Function at 0x10074960
Capabilities:
Check for software breakpoints
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x100ab208
push 0x1008695a
mov eax, dword fs:[0]
push eax
sub esp, 0x224
mov eax, dword [0x100ae8c8]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x1cc], ebx
wait
mov dword [ebp - 4], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [0x1012d22c], eax
mov eax, dword [0x2feacec]
mov dword [ebp - 0x1c8], eax
cmp byte [0x1012d408], 1
jne 0x10074a6c
test eax, eax
jne 0x10074a70
cmp dword [ebx + 4], 0x1b0014
jne 0x10074a6c
push 0x7d
push eax
lea eax, [ebp - 0xb0]
push eax
call sub.MSVCR100.dll_memset
push 0x101a4508
push 0x101a45d8
push 0x10095644
lea ecx, [ebp - 0xb0]
push ecx
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
add esp, 0x1c
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x291
mov eax, dword [0x1011956c]
push eax
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
call edi
push 0x101a45d8
push 0x100a18dc
lea ecx, [ebp - 0xb0]
push ecx
call esi
add esp, 0xc
lea edx, [ebp - 0xb0]
push edx
mov eax, dword [0x100eaf2c]
push eax
push 0x2712
mov ecx, dword [0x1011956c]
push ecx
call edi
wait
jmp 0x100770f6
test eax, eax
je 0x10074a66
call edi
mov dword [0x1012d230], eax
mov edx, dword [ebp - 0x1c8]
movzx esi, word [edx + 0x14]
mov dword [ebp - 0x1c4], esi
push ebx
call fcn.10073260
push ebx
call fcn.1005d050
add esp, 8
movzx eax, word [ebx + 4]
cmp eax, 0x65
je 0x10074aa9
cmp eax, 0x2f
je 0x10074aa9
cmp eax, 0xa
jne 0x10074ab3
movzx eax, word [ebx]
mov byte [eax + 0x1011d208], 0
mov eax, dword [ebx + 4]
cmp eax, 0x40080
jne 0x10074ac9
mov dword [ebx + 8], 0
jmp 0x10074c5d
cmp eax, 0xb80051
jne 0x10074c5d
mov al, byte [ebx + 8]
cmp al, 0x15
jne 0x10074b09
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a18c4
mov dword [0x1011cd88], eax
lea ecx, [ebp - 0xf8]
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea edx, [ebp - 0xf8]
push edx
jmp 0x10074c55
cmp al, 0x16
jne 0x10074b3b
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a18ac
mov dword [0x1011cd88], eax
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea ecx, [ebp - 0xf8]
push ecx
jmp 0x10074c55
cmp al, 0x17
jne 0x10074b52
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1898
jmp 0x10074c3a
cmp al, 0xb
je 0x10074c2c
cmp al, 0x29
je 0x10074c2c
cmp al, 0xc
je 0x10074c19
cmp al, 0x2a
je 0x10074c19
cmp al, 0xd
je 0x10074c06
cmp al, 0x2b
je 0x10074c06
cmp al, 0x3d
jne 0x10074b99
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1884
jmp 0x10074ae9
cmp al, 0x3e
jne 0x10074bb0
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1870
jmp 0x10074b1b
cmp al, 0x3f
jne 0x10074bc4
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a185c
jmp 0x10074c3a
cmp al, 0xc9
jne 0x10074bdb
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1848
jmp 0x10074ae9
cmp al, 0xca
jne 0x10074bf2
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1830
jmp 0x10074b1b
cmp al, 0xcb
jne 0x10074c5d
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1818
jmp 0x10074c3a
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1804
jmp 0x10074ae9
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a17f0
jmp 0x10074b1b
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a17d8
lea edx, [ebp - 0xf8]
push edx
mov dword [0x1011cd88], eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea eax, [ebp - 0xf8]
push eax
call fcn.1003ae80
add esp, 0x14
movzx ecx, word [ebx]
mov eax, ecx
cmp eax, esi
jne 0x10074cde
cmp word [ebx + 4], 4
jne 0x10074c7e
cmp byte [ebx + 8], 1
mov byte [0x1012d410], 1
wait
jmp 0x100770f6
cmp eax, esi
jne 0x10074cde
cmp word [ebx + 4], 0x6a
jne 0x10074cde
cmp dword [ebx + 0x34], 0
jl 0x10074cde
jg 0x10074c97
cmp dword [ebx + 0x30], 0
jbe 0x10074cde
mov al, al
mov cl, cl
mov dl, dl
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebx + 0x34]
mov edx, dword [0x350966c]
mov esi, dword [0x3509670]
sub eax, edx
sbb ecx, esi
mov edx, dword [0x1012d290]
add edx, eax
mov dword [0x1012d290], edx
mov eax, dword [0x1012d294]
adc eax, ecx
mov dword [0x1012d294], eax
mov dword [0x1012d2a0], edx
mov dword [0x1012d2a4], eax
wait
jmp 0x100770f6
movzx edx, word [ebx + 4]
cmp edx, 0x7b
jne 0x10074e78
cmp dword [0x10191854], 1
jne 0x10074e78
movzx ecx, word [ebx + 0x10]
push ecx
call fcn.10006fb0
add esp, 4
mov edi, eax
test edi, edi
je 0x10074a66
fld dword [ebx + 0x1e]
call fcn.100867f0
mov dword [ebp - 0x1cc], eax
fld dword [ebx + 0x26]
call fcn.100867f0
mov dword [ebp - 0x1c4], eax
push 0xd9fc74
mov edx, dword [ebp - 0x1c8]
mov eax, dword [edx + 0x1d20]
push eax
call fcn.10006f80
add esp, 8
test eax, eax
jne 0x10074a66
cmp dword [0x1011d1ac], eax
je 0x10074a66
mov eax, 1
mov dword [ebp - 0x1d4], eax
cmp dword [0x10191868], eax
jne 0x10074dc4
xor esi, esi
mov dword [ebp - 0x1d4], esi
mov dword [ebp - 0x230], esi
mov ecx, 0x1019ac1c
call fcn.10001080
cmp esi, eax
jge 0x10074dbf
mov ecx, edi
mov edx, dword [0x1019ac1c]
mov eax, dword [edx + esi*4]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10074db3
test dl, dl
je 0x10074daf
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10074db3
add eax, 2
add ecx, 2
test dl, dl
jne 0x10074d93
xor eax, eax
jmp 0x10074db8
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10074dd0
inc esi
jmp 0x10074d74
mov eax, 1
cmp dword [ebp - 0x1d4], eax
jne 0x1007513a
fild dword [ebp - 0x1c4]
fstp dword [ebp - 0x1c4]
fild dword [ebp - 0x1cc]
fstp dword [ebp - 0x1cc]
sub esp, 0x10
fld dword [ebp - 0x1c4]
fstp dword [esp + 0xc]
fld dword [ebp - 0x1cc]
fstp dword [esp + 8]
fld dword [0x1012d2ac]
fstp dword [esp + 4]
fld dword [0x1012d2a8]
fstp dword [esp]
call fcn.10008270
add esp, 0x10
fild dword [0x1012d2cc]
fcompp
fnstsw ax
test ah, 0x41
jnp 0x10074a66
sub esp, 8
fld dword [ebp - 0x1c4]
fstp dword [esp + 4]
fld dword [ebp - 0x1cc]
fstp dword [esp]
call fcn.10037e50
fld dword [ebp - 0x1c4]
fstp dword [esp + 4]
fld dword [ebp - 0x1cc]
fstp dword [esp]
movzx eax, word [ebx]
push eax
push 0xffffffffffffffff
call fcn.10037ea0
movzx ecx, word [ebx]
push ecx
call fcn.10037d70
add esp, 0x14
wait
jmp 0x100770f6
cmp eax, esi
jne 0x10074ebc
mov edi, 0x84
cmp word [ebx + 2], di
jne 0x10074eb6
movzx eax, word [ebx + 0xa]
cmp eax, 0xb
je 0x10074e9e
mov edx, 0x3f3
cmp ax, dx
jne 0x1007513a
movzx eax, word [ebx + 0xc]
push eax
movzx ecx, word [ebx + 8]
push ecx
call fcn.10007ab0
add esp, 8
wait
jmp 0x100770f6
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp edx, 0x65
jne 0x10075291
cmp esi, eax
jne 0x10074f14
cmp byte [0x1012d418], 1
jne 0x10074f1d
cmp dword [0x1012d3e4], 0
jne 0x10074f1d
fld dword [ebx + 0xc]
call fcn.100867f0
mov esi, eax
fld dword [ebx + 0x14]
call fcn.100867f0
push eax
push esi
push 0x100a17c8
lea edx, [ebp - 0x94]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0xf
lea eax, [ebp - 0x94]
push eax
call fcn.1003ae80
add esp, 0x18
jmp 0x10074f1d
push eax
call fcn.1006b650
add esp, 4
cmp dword [0x10198028], 1
jne 0x10074a66
call edi
sub eax, dword [0x1012d260]
cmp eax, 0x1388
jb 0x10074a66
cmp dword [0x3505b88], 0
jle 0x10074a66
mov eax, 1
cmp dword [0x10197d80], eax
jne 0x10074a66
cmp dword [0x1012d3e4], eax
jne 0x10074a66
fld dword [ebx + 0xc]
call fcn.100867f0
mov dword [ebp - 0x1c4], eax
fld dword [ebx + 0x14]
call fcn.100867f0
mov dword [ebp - 0x1cc], eax
movzx ecx, word [ebx]
push ecx
lea edx, [ebp - 0x94]
push edx
call fcn.1003c8e0
add esp, 8
test al, al
je 0x10074a66
movzx eax, word [ebx]
push eax
lea ecx, [ebp - 0x1c0]
push ecx
call fcn.1003c920
mov eax, dword [ebp - 0x1c8]
fld dword [eax + 0x1f74]
fstp dword [esp + 4]
fld dword [eax + 0x1f6c]
fstp dword [esp]
fild dword [ebp - 0x1cc]
sub esp, 8
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10008270
add esp, 0x10
fild dword [0x10197d7c]
fcompp
fnstsw ax
test ah, 0x41
jne 0x1007513a
xor esi, esi
lea edi, [esi + 2]
mov dword [ebp - 0x218], esi
mov ecx, 0x101a206c
call fcn.10001080
cmp esi, eax
jge 0x10075146
mov edx, dword [0x101a206c]
mov ecx, dword [edx + esi*4]
lea eax, [ebp - 0x94]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10075042
test dl, dl
je 0x1007503e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10075042
add eax, edi
add ecx, edi
test dl, dl
jne 0x10075024
xor eax, eax
jmp 0x10075047
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10075140
cmp dword [0x1011cd68], edi
jne 0x100750a3
cmp dword [0x10198018], 1
jne 0x100750a3
sub esp, 0x10
fld dword [0x1012d2ac]
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fild dword [ebp - 0x1cc]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10008270
add esp, 0x10
fcomp dword [0x100a1188]
fnstsw ax
test ah, 1
je 0x10075146
mov eax, dword [ebp - 0x1cc]
push eax
mov ecx, dword [ebp - 0x1c4]
push ecx
call fcn.1003aca0
add esp, 8
test al, al
je 0x10075146
mov ebx, dword [ebp - 0x1c8]
fld dword [ebx + 0x1f74]
call fcn.100867f0
push eax
fld dword [ebx + 0x1f6c]
call fcn.100867f0
push eax
call fcn.1003aca0
add esp, 8
test al, al
je 0x1007514c
mov edx, dword [0x101a206c]
mov eax, dword [edx + esi*4]
push eax
push 0x100a1168
lea ecx, [ebp - 0xf8]
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
cmp dword [0x10197d88], 1
jne 0x10075129
push edi
lea edx, [ebp - 0xf8]
push edx
call fcn.1006a960
add esp, 8
wait
jmp 0x100770f6
push 0
lea eax, [ebp - 0xf8]
push eax
call fcn.1006a960
add esp, 8
wait
jmp 0x100770f6
inc esi
jmp 0x10074ffd
mov ebx, dword [ebp - 0x1c8]
xor esi, esi
mov dword [ebp - 0x22c], esi
mov ecx, 0x101a2084
call fcn.10001080
cmp esi, eax
jge 0x1007513a
mov ecx, dword [0x101a2084]
mov ecx, dword [ecx + esi*4]
lea eax, [ebp - 0x1c0]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1007518f
test dl, dl
je 0x1007518b
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1007518f
add eax, edi
add ecx, edi
test dl, dl
jne 0x10075171
xor eax, eax
jmp 0x10075194
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1007528b
cmp dword [0x1011cd68], edi
jne 0x100751f0
cmp dword [0x10198018], 1
jne 0x100751f0
sub esp, 0x10
fld dword [0x1012d2ac]
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fild dword [ebp - 0x1cc]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10008270
add esp, 0x10
fcomp dword [0x100a1188]
fnstsw ax
test ah, 1
je 0x1007513a
mov edx, dword [ebp - 0x1cc]
push edx
mov eax, dword [ebp - 0x1c4]
push eax
call fcn.1003aca0
add esp, 8
test al, al
je 0x1007513a
fld dword [ebx + 0x1f74]
call fcn.100867f0
push eax
fld dword [ebx + 0x1f6c]
call fcn.100867f0
push eax
call fcn.1003aca0
add esp, 8
test al, al
je 0x1007513a
mov ecx, dword [0x101a2084]
mov edx, dword [ecx + esi*4]
push edx
push 0x100a1140
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
cmp dword [0x10197d88], 1
jne 0x10075274
push edi
lea ecx, [ebp - 0xf8]
push ecx
call fcn.1006a960
add esp, 8
wait
jmp 0x100770f6
push 0
lea edx, [ebp - 0xf8]
push edx
call fcn.1006a960
add esp, 8
wait
jmp 0x100770f6
inc esi
jmp 0x1007514e
cmp esi, eax
je 0x100752b9
cmp dword [ebx + 6], 0x10070
jne 0x100752b5
mov eax, dword [ebx + 0x28]
mov dword [0x1011b6e0], eax
mov ecx, dword [ebx + 0x2c]
mov dword [0x1011b6e4], ecx
wait
jmp 0x100770f6
cmp esi, eax
jne 0x1007531b
cmp edx, 0x78
jne 0x10075309
mov edx, dword [0xeac6bc]
mov eax, dword [edx + 0x4cc]
mov ecx, dword [0x2feacec]
mov edx, dword [eax + 0x388]
cmp edx, dword [ecx + 0x14]
jne 0x1007513a
mov eax, dword [0x101976ac]
test eax, eax
jle 0x1007513a
movzx ecx, word [ebx + 0x30]
inc ecx
cmp eax, ecx
je 0x1007513a
dec eax
push eax
call fcn.1003bb90
add esp, 4
wait
jmp 0x100770f6
cmp esi, eax
jne 0x1007531b
mov edi, 0x93
cmp dx, di
je 0x1007513a
mov edi, 0x88
cmp dx, di
jne 0x1007549a
cmp eax, esi
jne 0x100753d2
cmp word [ebx + 0x1c], 0
jne 0x100753d2
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [0x101b8d28]
cmp eax, 0x3e8
jbe 0x10074a66
movzx eax, word [ebx + 6]
cmp eax, 0x1c
jne 0x100753bf
cmp word [ebx + 0xc], 2
jne 0x10075385
mov byte [0x1012d404], 0
inc dword [0x1012d37c]
call esi
mov dword [0x101b8d28], eax
inc dword [0x1012d384]
wait
jmp 0x100770f6
cmp eax, 0x1c
jne 0x100753bf
cmp word [ebx + 0xc], 0
jne 0x100753bf
mov byte [0x1012d404], 1
mov eax, dword [0x2fc5968]
cmp eax, 0x321
je 0x100753bf
cmp eax, 0xfa1
je 0x100753bf
cmp eax, 0x1c85
je 0x100753bf
cmp eax, 0x9ca5
je 0x100753bf
inc dword [0x1012d380]
call esi
mov dword [0x101b8d28], eax
inc dword [0x1012d384]
wait
jmp 0x100770f6
mov esi, dword [ebp - 0x1c8]
mov eax, dword [esi + 0x1d20]
push 0xd9fc74
push eax
call fcn.10006f80
add esp, 8
test eax, eax
je 0x10074a66
mov dx, word [ebx]
cmp dx, word [eax + 0x14]
jne 0x10074a66
mov ecx, dword [0x2fc5968]
cmp ecx, 0x515
je 0x10075427
cmp ecx, 0x7594
je 0x10075427
cmp ecx, 0x75f8
je 0x10075427
cmp ecx, 0x765c
jne 0x10075452
mov ecx, dword [eax + 0x10a8]
fld dword [ecx + 0x284]
fsub dword [esi + 0x1f70]
fcomp qword [0x100a17c0]
fnstsw ax
test ah, 0x41
jne 0x10075452
mov eax, dword [ecx + 0x284]
mov dword [esi + 0x1f70], eax
mov eax, 1
add dword [0x1012d3dc], eax
cmp dword [0x1011d1b4], 0
jle 0x1007548d
cmp dword [0x10191854], eax
jne 0x1007548d
cmp dword [0x1019185c], eax
jne 0x10075488
call fcn.10073f50
mov byte [0x1012d3f8], 0
wait
jmp 0x100770f6
call fcn.10073e80
mov byte [0x1012d3f8], 0
wait
jmp 0x100770f6
mov edi, 0x1540
cmp dx, di
jne 0x10075512
cmp eax, esi
jne 0x1007513a
cmp word [ebx + 8], 0
jbe 0x1007513a
movzx ecx, word [ebx + 0x10]
cmp ecx, 0x13
jne 0x100754dd
cmp dword [0x1012d3e4], 1
jne 0x100754dd
push eax
push 0x1009c9bc
call fcn.10006c90
add esp, 8
wait
jmp 0x100770f6
cmp dword [0x1019efb8], 1
jne 0x1007513a
push ecx
call fcn.10080d00
add esp, 4
cmp al, 1
jne 0x1007513a
movzx edx, word [ebx]
push edx
push 0x1009c9bc
call fcn.10006c90
add esp, 8
wait
jmp 0x100770f6
cmp edx, 0x72
jne 0x1007572a
cmp dword [0x101956bc], 1
jne 0x1007572a
cmp dword [0x1011cd68], 2
je 0x1007572a
xor eax, eax
mov dword [ebp - 0x1e0], eax
lea esi, [ebx + 0xc]
mov dword [ebp - 0x1f8], esi
mov dword [ebp - 0x1dc], eax
lea esp, [esp]
movzx eax, byte [ebx + 8]
cmp dword [ebp - 0x1dc], eax
jge 0x1007513a
fld dword [esi + 0x14]
call fcn.100867f0
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1c]
call fcn.100867f0
mov dword [ebp - 0x1c4], eax
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x20], ecx
fild dword [ebp - 0x1c4]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [ebp - 0x1d4]
fstp dword [esp + 8]
mov eax, dword [ebp - 0x1c8]
fld dword [eax + 0x1f74]
fstp dword [esp + 4]
fld dword [eax + 0x1f6c]
fstp dword [esp]
call fcn.10008270
add esp, 0x10
call fcn.100867f0
mov edi, eax
xor ecx, ecx
xor eax, eax
mov edx, dword [0x1011aed4]
mov dword [ebp - 0x234], eax
cmp eax, edx
jge 0x100755e3
mov ebx, dword [eax*4 + 0x10119570]
cmp ebx, dword [esi]
je 0x10075638
inc eax
jmp 0x100755cb
test ecx, ecx
jne 0x10075638
cmp dword [0x1012d3e4], 1
jne 0x10075638
cmp dword [0x101956d0], 1
jne 0x10075638
mov eax, dword [esi]
mov dword [edx*4 + 0x10119570], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1011aed4]
mov dword [ecx*4 + 0x10119d40], eax
mov edx, dword [0x1011aed4]
mov byte [edx + 0x1011a510], 0
mov eax, dword [0x1011aed4]
mov dword [eax*4 + 0x1011a704], 0
inc dword [0x1011aed4]
cmp edi, 0x96
jg 0x100756fa
cmp dword [0x101956dc], 1
jne 0x10075690
fild dword [0x1012d3c4]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [0x1012d3c0]
fstp dword [esp + 8]
fild dword [ebp - 0x1c4]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10008270
add esp, 0x10
fcomp dword [0x100a0108]
fnstsw ax
test ah, 5
jnp 0x10074a66
fild dword [0x100ae390]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [0x100ae38c]
fstp dword [esp + 8]
fild dword [ebp - 0x1c4]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10008270
add esp, 0x10
fcomp dword [0x100a0108]
fnstsw ax
test ah, 5
jnp 0x10074a66
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [esi + 4]
push edx
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [esi + 8]
push ecx
call fcn.1004afd0
add esp, 8
push eax
mov edx, dword [esi]
push edx
call fcn.1004b0c0
add esp, 0x10
add esi, 0x68
mov dword [ebp - 0x1f8], esi
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp eax, 0x10
jg 0x1007513a
inc dword [ebp - 0x1dc]
mov ebx, dword [ebp - 0x1cc]
jmp 0x10075550
cmp edx, 0xc
jne 0x1007584b
movzx esi, word [ebx + 8]
imul esi, esi, 0x1cc
xor edi, edi
mov dword [ebp - 0x1ec], edi
mov ecx, 0x101a2048
call fcn.10001080
cmp edi, eax
jge 0x100757ad
lea ecx, [esi + 0x336ecc3]
mov eax, dword [0x101a1e04]
mov eax, dword [eax + edi*4]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10075781
test dl, dl
je 0x1007577d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10075781
add eax, 2
add ecx, 2
test dl, dl
jne 0x10075761
xor eax, eax
jmp 0x10075786
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10075819
movzx ecx, word [ebx]
mov edx, dword [0x101a2048]
mov eax, dword [edx + edi*4]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x101a203c]
mov edx, dword [ecx + edi*4]
mov dword [edx], eax
mov esi, 1
cmp dword [0x10191928], esi
jne 0x1007513a
movzx eax, word [ebx + 8]
cmp dword [ebp - 0x1c4], eax
jne 0x1007513a
movzx ecx, word [ebx]
push ecx
call fcn.10046930
add esp, 4
test eax, eax
jle 0x1007513a
mov ecx, dword [eax*4 + 0x2feacf0]
cmp dword [ecx], 0xd9fc74
jne 0x10074a66
mov dword [ecx + 0x354], esi
xor ecx, ecx
mov dword [ebp - 0x200], ecx
cmp ecx, 0x1e
jge 0x1007581f
cmp dword [ecx*4 + 0x1012d2d8], eax
je 0x10074a66
add ecx, esi
jmp 0x100757fd
inc edi
jmp 0x1007573f
xor ecx, ecx
mov dword [ebp - 0x228], ecx
cmp ecx, 0x1e
jge 0x1007513a
cmp dword [ecx*4 + 0x1012d2d8], 0
jne 0x10075847
mov dword [ecx*4 + 0x1012d2d8], eax
wait
jmp 0x100770f6
add ecx, esi
jmp 0x10075821
cmp edx, 0xa
jne 0x10075bfc
cmp esi, eax
je 0x10075867
cmp word [ebx + 8], cx
jne 0x10075867
push eax
call fcn.1006b650
add esp, 4
cmp dword [ebx + 0x10], 0
je 0x10074a66
movzx edx, word [ebx]
cmp esi, edx
jne 0x1007513a
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
add eax, 0x44c
mov dword [0x1011cd90], eax
call esi
mov dword [0x1012d234], eax
push 0xd9fc74
mov eax, dword [0x2feacec]
mov ecx, dword [eax + 0x1d20]
push ecx
call fcn.10006f80
add esp, 8
mov edi, eax
mov dword [ebp - 0x20], edi
mov byte [0x1012d3fb], 1
movzx esi, word [ebx + 8]
mov edx, dword [ebx + 0x3c]
mov dword [ebp - 0x1d4], edx
fld dword [ebx + 0x40]
call fcn.100867f0
mov dword [0x1011cd18], eax
fld dword [ebx + 0x44]
call fcn.100867f0
mov dword [0x1011cd14], eax
fld dword [ebx + 0x48]
call fcn.100867f0
mov dword [0x1011cd10], eax
movzx ecx, word [ebx + 0x8f]
mov dword [0x1012d3d0], ecx
cmp esi, 0xbb8
jl 0x10075919
cmp byte [ebx + 0x53], 0
jne 0x10075919
mov eax, dword [ebx + 0x10]
cdq
add dword [0x1012d900], eax
adc dword [0x1012d904], edx
cmp ecx, 5
je 0x10075923
cmp ecx, 1
jne 0x10075951
cmp dword [0x1019f3ec], 1
jne 0x1007593a
cmp byte [0x1012d412], 1
jne 0x1007593a
call fcn.1003cb20
cmp dword [0x1011d1b4], 0
jle 0x10075951
cmp dword [0x10191854], 1
jne 0x10075951
call fcn.1003cb20
cmp dword [0x1019f4a8], 1
jne 0x100759b5
cmp byte [0x1012d412], 1
jne 0x100759b5
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov eax, dword [ebp - 0x1c8]
fld dword [eax + 0x1f6c]
call fcn.100867f0
mov dword [ebp - 0x1c4], eax
mov ecx, dword [ebp - 0x1c8]
fld dword [ecx + 0x1f74]
call fcn.100867f0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10037e50
add esp, 8
test edi, edi
je 0x100759c8
movzx edx, word [edi + 0x14]
cmp edx, esi
jne 0x100759c8
mov byte [0x1012d3f7], 1
mov ecx, dword [ebp - 0x1d4]
cmp ecx, 0xc9
jne 0x10075a43
cmp dword [ebx + 0x38], 0x7a5d3
jne 0x10075a43
mov eax, dword [0x1011cd20]
inc eax
mov dword [0x1011cd20], eax
cmp eax, dword [0x10191de0]
jl 0x10075a43
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd84], eax
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f6c]
call fcn.100867f0
mov dword [ebp - 0x1c4], eax
fld dword [esi + 0x1f74]
call fcn.100867f0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
sub esp, 8
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10037e50
add esp, 8
mov ecx, dword [ebp - 0x1d4]
cmp byte [0x1012d3fa], 1
jne 0x10075aa1
cmp ecx, 0xc9
je 0x10075a71
cmp ecx, 0xcd
je 0x10075a71
cmp ecx, 0xa6
je 0x10075a71
cmp ecx, 0x7e
je 0x10075a71
cmp ecx, 0xdc
jne case.default.0x100764a3
mov eax, dword [ebx + 0x38]
cmp eax, 0x7a5d1
je case.default.0x100764a3
cmp eax, 0x7a5d2
je case.default.0x100764a3
cmp eax, 0x7a5d3
je case.default.0x100764a3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd80], eax
mov byte [0x1012d3fc], 1
wait
jmp 0x100770f6
cmp dword [0x10197fe0], 1
jne 0x10075b05
cmp dword [0x1011cd68], 5
jne 0x10075b05
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f6c]
call fcn.100867f0
mov dword [ebp - 0x1c4], eax
fld dword [esi + 0x1f74]
call fcn.100867f0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10037e50
add esp, 8
mov ecx, dword [ebp - 0x1d4]
mov eax, 1
cmp dword [0x10191860], eax
jne 0x10075b37
cmp byte [0x1012d405], al
jne 0x10075b37
cmp byte [0x1012d3f9], al
jne 0x10075b37
cmp dword [0x1012d3e4], eax
jne 0x10075b37
mov dword [ebx], 0
mov dword [ebx + 4], 0
cmp ecx, 0xd2
je 0x10075b4f
cmp ecx, 0xd3
je 0x10075b4f
cmp ecx, 0xd4
jne 0x10075b9c
mov eax, dword [0x101a46e8]
add eax, 0x47
push eax
mov ecx, dword [0x100eaf2c]
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov al, byte [0x101b8988]
cmp al, 1
jne 0x10075b90
push 0x1003cd00
push 0x7d0
mov edx, dword [0x101a46e8]
add edx, 0x4e
push edx
mov eax, dword [0x100eaf2c]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x10075b9c
mov byte [0x1012d405], al
mov byte [0x1012d3f8], 0
mov byte [0x1012d3fd], 1
mov byte [0x1012d3fe], 1
mov byte [0x1012d3ff], 1
mov byte [0x1012d400], 1
mov dword [0x1012d23c], 0
mov eax, 1
cmp dword [0x1019192c], eax
jne 0x1007513a
cmp dword [0x1011d1b4], 0
jle 0x1007513a
cmp dword [0x1018de68], eax
je 0x1007513a
push 0
call fcn.10072a50
add esp, 4
wait
jmp 0x100770f6
cmp edx, 0x2f
jne 0x10075e28
cmp esi, eax
jne 0x1007513a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1012d234], eax
mov byte [0x1012d3fb], 1
mov edi, dword [ebx + 0x16]
fld dword [ebx + 0x1a]
call fcn.100867f0
mov dword [0x1011cd18], eax
fld dword [ebx + 0x1e]
call fcn.100867f0
mov dword [0x1011cd14], eax
fld dword [ebx + 0x22]
call fcn.100867f0
mov dword [0x1011cd10], eax
cmp byte [ebx + 0x26], 0
jne 0x10075c83
xor ecx, ecx
mov dword [ebp - 0x208], ecx
cmp ecx, 0x14
jge 0x10075c83
movzx eax, word [ebx + ecx*4 + 0x52]
test eax, eax
je 0x10075c83
cmp eax, 0xbb8
jl 0x10075c80
mov eax, dword [ebx + ecx*4 + 0xa2]
cdq
add dword [0x1012d900], eax
adc dword [0x1012d904], edx
inc ecx
jmp 0x10075c51
cmp dword [0x1019f4a8], 1
jne 0x10075ce3
cmp byte [0x1012d412], 1
jne 0x10075ce3
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f6c]
call fcn.100867f0
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1f74]
call fcn.100867f0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10037e50
add esp, 8
jmp 0x10075ce9
mov esi, dword [ebp - 0x1c8]
push 0xd9fc74
mov ecx, dword [0x2feacec]
mov edx, dword [ecx + 0x1d20]
push edx
call fcn.10006f80
add esp, 8
test eax, eax
je 0x10075d18
mov ax, word [eax + 0x14]
cmp ax, word [ebx + 8]
jne 0x10075d18
mov byte [0x1012d3f7], 1
cmp edi, 0xc9
jne 0x10075d81
cmp dword [ebx + 0x12], 0x7a5d3
jne 0x10075d81
mov eax, dword [0x1011cd20]
inc eax
mov dword [0x1011cd20], eax
cmp eax, dword [0x10191de0]
jl 0x10075d81
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd84], eax
fld dword [esi + 0x1f6c]
call fcn.100867f0
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1f74]
call fcn.100867f0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
sub esp, 8
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10037e50
add esp, 8
cmp byte [0x1012d3fa], 1
jne 0x10075dae
cmp edi, 0xc9
je 0x10075da6
cmp edi, 0xcd
je 0x10075da6
cmp edi, 0xa6
jne case.default.0x100764a3
mov eax, dword [ebx + 0x12]
jmp 0x10075a74
cmp dword [0x10197fe0], 1
jne 0x10075e06
cmp dword [0x1011cd68], 5
jne 0x10075e06
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
fld dword [esi + 0x1f6c]
call fcn.100867f0
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1f74]
call fcn.100867f0
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10037e50
add esp, 8
mov byte [0x1012d3fd], 1
mov byte [0x1012d3fe], 1
mov byte [0x1012d3ff], 1
mov byte [0x1012d400], 1
wait
jmp 0x100770f6
mov edi, 0x270f
cmp cx, di
jne 0x10075e62
mov ecx, 0x1709
cmp dx, cx
jne 0x10075e62
cmp dword [ebx + 8], 3
jne 0x1007513a
add ebx, 0x10
push ebx
call fcn.1003a350
push 0x100a17b4
call fcn.10008110
add esp, 8
wait
jmp 0x100770f6
cmp esi, eax
jne 0x10075eaa
cmp dword [ebx + 4], 0x38177a
jne 0x10075e90
cmp dword [ebx + 8], 0x13
jne 0x1007513a
mov dword [0x1012d214], 0xfffff8f8
mov dword [ebx + 4], 0
wait
jmp 0x100770f6
cmp esi, eax
jne 0x10075eaa
mov ecx, 0xe1
cmp dx, cx
jne 0x10075eaa
mov dword [ebx], 0
wait
jmp 0x100770f6
cmp esi, dword [ebx + 0x10]
jne 0x10075f50
mov ecx, 0x98
cmp dx, cx
jne 0x10075f50
mov esi, 1
cmp dword [ebx + 8], esi
jne 0x10075ee4
cmp dword [ebx + 0xc], esi
jne 0x10075ee4
lea ecx, [ebx + 0x14]
mov edx, 0x1011c6d4
mov al, byte [ecx]
mov byte [edx], al
add ecx, esi
add edx, esi
test al, al
jne 0x10075ed8
cmp byte [ebx + 8], 1
jne 0x1007513a
cmp dword [0x10195258], esi
jne 0x1007513a
push 0x1f4
call sub.mfc100.dll_Ordinal_265
mov esi, eax
push 0x1011c4d0
push 0x100a04d0
push esi
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
call edi
add esp, 0x10
push 0x11
push 0
push esi
call dword [sym.imp.WINMM.dll_PlaySoundA]
push esi
call sub.mfc100.dll_Ordinal_1296
add ebx, 0x14
push ebx
push 0x100a17a0
push 0x1011c6e8
call edi
push 0x1011c6e8
call fcn.10008110
add esp, 0x14
wait
jmp 0x100770f6
cmp esi, eax
jne 0x1007619f
cmp edx, 0x35
jne 0x10075f9d
cmp word [ebx + 6], 4
je 0x10075f9d
mov eax, 1
cmp dword [0x10192fd0], eax
jne 0x1007513a
cmp dword [0x1012d3e4], eax
jne 0x1007513a
cmp dword [0x10192e8c], eax
jne 0x1007513a
mov dword [0x1012d394], 0xffff8ad0
wait
jmp 0x100770f6
cmp esi, eax
jne 0x1007619f
cmp dword [ebx + 4], 0x1c0079
jne 0x1007619f
mov byte [0x1012d407], 1
mov ecx, dword [ebx + 0x18]
mov dword [0x1012d38c], ecx
cmp ecx, 0x321
jne 0x10075fd7
mov dword [ebp - 0x24], 0x20ade9
mov byte [ebp - 0x20], 0
jmp 0x10075ff2
cmp ecx, 0x4b1
jne 0x10075ff2
mov dword [ebp - 0x1d4], 0x20ac8e0f
mov word [ebp - 0x1d0], 0
mov dl, byte [0x1012d406]
cmp dl, 1
jne 0x10076185
fld dword [0x101b8d24]
fld dword [ebx + 8]
fucompp
fnstsw ax
test ah, 0x44
jp 0x1007616e
fld dword [0x101b8d20]
fld dword [ebx + 0x10]
fucompp
fnstsw ax
test ah, 0x44
jp 0x1007616e
fld dword [0x1018e640]
fld qword [0x100a1798]
fucompp
fnstsw ax
test ah, 0x44
jp 0x1007608b
xor ecx, ecx
mov dword [ebp - 0x220], ecx
mov eax, dword [0x1018f5e0]
lea edx, [eax - 1]
cmp ecx, edx
jge 0x10076083
fld dword [ecx*4 + 0x1018de74]
fstp dword [ecx*4 + 0x1018de70]
fld dword [ecx*4 + 0x1018e644]
fstp dword [ecx*4 + 0x1018e640]
fld dword [ecx*4 + 0x1018ee14]
fstp dword [ecx*4 + 0x1018ee10]
inc ecx
jmp 0x10076044
dec eax
mov dword [0x1018f5e0], eax
jmp 0x10076090
mov eax, dword [0x1018f5e0]
fldz
fst dword [0x101b8d24]
fstp dword [0x101b8d20]
xor ecx, ecx
mov dword [ebp - 0x210], ecx
cmp ecx, eax
jge 0x100760ee
sub eax, ecx
lea eax, [eax*4 + 0x1018de70]
fld dword [eax - 4]
fstp dword [eax]
mov eax, dword [0x1018f5e0]
sub eax, ecx
add eax, eax
add eax, eax
fld dword [eax + 0x1018e63c]
fstp dword [eax + 0x1018e640]
mov eax, dword [0x1018f5e0]
sub eax, ecx
add eax, eax
add eax, eax
fld dword [eax + 0x1018ee0c]
fstp dword [eax + 0x1018ee10]
inc ecx
mov eax, dword [0x1018f5e0]
jmp 0x100760a0
inc eax
mov dword [0x1018f5e0], eax
mov edi, dword [ebp - 0x1c8]
fld dword [edi + 0x1f6c]
call fcn.100867f0
mov esi, eax
fld dword [edi + 0x1f74]
call fcn.100867f0
mov edi, eax
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 8
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
call ebx
cdq
mov ecx, 0x3c
idiv ecx
add edx, esi
mov dword [ebp - 0x20], edx
fild dword [ebp - 0x20]
fstp dword [0x1018de70]
fld dword [0x100a1790]
fstp dword [0x1018e640]
call ebx
cdq
mov ecx, 0x3c
idiv ecx
add edx, edi
mov dword [ebp - 0x20], edx
fild dword [ebp - 0x20]
fstp dword [0x1018ee10]
wait
jmp 0x100770f6
cmp dl, 1
jne 0x10076185
fld dword [ebx + 8]
fstp dword [0x101b8d24]
fld dword [ebx + 0x10]
fstp dword [0x101b8d20]
push ecx
call fcn.10008340
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1012d238], eax
wait
jmp 0x100770f6
mov ecx, 0xd6
cmp dx, cx
jne 0x100761cb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd7c], eax
mov eax, dword [ebx + 0xd]
mov dword [0x1012d38c], eax
push eax
call fcn.10008340
add esp, 4
wait
jmp 0x100770f6
cmp esi, eax
jne 0x10076367
cmp dword [ebx + 4], 0x180031
jne 0x10076367
cmp word [ebx + 0x10], 0
jne 0x1007513a
mov edi, 1
cmp dword [0x10197260], edi
jne 0x1007622a
movzx edx, word [ebx + 0xe]
push edx
push edi
call fcn.10039c40
add ebx, 0x12
push ebx
push 0x100a1780
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.10008110
add esp, 0x18
wait
jmp 0x100770f6
cmp dword [0x101976a8], edi
jne 0x100762b6
movzx esi, word [ebx + 0xe]
mov eax, esi
imul eax, eax, 0x1cc
add eax, 0x336ecd6
mov ecx, dword [ebp - 0x1c8]
add ecx, 0x2000
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x10076273
test dl, dl
je 0x1007626f
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x10076273
add ecx, 2
add eax, 2
test dl, dl
jne 0x10076253
xor eax, eax
jmp 0x10076278
sbb eax, eax
sbb eax, 0xffffffff
push esi
test eax, eax
jne 0x1007628e
push edi
call fcn.10039c40
lea eax, [ebx + 0x12]
push eax
push 0x100a1780
jmp 0x1007629e
push 2
call fcn.10039c40
lea ecx, [ebx + 0x12]
push ecx
push 0x100a1770
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.10008110
add esp, 0x18
cmp dword [0x1019725c], edi
jne 0x1007513a
xor edi, edi
mov dword [ebp - 0x1f0], edi
mov ecx, 0x10197270
call fcn.10001cc0
cmp edi, eax
jge 0x10076334
lea edx, [ebp - 0x30]
push edx
push edi
push 0x189
mov eax, dword [0x10197290]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea esi, [ebx + 0x12]
mov ecx, esi
lea eax, [ebp - 0x30]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076316
test dl, dl
je 0x10076312
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076316
add eax, 2
add ecx, 2
test dl, dl
jne 0x100762f6
xor eax, eax
jmp 0x1007631b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076331
movzx ecx, word [ebx + 0xe]
push ecx
push 1
call fcn.10039c40
push esi
jmp 0x10076207
inc edi
jmp 0x100762c4
movzx edx, word [ebx + 0xe]
push edx
push 2
call fcn.10039c40
add ebx, 0x12
push ebx
push 0x100a1770
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.10008110
add esp, 0x18
wait
jmp 0x100770f6
mov ecx, dword [ebx + 4]
cmp ecx, 0x5c3125
jne 0x10076393
cmp dword [ebx + 0xc], 0xd
jne 0x1007513a
cmp dword [ebx + 8], 1
jne 0x1007513a
mov dword [ebx + 4], 0
wait
jmp 0x100770f6
cmp eax, esi
jne 0x100764d4
cmp edx, 0x3d
jne 0x100764d4
cmp dword [0x10192e88], 1
jne 0x1007513a
movzx eax, word [ebx + 8]
mov ecx, 0x2c0d
cmp ax, cx
je 0x100763eb
mov edx, 0x2c0e
cmp ax, dx
je 0x100763eb
mov ecx, 0x2c0f
cmp ax, cx
je 0x100763eb
mov edx, 0x468d
cmp ax, dx
je 0x100763eb
mov ecx, 0x468e
cmp ax, cx
jne 0x1007513a
cmp byte [ebx + 0xc], 1
jne 0x1007513a
cmp byte [ebx + 0xd], 0
jne 0x1007513a
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [0x1012d238]
cmp eax, 0x7d0
jb 0x1007513a
mov eax, dword [0x10191a04]
cmp eax, 1
jne 0x10076486
cmp dword [0x1011cd68], 2
jne 0x10076486
call esi
mov dword [0x1012d210], eax
mov eax, dword [0x10192fcc]
cmp eax, 4
ja case.default.0x100764a3
jmp dword [eax*4 + 0x1007711c]
push 0
push 0x92c0d
call fcn.1003a1e0
add esp, 8
wait
jmp 0x100770f6
push 0
push 0x92c0f
call fcn.1003a1e0
add esp, 8
wait
jmp 0x100770f6
push 0
push 0xf468d
call fcn.1003a1e0
add esp, 8
wait
jmp 0x100770f6
test eax, eax
jne case.default.0x100764a3
call esi
mov dword [0x1012d210], eax
mov eax, dword [0x10192fcc]
cmp eax, 4
ja case.default.0x100764a3
jmp dword [eax*4 + 0x10077130]
push 0
push 0x92c0e
call fcn.1003a1e0
add esp, 8
wait
jmp 0x100770f6
push 0
push 0xf468e
call fcn.1003a1e0
add esp, 8
wait
jmp 0x100770f6
cmp ecx, 0xbc0066
jne 0x10076c6c
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov word [ebp - 0x20], ax
lea esi, [ebx + 0x21]
push 4
push esi
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x1f4], edx
mov eax, esi
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10076510
sub eax, edi
cmp edx, eax
jae 0x1007652e
cmp byte [edx + ebx + 0x21], 0xff
jne 0x100766fe
xor eax, eax
mov word [ebx + 4], ax
cmp byte [ebx + 8], 5
ja 0x10076744
movzx ecx, word [ebx]
cmp dword [ebp - 0x1c4], ecx
je 0x10076744
push str.rxjhshenqi.com
push esi
mov edi, dword [sym.imp.MSVCR100.dll_strstr]
call edi
add esp, 8
test eax, eax
jne 0x10076744
push 0x100a175c
push esi
call edi
add esp, 8
test eax, eax
jne 0x1007659c
push 0x100a1758
push esi
call edi
add esp, 8
test eax, eax
jne 0x1007659c
push 0x100a1754
push esi
call edi
add esp, 8
test eax, eax
jne 0x1007659c
push 0x100a1750
push esi
call edi
add esp, 8
test eax, eax
je 0x100765a2
xor edx, edx
mov word [ebx + 4], dx
push 0x100a174c
push esi
call edi
add esp, 8
test eax, eax
je 0x100765d5
push 0x100a1748
push esi
call edi
add esp, 8
test eax, eax
je 0x100765d5
push 0x100a1744
push esi
call edi
add esp, 8
test eax, eax
je 0x100765d5
xor eax, eax
mov word [ebx + 4], ax
push 0x100a1740
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076606
push 0x100a173c
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076606
push 0x100a1738
push esi
call edi
add esp, 8
test eax, eax
je 0x10076693
push 0x100a1734
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076633
push 0x100a1730
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076633
push 0x100a172c
push esi
call edi
add esp, 8
test eax, eax
je 0x10076693
push 0x100a1728
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076660
push 0x100a1724
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076660
push 0x100a1720
push esi
call edi
add esp, 8
test eax, eax
je 0x10076693
push 0x100a171c
push esi
call edi
add esp, 8
test eax, eax
jne 0x1007668d
push 0x100a1718
push esi
call edi
add esp, 8
test eax, eax
jne 0x1007668d
push 0x100a1714
push esi
call edi
add esp, 8
test eax, eax
je 0x10076693
xor ecx, ecx
mov word [ebx + 4], cx
xor ebx, ebx
mov dword [ebp - 0x204], ebx
mov ecx, 0x101a2060
call fcn.10001080
cmp ebx, eax
jge 0x10076744
mov edx, dword [0x101a2060]
mov eax, dword [edx + ebx*4]
cmp byte [eax], 0x56
jne 0x1007671a
xor esi, esi
mov dword [ebp - 0x1fc], esi
mov eax, dword [0x101a2060]
mov edx, dword [eax + ebx*4]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100766d0
sub eax, edi
dec eax
cmp esi, eax
jae 0x10076704
movsx eax, byte [esi + edx + 1]
push eax
mov ecx, dword [ebp - 0x1cc]
add ecx, 0x21
push ecx
call dword [sym.imp.MSVCR100.dll_strchr]
add esp, 8
test eax, eax
je 0x1007673e
inc esi
jmp 0x100766bd
inc edx
jmp 0x10076501
xor eax, eax
jne 0x1007673e
xor edx, edx
mov eax, dword [ebp - 0x1cc]
mov word [eax + 4], dx
wait
jmp 0x100770f6
push eax
mov esi, dword [ebp - 0x1cc]
lea ecx, [esi + 0x21]
push ecx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1007673e
xor edx, edx
mov word [esi + 4], dx
wait
jmp 0x100770f6
inc ebx
jmp 0x10076695
mov ebx, dword [ebp - 0x1cc]
movzx esi, word [ebx]
mov edi, dword [ebp - 0x1c4]
cmp edi, esi
je 0x10076a93
cmp byte [ebx + 8], 4
jne 0x10076804
mov ecx, 0x100a0040
lea eax, [ebx + 0x21]
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076790
test dl, dl
je 0x1007678c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076790
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076770
xor eax, eax
jmp 0x10076795
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076804
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f74]
call fcn.100867f0
push eax
fld dword [esi + 0x1f6c]
call fcn.100867f0
push eax
mov eax, dword [0x2fc5968]
push eax
push str._d._d._d
lea ecx, [ebp - 0x190]
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
mov edx, dword [0xeac6bc]
mov eax, dword [edx + 0x444]
mov ecx, dword [eax + 0x334]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 0x33c]
add eax, 0x344
lea edx, [ebp - 0x190]
push edx
push eax
call fcn.1003b690
add esp, 0x1c
jmp 0x10076a93
cmp edi, esi
je 0x10076a93
cmp byte [ebx + 8], 4
jne 0x1007688f
lea eax, [ebx + 0x21]
cmp byte [eax], 0x23
jne 0x1007688f
cmp byte [ebx + 0x22], 0x23
jne 0x1007688f
push 0x1009e114
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
jne 0x10074a66
lea ecx, [ebx + 0x23]
cmp byte [ecx], 0x23
je 0x10076857
mov edx, 0x101b8900
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x10076848
jmp 0x10076a93
lea eax, [ebx + 0x24]
push eax
lea ecx, [ebx + 0xa]
push ecx
push str._s._s
lea edx, [ebp - 0x190]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x190]
mov edx, 0x1012d4a4
nop
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x10076880
jmp 0x10076a93
cmp edi, esi
je 0x10076a93
cmp byte [ebx + 8], 2
jne 0x10076bb1
lea eax, [ebx + 0x21]
cmp byte [eax], 0x23
jne 0x10076a93
cmp byte [ebx + 0x22], 0x23
jne 0x10076a93
push 0x1009e114
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
jne 0x10074a66
push 0x32
push eax
lea eax, [ebp - 0x190]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
or edi, 0xffffffff
mov dword [ebp - 0x1d4], edi
xor ecx, ecx
mov dword [ebp - 0x20c], ecx
lea eax, [ebx + 0x23]
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x100768f7
sub eax, esi
cmp ecx, eax
jae 0x1007692c
mov al, byte [ecx + ebx + 0x23]
cmp al, 0x2d
je 0x10076916
mov byte [ebp + ecx - 0x190], al
inc ecx
jmp 0x100768eb
lea ecx, [ecx + ebx + 0x24]
push ecx
call dword [sym.imp.MSVCR100.dll_atoi]
add esp, 4
mov edi, eax
mov dword [ebp - 0x1d4], eax
test edi, edi
js 0x10074a66
xor edi, edi
mov dword [ebp - 0x1d8], edi
mov ecx, 0x1019d4a4
call fcn.10009e50
cmp edi, eax
jge 0x100769f0
push edi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_4554
cmp eax, 1
jne 0x100769de
push 0x64
push 0
lea edx, [ebp - 0x94]
push edx
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x64
lea eax, [ebp - 0x94]
push eax
push 0
push edi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_5176
lea ecx, [ebp - 0x94]
push ecx
call fcn.10023b40
add esp, 4
mov esi, eax
cmp esi, 0xffffffff
je 0x100769e4
mov ecx, dword [esi + 0x50]
mov ebx, dword [esi + 0xb8]
sub ecx, dword [esi + 0x4c]
mov eax, 0x3531dec1
imul ecx
sar edx, 6
mov edi, edx
shr edi, 0x1f
add edi, edx
lea edx, [ebp - 0x190]
push edx
call dword [sym.imp.MSVCR100.dll_atoi]
add esp, 4
cmp eax, dword [esi]
jne 0x100769de
cmp edi, ebx
jle 0x100769de
cmp ebx, dword [ebp - 0x1d4]
jle 0x10076a07
mov edi, dword [ebp - 0x1d8]
inc edi
mov ebx, dword [ebp - 0x1cc]
jmp 0x10076936
xor eax, eax
jne 0x10076a07
lea eax, [ebx + 0x21]
push eax
push 2
call fcn.10039d10
add esp, 8
jmp 0x10076a93
mov byte [0x1011c6e8], 0
mov ebx, dword [ebp - 0x1cc]
lea ecx, [ebx + 0x21]
push ecx
lea edx, [ebx + 0xa]
push edx
push 0x100a1250
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
xor edi, edi
xor esi, esi
mov dword [ebp - 0x214], esi
mov ecx, 0x101a21f8
call fcn.10001080
cmp esi, eax
jge 0x10076a80
mov ecx, 0x1011c6e8
mov eax, dword [0x101a21f8]
mov eax, dword [eax + esi*4]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076a74
test dl, dl
je 0x10076a70
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076a74
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076a54
xor eax, eax
jmp 0x10076a79
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10076a93
inc esi
jmp 0x10076a33
test edi, edi
jne 0x10076a93
push 0x1011c6e8
mov ecx, 0x101a21f8
call fcn.10001150
cmp byte [ebx + 8], 2
jne 0x10076bb1
cmp dword [0x10198000], 1
jne 0x10076bb1
mov eax, dword [0x1011cd68]
cmp eax, 5
je 0x10076bb1
cmp eax, 2
je 0x10076bb1
lea ecx, [ebx + 0x25]
mov eax, 0x3505b08
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076af0
test dl, dl
je 0x10076aec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076af0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076ad0
xor eax, eax
jmp 0x10076af5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10076bb1
mov ecx, 0x1009e480
lea eax, [ebp - 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076b25
test dl, dl
je 0x10076b21
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076b25
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076b05
xor eax, eax
jmp 0x10076b2a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076bb1
mov dword [ebp - 0x1e8], eax
mov esi, 0x336ecc0
mov dword [ebp - 0x21c], esi
cmp esi, 0x34bfb60
jge 0x10076bb1
cmp byte [esi], 0
je 0x10076c32
lea edi, [ebx + 0x25]
mov ecx, edi
lea eax, [esi + 3]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076b80
test dl, dl
je 0x10076b7c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076b80
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076b60
xor eax, eax
jmp 0x10076b85
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076c32
push edi
push 0x100a16ec
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.10008110
push esi
call fcn.10072ff0
add esp, 0x14
mov al, byte [ebx + 8]
cmp al, 4
jne 0x10076c43
cmp dword [0x10195248], 1
jne 0x10076c43
movzx ecx, word [ebx]
cmp dword [ebp - 0x1c4], ecx
je 0x1007513a
push 0x1f4
call sub.mfc100.dll_Ordinal_265
mov esi, eax
push 0x1011c4d0
push 0x100a04d0
push esi
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
call edi
add esp, 0x10
push 0x11
push 0
push esi
call dword [sym.imp.WINMM.dll_PlaySoundA]
push esi
call sub.mfc100.dll_Ordinal_1296
lea edx, [ebx + 0x21]
push edx
add ebx, 0xa
push ebx
push 0x100a16e0
push 0x1011c6e8
call edi
push 0x1011c6e8
call fcn.10008110
add esp, 0x18
wait
jmp 0x100770f6
inc dword [ebp - 0x1e8]
add esi, 0x1cc
jmp 0x10076b3d
cmp al, 0xb
jne 0x1007513a
push 0xa
add ebx, 0x21
push ebx
push 0x1011c6c4
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
mov byte [0x1011c6ce], 0
wait
jmp 0x100770f6
mov edi, 0xe51
cmp word [ebx + 5], di
jne 0x10076dc6
push 0x12c
push 0
lea eax, [ebp - 0x15c]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x1e4], eax
cmp eax, 0x32
jge 0x10076d74
push 0x10
lea ecx, [ebp - 0x1c8]
push ecx
movzx edx, byte [ebx + eax]
push edx
call dword [sym.imp.MSVCR100D.dll__itoa]
add esp, 0xc
lea eax, [ebp - 0x1c8]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10076cc2
sub eax, edx
cmp eax, 1
jne 0x10076ce9
mov byte [ebp - 0x1c6], cl
mov al, byte [ebp - 0x1c8]
mov byte [ebp - 0x1c7], al
mov byte [ebp - 0x1c8], 0x30
xor ecx, ecx
mov dword [ebp - 0x224], ecx
cmp ecx, 2
jge 0x10076d15
mov al, byte [ebp + ecx - 0x1c8]
cmp al, 0x61
jl 0x10076d12
cmp al, 0x7a
jg 0x10076d12
movsx edx, al
sub edx, 0x20
mov byte [ebp + ecx - 0x1c8], dl
inc ecx
jmp 0x10076ceb
lea edi, [ebp - 0x15c]
dec edi
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10076d20
mov ax, word [0x1009f174]
mov word [edi], ax
lea eax, [ebp - 0x1c8]
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10076d40
sub eax, edx
lea edi, [ebp - 0x15c]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x10076d50
mov ecx, eax
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x1e4]
inc eax
jmp 0x10076c93
lea ecx, [ebp - 0x15c]
push ecx
call fcn.10008110
add esp, 4
cmp dword [0x101a0734], 1
jne 0x1007513a
mov eax, dword [ebx + 4]
cmp eax, 0xe5103
jne 0x10076d9e
push 4
jmp 0x10076dab
cmp eax, 0xe5105
jne 0x1007513a
push 6
mov edx, dword [ebx + 0x12]
push edx
movzx eax, word [ebx + 0x10]
push eax
mov ecx, dword [ebx + 0xc]
push ecx
call fcn.1003be50
add esp, 0x10
wait
jmp 0x100770f6
cmp dword [ebx], 0x2213270f
jne 0x10076f4f
mov edi, 1
cmp word [ebx + 8], di
jne 0x1007513a
movzx eax, word [ebx + 0x14]
cmp ax, di
jne 0x10076e94
movzx edx, word [ebx + 0xc]
push edx
push 0x1009e934
push 0x1011c6e8
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
push 0x1011c6e8
call fcn.10008110
add esp, 0x10
cmp dword [0x1019ff3c], edi
jne 0x10076e32
movzx eax, word [ebx + 0xc]
push eax
movzx ecx, word [ebx + 0xa]
push ecx
push edi
movzx edx, word [ebx + 0x14]
push edx
call fcn.1003b590
add esp, 0x10
movzx eax, word [ebx + 0xa]
mov dword [0x101b899c], eax
movzx ecx, word [ebx + 0xc]
mov dword [0x101b8998], ecx
push 0x7d
push 0
lea edx, [ebp - 0xb0]
push edx
call sub.MSVCR100.dll_memset
mov eax, dword [ebx + 0xa]
push eax
push 0x3726068
push 0x1009ee6c
lea ecx, [ebp - 0xb0]
push ecx
call esi
add esp, 0x1c
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x271a
mov eax, dword [0x1011956c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
wait
jmp 0x100770f6
cmp eax, 2
jne 0x1007513a
cmp dword [0x1019ff3c], edi
jne 0x1007513a
cmp dword [0x101b899c], 0
jne 0x10076f1d
cmp dword [0x101b8998], 0
jne 0x10076f1d
movzx ecx, word [ebx + 0xa]
mov dword [0x101b899c], ecx
movzx edx, word [ebx + 0xc]
mov dword [0x101b8998], edx
push 0x7d
push 0
lea eax, [ebp - 0xb0]
push eax
call sub.MSVCR100.dll_memset
mov ecx, dword [ebx + 0xa]
push ecx
push 0x3726068
push 0x1009ee6c
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x271a
mov ecx, dword [0x1011956c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x1019ff40]
imul eax, eax, 0x3e8
add eax, edi
push 0x1003bfc0
push eax
mov edx, dword [0x101a46e8]
add edx, 0x281c
push edx
mov eax, dword [0x100eaf2c]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
wait
jmp 0x100770f6
cmp eax, esi
jne 0x1007513a
cmp ecx, 0x180091
je 0x1007513a
cmp eax, esi
jne 0x1007513a
cmp edx, 0x69
jne 0x1007704f
cmp dword [0x3505b88], 0
jne 0x10076fd4
cmp dword [ebx + 0xc], 0
jle 0x10076fd4
mov edi, 1
cmp dword [0x1019efc4], edi
jne 0x10076f9e
push esi
push 0x1009c9bc
call fcn.10006c90
add esp, 8
cmp dword [0x1019ff34], edi
jne 0x10076fd9
push 0x3e8
push 0x3e8
cmp dword [0x1019ff38], 0
jne 0x10076fc7
push 2
push 4
call fcn.1003b590
add esp, 0x10
jmp 0x10076fd9
push edi
push 4
call fcn.1003b590
add esp, 0x10
jmp 0x10076fd9
mov edi, 1
cmp dword [0x1012d3e4], edi
jne 0x1007513a
cmp dword [0x10198030], edi
jne 0x1007513a
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x1007513a
mov ecx, dword [0x3505b88]
sub ecx, eax
cmp ecx, dword [0x1019802c]
jl 0x1007513a
cmp dword [0x1011cd68], 2
je 0x1007513a
cmp dword [0x10197d88], edi
jne 0x1007703a
push 2
push 0x100a16c8
call fcn.1006a960
add esp, 8
wait
jmp 0x100770f6
push 0
push 0x100a16c8
call fcn.1006a960
add esp, 8
wait
jmp 0x100770f6
cmp eax, esi
jne 0x1007513a
cmp edx, 0x6b
jne 0x1007513a
imul esi, esi, 0x1cc
mov dl, byte [ebx + 8]
mov byte [esi + 0x336ece9], dl
mov ecx, dword [ebx + 0x2c8]
mov dword [esi + 0x336ed79], ecx
mov eax, 1
cmp dword [0x10190e84], eax
jne 0x1007513a
cmp dword [0x1012d3e4], eax
jne 0x1007513a
movzx edx, byte [ebx + 8]
cmp edx, dword [0x10190e88]
jne 0x1007513a
push 0x100a16ac
call fcn.10008110
add esp, 4
mov ecx, dword [0x1011d1bc]
call fcn.1006f070
call fcn.10046130
wait
jmp 0x100770f6
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.10086786
mov esp, ebp
pop ebp
ret