Function at 0x10074980
Capabilities:
Check for software breakpoints
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x100ab1b8
push 0x1008691a
mov eax, dword fs:[0]
push eax
sub esp, 0x224
mov eax, dword [0x100ae8c8]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x1cc], ebx
wait
mov dword [ebp - 4], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [0x1012d22c], eax
mov eax, dword [0x36208e4]
mov dword [ebp - 0x1c8], eax
cmp byte [0x1012d408], 1
jne 0x10074a8c
test eax, eax
jne 0x10074a90
cmp dword [ebx + 4], 0x1b0014
jne 0x10074a8c
push 0x7d
push eax
lea eax, [ebp - 0xb0]
push eax
call sub.MSVCR100.dll_memset
push 0x101a4504
push 0x101a45d4
push 0x1009561c
lea ecx, [ebp - 0xb0]
push ecx
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
add esp, 0x1c
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x291
mov eax, dword [0x1011956c]
push eax
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
call edi
push 0x101a45d4
push 0x100a188c
lea ecx, [ebp - 0xb0]
push ecx
call esi
add esp, 0xc
lea edx, [ebp - 0xb0]
push edx
mov eax, dword [0x100eaf2c]
push eax
push 0x2712
mov ecx, dword [0x1011956c]
push ecx
call edi
wait
jmp 0x10077116
test eax, eax
je 0x10074a86
call edi
mov dword [0x1012d230], eax
mov edx, dword [ebp - 0x1c8]
movzx esi, word [edx + 0x14]
mov dword [ebp - 0x1c4], esi
push ebx
call fcn.10073280
push ebx
call fcn.1005d090
add esp, 8
movzx eax, word [ebx + 4]
cmp eax, 0x65
je 0x10074ac9
cmp eax, 0x2f
je 0x10074ac9
cmp eax, 0xa
jne 0x10074ad3
movzx eax, word [ebx]
mov byte [eax + 0x1011d208], 0
mov eax, dword [ebx + 4]
cmp eax, 0x40080
jne 0x10074ae9
mov dword [ebx + 8], 0
jmp 0x10074c7d
cmp eax, 0xb80051
jne 0x10074c7d
mov al, byte [ebx + 8]
cmp al, 0x15
jne 0x10074b29
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1874
mov dword [0x1011cd88], eax
lea ecx, [ebp - 0xf8]
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea edx, [ebp - 0xf8]
push edx
jmp 0x10074c75
cmp al, 0x16
jne 0x10074b5b
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a185c
mov dword [0x1011cd88], eax
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea ecx, [ebp - 0xf8]
push ecx
jmp 0x10074c75
cmp al, 0x17
jne 0x10074b72
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1848
jmp 0x10074c5a
cmp al, 0xb
je 0x10074c4c
cmp al, 0x29
je 0x10074c4c
cmp al, 0xc
je 0x10074c39
cmp al, 0x2a
je 0x10074c39
cmp al, 0xd
je 0x10074c26
cmp al, 0x2b
je 0x10074c26
cmp al, 0x3d
jne 0x10074bb9
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1834
jmp 0x10074b09
cmp al, 0x3e
jne 0x10074bd0
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1820
jmp 0x10074b3b
cmp al, 0x3f
jne 0x10074be4
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a180c
jmp 0x10074c5a
cmp al, 0xc9
jne 0x10074bfb
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a17f8
jmp 0x10074b09
cmp al, 0xca
jne 0x10074c12
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a17e0
jmp 0x10074b3b
cmp al, 0xcb
jne 0x10074c7d
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a17c8
jmp 0x10074c5a
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a17b4
jmp 0x10074b09
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a17a0
jmp 0x10074b3b
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1788
lea edx, [ebp - 0xf8]
push edx
mov dword [0x1011cd88], eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea eax, [ebp - 0xf8]
push eax
call fcn.1003ae70
add esp, 0x14
movzx ecx, word [ebx]
mov eax, ecx
cmp eax, esi
jne 0x10074cfe
cmp word [ebx + 4], 4
jne 0x10074c9e
cmp byte [ebx + 8], 1
mov byte [0x1012d410], 1
wait
jmp 0x10077116
cmp eax, esi
jne 0x10074cfe
cmp word [ebx + 4], 0x6a
jne 0x10074cfe
cmp dword [ebx + 0x34], 0
jl 0x10074cfe
jg 0x10074cb7
cmp dword [ebx + 0x30], 0
jbe 0x10074cfe
mov al, al
mov cl, cl
mov dl, dl
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebx + 0x34]
mov edx, dword [0x33d0abc]
mov esi, dword [0x33d0ac0]
sub eax, edx
sbb ecx, esi
mov edx, dword [0x1012d290]
add edx, eax
mov dword [0x1012d290], edx
mov eax, dword [0x1012d294]
adc eax, ecx
mov dword [0x1012d294], eax
mov dword [0x1012d2a0], edx
mov dword [0x1012d2a4], eax
wait
jmp 0x10077116
movzx edx, word [ebx + 4]
cmp edx, 0x7b
jne 0x10074e98
cmp dword [0x10191854], 1
jne 0x10074e98
movzx ecx, word [ebx + 0x10]
push ecx
call fcn.10006f40
add esp, 4
mov edi, eax
test edi, edi
je 0x10074a86
fld dword [ebx + 0x1e]
call fcn.100867b0
mov dword [ebp - 0x1cc], eax
fld dword [ebx + 0x26]
call fcn.100867b0
mov dword [ebp - 0x1c4], eax
push 0xaf3b24
mov edx, dword [ebp - 0x1c8]
mov eax, dword [edx + 0x1d24]
push eax
call fcn.10006f10
add esp, 8
test eax, eax
jne 0x10074a86
cmp dword [0x1011d1ac], eax
je 0x10074a86
mov eax, 1
mov dword [ebp - 0x1d4], eax
cmp dword [0x10191868], eax
jne 0x10074de4
xor esi, esi
mov dword [ebp - 0x1d4], esi
mov dword [ebp - 0x230], esi
mov ecx, 0x1019ac1c
call fcn.10001040
cmp esi, eax
jge 0x10074ddf
mov ecx, edi
mov edx, dword [0x1019ac1c]
mov eax, dword [edx + esi*4]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10074dd3
test dl, dl
je 0x10074dcf
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10074dd3
add eax, 2
add ecx, 2
test dl, dl
jne 0x10074db3
xor eax, eax
jmp 0x10074dd8
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10074df0
inc esi
jmp 0x10074d94
mov eax, 1
cmp dword [ebp - 0x1d4], eax
jne 0x1007515a
fild dword [ebp - 0x1c4]
fstp dword [ebp - 0x1c4]
fild dword [ebp - 0x1cc]
fstp dword [ebp - 0x1cc]
sub esp, 0x10
fld dword [ebp - 0x1c4]
fstp dword [esp + 0xc]
fld dword [ebp - 0x1cc]
fstp dword [esp + 8]
fld dword [0x1012d2ac]
fstp dword [esp + 4]
fld dword [0x1012d2a8]
fstp dword [esp]
call fcn.10008200
add esp, 0x10
fild dword [0x1012d2cc]
fcompp
fnstsw ax
test ah, 0x41
jnp 0x10074a86
sub esp, 8
fld dword [ebp - 0x1c4]
fstp dword [esp + 4]
fld dword [ebp - 0x1cc]
fstp dword [esp]
call fcn.10037e60
fld dword [ebp - 0x1c4]
fstp dword [esp + 4]
fld dword [ebp - 0x1cc]
fstp dword [esp]
movzx eax, word [ebx]
push eax
push 0xffffffffffffffff
call fcn.10037eb0
movzx ecx, word [ebx]
push ecx
call fcn.10037d90
add esp, 0x14
wait
jmp 0x10077116
cmp eax, esi
jne 0x10074edc
mov edi, 0x84
cmp word [ebx + 2], di
jne 0x10074ed6
movzx eax, word [ebx + 0xa]
cmp eax, 0xb
je 0x10074ebe
mov edx, 0x3f3
cmp ax, dx
jne 0x1007515a
movzx eax, word [ebx + 0xc]
push eax
movzx ecx, word [ebx + 8]
push ecx
call fcn.10007a40
add esp, 8
wait
jmp 0x10077116
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp edx, 0x65
jne 0x100752b1
cmp esi, eax
jne 0x10074f34
cmp byte [0x1012d418], 1
jne 0x10074f3d
cmp dword [0x1012d3e4], 0
jne 0x10074f3d
fld dword [ebx + 0xc]
call fcn.100867b0
mov esi, eax
fld dword [ebx + 0x14]
call fcn.100867b0
push eax
push esi
push 0x100a1778
lea edx, [ebp - 0x94]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0xf
lea eax, [ebp - 0x94]
push eax
call fcn.1003ae70
add esp, 0x18
jmp 0x10074f3d
push eax
call fcn.1006b690
add esp, 4
cmp dword [0x10198028], 1
jne 0x10074a86
call edi
sub eax, dword [0x1012d260]
cmp eax, 0x1388
jb 0x10074a86
cmp dword [0x33ccfd8], 0
jle 0x10074a86
mov eax, 1
cmp dword [0x10197d80], eax
jne 0x10074a86
cmp dword [0x1012d3e4], eax
jne 0x10074a86
fld dword [ebx + 0xc]
call fcn.100867b0
mov dword [ebp - 0x1c4], eax
fld dword [ebx + 0x14]
call fcn.100867b0
mov dword [ebp - 0x1cc], eax
movzx ecx, word [ebx]
push ecx
lea edx, [ebp - 0x94]
push edx
call fcn.1003c8e0
add esp, 8
test al, al
je 0x10074a86
movzx eax, word [ebx]
push eax
lea ecx, [ebp - 0x1c0]
push ecx
call fcn.1003c920
mov eax, dword [ebp - 0x1c8]
fld dword [eax + 0x1f6c]
fstp dword [esp + 4]
fld dword [eax + 0x1f64]
fstp dword [esp]
fild dword [ebp - 0x1cc]
sub esp, 8
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10008200
add esp, 0x10
fild dword [0x10197d7c]
fcompp
fnstsw ax
test ah, 0x41
jne 0x1007515a
xor esi, esi
lea edi, [esi + 2]
mov dword [ebp - 0x218], esi
mov ecx, 0x101a206c
call fcn.10001040
cmp esi, eax
jge 0x10075166
mov edx, dword [0x101a206c]
mov ecx, dword [edx + esi*4]
lea eax, [ebp - 0x94]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10075062
test dl, dl
je 0x1007505e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10075062
add eax, edi
add ecx, edi
test dl, dl
jne 0x10075044
xor eax, eax
jmp 0x10075067
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10075160
cmp dword [0x1011cd68], edi
jne 0x100750c3
cmp dword [0x10198018], 1
jne 0x100750c3
sub esp, 0x10
fld dword [0x1012d2ac]
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fild dword [ebp - 0x1cc]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10008200
add esp, 0x10
fcomp dword [0x100a1138]
fnstsw ax
test ah, 1
je 0x10075166
mov eax, dword [ebp - 0x1cc]
push eax
mov ecx, dword [ebp - 0x1c4]
push ecx
call fcn.1003ac90
add esp, 8
test al, al
je 0x10075166
mov ebx, dword [ebp - 0x1c8]
fld dword [ebx + 0x1f6c]
call fcn.100867b0
push eax
fld dword [ebx + 0x1f64]
call fcn.100867b0
push eax
call fcn.1003ac90
add esp, 8
test al, al
je 0x1007516c
mov edx, dword [0x101a206c]
mov eax, dword [edx + esi*4]
push eax
push 0x100a1118
lea ecx, [ebp - 0xf8]
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
cmp dword [0x10197d88], 1
jne 0x10075149
push edi
lea edx, [ebp - 0xf8]
push edx
call fcn.1006a9a0
add esp, 8
wait
jmp 0x10077116
push 0
lea eax, [ebp - 0xf8]
push eax
call fcn.1006a9a0
add esp, 8
wait
jmp 0x10077116
inc esi
jmp 0x1007501d
mov ebx, dword [ebp - 0x1c8]
xor esi, esi
mov dword [ebp - 0x22c], esi
mov ecx, 0x101a2084
call fcn.10001040
cmp esi, eax
jge 0x1007515a
mov ecx, dword [0x101a2084]
mov ecx, dword [ecx + esi*4]
lea eax, [ebp - 0x1c0]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100751af
test dl, dl
je 0x100751ab
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100751af
add eax, edi
add ecx, edi
test dl, dl
jne 0x10075191
xor eax, eax
jmp 0x100751b4
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100752ab
cmp dword [0x1011cd68], edi
jne 0x10075210
cmp dword [0x10198018], 1
jne 0x10075210
sub esp, 0x10
fld dword [0x1012d2ac]
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fild dword [ebp - 0x1cc]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10008200
add esp, 0x10
fcomp dword [0x100a1138]
fnstsw ax
test ah, 1
je 0x1007515a
mov edx, dword [ebp - 0x1cc]
push edx
mov eax, dword [ebp - 0x1c4]
push eax
call fcn.1003ac90
add esp, 8
test al, al
je 0x1007515a
fld dword [ebx + 0x1f6c]
call fcn.100867b0
push eax
fld dword [ebx + 0x1f64]
call fcn.100867b0
push eax
call fcn.1003ac90
add esp, 8
test al, al
je 0x1007515a
mov ecx, dword [0x101a2084]
mov edx, dword [ecx + esi*4]
push edx
push 0x100a10f0
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
cmp dword [0x10197d88], 1
jne 0x10075294
push edi
lea ecx, [ebp - 0xf8]
push ecx
call fcn.1006a9a0
add esp, 8
wait
jmp 0x10077116
push 0
lea edx, [ebp - 0xf8]
push edx
call fcn.1006a9a0
add esp, 8
wait
jmp 0x10077116
inc esi
jmp 0x1007516e
cmp esi, eax
je 0x100752d9
cmp dword [ebx + 6], 0x10070
jne 0x100752d5
mov eax, dword [ebx + 0x28]
mov dword [0x1011b6e0], eax
mov ecx, dword [ebx + 0x2c]
mov dword [0x1011b6e4], ecx
wait
jmp 0x10077116
cmp esi, eax
jne 0x1007533b
cmp edx, 0x78
jne 0x10075329
mov edx, dword [0x12b5b20]
mov eax, dword [edx + 0x4cc]
mov ecx, dword [0x36208e4]
mov edx, dword [eax + 0x388]
cmp edx, dword [ecx + 0x14]
jne 0x1007515a
mov eax, dword [0x101976ac]
test eax, eax
jle 0x1007515a
movzx ecx, word [ebx + 0x30]
inc ecx
cmp eax, ecx
je 0x1007515a
dec eax
push eax
call fcn.1003bb90
add esp, 4
wait
jmp 0x10077116
cmp esi, eax
jne 0x1007533b
mov edi, 0x93
cmp dx, di
je 0x1007515a
mov edi, 0x88
cmp dx, di
jne 0x100754ba
cmp eax, esi
jne 0x100753f2
cmp word [ebx + 0x1c], 0
jne 0x100753f2
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [0x101b8d28]
cmp eax, 0x3e8
jbe 0x10074a86
movzx eax, word [ebx + 6]
cmp eax, 0x1c
jne 0x100753df
cmp word [ebx + 0xc], 2
jne 0x100753a5
mov byte [0x1012d404], 0
inc dword [0x1012d37c]
call esi
mov dword [0x101b8d28], eax
inc dword [0x1012d384]
wait
jmp 0x10077116
cmp eax, 0x1c
jne 0x100753df
cmp word [ebx + 0xc], 0
jne 0x100753df
mov byte [0x1012d404], 1
mov eax, dword [0x35ed708]
cmp eax, 0x321
je 0x100753df
cmp eax, 0xfa1
je 0x100753df
cmp eax, 0x1c85
je 0x100753df
cmp eax, 0x9ca5
je 0x100753df
inc dword [0x1012d380]
call esi
mov dword [0x101b8d28], eax
inc dword [0x1012d384]
wait
jmp 0x10077116
mov esi, dword [ebp - 0x1c8]
mov eax, dword [esi + 0x1d24]
push 0xaf3b24
push eax
call fcn.10006f10
add esp, 8
test eax, eax
je 0x10074a86
mov dx, word [ebx]
cmp dx, word [eax + 0x14]
jne 0x10074a86
mov ecx, dword [0x35ed708]
cmp ecx, 0x515
je 0x10075447
cmp ecx, 0x7594
je 0x10075447
cmp ecx, 0x75f8
je 0x10075447
cmp ecx, 0x765c
jne 0x10075472
mov ecx, dword [eax + 0x10a4]
fld dword [ecx + 0x284]
fsub dword [esi + 0x1f68]
fcomp qword [0x100a1770]
fnstsw ax
test ah, 0x41
jne 0x10075472
mov eax, dword [ecx + 0x284]
mov dword [esi + 0x1f68], eax
mov eax, 1
add dword [0x1012d3dc], eax
cmp dword [0x1011d1b4], 0
jle 0x100754ad
cmp dword [0x10191854], eax
jne 0x100754ad
cmp dword [0x1019185c], eax
jne 0x100754a8
call fcn.10073f70
mov byte [0x1012d3f8], 0
wait
jmp 0x10077116
call fcn.10073ea0
mov byte [0x1012d3f8], 0
wait
jmp 0x10077116
mov edi, 0x1540
cmp dx, di
jne 0x10075532
cmp eax, esi
jne 0x1007515a
cmp word [ebx + 8], 0
jbe 0x1007515a
movzx ecx, word [ebx + 0x10]
cmp ecx, 0x13
jne 0x100754fd
cmp dword [0x1012d3e4], 1
jne 0x100754fd
push eax
push 0x1009c994
call fcn.10006c20
add esp, 8
wait
jmp 0x10077116
cmp dword [0x1019efb8], 1
jne 0x1007515a
push ecx
call fcn.10080d10
add esp, 4
cmp al, 1
jne 0x1007515a
movzx edx, word [ebx]
push edx
push 0x1009c994
call fcn.10006c20
add esp, 8
wait
jmp 0x10077116
cmp edx, 0x72
jne 0x1007574a
cmp dword [0x101956bc], 1
jne 0x1007574a
cmp dword [0x1011cd68], 2
je 0x1007574a
xor eax, eax
mov dword [ebp - 0x1e0], eax
lea esi, [ebx + 0xc]
mov dword [ebp - 0x1f8], esi
mov dword [ebp - 0x1dc], eax
lea esp, [esp]
movzx eax, byte [ebx + 8]
cmp dword [ebp - 0x1dc], eax
jge 0x1007515a
fld dword [esi + 0x14]
call fcn.100867b0
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1c]
call fcn.100867b0
mov dword [ebp - 0x1c4], eax
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x20], ecx
fild dword [ebp - 0x1c4]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [ebp - 0x1d4]
fstp dword [esp + 8]
mov eax, dword [ebp - 0x1c8]
fld dword [eax + 0x1f6c]
fstp dword [esp + 4]
fld dword [eax + 0x1f64]
fstp dword [esp]
call fcn.10008200
add esp, 0x10
call fcn.100867b0
mov edi, eax
xor ecx, ecx
xor eax, eax
mov edx, dword [0x1011aed4]
mov dword [ebp - 0x234], eax
cmp eax, edx
jge 0x10075603
mov ebx, dword [eax*4 + 0x10119570]
cmp ebx, dword [esi]
je 0x10075658
inc eax
jmp 0x100755eb
test ecx, ecx
jne 0x10075658
cmp dword [0x1012d3e4], 1
jne 0x10075658
cmp dword [0x101956d0], 1
jne 0x10075658
mov eax, dword [esi]
mov dword [edx*4 + 0x10119570], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1011aed4]
mov dword [ecx*4 + 0x10119d40], eax
mov edx, dword [0x1011aed4]
mov byte [edx + 0x1011a510], 0
mov eax, dword [0x1011aed4]
mov dword [eax*4 + 0x1011a704], 0
inc dword [0x1011aed4]
cmp edi, 0x96
jg 0x1007571a
cmp dword [0x101956dc], 1
jne 0x100756b0
fild dword [0x1012d3c4]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [0x1012d3c0]
fstp dword [esp + 8]
fild dword [ebp - 0x1c4]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10008200
add esp, 0x10
fcomp dword [0x100a0250]
fnstsw ax
test ah, 5
jnp 0x10074a86
fild dword [0x100ae390]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [0x100ae38c]
fstp dword [esp + 8]
fild dword [ebp - 0x1c4]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10008200
add esp, 0x10
fcomp dword [0x100a0250]
fnstsw ax
test ah, 5
jnp 0x10074a86
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [esi + 4]
push edx
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [esi + 8]
push ecx
call fcn.1004b170
add esp, 8
push eax
mov edx, dword [esi]
push edx
call fcn.1004b260
add esp, 0x10
add esi, 0x68
mov dword [ebp - 0x1f8], esi
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp eax, 0x10
jg 0x1007515a
inc dword [ebp - 0x1dc]
mov ebx, dword [ebp - 0x1cc]
jmp 0x10075570
cmp edx, 0xc
jne 0x1007586b
movzx esi, word [ebx + 8]
imul esi, esi, 0x1cc
xor edi, edi
mov dword [ebp - 0x1ec], edi
mov ecx, 0x101a2048
call fcn.10001040
cmp edi, eax
jge 0x100757cd
lea ecx, [esi + 0xfbaf1a]
mov eax, dword [0x101a1e04]
mov eax, dword [eax + edi*4]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100757a1
test dl, dl
je 0x1007579d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100757a1
add eax, 2
add ecx, 2
test dl, dl
jne 0x10075781
xor eax, eax
jmp 0x100757a6
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10075839
movzx ecx, word [ebx]
mov edx, dword [0x101a2048]
mov eax, dword [edx + edi*4]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x101a203c]
mov edx, dword [ecx + edi*4]
mov dword [edx], eax
mov esi, 1
cmp dword [0x10191928], esi
jne 0x1007515a
movzx eax, word [ebx + 8]
cmp dword [ebp - 0x1c4], eax
jne 0x1007515a
movzx ecx, word [ebx]
push ecx
call fcn.10046950
add esp, 4
test eax, eax
jle 0x1007515a
mov ecx, dword [eax*4 + 0x36208e8]
cmp dword [ecx], 0xaf3b24
jne 0x10074a86
mov dword [ecx + 0x354], esi
xor ecx, ecx
mov dword [ebp - 0x200], ecx
cmp ecx, 0x1e
jge 0x1007583f
cmp dword [ecx*4 + 0x1012d2d8], eax
je 0x10074a86
add ecx, esi
jmp 0x1007581d
inc edi
jmp 0x1007575f
xor ecx, ecx
mov dword [ebp - 0x228], ecx
cmp ecx, 0x1e
jge 0x1007515a
cmp dword [ecx*4 + 0x1012d2d8], 0
jne 0x10075867
mov dword [ecx*4 + 0x1012d2d8], eax
wait
jmp 0x10077116
add ecx, esi
jmp 0x10075841
cmp edx, 0xa
jne 0x10075c1c
cmp esi, eax
je 0x10075887
cmp word [ebx + 8], cx
jne 0x10075887
push eax
call fcn.1006b690
add esp, 4
cmp dword [ebx + 0x10], 0
je 0x10074a86
movzx edx, word [ebx]
cmp esi, edx
jne 0x1007515a
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
add eax, 0x44c
mov dword [0x1011cd90], eax
call esi
mov dword [0x1012d234], eax
push 0xaf3b24
mov eax, dword [0x36208e4]
mov ecx, dword [eax + 0x1d24]
push ecx
call fcn.10006f10
add esp, 8
mov edi, eax
mov dword [ebp - 0x20], edi
mov byte [0x1012d3fb], 1
movzx esi, word [ebx + 8]
mov edx, dword [ebx + 0x3c]
mov dword [ebp - 0x1d4], edx
fld dword [ebx + 0x40]
call fcn.100867b0
mov dword [0x1011cd18], eax
fld dword [ebx + 0x44]
call fcn.100867b0
mov dword [0x1011cd14], eax
fld dword [ebx + 0x48]
call fcn.100867b0
mov dword [0x1011cd10], eax
movzx ecx, word [ebx + 0x8f]
mov dword [0x1012d3d0], ecx
cmp esi, 0xbb8
jl 0x10075939
cmp byte [ebx + 0x53], 0
jne 0x10075939
mov eax, dword [ebx + 0x10]
cdq
add dword [0x1012d900], eax
adc dword [0x1012d904], edx
cmp ecx, 5
je 0x10075943
cmp ecx, 1
jne 0x10075971
cmp dword [0x1019f3ec], 1
jne 0x1007595a
cmp byte [0x1012d412], 1
jne 0x1007595a
call fcn.1003cb20
cmp dword [0x1011d1b4], 0
jle 0x10075971
cmp dword [0x10191854], 1
jne 0x10075971
call fcn.1003cb20
cmp dword [0x1019f4a8], 1
jne 0x100759d5
cmp byte [0x1012d412], 1
jne 0x100759d5
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov eax, dword [ebp - 0x1c8]
fld dword [eax + 0x1f64]
call fcn.100867b0
mov dword [ebp - 0x1c4], eax
mov ecx, dword [ebp - 0x1c8]
fld dword [ecx + 0x1f6c]
call fcn.100867b0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10037e60
add esp, 8
test edi, edi
je 0x100759e8
movzx edx, word [edi + 0x14]
cmp edx, esi
jne 0x100759e8
mov byte [0x1012d3f7], 1
mov ecx, dword [ebp - 0x1d4]
cmp ecx, 0xc9
jne 0x10075a63
cmp dword [ebx + 0x38], 0x7a5d3
jne 0x10075a63
mov eax, dword [0x1011cd20]
inc eax
mov dword [0x1011cd20], eax
cmp eax, dword [0x10191de0]
jl 0x10075a63
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd84], eax
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f64]
call fcn.100867b0
mov dword [ebp - 0x1c4], eax
fld dword [esi + 0x1f6c]
call fcn.100867b0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
sub esp, 8
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10037e60
add esp, 8
mov ecx, dword [ebp - 0x1d4]
cmp byte [0x1012d3fa], 1
jne 0x10075ac1
cmp ecx, 0xc9
je 0x10075a91
cmp ecx, 0xcd
je 0x10075a91
cmp ecx, 0xa6
je 0x10075a91
cmp ecx, 0x7e
je 0x10075a91
cmp ecx, 0xdc
jne case.default.0x100764c3
mov eax, dword [ebx + 0x38]
cmp eax, 0x7a5d1
je case.default.0x100764c3
cmp eax, 0x7a5d2
je case.default.0x100764c3
cmp eax, 0x7a5d3
je case.default.0x100764c3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd80], eax
mov byte [0x1012d3fc], 1
wait
jmp 0x10077116
cmp dword [0x10197fe0], 1
jne 0x10075b25
cmp dword [0x1011cd68], 5
jne 0x10075b25
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f64]
call fcn.100867b0
mov dword [ebp - 0x1c4], eax
fld dword [esi + 0x1f6c]
call fcn.100867b0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10037e60
add esp, 8
mov ecx, dword [ebp - 0x1d4]
mov eax, 1
cmp dword [0x10191860], eax
jne 0x10075b57
cmp byte [0x1012d405], al
jne 0x10075b57
cmp byte [0x1012d3f9], al
jne 0x10075b57
cmp dword [0x1012d3e4], eax
jne 0x10075b57
mov dword [ebx], 0
mov dword [ebx + 4], 0
cmp ecx, 0xd2
je 0x10075b6f
cmp ecx, 0xd3
je 0x10075b6f
cmp ecx, 0xd4
jne 0x10075bbc
mov eax, dword [0x101a46e4]
add eax, 0x47
push eax
mov ecx, dword [0x100eaf2c]
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov al, byte [0x101b8988]
cmp al, 1
jne 0x10075bb0
push 0x1003cd00
push 0x7d0
mov edx, dword [0x101a46e4]
add edx, 0x4e
push edx
mov eax, dword [0x100eaf2c]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x10075bbc
mov byte [0x1012d405], al
mov byte [0x1012d3f8], 0
mov byte [0x1012d3fd], 1
mov byte [0x1012d3fe], 1
mov byte [0x1012d3ff], 1
mov byte [0x1012d400], 1
mov dword [0x1012d23c], 0
mov eax, 1
cmp dword [0x1019192c], eax
jne 0x1007515a
cmp dword [0x1011d1b4], 0
jle 0x1007515a
cmp dword [0x1018de68], eax
je 0x1007515a
push 0
call fcn.10072a80
add esp, 4
wait
jmp 0x10077116
cmp edx, 0x2f
jne 0x10075e48
cmp esi, eax
jne 0x1007515a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1012d234], eax
mov byte [0x1012d3fb], 1
mov edi, dword [ebx + 0x16]
fld dword [ebx + 0x1a]
call fcn.100867b0
mov dword [0x1011cd18], eax
fld dword [ebx + 0x1e]
call fcn.100867b0
mov dword [0x1011cd14], eax
fld dword [ebx + 0x22]
call fcn.100867b0
mov dword [0x1011cd10], eax
cmp byte [ebx + 0x26], 0
jne 0x10075ca3
xor ecx, ecx
mov dword [ebp - 0x208], ecx
cmp ecx, 0x14
jge 0x10075ca3
movzx eax, word [ebx + ecx*4 + 0x52]
test eax, eax
je 0x10075ca3
cmp eax, 0xbb8
jl 0x10075ca0
mov eax, dword [ebx + ecx*4 + 0xa2]
cdq
add dword [0x1012d900], eax
adc dword [0x1012d904], edx
inc ecx
jmp 0x10075c71
cmp dword [0x1019f4a8], 1
jne 0x10075d03
cmp byte [0x1012d412], 1
jne 0x10075d03
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f64]
call fcn.100867b0
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1f6c]
call fcn.100867b0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10037e60
add esp, 8
jmp 0x10075d09
mov esi, dword [ebp - 0x1c8]
push 0xaf3b24
mov ecx, dword [0x36208e4]
mov edx, dword [ecx + 0x1d24]
push edx
call fcn.10006f10
add esp, 8
test eax, eax
je 0x10075d38
mov ax, word [eax + 0x14]
cmp ax, word [ebx + 8]
jne 0x10075d38
mov byte [0x1012d3f7], 1
cmp edi, 0xc9
jne 0x10075da1
cmp dword [ebx + 0x12], 0x7a5d3
jne 0x10075da1
mov eax, dword [0x1011cd20]
inc eax
mov dword [0x1011cd20], eax
cmp eax, dword [0x10191de0]
jl 0x10075da1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd84], eax
fld dword [esi + 0x1f64]
call fcn.100867b0
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1f6c]
call fcn.100867b0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
sub esp, 8
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10037e60
add esp, 8
cmp byte [0x1012d3fa], 1
jne 0x10075dce
cmp edi, 0xc9
je 0x10075dc6
cmp edi, 0xcd
je 0x10075dc6
cmp edi, 0xa6
jne case.default.0x100764c3
mov eax, dword [ebx + 0x12]
jmp 0x10075a94
cmp dword [0x10197fe0], 1
jne 0x10075e26
cmp dword [0x1011cd68], 5
jne 0x10075e26
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
fld dword [esi + 0x1f64]
call fcn.100867b0
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1f6c]
call fcn.100867b0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10037e60
add esp, 8
mov byte [0x1012d3fd], 1
mov byte [0x1012d3fe], 1
mov byte [0x1012d3ff], 1
mov byte [0x1012d400], 1
wait
jmp 0x10077116
mov edi, 0x270f
cmp cx, di
jne 0x10075e82
mov ecx, 0x1709
cmp dx, cx
jne 0x10075e82
cmp dword [ebx + 8], 3
jne 0x1007515a
add ebx, 0x10
push ebx
call fcn.1003a340
push 0x100a1764
call fcn.100080a0
add esp, 8
wait
jmp 0x10077116
cmp esi, eax
jne 0x10075eca
cmp dword [ebx + 4], 0x38177a
jne 0x10075eb0
cmp dword [ebx + 8], 0x13
jne 0x1007515a
mov dword [0x1012d214], 0xfffff8f8
mov dword [ebx + 4], 0
wait
jmp 0x10077116
cmp esi, eax
jne 0x10075eca
mov ecx, 0xe1
cmp dx, cx
jne 0x10075eca
mov dword [ebx], 0
wait
jmp 0x10077116
cmp esi, dword [ebx + 0x10]
jne 0x10075f70
mov ecx, 0x98
cmp dx, cx
jne 0x10075f70
mov esi, 1
cmp dword [ebx + 8], esi
jne 0x10075f04
cmp dword [ebx + 0xc], esi
jne 0x10075f04
lea ecx, [ebx + 0x14]
mov edx, 0x1011c6d4
mov al, byte [ecx]
mov byte [edx], al
add ecx, esi
add edx, esi
test al, al
jne 0x10075ef8
cmp byte [ebx + 8], 1
jne 0x1007515a
cmp dword [0x10195258], esi
jne 0x1007515a
push 0x1f4
call sub.mfc100.dll_Ordinal_265
mov esi, eax
push 0x1011c4d0
push 0x100a0480
push esi
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
call edi
add esp, 0x10
push 0x11
push 0
push esi
call dword [sym.imp.WINMM.dll_PlaySoundA]
push esi
call sub.mfc100.dll_Ordinal_1296
add ebx, 0x14
push ebx
push 0x100a1750
push 0x1011c6e8
call edi
push 0x1011c6e8
call fcn.100080a0
add esp, 0x14
wait
jmp 0x10077116
cmp esi, eax
jne 0x100761bf
cmp edx, 0x35
jne 0x10075fbd
cmp word [ebx + 6], 4
je 0x10075fbd
mov eax, 1
cmp dword [0x10192fd0], eax
jne 0x1007515a
cmp dword [0x1012d3e4], eax
jne 0x1007515a
cmp dword [0x10192e8c], eax
jne 0x1007515a
mov dword [0x1012d394], 0xffff8ad0
wait
jmp 0x10077116
cmp esi, eax
jne 0x100761bf
cmp dword [ebx + 4], 0x1c0079
jne 0x100761bf
mov byte [0x1012d407], 1
mov ecx, dword [ebx + 0x18]
mov dword [0x1012d38c], ecx
cmp ecx, 0x321
jne 0x10075ff7
mov dword [ebp - 0x24], 0x20ade9
mov byte [ebp - 0x20], 0
jmp 0x10076012
cmp ecx, 0x4b1
jne 0x10076012
mov dword [ebp - 0x1d4], 0x20ac8e0f
mov word [ebp - 0x1d0], 0
mov dl, byte [0x1012d406]
cmp dl, 1
jne 0x100761a5
fld dword [0x101b8d24]
fld dword [ebx + 8]
fucompp
fnstsw ax
test ah, 0x44
jp 0x1007618e
fld dword [0x101b8d20]
fld dword [ebx + 0x10]
fucompp
fnstsw ax
test ah, 0x44
jp 0x1007618e
fld dword [0x1018e640]
fld qword [0x100a1748]
fucompp
fnstsw ax
test ah, 0x44
jp 0x100760ab
xor ecx, ecx
mov dword [ebp - 0x220], ecx
mov eax, dword [0x1018f5e0]
lea edx, [eax - 1]
cmp ecx, edx
jge 0x100760a3
fld dword [ecx*4 + 0x1018de74]
fstp dword [ecx*4 + 0x1018de70]
fld dword [ecx*4 + 0x1018e644]
fstp dword [ecx*4 + 0x1018e640]
fld dword [ecx*4 + 0x1018ee14]
fstp dword [ecx*4 + 0x1018ee10]
inc ecx
jmp 0x10076064
dec eax
mov dword [0x1018f5e0], eax
jmp 0x100760b0
mov eax, dword [0x1018f5e0]
fldz
fst dword [0x101b8d24]
fstp dword [0x101b8d20]
xor ecx, ecx
mov dword [ebp - 0x210], ecx
cmp ecx, eax
jge 0x1007610e
sub eax, ecx
lea eax, [eax*4 + 0x1018de70]
fld dword [eax - 4]
fstp dword [eax]
mov eax, dword [0x1018f5e0]
sub eax, ecx
add eax, eax
add eax, eax
fld dword [eax + 0x1018e63c]
fstp dword [eax + 0x1018e640]
mov eax, dword [0x1018f5e0]
sub eax, ecx
add eax, eax
add eax, eax
fld dword [eax + 0x1018ee0c]
fstp dword [eax + 0x1018ee10]
inc ecx
mov eax, dword [0x1018f5e0]
jmp 0x100760c0
inc eax
mov dword [0x1018f5e0], eax
mov edi, dword [ebp - 0x1c8]
fld dword [edi + 0x1f64]
call fcn.100867b0
mov esi, eax
fld dword [edi + 0x1f6c]
call fcn.100867b0
mov edi, eax
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 8
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
call ebx
cdq
mov ecx, 0x3c
idiv ecx
add edx, esi
mov dword [ebp - 0x20], edx
fild dword [ebp - 0x20]
fstp dword [0x1018de70]
fld dword [0x100a1740]
fstp dword [0x1018e640]
call ebx
cdq
mov ecx, 0x3c
idiv ecx
add edx, edi
mov dword [ebp - 0x20], edx
fild dword [ebp - 0x20]
fstp dword [0x1018ee10]
wait
jmp 0x10077116
cmp dl, 1
jne 0x100761a5
fld dword [ebx + 8]
fstp dword [0x101b8d24]
fld dword [ebx + 0x10]
fstp dword [0x101b8d20]
push ecx
call fcn.100082d0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1012d238], eax
wait
jmp 0x10077116
mov ecx, 0xd6
cmp dx, cx
jne 0x100761eb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd7c], eax
mov eax, dword [ebx + 0xd]
mov dword [0x1012d38c], eax
push eax
call fcn.100082d0
add esp, 4
wait
jmp 0x10077116
cmp esi, eax
jne 0x10076387
cmp dword [ebx + 4], 0x180031
jne 0x10076387
cmp word [ebx + 0x10], 0
jne 0x1007515a
mov edi, 1
cmp dword [0x10197260], edi
jne 0x1007624a
movzx edx, word [ebx + 0xe]
push edx
push edi
call fcn.10039c30
add ebx, 0x12
push ebx
push 0x100a1730
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.100080a0
add esp, 0x18
wait
jmp 0x10077116
cmp dword [0x101976a8], edi
jne 0x100762d6
movzx esi, word [ebx + 0xe]
mov eax, esi
imul eax, eax, 0x1cc
add eax, 0xfbaf2d
mov ecx, dword [ebp - 0x1c8]
add ecx, 0x1ff8
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x10076293
test dl, dl
je 0x1007628f
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x10076293
add ecx, 2
add eax, 2
test dl, dl
jne 0x10076273
xor eax, eax
jmp 0x10076298
sbb eax, eax
sbb eax, 0xffffffff
push esi
test eax, eax
jne 0x100762ae
push edi
call fcn.10039c30
lea eax, [ebx + 0x12]
push eax
push 0x100a1730
jmp 0x100762be
push 2
call fcn.10039c30
lea ecx, [ebx + 0x12]
push ecx
push 0x100a1720
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.100080a0
add esp, 0x18
cmp dword [0x1019725c], edi
jne 0x1007515a
xor edi, edi
mov dword [ebp - 0x1f0], edi
mov ecx, 0x10197270
call fcn.10001cc0
cmp edi, eax
jge 0x10076354
lea edx, [ebp - 0x30]
push edx
push edi
push 0x189
mov eax, dword [0x10197290]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea esi, [ebx + 0x12]
mov ecx, esi
lea eax, [ebp - 0x30]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076336
test dl, dl
je 0x10076332
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076336
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076316
xor eax, eax
jmp 0x1007633b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076351
movzx ecx, word [ebx + 0xe]
push ecx
push 1
call fcn.10039c30
push esi
jmp 0x10076227
inc edi
jmp 0x100762e4
movzx edx, word [ebx + 0xe]
push edx
push 2
call fcn.10039c30
add ebx, 0x12
push ebx
push 0x100a1720
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.100080a0
add esp, 0x18
wait
jmp 0x10077116
mov ecx, dword [ebx + 4]
cmp ecx, 0x5c3125
jne 0x100763b3
cmp dword [ebx + 0xc], 0xd
jne 0x1007515a
cmp dword [ebx + 8], 1
jne 0x1007515a
mov dword [ebx + 4], 0
wait
jmp 0x10077116
cmp eax, esi
jne 0x100764f4
cmp edx, 0x3d
jne 0x100764f4
cmp dword [0x10192e88], 1
jne 0x1007515a
movzx eax, word [ebx + 8]
mov ecx, 0x2c0d
cmp ax, cx
je 0x1007640b
mov edx, 0x2c0e
cmp ax, dx
je 0x1007640b
mov ecx, 0x2c0f
cmp ax, cx
je 0x1007640b
mov edx, 0x468d
cmp ax, dx
je 0x1007640b
mov ecx, 0x468e
cmp ax, cx
jne 0x1007515a
cmp byte [ebx + 0xc], 1
jne 0x1007515a
cmp byte [ebx + 0xd], 0
jne 0x1007515a
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [0x1012d238]
cmp eax, 0x7d0
jb 0x1007515a
mov eax, dword [0x10191a04]
cmp eax, 1
jne 0x100764a6
cmp dword [0x1011cd68], 2
jne 0x100764a6
call esi
mov dword [0x1012d210], eax
mov eax, dword [0x10192fcc]
cmp eax, 4
ja case.default.0x100764c3
jmp dword [eax*4 + 0x1007713c]
push 0
push 0x92c0d
call fcn.1003a1d0
add esp, 8
wait
jmp 0x10077116
push 0
push 0x92c0f
call fcn.1003a1d0
add esp, 8
wait
jmp 0x10077116
push 0
push 0xf468d
call fcn.1003a1d0
add esp, 8
wait
jmp 0x10077116
test eax, eax
jne case.default.0x100764c3
call esi
mov dword [0x1012d210], eax
mov eax, dword [0x10192fcc]
cmp eax, 4
ja case.default.0x100764c3
jmp dword [eax*4 + 0x10077150]
push 0
push 0x92c0e
call fcn.1003a1d0
add esp, 8
wait
jmp 0x10077116
push 0
push 0xf468e
call fcn.1003a1d0
add esp, 8
wait
jmp 0x10077116
cmp ecx, 0xbc0066
jne 0x10076c8c
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov word [ebp - 0x20], ax
lea esi, [ebx + 0x21]
push 4
push esi
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x1f4], edx
mov eax, esi
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10076530
sub eax, edi
cmp edx, eax
jae 0x1007654e
cmp byte [edx + ebx + 0x21], 0xff
jne 0x1007671e
xor eax, eax
mov word [ebx + 4], ax
cmp byte [ebx + 8], 5
ja 0x10076764
movzx ecx, word [ebx]
cmp dword [ebp - 0x1c4], ecx
je 0x10076764
push str.rxjhshenqi.com
push esi
mov edi, dword [sym.imp.MSVCR100.dll_strstr]
call edi
add esp, 8
test eax, eax
jne 0x10076764
push 0x100a170c
push esi
call edi
add esp, 8
test eax, eax
jne 0x100765bc
push 0x100a1708
push esi
call edi
add esp, 8
test eax, eax
jne 0x100765bc
push 0x100a1704
push esi
call edi
add esp, 8
test eax, eax
jne 0x100765bc
push 0x100a1700
push esi
call edi
add esp, 8
test eax, eax
je 0x100765c2
xor edx, edx
mov word [ebx + 4], dx
push 0x100a16fc
push esi
call edi
add esp, 8
test eax, eax
je 0x100765f5
push 0x100a16f8
push esi
call edi
add esp, 8
test eax, eax
je 0x100765f5
push 0x100a16f4
push esi
call edi
add esp, 8
test eax, eax
je 0x100765f5
xor eax, eax
mov word [ebx + 4], ax
push 0x100a16f0
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076626
push 0x100a16ec
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076626
push 0x100a16e8
push esi
call edi
add esp, 8
test eax, eax
je 0x100766b3
push 0x100a16e4
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076653
push 0x100a16e0
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076653
push 0x100a16dc
push esi
call edi
add esp, 8
test eax, eax
je 0x100766b3
push 0x100a16d8
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076680
push 0x100a16d4
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076680
push 0x100a16d0
push esi
call edi
add esp, 8
test eax, eax
je 0x100766b3
push 0x100a16cc
push esi
call edi
add esp, 8
test eax, eax
jne 0x100766ad
push 0x100a16c8
push esi
call edi
add esp, 8
test eax, eax
jne 0x100766ad
push 0x100a16c4
push esi
call edi
add esp, 8
test eax, eax
je 0x100766b3
xor ecx, ecx
mov word [ebx + 4], cx
xor ebx, ebx
mov dword [ebp - 0x204], ebx
mov ecx, 0x101a2060
call fcn.10001040
cmp ebx, eax
jge 0x10076764
mov edx, dword [0x101a2060]
mov eax, dword [edx + ebx*4]
cmp byte [eax], 0x56
jne 0x1007673a
xor esi, esi
mov dword [ebp - 0x1fc], esi
mov eax, dword [0x101a2060]
mov edx, dword [eax + ebx*4]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100766f0
sub eax, edi
dec eax
cmp esi, eax
jae 0x10076724
movsx eax, byte [esi + edx + 1]
push eax
mov ecx, dword [ebp - 0x1cc]
add ecx, 0x21
push ecx
call dword [sym.imp.MSVCR100.dll_strchr]
add esp, 8
test eax, eax
je 0x1007675e
inc esi
jmp 0x100766dd
inc edx
jmp 0x10076521
xor eax, eax
jne 0x1007675e
xor edx, edx
mov eax, dword [ebp - 0x1cc]
mov word [eax + 4], dx
wait
jmp 0x10077116
push eax
mov esi, dword [ebp - 0x1cc]
lea ecx, [esi + 0x21]
push ecx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1007675e
xor edx, edx
mov word [esi + 4], dx
wait
jmp 0x10077116
inc ebx
jmp 0x100766b5
mov ebx, dword [ebp - 0x1cc]
movzx esi, word [ebx]
mov edi, dword [ebp - 0x1c4]
cmp edi, esi
je 0x10076ab5
cmp byte [ebx + 8], 4
jne 0x10076824
mov ecx, 0x100a0188
lea eax, [ebx + 0x21]
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100767b0
test dl, dl
je 0x100767ac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100767b0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076790
xor eax, eax
jmp 0x100767b5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076824
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f6c]
call fcn.100867b0
push eax
fld dword [esi + 0x1f64]
call fcn.100867b0
push eax
mov eax, dword [0x35ed708]
push eax
push str._d._d._d
lea ecx, [ebp - 0x190]
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
mov edx, dword [0x12b5b20]
mov eax, dword [edx + 0x444]
mov ecx, dword [eax + 0x334]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 0x33c]
add eax, 0x344
lea edx, [ebp - 0x190]
push edx
push eax
call fcn.1003b690
add esp, 0x1c
jmp 0x10076ab5
cmp edi, esi
je 0x10076ab5
cmp byte [ebx + 8], 4
jne 0x100768af
lea eax, [ebx + 0x21]
cmp byte [eax], 0x23
jne 0x100768af
cmp byte [ebx + 0x22], 0x23
jne 0x100768af
push 0x1009e0ec
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
jne 0x10074a86
lea ecx, [ebx + 0x23]
cmp byte [ecx], 0x23
je 0x10076877
mov edx, 0x101b8900
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x10076868
jmp 0x10076ab5
lea eax, [ebx + 0x24]
push eax
lea ecx, [ebx + 0xa]
push ecx
push str._s._s
lea edx, [ebp - 0x190]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x190]
mov edx, 0x1012d4a4
nop
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x100768a0
jmp 0x10076ab5
cmp edi, esi
je 0x10076ab5
cmp byte [ebx + 8], 2
jne 0x10076bd1
lea eax, [ebx + 0x21]
cmp byte [eax], 0x23
jne 0x10076ab5
cmp byte [ebx + 0x22], 0x23
jne 0x10076ab5
push 0x1009e0ec
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
jne 0x10074a86
push 0x32
push eax
lea eax, [ebp - 0x190]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
or edi, 0xffffffff
mov dword [ebp - 0x1d4], edi
xor ecx, ecx
mov dword [ebp - 0x20c], ecx
lea eax, [ebx + 0x23]
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10076917
sub eax, esi
cmp ecx, eax
jae 0x1007694c
mov al, byte [ecx + ebx + 0x23]
cmp al, 0x2d
je 0x10076936
mov byte [ebp + ecx - 0x190], al
inc ecx
jmp 0x1007690b
lea ecx, [ecx + ebx + 0x24]
push ecx
call dword [sym.imp.MSVCR100.dll_atoi]
add esp, 4
mov edi, eax
mov dword [ebp - 0x1d4], eax
test edi, edi
js 0x10074a86
xor edi, edi
mov dword [ebp - 0x1d8], edi
mov ecx, 0x1019d4a4
call fcn.10009df0
cmp edi, eax
jge 0x10076a12
push edi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_4554
cmp eax, 1
jne 0x10076a00
push 0x64
push 0
lea edx, [ebp - 0x94]
push edx
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x64
lea eax, [ebp - 0x94]
push eax
push 0
push edi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_5176
lea ecx, [ebp - 0x94]
push ecx
call fcn.10023a50
add esp, 4
mov esi, eax
cmp esi, 0xffffffff
je 0x10076a06
mov ecx, dword [esi + 0x54]
mov ebx, dword [esi + 0xd0]
sub ecx, dword [esi + 0x50]
mov eax, 0xb81702e1
imul ecx
add edx, ecx
sar edx, 8
mov edi, edx
shr edi, 0x1f
add edi, edx
lea edx, [ebp - 0x190]
push edx
call dword [sym.imp.MSVCR100.dll_atoi]
add esp, 4
cmp eax, dword [esi]
jne 0x10076a00
cmp edi, ebx
jle 0x10076a00
cmp ebx, dword [ebp - 0x1d4]
jle 0x10076a29
mov edi, dword [ebp - 0x1d8]
inc edi
mov ebx, dword [ebp - 0x1cc]
jmp 0x10076956
xor eax, eax
jne 0x10076a29
lea eax, [ebx + 0x21]
push eax
push 2
call fcn.10039d00
add esp, 8
jmp 0x10076ab5
mov byte [0x1011c6e8], 0
mov ebx, dword [ebp - 0x1cc]
lea ecx, [ebx + 0x21]
push ecx
lea edx, [ebx + 0xa]
push edx
push 0x100a1200
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
xor edi, edi
xor esi, esi
mov dword [ebp - 0x214], esi
mov ecx, 0x101a21f8
call fcn.10001040
cmp esi, eax
jge 0x10076aa2
mov ecx, 0x1011c6e8
mov eax, dword [0x101a21f8]
mov eax, dword [eax + esi*4]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076a96
test dl, dl
je 0x10076a92
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076a96
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076a76
xor eax, eax
jmp 0x10076a9b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10076ab5
inc esi
jmp 0x10076a55
test edi, edi
jne 0x10076ab5
push 0x1011c6e8
mov ecx, 0x101a21f8
call fcn.10001110
cmp byte [ebx + 8], 2
jne 0x10076bd1
cmp dword [0x10198000], 1
jne 0x10076bd1
mov eax, dword [0x1011cd68]
cmp eax, 5
je 0x10076bd1
cmp eax, 2
je 0x10076bd1
lea ecx, [ebx + 0x25]
mov eax, 0x33ccf58
jmp 0x10076af0
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076b10
test dl, dl
je 0x10076b0c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076b10
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076af0
xor eax, eax
jmp 0x10076b15
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10076bd1
mov ecx, 0x1009e438
lea eax, [ebp - 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076b45
test dl, dl
je 0x10076b41
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076b45
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076b25
xor eax, eax
jmp 0x10076b4a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076bd1
mov dword [ebp - 0x1e8], eax
mov esi, 0xfbaf18
mov dword [ebp - 0x21c], esi
cmp esi, 0x110bdb8
jge 0x10076bd1
cmp byte [esi], 0
je 0x10076c52
lea edi, [ebx + 0x25]
mov ecx, edi
lea eax, [esi + 2]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076ba0
test dl, dl
je 0x10076b9c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076ba0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076b80
xor eax, eax
jmp 0x10076ba5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076c52
push edi
push 0x100a169c
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.100080a0
push esi
call fcn.10073010
add esp, 0x14
mov al, byte [ebx + 8]
cmp al, 4
jne 0x10076c63
cmp dword [0x10195248], 1
jne 0x10076c63
movzx ecx, word [ebx]
cmp dword [ebp - 0x1c4], ecx
je 0x1007515a
push 0x1f4
call sub.mfc100.dll_Ordinal_265
mov esi, eax
push 0x1011c4d0
push 0x100a0480
push esi
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
call edi
add esp, 0x10
push 0x11
push 0
push esi
call dword [sym.imp.WINMM.dll_PlaySoundA]
push esi
call sub.mfc100.dll_Ordinal_1296
lea edx, [ebx + 0x21]
push edx
add ebx, 0xa
push ebx
push 0x100a1690
push 0x1011c6e8
call edi
push 0x1011c6e8
call fcn.100080a0
add esp, 0x18
wait
jmp 0x10077116
inc dword [ebp - 0x1e8]
add esi, 0x1cc
jmp 0x10076b5d
cmp al, 0xb
jne 0x1007515a
push 0xa
add ebx, 0x21
push ebx
push 0x1011c6c4
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
mov byte [0x1011c6ce], 0
wait
jmp 0x10077116
mov edi, 0xe51
cmp word [ebx + 5], di
jne 0x10076de6
push 0x12c
push 0
lea eax, [ebp - 0x15c]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x1e4], eax
cmp eax, 0x32
jge 0x10076d94
push 0x10
lea ecx, [ebp - 0x1c8]
push ecx
movzx edx, byte [ebx + eax]
push edx
call dword [sym.imp.MSVCR100D.dll__itoa]
add esp, 0xc
lea eax, [ebp - 0x1c8]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10076ce2
sub eax, edx
cmp eax, 1
jne 0x10076d09
mov byte [ebp - 0x1c6], cl
mov al, byte [ebp - 0x1c8]
mov byte [ebp - 0x1c7], al
mov byte [ebp - 0x1c8], 0x30
xor ecx, ecx
mov dword [ebp - 0x224], ecx
cmp ecx, 2
jge 0x10076d35
mov al, byte [ebp + ecx - 0x1c8]
cmp al, 0x61
jl 0x10076d32
cmp al, 0x7a
jg 0x10076d32
movsx edx, al
sub edx, 0x20
mov byte [ebp + ecx - 0x1c8], dl
inc ecx
jmp 0x10076d0b
lea edi, [ebp - 0x15c]
dec edi
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10076d40
mov ax, word [0x1009f2c0]
mov word [edi], ax
lea eax, [ebp - 0x1c8]
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10076d60
sub eax, edx
lea edi, [ebp - 0x15c]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x10076d70
mov ecx, eax
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x1e4]
inc eax
jmp 0x10076cb3
lea ecx, [ebp - 0x15c]
push ecx
call fcn.100080a0
add esp, 4
cmp dword [0x101a0734], 1
jne 0x1007515a
mov eax, dword [ebx + 4]
cmp eax, 0xe5103
jne 0x10076dbe
push 4
jmp 0x10076dcb
cmp eax, 0xe5105
jne 0x1007515a
push 6
mov edx, dword [ebx + 0x12]
push edx
movzx eax, word [ebx + 0x10]
push eax
mov ecx, dword [ebx + 0xc]
push ecx
call fcn.1003be50
add esp, 0x10
wait
jmp 0x10077116
cmp dword [ebx], 0x2213270f
jne 0x10076f6f
mov edi, 1
cmp word [ebx + 8], di
jne 0x1007515a
movzx eax, word [ebx + 0x14]
cmp ax, di
jne 0x10076eb4
movzx edx, word [ebx + 0xc]
push edx
push 0x1009e8ec
push 0x1011c6e8
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
push 0x1011c6e8
call fcn.100080a0
add esp, 0x10
cmp dword [0x1019ff3c], edi
jne 0x10076e52
movzx eax, word [ebx + 0xc]
push eax
movzx ecx, word [ebx + 0xa]
push ecx
push edi
movzx edx, word [ebx + 0x14]
push edx
call fcn.1003b590
add esp, 0x10
movzx eax, word [ebx + 0xa]
mov dword [0x101b899c], eax
movzx ecx, word [ebx + 0xc]
mov dword [0x101b8998], ecx
push 0x7d
push 0
lea edx, [ebp - 0xb0]
push edx
call sub.MSVCR100.dll_memset
mov eax, dword [ebx + 0xa]
push eax
push 0x35f6968
push 0x1009ee24
lea ecx, [ebp - 0xb0]
push ecx
call esi
add esp, 0x1c
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x271a
mov eax, dword [0x1011956c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
wait
jmp 0x10077116
cmp eax, 2
jne 0x1007515a
cmp dword [0x1019ff3c], edi
jne 0x1007515a
cmp dword [0x101b899c], 0
jne 0x10076f3d
cmp dword [0x101b8998], 0
jne 0x10076f3d
movzx ecx, word [ebx + 0xa]
mov dword [0x101b899c], ecx
movzx edx, word [ebx + 0xc]
mov dword [0x101b8998], edx
push 0x7d
push 0
lea eax, [ebp - 0xb0]
push eax
call sub.MSVCR100.dll_memset
mov ecx, dword [ebx + 0xa]
push ecx
push 0x35f6968
push 0x1009ee24
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x271a
mov ecx, dword [0x1011956c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x1019ff40]
imul eax, eax, 0x3e8
add eax, edi
push 0x1003bfc0
push eax
mov edx, dword [0x101a46e4]
add edx, 0x281c
push edx
mov eax, dword [0x100eaf2c]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
wait
jmp 0x10077116
cmp eax, esi
jne 0x1007515a
cmp ecx, 0x180091
je 0x1007515a
cmp eax, esi
jne 0x1007515a
cmp edx, 0x69
jne 0x1007706f
cmp dword [0x33ccfd8], 0
jne 0x10076ff4
cmp dword [ebx + 0xc], 0
jle 0x10076ff4
mov edi, 1
cmp dword [0x1019efc4], edi
jne 0x10076fbe
push esi
push 0x1009c994
call fcn.10006c20
add esp, 8
cmp dword [0x1019ff34], edi
jne 0x10076ff9
push 0x3e8
push 0x3e8
cmp dword [0x1019ff38], 0
jne 0x10076fe7
push 2
push 4
call fcn.1003b590
add esp, 0x10
jmp 0x10076ff9
push edi
push 4
call fcn.1003b590
add esp, 0x10
jmp 0x10076ff9
mov edi, 1
cmp dword [0x1012d3e4], edi
jne 0x1007515a
cmp dword [0x10198030], edi
jne 0x1007515a
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x1007515a
mov ecx, dword [0x33ccfd8]
sub ecx, eax
cmp ecx, dword [0x1019802c]
jl 0x1007515a
cmp dword [0x1011cd68], 2
je 0x1007515a
cmp dword [0x10197d88], edi
jne 0x1007705a
push 2
push 0x100a1678
call fcn.1006a9a0
add esp, 8
wait
jmp 0x10077116
push 0
push 0x100a1678
call fcn.1006a9a0
add esp, 8
wait
jmp 0x10077116
cmp eax, esi
jne 0x1007515a
cmp edx, 0x6b
jne 0x1007515a
imul esi, esi, 0x1cc
mov dl, byte [ebx + 8]
mov byte [esi + 0xfbaf40], dl
mov ecx, dword [ebx + 0x2c8]
mov dword [esi + 0xfbafd0], ecx
mov eax, 1
cmp dword [0x10190e84], eax
jne 0x1007515a
cmp dword [0x1012d3e4], eax
jne 0x1007515a
movzx edx, byte [ebx + 8]
cmp edx, dword [0x10190e88]
jne 0x1007515a
push 0x100a165c
call fcn.100080a0
add esp, 4
mov ecx, dword [0x1011d1bc]
call fcn.1006f0b0
call fcn.10046150
wait
jmp 0x10077116
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.10086746
mov esp, ebp
pop ebp
ret