Function at 0x1006c610
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
cmp dword [0x1012d3e4], ebx
je 0x1006dda4
push esi
mov esi, dword [0x35f30a4]
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xd8], ebx
cmp esi, ebx
je 0x1006dda3
push edi
mov dword [ebp - 0xc4], ebx
call fcn.10006a90
test eax, eax
je 0x1006c90f
add esi, 0x53c
mov dword [ebp - 0xc0], esi
nop
mov eax, dword [ebp - 0xc0]
mov edi, dword [eax]
mov dword [ebp - 0xc8], edi
test edi, edi
jne 0x1006c69d
inc dword [ebp - 0xd0]
jmp 0x1006c8f4
mov ecx, 0x100a12cc
mov eax, 0x1011c308
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c6c7
test dl, dl
je 0x1006c6c3
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c6c7
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c6a7
xor eax, eax
jmp 0x1006c6cc
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006c744
mov eax, dword [0x100b1b28]
test eax, eax
jle 0x1006c785
mov ebx, dword [ebp - 0xc8]
mov esi, 0x100b1808
mov edi, eax
lea ebx, [ebx]
mov ecx, esi
lea eax, [ebx + 0x64]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c715
test dl, dl
je 0x1006c711
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c715
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c6f5
xor eax, eax
jmp 0x1006c71a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006c730
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ecx + 0xd4c]
add dword [ebp - 0xd4], edx
add esi, 0x28
dec edi
jne 0x1006c6f0
mov ebx, dword [ebp - 0xc4]
mov edi, dword [ebp - 0xc8]
jmp 0x1006c785
mov ecx, 0x1011c308
lea eax, [edi + 0x64]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c770
test dl, dl
je 0x1006c76c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c770
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c750
xor eax, eax
jmp 0x1006c775
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006c785
mov eax, dword [edi + 0xd4c]
add dword [ebp - 0xd4], eax
mov ecx, 0x100a12c0
mov eax, 0x1011c270
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c7b0
test dl, dl
je 0x1006c7ac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c7b0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c790
xor eax, eax
jmp 0x1006c7b5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006c827
mov eax, dword [0x100b1800]
test eax, eax
jle 0x1006c865
mov edi, dword [ebp - 0xc8]
mov esi, 0x100b14e0
mov ebx, eax
mov ecx, esi
lea eax, [edi + 0x64]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c7f8
test dl, dl
je 0x1006c7f4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c7f8
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c7d8
xor eax, eax
jmp 0x1006c7fd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006c813
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ecx + 0xd4c]
add dword [ebp - 0xcc], edx
add esi, 0x28
dec ebx
jne 0x1006c7d3
mov ebx, dword [ebp - 0xc4]
mov edi, dword [ebp - 0xc8]
jmp 0x1006c865
mov ecx, 0x1011c270
lea eax, [edi + 0x64]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c850
test dl, dl
je 0x1006c84c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c850
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c830
xor eax, eax
jmp 0x1006c855
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006c865
mov eax, dword [edi + 0xd4c]
add dword [ebp - 0xcc], eax
lea esi, [edi + 0x64]
push 0x10097ca8
push esi
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1006c881
inc dword [ebp - 0xd8]
cmp dword [edi + 0xdb4], 0
jne 0x1006c8f4
cmp dword [0x10191a08], 1
jne 0x1006c8f4
push 0x100a12b4
push esi
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
jne 0x1006c8f4
push 0x100a12b0
push esi
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
jne 0x1006c8e9
mov ecx, 0x100a12b0
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006c8e0
test dl, dl
je 0x1006c8dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006c8e0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006c8c0
xor eax, eax
jmp 0x1006c8e5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006c8f4
push 0
push ebx
call fcn.10038350
add esp, 8
add dword [ebp - 0xc0], 4
inc ebx
mov dword [ebp - 0xc4], ebx
call fcn.10006a90
cmp ebx, eax
jb 0x1006c680
cmp dword [0x101919f0], 1
jne 0x1006ca18
cmp dword [0x33cf71a], 0
je 0x1006ca18
cmp dword [ebp - 0xd0], 2
jne 0x1006ca18
cmp dword [0x1011cd68], 6
je 0x1006ca18
xor eax, eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc4], eax
call fcn.10006a90
test eax, eax
je 0x1006ca18
mov edi, dword [ebp - 0xbc]
add edi, 0x53c
lea ebx, [ebx]
mov esi, dword [edi]
xor ebx, ebx
test esi, esi
je 0x1006c9dc
cmp dword [0x10194878], 1
jne 0x1006c9a5
mov eax, dword [esi + 0xd54]
test eax, eax
jle 0x1006c9a5
cmp eax, 5
jg 0x1006c9a5
cmp dword [esi + 0xe44], ebx
jg 0x1006c9a0
cmp dword [esi + 0xe5c], ebx
jle 0x1006c9a5
mov ebx, 1
lea ecx, [esi + 0x64]
push ecx
call fcn.100361f0
add esp, 4
test al, al
je 0x1006c9dc
push 0
push esi
call fcn.10049e80
add esp, 8
test eax, eax
jg 0x1006c9dc
push esi
call fcn.10036d50
add esp, 4
test al, al
je 0x1006c9dc
cmp ebx, 1
je 0x1006c9dc
inc dword [ebp - 0xc0]
mov esi, dword [ebp - 0xc4]
inc esi
mov dword [ebp - 0xc4], esi
add edi, 4
call fcn.10006a90
cmp esi, eax
jb 0x1006c970
cmp dword [ebp - 0xc0], 2
jle 0x1006ca18
call fcn.100696d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
mov esi, 1
cmp dword [0x101956dc], esi
jne 0x1006cdc3
xor eax, eax
cmp dword [ebp - 0xd0], eax
jne 0x1006cdc3
cmp dword [0x1011cd68], 6
je 0x1006cdc3
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc8], eax
call fcn.10006a90
test eax, eax
je 0x1006cdc3
mov edx, dword [ebp - 0xbc]
mov edi, dword [sym.imp.MSVCR100.dll_strstr]
add edx, 0x53c
mov dword [ebp - 0xc0], edx
mov eax, dword [ebp - 0xc0]
mov ebx, dword [eax]
test ebx, ebx
je 0x1006cd82
lea eax, [ebx + 0x64]
lea edx, [ebp - 0x38]
sub edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, esi
test cl, cl
jne 0x1006ca90
mov ecx, 0x10094454
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006cac3
test dl, dl
je 0x1006cabf
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006cac3
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006caa3
xor eax, eax
jmp 0x1006cac8
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
mov ecx, 0x1009444c
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006caf8
test dl, dl
je 0x1006caf4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006caf8
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cad8
xor eax, eax
jmp 0x1006cafd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
mov ecx, 0x10094440
lea eax, [ebp - 0x38]
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006cb30
test dl, dl
je 0x1006cb2c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006cb30
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cb10
xor eax, eax
jmp 0x1006cb35
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
mov ecx, 0x10094434
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006cb65
test dl, dl
je 0x1006cb61
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006cb65
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cb45
xor eax, eax
jmp 0x1006cb6a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
mov ecx, 0x10097be0
lea eax, [ebp - 0x38]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006cba0
test dl, dl
je 0x1006cb9c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006cba0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cb80
xor eax, eax
jmp 0x1006cba5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
mov ecx, 0x10097bd8
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006cbd5
test dl, dl
je 0x1006cbd1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006cbd5
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cbb5
xor eax, eax
jmp 0x1006cbda
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
mov ecx, 0x10094420
lea eax, [ebp - 0x38]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006cc10
test dl, dl
je 0x1006cc0c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006cc10
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cbf0
xor eax, eax
jmp 0x1006cc15
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
mov ecx, 0x10094414
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006cc45
test dl, dl
je 0x1006cc41
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006cc45
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cc25
xor eax, eax
jmp 0x1006cc4a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
mov ecx, 0x10097bd0
lea eax, [ebp - 0x38]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006cc80
test dl, dl
je 0x1006cc7c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006cc80
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cc60
xor eax, eax
jmp 0x1006cc85
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
mov ecx, 0x10097bc4
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006ccb5
test dl, dl
je 0x1006ccb1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006ccb5
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cc95
xor eax, eax
jmp 0x1006ccba
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
mov ecx, 0x10097bb8
lea eax, [ebp - 0x38]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006ccf0
test dl, dl
je 0x1006ccec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006ccf0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006ccd0
xor eax, eax
jmp 0x1006ccf5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
lea ecx, [ebp - 0x38]
push 0x1009440c
push ecx
call edi
add esp, 8
test eax, eax
jne 0x1006cd6d
mov ecx, 0x10094400
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006cd33
test dl, dl
je 0x1006cd2f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006cd33
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cd13
xor eax, eax
jmp 0x1006cd38
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006cd6d
mov ecx, 0x100943f4
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006cd64
test dl, dl
je 0x1006cd60
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006cd64
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cd44
xor eax, eax
jmp 0x1006cd69
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006cd82
push 0
push ebx
call fcn.10049e80
add esp, 8
test eax, eax
jg 0x1006cd82
add dword [ebp - 0xc4], esi
mov ebx, dword [ebp - 0xc8]
add dword [ebp - 0xc0], 4
add ebx, esi
mov dword [ebp - 0xc8], ebx
call fcn.10006a90
cmp ebx, eax
jb 0x1006ca75
cmp dword [ebp - 0xc4], 2
jle 0x1006cdc3
call fcn.10069890
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
cmp dword [0x10194404], esi
jne 0x1006cdf4
cmp dword [ebp - 0xd8], 0
jne 0x1006cdf4
push 0
push 0x100a1298
call fcn.10069f30
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
cmp dword [0x10194408], esi
jne 0x1006ce3d
fld dword [0x33cbe3c]
fdiv dword [0x33cbe40]
fild dword [0x1019440c]
fdiv qword [0x10097da0]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1006ce3d
push 0
push 0x100a1290
call fcn.10069f30
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
cmp dword [0x10194000], esi
jne 0x1006ce73
mov edx, dword [ebp - 0xd4]
cmp edx, dword [0x101943ec]
jg 0x1006ce73
push 0
push 0x100a1278
call fcn.10069f30
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
cmp dword [0x10194004], esi
jne 0x1006cea9
mov eax, dword [ebp - 0xcc]
cmp eax, dword [0x101943f0]
jg 0x1006cea9
push 0
push 0x100a1260
call fcn.10069f30
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
cmp dword [0x1019400c], esi
jne 0x1006cee3
cmp dword [ebp - 0xd0], 0
jne 0x1006cee3
cmp dword [0x1011cd68], 6
je 0x1006cee3
push 0
push 0x100a1248
call fcn.10069f30
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
mov ebx, 0x32
lea edi, [ebx - 0x28]
cmp dword [0x101947dc], esi
jne 0x1006cf21
mov eax, dword [0x35f30a0]
xor ecx, ecx
lea edx, [eax + 0x53c]
mov eax, dword [edx]
test eax, eax
je 0x1006cf17
cmp dword [eax + 0xe00], ebx
jne 0x1006cf17
cmp word [eax + 0xf64], di
jbe 0x1006cf86
add ecx, esi
add edx, 4
cmp ecx, 0xf
jl 0x1006cf00
cmp dword [0x1019619c], esi
jne 0x1006cfa6
mov ecx, dword [0x10196060]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, esi
jne 0x1006cf5c
push 0x177d
mov ecx, 0x10196040
call sub.mfc100.dll_Ordinal_4785
mov edx, dword [eax + 0x20]
push 0
push 0
push 0xf1
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0x100a123c
mov dword [0x1019619c], 0
call fcn.10069f30
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
push 0
push 0x100a121c
call fcn.10069f30
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
cmp dword [0x10194008], esi
jne 0x1006d1c5
mov eax, dword [0x361f6dc]
mov eax, dword [eax + 0x2a58]
cmp eax, 4
je 0x1006cfcb
cmp eax, 0xb
jne 0x1006d1c5
mov ecx, dword [0x35f30a0]
mov eax, dword [ecx + 0x56c]
test eax, eax
je 0x1006cfed
mov edx, dword [eax + 0xd4c]
cmp edx, dword [0x101943f4]
jg 0x1006d1c5
xor ebx, ebx
call fcn.10006a90
test eax, eax
je 0x1006d195
mov eax, dword [ebp - 0xbc]
add eax, 0x53c
mov dword [ebp - 0xbc], eax
lea ecx, [ecx]
mov ecx, dword [ebp - 0xbc]
mov edi, dword [ecx]
test edi, edi
je 0x1006d17f
lea esi, [edi + 0x64]
mov ecx, 0x1009eb2c
mov eax, esi
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d050
test dl, dl
je 0x1006d04c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d050
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d030
xor eax, eax
jmp 0x1006d055
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d16c
mov ecx, 0x1009eb24
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d084
test dl, dl
je 0x1006d080
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d084
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d064
xor eax, eax
jmp 0x1006d089
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d16c
mov ecx, 0x1009eb1c
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d0b8
test dl, dl
je 0x1006d0b4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d0b8
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d098
xor eax, eax
jmp 0x1006d0bd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d16c
mov ecx, 0x1009eb14
mov eax, esi
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d0f0
test dl, dl
je 0x1006d0ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d0f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d0d0
xor eax, eax
jmp 0x1006d0f5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d16c
mov ecx, 0x1009eb0c
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d120
test dl, dl
je 0x1006d11c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d120
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d100
xor eax, eax
jmp 0x1006d125
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d16c
mov ecx, 0x1009eb04
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d150
test dl, dl
je 0x1006d14c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d150
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d130
xor eax, eax
jmp 0x1006d155
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d16c
push 0x1009eaf4
push esi
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1006d17a
mov edx, dword [edi + 0xd4c]
cmp edx, dword [0x101943f4]
jg 0x1006d1b5
mov esi, 1
add dword [ebp - 0xbc], 4
add ebx, esi
call fcn.10006a90
cmp ebx, eax
jb 0x1006d010
push 0
push 0x100a1204
call fcn.10069f30
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
push 0
push ebx
call fcn.10038350
add esp, 8
mov esi, 1
cmp dword [0x10192ea4], esi
jne 0x1006d1da
push 0x100956e0
call fcn.10045e50
add esp, 4
cmp dword [0x10192ea0], esi
jne 0x1006d1ef
push 0x1009ed94
call fcn.10045e50
add esp, 4
cmp dword [0x10192e9c], esi
jne 0x1006d204
push 0x1009eda0
call fcn.10045e50
add esp, 4
cmp dword [0x10192fd4], esi
jne 0x1006d219
push 0x10095654
call fcn.10045cc0
add esp, 4
cmp dword [0x10192fd8], esi
jne 0x1006d22e
push 0x1009564c
call fcn.10045cc0
add esp, 4
cmp dword [0x10192fdc], esi
jne 0x1006d243
push 0x10095644
call fcn.10045cc0
add esp, 4
cmp dword [0x101931b0], esi
jne 0x1006d258
push 0x1009ed7c
call fcn.10045cc0
add esp, 4
cmp dword [0x101931ac], esi
jne 0x1006d26d
push 0x1009ed84
call fcn.10045cc0
add esp, 4
cmp dword [0x1011cd68], 5
je 0x1006dda2
cmp dword [0x10197254], esi
je 0x1006d292
cmp dword [0x10197258], esi
je 0x1006d292
cmp dword [0x10197268], esi
jne 0x1006d297
call fcn.1005a680
cmp dword [0x10192e8c], esi
jne 0x1006d71f
cmp dword [0x1011d1ac], 0
jle 0x1006d71f
cmp byte [0x1012d3fa], 0
jne 0x1006d71f
mov eax, 0x1012d4a4
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006d2c5
sub eax, edx
je 0x1006d451
mov edi, dword [sym.imp.MSVCR100.dll_strtok]
push 0x10097d4c
push 0x1012d4a4
xor ebx, ebx
call edi
add esp, 8
test eax, eax
je 0x1006d451
lea esi, [ebp - 0x54]
mov edx, esi
sub edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x1006d300
push 0x10097d4c
push 0
inc ebx
add esi, 0x14
call edi
add esp, 8
test eax, eax
jne 0x1006d2f6
cmp ebx, 4
lea ebx, [eax + 1]
jne 0x1006d456
mov edi, dword [0x101938f4]
cmp dword [0x10192e98], ebx
je 0x1006d33c
cmp edi, ebx
jne 0x1006d394
mov esi, 0x35f5170
mov eax, dword [esi]
test eax, eax
je 0x1006d381
cmp byte [eax + 0x330], 0
jbe 0x1006d381
lea ecx, [ebp - 0x54]
add eax, 0x338
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d378
test dl, dl
je 0x1006d374
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d378
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d358
xor eax, eax
jmp 0x1006d37d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d3f2
add esi, 4
cmp esi, 0x35f518c
jl 0x1006d341
cmp edi, ebx
jne 0x1006d456
mov eax, dword [0x10192ecc]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
xor esi, esi
push esi
push esi
push 0x18b
push eax
call edi
test eax, eax
jle 0x1006d456
mov edx, dword [0x10192ecc]
lea ecx, [ebp - 0x88]
push ecx
push esi
push 0x189
push edx
call edi
lea ecx, [ebp - 0x54]
lea eax, [ebp - 0x88]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d400
test dl, dl
je 0x1006d3ee
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d400
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d3d2
xor eax, eax
jmp 0x1006d405
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x40]
push edx
jmp 0x1006d42e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d422
mov eax, dword [0x10192ecc]
push 0
push 0
push 0x18b
push eax
add esi, ebx
call edi
cmp esi, eax
jl 0x1006d3b3
jmp 0x1006d456
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.MSVCR100.dll_atoi]
add esp, 4
push eax
call fcn.10069b10
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
mov ebx, 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
mov esi, edx
shr esi, 6
mov edx, esi
sub edx, dword [0x1012d394]
cmp edx, dword [0x10192ea8]
jb 0x1006d5ad
cmp dword [0x1011cd68], 4
je 0x1006d5ad
cmp dword [0x10191854], ebx
je 0x1006d49b
cmp dword [0x10191928], ebx
jne 0x1006d4f1
fld dword [0x1012d2ac]
mov eax, dword [0x361f6dc]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fld dword [eax + 0x1f6c]
fstp dword [esp + 4]
fld dword [eax + 0x1f64]
fstp dword [esp]
call fcn.100081f0
fstp dword [ebp - 0xbc]
add esp, 0x10
fld dword [ebp - 0xbc]
fild dword [0x1012d2cc]
fcompp
fnstsw ax
test ah, 5
jnp 0x1006dda2
cmp dword [0x10191930], ebx
jne 0x1006d541
fld dword [0x1012d2ac]
mov eax, dword [0x361f6dc]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fld dword [eax + 0x1f6c]
fstp dword [esp + 4]
fld dword [eax + 0x1f64]
fstp dword [esp]
call fcn.100081f0
fcomp qword [0x10098bb0]
add esp, 0x10
fnstsw ax
test ah, 0x41
je 0x1006dda2
cmp dword [0x10191bc8], ebx
jne 0x1006d56e
cmp dword [0x10191854], ebx
jne 0x1006d56e
mov eax, dword [0x361f6dc]
mov ecx, dword [eax + 0x1d24]
push 0xaf2ae4
push ecx
call fcn.10006f00
add esp, 8
test eax, eax
jne 0x1006d595
push ebx
call fcn.10046fa0
push 0
mov dword [0x1012d394], esi
call fcn.10060310
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov byte [0x1012d207], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
xor esi, esi
nop
lea edx, [ebp - 0x24]
push edx
push esi
call fcn.10006ba0
add esp, 8
mov ecx, 0x1009e394
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d5e5
test dl, dl
je 0x1006d5e1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d5e5
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d5c5
xor eax, eax
jmp 0x1006d5ea
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d6fb
mov ecx, 0x1009e364
lea eax, [ebp - 0x24]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d620
test dl, dl
je 0x1006d61c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d620
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d600
xor eax, eax
jmp 0x1006d625
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d6fb
mov ecx, 0x1009e358
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d655
test dl, dl
je 0x1006d651
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d655
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d635
xor eax, eax
jmp 0x1006d65a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d6fb
mov ecx, 0x1009e370
lea eax, [ebp - 0x24]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d690
test dl, dl
je 0x1006d68c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d690
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d670
xor eax, eax
jmp 0x1006d695
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d6fb
mov ecx, 0x1009e37c
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d6c1
test dl, dl
je 0x1006d6bd
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d6c1
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d6a1
xor eax, eax
jmp 0x1006d6c6
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d6fb
mov ecx, 0x1009e34c
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d6f2
test dl, dl
je 0x1006d6ee
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d6f2
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d6d2
xor eax, eax
jmp 0x1006d6f7
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006d70f
lea eax, [ebp - 0x24]
push eax
call fcn.10006cf0
add esp, 4
test eax, eax
je 0x1006d865
add esi, ebx
cmp esi, 0xa
jl 0x1006d5b0
mov esi, 1
cmp dword [0x101919fc], esi
jne 0x1006d880
cmp dword [0x1012d3b0], 0xffffffff
je 0x1006d880
cmp dword [0x1011d1ac], 0
jle 0x1006d880
cmp dword [0x1011cd68], 4
je 0x1006d880
cmp byte [0x1012d3fa], 0
jne 0x1006d880
push 0x100a0650
call fcn.10006cf0
add esp, 4
test eax, eax
jne 0x1006d880
mov eax, dword [0x35f5170]
add eax, 0x338
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006d781
sub eax, edx
je 0x1006d880
cmp dword [0x10191854], esi
je 0x1006d7a0
cmp dword [0x10191928], esi
jne 0x1006d7f6
fld dword [0x1012d2ac]
mov eax, dword [0x361f6dc]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fld dword [eax + 0x1f6c]
fstp dword [esp + 4]
fld dword [eax + 0x1f64]
fstp dword [esp]
call fcn.100081f0
fstp dword [ebp - 0xbc]
add esp, 0x10
fld dword [ebp - 0xbc]
fild dword [0x1012d2cc]
fcompp
fnstsw ax
test ah, 5
jnp 0x1006dda2
cmp dword [0x10191930], esi
jne 0x1006d846
fld dword [0x1012d2ac]
mov eax, dword [0x361f6dc]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fld dword [eax + 0x1f6c]
fstp dword [esp + 4]
fld dword [eax + 0x1f64]
fstp dword [esp]
call fcn.100081f0
fcomp qword [0x10098bb0]
add esp, 0x10
fnstsw ax
test ah, 0x41
je 0x1006dda2
push esi
call fcn.10046fa0
add esp, 4
call fcn.1005f780
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov dword [0x1012d394], 0xffff8ad0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x361f6dc]
mov eax, dword [ecx + 0x2a58]
cmp eax, 6
jne 0x1006d8e6
xor esi, esi
lea edx, [ebp - 0x24]
push edx
push esi
call fcn.10006ba0
add esp, 8
lea ecx, [ebp - 0x24]
mov eax, 0x100956e0
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d8c8
test dl, dl
je 0x1006d8c4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d8c8
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d8a8
xor eax, eax
jmp 0x1006d8cd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d8d9
inc esi
cmp esi, 0xa
jl 0x1006d893
jmp 0x1006d918
cmp dword [ebp - 0xc], 0xbb8
ja 0x1006d90e
push 1
jmp 0x1006d910
cmp eax, 5
je 0x1006d918
cmp dword [0x1011cd68], 6
je 0x1006d918
sub eax, 3
neg eax
sbb eax, eax
and eax, 0x32
add eax, 0x384
cmp dword [0x33cbdd8], eax
jl 0x1006d90e
push esi
jmp 0x1006d910
push 0
call fcn.10046fa0
add esp, 4
movzx eax, byte [0x33cbd84]
mov ecx, dword [0x1019d4b4]
xor ebx, ebx
push ebx
push ebx
push 0x1004
push ecx
mov dword [ebp - 0xbc], eax
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jle 0x1006db14
push ebx
mov ecx, 0x1019d494
call sub.mfc100.dll_Ordinal_4554
cmp eax, 1
jne 0x1006daf5
push 0x64
lea edx, [ebp - 0xb8]
push 0
push edx
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x64
lea eax, [ebp - 0xb8]
push eax
push 0
push ebx
mov ecx, 0x1019d494
call sub.mfc100.dll_Ordinal_5176
push 0x14
lea ecx, [ebp - 0x18]
push ecx
push 2
push ebx
mov ecx, 0x1019d494
call sub.mfc100.dll_Ordinal_5176
lea edx, [ebp - 0xb8]
push edx
call fcn.100236f0
mov esi, eax
add esp, 4
cmp esi, 0xffffffff
je 0x1006daf5
mov al, byte [esi + 0x20]
movzx ecx, al
cmp ecx, dword [ebp - 0xbc]
jle 0x1006d9c3
cmp al, 0xc8
jne 0x1006daf5
mov ecx, dword [esi + 0x54]
sub ecx, dword [esi + 0x50]
mov eax, 0xb81702e1
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, dword [esi + 0xd0]
je 0x1006daf5
mov ecx, 0x1019e904
xor edi, edi
call fcn.10001240
test eax, eax
jle 0x1006da22
jmp 0x1006da00
mov ecx, dword [0x1019e904]
mov edx, dword [ecx + edi*4]
mov eax, dword [edx]
cmp eax, dword [esi]
je 0x1006dabf
mov ecx, 0x1019e904
inc edi
call fcn.10001240
cmp edi, eax
jl 0x1006da00
push ebx
push esi
call fcn.1006bb10
add esp, 8
cmp byte [0x1012d413], 0
jne 0x1006dca2
cmp byte [0x1012d417], 0
jne 0x1006dca2
push 0x32
lea edx, [ebp - 0x88]
push 0
push edx
call sub.MSVCR100.dll_memset
push 0x32
lea eax, [ebp - 0x38]
push 0
push eax
call sub.MSVCR100.dll_memset
mov ecx, dword [0x35ec500]
push ecx
lea edx, [ebp - 0x88]
push edx
call fcn.10007970
add esp, 0x20
push 0x1e
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x10192d2c
call sub.mfc100.dll_Ordinal_6969
mov ecx, 0x1009462c
lea eax, [ebp - 0x88]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006db9a
test dl, dl
je 0x1006dab8
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006db9a
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006da94
xor eax, eax
jmp 0x1006db9f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1019ece4]
mov edx, dword [ecx + edi*4]
sub eax, dword [edx]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.MSVCR100.dll_atoi]
imul eax, eax, 0xea60
add esp, 4
cmp dword [ebp - 0xd8], eax
jae 0x1006da22
mov ecx, dword [0x1019d4b4]
push 0
push 0
push 0x1004
push ecx
inc ebx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp ebx, eax
jl 0x1006d943
cmp byte [0x1012d413], 1
jne 0x1006da2c
push 0x1f4
mov byte [0x1012d413], 0
call sub.mfc100.dll_Ordinal_265
push 0x33cbd50
push 0x1011c4d0
mov esi, eax
push str._s_s.txt
push esi
call dword [sym.imp.MSVCR100.dll_sprintf]
push esi
call fcn.10055800
fld dword [0x10191920]
fst dword [0x1012d2a8]
push 1
fstp dword [0x1012d2b0]
push 0x100a11f0
fld dword [0x10191924]
fst dword [0x1012d2ac]
fstp dword [0x1012d2b4]
call fcn.10069f30
push esi
call sub.mfc100.dll_Ordinal_1296
add esp, 0x24
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006dca2
mov esi, dword [sym.imp.MSVCR100.dll_strstr]
lea ecx, [ebp - 0x38]
push 0x10099ec0
push ecx
call esi
add esp, 8
test eax, eax
lea eax, [ebp - 0x38]
je 0x1006dc13
sub eax, 2
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006dbc8
sub eax, edx
lea edx, [ebp - 0x34]
push edx
mov byte [ebp + eax - 0x38], cl
call dword [sym.imp.MSVCR100.dll_atoi]
add eax, 0x59d8
add esp, 4
cmp eax, dword [0x35ec500]
je 0x1006dca2
push 1
push 0x100a11d0
call fcn.10069f30
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
push 0x10094db0
push eax
call esi
add esp, 8
test eax, eax
je 0x1006dc56
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x38]
push edx
call esi
add esp, 8
test eax, eax
jne 0x1006dca2
push 1
push 0x100a11d0
call fcn.10069f30
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x38]
push 0x10094d90
push eax
call esi
add esp, 8
test eax, eax
jne 0x1006dc22
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0x88]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006dc96
test dl, dl
je 0x1006dc8d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006dc96
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006dc71
xor eax, eax
test eax, eax
jmp 0x1006dbed
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jmp 0x1006dbed
xor esi, esi
cmp byte [0x100b1f0d], 0
jbe 0x1006dda2
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, 0x100b1d9a
lea esp, [esp]
call edi
sub eax, dword [esi*4 + 0x100b1e78]
cmp eax, 0x2710
jb 0x1006dcf3
push ebx
call fcn.10006cf0
add esp, 4
test eax, eax
je 0x1006dd13
movzx ecx, word [esi*2 + 0x100b1e62]
imul ecx, ecx, 0x3e8
cmp dword [eax + 0x354], ecx
jl 0x1006dd13
movzx edx, byte [0x100b1f0d]
inc esi
add ebx, 0x14
cmp esi, edx
jl 0x1006dcc0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret
call edi
mov dword [esi*4 + 0x100b1e78], eax
cmp byte [esi + 0x100b1c00], 1
jne 0x1006dd57
mov edi, dword [0x361f6dc]
fld dword [edi + 0x1f6c]
call fcn.10085e30
fld dword [edi + 0x1f64]
push eax
call fcn.10085e30
push eax
mov eax, dword [0x35ec500]
push eax
push 0x100a11c4
lea ecx, [ebp - 0x88]
push ecx
jmp 0x1006dd7f
mov ecx, dword [0x35ec500]
lea eax, [esi + esi*4]
add eax, eax
add eax, eax
lea edx, [eax + 0x100b1cd2]
push edx
lea eax, [eax + 0x100b1c0a]
push eax
push ecx
push str._d._s._s
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
lea eax, [ebp - 0x88]
lea ecx, [esi + esi*4]
push eax
lea edx, [ecx*4 + 0x100b1b38]
push edx
call fcn.1003b150
add esp, 8
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.10085dc6
mov esp, ebp
pop ebp
ret