Function at 0x1006cf30
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
cmp dword [0x1012d3e4], ebx
je 0x1006e714
push esi
mov esi, dword [0x2f99460]
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xd8], ebx
cmp esi, ebx
je 0x1006e713
push edi
mov dword [ebp - 0xc4], ebx
call fcn.10006a60
test eax, eax
je 0x1006d22f
add esi, 0x53c
mov dword [ebp - 0xc0], esi
nop
mov eax, dword [ebp - 0xc0]
mov edi, dword [eax]
mov dword [ebp - 0xc8], edi
test edi, edi
jne 0x1006cfbd
inc dword [ebp - 0xd0]
jmp 0x1006d214
mov ecx, 0x100a1384
mov eax, 0x1011c308
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006cfe7
test dl, dl
je 0x1006cfe3
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006cfe7
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006cfc7
xor eax, eax
jmp 0x1006cfec
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006d064
mov eax, dword [0x100b1b28]
test eax, eax
jle 0x1006d0a5
mov ebx, dword [ebp - 0xc8]
mov esi, 0x100b1808
mov edi, eax
lea ebx, [ebx]
mov ecx, esi
lea eax, [ebx + 0x64]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d035
test dl, dl
je 0x1006d031
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d035
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d015
xor eax, eax
jmp 0x1006d03a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006d050
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ecx + 0xd4c]
add dword [ebp - 0xd4], edx
add esi, 0x28
dec edi
jne 0x1006d010
mov ebx, dword [ebp - 0xc4]
mov edi, dword [ebp - 0xc8]
jmp 0x1006d0a5
mov ecx, 0x1011c308
lea eax, [edi + 0x64]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d090
test dl, dl
je 0x1006d08c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d090
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d070
xor eax, eax
jmp 0x1006d095
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006d0a5
mov eax, dword [edi + 0xd4c]
add dword [ebp - 0xd4], eax
mov ecx, 0x100a1378
mov eax, 0x1011c270
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d0d0
test dl, dl
je 0x1006d0cc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d0d0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d0b0
xor eax, eax
jmp 0x1006d0d5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006d147
mov eax, dword [0x100b1800]
test eax, eax
jle 0x1006d185
mov edi, dword [ebp - 0xc8]
mov esi, 0x100b14e0
mov ebx, eax
mov ecx, esi
lea eax, [edi + 0x64]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d118
test dl, dl
je 0x1006d114
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d118
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d0f8
xor eax, eax
jmp 0x1006d11d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006d133
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ecx + 0xd4c]
add dword [ebp - 0xcc], edx
add esi, 0x28
dec ebx
jne 0x1006d0f3
mov ebx, dword [ebp - 0xc4]
mov edi, dword [ebp - 0xc8]
jmp 0x1006d185
mov ecx, 0x1011c270
lea eax, [edi + 0x64]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d170
test dl, dl
je 0x1006d16c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d170
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d150
xor eax, eax
jmp 0x1006d175
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006d185
mov eax, dword [edi + 0xd4c]
add dword [ebp - 0xcc], eax
lea esi, [edi + 0x64]
push 0x10097ce0
push esi
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1006d1a1
inc dword [ebp - 0xd8]
cmp dword [edi + 0xdb4], 0
jne 0x1006d214
cmp dword [0x10191a08], 1
jne 0x1006d214
push 0x100a136c
push esi
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
jne 0x1006d214
push 0x100a1368
push esi
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
jne 0x1006d209
mov ecx, 0x100a1368
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d200
test dl, dl
je 0x1006d1fc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d200
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d1e0
xor eax, eax
jmp 0x1006d205
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006d214
push 0
push ebx
call fcn.10038940
add esp, 8
add dword [ebp - 0xc0], 4
inc ebx
mov dword [ebp - 0xc4], ebx
call fcn.10006a60
cmp ebx, eax
jb 0x1006cfa0
cmp dword [0x101919f0], 1
jne 0x1006d338
cmp dword [0x34d62b2], 0
je 0x1006d338
cmp dword [ebp - 0xd0], 2
jne 0x1006d338
cmp dword [0x1011cd68], 6
je 0x1006d338
xor eax, eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc4], eax
call fcn.10006a60
test eax, eax
je 0x1006d338
mov edi, dword [ebp - 0xbc]
add edi, 0x53c
lea ebx, [ebx]
mov esi, dword [edi]
xor ebx, ebx
test esi, esi
je 0x1006d2fc
cmp dword [0x10194878], 1
jne 0x1006d2c5
mov eax, dword [esi + 0xd54]
test eax, eax
jle 0x1006d2c5
cmp eax, 5
jg 0x1006d2c5
cmp dword [esi + 0xe44], ebx
jg 0x1006d2c0
cmp dword [esi + 0xe5c], ebx
jle 0x1006d2c5
mov ebx, 1
lea ecx, [esi + 0x64]
push ecx
call fcn.10036860
add esp, 4
test al, al
je 0x1006d2fc
push 0
push esi
call fcn.1004a5b0
add esp, 8
test eax, eax
jg 0x1006d2fc
push esi
call fcn.100373c0
add esp, 4
test al, al
je 0x1006d2fc
cmp ebx, 1
je 0x1006d2fc
inc dword [ebp - 0xc0]
mov esi, dword [ebp - 0xc4]
inc esi
mov dword [ebp - 0xc4], esi
add edi, 4
call fcn.10006a60
cmp esi, eax
jb 0x1006d290
cmp dword [ebp - 0xc0], 2
jle 0x1006d338
call fcn.1006a170
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
mov edi, 1
cmp dword [0x101956dc], edi
jne 0x1006d6df
xor eax, eax
cmp dword [ebp - 0xd0], eax
jne 0x1006d6df
cmp dword [0x1011cd68], 6
je 0x1006d6df
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc4], eax
call fcn.10006a60
test eax, eax
je 0x1006d6df
mov ebx, dword [ebp - 0xbc]
mov esi, dword [sym.imp.MSVCR100.dll_strstr]
add ebx, 0x53c
nop
mov edi, dword [ebx]
test edi, edi
je 0x1006d69e
lea eax, [edi + 0x64]
lea edx, [ebp - 0x38]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x1006d3a2
mov ecx, 0x10094454
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d3d4
test dl, dl
je 0x1006d3d0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d3d4
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d3b4
xor eax, eax
jmp 0x1006d3d9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
mov ecx, 0x1009444c
lea eax, [ebp - 0x38]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d410
test dl, dl
je 0x1006d40c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d410
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d3f0
xor eax, eax
jmp 0x1006d415
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
mov ecx, 0x10094440
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d445
test dl, dl
je 0x1006d441
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d445
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d425
xor eax, eax
jmp 0x1006d44a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
mov ecx, 0x10094434
lea eax, [ebp - 0x38]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d480
test dl, dl
je 0x1006d47c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d480
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d460
xor eax, eax
jmp 0x1006d485
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
mov ecx, 0x10097c18
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d4b5
test dl, dl
je 0x1006d4b1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d4b5
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d495
xor eax, eax
jmp 0x1006d4ba
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
mov ecx, 0x10097c10
lea eax, [ebp - 0x38]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d4f0
test dl, dl
je 0x1006d4ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d4f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d4d0
xor eax, eax
jmp 0x1006d4f5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
mov ecx, 0x10094420
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d525
test dl, dl
je 0x1006d521
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d525
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d505
xor eax, eax
jmp 0x1006d52a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
mov ecx, 0x10094414
lea eax, [ebp - 0x38]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d560
test dl, dl
je 0x1006d55c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d560
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d540
xor eax, eax
jmp 0x1006d565
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
mov ecx, 0x10097c08
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d595
test dl, dl
je 0x1006d591
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d595
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d575
xor eax, eax
jmp 0x1006d59a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
mov ecx, 0x10097bfc
lea eax, [ebp - 0x38]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d5d0
test dl, dl
je 0x1006d5cc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d5d0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d5b0
xor eax, eax
jmp 0x1006d5d5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
mov ecx, 0x10097bf0
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d605
test dl, dl
je 0x1006d601
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d605
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d5e5
xor eax, eax
jmp 0x1006d60a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
lea edx, [ebp - 0x38]
push 0x1009440c
push edx
call esi
add esp, 8
test eax, eax
jne 0x1006d689
mov ecx, 0x10094400
lea eax, [ebp - 0x38]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d648
test dl, dl
je 0x1006d644
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d648
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d628
xor eax, eax
jmp 0x1006d64d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006d689
mov ecx, 0x100943f4
lea eax, [ebp - 0x38]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d680
test dl, dl
je 0x1006d67c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d680
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d660
xor eax, eax
jmp 0x1006d685
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006d69e
push 0
push edi
call fcn.1004a5b0
add esp, 8
test eax, eax
jg 0x1006d69e
inc dword [ebp - 0xc0]
mov edi, dword [ebp - 0xc4]
inc edi
mov dword [ebp - 0xc4], edi
add ebx, 4
call fcn.10006a60
cmp edi, eax
jb 0x1006d390
cmp dword [ebp - 0xc0], 2
jle 0x1006d6da
call fcn.1006a330
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
mov edi, 1
cmp dword [0x10194404], edi
jne 0x1006d710
cmp dword [ebp - 0xd8], 0
jne 0x1006d710
push 0
push 0x100a1350
call fcn.1006a9d0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
cmp dword [0x10194408], edi
jne 0x1006d759
fld dword [0x34d29d4]
fdiv dword [0x34d29d8]
fild dword [0x1019440c]
fdiv qword [0x10097dd8]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1006d759
push 0
push 0x100a1348
call fcn.1006a9d0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
cmp dword [0x10194000], edi
jne 0x1006d78f
mov eax, dword [ebp - 0xd4]
cmp eax, dword [0x101943ec]
jg 0x1006d78f
push 0
push 0x100a1330
call fcn.1006a9d0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
cmp dword [0x10194004], edi
jne 0x1006d7c5
mov ecx, dword [ebp - 0xcc]
cmp ecx, dword [0x101943f0]
jg 0x1006d7c5
push 0
push 0x100a1318
call fcn.1006a9d0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
cmp dword [0x1019400c], edi
jne 0x1006d7ff
cmp dword [ebp - 0xd0], 0
jne 0x1006d7ff
cmp dword [0x1011cd68], 6
je 0x1006d7ff
push 0
push 0x100a1300
call fcn.1006a9d0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
mov ebx, 0x32
cmp dword [0x101947dc], edi
jne 0x1006d841
mov eax, dword [0x2f99464]
xor ecx, ecx
lea edx, [eax + 0x53c]
lea esi, [ebx - 0x28]
lea esp, [esp]
mov eax, dword [edx]
test eax, eax
je 0x1006d837
cmp dword [eax + 0xe00], ebx
jne 0x1006d837
cmp word [eax + 0xf64], si
jbe 0x1006d8a6
add ecx, edi
add edx, 4
cmp ecx, 0xf
jl 0x1006d820
cmp dword [0x1019619c], edi
jne 0x1006d8c6
mov edx, dword [0x10196060]
push edx
call dword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, edi
jne 0x1006d87c
push 0x177d
mov ecx, 0x10196040
call sub.mfc100.dll_Ordinal_4785
mov eax, dword [eax + 0x20]
push 0
push 0
push 0xf1
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0x100a12f4
mov dword [0x1019619c], 0
call fcn.1006a9d0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
push 0
push 0x100a12d4
call fcn.1006a9d0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
cmp dword [0x10194008], edi
jne 0x1006dadf
mov ecx, dword [0x2fb7ac4]
mov eax, dword [ecx + 0x2a50]
cmp eax, 4
je 0x1006d8ec
cmp eax, 0xb
jne 0x1006dadf
mov edx, dword [0x2f99464]
mov eax, dword [edx + 0x56c]
test eax, eax
je 0x1006d90e
mov eax, dword [eax + 0xd4c]
cmp eax, dword [0x101943f4]
jg 0x1006dadf
xor ebx, ebx
call fcn.10006a60
test eax, eax
je 0x1006daaf
mov ecx, dword [ebp - 0xbc]
add ecx, 0x53c
mov dword [ebp - 0xbc], ecx
nop
mov edx, dword [ebp - 0xbc]
mov edi, dword [edx]
test edi, edi
je 0x1006da9a
lea esi, [edi + 0x64]
mov ecx, 0x1009eb8c
mov eax, esi
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d970
test dl, dl
je 0x1006d96c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d970
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d950
xor eax, eax
jmp 0x1006d975
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006da8c
mov ecx, 0x1009eb84
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d9a4
test dl, dl
je 0x1006d9a0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d9a4
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d984
xor eax, eax
jmp 0x1006d9a9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006da8c
mov ecx, 0x1009eb7c
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006d9d8
test dl, dl
je 0x1006d9d4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006d9d8
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d9b8
xor eax, eax
jmp 0x1006d9dd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006da8c
mov ecx, 0x1009eb74
mov eax, esi
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006da10
test dl, dl
je 0x1006da0c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006da10
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006d9f0
xor eax, eax
jmp 0x1006da15
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006da8c
mov ecx, 0x1009eb6c
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006da40
test dl, dl
je 0x1006da3c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006da40
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006da20
xor eax, eax
jmp 0x1006da45
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006da8c
mov ecx, 0x1009eb64
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006da70
test dl, dl
je 0x1006da6c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006da70
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006da50
xor eax, eax
jmp 0x1006da75
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006da8c
push 0x1009eb54
push esi
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1006da9a
mov eax, dword [edi + 0xd4c]
cmp eax, dword [0x101943f4]
jg 0x1006dacf
add dword [ebp - 0xbc], 4
inc ebx
call fcn.10006a60
cmp ebx, eax
jb 0x1006d930
push 0
push 0x100a12bc
call fcn.1006a9d0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
push 0
push ebx
call fcn.10038940
add esp, 8
mov edi, 1
cmp dword [0x10192ea4], edi
jne 0x1006daf4
push 0x10095708
call fcn.10046580
add esp, 4
cmp dword [0x10192ea0], edi
jne 0x1006db09
push 0x1009edf4
call fcn.10046580
add esp, 4
cmp dword [0x10192e9c], edi
jne 0x1006db1e
push 0x1009ee00
call fcn.10046580
add esp, 4
cmp dword [0x10192fd4], edi
jne 0x1006db33
push 0x1009567c
call fcn.100463f0
add esp, 4
cmp dword [0x10192fd8], edi
jne 0x1006db48
push 0x10095674
call fcn.100463f0
add esp, 4
cmp dword [0x10192fdc], edi
jne 0x1006db5d
push 0x1009566c
call fcn.100463f0
add esp, 4
cmp dword [0x101931b0], edi
jne 0x1006db72
push 0x1009eddc
call fcn.100463f0
add esp, 4
cmp dword [0x101931ac], edi
jne 0x1006db87
push 0x1009ede4
call fcn.100463f0
add esp, 4
cmp dword [0x1011cd68], 5
je 0x1006e712
cmp dword [0x10197254], edi
je 0x1006dbac
cmp dword [0x10197258], edi
je 0x1006dbac
cmp dword [0x10197268], edi
jne 0x1006dbb1
call fcn.1005af00
cmp dword [0x10192e8c], edi
jne 0x1006e03f
cmp dword [0x1011d1ac], 0
jle 0x1006e03f
cmp byte [0x1012d3fa], 0
jne 0x1006e03f
mov eax, 0x1012d4a4
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006dbe0
sub eax, edx
je 0x1006dd70
mov edi, dword [sym.imp.MSVCR100.dll_strtok]
push 0x10097d84
push 0x1012d4a4
xor ebx, ebx
call edi
add esp, 8
test eax, eax
je 0x1006dd70
lea esi, [ebp - 0x54]
mov edx, esi
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x1006dc15
push 0x10097d84
push 0
inc ebx
add esi, 0x14
call edi
add esp, 8
test eax, eax
jne 0x1006dc11
cmp ebx, 4
lea ebx, [eax + 1]
jne 0x1006dd75
mov edi, dword [0x101938f4]
cmp dword [0x10192e98], ebx
je 0x1006dc51
cmp edi, ebx
jne 0x1006dcac
mov esi, 0x2f9b2b0
mov eax, dword [esi]
test eax, eax
je 0x1006dc99
cmp byte [eax + 0x330], 0
jbe 0x1006dc99
lea ecx, [ebp - 0x54]
add eax, 0x338
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006dc90
test dl, dl
je 0x1006dc8c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006dc90
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006dc70
xor eax, eax
jmp 0x1006dc95
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006dd10
add esi, 4
cmp esi, 0x2f9b2cc
jl 0x1006dc56
cmp edi, ebx
jne 0x1006dd75
mov ecx, dword [0x10192ecc]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
xor esi, esi
push esi
push esi
push 0x18b
push ecx
call edi
test eax, eax
jle 0x1006dd75
lea esp, [esp]
mov eax, dword [0x10192ecc]
lea edx, [ebp - 0x88]
push edx
push esi
push 0x189
push eax
call edi
lea ecx, [ebp - 0x54]
lea eax, [ebp - 0x88]
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006dd1e
test dl, dl
je 0x1006dd0c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006dd1e
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006dcf0
xor eax, eax
jmp 0x1006dd23
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x40]
push eax
jmp 0x1006dd4d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006dd41
mov ecx, dword [0x10192ecc]
push 0
push 0
push 0x18b
push ecx
add esi, ebx
call edi
cmp esi, eax
jl 0x1006dcd0
jmp 0x1006dd75
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x40]
push ecx
call dword [sym.imp.MSVCR100.dll_atoi]
add esp, 4
push eax
call fcn.1006a5b0
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
mov ebx, 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
mov eax, 0x10624dd3
mul edx
mov esi, edx
shr esi, 6
mov eax, esi
sub eax, dword [0x1012d394]
cmp eax, dword [0x10192ea8]
jb 0x1006decd
cmp dword [0x1011cd68], 4
je 0x1006decd
cmp dword [0x10191854], ebx
je 0x1006ddba
cmp dword [0x10191928], ebx
jne 0x1006de10
fld dword [0x1012d2ac]
mov eax, dword [0x2fb7ac4]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fld dword [eax + 0x1f68]
fstp dword [esp + 4]
fld dword [eax + 0x1f60]
fstp dword [esp]
call fcn.10008290
fstp dword [ebp - 0xbc]
add esp, 0x10
fld dword [ebp - 0xbc]
fild dword [0x1012d2cc]
fcompp
fnstsw ax
test ah, 5
jnp 0x1006e712
cmp dword [0x10191930], ebx
jne 0x1006de60
fld dword [0x1012d2ac]
mov eax, dword [0x2fb7ac4]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fld dword [eax + 0x1f68]
fstp dword [esp + 4]
fld dword [eax + 0x1f60]
fstp dword [esp]
call fcn.10008290
fcomp qword [0x10098be8]
add esp, 0x10
fnstsw ax
test ah, 0x41
je 0x1006e712
cmp dword [0x10191bc8], ebx
jne 0x1006de8e
cmp dword [0x10191854], ebx
jne 0x1006de8e
mov ecx, dword [0x2fb7ac4]
mov edx, dword [ecx + 0x1d20]
push 0xd71444
push edx
call fcn.10006fa0
add esp, 8
test eax, eax
jne 0x1006deb5
push ebx
call fcn.100476d0
push 0
mov dword [0x1012d394], esi
call fcn.10060b90
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov byte [0x1012d207], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
xor esi, esi
nop
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.10006c40
add esp, 8
mov ecx, 0x1009e3f4
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006df05
test dl, dl
je 0x1006df01
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006df05
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006dee5
xor eax, eax
jmp 0x1006df0a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006e01b
mov ecx, 0x1009e3c4
lea eax, [ebp - 0x24]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006df40
test dl, dl
je 0x1006df3c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006df40
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006df20
xor eax, eax
jmp 0x1006df45
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006e01b
mov ecx, 0x1009e3b8
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006df75
test dl, dl
je 0x1006df71
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006df75
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006df55
xor eax, eax
jmp 0x1006df7a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006e01b
mov ecx, 0x1009e3d0
lea eax, [ebp - 0x24]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006dfb0
test dl, dl
je 0x1006dfac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006dfb0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006df90
xor eax, eax
jmp 0x1006dfb5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006e01b
mov ecx, 0x1009e3dc
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006dfe1
test dl, dl
je 0x1006dfdd
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006dfe1
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006dfc1
xor eax, eax
jmp 0x1006dfe6
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006e01b
mov ecx, 0x1009e3ac
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006e012
test dl, dl
je 0x1006e00e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006e012
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006dff2
xor eax, eax
jmp 0x1006e017
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1006e02f
lea ecx, [ebp - 0x24]
push ecx
call fcn.10006d90
add esp, 4
test eax, eax
je 0x1006e185
add esi, ebx
cmp esi, 0x14
jl 0x1006ded0
mov edi, 1
cmp dword [0x101919fc], edi
jne 0x1006e1a0
cmp dword [0x1012d3b0], 0xffffffff
je 0x1006e1a0
cmp dword [0x1011d1ac], 0
jle 0x1006e1a0
cmp dword [0x1011cd68], 4
je 0x1006e1a0
cmp byte [0x1012d3fa], 0
jne 0x1006e1a0
push 0x100a06b8
call fcn.10006d90
add esp, 4
test eax, eax
jne 0x1006e1a0
mov eax, dword [0x2f9b2b0]
add eax, 0x338
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006e0a1
sub eax, edx
je 0x1006e1a0
cmp dword [0x10191854], edi
je 0x1006e0c0
cmp dword [0x10191928], edi
jne 0x1006e116
fld dword [0x1012d2ac]
mov eax, dword [0x2fb7ac4]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fld dword [eax + 0x1f68]
fstp dword [esp + 4]
fld dword [eax + 0x1f60]
fstp dword [esp]
call fcn.10008290
fstp dword [ebp - 0xbc]
add esp, 0x10
fld dword [ebp - 0xbc]
fild dword [0x1012d2cc]
fcompp
fnstsw ax
test ah, 5
jnp 0x1006e712
cmp dword [0x10191930], edi
jne 0x1006e166
fld dword [0x1012d2ac]
mov eax, dword [0x2fb7ac4]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fld dword [eax + 0x1f68]
fstp dword [esp + 4]
fld dword [eax + 0x1f60]
fstp dword [esp]
call fcn.10008290
fcomp qword [0x10098be8]
add esp, 0x10
fnstsw ax
test ah, 0x41
je 0x1006e712
push edi
call fcn.100476d0
add esp, 4
call fcn.1005fff0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov dword [0x1012d394], 0xffff8ad0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
mov edx, dword [0x2fb7ac4]
mov eax, dword [edx + 0x2a50]
cmp eax, 6
jne 0x1006e206
xor esi, esi
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.10006c40
add esp, 8
lea ecx, [ebp - 0x24]
mov eax, 0x10095708
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006e1e8
test dl, dl
je 0x1006e1e4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006e1e8
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006e1c8
xor eax, eax
jmp 0x1006e1ed
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006e1fa
add esi, edi
cmp esi, 0x14
jl 0x1006e1b3
jmp 0x1006e238
cmp dword [ebp - 0xc], 0xbb8
ja 0x1006e22e
push edi
jmp 0x1006e230
cmp eax, 5
je 0x1006e238
cmp dword [0x1011cd68], 6
je 0x1006e238
sub eax, 3
neg eax
sbb eax, eax
and eax, 0x32
add eax, 0x384
cmp dword [0x34d2970], eax
jl 0x1006e22e
push edi
jmp 0x1006e230
push 0
call fcn.100476d0
add esp, 4
movzx ecx, byte [0x34d291c]
mov edx, dword [0x1019d4c4]
xor ebx, ebx
push ebx
push ebx
push 0x1004
push edx
mov dword [ebp - 0xbc], ecx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jle 0x1006e434
push ebx
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_4554
cmp eax, 1
jne 0x1006e415
push 0x64
lea eax, [ebp - 0xb8]
push 0
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x64
lea ecx, [ebp - 0xb8]
push ecx
push 0
push ebx
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_5176
push 0x14
lea edx, [ebp - 0x18]
push edx
push 2
push ebx
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_5176
lea eax, [ebp - 0xb8]
push eax
call fcn.10023b70
mov esi, eax
add esp, 4
cmp esi, 0xffffffff
je 0x1006e415
mov al, byte [esi + 0x1c]
movzx ecx, al
cmp ecx, dword [ebp - 0xbc]
jle 0x1006e2e3
cmp al, 0xc8
jne 0x1006e415
mov ecx, dword [esi + 0x4c]
sub ecx, dword [esi + 0x48]
mov eax, 0x3531dec1
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, dword [esi + 0xb4]
je 0x1006e415
mov ecx, 0x1019d404
xor edi, edi
call fcn.10001240
test eax, eax
jle 0x1006e342
jmp 0x1006e320
mov ecx, dword [0x1019d404]
mov edx, dword [ecx + edi*4]
mov eax, dword [edx]
cmp eax, dword [esi]
je 0x1006e3df
mov ecx, 0x1019d404
inc edi
call fcn.10001240
cmp edi, eax
jl 0x1006e320
push ebx
push esi
call fcn.1006c430
add esp, 8
cmp byte [0x1012d413], 0
jne 0x1006e613
cmp byte [0x1012d417], 0
jne 0x1006e613
push 0x32
lea edx, [ebp - 0x88]
push 0
push edx
call sub.MSVCR100.dll_memset
push 0x32
lea eax, [ebp - 0x38]
push 0
push eax
call sub.MSVCR100.dll_memset
mov ecx, dword [0x2f92a08]
push ecx
lea edx, [ebp - 0x88]
push edx
call fcn.10007a10
add esp, 0x20
push 0x1e
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x10192d2c
call sub.mfc100.dll_Ordinal_6969
mov ecx, 0x10094650
lea eax, [ebp - 0x88]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006e4ba
test dl, dl
je 0x1006e3d8
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006e4ba
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006e3b4
xor eax, eax
jmp 0x1006e4bf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1019e914]
mov edx, dword [ecx + edi*4]
sub eax, dword [edx]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.MSVCR100.dll_atoi]
imul eax, eax, 0xea60
add esp, 4
cmp dword [ebp - 0xd8], eax
jae 0x1006e342
mov ecx, dword [0x1019d4c4]
push 0
push 0
push 0x1004
push ecx
inc ebx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp ebx, eax
jl 0x1006e263
cmp byte [0x1012d413], 1
jne 0x1006e34c
push 0x1f4
mov byte [0x1012d413], 0
call sub.mfc100.dll_Ordinal_265
push 0x34d28e8
push 0x1011c4d0
mov esi, eax
push str._s_s.txt
push esi
call dword [sym.imp.MSVCR100.dll_sprintf]
push esi
call fcn.10055f90
fld dword [0x10191920]
fst dword [0x1012d2a8]
push 1
fstp dword [0x1012d2b0]
push 0x100a12a8
fld dword [0x10191924]
fst dword [0x1012d2ac]
fstp dword [0x1012d2b4]
call fcn.1006a9d0
push esi
call sub.mfc100.dll_Ordinal_1296
add esp, 0x24
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1006e613
mov esi, dword [sym.imp.MSVCR100.dll_strstr]
lea ecx, [ebp - 0x38]
push 0x10099ef8
push ecx
call esi
add esp, 8
test eax, eax
lea eax, [ebp - 0x38]
je 0x1006e533
sub eax, 2
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1006e4e8
sub eax, edx
lea edx, [ebp - 0x34]
push edx
mov byte [ebp + eax - 0x38], cl
call dword [sym.imp.MSVCR100.dll_atoi]
add eax, 0x59d8
add esp, 4
cmp eax, dword [0x2f92a08]
je 0x1006e613
push 1
push 0x100a1288
call fcn.1006a9d0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
push 0x10094dd8
push eax
call esi
add esp, 8
test eax, eax
je 0x1006e57a
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x38]
push edx
call esi
add esp, 8
test eax, eax
jne 0x1006e613
push 1
push 0x100a1288
call fcn.1006a9d0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x88]
push 0x100a127c
push eax
call esi
add esp, 8
test eax, eax
jne 0x1006e613
lea ecx, [ebp - 0x38]
push 0x10094db8
push ecx
call esi
add esp, 8
test eax, eax
je 0x1006e5d9
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x38]
push eax
call esi
add esp, 8
test eax, eax
jne 0x1006e613
push 1
push 0x100a1288
call fcn.1006a9d0
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0x88]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006e607
test dl, dl
je 0x1006e5fe
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006e607
add eax, 2
add ecx, 2
test dl, dl
jne 0x1006e5e2
xor eax, eax
test eax, eax
jmp 0x1006e50d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jmp 0x1006e50d
xor esi, esi
cmp byte [0x100b1f0d], 0
jbe 0x1006e712
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, 0x100b1d9a
lea ecx, [ecx]
call edi
sub eax, dword [esi*4 + 0x100b1e78]
cmp eax, 0x2710
jb 0x1006e663
push ebx
call fcn.10006d90
add esp, 4
test eax, eax
je 0x1006e683
movzx ecx, word [esi*2 + 0x100b1e62]
imul ecx, ecx, 0x3e8
cmp dword [eax + 0x354], ecx
jl 0x1006e683
movzx edx, byte [0x100b1f0d]
inc esi
add ebx, 0x14
cmp esi, edx
jl 0x1006e630
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret
call edi
mov dword [esi*4 + 0x100b1e78], eax
cmp byte [esi + 0x100b1c00], 1
jne 0x1006e6c7
mov edi, dword [0x2fb7ac4]
fld dword [edi + 0x1f68]
call fcn.10086850
fld dword [edi + 0x1f60]
push eax
call fcn.10086850
push eax
mov eax, dword [0x2f92a08]
push eax
push 0x100a1270
lea ecx, [ebp - 0x88]
push ecx
jmp 0x1006e6ef
mov ecx, dword [0x2f92a08]
lea eax, [esi + esi*4]
add eax, eax
add eax, eax
lea edx, [eax + 0x100b1cd2]
push edx
lea eax, [eax + 0x100b1c0a]
push eax
push ecx
push str._d._s._s
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
lea eax, [ebp - 0x88]
lea ecx, [esi + esi*4]
push eax
lea edx, [ecx*4 + 0x100b1b38]
push edx
call fcn.1003b740
add esp, 8
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.100867e6
mov esp, ebp
pop ebp
ret