx + 0x2c8]
mov dword [edx + 0x33fc129], ecx
cmp dword [0x103c2994], 1
jne 0x10042b4c
cmp dword [0x1035fef4], 1
jne 0x10042b4c
movzx eax, byte [ebx + 8]
cmp eax, dword [0x103c2998]
jne 0x10042b4c
push 0x100992c0
call fcn.100060db
pop ecx
mov ecx, dword [0x1012fca4]
call fcn.10074697
call fcn.10068c61
jmp 0x10042b4c
mov dword [ebp - 4], 0xfffffffe
call fcn.10084208
ret