Function at 0x100421d4
Capabilities:
Check for software breakpoints
Check for time delay via gettickcount
Enumerate pe sections
Parse credit card information

Disassembly:
push 0x8a8
push 0x100a2f08
call fcn.10083110
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x808], ebx
wait
and dword [ebp - 4], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [0x1035ed50], eax
mov esi, dword [0x2fb7ac4]
mov dword [ebp - 0x810], esi
mov al, byte [0x1035ef1e]
cmp al, 1
jne 0x10042329
test esi, esi
jne 0x100422b0
cmp dword [ebx + 6], 0x1b0014
jne 0x100422b0
push 0x7d
push esi
lea eax, [ebp - 0x194]
push eax
call sub.MSVCR100.dll_memset
push 0x101132a8
mov ebx, 0x10113378
push ebx
push 0x1008c908
lea eax, [ebp - 0x194]
push eax
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
add esp, 0x1c
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x291
push dword [0x100f315c]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
call edi
push ebx
push 0x10097c74
lea eax, [ebp - 0x194]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x194]
push eax
push dword [0x100ded8c]
push 0x2712
push dword [0x100f315c]
call edi
wait
jmp 0x10045399
cmp al, 1
jne 0x10042329
test esi, esi
jne 0x10042331
cmp dword [ebx + 6], 0x190014
jne 0x10042329
push 0x7d
push esi
lea eax, [ebp - 0x194]
push eax
call sub.MSVCR100.dll_memset
push 0x10097c94
push 0x10097cb4
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x18
lea eax, [ebp - 0x194]
push eax
push dword [0x100ded8c]
push 0x2712
push dword [0x100f315c]
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x10032eb2
push 0x7d0
mov eax, dword [0x10113488]
add eax, 0x44
push eax
push dword [0x100ded8c]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x100422aa
test esi, esi
je 0x100422aa
call edi
mov dword [0x1035ed54], eax
movzx eax, word [esi + 0x14]
mov dword [ebp - 0x7f4], eax
mov ecx, ebx
call fcn.1003fbcb
mov ecx, ebx
call fcn.1003de9f
cmp dword [ebx + 4], 0xc0089
jne 0x10042370
mov eax, 0x23e
cmp word [ebx + 0xc], ax
jne 0x10042370
call edi
movzx ecx, word [ebx]
mov dword [ecx*4 + 0x1017ed10], eax
movzx eax, word [ebx + 4]
cmp eax, 0x65
je 0x10042388
cmp eax, 0x2f
je 0x10042383
cmp eax, 0xa
jne 0x100423bc
cmp eax, 0x65
jne 0x100423a6
mov eax, dword [ebx + 0xc]
mov edx, dword [ebx + 0x14]
mov esi, dword [ebx + 0x20]
cmp eax, dword [ebx + 0x18]
jne 0x1004239a
cmp edx, esi
je 0x100423bc
movzx eax, word [ebx]
mov byte [eax + 0x1012ed10], 0
jmp 0x100423bc
movzx eax, word [ebx]
mov byte [eax + 0x1012ed10], 0
call edi
movzx ecx, word [ebx]
mov dword [ecx*4 + 0x1013ed10], eax
mov eax, dword [ebx + 4]
cmp eax, 0x40080
jne 0x100423cf
and dword [ebx + 8], 0
jmp 0x10042516
cmp eax, 0xb80051
jne 0x10042516
mov al, byte [ebx + 8]
cmp al, 0x15
jne 0x100423f4
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097cb8
jmp 0x100424f3
cmp al, 0x16
jne 0x1004240b
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097cd0
jmp 0x100424f3
cmp al, 0x17
jne 0x10042422
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097ce8
jmp 0x100424f3
cmp al, 0xb
je 0x100424e5
cmp al, 0x29
je 0x100424e5
cmp al, 0xc
je 0x100424d5
cmp al, 0x2a
je 0x100424d5
cmp al, 0xd
je 0x100424c5
cmp al, 0x2b
je 0x100424c5
cmp al, 0x3d
jne 0x10042461
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097d3c
jmp 0x100424f3
cmp al, 0x3e
jne 0x10042475
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097d50
jmp 0x100424f3
cmp al, 0x3f
jne 0x10042489
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097d64
jmp 0x100424f3
cmp al, 0xc9
jne 0x1004249d
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097d78
jmp 0x100424f3
cmp al, 0xca
jne 0x100424b1
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097d8c
jmp 0x100424f3
cmp al, 0xcb
jne 0x10042516
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097da4
jmp 0x100424f3
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097d28
jmp 0x100424f3
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097d14
jmp 0x100424f3
call edi
sub eax, dword [0x101117ec]
push eax
push 0x10097cfc
mov dword [0x101117e8], eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 8
lea eax, [ebp - 0x114]
push eax
call fcn.1003c64d
add esp, 0x14
movzx edx, word [ebx]
mov dword [ebp - 0x804], edx
mov esi, dword [ebp - 0x7f4]
cmp edx, esi
jne 0x100425ff
cmp word [ebx + 4], 0x3b
jne 0x100425ff
mov eax, dword [ebx + 0xc]
cmp eax, 0x3b9acd40
jne 0x100425b2
call edi
mov dword [0x1035eda8], eax
movzx edx, word [ebx]
mov esi, edx
cmp esi, dword [ebp - 0x7f4]
jne 0x10042d45
cmp word [ebx + 4], 0x6a
jne 0x10042d45
mov eax, dword [ebx + 0x30]
mov ecx, dword [ebx + 0x34]
test ecx, ecx
jl 0x10042d45
jg 0x1004257d
test eax, eax
je 0x10042d45
mov edx, dword [0x34d644c]
mov esi, dword [0x34d6450]
sub eax, edx
sbb ecx, esi
add dword [0x1035ed20], eax
adc dword [0x1035ed24], ecx
mov eax, dword [0x1035ed20]
mov dword [0x1035ed30], eax
mov eax, dword [0x1035ed24]
mov dword [0x1035ed34], eax
jmp 0x100422aa
cmp eax, 0x3b9acd44
jne 0x100425c2
call edi
mov dword [0x1035edac], eax
jmp 0x10042549
cmp eax, 0x3b9acd5d
jne 0x100425d5
call edi
mov dword [0x1035edb0], eax
jmp 0x10042549
cmp eax, 0x3b9acd3f
jne 0x100425e8
call edi
mov dword [0x1035edb4], eax
jmp 0x10042549
cmp eax, 0x3b9acd3e
jne 0x10042549
call edi
mov dword [0x1035edb8], eax
jmp 0x10042549
mov ecx, dword [ebx + 4]
cmp ecx, 0x280074
je 0x10042549
cmp ecx, 0x381540
jne 0x1004289c
movzx eax, word [ebx + 0x10]
mov dword [ebp - 0x7fc], eax
xor esi, esi
mov dword [ebp - 0x8b8], esi
mov eax, dword [0x103cbc1c]
mov dword [ebp - 0x80c], eax
cmp esi, eax
jge 0x100426d6
call edi
mov ecx, dword [0x103ccdac]
mov ecx, dword [ecx + esi*4]
sub eax, dword [ecx]
cmp eax, 0x1b58
jbe 0x100426bc
mov eax, dword [0x103cbc14]
mov eax, dword [eax + esi*4]
cmp dword [eax], 0x2c
jne 0x100426bc
push 0x64
push 0
lea eax, [ebp - 0x17c]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea eax, [esi + 1]
mov dword [ebp - 0x80c], eax
push eax
mov esi, 0x103cc3b4
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103cbc14
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103ccdac
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103ce124
call fcn.100011d0
jmp 0x10042624
call edi
mov ecx, dword [0x103ccdac]
mov ecx, dword [ecx + esi*4]
sub eax, dword [ecx]
cmp eax, 0x2bf20
ja 0x10042660
inc esi
jmp 0x10042626
xor esi, esi
mov ecx, dword [ebp - 0x7fc]
mov dword [ebp - 0x8ac], esi
mov dword [ebp - 0x80c], eax
cmp esi, eax
jge 0x100427b5
mov eax, dword [0x103cc3b4]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x804]
jne 0x10042805
mov edx, dword [0x103cbc14]
mov edx, dword [edx + esi*4]
cmp dword [edx], ecx
jne 0x10042724
cmp dword [ebx + 0x1c], 0
jne 0x10042724
cmp ecx, 0x2c
je 0x100427b5
cmp eax, dword [ebp - 0x804]
jne 0x10042805
mov eax, dword [0x103cbc14]
mov eax, dword [eax + esi*4]
cmp dword [eax], ecx
jne 0x10042805
push 0x64
push 0
lea eax, [ebp - 0x25c]
push eax
call sub.MSVCR100.dll_memset
push dword [ebp - 0x804]
push dword [ebp - 0x7fc]
push 0x10097dbc
lea eax, [ebp - 0x25c]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
lea eax, [esi + 1]
mov dword [ebp - 0x80c], eax
push eax
mov esi, 0x103cc3b4
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103cbc14
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103ccdac
call fcn.100011d0
push dword [ebp - 0x80c]
mov esi, 0x103ce124
call fcn.100011d0
cmp dword [ebx + 0x1c], 0
je 0x10042549
push dword [ebp - 0x7fc]
mov esi, 0x103cbc14
call fcn.1000117c
push dword [ebp - 0x804]
mov esi, 0x103cc3b4
call fcn.1000117c
call edi
mov esi, eax
mov eax, dword [0x103ccdb4]
inc eax
mov dword [0x103ccdb4], eax
cmp eax, 1
jne 0x10042810
push 4
push 0
push dword [0x103ccdb0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
jmp 0x10042828
inc esi
mov eax, dword [0x103cbc1c]
jmp 0x100426de
shl eax, 2
push eax
push dword [0x103ccdac]
push 0
push dword [0x103ccdb0]
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov dword [0x103ccdac], eax
push 4
call dword [sym.imp.mfc100.dll_Ordinal_1294]
pop ecx
mov ecx, dword [0x103ccdac]
mov edx, dword [0x103ccdb4]
mov dword [ecx + edx*4 - 4], eax
mov eax, dword [0x103ccdb4]
mov ecx, dword [0x103ccdac]
mov eax, dword [ecx + eax*4 - 4]
mov dword [eax], esi
movzx eax, word [ebx + 8]
push eax
mov esi, 0x103ce124
call fcn.1000117c
push 0x64
push 0
lea eax, [ebp - 0x1f8]
push eax
call sub.MSVCR100.dll_memset
push dword [ebp - 0x804]
push dword [ebp - 0x7fc]
push 0x10097dc8
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
jmp 0x10042549
cmp ecx, 0x380069
jne 0x100428b5
cmp edx, esi
jne 0x100428b5
cmp dword [0x103d3adc], 1
je 0x10042549
cmp ecx, 0xc0089
jne 0x10042945
movzx eax, word [ebx + 8]
cmp eax, esi
jne 0x1004291b
mov eax, 0x3f6
cmp word [ebx + 0xc], ax
jne 0x10042549
cmp dword [0x103d3adc], 1
jne 0x10042549
call edi
sub eax, dword [0x1035ed90]
mov ecx, dword [0x103d4558]
imul ecx, ecx, 0x3e8
cmp eax, ecx
jbe 0x10042549
push 3
push 0x10097dd4
call fcn.1003c64d
pop ecx
pop ecx
call edi
mov dword [0x1035ed90], eax
jmp 0x10042549
cmp ecx, 0xc0089
jne 0x10042945
cmp edx, esi
jne 0x10042945
mov eax, 0xfc
cmp word [ebx + 0xc], ax
jne 0x10042549
mov dword [0x1035edbc], 1
jmp 0x10042549
cmp ecx, 0xf081913
jne 0x100429b5
cmp edx, esi
jne 0x100429b5
cmp dword [0x103d3ad8], 1
jne 0x100429b5
movzx eax, word [ebx + 0xc]
mov cl, byte [ebx + 0x5c]
mov byte [eax + 0x1030ed00], cl
mov cl, byte [ebx + 0x17c]
mov byte [eax + 0x102fed00], cl
push eax
push dword [ebx + 0x17c]
push dword [ebx + 0x5c]
push 0x10097de0
lea eax, [ebp - 0x17c]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
cmp dword [0x103d3ad8], 1
jne 0x10042549
cmp byte [0x1035ef2a], 1
jne 0x10042549
and dword [ebx + 4], 0
jmp 0x10042549
cmp ecx, 0x342201
jne 0x10042b06
mov eax, eax
mov cl, cl
mov dl, dl
mov dword [ebp - 0x884], 0x2fc6570
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x86c]
cmp eax, dword [0x2fb7a9c]
jge 0x10042549
mov eax, dword [ebp - 0x884]
mov esi, dword [eax]
add dword [ebp - 0x884], 4
cmp dword [esi], 0xd71444
jne 0x10042afb
cmp dword [esi + 0x10a4], 0
je 0x10042afb
movzx eax, word [ebx]
cmp dword [esi + 0x14], eax
jne 0x10042afb
lea eax, [esi + 0x360]
mov dword [ebp - 0x80c], eax
mov eax, dword [esi + 0x10a4]
fld dword [eax + 0x280]
call fcn.10082ff0
mov dword [ebp - 0x804], eax
mov eax, dword [esi + 0x10a4]
fld dword [eax + 0x288]
call fcn.10082ff0
mov dword [ebp - 0x7fc], eax
cmp dword [esi + 0x3b0], 0x40d8
jne 0x10042ac1
push eax
push dword [ebp - 0x804]
push 0x10097dec
lea eax, [ebp - 0x17c]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
xor eax, eax
cmp dword [0x101117c4], 2
setne al
mov dword [0x1035eef4], eax
test eax, eax
je 0x10042ac1
push dword [ebp - 0x7f4]
push 0x100944e4
call fcn.100063b4
fld dword [ebx + 0x1c]
call fcn.10082ff0
mov esi, eax
fld dword [ebx + 0x24]
call fcn.10082ff0
push eax
push esi
call fcn.100683b5
add esp, 0x10
push 0xc8
push 0
lea eax, [ebp - 0x324]
push eax
call sub.MSVCR100.dll_memset
push dword [ebp - 0x7fc]
push dword [ebp - 0x804]
push dword [ebp - 0x80c]
push str._s._d._d
lea eax, [ebp - 0x324]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x20
inc dword [ebp - 0x86c]
jmp 0x100429d8
mov eax, 0xa40501
cmp edx, esi
jne 0x10042549
cmp ecx, eax
jne 0x10042b6b
cmp dword [ebx + 8], 0x260008
jne 0x10042b6b
mov esi, 0x103c17e4
call section..text
mov esi, 0x103c2be4
call section..text
mov esi, 0x103c43a4
call section..text
mov esi, 0x103c6594
call section..text
mov esi, 0x103c7a9c
call section..text
mov esi, 0x103c55c4
call section..text
mov esi, 0x103c777c
call section..text
jmp 0x10042549
cmp edx, esi
jne 0x10042549
cmp ecx, eax
jne 0x10042c4d
cmp dword [ebx + 8], 0x1f0008
jne 0x10042c4d
cmp word [ebx + 0x40], 0
jne 0x10042c4d
movzx eax, word [ebx + 0x28]
push eax
mov esi, 0x103c55c4
call fcn.1000117c
movzx eax, word [ebx + 0x18]
push eax
mov esi, 0x103c2be4
call fcn.1000117c
movzx eax, word [ebx + 0x30]
push eax
mov esi, 0x103c6594
call fcn.1000117c
movzx eax, word [ebx + 0x20]
push eax
mov esi, 0x103c43a4
call fcn.1000117c
movzx eax, word [ebx + 0x10]
push eax
mov esi, 0x103c17e4
call fcn.1000117c
call edi
push eax
mov esi, 0x103c777c
call fcn.1000117c
push str.111111111111111
mov esi, 0x103c7a9c
call fcn.100010da
and dword [ebp - 0x858], 0
mov eax, dword [0x103c55cc]
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x858], eax
jge 0x10042549
mov eax, dword [ebp - 0x858]
mov ecx, dword [0x103c55c4]
mov ecx, dword [ecx + eax*4]
movzx edx, word [ebx + 0x28]
cmp dword [ecx], edx
jne 0x10042c45
push 0x10089de4
mov ecx, dword [0x103c7a9c]
push dword [ecx + eax*4]
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
inc dword [ebp - 0x858]
jmp 0x10042c01
cmp edx, esi
jne 0x10042549
cmp ecx, eax
jne 0x10042cb5
cmp dword [ebx + 8], 0x290008
jne 0x10042cb5
and dword [ebp - 0x844], 0
mov eax, dword [0x103c55cc]
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x844], eax
jge 0x10042549
mov eax, dword [ebp - 0x844]
mov ecx, dword [0x103c55c4]
mov ecx, dword [ecx + eax*4]
movzx edx, word [ebx + 0x30]
cmp dword [ecx], edx
jne 0x10042cad
push 0x10089de4
mov ecx, dword [0x103c7a9c]
push dword [ecx + eax*4]
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
inc dword [ebp - 0x844]
jmp 0x10042c69
cmp edx, esi
jne 0x10042549
cmp ecx, eax
jne 0x10042d26
cmp dword [ebx + 8], 0x200008
jne 0x10042d26
and dword [ebp - 0x864], 0
mov eax, dword [0x103c55cc]
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x864], eax
jge 0x10042549
mov eax, dword [ebp - 0x864]
mov ecx, dword [0x103c55c4]
mov ecx, dword [ecx + eax*4]
movzx edx, word [ebx + 0x30]
cmp dword [ecx], edx
jne 0x10042d1e
cmp word [ebx + 0x28], 1
jne 0x10042d1e
lea ecx, [ebx + 0x88]
push ecx
mov ecx, dword [0x103c7a9c]
push dword [ecx + eax*4]
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
inc dword [ebp - 0x864]
jmp 0x10042cd1
cmp edx, esi
jne 0x10042549
cmp word [ebx + 4], 4
jne 0x10042549
mov byte [0x1035ef28], 1
jmp 0x100422aa
movzx ecx, word [ebx + 4]
cmp ecx, 0x7b
jne 0x10042ed0
cmp dword [0x103c2c84], 1
jne 0x10042ed0
xor eax, eax
mov dword [ebp - 0x8b0], eax
movzx ecx, byte [0x100a60a0]
cmp eax, ecx
jge 0x10042d8e
movzx ecx, word [ebx + 0x10]
cmp dword [eax*4 + 0x100a60a4], ecx
jne 0x10042d8b
imul eax, eax, 0x14
add eax, 0x100a60f4
mov esi, eax
jmp 0x10042d90
inc eax
jmp 0x10042d61
xor esi, esi
test esi, esi
je 0x100422aa
fld dword [ebx + 0x1e]
call fcn.10082ff0
mov dword [ebp - 0x804], eax
fld dword [ebx + 0x26]
call fcn.10082ff0
mov dword [ebp - 0x808], eax
mov ecx, 0xd71444
mov eax, dword [ebp - 0x810]
mov eax, dword [eax + 0x1d20]
call fcn.10006671
test eax, eax
jne 0x100422aa
cmp dword [0x10111c0c], eax
je 0x100422aa
xor edi, edi
inc edi
cmp dword [0x103c2c98], edi
jne 0x10042e24
xor edi, edi
and dword [ebp - 0x870], edi
mov eax, dword [0x103d5e68]
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x870]
cmp ecx, eax
jge 0x10042e24
mov eax, dword [0x103d5e60]
mov eax, dword [eax + ecx*4]
push esi
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x10042e2d
inc dword [ebp - 0x870]
jmp 0x10042df1
cmp edi, 1
jne 0x100422aa
fild dword [ebp - 0x808]
fstp dword [ebp - 0x7fc]
fild dword [ebp - 0x804]
fstp dword [ebp - 0x804]
sub esp, 0x10
fld dword [ebp - 0x7fc]
fstp dword [esp + 0xc]
fld dword [ebp - 0x804]
fstp dword [esp + 8]
fld dword [0x1035edc8]
fstp dword [esp + 4]
fld dword [0x1035edc4]
fstp dword [esp]
call fcn.1000640b
add esp, 0x10
fild dword [0x1035ede8]
fcompp
fnstsw ax
test ah, 0x41
jnp 0x100422aa
push ecx
push ecx
fld dword [ebp - 0x7fc]
fstp dword [esp + 4]
fld dword [ebp - 0x804]
fstp dword [esp]
call fcn.1003996e
fld dword [ebp - 0x7fc]
fstp dword [esp + 4]
fld dword [ebp - 0x804]
fstp dword [esp]
movzx eax, word [ebx]
push eax
push 0xffffffffffffffff
call fcn.100399be
movzx eax, word [ebx]
push eax
call fcn.1003988f
jmp 0x10044274
cmp esi, dword [ebp - 0x7f4]
jne 0x10042f34
mov eax, 0x84
cmp cx, ax
jne 0x10042f34
movzx eax, word [ebx + 0xa]
cmp eax, 0xb
je 0x10042ef9
mov ecx, 0x3f3
cmp ax, cx
jne 0x100422aa
movzx ecx, word [ebx + 0xc]
mov dword [ebp - 0x808], ecx
movzx edx, word [ebx + 8]
mov eax, dword [0x34dab34]
mov esi, dword [0x34dab38]
mov dword [ebp - 0x8a4], eax
cmp eax, esi
je 0x100422aa
movzx edi, word [eax]
cmp edi, edx
jne 0x10042f2d
mov byte [eax + 0xb4], cl
add eax, 0xbc
jmp 0x10042f12
cmp ecx, 0x65
jne 0x10043301
cmp dword [ebp - 0x7f4], esi
jne 0x10042f8e
cmp byte [0x1035ef2f], 1
jne 0x10042f8e
cmp dword [0x1035eef4], 0
jne 0x10042f8e
fld dword [ebx + 0xc]
call fcn.10082ff0
mov esi, eax
fld dword [ebx + 0x14]
call fcn.10082ff0
push eax
push esi
push 0x10097e14
lea eax, [ebp - 0x25c]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
push 0xf
lea eax, [ebp - 0x25c]
push eax
call fcn.1003c64d
add esp, 0x18
cmp dword [0x103ca5e0], 1
jne 0x100422aa
call edi
sub eax, dword [0x1035ed84]
cmp eax, 0x1388
jb 0x100422aa
xor edi, edi
cmp dword [0x34d2968], edi
jle 0x100422aa
cmp dword [0x103ca338], 1
jne 0x100422aa
cmp dword [0x1035eef4], 1
jne 0x100422aa
fld dword [ebx + 0xc]
call fcn.10082ff0
mov dword [ebp - 0x7f4], eax
fld dword [ebx + 0x14]
call fcn.10082ff0
mov dword [ebp - 0x804], eax
movzx ecx, word [ebx]
mov dword [ebp - 0x87c], edi
mov eax, 0x333bab0
mov dword [ebp - 0x8b4], eax
cmp eax, 0x348c950
jge 0x10043192
cmp byte [eax], 0
je 0x10043182
cmp dword [ebp - 0x87c], ecx
jne 0x10043182
add eax, 2
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
mov byte [ebp - 0x811], 1
movzx eax, word [ebx]
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.100407db
mov esi, dword [ebp - 0x810]
fld dword [esi + 0x1f68]
fstp dword [esp + 4]
fld dword [esi + 0x1f60]
fstp dword [esp]
fild dword [ebp - 0x804]
push ecx
push ecx
fstp dword [esp + 4]
fild dword [ebp - 0x7f4]
fstp dword [esp]
call fcn.1000640b
add esp, 0x10
fild dword [0x103ca334]
fcompp
fnstsw ax
test ah, 0x41
jne 0x100422aa
mov dword [ebp - 0x828], edi
mov ebx, dword [sym.imp.MSVCR100.dll_strcmp]
mov eax, dword [0x103d5f70]
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x828], eax
jge 0x100431e2
mov edi, dword [ebp - 0x828]
mov eax, dword [0x103d5f68]
push dword [eax + edi*4]
lea eax, [ebp - 0x1f8]
push eax
call ebx
pop ecx
pop ecx
test eax, eax
jne 0x100431d7
cmp dword [0x101117c4], 2
jne 0x10043132
cmp dword [0x103ca5d0], 1
jne 0x10043132
sub esp, 0x10
fld dword [0x1035edc8]
fstp dword [esp + 0xc]
fld dword [0x1035edc4]
fstp dword [esp + 8]
fild dword [ebp - 0x804]
fstp dword [esp + 4]
fild dword [ebp - 0x7f4]
fstp dword [esp]
call fcn.1000640b
add esp, 0x10
fcomp dword [0x1009dae4]
fnstsw ax
test ah, 1
je 0x100431e2
push dword [ebp - 0x804]
push dword [ebp - 0x7f4]
call fcn.1003c02e
pop ecx
pop ecx
test al, al
je 0x100431e2
fld dword [esi + 0x1f68]
call fcn.10082ff0
push eax
fld dword [esi + 0x1f60]
call fcn.10082ff0
push eax
call fcn.1003c02e
pop ecx
pop ecx
test al, al
je 0x100431e2
mov eax, dword [0x103d5f68]
push dword [eax + edi*4]
push 0x1009784c
jmp 0x100432c5
inc dword [ebp - 0x87c]
add eax, 0x1cc
jmp 0x10043000
mov byte [ebp - 0x811], 0
jmp 0x100422aa
push 3
jmp 0x100431c4
cmp eax, ecx
jne 0x100431b3
cmp dword [0x103cb7b4], 0
jne 0x100431b3
push 2
jmp 0x100431c4
test eax, eax
jne 0x100431c2
cmp dword [0x103cb7b4], ecx
jne 0x100431c2
push ecx
jmp 0x100431c4
push 0
lea eax, [ebp - 0x114]
push eax
call fcn.100370d7
pop ecx
pop ecx
jmp 0x100422aa
inc dword [ebp - 0x828]
jmp 0x100430a5
and dword [ebp - 0x830], 0
mov eax, dword [0x103d5f88]
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x830], eax
jge 0x100422aa
mov edi, dword [ebp - 0x830]
mov eax, dword [0x103d5f80]
push dword [eax + edi*4]
lea eax, [ebp - 0x17c]
push eax
call ebx
pop ecx
pop ecx
test eax, eax
jne 0x100432f6
cmp dword [0x101117c4], 2
jne 0x10043276
cmp dword [0x103ca5d0], 1
jne 0x10043276
sub esp, 0x10
fld dword [0x1035edc8]
fstp dword [esp + 0xc]
fld dword [0x1035edc4]
fstp dword [esp + 8]
fild dword [ebp - 0x804]
fstp dword [esp + 4]
fild dword [ebp - 0x7f4]
fstp dword [esp]
call fcn.1000640b
add esp, 0x10
fcomp dword [0x1009dae4]
fnstsw ax
test ah, 1
je 0x100422aa
push dword [ebp - 0x804]
push dword [ebp - 0x7f4]
call fcn.1003c02e
pop ecx
pop ecx
test al, al
je 0x100422aa
fld dword [esi + 0x1f68]
call fcn.10082ff0
push eax
fld dword [esi + 0x1f60]
call fcn.10082ff0
push eax
call fcn.1003c02e
pop ecx
pop ecx
test al, al
je 0x100422aa
mov eax, dword [0x103d5f80]
push dword [eax + edi*4]
push 0x1009786c
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
xor ecx, ecx
add esp, 0xc
inc ecx
mov eax, dword [0x103ca340]
cmp eax, ecx
jne 0x100431b3
cmp dword [0x103cb7b4], ecx
je 0x1004319e
jmp 0x100431a2
inc dword [ebp - 0x830]
jmp 0x100431e9
cmp dword [ebp - 0x7f4], esi
je 0x1004332f
cmp dword [ebx + 6], 0x10070
jne 0x10043327
mov eax, dword [ebx + 0x28]
mov dword [0x101100b8], eax
mov eax, dword [ebx + 0x2c]
mov dword [0x101100bc], eax
jmp 0x100422aa
cmp dword [ebp - 0x7f4], esi
jne 0x10043396
cmp ecx, 0x78
jne 0x10043380
mov cl, cl
mov dl, dl
mov al, al
mov eax, dword [0xe7c850]
mov eax, dword [eax + 0x4cc]
mov ecx, dword [0x2fb7ac4]
mov eax, dword [eax + 0x388]
cmp eax, dword [ecx + 0x14]
jne 0x100422aa
mov eax, dword [0x103c9c6c]
test eax, eax
jle 0x100422aa
movzx ecx, word [ebx + 0x30]
inc ecx
cmp eax, ecx
je 0x100422aa
dec eax
push eax
call fcn.1003d624
jmp 0x100431d1
cmp dword [ebp - 0x7f4], esi
jne 0x10043396
mov eax, 0x93
cmp cx, ax
je 0x100422aa
mov eax, 0x88
cmp cx, ax
jne 0x100434ed
cmp esi, dword [ebp - 0x7f4]
jne 0x10043435
cmp word [ebx + 0x1c], 0
jne 0x10043435
call edi
sub eax, dword [0x103d7790]
cmp eax, 0x3e8
jbe 0x100422aa
movzx eax, word [ebx + 6]
cmp eax, 0x1c
jne 0x10043423
cmp word [ebx + 0xc], 2
jne 0x100433e9
mov byte [0x1035ef1a], 0
inc dword [0x1035ee98]
jmp 0x10043423
cmp eax, 0x1c
jne 0x10043423
cmp word [ebx + 0xc], 0
jne 0x10043423
mov byte [0x1035ef1a], 1
mov eax, dword [0x2f92a08]
cmp eax, 0x321
je 0x10043423
cmp eax, 0xfa1
je 0x10043423
cmp eax, 0x1c85
je 0x10043423
cmp eax, 0x9ca5
je 0x10043423
inc dword [0x1035ee9c]
call edi
mov dword [0x103d7790], eax
inc dword [0x1035eea0]
jmp 0x100422aa
mov eax, dword [ebp - 0x810]
mov eax, dword [eax + 0x1d20]
mov ecx, 0xd71444
call fcn.10006671
test eax, eax
je 0x100422aa
cmp dx, word [eax + 0x14]
jne 0x100422aa
mov ecx, dword [0x2f92a08]
cmp ecx, 0x515
je 0x10043483
cmp ecx, 0x7594
je 0x10043483
cmp ecx, 0x75f8
je 0x10043483
cmp ecx, 0x765c
jne 0x100434b4
mov ecx, dword [eax + 0x10a4]
mov edx, dword [ebp - 0x810]
fld dword [ecx + 0x284]
fsub dword [edx + 0x1f64]
fcomp qword [0x1009db88]
fnstsw ax
test ah, 0x41
jne 0x100434b4
mov eax, dword [ecx + 0x284]
mov dword [edx + 0x1f64], eax
inc dword [0x1035eeec]
cmp dword [0x10111c14], 0
jle 0x100434e1
cmp dword [0x103c2c84], 1
jne 0x100434e1
cmp dword [0x103c2c8c], 1
jne 0x100434dc
call fcn.10040e57
jmp 0x100434e1
call fcn.10040d97
mov byte [0x1035ef0e], 0
jmp 0x100422aa
mov eax, 0x1540
cmp cx, ax
jne 0x1004354e
cmp esi, dword [ebp - 0x7f4]
jne 0x100422aa
cmp word [ebx + 8], 0
jbe 0x100422aa
movzx eax, word [ebx + 0x10]
cmp eax, 0x13
jne 0x10043530
cmp dword [0x1035eef4], 1
jne 0x10043530
push esi
push 0x100944e4
call fcn.100063b4
jmp 0x100431d0
cmp dword [0x103d1a28], 1
jne 0x100422aa
push eax
call fcn.1007bf10
pop ecx
cmp al, 1
jne 0x100422aa
jmp 0x10043520
cmp ecx, 0x72
jne 0x1004376d
cmp dword [0x103c781c], 1
jne 0x1004376d
cmp dword [0x101117c4], 2
je 0x1004376d
mov al, al
mov cl, cl
mov al, al
mov cl, cl
mov al, al
and dword [ebp - 0x88c], 0
lea esi, [ebx + 0xc]
mov dword [ebp - 0x89c], esi
and dword [ebp - 0x874], 0
movzx eax, byte [ebx + 8]
cmp dword [ebp - 0x874], eax
jge 0x100422aa
fld dword [esi + 0x14]
call fcn.10082ff0
mov dword [ebp - 0x804], eax
fld dword [esi + 0x1c]
call fcn.10082ff0
mov dword [ebp - 0x7fc], eax
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x7f4], eax
fild dword [ebp - 0x7fc]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [ebp - 0x804]
fstp dword [esp + 8]
mov eax, dword [ebp - 0x810]
fld dword [eax + 0x1f68]
fstp dword [esp + 4]
fld dword [eax + 0x1f60]
fstp dword [esp]
call fcn.1000640b
add esp, 0x10
call fcn.10082ff0
mov dword [ebp - 0x808], eax
xor ecx, ecx
mov dword [ebp - 0x838], ecx
mov eax, dword [0x1010f8ac]
cmp dword [ebp - 0x838], eax
jge 0x10043638
mov edx, dword [ebp - 0x838]
mov edx, dword [edx*4 + 0x1010df48]
cmp edx, dword [esi]
je 0x1004367c
inc dword [ebp - 0x838]
jmp 0x10043617
test ecx, ecx
jne 0x1004367c
cmp dword [0x103c7830], 1
jne 0x1004367c
mov ecx, dword [esi]
mov dword [eax*4 + 0x1010df48], ecx
call edi
mov ecx, dword [0x1010f8ac]
mov dword [ecx*4 + 0x1010e718], eax
mov eax, dword [0x1010f8ac]
mov byte [eax + 0x1010eee8], 0
mov eax, dword [0x1010f8ac]
and dword [eax*4 + 0x1010f0dc], 0
inc dword [0x1010f8ac]
cmp dword [ebp - 0x808], 0x96
jg 0x10043746
cmp dword [0x103c783c], 1
jne 0x100436d8
fild dword [0x1035eedc]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [0x1035eed8]
fstp dword [esp + 8]
fild dword [ebp - 0x7fc]
fstp dword [esp + 4]
fild dword [ebp - 0x804]
fstp dword [esp]
call fcn.1000640b
add esp, 0x10
fcomp dword [0x1009da34]
fnstsw ax
test ah, 5
jnp 0x100422aa
fild dword [0x100a529c]
sub esp, 0x10
fstp dword [esp + 0xc]
fild dword [0x100a5298]
fstp dword [esp + 8]
fild dword [ebp - 0x7fc]
fstp dword [esp + 4]
fild dword [ebp - 0x804]
fstp dword [esp]
call fcn.1000640b
add esp, 0x10
fcomp dword [0x1009da34]
fnstsw ax
test ah, 5
jnp 0x100422aa
push dword [ebp - 0x7f4]
push dword [esi + 4]
lea eax, [ebp - 0x17c]
push eax
mov eax, dword [esi + 8]
call fcn.1003f6c1
pop ecx
push dword [esi]
mov edi, eax
call fcn.1003f751
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esi, 0x68
mov dword [ebp - 0x89c], esi
inc dword [ebp - 0x88c]
cmp dword [ebp - 0x88c], 0x10
jg 0x100422aa
inc dword [ebp - 0x874]
jmp 0x10043592
cmp ecx, 0xc
jne 0x100438eb
movzx esi, word [ebx + 8]
imul esi, esi, 0x1cc
and dword [ebp - 0x840], 0
mov eax, dword [0x103d5f40]
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x840], eax
jge 0x100437ea
mov eax, dword [ebp - 0x840]
shl eax, 2
mov dword [ebp - 0x808], eax
lea ecx, [esi + 0x333bab2]
push ecx
mov ecx, dword [0x103d5f20]
push dword [ecx + eax]
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x1004385a
movzx eax, word [ebx]
mov ecx, dword [0x103d5f38]
mov esi, dword [ebp - 0x808]
mov ecx, dword [ecx + esi]
mov dword [ecx], eax
call edi
mov ecx, dword [0x103d5f2c]
mov ecx, dword [ecx + esi]
mov dword [ecx], eax
xor esi, esi
inc esi
cmp dword [0x103c2d58], esi
jne 0x100422aa
movzx eax, word [ebx + 8]
cmp dword [ebp - 0x7f4], eax
jne 0x100422aa
mov dword [ebp - 0x878], 0x2fc6570
and dword [ebp - 0x880], 0
mov edx, 0xd71444
mov eax, dword [ebp - 0x880]
cmp eax, dword [0x2fb7a9c]
jge 0x1004386d
mov eax, dword [ebp - 0x878]
mov eax, dword [eax]
add dword [ebp - 0x878], 4
test eax, eax
je 0x10043865
cmp dword [eax], edx
jne 0x10043865
cmp dword [eax + 0x10a4], 0
je 0x10043865
movzx ecx, word [ebx]
cmp ecx, dword [eax + 0x14]
jne 0x10043865
mov eax, dword [eax + 0xc]
jmp 0x1004386f
inc dword [ebp - 0x840]
jmp 0x10043787
inc dword [ebp - 0x880]
jmp 0x1004381f
xor eax, eax
test eax, eax
jle 0x100422aa
mov ecx, dword [eax*4 + 0x2fb7ae0]
cmp dword [ecx], edx
jne 0x100422aa
mov dword [ecx + 0x354], esi
xor edx, edx
mov dword [ebp - 0x848], edx
cmp dword [ebp - 0x848], 0x1e
jge 0x100438b8
mov ecx, dword [ebp - 0x848]
cmp dword [ecx*4 + 0x1035edf8], eax
je 0x100422aa
inc dword [ebp - 0x848]
jmp 0x10043894
mov dword [ebp - 0x850], edx
cmp dword [ebp - 0x850], 0x1e
jge 0x100422aa
mov ecx, dword [ebp - 0x850]
lea ecx, [ecx*4 + 0x1035edf8]
cmp dword [ecx], edx
jne 0x100438e3
mov dword [ecx], eax
jmp 0x100422aa
inc dword [ebp - 0x850]
jmp 0x100438be
cmp ecx, 0xa
jne 0x10043eda
xor eax, eax
cmp dword [ebx + 0x10], eax
je 0x100422aa
mov ecx, 0xbb8
cmp dx, cx
jbe 0x10043a36
mov dword [ebp - 0x898], eax
mov dword [ebp - 0x824], eax
mov eax, dword [0x103cbc1c]
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x824], eax
jge 0x10043971
mov ecx, dword [ebp - 0x824]
mov edx, dword [0x103ce124]
mov edx, dword [edx + ecx*4]
mov edx, dword [edx]
cmp edx, dword [ebp - 0x7f4]
je 0x100439b2
push 0xc8
push 0
lea eax, [ebp - 0x324]
push eax
call sub.MSVCR100.dll_memset
push esi
push dword [ebx + 0x10]
push 0x10097e24
lea eax, [ebp - 0x324]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
cmp dword [ebp - 0x898], 0
jne 0x100422aa
push 0xc8
push 0
lea eax, [ebp - 0x324]
push eax
call sub.MSVCR100.dll_memset
movzx eax, word [ebx]
push eax
push dword [ebx + 0x10]
push 0x10097e4c
lea eax, [ebp - 0x324]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
jmp 0x100422aa
mov edx, dword [0x103cc3b4]
mov edx, dword [edx + ecx*4]
cmp esi, dword [edx]
jne 0x10043a2b
mov edx, dword [0x103cbc14]
mov ecx, dword [edx + ecx*4]
cmp dword [ecx], 0x2c
jne 0x10043a2b
mov dword [ebp - 0x898], 1
push 0xc8
push 0
lea eax, [ebp - 0x324]
push eax
call sub.MSVCR100.dll_memset
push esi
push dword [ebx + 0x10]
push 0x10097e38
lea eax, [ebp - 0x324]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
mov eax, dword [ebp - 0x810]
cmp dword [eax + 0x2a50], 0xd
jne 0x10043971
mov eax, dword [ebx + 0x10]
cdq
add dword [0x1035f998], eax
adc dword [0x1035f99c], edx
jmp 0x10043971
inc dword [ebp - 0x824]
jmp 0x1004391e
cmp dword [ebp - 0x7f4], esi
jne 0x100422aa
push 0x3e8
push 0
lea eax, [ebp - 0x7f0]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
and dword [ebp - 0x868], 0
mov esi, dword [sym.imp.MSVCR100.dll_strcat]
cmp dword [ebp - 0x868], 0x64
jge 0x10043b20
push 0x10
lea eax, [ebp - 0x80c]
push eax
mov eax, dword [ebp - 0x868]
movzx eax, byte [ebx + eax]
push eax
call dword [sym.imp.MSVCR100.dll__itoa]
lea eax, [ebp - 0x80c]
push eax
call dword [sym.imp.MSVCR100.dll_strlen]
add esp, 0x10
cmp eax, 1
jne 0x10043abb
mov byte [ebp - 0x80a], 0
mov al, byte [ebp - 0x80c]
mov byte [ebp - 0x80b], al
mov byte [ebp - 0x80c], 0x30
and dword [ebp - 0x860], 0
cmp dword [ebp - 0x860], 2
jge 0x10043af4
mov eax, dword [ebp - 0x860]
lea eax, [ebp + eax - 0x80c]
mov cl, byte [eax]
cmp cl, 0x61
jl 0x10043aec
cmp cl, 0x7a
jg 0x10043aec
movsx ecx, cl
sub ecx, 0x20
mov byte [eax], cl
inc dword [ebp - 0x860]
jmp 0x10043ac2
push 0x10097e58
lea eax, [ebp - 0x7f0]
push eax
call esi
lea eax, [ebp - 0x80c]
push eax
lea eax, [ebp - 0x7f0]
push eax
call esi
add esp, 0x10
inc dword [ebp - 0x868]
jmp 0x10043a65
call edi
mov dword [0x1035eda4], eax
call edi
add eax, 0x44c
mov dword [0x101117f0], eax
call edi
mov dword [0x1035ed58], eax
mov eax, dword [0x2fb7ac4]
mov ecx, 0xd71444
mov eax, dword [eax + 0x1d20]
call fcn.10006671
mov dword [ebp - 0x7f4], eax
mov byte [0x1035ef11], 1
movzx esi, word [ebx + 8]
mov dword [ebp - 0x80c], esi
mov eax, dword [ebx + 0x3c]
mov dword [ebp - 0x804], eax
cmp eax, 0x7e
je 0x10043b79
cmp eax, 0x7f
jne 0x10043b80
and dword [0x1035eda4], 0
fld dword [ebx + 0x40]
call fcn.10082ff0
mov dword [0x10111774], eax
fld dword [ebx + 0x44]
call fcn.10082ff0
mov dword [0x10111770], eax
fld dword [ebx + 0x48]
call fcn.10082ff0
mov dword [0x1011176c], eax
movzx eax, word [ebx + 0x8f]
mov dword [0x1035eee8], eax
cmp eax, 6
jne 0x10043bbf
xor eax, eax
mov dword [0x1035eee8], eax
cmp esi, 0xbb8
jl 0x10043bf1
cmp byte [ebx + 0x53], 0
jne 0x10043bf1
mov ecx, dword [ebx + 0x10]
mov eax, ecx
cdq
add dword [0x1035f998], eax
adc dword [0x1035f99c], edx
mov dword [0x1035eef8], ecx
call edi
mov dword [0x1035ed44], eax
mov eax, dword [0x1035eee8]
mov esi, dword [ebp - 0x810]
mov ecx, dword [0x100a52a8]
inc ecx
cmp eax, ecx
je 0x10043c07
cmp eax, 1
jne 0x10043c35
cmp dword [0x103d1e5c], 1
jne 0x10043c1e
cmp byte [0x1035ef2a], 1
jne 0x10043c1e
call fcn.10040f83
cmp dword [0x10111c14], 0
jle 0x10043c35
cmp dword [0x103c2c84], 1
jne 0x10043c35
call fcn.10040f83
cmp dword [0x103d1f18], 1
jne 0x10043c92
cmp byte [0x1035ef2a], 1
jne 0x10043c92
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
fld dword [esi + 0x1f60]
call fcn.10082ff0
mov dword [ebp - 0x7fc], eax
fld dword [esi + 0x1f68]
call fcn.10082ff0
mov dword [ebp - 0x808], eax
fild dword [ebp - 0x808]
fstp dword [esp + 4]
fild dword [ebp - 0x7fc]
fstp dword [esp]
call fcn.1003996e
pop ecx
pop ecx
mov eax, dword [ebp - 0x7f4]
test eax, eax
je 0x10043caf
movzx eax, word [eax + 0x14]
cmp eax, dword [ebp - 0x80c]
jne 0x10043caf
mov byte [0x1035ef0d], 1
cmp dword [ebp - 0x804], 0xc9
jne 0x10043d1c
cmp dword [ebx + 0x38], 0x7a5d3
jne 0x10043d1c
inc dword [0x1011177c]
mov eax, dword [0x1011177c]
cmp eax, dword [0x103c3210]
jl 0x10043d1c
call edi
mov dword [0x101117e4], eax
fld dword [esi + 0x1f60]
call fcn.10082ff0
mov dword [ebp - 0x7fc], eax
fld dword [esi + 0x1f68]
call fcn.10082ff0
mov dword [ebp - 0x808], eax
fild dword [ebp - 0x808]
push ecx
push ecx
fstp dword [esp + 4]
fild dword [ebp - 0x7fc]
fstp dword [esp]
call fcn.1003996e
pop ecx
pop ecx
cmp byte [0x1035ef10], 1
jne 0x10043d8a
mov eax, dword [ebp - 0x804]
cmp eax, 0xc9
je 0x10043d50
cmp eax, 0xcd
je 0x10043d50
cmp eax, 0xa6
je 0x10043d50
cmp eax, 0x7e
je 0x10043d50
cmp eax, 0xdc
jne 0x100422aa
mov ebx, dword [ebx + 0x38]
cmp ebx, 0x7a5d1
je 0x100422aa
cmp ebx, 0x7a5d2
je 0x100422aa
cmp ebx, 0x7a5d3
je 0x100422aa
call edi
mov dword [0x101117e0], eax
mov byte [0x1035ef12], 1
jmp 0x100422aa
cmp dword [0x103ca598], 1
jne 0x10043de7
cmp dword [0x101117c4], 5
jne 0x10043de7
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
fld dword [esi + 0x1f60]
call fcn.10082ff0
mov dword [ebp - 0x7fc], eax
fld dword [esi + 0x1f68]
call fcn.10082ff0
mov dword [ebp - 0x808], eax
fild dword [ebp - 0x808]
fstp dword [esp + 4]
fild dword [ebp - 0x7fc]
fstp dword [esp]
call fcn.1003996e
pop ecx
pop ecx
cmp dword [0x103c2c90], 1
jne 0x10043e12
cmp byte [0x1035ef1b], 1
jne 0x10043e12
cmp byte [0x1035ef0f], 1
jne 0x10043e12
cmp dword [0x1035eef4], 1
jne 0x10043e12
and dword [ebx], 0
and dword [ebx + 4], 0
cmp dword [ebp - 0x804], 0xd2
je 0x10043e36
cmp dword [ebp - 0x804], 0xd3
je 0x10043e36
cmp dword [ebp - 0x804], 0xd4
jne 0x10043e81
mov eax, dword [0x10113488]
add eax, 0x47
push eax
push dword [0x100ded8c]
call dword [sym.imp.USER32.dll_KillTimer]
mov al, byte [0x1035f9ae]
cmp al, 1
jne 0x10043e75
push 0x1004175f
push 0x7d0
mov eax, dword [0x10113488]
add eax, 0x4e
push eax
push dword [0x100ded8c]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x10043e81
mov byte [0x1035ef1b], al
mov byte [0x1035ef0e], 0
mov byte [0x1035ef13], 1
mov byte [0x1035ef14], 1
mov byte [0x1035ef15], 1
mov byte [0x1035ef16], 1
xor eax, eax
mov dword [0x1035edbc], eax
mov dword [0x1035ed60], eax
cmp dword [0x103c2d5c], 1
jne 0x100422aa
cmp dword [0x10111c14], eax
jle 0x100422aa
cmp dword [0x103bfb30], 1
je 0x100422aa
push eax
call fcn.10037d26
jmp 0x100431d1
cmp ecx, 0x2f
jne 0x1004415c
cmp dword [ebp - 0x7f4], esi
jne 0x100422aa
cmp byte [0x100a52ac], 1
je 0x100422aa
call edi
mov dword [0x1035ed58], eax
mov byte [0x1035ef11], 1
mov eax, dword [ebx + 0x16]
mov dword [ebp - 0x7fc], eax
fld dword [ebx + 0x1a]
call fcn.10082ff0
mov dword [0x10111774], eax
fld dword [ebx + 0x1e]
call fcn.10082ff0
mov dword [0x10111770], eax
fld dword [ebx + 0x22]
call fcn.10082ff0
mov dword [0x1011176c], eax
xor eax, eax
mov dword [0x1035eda4], eax
mov dword [0x1035eee8], eax
cmp byte [ebx + 0x26], al
jne 0x10043f9c
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 0x14
jge 0x10043f9c
mov eax, dword [ebp - 0x82c]
lea ecx, [ebx + eax*4]
movzx eax, word [ecx + 0x52]
test eax, eax
je 0x10043f9c
cmp eax, 0xbb8
jl 0x10043f94
mov ecx, dword [ecx + 0xa2]
mov eax, ecx
cdq
add dword [0x1035f998], eax
adc dword [0x1035f99c], edx
mov dword [0x1035eef8], ecx
call edi
mov dword [0x1035ed44], eax
inc dword [ebp - 0x82c]
jmp 0x10043f51
cmp dword [0x103d1f18], 1
jne 0x10044001
cmp byte [0x1035ef2a], 1
jne 0x10044001
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
mov esi, dword [ebp - 0x810]
fld dword [esi + 0x1f60]
call fcn.10082ff0
mov dword [ebp - 0x804], eax
fld dword [esi + 0x1f68]
call fcn.10082ff0
mov dword [ebp - 0x808], eax
fild dword [ebp - 0x808]
fstp dword [esp + 4]
fild dword [ebp - 0x804]
fstp dword [esp]
call fcn.1003996e
pop ecx
pop ecx
jmp 0x10044007
mov esi, dword [ebp - 0x810]
mov eax, dword [0x2fb7ac4]
mov ecx, 0xd71444
mov eax, dword [eax + 0x1d20]
call fcn.10006671
test eax, eax
je 0x10044031
mov ax, word [eax + 0x14]
cmp ax, word [ebx + 8]
jne 0x10044031
mov byte [0x1035ef0d], 1
cmp dword [ebp - 0x7fc], 0xc9
jne 0x1004409e
cmp dword [ebx + 0x12], 0x7a5d3
jne 0x1004409e
inc dword [0x1011177c]
mov eax, dword [0x1011177c]
cmp eax, dword [0x103c3210]
jl 0x1004409e
call edi
mov dword [0x101117e4], eax
fld dword [esi + 0x1f60]
call fcn.10082ff0
mov dword [ebp - 0x804], eax
fld dword [esi + 0x1f68]
call fcn.10082ff0
mov dword [ebp - 0x808], eax
fild dword [ebp - 0x808]
push ecx
push ecx
fstp dword [esp + 4]
fild dword [ebp - 0x804]
fstp dword [esp]
call fcn.1003996e
pop ecx
pop ecx
cmp byte [0x1035ef10], 1
jne 0x100440d7
cmp dword [ebp - 0x7fc], 0xc9
je 0x100440cf
cmp dword [ebp - 0x7fc], 0xcd
je 0x100440cf
cmp dword [ebp - 0x7fc], 0xa6
jne 0x100422aa
mov ebx, dword [ebx + 0x12]
jmp 0x10043d53
cmp dword [0x103ca598], 1
jne 0x10044134
cmp dword [0x101117c4], 5
jne 0x10044134
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
fld dword [esi + 0x1f60]
call fcn.10082ff0
mov dword [ebp - 0x7fc], eax
fld dword [esi + 0x1f68]
call fcn.10082ff0
mov dword [ebp - 0x808], eax
fild dword [ebp - 0x808]
fstp dword [esp + 4]
fild dword [ebp - 0x7fc]
fstp dword [esp]
call fcn.1003996e
pop ecx
pop ecx
mov byte [0x1035ef13], 1
mov byte [0x1035ef14], 1
mov byte [0x1035ef15], 1
mov byte [0x1035ef16], 1
and dword [0x1035edbc], 0
jmp 0x100422aa
mov eax, 0x270f
cmp dx, ax
jne 0x10044199
mov eax, 0x1709
cmp cx, ax
jne 0x10044199
mov al, al
mov al, al
mov dl, dl
mov dl, dl
cmp dword [ebx + 8], 3
jne 0x100422aa
lea esi, [ebx + 0x10]
call fcn.1003badf
push 0x10097e5c
call fcn.100060fb
jmp 0x100431d1
mov eax, dword [ebp - 0x7f4]
cmp eax, esi
jne 0x100441db
cmp dword [ebx + 4], 0x38177a
jne 0x100441c5
cmp dword [ebx + 8], 0x13
jne 0x100422aa
mov dword [0x1035ed38], 0xfffff8f8
jmp 0x100422aa
cmp eax, esi
jne 0x100441db
mov edx, 0xe1
cmp cx, dx
jne 0x100441db
and dword [ebx], 0
jmp 0x100422aa
cmp eax, dword [ebx + 0x10]
jne 0x1004427c
mov edx, 0x98
cmp cx, dx
jne 0x1004427c
cmp dword [ebx + 8], 1
jne 0x1004420f
cmp dword [ebx + 0xc], 1
jne 0x1004420f
lea eax, [ebx + 0x14]
push eax
push 0x10111114
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
cmp byte [ebx + 8], 1
jne 0x100422aa
cmp dword [0x103c7018], 1
jne 0x100422aa
push 0x1f4
call dword [sym.imp.mfc100.dll_Ordinal_265]
mov edi, eax
mov dword [esp], 0x10110f10
push 0x10097b54
push edi
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
add esp, 0xc
push 0x11
push 0
push edi
call dword [sym.imp.WINMM.dll_PlaySoundA]
push edi
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add ebx, 0x14
push ebx
push 0x10097e68
mov edi, 0x10111128
push edi
call esi
push edi
call fcn.100060fb
add esp, 0x14
jmp 0x100422aa
cmp eax, esi
jne 0x100444ef
cmp ecx, 0x35
jne 0x100442c6
cmp word [ebx + 6], 4
je 0x100442c6
cmp dword [0x103c45a8], 1
jne 0x100422aa
cmp dword [0x1035eef4], 1
jne 0x100422aa
cmp dword [0x103c4464], 1
jne 0x100422aa
mov dword [0x1035eeb0], 0xffff8ad0
jmp 0x100422aa
cmp eax, esi
jne 0x100444ef
cmp dword [ebx + 4], 0x1c0079
jne 0x100444ef
cmp byte [0x100a52ac], 1
je 0x100422aa
mov byte [0x1035ef1d], 1
mov ecx, dword [ebx + 0x18]
mov dword [0x1035eea8], ecx
cmp ecx, 0x321
jne 0x10044313
mov dword [ebp - 0x7fc], 0x20ade9
mov byte [ebp - 0x7f8], 0
jmp 0x1004432e
cmp ecx, 0x4b1
jne 0x1004432e
mov dword [ebp - 0x804], 0x20ac8e0f
mov word [ebp - 0x800], 0
mov dl, byte [0x1035ef1c]
cmp dl, 1
jne 0x100444dc
fld dword [0x103d7794]
fld dword [ebx + 8]
fucompp
fnstsw ax
test ah, 0x44
jp 0x100444c5
fld dword [0x103d7798]
fld dword [ebx + 0x10]
fucompp
fnstsw ax
test ah, 0x44
jp 0x100444c5
fld dword [0x103c0338]
fld qword [0x1009db80]
fucompp
fnstsw ax
test ah, 0x44
jp 0x100443d1
and dword [ebp - 0x84c], 0
mov eax, dword [0x103c12d8]
dec eax
cmp dword [ebp - 0x84c], eax
jge 0x100443cb
mov eax, dword [ebp - 0x84c]
fld dword [eax*4 + 0x103bfb6c]
fstp dword [eax*4 + 0x103bfb68]
fld dword [eax*4 + 0x103c033c]
fstp dword [eax*4 + 0x103c0338]
fld dword [eax*4 + 0x103c0b0c]
fstp dword [eax*4 + 0x103c0b08]
inc dword [ebp - 0x84c]
jmp 0x10044385
dec dword [0x103c12d8]
fldz
fst dword [0x103d7794]
fstp dword [0x103d7798]
and dword [ebp - 0x818], 0
mov eax, dword [0x103c12d8]
cmp dword [ebp - 0x818], eax
jge 0x1004443f
sub eax, dword [ebp - 0x818]
lea eax, [eax*4 + 0x103bfb68]
fld dword [eax - 4]
fstp dword [eax]
mov eax, dword [0x103c12d8]
sub eax, dword [ebp - 0x818]
fld dword [eax*4 + 0x103c0334]
fstp dword [eax*4 + 0x103c0338]
mov eax, dword [0x103c12d8]
sub eax, dword [ebp - 0x818]
fld dword [eax*4 + 0x103c0b04]
fstp dword [eax*4 + 0x103c0b08]
inc dword [ebp - 0x818]
jmp 0x100443e6
inc eax
mov dword [0x103c12d8], eax
mov esi, dword [ebp - 0x810]
fld dword [esi + 0x1f60]
call fcn.10082ff0
mov edi, eax
fld dword [esi + 0x1f68]
call fcn.10082ff0
mov ebx, eax
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
pop ecx
pop ecx
mov esi, dword [sym.imp.MSVCR100.dll_rand]
call esi
cdq
push 0x3c
pop ecx
idiv ecx
add edx, edi
mov dword [ebp - 0x808], edx
fild dword [ebp - 0x808]
fstp dword [0x103bfb68]
fld dword [0x1009db78]
fstp dword [0x103c0338]
call esi
cdq
push 0x3c
pop ecx
idiv ecx
add edx, ebx
mov dword [ebp - 0x808], edx
fild dword [ebp - 0x808]
fstp dword [0x103c0b08]
jmp 0x100422aa
cmp dl, 1
jne 0x100444dc
fld dword [ebx + 8]
fstp dword [0x103d7794]
fld dword [ebx + 0x10]
fstp dword [0x103d7798]
push ecx
call fcn.100067ec
pop ecx
call edi
mov dword [0x1035ed5c], eax
jmp 0x100422aa
mov edx, 0xd6
cmp cx, dx
jne 0x10044514
call edi
mov dword [0x101117dc], eax
mov ebx, dword [ebx + 0xd]
mov dword [0x1035eea8], ebx
push ebx
call fcn.100067ec
jmp 0x100431d1
cmp eax, esi
jne 0x100446b6
cmp dword [ebx + 4], 0x180031
jne 0x100446b6
cmp word [ebx + 0x10], 0
jne 0x100422aa
call edi
sub eax, dword [0x1035ed98]
cmp eax, 0xea60
ja 0x10044594
push 0x14
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x103c9a74
call dword [sym.imp.mfc100.dll_Ordinal_6969]
lea edi, [ebx + 0x12]
lea eax, [ebp - 0x4c]
push eax
push edi
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x10044594
movzx eax, word [ebx + 0xe]
push eax
push 2
call fcn.1003b35d
push edi
push 0x10097e7c
mov edi, 0x10111128
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
push edi
call fcn.100060fb
add esp, 0x18
jmp 0x100422aa
cmp dword [0x103c9820], 1
jne 0x100445b4
movzx eax, word [ebx + 0xe]
push eax
push 1
call fcn.1003b35d
add ebx, 0x12
push ebx
push 0x10097e94
jmp 0x1004457a
cmp dword [0x103c9c68], 1
jne 0x10044623
movzx eax, word [ebx + 0xe]
imul eax, eax, 0x1cc
add eax, 0x333bac5
push eax
mov eax, dword [ebp - 0x810]
add eax, 0x1ff4
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
movzx eax, word [ebx + 0xe]
push eax
jne 0x10044611
push 1
call fcn.1003b35d
lea eax, [ebx + 0x12]
push eax
push 0x10097e94
mov edi, 0x10111128
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
push edi
call fcn.100060fb
add esp, 0x18
jmp 0x10044628
push 2
call fcn.1003b35d
lea eax, [ebx + 0x12]
push eax
push 0x10097ea4
jmp 0x100445fa
mov edi, 0x10111128
cmp dword [0x103c981c], 1
jne 0x100422aa
and dword [ebp - 0x834], 0
mov eax, 0x103c9830
call fcn.10001a19
cmp dword [ebp - 0x834], eax
jge 0x1004469c
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x834]
push 0x189
push dword [0x103c9850]
call dword [sym.imp.USER32.dll_SendMessageA]
lea esi, [ebx + 0x12]
push esi
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x10044694
movzx eax, word [ebx + 0xe]
push eax
push 1
call fcn.1003b35d
push esi
push 0x10097e94
jmp 0x1004457f
inc dword [ebp - 0x834]
jmp 0x1004463c
movzx eax, word [ebx + 0xe]
push eax
push 2
call fcn.1003b35d
add ebx, 0x12
push ebx
push 0x10097ea4
jmp 0x1004457f
mov eax, dword [ebx + 4]
cmp eax, 0x5c3125
jne 0x100446dd
cmp dword [ebx + 0xc], 0xd
jne 0x100422aa
cmp dword [ebx + 8], 1
jne 0x100422aa
and dword [ebx + 4], 0
jmp 0x100422aa
cmp esi, dword [ebp - 0x7f4]
jne 0x100447df
cmp ecx, 0x3d
jne 0x100447df
cmp dword [0x103c4460], 1
jne 0x100422aa
movzx eax, word [ebx + 8]
mov ecx, 0x2c0d
cmp ax, cx
je 0x10044731
inc ecx
cmp ax, cx
je 0x10044731
mov ecx, 0x2c0f
cmp ax, cx
je 0x10044731
mov ecx, 0x468d
cmp ax, cx
je 0x10044731
inc ecx
cmp ax, cx
jne 0x100422aa
cmp byte [ebx + 0xc], 1
jne 0x100422aa
cmp byte [ebx + 0xd], 0
jne 0x100422aa
call edi
sub eax, dword [0x1035ed5c]
cmp eax, 0x7d0
jb 0x100422aa
mov dl, dl
mov eax, eax
mov al, al
mov cl, cl
mov eax, dword [0x103c2e34]
xor ecx, ecx
cmp eax, 1
jne 0x100447b2
cmp dword [0x101117c4], 2
je 0x10044781
cmp dword [0x1035eef4], ecx
jne 0x100422aa
mov eax, dword [0x103c45a4]
sub eax, ecx
je 0x100447cf
dec eax
je 0x100447b6
dec eax
je 0x100447aa
dec eax
je 0x100447a2
dec eax
jne 0x100422aa
push ecx
push 0xf468e
jmp 0x100447d5
push ecx
push 0xf468d
jmp 0x100447d5
push ecx
push 0x92c0f
jmp 0x100447d5
cmp eax, ecx
jmp 0x1004477b
push ecx
push 0x92c0e
call fcn.1003b96b
pop ecx
pop ecx
call edi
mov dword [0x1035ecfc], eax
jmp 0x100422aa
push ecx
push 0x92c0d
call fcn.1003b96b
jmp 0x100431d0
cmp eax, 0xbc0066
jne 0x10044f61
xor eax, eax
lea edi, [ebp - 0x38]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea esi, [ebx + 0x21]
push 4
push esi
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
and dword [ebp - 0x85c], 0
push esi
call dword [sym.imp.MSVCR100.dll_strlen]
pop ecx
cmp dword [ebp - 0x85c], eax
jae 0x10044834
mov eax, dword [ebp - 0x85c]
cmp byte [ebx + eax + 0x21], 0xff
jne 0x10044a09
xor eax, eax
mov word [ebx + 4], ax
cmp byte [ebx + 8], 5
ja 0x10044a3b
movzx eax, word [ebx]
cmp dword [ebp - 0x7f4], eax
je 0x10044a3b
push str.rxjhshenqi.com
push esi
mov edi, dword [sym.imp.MSVCR100.dll_strstr]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10044a41
push 0x10097ec4
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x1004489d
push 0x10097ec8
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x1004489d
push 0x10097ecc
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x1004489d
push 0x10097ed0
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x100448a3
xor eax, eax
mov word [ebx + 4], ax
push 0x10097ed4
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x100448d3
push 0x10097ed8
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x100448d3
push 0x10097edc
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x100448d3
xor eax, eax
mov word [ebx + 4], ax
push 0x10097ee0
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10044901
push 0x10097ee4
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10044901
push 0x10097ee8
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x10044985
push 0x10097eec
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x1004492b
push 0x10097ef0
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x1004492b
push 0x10097ef4
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x10044985
push 0x10097ef8
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10044955
push 0x10097efc
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10044955
push 0x10097f00
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x10044985
push 0x10097f04
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x1004497f
push 0x10097334
push esi
call edi
pop ecx
pop ecx
test eax, eax
jne 0x1004497f
push 0x10097f08
push esi
call edi
pop ecx
pop ecx
test eax, eax
je 0x10044985
xor eax, eax
mov word [ebx + 4], ax
and dword [ebp - 0x81c], 0
mov eax, dword [0x103d5f58]
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x81c]
cmp ecx, eax
jge 0x10044a41
mov eax, dword [0x103d5f50]
mov eax, dword [eax + ecx*4]
cmp byte [eax], 0x56
jne 0x10044a23
xor esi, esi
mov dword [ebp - 0x888], esi
mov eax, dword [0x103d5f50]
mov ecx, dword [ebp - 0x81c]
push dword [eax + ecx*4]
call dword [sym.imp.MSVCR100.dll_strlen]
pop ecx
lea ecx, [eax - 1]
mov eax, dword [ebp - 0x888]
cmp eax, ecx
jae 0x10044a14
mov ecx, dword [0x103d5f50]
mov edx, dword [ebp - 0x81c]
mov ecx, dword [ecx + edx*4]
movsx eax, byte [ecx + eax + 1]
push eax
lea eax, [ebx + 0x21]
push eax
call dword [sym.imp.MSVCR100.dll_strchr]
pop ecx
pop ecx
test eax, eax
je 0x10044a30
inc dword [ebp - 0x888]
jmp 0x100449ba
inc dword [ebp - 0x85c]
jmp 0x1004480d
test esi, esi
jne 0x10044a30
xor eax, eax
mov word [ebx + 4], ax
jmp 0x100422aa
push eax
lea eax, [ebx + 0x21]
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x10044a18
inc dword [ebp - 0x81c]
jmp 0x1004498c
mov edi, dword [sym.imp.MSVCR100.dll_strstr]
movzx eax, word [ebx]
mov esi, dword [ebp - 0x7f4]
cmp esi, eax
je 0x10044c1f
cmp byte [ebx + 8], 4
jne 0x10044c1f
push 0x10097f0c
lea eax, [ebx + 0x21]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x10044c1f
cmp dword [0x103c982c], 1
jne 0x10044aee
push 0x14
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x103c9a74
call dword [sym.imp.mfc100.dll_Ordinal_6969]
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebx + 0xa]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x10044aee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1035ed98], eax
mov dword [ebp - 0x2c], 0
mov byte [ebp - 0x28], 0x36
xor eax, eax
lea edi, [ebp - 0x27]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x7fc], eax
mov dword [ebp - 0x804], 0x10
push dword [ebp - 0x804]
push dword [ebp - 0x7fc]
mov ecx, 0xe77dfc
mov ecx, dword [ecx]
mov eax, 0x67ca00
call eax
mov edi, 0x10111128
cmp byte [ebx + 8], 2
jne 0x10044bb1
cmp dword [0x103ca5b8], 1
jne 0x10044bb1
mov eax, dword [0x101117c4]
cmp eax, 5
je 0x10044bb1
cmp eax, 2
je 0x10044bb1
lea eax, [ebx + 0x25]
push eax
push 0x34d28e8
mov esi, dword [sym.imp.MSVCR100.dll_strcmp]
call esi
pop ecx
pop ecx
test eax, eax
je 0x10044bb1
push 0x10097618
lea eax, [ebp - 0x38]
push eax
call esi
pop ecx
pop ecx
test eax, eax
jne 0x10044bb1
and dword [ebp - 0x894], eax
mov esi, 0x333bab0
mov dword [ebp - 0x8a8], esi
cmp esi, 0x348c950
jge 0x10044bb1
cmp byte [esi], 0
je 0x10044f28
lea eax, [ebx + 0x25]
mov dword [ebp - 0x7fc], eax
push eax
lea eax, [esi + 2]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x10044f28
push dword [ebp - 0x7fc]
push 0x10097f3c
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
push edi
call fcn.100060fb
add esp, 0x10
mov ebx, esi
call fcn.1003dce8
mov ebx, dword [ebp - 0x808]
mov al, byte [ebx + 8]
cmp al, 4
jne 0x10044f39
cmp dword [0x103c7008], 1
jne 0x10044f39
movzx eax, word [ebx]
cmp dword [ebp - 0x7f4], eax
je 0x100422aa
push 0x1f4
call dword [sym.imp.mfc100.dll_Ordinal_265]
mov esi, eax
mov dword [esp], 0x10110f10
push 0x10097b54
push esi
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0xc
push 0x11
push 0
push esi
call dword [sym.imp.WINMM.dll_PlaySoundA]
push esi
call dword [sym.imp.mfc100.dll_Ordinal_1296]
lea eax, [ebx + 0x21]
push eax
add ebx, 0xa
push ebx
push 0x10097f50
jmp 0x1004457f
movzx eax, word [ebx]
cmp esi, eax
je 0x10044cb8
cmp byte [ebx + 8], 4
jne 0x10044cb8
push str.GetMap
lea eax, [ebx + 0x21]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
jne 0x10044cb8
mov edi, dword [ebp - 0x810]
fld dword [edi + 0x1f68]
call fcn.10082ff0
push eax
fld dword [edi + 0x1f60]
call fcn.10082ff0
push eax
push dword [0x2f92a08]
push 0x10097f20
lea eax, [ebp - 0x1c8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x14
mov eax, dword [0xe7c850]
mov eax, dword [eax + 0x444]
mov eax, dword [eax + 0x334]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x33c]
add ecx, 0x344
lea ebx, [ebp - 0x1c8]
call fcn.1003d1ba
mov ebx, dword [ebp - 0x808]
jmp 0x10044aee
movzx ecx, word [ebx]
cmp esi, ecx
je 0x10044aee
cmp byte [ebx + 8], 4
jne 0x10044d38
lea eax, [ebx + 0x21]
cmp byte [eax], 0x23
jne 0x10044d38
cmp byte [ebx + 0x22], 0x23
jne 0x10044d38
push 0x1009723c
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x100422aa
lea eax, [ebx + 0x23]
cmp byte [eax], 0x23
je 0x10044d04
push eax
push 0x10127414
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
jmp 0x10044aee
lea eax, [ebx + 0x24]
push eax
lea eax, [ebx + 0xa]
push eax
push 0x10097f2c
lea eax, [ebp - 0x1c8]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
lea eax, [ebp - 0x1c8]
push eax
push 0x1035efc0
call dword [sym.imp.MSVCR100.dll_strcpy]
add esp, 0x18
jmp 0x10044aee
cmp esi, ecx
je 0x10044aee
cmp byte [ebx + 8], 2
jne 0x10044aee
lea eax, [ebx + 0x21]
cmp byte [eax], 0x23
jne 0x10044aee
cmp byte [ebx + 0x22], 0x23
jne 0x10044aee
push 0x1009723c
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x100422aa
push 0x32
push eax
lea eax, [ebp - 0x1c8]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
or dword [ebp - 0x7fc], 0xffffffff
xor esi, esi
mov dword [ebp - 0x8a0], esi
lea eax, [ebx + 0x23]
push eax
call dword [sym.imp.MSVCR100.dll_strlen]
pop ecx
cmp esi, eax
jae 0x10044dc6
mov al, byte [ebx + esi + 0x23]
cmp al, 0x2d
je 0x10044db4
mov byte [ebp + esi - 0x1c8], al
inc esi
jmp 0x10044d8d
lea eax, [ebx + esi + 0x24]
push eax
call dword [sym.imp.MSVCR100.dll_atoi]
pop ecx
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x7fc], 0
jl 0x100422aa
and dword [ebp - 0x820], 0
mov esi, 0x103cfe14
mov eax, esi
call fcn.1000b955
cmp dword [ebp - 0x820], eax
jge 0x10044e9c
push dword [ebp - 0x820]
mov ecx, esi
call dword [sym.imp.mfc100.dll_Ordinal_4554]
cmp eax, 1
jne 0x10044e91
push 0x64
push 0
lea eax, [ebp - 0x25c]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x64
lea eax, [ebp - 0x25c]
push eax
push 0
push dword [ebp - 0x820]
mov ecx, esi
call dword [sym.imp.mfc100.dll_Ordinal_5176]
lea eax, [ebp - 0x25c]
push eax
call fcn.10020ca1
pop ecx
mov edi, eax
cmp edi, 0xffffffff
je 0x10044e91
mov eax, dword [edi + 0x4c]
mov edx, dword [edi + 0xb4]
mov dword [ebp - 0x804], edx
sub eax, dword [edi + 0x48]
cdq
mov ecx, 0x134
idiv ecx
mov dword [ebp - 0x810], eax
lea eax, [ebp - 0x1c8]
push eax
call dword [sym.imp.MSVCR100.dll_atoi]
pop ecx
cmp eax, dword [edi]
jne 0x10044e91
mov eax, dword [ebp - 0x804]
cmp dword [ebp - 0x810], eax
jle 0x10044e91
cmp eax, dword [ebp - 0x7fc]
jle 0x10044eaf
inc dword [ebp - 0x820]
jmp 0x10044ddf
xor eax, eax
jne 0x10044eaf
lea edi, [ebx + 0x21]
push 2
call fcn.1003b429
jmp 0x10044cfe
mov byte [0x10111128], 0
lea eax, [ebx + 0x21]
push eax
lea eax, [ebx + 0xa]
push eax
push 0x10097f34
mov edi, 0x10111128
push edi
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x10
xor esi, esi
mov dword [ebp - 0x890], esi
mov eax, dword [0x103d6150]
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x890]
cmp ecx, eax
jge 0x10044f10
push edi
mov eax, dword [0x103d6148]
push dword [eax + ecx*4]
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x10044af3
inc dword [ebp - 0x890]
jmp 0x10044eda
test esi, esi
jne 0x10044af3
push edi
mov esi, 0x103d6148
call fcn.100010da
jmp 0x10044af3
inc dword [ebp - 0x894]
add esi, 0x1cc
jmp 0x10044b54
cmp al, 0xb
jne 0x100422aa
push 0xa
add ebx, 0x21
push ebx
push 0x10111104
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
mov byte [0x1011110e], 0
jmp 0x100422aa
mov edx, 0xe51
cmp word [ebx + 5], dx
jne 0x1004509a
push 0x12c
xor edi, edi
push edi
lea eax, [ebp - 0x388]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
mov dword [ebp - 0x854], edi
mov esi, dword [sym.imp.MSVCR100.dll_strcat]
cmp dword [ebp - 0x854], 0x32
jge 0x1004504d
push 0x10
lea eax, [ebp - 0x7f4]
push eax
mov eax, dword [ebp - 0x854]
movzx eax, byte [ebx + eax]
push eax
call dword [sym.imp.MSVCR100.dll__itoa]
lea eax, [ebp - 0x7f4]
push eax
call dword [sym.imp.MSVCR100.dll_strlen]
add esp, 0x10
cmp eax, 1
jne 0x10044fe9
mov byte [ebp - 0x7f2], 0
mov al, byte [ebp - 0x7f4]
mov byte [ebp - 0x7f3], al
mov byte [ebp - 0x7f4], 0x30
mov dword [ebp - 0x83c], edi
cmp dword [ebp - 0x83c], 2
jge 0x10045021
mov eax, dword [ebp - 0x83c]
lea eax, [ebp + eax - 0x7f4]
mov cl, byte [eax]
cmp cl, 0x61
jl 0x10045019
cmp cl, 0x7a
jg 0x10045019
movsx ecx, cl
sub ecx, 0x20
mov byte [eax], cl
inc dword [ebp - 0x83c]
jmp 0x10044fef
push 0x10097e58
lea eax, [ebp - 0x388]
push eax
call esi
lea eax, [ebp - 0x7f4]
push eax
lea eax, [ebp - 0x388]
push eax
call esi
add esp, 0x10
inc dword [ebp - 0x854]
jmp 0x10044f93
lea eax, [ebp - 0x388]
push eax
call fcn.100060fb
pop ecx
cmp dword [0x103d3ac4], 1
jne 0x100422aa
mov eax, dword [ebx + 4]
cmp eax, 0xe5103
jne 0x10045075
push 4
jmp 0x10045082
cmp eax, 0xe5105
jne 0x100422aa
push 6
movzx eax, word [ebx + 0x10]
push eax
push dword [ebx + 0xc]
mov ebx, dword [ebx + 0x12]
call fcn.1003d9a8
add esp, 0xc
jmp 0x100422aa
mov edi, 0x270f
movzx edx, word [ebx]
cmp dx, di
jne 0x10045223
mov edx, 0x2213
cmp cx, dx
jne 0x10045223
mov al, al
mov dl, dl
mov ecx, ecx
mov ecx, ecx
cmp word [ebx + 8], 1
jne 0x100422aa
movzx eax, word [ebx + 0x14]
cmp eax, 1
jne 0x1004517b
movzx eax, word [ebx + 0xc]
push eax
push 0x1009b52c
mov edi, 0x10111128
push edi
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
call esi
push edi
call fcn.100060fb
add esp, 0x10
cmp dword [0x103d32cc], 1
jne 0x1004511c
movzx eax, word [ebx + 0xc]
push eax
movzx eax, word [ebx + 0xa]
push eax
push 1
movzx eax, word [ebx + 0x14]
push eax
call fcn.1003d0cd
add esp, 0x10
movzx eax, word [ebx + 0xa]
mov dword [0x103c143c], eax
movzx eax, word [ebx + 0xc]
mov dword [0x103c1438], eax
push 0x7d
push 0
lea eax, [ebp - 0x194]
push eax
call sub.MSVCR100.dll_memset
push dword [ebx + 0xa]
push 0x36f2cd8
push 0x10097f5c
lea eax, [ebp - 0x194]
push eax
call esi
add esp, 0x1c
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x271a
push dword [0x100f315c]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x100422aa
cmp eax, 2
jne 0x100422aa
cmp dword [0x103d32cc], 1
jne 0x100422aa
xor eax, eax
cmp dword [0x103c143c], eax
jne 0x10045202
cmp dword [0x103c1438], eax
jne 0x10045202
movzx ecx, word [ebx + 0xa]
mov dword [0x103c143c], ecx
movzx ecx, word [ebx + 0xc]
mov dword [0x103c1438], ecx
push 0x7d
push eax
lea eax, [ebp - 0x408]
push eax
call sub.MSVCR100.dll_memset
push dword [ebx + 0xa]
push 0x36f2cd8
push 0x10097f5c
lea eax, [ebp - 0x408]
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
add esp, 0x1c
lea eax, [ebp - 0x408]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x271a
push dword [0x100f315c]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x103d32d0]
imul eax, eax, 0x3e8
inc eax
push 0x1003dcb2
push eax
mov eax, dword [0x10113488]
add eax, 0x281c
jmp 0x1004231a
mov edx, dword [ebp - 0x7f4]
cmp esi, edx
jne 0x100422aa
cmp eax, 0x180091
je 0x100422aa
cmp esi, edx
jne 0x100422aa
cmp ecx, 0x69
jne 0x100452f9
cmp dword [0x34d2968], 0
jne 0x1004529b
cmp dword [ebx + 0xc], 0
jle 0x1004529b
cmp dword [0x103d1a34], 1
jne 0x10045272
push edx
push 0x100944e4
call fcn.100063b4
pop ecx
pop ecx
cmp dword [0x103d32c4], 1
jne 0x1004529b
mov eax, 0x3e8
push eax
push eax
cmp dword [0x103d32c8], 0
jne 0x1004528f
push 2
jmp 0x10045291
push 1
push 4
call fcn.1003d0cd
add esp, 0x10
cmp dword [0x1035eef4], 1
jne 0x100422aa
cmp dword [0x103ca5e8], 1
jne 0x100422aa
mov ebx, dword [ebx + 0xc]
test ebx, ebx
jle 0x100422aa
mov eax, dword [0x34d2968]
sub eax, ebx
cmp eax, dword [0x103ca5e4]
jl 0x100422aa
cmp dword [0x101117c4], 2
je 0x100422aa
cmp dword [0x103ca340], 1
jne 0x100452ed
push 2
jmp 0x100452ef
push 0
push 0x10097f64
jmp 0x100431cb
cmp esi, edx
jne 0x100422aa
cmp ecx, 0x6b
jne 0x100422aa
imul edx, edx, 0x1cc
mov cl, byte [ebx + 8]
mov byte [edx + 0x333bad8], cl
mov ecx, dword [ebx + 0x2c8]
mov dword [edx + 0x333bb68], ecx
cmp dword [0x103c190c], 1
jne 0x100422aa
cmp dword [0x1035eef4], 1
jne 0x100422aa
movzx eax, byte [ebx + 8]
cmp eax, dword [0x103c1910]
jne 0x100422aa
push 0x10097f7c
call fcn.100060fb
pop ecx
mov ecx, dword [0x1012ecb8]
call fcn.100739ac
call fcn.10067fd4
jmp 0x100422aa
mov dword [ebp - 4], 0xfffffffe
call fcn.10083158
ret