Function at 0x100749c0
Capabilities:
Check for software breakpoints
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x100ab208
push 0x100869ba
mov eax, dword fs:[0]
push eax
sub esp, 0x224
mov eax, dword [0x100ae8c8]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x1cc], ebx
wait
mov dword [ebp - 4], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [0x1012d22c], eax
mov eax, dword [0x2fb7ac4]
mov dword [ebp - 0x1c8], eax
cmp byte [0x1012d408], 1
jne 0x10074acc
test eax, eax
jne 0x10074ad0
cmp dword [ebx + 4], 0x1b0014
jne 0x10074acc
push 0x7d
push eax
lea eax, [ebp - 0xb0]
push eax
call sub.MSVCR100.dll_memset
push 0x101a4508
push 0x101a45d8
push 0x10095644
lea ecx, [ebp - 0xb0]
push ecx
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
add esp, 0x1c
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x291
mov eax, dword [0x1011956c]
push eax
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
call edi
push 0x101a45d8
push 0x100a18dc
lea ecx, [ebp - 0xb0]
push ecx
call esi
add esp, 0xc
lea edx, [ebp - 0xb0]
push edx
mov eax, dword [0x100eaf2c]
push eax
push 0x2712
mov ecx, dword [0x1011956c]
push ecx
call edi
wait
jmp 0x10077156
test eax, eax
je 0x10074ac6
call edi
mov dword [0x1012d230], eax
mov edx, dword [ebp - 0x1c8]
movzx esi, word [edx + 0x14]
mov dword [ebp - 0x1c4], esi
push ebx
call fcn.100732c0
push ebx
call fcn.1005d0c0
add esp, 8
movzx eax, word [ebx + 4]
cmp eax, 0x65
je 0x10074b09
cmp eax, 0x2f
je 0x10074b09
cmp eax, 0xa
jne 0x10074b13
movzx eax, word [ebx]
mov byte [eax + 0x1011d208], 0
mov eax, dword [ebx + 4]
cmp eax, 0x40080
jne 0x10074b29
mov dword [ebx + 8], 0
jmp 0x10074cbd
cmp eax, 0xb80051
jne 0x10074cbd
mov al, byte [ebx + 8]
cmp al, 0x15
jne 0x10074b69
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a18c4
mov dword [0x1011cd88], eax
lea ecx, [ebp - 0xf8]
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea edx, [ebp - 0xf8]
push edx
jmp 0x10074cb5
cmp al, 0x16
jne 0x10074b9b
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a18ac
mov dword [0x1011cd88], eax
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea ecx, [ebp - 0xf8]
push ecx
jmp 0x10074cb5
cmp al, 0x17
jne 0x10074bb2
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1898
jmp 0x10074c9a
cmp al, 0xb
je 0x10074c8c
cmp al, 0x29
je 0x10074c8c
cmp al, 0xc
je 0x10074c79
cmp al, 0x2a
je 0x10074c79
cmp al, 0xd
je 0x10074c66
cmp al, 0x2b
je 0x10074c66
cmp al, 0x3d
jne 0x10074bf9
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1884
jmp 0x10074b49
cmp al, 0x3e
jne 0x10074c10
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1870
jmp 0x10074b7b
cmp al, 0x3f
jne 0x10074c24
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a185c
jmp 0x10074c9a
cmp al, 0xc9
jne 0x10074c3b
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1848
jmp 0x10074b49
cmp al, 0xca
jne 0x10074c52
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1830
jmp 0x10074b7b
cmp al, 0xcb
jne 0x10074cbd
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1818
jmp 0x10074c9a
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a1804
jmp 0x10074b49
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a17f0
jmp 0x10074b7b
call edi
sub eax, dword [0x1011cd8c]
push eax
push 0x100a17d8
lea edx, [ebp - 0xf8]
push edx
mov dword [0x1011cd88], eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea eax, [ebp - 0xf8]
push eax
call fcn.1003af20
add esp, 0x14
movzx ecx, word [ebx]
mov eax, ecx
cmp eax, esi
jne 0x10074d3e
cmp word [ebx + 4], 4
jne 0x10074cde
cmp byte [ebx + 8], 1
mov byte [0x1012d410], 1
wait
jmp 0x10077156
cmp eax, esi
jne 0x10074d3e
cmp word [ebx + 4], 0x6a
jne 0x10074d3e
cmp dword [ebx + 0x34], 0
jl 0x10074d3e
jg 0x10074cf7
cmp dword [ebx + 0x30], 0
jbe 0x10074d3e
mov al, al
mov cl, cl
mov dl, dl
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebx + 0x34]
mov edx, dword [0x34d644c]
mov esi, dword [0x34d6450]
sub eax, edx
sbb ecx, esi
mov edx, dword [0x1012d290]
add edx, eax
mov dword [0x1012d290], edx
mov eax, dword [0x1012d294]
adc eax, ecx
mov dword [0x1012d294], eax
mov dword [0x1012d2a0], edx
mov dword [0x1012d2a4], eax
wait
jmp 0x10077156
movzx edx, word [ebx + 4]
cmp edx, 0x7b
jne 0x10074ed8
cmp dword [0x10191854], 1
jne 0x10074ed8
movzx ecx, word [ebx + 0x10]
push ecx
call fcn.10006fd0
add esp, 4
mov edi, eax
test edi, edi
je 0x10074ac6
fld dword [ebx + 0x1e]
call fcn.10086850
mov dword [ebp - 0x1cc], eax
fld dword [ebx + 0x26]
call fcn.10086850
mov dword [ebp - 0x1c4], eax
push 0xd71444
mov edx, dword [ebp - 0x1c8]
mov eax, dword [edx + 0x1d20]
push eax
call fcn.10006fa0
add esp, 8
test eax, eax
jne 0x10074ac6
cmp dword [0x1011d1ac], eax
je 0x10074ac6
mov eax, 1
mov dword [ebp - 0x1d4], eax
cmp dword [0x10191868], eax
jne 0x10074e24
xor esi, esi
mov dword [ebp - 0x1d4], esi
mov dword [ebp - 0x230], esi
mov ecx, 0x1019ac1c
call fcn.10001240
cmp esi, eax
jge 0x10074e1f
mov ecx, edi
mov edx, dword [0x1019ac1c]
mov eax, dword [edx + esi*4]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10074e13
test dl, dl
je 0x10074e0f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10074e13
add eax, 2
add ecx, 2
test dl, dl
jne 0x10074df3
xor eax, eax
jmp 0x10074e18
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10074e30
inc esi
jmp 0x10074dd4
mov eax, 1
cmp dword [ebp - 0x1d4], eax
jne 0x1007519a
fild dword [ebp - 0x1c4]
fstp dword [ebp - 0x1c4]
fild dword [ebp - 0x1cc]
fstp dword [ebp - 0x1cc]
sub esp, 0x10
fld dword [ebp - 0x1c4]
fstp dword [esp + 0xc]
fld dword [ebp - 0x1cc]
fstp dword [esp + 8]
fld dword [0x1012d2ac]
fstp dword [esp + 4]
fld dword [0x1012d2a8]
fstp dword [esp]
call fcn.10008290
add esp, 0x10
fild dword [0x1012d2cc]
fcompp
fnstsw ax
test ah, 0x41
jnp 0x10074ac6
sub esp, 8
fld dword [ebp - 0x1c4]
fstp dword [esp + 4]
fld dword [ebp - 0x1cc]
fstp dword [esp]
call fcn.10037ef0
fld dword [ebp - 0x1c4]
fstp dword [esp + 4]
fld dword [ebp - 0x1cc]
fstp dword [esp]
movzx eax, word [ebx]
push eax
push 0xffffffffffffffff
call fcn.10037f40
movzx ecx, word [ebx]
push ecx
call fcn.10037e10
add esp, 0x14
wait
jmp 0x10077156
cmp eax, esi
jne 0x10074f1c
mov edi, 0x84
cmp word [ebx + 2], di
jne 0x10074f16
movzx eax, word [ebx + 0xa]
cmp eax, 0xb
je 0x10074efe
mov edx, 0x3f3
cmp ax, dx
jne 0x1007519a
movzx eax, word [ebx + 0xc]
push eax
movzx ecx, word [ebx + 8]
push ecx
call fcn.10007ad0
add esp, 8
wait
jmp 0x10077156
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp edx, 0x65
jne 0x100752f1
cmp esi, eax
jne 0x10074f74
cmp byte [0x1012d418], 1
jne 0x10074f7d
cmp dword [0x1012d3e4], 0
jne 0x10074f7d
fld dword [ebx + 0xc]
call fcn.10086850
mov esi, eax
fld dword [ebx + 0x14]
call fcn.10086850
push eax
push esi
push 0x100a17c8
lea edx, [ebp - 0x94]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0xf
lea eax, [ebp - 0x94]
push eax
call fcn.1003af20
add esp, 0x18
jmp 0x10074f7d
push eax
call fcn.1006b6c0
add esp, 4
cmp dword [0x10198028], 1
jne 0x10074ac6
call edi
sub eax, dword [0x1012d260]
cmp eax, 0x1388
jb 0x10074ac6
cmp dword [0x34d2968], 0
jle 0x10074ac6
mov eax, 1
cmp dword [0x10197d80], eax
jne 0x10074ac6
cmp dword [0x1012d3e4], eax
jne 0x10074ac6
fld dword [ebx + 0xc]
call fcn.10086850
mov dword [ebp - 0x1c4], eax
fld dword [ebx + 0x14]
call fcn.10086850
mov dword [ebp - 0x1cc], eax
movzx ecx, word [ebx]
push ecx
lea edx, [ebp - 0x94]
push edx
call fcn.1003c990
add esp, 8
test al, al
je 0x10074ac6
movzx eax, word [ebx]
push eax
lea ecx, [ebp - 0x1c0]
push ecx
call fcn.1003c9d0
mov eax, dword [ebp - 0x1c8]
fld dword [eax + 0x1f68]
fstp dword [esp + 4]
fld dword [eax + 0x1f60]
fstp dword [esp]
fild dword [ebp - 0x1cc]
sub esp, 8
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10008290
add esp, 0x10
fild dword [0x10197d7c]
fcompp
fnstsw ax
test ah, 0x41
jne 0x1007519a
xor esi, esi
lea edi, [esi + 2]
mov dword [ebp - 0x218], esi
mov ecx, 0x101a206c
call fcn.10001240
cmp esi, eax
jge 0x100751a6
mov edx, dword [0x101a206c]
mov ecx, dword [edx + esi*4]
lea eax, [ebp - 0x94]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100750a2
test dl, dl
je 0x1007509e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100750a2
add eax, edi
add ecx, edi
test dl, dl
jne 0x10075084
xor eax, eax
jmp 0x100750a7
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100751a0
cmp dword [0x1011cd68], edi
jne 0x10075103
cmp dword [0x10198018], 1
jne 0x10075103
sub esp, 0x10
fld dword [0x1012d2ac]
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fild dword [ebp - 0x1cc]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10008290
add esp, 0x10
fcomp dword [0x100a1188]
fnstsw ax
test ah, 1
je 0x100751a6
mov eax, dword [ebp - 0x1cc]
push eax
mov ecx, dword [ebp - 0x1c4]
push ecx
call fcn.1003ad40
add esp, 8
test al, al
je 0x100751a6
mov ebx, dword [ebp - 0x1c8]
fld dword [ebx + 0x1f68]
call fcn.10086850
push eax
fld dword [ebx + 0x1f60]
call fcn.10086850
push eax
call fcn.1003ad40
add esp, 8
test al, al
je 0x100751ac
mov edx, dword [0x101a206c]
mov eax, dword [edx + esi*4]
push eax
push 0x100a1168
lea ecx, [ebp - 0xf8]
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
cmp dword [0x10197d88], 1
jne 0x10075189
push edi
lea edx, [ebp - 0xf8]
push edx
call fcn.1006a9d0
add esp, 8
wait
jmp 0x10077156
push 0
lea eax, [ebp - 0xf8]
push eax
call fcn.1006a9d0
add esp, 8
wait
jmp 0x10077156
inc esi
jmp 0x1007505d
mov ebx, dword [ebp - 0x1c8]
xor esi, esi
mov dword [ebp - 0x22c], esi
mov ecx, 0x101a2084
call fcn.10001240
cmp esi, eax
jge 0x1007519a
mov ecx, dword [0x101a2084]
mov ecx, dword [ecx + esi*4]
lea eax, [ebp - 0x1c0]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100751ef
test dl, dl
je 0x100751eb
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100751ef
add eax, edi
add ecx, edi
test dl, dl
jne 0x100751d1
xor eax, eax
jmp 0x100751f4
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100752eb
cmp dword [0x1011cd68], edi
jne 0x10075250
cmp dword [0x10198018], 1
jne 0x10075250
sub esp, 0x10
fld dword [0x1012d2ac]
fstp dword [esp + 0xc]
fld dword [0x1012d2a8]
fstp dword [esp + 8]
fild dword [ebp - 0x1cc]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10008290
add esp, 0x10
fcomp dword [0x100a1188]
fnstsw ax
test ah, 1
je 0x1007519a
mov edx, dword [ebp - 0x1cc]
push edx
mov eax, dword [ebp - 0x1c4]
push eax
call fcn.1003ad40
add esp, 8
test al, al
je 0x1007519a
fld dword [ebx + 0x1f68]
call fcn.10086850
push eax
fld dword [ebx + 0x1f60]
call fcn.10086850
push eax
call fcn.1003ad40
add esp, 8
test al, al
je 0x1007519a
mov ecx, dword [0x101a2084]
mov edx, dword [ecx + esi*4]
push edx
push 0x100a1140
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
cmp dword [0x10197d88], 1
jne 0x100752d4
push edi
lea ecx, [ebp - 0xf8]
push ecx
call fcn.1006a9d0
add esp, 8
wait
jmp 0x10077156
push 0
lea edx, [ebp - 0xf8]
push edx
call fcn.1006a9d0
add esp, 8
wait
jmp 0x10077156
inc esi
jmp 0x100751ae
cmp esi, eax
je 0x10075319
cmp dword [ebx + 6], 0x10070
jne 0x10075315
mov eax, dword [ebx + 0x28]
mov dword [0x1011b6e0], eax
mov ecx, dword [ebx + 0x2c]
mov dword [0x1011b6e4], ecx
wait
jmp 0x10077156
cmp esi, eax
jne 0x1007537b
cmp edx, 0x78
jne 0x10075369
mov edx, dword [0xe7c850]
mov eax, dword [edx + 0x4cc]
mov ecx, dword [0x2fb7ac4]
mov edx, dword [eax + 0x388]
cmp edx, dword [ecx + 0x14]
jne 0x1007519a
mov eax, dword [0x101976ac]
test eax, eax
jle 0x1007519a
movzx ecx, word [ebx + 0x30]
inc ecx
cmp eax, ecx
je 0x1007519a
dec eax
push eax
call fcn.1003bc40
add esp, 4
wait
jmp 0x10077156
cmp esi, eax
jne 0x1007537b
mov edi, 0x93
cmp dx, di
je 0x1007519a
mov edi, 0x88
cmp dx, di
jne 0x100754fa
cmp eax, esi
jne 0x10075432
cmp word [ebx + 0x1c], 0
jne 0x10075432
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [0x101b8d28]
cmp eax, 0x3e8
jbe 0x10074ac6
movzx eax, word [ebx + 6]
cmp eax, 0x1c
jne 0x1007541f
cmp word [ebx + 0xc], 2
jne 0x100753e5
mov byte [0x1012d404], 0
inc dword [0x1012d37c]
call esi
mov dword [0x101b8d28], eax
inc dword [0x1012d384]
wait
jmp 0x10077156
cmp eax, 0x1c
jne 0x1007541f
cmp word [ebx + 0xc], 0
jne 0x1007541f
mov byte [0x1012d404], 1
mov eax, dword [0x2f92a08]
cmp eax, 0x321
je 0x1007541f
cmp eax, 0xfa1
je 0x1007541f
cmp eax, 0x1c85
je 0x1007541f
cmp eax, 0x9ca5
je 0x1007541f
inc dword [0x1012d380]
call esi
mov dword [0x101b8d28], eax
inc dword [0x1012d384]
wait
jmp 0x10077156
mov esi, dword [ebp - 0x1c8]
mov eax, dword [esi + 0x1d20]
push 0xd71444
push eax
call fcn.10006fa0
add esp, 8
test eax, eax
je 0x10074ac6
mov dx, word [ebx]
cmp dx, word [eax + 0x14]
jne 0x10074ac6
mov ecx, dword [0x2f92a08]
cmp ecx, 0x515
je 0x10075487
cmp ecx, 0x7594
je 0x10075487
cmp ecx, 0x75f8
je 0x10075487
cmp ecx, 0x765c
jne 0x100754b2
mov ecx, dword [eax + 0x10a4]
fld dword [ecx + 0x284]
fsub dword [esi + 0x1f64]
fcomp qword [0x100a17c0]
fnstsw ax
test ah, 0x41
jne 0x100754b2
mov eax, dword [ecx + 0x284]
mov dword [esi + 0x1f64], eax
mov eax, 1
add dword [0x1012d3dc], eax
cmp dword [0x1011d1b4], 0
jle 0x100754ed
cmp dword [0x10191854], eax
jne 0x100754ed
cmp dword [0x1019185c], eax
jne 0x100754e8
call fcn.10073fb0
mov byte [0x1012d3f8], 0
wait
jmp 0x10077156
call fcn.10073ee0
mov byte [0x1012d3f8], 0
wait
jmp 0x10077156
mov edi, 0x1540
cmp dx, di
jne 0x10075572
cmp eax, esi
jne 0x1007519a
cmp word [ebx + 8], 0
jbe 0x1007519a
movzx ecx, word [ebx + 0x10]
cmp ecx, 0x13
jne 0x1007553d
cmp dword [0x1012d3e4], 1
jne 0x1007553d
push eax
push 0x1009c9bc
call fcn.10006cb0
add esp, 8
wait
jmp 0x10077156
cmp dword [0x1019efb8], 1
jne 0x1007519a
push ecx
call fcn.10080da0
add esp, 4
cmp al, 1
jne 0x1007519a
movzx edx, word [ebx]
push edx
push 0x1009c9bc
call fcn.10006cb0
add esp, 8
wait
jmp 0x10077156
cmp edx, 0x72
jne 0x1007578a
cmp dword [0x101956bc], 1
jne 0x1007578a
cmp dword [0x1011cd68], 2
je 0x1007578a
xor eax, eax
mov dword [ebp - 0x1e0], eax
lea esi, [ebx + 0xc]
mov dword [ebp - 0x1f8], esi
mov dword [ebp - 0x1dc], eax
lea esp, [esp]
movzx eax, byte [ebx + 8]
cmp dword [ebp - 0x1dc], eax
jge 0x1007519a
fld dword [esi + 0x14]
call fcn.10086850
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1c]
call fcn.10086850
mov dword [ebp - 0x1c4], eax
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x20], ecx
fild dword [ebp - 0x1c4]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [ebp - 0x1d4]
fstp dword [esp + 8]
mov eax, dword [ebp - 0x1c8]
fld dword [eax + 0x1f68]
fstp dword [esp + 4]
fld dword [eax + 0x1f60]
fstp dword [esp]
call fcn.10008290
add esp, 0x10
call fcn.10086850
mov edi, eax
xor ecx, ecx
xor eax, eax
mov edx, dword [0x1011aed4]
mov dword [ebp - 0x234], eax
cmp eax, edx
jge 0x10075643
mov ebx, dword [eax*4 + 0x10119570]
cmp ebx, dword [esi]
je 0x10075698
inc eax
jmp 0x1007562b
test ecx, ecx
jne 0x10075698
cmp dword [0x1012d3e4], 1
jne 0x10075698
cmp dword [0x101956d0], 1
jne 0x10075698
mov eax, dword [esi]
mov dword [edx*4 + 0x10119570], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1011aed4]
mov dword [ecx*4 + 0x10119d40], eax
mov edx, dword [0x1011aed4]
mov byte [edx + 0x1011a510], 0
mov eax, dword [0x1011aed4]
mov dword [eax*4 + 0x1011a704], 0
inc dword [0x1011aed4]
cmp edi, 0x96
jg 0x1007575a
cmp dword [0x101956dc], 1
jne 0x100756f0
fild dword [0x1012d3c4]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [0x1012d3c0]
fstp dword [esp + 8]
fild dword [ebp - 0x1c4]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10008290
add esp, 0x10
fcomp dword [0x100a0108]
fnstsw ax
test ah, 5
jnp 0x10074ac6
fild dword [0x100ae390]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [0x100ae38c]
fstp dword [esp + 8]
fild dword [ebp - 0x1c4]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10008290
add esp, 0x10
fcomp dword [0x100a0108]
fnstsw ax
test ah, 5
jnp 0x10074ac6
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [esi + 4]
push edx
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [esi + 8]
push ecx
call fcn.1004b080
add esp, 8
push eax
mov edx, dword [esi]
push edx
call fcn.1004b170
add esp, 0x10
add esi, 0x68
mov dword [ebp - 0x1f8], esi
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp eax, 0x10
jg 0x1007519a
inc dword [ebp - 0x1dc]
mov ebx, dword [ebp - 0x1cc]
jmp 0x100755b0
cmp edx, 0xc
jne 0x100758ab
movzx esi, word [ebx + 8]
imul esi, esi, 0x1cc
xor edi, edi
mov dword [ebp - 0x1ec], edi
mov ecx, 0x101a2048
call fcn.10001240
cmp edi, eax
jge 0x1007580d
lea ecx, [esi + 0x333bab2]
mov eax, dword [0x101a1e04]
mov eax, dword [eax + edi*4]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100757e1
test dl, dl
je 0x100757dd
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100757e1
add eax, 2
add ecx, 2
test dl, dl
jne 0x100757c1
xor eax, eax
jmp 0x100757e6
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10075879
movzx ecx, word [ebx]
mov edx, dword [0x101a2048]
mov eax, dword [edx + edi*4]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x101a203c]
mov edx, dword [ecx + edi*4]
mov dword [edx], eax
mov esi, 1
cmp dword [0x10191928], esi
jne 0x1007519a
movzx eax, word [ebx + 8]
cmp dword [ebp - 0x1c4], eax
jne 0x1007519a
movzx ecx, word [ebx]
push ecx
call fcn.100469d0
add esp, 4
test eax, eax
jle 0x1007519a
mov ecx, dword [eax*4 + 0x2fb7ae0]
cmp dword [ecx], 0xd71444
jne 0x10074ac6
mov dword [ecx + 0x354], esi
xor ecx, ecx
mov dword [ebp - 0x200], ecx
cmp ecx, 0x1e
jge 0x1007587f
cmp dword [ecx*4 + 0x1012d2d8], eax
je 0x10074ac6
add ecx, esi
jmp 0x1007585d
inc edi
jmp 0x1007579f
xor ecx, ecx
mov dword [ebp - 0x228], ecx
cmp ecx, 0x1e
jge 0x1007519a
cmp dword [ecx*4 + 0x1012d2d8], 0
jne 0x100758a7
mov dword [ecx*4 + 0x1012d2d8], eax
wait
jmp 0x10077156
add ecx, esi
jmp 0x10075881
cmp edx, 0xa
jne 0x10075c5c
cmp esi, eax
je 0x100758c7
cmp word [ebx + 8], cx
jne 0x100758c7
push eax
call fcn.1006b6c0
add esp, 4
cmp dword [ebx + 0x10], 0
je 0x10074ac6
movzx edx, word [ebx]
cmp esi, edx
jne 0x1007519a
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
add eax, 0x44c
mov dword [0x1011cd90], eax
call esi
mov dword [0x1012d234], eax
push 0xd71444
mov eax, dword [0x2fb7ac4]
mov ecx, dword [eax + 0x1d20]
push ecx
call fcn.10006fa0
add esp, 8
mov edi, eax
mov dword [ebp - 0x20], edi
mov byte [0x1012d3fb], 1
movzx esi, word [ebx + 8]
mov edx, dword [ebx + 0x3c]
mov dword [ebp - 0x1d4], edx
fld dword [ebx + 0x40]
call fcn.10086850
mov dword [0x1011cd18], eax
fld dword [ebx + 0x44]
call fcn.10086850
mov dword [0x1011cd14], eax
fld dword [ebx + 0x48]
call fcn.10086850
mov dword [0x1011cd10], eax
movzx ecx, word [ebx + 0x8f]
mov dword [0x1012d3d0], ecx
cmp esi, 0xbb8
jl 0x10075979
cmp byte [ebx + 0x53], 0
jne 0x10075979
mov eax, dword [ebx + 0x10]
cdq
add dword [0x1012d900], eax
adc dword [0x1012d904], edx
cmp ecx, 5
je 0x10075983
cmp ecx, 1
jne 0x100759b1
cmp dword [0x1019f3ec], 1
jne 0x1007599a
cmp byte [0x1012d412], 1
jne 0x1007599a
call fcn.1003cbd0
cmp dword [0x1011d1b4], 0
jle 0x100759b1
cmp dword [0x10191854], 1
jne 0x100759b1
call fcn.1003cbd0
cmp dword [0x1019f4a8], 1
jne 0x10075a15
cmp byte [0x1012d412], 1
jne 0x10075a15
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov eax, dword [ebp - 0x1c8]
fld dword [eax + 0x1f60]
call fcn.10086850
mov dword [ebp - 0x1c4], eax
mov ecx, dword [ebp - 0x1c8]
fld dword [ecx + 0x1f68]
call fcn.10086850
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10037ef0
add esp, 8
test edi, edi
je 0x10075a28
movzx edx, word [edi + 0x14]
cmp edx, esi
jne 0x10075a28
mov byte [0x1012d3f7], 1
mov ecx, dword [ebp - 0x1d4]
cmp ecx, 0xc9
jne 0x10075aa3
cmp dword [ebx + 0x38], 0x7a5d3
jne 0x10075aa3
mov eax, dword [0x1011cd20]
inc eax
mov dword [0x1011cd20], eax
cmp eax, dword [0x10191de0]
jl 0x10075aa3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd84], eax
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f60]
call fcn.10086850
mov dword [ebp - 0x1c4], eax
fld dword [esi + 0x1f68]
call fcn.10086850
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
sub esp, 8
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10037ef0
add esp, 8
mov ecx, dword [ebp - 0x1d4]
cmp byte [0x1012d3fa], 1
jne 0x10075b01
cmp ecx, 0xc9
je 0x10075ad1
cmp ecx, 0xcd
je 0x10075ad1
cmp ecx, 0xa6
je 0x10075ad1
cmp ecx, 0x7e
je 0x10075ad1
cmp ecx, 0xdc
jne case.default.0x10076503
mov eax, dword [ebx + 0x38]
cmp eax, 0x7a5d1
je case.default.0x10076503
cmp eax, 0x7a5d2
je case.default.0x10076503
cmp eax, 0x7a5d3
je case.default.0x10076503
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd80], eax
mov byte [0x1012d3fc], 1
wait
jmp 0x10077156
cmp dword [0x10197fe0], 1
jne 0x10075b65
cmp dword [0x1011cd68], 5
jne 0x10075b65
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f60]
call fcn.10086850
mov dword [ebp - 0x1c4], eax
fld dword [esi + 0x1f68]
call fcn.10086850
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1c4]
fstp dword [esp]
call fcn.10037ef0
add esp, 8
mov ecx, dword [ebp - 0x1d4]
mov eax, 1
cmp dword [0x10191860], eax
jne 0x10075b97
cmp byte [0x1012d405], al
jne 0x10075b97
cmp byte [0x1012d3f9], al
jne 0x10075b97
cmp dword [0x1012d3e4], eax
jne 0x10075b97
mov dword [ebx], 0
mov dword [ebx + 4], 0
cmp ecx, 0xd2
je 0x10075baf
cmp ecx, 0xd3
je 0x10075baf
cmp ecx, 0xd4
jne 0x10075bfc
mov eax, dword [0x101a46e8]
add eax, 0x47
push eax
mov ecx, dword [0x100eaf2c]
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov al, byte [0x101b8988]
cmp al, 1
jne 0x10075bf0
push 0x1003cdb0
push 0x7d0
mov edx, dword [0x101a46e8]
add edx, 0x4e
push edx
mov eax, dword [0x100eaf2c]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x10075bfc
mov byte [0x1012d405], al
mov byte [0x1012d3f8], 0
mov byte [0x1012d3fd], 1
mov byte [0x1012d3fe], 1
mov byte [0x1012d3ff], 1
mov byte [0x1012d400], 1
mov dword [0x1012d23c], 0
mov eax, 1
cmp dword [0x1019192c], eax
jne 0x1007519a
cmp dword [0x1011d1b4], 0
jle 0x1007519a
cmp dword [0x1018de68], eax
je 0x1007519a
push 0
call fcn.10072ac0
add esp, 4
wait
jmp 0x10077156
cmp edx, 0x2f
jne 0x10075e88
cmp esi, eax
jne 0x1007519a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1012d234], eax
mov byte [0x1012d3fb], 1
mov edi, dword [ebx + 0x16]
fld dword [ebx + 0x1a]
call fcn.10086850
mov dword [0x1011cd18], eax
fld dword [ebx + 0x1e]
call fcn.10086850
mov dword [0x1011cd14], eax
fld dword [ebx + 0x22]
call fcn.10086850
mov dword [0x1011cd10], eax
cmp byte [ebx + 0x26], 0
jne 0x10075ce3
xor ecx, ecx
mov dword [ebp - 0x208], ecx
cmp ecx, 0x14
jge 0x10075ce3
movzx eax, word [ebx + ecx*4 + 0x52]
test eax, eax
je 0x10075ce3
cmp eax, 0xbb8
jl 0x10075ce0
mov eax, dword [ebx + ecx*4 + 0xa2]
cdq
add dword [0x1012d900], eax
adc dword [0x1012d904], edx
inc ecx
jmp 0x10075cb1
cmp dword [0x1019f4a8], 1
jne 0x10075d43
cmp byte [0x1012d412], 1
jne 0x10075d43
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f60]
call fcn.10086850
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1f68]
call fcn.10086850
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10037ef0
add esp, 8
jmp 0x10075d49
mov esi, dword [ebp - 0x1c8]
push 0xd71444
mov ecx, dword [0x2fb7ac4]
mov edx, dword [ecx + 0x1d20]
push edx
call fcn.10006fa0
add esp, 8
test eax, eax
je 0x10075d78
mov ax, word [eax + 0x14]
cmp ax, word [ebx + 8]
jne 0x10075d78
mov byte [0x1012d3f7], 1
cmp edi, 0xc9
jne 0x10075de1
cmp dword [ebx + 0x12], 0x7a5d3
jne 0x10075de1
mov eax, dword [0x1011cd20]
inc eax
mov dword [0x1011cd20], eax
cmp eax, dword [0x10191de0]
jl 0x10075de1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd84], eax
fld dword [esi + 0x1f60]
call fcn.10086850
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1f68]
call fcn.10086850
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
sub esp, 8
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10037ef0
add esp, 8
cmp byte [0x1012d3fa], 1
jne 0x10075e0e
cmp edi, 0xc9
je 0x10075e06
cmp edi, 0xcd
je 0x10075e06
cmp edi, 0xa6
jne case.default.0x10076503
mov eax, dword [ebx + 0x12]
jmp 0x10075ad4
cmp dword [0x10197fe0], 1
jne 0x10075e66
cmp dword [0x1011cd68], 5
jne 0x10075e66
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
fld dword [esi + 0x1f60]
call fcn.10086850
mov dword [ebp - 0x1d4], eax
fld dword [esi + 0x1f68]
call fcn.10086850
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
fstp dword [esp + 4]
fild dword [ebp - 0x1d4]
fstp dword [esp]
call fcn.10037ef0
add esp, 8
mov byte [0x1012d3fd], 1
mov byte [0x1012d3fe], 1
mov byte [0x1012d3ff], 1
mov byte [0x1012d400], 1
wait
jmp 0x10077156
mov edi, 0x270f
cmp cx, di
jne 0x10075ec2
mov ecx, 0x1709
cmp dx, cx
jne 0x10075ec2
cmp dword [ebx + 8], 3
jne 0x1007519a
add ebx, 0x10
push ebx
call fcn.1003a3f0
push 0x100a17b4
call fcn.10008130
add esp, 8
wait
jmp 0x10077156
cmp esi, eax
jne 0x10075f0a
cmp dword [ebx + 4], 0x38177a
jne 0x10075ef0
cmp dword [ebx + 8], 0x13
jne 0x1007519a
mov dword [0x1012d214], 0xfffff8f8
mov dword [ebx + 4], 0
wait
jmp 0x10077156
cmp esi, eax
jne 0x10075f0a
mov ecx, 0xe1
cmp dx, cx
jne 0x10075f0a
mov dword [ebx], 0
wait
jmp 0x10077156
cmp esi, dword [ebx + 0x10]
jne 0x10075fb0
mov ecx, 0x98
cmp dx, cx
jne 0x10075fb0
mov esi, 1
cmp dword [ebx + 8], esi
jne 0x10075f44
cmp dword [ebx + 0xc], esi
jne 0x10075f44
lea ecx, [ebx + 0x14]
mov edx, 0x1011c6d4
mov al, byte [ecx]
mov byte [edx], al
add ecx, esi
add edx, esi
test al, al
jne 0x10075f38
cmp byte [ebx + 8], 1
jne 0x1007519a
cmp dword [0x10195258], esi
jne 0x1007519a
push 0x1f4
call sub.mfc100.dll_Ordinal_265
mov esi, eax
push 0x1011c4d0
push 0x100a04d0
push esi
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
call edi
add esp, 0x10
push 0x11
push 0
push esi
call dword [sym.imp.WINMM.dll_PlaySoundA]
push esi
call sub.mfc100.dll_Ordinal_1296
add ebx, 0x14
push ebx
push 0x100a17a0
push 0x1011c6e8
call edi
push 0x1011c6e8
call fcn.10008130
add esp, 0x14
wait
jmp 0x10077156
cmp esi, eax
jne 0x100761ff
cmp edx, 0x35
jne 0x10075ffd
cmp word [ebx + 6], 4
je 0x10075ffd
mov eax, 1
cmp dword [0x10192fd0], eax
jne 0x1007519a
cmp dword [0x1012d3e4], eax
jne 0x1007519a
cmp dword [0x10192e8c], eax
jne 0x1007519a
mov dword [0x1012d394], 0xffff8ad0
wait
jmp 0x10077156
cmp esi, eax
jne 0x100761ff
cmp dword [ebx + 4], 0x1c0079
jne 0x100761ff
mov byte [0x1012d407], 1
mov ecx, dword [ebx + 0x18]
mov dword [0x1012d38c], ecx
cmp ecx, 0x321
jne 0x10076037
mov dword [ebp - 0x24], 0x20ade9
mov byte [ebp - 0x20], 0
jmp 0x10076052
cmp ecx, 0x4b1
jne 0x10076052
mov dword [ebp - 0x1d4], 0x20ac8e0f
mov word [ebp - 0x1d0], 0
mov dl, byte [0x1012d406]
cmp dl, 1
jne 0x100761e5
fld dword [0x101b8d24]
fld dword [ebx + 8]
fucompp
fnstsw ax
test ah, 0x44
jp 0x100761ce
fld dword [0x101b8d20]
fld dword [ebx + 0x10]
fucompp
fnstsw ax
test ah, 0x44
jp 0x100761ce
fld dword [0x1018e640]
fld qword [0x100a1798]
fucompp
fnstsw ax
test ah, 0x44
jp 0x100760eb
xor ecx, ecx
mov dword [ebp - 0x220], ecx
mov eax, dword [0x1018f5e0]
lea edx, [eax - 1]
cmp ecx, edx
jge 0x100760e3
fld dword [ecx*4 + 0x1018de74]
fstp dword [ecx*4 + 0x1018de70]
fld dword [ecx*4 + 0x1018e644]
fstp dword [ecx*4 + 0x1018e640]
fld dword [ecx*4 + 0x1018ee14]
fstp dword [ecx*4 + 0x1018ee10]
inc ecx
jmp 0x100760a4
dec eax
mov dword [0x1018f5e0], eax
jmp 0x100760f0
mov eax, dword [0x1018f5e0]
fldz
fst dword [0x101b8d24]
fstp dword [0x101b8d20]
xor ecx, ecx
mov dword [ebp - 0x210], ecx
cmp ecx, eax
jge 0x1007614e
sub eax, ecx
lea eax, [eax*4 + 0x1018de70]
fld dword [eax - 4]
fstp dword [eax]
mov eax, dword [0x1018f5e0]
sub eax, ecx
add eax, eax
add eax, eax
fld dword [eax + 0x1018e63c]
fstp dword [eax + 0x1018e640]
mov eax, dword [0x1018f5e0]
sub eax, ecx
add eax, eax
add eax, eax
fld dword [eax + 0x1018ee0c]
fstp dword [eax + 0x1018ee10]
inc ecx
mov eax, dword [0x1018f5e0]
jmp 0x10076100
inc eax
mov dword [0x1018f5e0], eax
mov edi, dword [ebp - 0x1c8]
fld dword [edi + 0x1f60]
call fcn.10086850
mov esi, eax
fld dword [edi + 0x1f68]
call fcn.10086850
mov edi, eax
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 8
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
call ebx
cdq
mov ecx, 0x3c
idiv ecx
add edx, esi
mov dword [ebp - 0x20], edx
fild dword [ebp - 0x20]
fstp dword [0x1018de70]
fld dword [0x100a1790]
fstp dword [0x1018e640]
call ebx
cdq
mov ecx, 0x3c
idiv ecx
add edx, edi
mov dword [ebp - 0x20], edx
fild dword [ebp - 0x20]
fstp dword [0x1018ee10]
wait
jmp 0x10077156
cmp dl, 1
jne 0x100761e5
fld dword [ebx + 8]
fstp dword [0x101b8d24]
fld dword [ebx + 0x10]
fstp dword [0x101b8d20]
push ecx
call fcn.10008360
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1012d238], eax
wait
jmp 0x10077156
mov ecx, 0xd6
cmp dx, cx
jne 0x1007622b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1011cd7c], eax
mov eax, dword [ebx + 0xd]
mov dword [0x1012d38c], eax
push eax
call fcn.10008360
add esp, 4
wait
jmp 0x10077156
cmp esi, eax
jne 0x100763c7
cmp dword [ebx + 4], 0x180031
jne 0x100763c7
cmp word [ebx + 0x10], 0
jne 0x1007519a
mov edi, 1
cmp dword [0x10197260], edi
jne 0x1007628a
movzx edx, word [ebx + 0xe]
push edx
push edi
call fcn.10039ce0
add ebx, 0x12
push ebx
push 0x100a1780
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.10008130
add esp, 0x18
wait
jmp 0x10077156
cmp dword [0x101976a8], edi
jne 0x10076316
movzx esi, word [ebx + 0xe]
mov eax, esi
imul eax, eax, 0x1cc
add eax, 0x333bac5
mov ecx, dword [ebp - 0x1c8]
add ecx, 0x1ff4
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x100762d3
test dl, dl
je 0x100762cf
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x100762d3
add ecx, 2
add eax, 2
test dl, dl
jne 0x100762b3
xor eax, eax
jmp 0x100762d8
sbb eax, eax
sbb eax, 0xffffffff
push esi
test eax, eax
jne 0x100762ee
push edi
call fcn.10039ce0
lea eax, [ebx + 0x12]
push eax
push 0x100a1780
jmp 0x100762fe
push 2
call fcn.10039ce0
lea ecx, [ebx + 0x12]
push ecx
push 0x100a1770
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.10008130
add esp, 0x18
cmp dword [0x1019725c], edi
jne 0x1007519a
xor edi, edi
mov dword [ebp - 0x1f0], edi
mov ecx, 0x10197270
call fcn.10001cc0
cmp edi, eax
jge 0x10076394
lea edx, [ebp - 0x30]
push edx
push edi
push 0x189
mov eax, dword [0x10197290]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea esi, [ebx + 0x12]
mov ecx, esi
lea eax, [ebp - 0x30]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076376
test dl, dl
je 0x10076372
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076376
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076356
xor eax, eax
jmp 0x1007637b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076391
movzx ecx, word [ebx + 0xe]
push ecx
push 1
call fcn.10039ce0
push esi
jmp 0x10076267
inc edi
jmp 0x10076324
movzx edx, word [ebx + 0xe]
push edx
push 2
call fcn.10039ce0
add ebx, 0x12
push ebx
push 0x100a1770
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.10008130
add esp, 0x18
wait
jmp 0x10077156
mov ecx, dword [ebx + 4]
cmp ecx, 0x5c3125
jne 0x100763f3
cmp dword [ebx + 0xc], 0xd
jne 0x1007519a
cmp dword [ebx + 8], 1
jne 0x1007519a
mov dword [ebx + 4], 0
wait
jmp 0x10077156
cmp eax, esi
jne 0x10076534
cmp edx, 0x3d
jne 0x10076534
cmp dword [0x10192e88], 1
jne 0x1007519a
movzx eax, word [ebx + 8]
mov ecx, 0x2c0d
cmp ax, cx
je 0x1007644b
mov edx, 0x2c0e
cmp ax, dx
je 0x1007644b
mov ecx, 0x2c0f
cmp ax, cx
je 0x1007644b
mov edx, 0x468d
cmp ax, dx
je 0x1007644b
mov ecx, 0x468e
cmp ax, cx
jne 0x1007519a
cmp byte [ebx + 0xc], 1
jne 0x1007519a
cmp byte [ebx + 0xd], 0
jne 0x1007519a
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [0x1012d238]
cmp eax, 0x7d0
jb 0x1007519a
mov eax, dword [0x10191a04]
cmp eax, 1
jne 0x100764e6
cmp dword [0x1011cd68], 2
jne 0x100764e6
call esi
mov dword [0x1012d210], eax
mov eax, dword [0x10192fcc]
cmp eax, 4
ja case.default.0x10076503
jmp dword [eax*4 + 0x1007717c]
push 0
push 0x92c0d
call fcn.1003a280
add esp, 8
wait
jmp 0x10077156
push 0
push 0x92c0f
call fcn.1003a280
add esp, 8
wait
jmp 0x10077156
push 0
push 0xf468d
call fcn.1003a280
add esp, 8
wait
jmp 0x10077156
test eax, eax
jne case.default.0x10076503
call esi
mov dword [0x1012d210], eax
mov eax, dword [0x10192fcc]
cmp eax, 4
ja case.default.0x10076503
jmp dword [eax*4 + 0x10077190]
push 0
push 0x92c0e
call fcn.1003a280
add esp, 8
wait
jmp 0x10077156
push 0
push 0xf468e
call fcn.1003a280
add esp, 8
wait
jmp 0x10077156
cmp ecx, 0xbc0066
jne 0x10076ccc
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov word [ebp - 0x20], ax
lea esi, [ebx + 0x21]
push 4
push esi
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x1f4], edx
mov eax, esi
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10076570
sub eax, edi
cmp edx, eax
jae 0x1007658e
cmp byte [edx + ebx + 0x21], 0xff
jne 0x1007675e
xor eax, eax
mov word [ebx + 4], ax
cmp byte [ebx + 8], 5
ja 0x100767a4
movzx ecx, word [ebx]
cmp dword [ebp - 0x1c4], ecx
je 0x100767a4
push str.rxjhshenqi.com
push esi
mov edi, dword [sym.imp.MSVCR100.dll_strstr]
call edi
add esp, 8
test eax, eax
jne 0x100767a4
push 0x100a175c
push esi
call edi
add esp, 8
test eax, eax
jne 0x100765fc
push 0x100a1758
push esi
call edi
add esp, 8
test eax, eax
jne 0x100765fc
push 0x100a1754
push esi
call edi
add esp, 8
test eax, eax
jne 0x100765fc
push 0x100a1750
push esi
call edi
add esp, 8
test eax, eax
je 0x10076602
xor edx, edx
mov word [ebx + 4], dx
push 0x100a174c
push esi
call edi
add esp, 8
test eax, eax
je 0x10076635
push 0x100a1748
push esi
call edi
add esp, 8
test eax, eax
je 0x10076635
push 0x100a1744
push esi
call edi
add esp, 8
test eax, eax
je 0x10076635
xor eax, eax
mov word [ebx + 4], ax
push 0x100a1740
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076666
push 0x100a173c
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076666
push 0x100a1738
push esi
call edi
add esp, 8
test eax, eax
je 0x100766f3
push 0x100a1734
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076693
push 0x100a1730
push esi
call edi
add esp, 8
test eax, eax
jne 0x10076693
push 0x100a172c
push esi
call edi
add esp, 8
test eax, eax
je 0x100766f3
push 0x100a1728
push esi
call edi
add esp, 8
test eax, eax
jne 0x100766c0
push 0x100a1724
push esi
call edi
add esp, 8
test eax, eax
jne 0x100766c0
push 0x100a1720
push esi
call edi
add esp, 8
test eax, eax
je 0x100766f3
push 0x100a171c
push esi
call edi
add esp, 8
test eax, eax
jne 0x100766ed
push 0x100a1718
push esi
call edi
add esp, 8
test eax, eax
jne 0x100766ed
push 0x100a1714
push esi
call edi
add esp, 8
test eax, eax
je 0x100766f3
xor ecx, ecx
mov word [ebx + 4], cx
xor ebx, ebx
mov dword [ebp - 0x204], ebx
mov ecx, 0x101a2060
call fcn.10001240
cmp ebx, eax
jge 0x100767a4
mov edx, dword [0x101a2060]
mov eax, dword [edx + ebx*4]
cmp byte [eax], 0x56
jne 0x1007677a
xor esi, esi
mov dword [ebp - 0x1fc], esi
mov eax, dword [0x101a2060]
mov edx, dword [eax + ebx*4]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10076730
sub eax, edi
dec eax
cmp esi, eax
jae 0x10076764
movsx eax, byte [esi + edx + 1]
push eax
mov ecx, dword [ebp - 0x1cc]
add ecx, 0x21
push ecx
call dword [sym.imp.MSVCR100.dll_strchr]
add esp, 8
test eax, eax
je 0x1007679e
inc esi
jmp 0x1007671d
inc edx
jmp 0x10076561
xor eax, eax
jne 0x1007679e
xor edx, edx
mov eax, dword [ebp - 0x1cc]
mov word [eax + 4], dx
wait
jmp 0x10077156
push eax
mov esi, dword [ebp - 0x1cc]
lea ecx, [esi + 0x21]
push ecx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1007679e
xor edx, edx
mov word [esi + 4], dx
wait
jmp 0x10077156
inc ebx
jmp 0x100766f5
mov ebx, dword [ebp - 0x1cc]
movzx esi, word [ebx]
mov edi, dword [ebp - 0x1c4]
cmp edi, esi
je 0x10076af3
cmp byte [ebx + 8], 4
jne 0x10076864
mov ecx, 0x100a0040
lea eax, [ebx + 0x21]
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100767f0
test dl, dl
je 0x100767ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100767f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x100767d0
xor eax, eax
jmp 0x100767f5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076864
mov esi, dword [ebp - 0x1c8]
fld dword [esi + 0x1f68]
call fcn.10086850
push eax
fld dword [esi + 0x1f60]
call fcn.10086850
push eax
mov eax, dword [0x2f92a08]
push eax
push str._d._d._d
lea ecx, [ebp - 0x190]
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
mov edx, dword [0xe7c850]
mov eax, dword [edx + 0x444]
mov ecx, dword [eax + 0x334]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 0x33c]
add eax, 0x344
lea edx, [ebp - 0x190]
push edx
push eax
call fcn.1003b740
add esp, 0x1c
jmp 0x10076af3
cmp edi, esi
je 0x10076af3
cmp byte [ebx + 8], 4
jne 0x100768ef
lea eax, [ebx + 0x21]
cmp byte [eax], 0x23
jne 0x100768ef
cmp byte [ebx + 0x22], 0x23
jne 0x100768ef
push 0x1009e114
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
jne 0x10074ac6
lea ecx, [ebx + 0x23]
cmp byte [ecx], 0x23
je 0x100768b7
mov edx, 0x101b8900
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x100768a8
jmp 0x10076af3
lea eax, [ebx + 0x24]
push eax
lea ecx, [ebx + 0xa]
push ecx
push str._s._s
lea edx, [ebp - 0x190]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x190]
mov edx, 0x1012d4a4
nop
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x100768e0
jmp 0x10076af3
cmp edi, esi
je 0x10076af3
cmp byte [ebx + 8], 2
jne 0x10076c11
lea eax, [ebx + 0x21]
cmp byte [eax], 0x23
jne 0x10076af3
cmp byte [ebx + 0x22], 0x23
jne 0x10076af3
push 0x1009e114
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
jne 0x10074ac6
push 0x32
push eax
lea eax, [ebp - 0x190]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
or edi, 0xffffffff
mov dword [ebp - 0x1d4], edi
xor ecx, ecx
mov dword [ebp - 0x20c], ecx
lea eax, [ebx + 0x23]
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10076957
sub eax, esi
cmp ecx, eax
jae 0x1007698c
mov al, byte [ecx + ebx + 0x23]
cmp al, 0x2d
je 0x10076976
mov byte [ebp + ecx - 0x190], al
inc ecx
jmp 0x1007694b
lea ecx, [ecx + ebx + 0x24]
push ecx
call dword [sym.imp.MSVCR100.dll_atoi]
add esp, 4
mov edi, eax
mov dword [ebp - 0x1d4], eax
test edi, edi
js 0x10074ac6
xor edi, edi
mov dword [ebp - 0x1d8], edi
mov ecx, 0x1019d4a4
call fcn.10009e70
cmp edi, eax
jge 0x10076a50
push edi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_4554
cmp eax, 1
jne 0x10076a3e
push 0x64
push 0
lea edx, [ebp - 0x94]
push edx
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x64
lea eax, [ebp - 0x94]
push eax
push 0
push edi
mov ecx, 0x1019d4a4
call sub.mfc100.dll_Ordinal_5176
lea ecx, [ebp - 0x94]
push ecx
call fcn.10023b70
add esp, 4
mov esi, eax
cmp esi, 0xffffffff
je 0x10076a44
mov ecx, dword [esi + 0x4c]
mov ebx, dword [esi + 0xb4]
sub ecx, dword [esi + 0x48]
mov eax, 0x3531dec1
imul ecx
sar edx, 6
mov edi, edx
shr edi, 0x1f
add edi, edx
lea edx, [ebp - 0x190]
push edx
call dword [sym.imp.MSVCR100.dll_atoi]
add esp, 4
cmp eax, dword [esi]
jne 0x10076a3e
cmp edi, ebx
jle 0x10076a3e
cmp ebx, dword [ebp - 0x1d4]
jle 0x10076a67
mov edi, dword [ebp - 0x1d8]
inc edi
mov ebx, dword [ebp - 0x1cc]
jmp 0x10076996
xor eax, eax
jne 0x10076a67
lea eax, [ebx + 0x21]
push eax
push 2
call fcn.10039db0
add esp, 8
jmp 0x10076af3
mov byte [0x1011c6e8], 0
mov ebx, dword [ebp - 0x1cc]
lea ecx, [ebx + 0x21]
push ecx
lea edx, [ebx + 0xa]
push edx
push 0x100a1250
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
xor edi, edi
xor esi, esi
mov dword [ebp - 0x214], esi
mov ecx, 0x101a21f8
call fcn.10001240
cmp esi, eax
jge 0x10076ae0
mov ecx, 0x1011c6e8
mov eax, dword [0x101a21f8]
mov eax, dword [eax + esi*4]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076ad4
test dl, dl
je 0x10076ad0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076ad4
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076ab4
xor eax, eax
jmp 0x10076ad9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10076af3
inc esi
jmp 0x10076a93
test edi, edi
jne 0x10076af3
push 0x1011c6e8
mov ecx, 0x101a21f8
call fcn.10001100
cmp byte [ebx + 8], 2
jne 0x10076c11
cmp dword [0x10198000], 1
jne 0x10076c11
mov eax, dword [0x1011cd68]
cmp eax, 5
je 0x10076c11
cmp eax, 2
je 0x10076c11
lea ecx, [ebx + 0x25]
mov eax, 0x34d28e8
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076b50
test dl, dl
je 0x10076b4c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076b50
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076b30
xor eax, eax
jmp 0x10076b55
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10076c11
mov ecx, 0x1009e480
lea eax, [ebp - 0x28]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076b85
test dl, dl
je 0x10076b81
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076b85
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076b65
xor eax, eax
jmp 0x10076b8a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076c11
mov dword [ebp - 0x1e8], eax
mov esi, 0x333bab0
mov dword [ebp - 0x21c], esi
cmp esi, 0x348c950
jge 0x10076c11
cmp byte [esi], 0
je 0x10076c92
lea edi, [ebx + 0x25]
mov ecx, edi
lea eax, [esi + 2]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10076be0
test dl, dl
je 0x10076bdc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10076be0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10076bc0
xor eax, eax
jmp 0x10076be5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10076c92
push edi
push 0x100a16ec
push 0x1011c6e8
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0x1011c6e8
call fcn.10008130
push esi
call fcn.10073050
add esp, 0x14
mov al, byte [ebx + 8]
cmp al, 4
jne 0x10076ca3
cmp dword [0x10195248], 1
jne 0x10076ca3
movzx ecx, word [ebx]
cmp dword [ebp - 0x1c4], ecx
je 0x1007519a
push 0x1f4
call sub.mfc100.dll_Ordinal_265
mov esi, eax
push 0x1011c4d0
push 0x100a04d0
push esi
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
call edi
add esp, 0x10
push 0x11
push 0
push esi
call dword [sym.imp.WINMM.dll_PlaySoundA]
push esi
call sub.mfc100.dll_Ordinal_1296
lea edx, [ebx + 0x21]
push edx
add ebx, 0xa
push ebx
push 0x100a16e0
push 0x1011c6e8
call edi
push 0x1011c6e8
call fcn.10008130
add esp, 0x18
wait
jmp 0x10077156
inc dword [ebp - 0x1e8]
add esi, 0x1cc
jmp 0x10076b9d
cmp al, 0xb
jne 0x1007519a
push 0xa
add ebx, 0x21
push ebx
push 0x1011c6c4
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
mov byte [0x1011c6ce], 0
wait
jmp 0x10077156
mov edi, 0xe51
cmp word [ebx + 5], di
jne 0x10076e26
push 0x12c
push 0
lea eax, [ebp - 0x15c]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x1e4], eax
cmp eax, 0x32
jge 0x10076dd4
push 0x10
lea ecx, [ebp - 0x1c8]
push ecx
movzx edx, byte [ebx + eax]
push edx
call dword [sym.imp.MSVCR100D.dll__itoa]
add esp, 0xc
lea eax, [ebp - 0x1c8]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10076d22
sub eax, edx
cmp eax, 1
jne 0x10076d49
mov byte [ebp - 0x1c6], cl
mov al, byte [ebp - 0x1c8]
mov byte [ebp - 0x1c7], al
mov byte [ebp - 0x1c8], 0x30
xor ecx, ecx
mov dword [ebp - 0x224], ecx
cmp ecx, 2
jge 0x10076d75
mov al, byte [ebp + ecx - 0x1c8]
cmp al, 0x61
jl 0x10076d72
cmp al, 0x7a
jg 0x10076d72
movsx edx, al
sub edx, 0x20
mov byte [ebp + ecx - 0x1c8], dl
inc ecx
jmp 0x10076d4b
lea edi, [ebp - 0x15c]
dec edi
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10076d80
mov ax, word [0x1009f174]
mov word [edi], ax
lea eax, [ebp - 0x1c8]
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10076da0
sub eax, edx
lea edi, [ebp - 0x15c]
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x10076db0
mov ecx, eax
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x1e4]
inc eax
jmp 0x10076cf3
lea ecx, [ebp - 0x15c]
push ecx
call fcn.10008130
add esp, 4
cmp dword [0x101a0734], 1
jne 0x1007519a
mov eax, dword [ebx + 4]
cmp eax, 0xe5103
jne 0x10076dfe
push 4
jmp 0x10076e0b
cmp eax, 0xe5105
jne 0x1007519a
push 6
mov edx, dword [ebx + 0x12]
push edx
movzx eax, word [ebx + 0x10]
push eax
mov ecx, dword [ebx + 0xc]
push ecx
call fcn.1003bf00
add esp, 0x10
wait
jmp 0x10077156
cmp dword [ebx], 0x2213270f
jne 0x10076faf
mov edi, 1
cmp word [ebx + 8], di
jne 0x1007519a
movzx eax, word [ebx + 0x14]
cmp ax, di
jne 0x10076ef4
movzx edx, word [ebx + 0xc]
push edx
push 0x1009e934
push 0x1011c6e8
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
push 0x1011c6e8
call fcn.10008130
add esp, 0x10
cmp dword [0x1019ff3c], edi
jne 0x10076e92
movzx eax, word [ebx + 0xc]
push eax
movzx ecx, word [ebx + 0xa]
push ecx
push edi
movzx edx, word [ebx + 0x14]
push edx
call fcn.1003b640
add esp, 0x10
movzx eax, word [ebx + 0xa]
mov dword [0x101b899c], eax
movzx ecx, word [ebx + 0xc]
mov dword [0x101b8998], ecx
push 0x7d
push 0
lea edx, [ebp - 0xb0]
push edx
call sub.MSVCR100.dll_memset
mov eax, dword [ebx + 0xa]
push eax
push 0x36f2cd8
push 0x1009ee6c
lea ecx, [ebp - 0xb0]
push ecx
call esi
add esp, 0x1c
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x271a
mov eax, dword [0x1011956c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
wait
jmp 0x10077156
cmp eax, 2
jne 0x1007519a
cmp dword [0x1019ff3c], edi
jne 0x1007519a
cmp dword [0x101b899c], 0
jne 0x10076f7d
cmp dword [0x101b8998], 0
jne 0x10076f7d
movzx ecx, word [ebx + 0xa]
mov dword [0x101b899c], ecx
movzx edx, word [ebx + 0xc]
mov dword [0x101b8998], edx
push 0x7d
push 0
lea eax, [ebp - 0xb0]
push eax
call sub.MSVCR100.dll_memset
mov ecx, dword [ebx + 0xa]
push ecx
push 0x36f2cd8
push 0x1009ee6c
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x271a
mov ecx, dword [0x1011956c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x1019ff40]
imul eax, eax, 0x3e8
add eax, edi
push 0x1003c070
push eax
mov edx, dword [0x101a46e8]
add edx, 0x281c
push edx
mov eax, dword [0x100eaf2c]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
wait
jmp 0x10077156
cmp eax, esi
jne 0x1007519a
cmp ecx, 0x180091
je 0x1007519a
cmp eax, esi
jne 0x1007519a
cmp edx, 0x69
jne 0x100770af
cmp dword [0x34d2968], 0
jne 0x10077034
cmp dword [ebx + 0xc], 0
jle 0x10077034
mov edi, 1
cmp dword [0x1019efc4], edi
jne 0x10076ffe
push esi
push 0x1009c9bc
call fcn.10006cb0
add esp, 8
cmp dword [0x1019ff34], edi
jne 0x10077039
push 0x3e8
push 0x3e8
cmp dword [0x1019ff38], 0
jne 0x10077027
push 2
push 4
call fcn.1003b640
add esp, 0x10
jmp 0x10077039
push edi
push 4
call fcn.1003b640
add esp, 0x10
jmp 0x10077039
mov edi, 1
cmp dword [0x1012d3e4], edi
jne 0x1007519a
cmp dword [0x10198030], edi
jne 0x1007519a
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x1007519a
mov ecx, dword [0x34d2968]
sub ecx, eax
cmp ecx, dword [0x1019802c]
jl 0x1007519a
cmp dword [0x1011cd68], 2
je 0x1007519a
cmp dword [0x10197d88], edi
jne 0x1007709a
push 2
push 0x100a16c8
call fcn.1006a9d0
add esp, 8
wait
jmp 0x10077156
push 0
push 0x100a16c8
call fcn.1006a9d0
add esp, 8
wait
jmp 0x10077156
cmp eax, esi
jne 0x1007519a
cmp edx, 0x6b
jne 0x1007519a
imul esi, esi, 0x1cc
mov dl, byte [ebx + 8]
mov byte [esi + 0x333bad8], dl
mov ecx, dword [ebx + 0x2c8]
mov dword [esi + 0x333bb68], ecx
mov eax, 1
cmp dword [0x10190e84], eax
jne 0x1007519a
cmp dword [0x1012d3e4], eax
jne 0x1007519a
movzx edx, byte [ebx + 8]
cmp edx, dword [0x10190e88]
jne 0x1007519a
push 0x100a16ac
call fcn.10008130
add esp, 4
mov ecx, dword [0x1011d1bc]
call fcn.1006f0e0
call fcn.100461d0
wait
jmp 0x10077156
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.100867e6
mov esp, ebp
pop ebp
ret