Function at 0x1001101f
Capabilities:
Check for time delay via gettickcount
Delete file
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100bac6c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x2988b8
call fcn.1009fc20
push esi
push edi
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push str.ID_PMDATA_PMCHECKING
call fcn.100351d6
add esp, 8
push eax
call fcn.10016970
add esp, 4
mov dword [ebp - 0x14983c], sym.PmsrwDataZ_V6.dll_class_CStruct4Ref_gr
mov dword [ebp - 0x149850], 0
jmp 0x10011089
mov eax, dword [ebp - 0x149850]
add eax, 1
mov dword [ebp - 0x149850], eax
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x16c]
mov eax, dword [ebp - 0x149850]
cmp eax, dword [edx]
jge 0x10011214
mov dword [ebp - 0x2985fc], 1
mov ecx, dword [ebp - 0x149850]
add ecx, 1
mov dword [ebp - 0x298600], ecx
lea edx, [ebp - 0x2985fc]
push edx
lea eax, [ebp - 0x280668]
push eax
lea ecx, [ebp - 0x298600]
push ecx
call sym.PmsrwDataZ_V6.dll__IGETUPDOWNZRC_12
mov dword [ebp - 0x129248], eax
mov dword [ebp - 0x28066c], 0
jmp 0x100110f7
mov edx, dword [ebp - 0x28066c]
add edx, 1
mov dword [ebp - 0x28066c], edx
mov eax, dword [ebp - 0x28066c]
cmp eax, dword [ebp - 0x129248]
jge 0x1001120f
mov dword [ebp - 0x298604], 1
lea ecx, [ebp - 0x298604]
push ecx
lea edx, [ebp - 0x1498a0]
push edx
mov eax, dword [ebp - 0x28066c]
lea ecx, [ebp + eax*4 - 0x280668]
push ecx
call sym.PmsrwDataZ_V6.dll__IGETUPDOWNZRC_12
mov dword [ebp - 0x149838], eax
mov edx, dword [ebp - 0x149850]
add edx, 1
mov dword [ebp - 0x298608], edx
lea eax, [ebp - 0x298608]
push eax
mov ecx, dword [ebp - 0x149838]
lea edx, [ebp + ecx*4 - 0x1498a0]
push edx
lea eax, [ebp - 0x1498a0]
push eax
call fcn.1001a960
add esp, 0xc
mov ecx, dword [ebp - 0x149838]
lea edx, [ebp + ecx*4 - 0x1498a0]
cmp eax, edx
je 0x1001120a
lea ecx, [ebp - 0x280670]
call fcn.10016850
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x28066c]
mov ecx, dword [ebp + eax*4 - 0x280668]
push ecx
mov edx, dword [ebp - 0x149850]
add edx, 1
push edx
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc1a0
call fcn.100351d6
add esp, 8
push eax
lea eax, [ebp - 0x280670]
push eax
call fcn.100ae2e1
add esp, 0x10
push 0
push 0x10
lea ecx, [ebp - 0x280670]
call fcn.1002ad80
push eax
call fcn.100b6526
mov dword [0x100d2f38], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x280670]
call fcn.100aeedd
jmp 0x10015bf9
jmp 0x100110e8
jmp 0x1001107a
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x164]
mov eax, dword [edx]
mov dword [ebp - 0x149834], eax
mov ecx, dword [ebp - 0x149834]
shl ecx, 4
add ecx, 4
push ecx
call fcn.100af3a0
add esp, 4
mov dword [ebp - 0x298610], eax
mov dword [ebp - 4], 1
cmp dword [ebp - 0x298610], 0
je 0x10011294
push fcn.1000e0e0
push 0x10077820
mov edx, dword [ebp - 0x298610]
mov eax, dword [ebp - 0x149834]
mov dword [edx], eax
mov ecx, dword [ebp - 0x149834]
push ecx
push 0x10
mov edx, dword [ebp - 0x298610]
add edx, 4
push edx
call fcn.1009f925
mov eax, dword [ebp - 0x298610]
add eax, 4
mov dword [ebp - 0x298798], eax
jmp 0x1001129e
mov dword [ebp - 0x298798], 0
mov ecx, dword [ebp - 0x298798]
mov dword [ebp - 0x29860c], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x29860c]
mov dword [ebp - 0x12d30c], edx
lea eax, [ebp - 0x298614]
push eax
lea ecx, [ebp - 0x298618]
push ecx
lea ecx, [ebp - 0x129460]
call fcn.10016c30
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0x14983c]
mov eax, dword [edx + 0x164]
mov ecx, dword [eax]
mov dword [ebp - 0x1498b4], ecx
mov edx, dword [ebp - 0x1498b4]
shl edx, 4
add edx, 4
push edx
call fcn.100af3a0
add esp, 4
mov dword [ebp - 0x298620], eax
mov byte [ebp - 4], 3
cmp dword [ebp - 0x298620], 0
je 0x1001135a
push fcn.10016df0
push 0x10077820
mov eax, dword [ebp - 0x298620]
mov ecx, dword [ebp - 0x1498b4]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1498b4]
push edx
push 0x10
mov eax, dword [ebp - 0x298620]
add eax, 4
push eax
call fcn.1009f925
mov ecx, dword [ebp - 0x298620]
add ecx, 4
mov dword [ebp - 0x29879c], ecx
jmp 0x10011364
mov dword [ebp - 0x29879c], 0
mov edx, dword [ebp - 0x29879c]
mov dword [ebp - 0x29861c], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x29861c]
mov dword [ebp - 0x12d308], eax
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x164]
mov eax, dword [edx]
mov dword [ebp - 0x1498b8], eax
mov ecx, dword [ebp - 0x1498b8]
shl ecx, 4
add ecx, 4
push ecx
call fcn.100af3a0
add esp, 4
mov dword [ebp - 0x298628], eax
mov byte [ebp - 4], 4
cmp dword [ebp - 0x298628], 0
je 0x100113fd
push fcn.10016df0
push 0x10077820
mov edx, dword [ebp - 0x298628]
mov eax, dword [ebp - 0x1498b8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1498b8]
push ecx
push 0x10
mov edx, dword [ebp - 0x298628]
add edx, 4
push edx
call fcn.1009f925
mov eax, dword [ebp - 0x298628]
add eax, 4
mov dword [ebp - 0x2987a0], eax
jmp 0x10011407
mov dword [ebp - 0x2987a0], 0
mov ecx, dword [ebp - 0x2987a0]
mov dword [ebp - 0x298624], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x298624]
mov dword [ebp - 0x1498bc], edx
mov eax, dword [ebp - 0x14983c]
mov ecx, dword [eax + 0x164]
mov edx, dword [ecx]
mov dword [ebp - 0x155490], edx
mov eax, dword [ebp - 0x155490]
shl eax, 4
add eax, 4
push eax
call fcn.100af3a0
add esp, 4
mov dword [ebp - 0x298630], eax
mov byte [ebp - 4], 5
cmp dword [ebp - 0x298630], 0
je 0x100114a0
push fcn.10016df0
push 0x10077820
mov ecx, dword [ebp - 0x298630]
mov edx, dword [ebp - 0x155490]
mov dword [ecx], edx
mov eax, dword [ebp - 0x155490]
push eax
push 0x10
mov ecx, dword [ebp - 0x298630]
add ecx, 4
push ecx
call fcn.1009f925
mov edx, dword [ebp - 0x298630]
add edx, 4
mov dword [ebp - 0x2987a4], edx
jmp 0x100114aa
mov dword [ebp - 0x2987a4], 0
mov eax, dword [ebp - 0x2987a4]
mov dword [ebp - 0x29862c], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x29862c]
mov dword [ebp - 0x14984c], ecx
mov edx, dword [ebp - 0x14983c]
mov eax, dword [edx + 0x164]
mov ecx, dword [eax]
mov dword [ebp - 0x1573d4], ecx
mov edx, dword [ebp - 0x1573d4]
shl edx, 4
add edx, 4
push edx
call fcn.100af3a0
add esp, 4
mov dword [ebp - 0x298638], eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x298638], 0
je 0x10011543
push fcn.10016df0
push 0x10077820
mov eax, dword [ebp - 0x298638]
mov ecx, dword [ebp - 0x1573d4]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1573d4]
push edx
push 0x10
mov eax, dword [ebp - 0x298638]
add eax, 4
push eax
call fcn.1009f925
mov ecx, dword [ebp - 0x298638]
add ecx, 4
mov dword [ebp - 0x2987a8], ecx
jmp 0x1001154d
mov dword [ebp - 0x2987a8], 0
mov edx, dword [ebp - 0x2987a8]
mov dword [ebp - 0x298634], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x298634]
mov dword [ebp - 0x149848], eax
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x164]
mov eax, dword [edx]
mov dword [ebp - 0x149840], eax
mov ecx, dword [ebp - 0x149840]
shl ecx, 4
add ecx, 4
push ecx
call fcn.100af3a0
add esp, 4
mov dword [ebp - 0x298640], eax
mov byte [ebp - 4], 7
cmp dword [ebp - 0x298640], 0
je 0x100115e6
push fcn.10016df0
push 0x10077820
mov edx, dword [ebp - 0x298640]
mov eax, dword [ebp - 0x149840]
mov dword [edx], eax
mov ecx, dword [ebp - 0x149840]
push ecx
push 0x10
mov edx, dword [ebp - 0x298640]
add edx, 4
push edx
call fcn.1009f925
mov eax, dword [ebp - 0x298640]
add eax, 4
mov dword [ebp - 0x2987ac], eax
jmp 0x100115f0
mov dword [ebp - 0x2987ac], 0
mov ecx, dword [ebp - 0x2987ac]
mov dword [ebp - 0x29863c], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x29863c]
mov dword [ebp - 0x12d304], edx
lea eax, [ebp - 0x298644]
push eax
lea ecx, [ebp - 0x129470]
call fcn.10027610
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x298648]
push ecx
lea ecx, [ebp - 0x12d300]
call fcn.10027610
mov byte [ebp - 4], 9
lea edx, [ebp - 0x29864c]
push edx
lea ecx, [ebp - 0x280618]
call fcn.10027610
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x149850], 0
jmp 0x10011669
mov eax, dword [ebp - 0x149850]
add eax, 1
mov dword [ebp - 0x149850], eax
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x16c]
mov eax, dword [ebp - 0x149850]
cmp eax, dword [edx]
jge 0x1001171d
mov dword [ebp - 0x298650], 2
mov ecx, dword [ebp - 0x149850]
add ecx, 1
mov dword [ebp - 0x298654], ecx
lea edx, [ebp - 0x298650]
push edx
lea eax, [ebp - 0x280668]
push eax
lea ecx, [ebp - 0x298654]
push ecx
call sym.PmsrwDataZ_V6.dll__IGETUPDOWNZRC_12
mov dword [ebp - 0x129248], eax
cmp dword [ebp - 0x129248], 0
jne 0x10011718
mov edx, dword [ebp - 0x14983c]
mov eax, dword [edx + 0x184]
mov ecx, dword [ebp - 0x149850]
fld dword [eax + ecx*4]
mov edx, dword [ebp - 0x14983c]
mov eax, dword [edx + 0x264]
fld dword [eax]
fadd qword [0x100bd608]
fcompp
fnstsw ax
test ah, 1
je 0x10011718
mov ecx, dword [ebp - 0x149850]
add ecx, 1
mov dword [ebp - 0x298658], ecx
lea edx, [ebp - 0x298658]
push edx
lea ecx, [ebp - 0x129470]
call fcn.10016bd0
jmp 0x1001165a
mov dword [ebp - 0x149850], 0
jmp 0x10011738
mov eax, dword [ebp - 0x149850]
add eax, 1
mov dword [ebp - 0x149850], eax
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x16c]
mov eax, dword [edx]
sub eax, 1
cmp dword [ebp - 0x149850], eax
jge 0x10011813
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x184]
mov eax, dword [ebp - 0x14983c]
mov ecx, dword [eax + 0x184]
mov eax, dword [ebp - 0x149850]
mov esi, dword [ebp - 0x149850]
fld dword [edx + eax*4]
fcomp dword [ecx + esi*4 + 4]
fnstsw ax
test ah, 0x40
je 0x1001180e
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x174]
mov eax, dword [ebp - 0x149850]
movsx ecx, word [edx + eax*2]
mov edx, dword [ebp - 0x14983c]
mov eax, dword [edx + 0x174]
mov edx, dword [ebp - 0x149850]
movsx eax, word [eax + edx*2 + 2]
cmp ecx, eax
jne 0x1001180e
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x170]
mov eax, dword [ebp - 0x149850]
movsx ecx, word [edx + eax*2]
mov edx, dword [ebp - 0x14983c]
mov eax, dword [edx + 0x170]
mov edx, dword [ebp - 0x149850]
movsx eax, word [eax + edx*2 + 2]
cmp ecx, eax
jne 0x1001180e
mov ecx, dword [ebp - 0x149850]
add ecx, 1
mov dword [ebp - 0x29865c], ecx
lea edx, [ebp - 0x29865c]
push edx
lea ecx, [ebp - 0x12d300]
call fcn.10016bd0
jmp 0x10011729
mov eax, dword [ebp - 0x14983c]
mov ecx, dword [eax + 0x18c]
mov edx, dword [ecx]
mov dword [ebp - 0x129244], edx
mov dword [ebp - 0x149850], 0
jmp 0x10011842
mov eax, dword [ebp - 0x149850]
add eax, 1
mov dword [ebp - 0x149850], eax
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x164]
mov eax, dword [ebp - 0x149850]
cmp eax, dword [edx]
jge 0x10011c1b
mov ecx, dword [ebp - 0x149850]
add ecx, 1
push ecx
call sym.PmsrwDataZ_V6.dll_lwlREDLYR_C
add esp, 4
mov dword [ebp - 0x28068c], 1
mov dword [ebp - 0x280678], 0xc2c80000
mov dword [ebp - 0x280674], 0xffffffff
mov dword [ebp - 0x280680], 0
jmp 0x100118a7
mov edx, dword [ebp - 0x280680]
add edx, 1
mov dword [ebp - 0x280680], edx
mov eax, dword [ebp - 0x14983c]
mov ecx, dword [eax + 0x16c]
mov edx, dword [ebp - 0x280680]
cmp edx, dword [ecx]
jge 0x100119ce
mov eax, dword [ebp - 0x280680]
mov ecx, dword [0x101aa750]
movsx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x149850]
add eax, 1
cmp edx, eax
je 0x100118e0
jmp 0x10011898
cmp dword [ebp - 0x28068c], 1
jne 0x10011940
mov ecx, dword [ebp - 0x280680]
mov edx, dword [0x101aa764]
fld dword [edx + ecx*4]
mov eax, dword [ebp - 0x280680]
mov ecx, dword [0x101aa754]
movsx edx, word [ecx + eax*2]
mov dword [ebp - 0x2987b0], edx
fild dword [ebp - 0x2987b0]
fmul qword [0x100bd600]
faddp st(1)
fstp dword [ebp - 0x280678]
mov eax, dword [ebp - 0x280680]
add eax, 1
mov dword [ebp - 0x280674], eax
mov dword [ebp - 0x28068c], 0
jmp 0x100119c9
mov ecx, dword [ebp - 0x280680]
mov edx, dword [0x101aa764]
fld dword [edx + ecx*4]
mov eax, dword [ebp - 0x280680]
mov ecx, dword [0x101aa754]
movsx edx, word [ecx + eax*2]
mov dword [ebp - 0x2987b4], edx
fild dword [ebp - 0x2987b4]
fmul qword [0x100bd600]
faddp st(1)
fld dword [ebp - 0x280678]
fcompp
fnstsw ax
test ah, 0x41
jne 0x100119c9
mov eax, dword [ebp - 0x280680]
mov ecx, dword [0x101aa764]
fld dword [ecx + eax*4]
mov edx, dword [ebp - 0x280680]
mov eax, dword [0x101aa754]
movsx ecx, word [eax + edx*2]
mov dword [ebp - 0x2987b8], ecx
fild dword [ebp - 0x2987b8]
fmul qword [0x100bd600]
faddp st(1)
fstp dword [ebp - 0x280678]
mov edx, dword [ebp - 0x280680]
add edx, 1
mov dword [ebp - 0x280674], edx
jmp 0x10011898
mov dword [ebp - 0x280688], 0
lea eax, [ebp - 0x280688]
push eax
mov ecx, dword [ebp - 0x280674]
push ecx
call fcn.10016740
add esp, 8
cmp dword [ebp - 0x280674], 0xffffffff
je 0x10011ab4
mov edx, dword [0x101aa80c]
mov eax, dword [ebp - 0x280688]
cmp eax, dword [edx]
jl 0x10011ab4
lea ecx, [ebp - 0x280690]
push ecx
call sym.PmsrwDataZ_V6.dll_lwlGetRoomCnt
add esp, 4
mov dword [ebp - 0x280680], 0
jmp 0x10011a39
mov edx, dword [ebp - 0x280680]
add edx, 1
mov dword [ebp - 0x280680], edx
mov eax, dword [ebp - 0x280680]
cmp eax, dword [ebp - 0x280690]
jge 0x10011ab4
lea ecx, [ebp - 0x280698]
push ecx
mov edx, dword [ebp - 0x280680]
add edx, 1
push edx
call sym.PmsrwDataZ_V6.dll_lwlGetRoomRF
add esp, 8
fld dword [ebp - 0x280698]
fcomp qword [0x100bd600]
fnstsw ax
test ah, 0x41
jne 0x10011aaf
lea eax, [ebp - 0x280694]
push eax
mov ecx, dword [ebp - 0x280680]
add ecx, 1
push ecx
call sym.PmsrwDataZ_V6.dll_lwlGetRoomCCXX
add esp, 8
mov edx, dword [ebp - 0x149850]
add edx, 1
mov dword [ebp - 0x298660], edx
lea eax, [ebp - 0x298660]
push eax
lea ecx, [ebp - 0x280618]
call fcn.10016bd0
jmp 0x10011ab4
jmp 0x10011a2a
mov dword [ebp - 0x298664], 0
lea ecx, [ebp - 0x298664]
push ecx
mov edx, dword [ebp - 0x14983c]
mov eax, dword [edx + 0x2a0]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x149850]
shl edx, 4
mov ecx, dword [ebp - 0x12d30c]
add ecx, edx
call fcn.10016b20
mov dword [ebp - 0x280680], 0
jmp 0x10011b05
mov eax, dword [ebp - 0x280680]
add eax, 1
mov dword [ebp - 0x280680], eax
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x2a0]
mov eax, dword [ebp - 0x280680]
cmp eax, dword [edx]
jge 0x10011b4d
mov ecx, dword [ebp - 0x280680]
push ecx
mov edx, dword [ebp - 0x149850]
shl edx, 4
mov ecx, dword [ebp - 0x12d30c]
add ecx, edx
call fcn.1000e0c0
push eax
mov eax, dword [ebp - 0x280680]
add eax, 1
push eax
call sym.PmsrwDataZ_V6.dll_lwlJDIsSupport
add esp, 8
jmp 0x10011af6
mov dword [ebp - 0x280680], 0
jmp 0x10011b68
mov ecx, dword [ebp - 0x280680]
add ecx, 1
mov dword [ebp - 0x280680], ecx
mov edx, dword [ebp - 0x14983c]
mov eax, dword [edx + 0xd0]
mov ecx, dword [ebp - 0x280680]
cmp ecx, dword [eax]
jge 0x10011c16
lea edx, [ebp - 0x280684]
push edx
lea eax, [ebp - 0x28067c]
push eax
mov ecx, dword [ebp - 0x280680]
add ecx, 1
push ecx
push 0xc
call sym.PmsrwDataZ_V6.dll_lwlGETGJHH
add esp, 0x10
cmp dword [ebp - 0x28067c], 0
jne 0x10011bb6
cmp dword [ebp - 0x280684], 0
je 0x10011c11
mov edx, dword [ebp - 0x280680]
imul edx, edx, 0x14
mov eax, dword [ebp - 0x14983c]
mov ecx, dword [eax + 0xd4]
lea edx, [ecx + edx + 0x10]
push edx
lea ecx, [ebp - 0x129460]
call fcn.10016c60
mov ecx, dword [ebp - 0x28067c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x280680]
imul edx, edx, 0x14
mov eax, dword [ebp - 0x14983c]
mov ecx, dword [eax + 0xd4]
lea edx, [ecx + edx + 0x10]
push edx
lea ecx, [ebp - 0x129460]
call fcn.10016c60
mov ecx, dword [ebp - 0x280684]
mov dword [eax + 4], ecx
jmp 0x10011b59
jmp 0x10011833
mov edx, dword [ebp - 0x14983c]
mov eax, dword [edx + 0x18c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x129244]
je 0x10011c40
mov edx, dword [ebp - 0x129244]
push edx
call sym.PmsrwDataZ_V6.dll_lwlREDLYR_C
add esp, 4
lea ecx, [ebp - 0x280608]
call fcn.1001acc2
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x129240]
call fcn.1001acc2
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x149850], 0
jmp 0x10011c79
mov eax, dword [ebp - 0x149850]
add eax, 1
mov dword [ebp - 0x149850], eax
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x16c]
mov eax, dword [ebp - 0x149850]
cmp eax, dword [edx]
jge 0x10014768
mov ecx, dword [ebp - 0x149850]
add ecx, 1
mov dword [ebp - 0x28c240], ecx
mov edx, dword [ebp - 0x14983c]
mov eax, dword [edx + 0x170]
mov ecx, dword [ebp - 0x149850]
movsx edx, word [eax + ecx*2]
mov dword [ebp - 0x28c23c], edx
push 0
mov eax, dword [ebp - 0x28c23c]
push eax
lea ecx, [ebp - 0x280608]
call fcn.1001ae25
lea ecx, [ebp - 0x149830]
push ecx
lea edx, [ebp - 0x28c240]
push edx
call sym.PmsrwDataZ_V6.dll__GETBEAMUPDW_8
lea eax, [ebp - 0x298668]
push eax
lea ecx, [ebp - 0x2806a8]
call fcn.10027610
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x298670]
call fcn.100169e0
mov dword [ebp - 0x2987bc], eax
mov ecx, dword [ebp - 0x2987bc]
mov dword [ebp - 0x2987c0], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x2987c0]
push edx
mov eax, dword [ebp - 0x1a36c4]
push eax
lea ecx, [ebp - 0x2806a8]
call fcn.10016ee0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x298670]
call fcn.10016a10
mov dword [ebp - 0x298674], 2
lea ecx, [ebp - 0x298674]
push ecx
lea edx, [ebp - 0x280668]
push edx
lea eax, [ebp - 0x28c240]
push eax
call sym.PmsrwDataZ_V6.dll__IGETUPDOWNZRC_12
mov dword [ebp - 0x129248], eax
mov dword [ebp - 0x298678], 2
mov dword [ebp - 0x29867c], 0xb
lea ecx, [ebp - 0x298678]
push ecx
lea edx, [ebp - 0x13212c]
push edx
lea eax, [ebp - 0x28c240]
push eax
lea ecx, [ebp - 0x29867c]
push ecx
call sym.PmsrwDataZ_V6.dll__GETGJUPDWFLR_LAY_16
mov dword [ebp - 0x298680], 2
mov dword [ebp - 0x298684], 1
lea edx, [ebp - 0x298680]
push edx
lea eax, [ebp - 0x12d2f0]
push eax
lea ecx, [ebp - 0x28c240]
push ecx
lea edx, [ebp - 0x298684]
push edx
call sym.PmsrwDataZ_V6.dll__GETGJUPDWFLR_LAY_16
mov dword [ebp - 0x298688], 2
mov dword [ebp - 0x29868c], 0xd
lea eax, [ebp - 0x298688]
push eax
lea ecx, [ebp - 0x1573d0]
push ecx
lea edx, [ebp - 0x28c240]
push edx
lea eax, [ebp - 0x29868c]
push eax
call sym.PmsrwDataZ_V6.dll__GETGJUPDWFLR_LAY_16
mov ecx, dword [ebp - 0x280604]
imul ecx, ecx, 0x11
shl ecx, 2
push ecx
call fcn.100af3a0
add esp, 4
mov dword [ebp - 0x298690], eax
mov edx, dword [ebp - 0x298690]
mov dword [ebp - 0x2806b4], edx
mov eax, dword [ebp - 0x280604]
imul eax, eax, 0x11
shl eax, 2
push eax
push 0
mov ecx, dword [ebp - 0x2806b4]
push ecx
call fcn.1009ecd0
add esp, 0xc
mov dword [ebp - 0x2806b0], 0
jmp 0x10011e6d
mov edx, dword [ebp - 0x2806b0]
add edx, 1
mov dword [ebp - 0x2806b0], edx
mov eax, dword [ebp - 0x2806b0]
cmp eax, dword [ebp - 0x168d40]
jge 0x10011ff4
mov ecx, dword [ebp - 0x2806b0]
imul ecx, ecx, 0x24
movsx edx, word [ebp + ecx - 0x168d34]
mov eax, dword [ebp - 0x2806b0]
imul eax, eax, 0x24
movsx ecx, word [ebp + eax - 0x168d2c]
cmp edx, ecx
jl 0x10011f37
mov edx, dword [ebp - 0x2806b0]
add edx, 1
mov eax, dword [ebp - 0x2806b0]
imul eax, eax, 0x24
movsx ecx, word [ebp + eax - 0x168d3a]
sub ecx, 1
imul ecx, ecx, 0x44
mov eax, dword [ebp - 0x2806b4]
add eax, ecx
mov ecx, dword [ebp - 0x2806b0]
imul ecx, ecx, 0x24
movsx ecx, word [ebp + ecx - 0x168d3a]
sub ecx, 1
imul ecx, ecx, 0x44
mov esi, dword [ebp - 0x2806b4]
mov ecx, dword [esi + ecx]
add ecx, 1
mov esi, dword [ebp - 0x2806b0]
imul esi, esi, 0x24
movsx esi, word [ebp + esi - 0x168d3a]
sub esi, 1
imul esi, esi, 0x44
mov edi, dword [ebp - 0x2806b4]
mov dword [edi + esi], ecx
mov ecx, dword [ebp - 0x2806b0]
imul ecx, ecx, 0x24
movsx ecx, word [ebp + ecx - 0x168d3a]
sub ecx, 1
imul ecx, ecx, 0x44
mov esi, dword [ebp - 0x2806b4]
mov ecx, dword [esi + ecx]
mov dword [eax + ecx*4], edx
mov edx, dword [ebp - 0x2806b0]
imul edx, edx, 0x24
movsx eax, word [ebp + edx - 0x168d34]
mov ecx, dword [ebp - 0x2806b0]
imul ecx, ecx, 0x24
movsx edx, word [ebp + ecx - 0x168d2c]
cmp eax, edx
jg 0x10011fef
mov eax, dword [ebp - 0x2806b0]
add eax, 1
mov ecx, dword [ebp - 0x2806b0]
imul ecx, ecx, 0x24
movsx edx, word [ebp + ecx - 0x168d32]
sub edx, 1
imul edx, edx, 0x44
mov ecx, dword [ebp - 0x2806b4]
add ecx, edx
mov edx, dword [ebp - 0x2806b0]
imul edx, edx, 0x24
movsx edx, word [ebp + edx - 0x168d32]
sub edx, 1
imul edx, edx, 0x44
mov esi, dword [ebp - 0x2806b4]
mov edx, dword [esi + edx]
add edx, 1
mov esi, dword [ebp - 0x2806b0]
imul esi, esi, 0x24
movsx esi, word [ebp + esi - 0x168d32]
sub esi, 1
imul esi, esi, 0x44
mov edi, dword [ebp - 0x2806b4]
mov dword [edi + esi], edx
mov edx, dword [ebp - 0x2806b0]
imul edx, edx, 0x24
movsx edx, word [ebp + edx - 0x168d32]
sub edx, 1
imul edx, edx, 0x44
mov esi, dword [ebp - 0x2806b4]
mov edx, dword [esi + edx]
mov dword [ecx + edx*4], eax
jmp 0x10011e5e
cmp dword [ebp - 0x129248], 0
jne 0x10012548
mov dword [ebp - 0x297dc8], 0
jmp 0x1001201c
mov eax, dword [ebp - 0x297dc8]
add eax, 1
mov dword [ebp - 0x297dc8], eax
mov ecx, dword [ebp - 0x297dc8]
cmp ecx, dword [ebp - 0x1d058c]
jge 0x1001219b
mov edx, dword [ebp - 0x297dc8]
imul edx, edx, 0x18
movsx eax, word [ebp + edx - 0x1d0586]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x28c23c]
sub ecx, 1
shl ecx, 4
mov edx, dword [ebp - 0x12d30c]
add ecx, edx
call fcn.1000e0c0
cmp dword [eax], 0
jg 0x10012196
mov eax, dword [ebp - 0x297dc8]
imul eax, eax, 0x18
mov ecx, dword [ebp + eax - 0x1d0574]
push ecx
mov edx, dword [ebp - 0x297dc8]
add edx, 1
push edx
lea ecx, [ebp - 0x29869c]
call fcn.100169b0
mov dword [ebp - 0x2987c4], eax
mov eax, dword [ebp - 0x2987c4]
mov dword [ebp - 0x2987c8], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x2987c8]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x12d308]
add ecx, edx
call fcn.10026ee0
push eax
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x12d308]
add ecx, eax
call fcn.100515a0
push eax
call fcn.1001a990
add esp, 0xc
mov esi, eax
mov ecx, dword [ebp - 0x28c23c]
sub ecx, 1
shl ecx, 4
mov edx, dword [ebp - 0x12d308]
add ecx, edx
call fcn.10026ee0
xor ecx, ecx
cmp esi, eax
sete cl
mov byte [ebp - 0x298694], cl
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x29869c]
call fcn.1000dd40
mov edx, dword [ebp - 0x298694]
and edx, 0xff
test edx, edx
je 0x10012196
mov eax, dword [ebp - 0x297dc8]
imul eax, eax, 0x18
mov ecx, dword [ebp + eax - 0x1d0574]
push ecx
mov edx, dword [ebp - 0x297dc8]
add edx, 1
push edx
lea ecx, [ebp - 0x2986a4]
call fcn.100169b0
mov dword [ebp - 0x2987cc], eax
mov eax, dword [ebp - 0x2987cc]
mov dword [ebp - 0x2987d0], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x2987d0]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x12d308]
add ecx, edx
call fcn.10016e50
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2986a4]
call fcn.1000dd40
jmp 0x1001200d
mov dword [ebp - 0x297dcc], 0
jmp 0x100121b6
mov eax, dword [ebp - 0x297dcc]
add eax, 1
mov dword [ebp - 0x297dcc], eax
mov ecx, dword [ebp - 0x297dcc]
cmp ecx, dword [ebp - 0x1b30c8]
jge 0x10012371
mov edx, dword [ebp - 0x297dcc]
add edx, 1
push edx
lea ecx, [ebp - 0x280608]
call fcn.100168b0
sub eax, 1
push eax
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x12d30c]
add ecx, eax
call fcn.1000e0c0
cmp dword [eax], 0
jg 0x10012236
mov ecx, dword [ebp - 0x297dcc]
add ecx, 1
push ecx
lea ecx, [ebp - 0x280608]
call fcn.100168e0
sub eax, 1
push eax
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x12d30c]
add ecx, edx
call fcn.1000e0c0
cmp dword [eax], 0
jle 0x1001223b
jmp 0x100121a7
mov eax, dword [ebp - 0x297dcc]
shl eax, 4
mov ecx, dword [ebp + eax - 0x1b30b8]
push ecx
mov edx, dword [ebp - 0x297dcc]
add edx, 1
push edx
lea ecx, [ebp - 0x2986b0]
call fcn.100169b0
mov dword [ebp - 0x2987d4], eax
mov eax, dword [ebp - 0x2987d4]
mov dword [ebp - 0x2987d8], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x2987d8]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x14984c]
add ecx, edx
call fcn.10026ee0
push eax
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x14984c]
add ecx, eax
call fcn.100515a0
push eax
call fcn.1001a990
add esp, 0xc
mov esi, eax
mov ecx, dword [ebp - 0x28c23c]
sub ecx, 1
shl ecx, 4
mov edx, dword [ebp - 0x14984c]
add ecx, edx
call fcn.10026ee0
xor ecx, ecx
cmp esi, eax
sete cl
mov byte [ebp - 0x2986a8], cl
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2986b0]
call fcn.1000dd40
mov edx, dword [ebp - 0x2986a8]
and edx, 0xff
test edx, edx
je 0x1001236c
mov eax, dword [ebp - 0x297dcc]
shl eax, 4
mov ecx, dword [ebp + eax - 0x1b30b8]
push ecx
mov edx, dword [ebp - 0x297dcc]
add edx, 1
push edx
lea ecx, [ebp - 0x2986b8]
call fcn.100169b0
mov dword [ebp - 0x2987dc], eax
mov eax, dword [ebp - 0x2987dc]
mov dword [ebp - 0x2987e0], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x2987e0]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x14984c]
add ecx, edx
call fcn.10016e50
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2986b8]
call fcn.1000dd40
jmp 0x100121a7
mov dword [ebp - 0x297dd0], 0
jmp 0x1001238c
mov eax, dword [ebp - 0x297dd0]
add eax, 1
mov dword [ebp - 0x297dd0], eax
mov ecx, dword [ebp - 0x297dd0]
cmp ecx, dword [ebp - 0x168d40]
jge 0x10012548
mov edx, dword [ebp - 0x297dd0]
imul edx, edx, 0x24
movsx eax, word [ebp + edx - 0x168d3a]
sub eax, 1
mov dword [ebp - 0x297dd8], eax
mov ecx, dword [ebp - 0x297dd0]
imul ecx, ecx, 0x24
movsx edx, word [ebp + ecx - 0x168d32]
sub edx, 1
mov dword [ebp - 0x297dd4], edx
mov eax, dword [ebp - 0x297dd8]
mov ecx, dword [ebp - 0x1573f4]
movsx edx, word [ecx + eax*2]
test edx, edx
jg 0x100123fa
mov eax, dword [ebp - 0x297dd4]
mov ecx, dword [ebp - 0x1573f4]
movsx edx, word [ecx + eax*2]
test edx, edx
jle 0x100123fc
jmp 0x1001237d
mov eax, dword [ebp - 0x297dd8]
imul eax, eax, 0x22
mov ecx, dword [ebp - 0x1573fc]
add ecx, eax
test ecx, ecx
ja 0x10012426
mov edx, dword [ebp - 0x297dd4]
imul edx, edx, 0x22
mov eax, dword [ebp - 0x1573fc]
add eax, edx
test eax, eax
jbe 0x1001242b
jmp 0x1001237d
mov ecx, dword [ebp - 0x297dd8]
imul ecx, ecx, 0x22
mov edx, dword [ebp - 0x1573f8]
add edx, ecx
test edx, edx
ja 0x10012455
mov eax, dword [ebp - 0x297dd4]
imul eax, eax, 0x22
mov ecx, dword [ebp - 0x1573f8]
add ecx, eax
test ecx, ecx
jbe 0x1001245a
jmp 0x1001237d
mov edx, dword [ebp - 0x297dd8]
push edx
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x12d30c]
add ecx, eax
call fcn.1000e0c0
cmp dword [eax], 0
jg 0x100124a4
mov ecx, dword [ebp - 0x297dd4]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x12d30c]
add ecx, edx
call fcn.1000e0c0
cmp dword [eax], 0
jle 0x100124a9
jmp 0x1001237d
mov eax, dword [ebp - 0x297dd8]
imul eax, eax, 0x44
mov ecx, dword [ebp - 0x2806b4]
cmp dword [ecx + eax], 1
jg 0x100124d3
mov edx, dword [ebp - 0x297dd4]
imul edx, edx, 0x44
mov eax, dword [ebp - 0x2806b4]
cmp dword [eax + edx], 1
jle 0x100124d8
jmp 0x1001237d
mov ecx, dword [ebp - 0x297dd0]
imul ecx, ecx, 0x24
mov edx, dword [ebp + ecx - 0x168d1c]
push edx
mov eax, dword [ebp - 0x297dd0]
add eax, 1
push eax
lea ecx, [ebp - 0x2986c0]
call fcn.100169b0
mov dword [ebp - 0x2987e4], eax
mov ecx, dword [ebp - 0x2987e4]
mov dword [ebp - 0x2987e8], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x2987e8]
push edx
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x149848]
add ecx, eax
call fcn.10016e50
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2986c0]
call fcn.1000dd40
jmp 0x1001237d
mov dword [ebp - 0x28c238], 0
jmp 0x10012563
mov ecx, dword [ebp - 0x28c238]
add ecx, 1
mov dword [ebp - 0x28c238], ecx
mov edx, dword [ebp - 0x28c238]
cmp edx, dword [ebp - 0x129248]
jge 0x100142dc
mov eax, dword [ebp - 0x28c238]
mov ecx, dword [ebp + eax*4 - 0x280668]
mov dword [ebp - 0x297df0], ecx
mov edx, dword [ebp - 0x14983c]
mov eax, dword [edx + 0x170]
mov ecx, dword [ebp - 0x297df0]
movsx edx, word [eax + ecx*2 - 2]
mov dword [ebp - 0x297dec], edx
push 0
mov eax, dword [ebp - 0x297dec]
push eax
lea ecx, [ebp - 0x129240]
call fcn.1001ae25
mov ecx, dword [ebp - 0x12923c]
imul ecx, ecx, 0x11
shl ecx, 2
push ecx
call fcn.100af3a0
add esp, 4
mov dword [ebp - 0x2986c4], eax
mov edx, dword [ebp - 0x2986c4]
mov dword [ebp - 0x297e08], edx
mov eax, dword [ebp - 0x12923c]
imul eax, eax, 0x11
shl eax, 2
push eax
push 0
mov ecx, dword [ebp - 0x297e08]
push ecx
call fcn.1009ecd0
add esp, 0xc
mov dword [ebp - 0x297de4], 0
jmp 0x10012619
mov edx, dword [ebp - 0x297de4]
add edx, 1
mov dword [ebp - 0x297de4], edx
mov eax, dword [ebp - 0x297de4]
cmp eax, dword [ebp - 0x11978]
jge 0x100127a0
mov ecx, dword [ebp - 0x297de4]
imul ecx, ecx, 0x24
movsx edx, word [ebp + ecx - 0x1196c]
mov eax, dword [ebp - 0x297de4]
imul eax, eax, 0x24
movsx ecx, word [ebp + eax - 0x11964]
cmp edx, ecx
jl 0x100126e3
mov edx, dword [ebp - 0x297de4]
add edx, 1
mov eax, dword [ebp - 0x297de4]
imul eax, eax, 0x24
movsx ecx, word [ebp + eax - 0x11972]
sub ecx, 1
imul ecx, ecx, 0x44
mov eax, dword [ebp - 0x297e08]
add eax, ecx
mov ecx, dword [ebp - 0x297de4]
imul ecx, ecx, 0x24
movsx ecx, word [ebp + ecx - 0x11972]
sub ecx, 1
imul ecx, ecx, 0x44
mov esi, dword [ebp - 0x297e08]
mov ecx, dword [esi + ecx]
add ecx, 1
mov esi, dword [ebp - 0x297de4]
imul esi, esi, 0x24
movsx esi, word [ebp + esi - 0x11972]
sub esi, 1
imul esi, esi, 0x44
mov edi, dword [ebp - 0x297e08]
mov dword [edi + esi], ecx
mov ecx, dword [ebp - 0x297de4]
imul ecx, ecx, 0x24
movsx ecx, word [ebp + ecx - 0x11972]
sub ecx, 1
imul ecx, ecx, 0x44
mov esi, dword [ebp - 0x297e08]
mov ecx, dword [esi + ecx]
mov dword [eax + ecx*4], edx
mov edx, dword [ebp - 0x297de4]
imul edx, edx, 0x24
movsx eax, word [ebp + edx - 0x1196c]
mov ecx, dword [ebp - 0x297de4]
imul ecx, ecx, 0x24
movsx edx, word [ebp + ecx - 0x11964]
cmp eax, edx
jg 0x1001279b
mov eax, dword [ebp - 0x297de4]
add eax, 1
mov ecx, dword [ebp - 0x297de4]
imul ecx, ecx, 0x24
movsx edx, word [ebp + ecx - 0x1196a]
sub edx, 1
imul edx, edx, 0x44
mov ecx, dword [ebp - 0x297e08]
add ecx, edx
mov edx, dword [ebp - 0x297de4]
imul edx, edx, 0x24
movsx edx, word [ebp + edx - 0x1196a]
sub edx, 1
imul edx, edx, 0x44
mov esi, dword [ebp - 0x297e08]
mov edx, dword [esi + edx]
add edx, 1
mov esi, dword [ebp - 0x297de4]
imul esi, esi, 0x24
movsx esi, word [ebp + esi - 0x1196a]
sub esi, 1
imul esi, esi, 0x44
mov edi, dword [ebp - 0x297e08]
mov dword [edi + esi], edx
mov edx, dword [ebp - 0x297de4]
imul edx, edx, 0x24
movsx edx, word [ebp + edx - 0x1196a]
sub edx, 1
imul edx, edx, 0x44
mov esi, dword [ebp - 0x297e08]
mov edx, dword [esi + edx]
mov dword [ecx + edx*4], eax
jmp 0x1001260a
mov eax, dword [ebp - 0x28c23c]
xor ecx, ecx
cmp eax, dword [ebp - 0x297dec]
sete cl
mov dword [ebp - 0x297e04], ecx
lea edx, [ebp - 0x15548c]
push edx
lea eax, [ebp - 0x297df0]
push eax
lea ecx, [ebp - 0x28c240]
push ecx
call sym.PmsrwDataZ_V6.dll__IGETADJNODEMAP_12
mov dword [ebp - 0x297de8], 0
jmp 0x100127ec
mov edx, dword [ebp - 0x297de8]
add edx, 1
mov dword [ebp - 0x297de8], edx
mov eax, dword [ebp - 0x297de8]
cmp eax, dword [ebp - 0x1d058c]
jge 0x10012fde
mov ecx, dword [ebp - 0x297de8]
imul ecx, ecx, 0x18
movsx edx, word [ebp + ecx - 0x1d0586]
sub edx, 1
push edx
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x12d30c]
add ecx, eax
call fcn.1000e0c0
cmp dword [eax], 0
jle 0x10012833
jmp 0x100127dd
mov ecx, dword [ebp - 0x297de8]
mov edx, dword [ebp + ecx*4 - 0x13212c]
push edx
call fcn.1009fc10
add esp, 4
cmp eax, dword [ebp - 0x297df0]
je 0x10012870
mov eax, dword [ebp - 0x297de8]
mov ecx, dword [ebp + eax*4 - 0x13212c]
push ecx
call fcn.1009fc10
add esp, 4
test eax, eax
je 0x10012870
jmp 0x100127dd
mov edx, dword [ebp - 0x297de8]
push edx
mov eax, dword [ebp - 0x149850]
push eax
mov ecx, 0x100d2e68
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016f50
mov dword [ebp - 0x297e10], eax
cmp dword [ebp - 0x297e04], 0
je 0x100128af
mov ecx, dword [ebp - 0x297e10]
cmp dword [ecx + 4], 0
jne 0x100128af
jmp 0x100127dd
mov edx, dword [ebp - 0x297de8]
imul edx, edx, 0x18
movsx eax, word [ebp + edx - 0x1d0586]
mov dword [ebp - 0x297e14], eax
mov ecx, dword [ebp - 0x297e14]
mov edx, dword [ebp + ecx*4 - 0x155490]
mov dword [ebp - 0x297e0c], edx
cmp dword [ebp - 0x297e0c], 0
je 0x10012ea8
mov eax, dword [ebp - 0x297e0c]
mov ecx, dword [ebp - 0x2c]
movsx edx, word [ecx + eax*2 - 2]
mov dword [ebp - 0x297e24], edx
cmp dword [ebp - 0x297e24], 0
je 0x10012b17
mov eax, dword [ebp - 0x297e24]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x297df0]
sub ecx, 1
push ecx
mov ecx, 0x100d2e68
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016f50
mov dword [ebp - 0x297e28], eax
mov edx, dword [ebp - 0x297e10]
fld dword [edx + 0x14]
fadd qword [0x100bd608]
mov eax, dword [ebp - 0x297e28]
fld dword [eax + 0x10]
fcompp
fnstsw ax
test ah, 0x41
jne 0x10012a8d
mov ecx, dword [ebp - 0x297de8]
imul ecx, ecx, 0x18
mov edx, dword [ebp + ecx - 0x1d0574]
push edx
mov eax, dword [ebp - 0x297de8]
add eax, 1
push eax
lea ecx, [ebp - 0x2986d0]
call fcn.100169b0
mov dword [ebp - 0x2987ec], eax
mov ecx, dword [ebp - 0x2987ec]
mov dword [ebp - 0x2987f0], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x2987f0]
push edx
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x1498bc]
add ecx, eax
call fcn.10026ee0
push eax
mov ecx, dword [ebp - 0x28c23c]
sub ecx, 1
shl ecx, 4
mov edx, dword [ebp - 0x1498bc]
add ecx, edx
call fcn.100515a0
push eax
call fcn.1001a990
add esp, 0xc
mov esi, eax
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x1498bc]
add ecx, eax
call fcn.10026ee0
xor ecx, ecx
cmp esi, eax
sete cl
mov byte [ebp - 0x2986c8], cl
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2986d0]
call fcn.1000dd40
mov edx, dword [ebp - 0x2986c8]
and edx, 0xff
test edx, edx
je 0x10012a88
mov eax, dword [ebp - 0x297de8]
imul eax, eax, 0x18
mov ecx, dword [ebp + eax - 0x1d0574]
push ecx
mov edx, dword [ebp - 0x297de8]
add edx, 1
push edx
lea ecx, [ebp - 0x2986d8]
call fcn.100169b0
mov dword [ebp - 0x2987f4], eax
mov eax, dword [ebp - 0x2987f4]
mov dword [ebp - 0x2987f8], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x2987f8]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x1498bc]
add ecx, edx
call fcn.10016e50
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2986d8]
call fcn.1000dd40
jmp 0x100127dd
mov eax, dword [ebp - 0x297e10]
mov ecx, dword [ebp - 0x297e10]
fld dword [eax + 0x10]
fsub dword [ecx + 0x14]
sub esp, 8
fstp qword [esp]
call fcn.1009f9cf
add esp, 8
fcomp qword [0x100bd600]
fnstsw ax
test ah, 1
je 0x10012abf
jmp 0x100127dd
mov edx, dword [ebp - 0x297e10]
mov eax, dword [ebp - 0x297e28]
fld dword [edx + 0x10]
fcomp dword [eax + 0x10]
fnstsw ax
test ah, 0x41
jne 0x10012b17
mov ecx, dword [ebp - 0x297e28]
fld dword [ecx + 0x10]
fadd qword [0x100bd608]
mov edx, dword [ebp - 0x297e10]
fld dword [edx + 0x14]
fcompp
fnstsw ax
test ah, 1
je 0x10012b17
mov eax, dword [ebp - 0x297e10]
mov ecx, dword [ebp - 0x297e28]
fld dword [eax + 0x14]
fcomp dword [ecx + 0x14]
fnstsw ax
test ah, 0x41
jne 0x10012b17
jmp 0x100127dd
mov dword [ebp - 0x297e18], 1
jmp 0x10012b32
mov edx, dword [ebp - 0x297e18]
add edx, 1
mov dword [ebp - 0x297e18], edx
mov eax, dword [ebp - 0x297e0c]
sub eax, 1
imul eax, eax, 0x22
mov ecx, dword [ebp - 0x30]
movsx edx, word [ecx + eax]
cmp dword [ebp - 0x297e18], edx
jg 0x10012c47
mov eax, dword [ebp - 0x297e0c]
sub eax, 1
imul eax, eax, 0x22
mov ecx, dword [ebp - 0x30]
add ecx, eax
mov edx, dword [ebp - 0x297e18]
movsx eax, word [ecx + edx*2]
mov dword [ebp - 0x297e2c], eax
mov ecx, dword [ebp - 0x297e2c]
push ecx
lea ecx, [ebp - 0x129240]
call fcn.10016910
cmp eax, dword [ebp - 0x297e0c]
jne 0x10012bda
mov edx, dword [ebp - 0x297e2c]
sub edx, 1
push edx
mov eax, dword [ebp - 0x297df0]
sub eax, 1
push eax
mov ecx, 0x100d2e30
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016f90
mov ecx, dword [ebp - 0x297e10]
fld dword [ecx + 0x14]
fsub dword [eax + 0x18]
sub esp, 8
fstp qword [esp]
call fcn.1009f9cf
add esp, 8
fcomp qword [0x100bd608]
fnstsw ax
test ah, 1
je 0x10012bda
jmp 0x10012c47
mov edx, dword [ebp - 0x297e2c]
push edx
lea ecx, [ebp - 0x129240]
call fcn.10016940
cmp eax, dword [ebp - 0x297e0c]
jne 0x10012c42
mov eax, dword [ebp - 0x297e2c]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x297df0]
sub ecx, 1
push ecx
mov ecx, 0x100d2e30
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016f90
mov edx, dword [ebp - 0x297e10]
fld dword [edx + 0x14]
fsub dword [eax + 0x1c]
sub esp, 8
fstp qword [esp]
call fcn.1009f9cf
add esp, 8
fcomp qword [0x100bd608]
fnstsw ax
test ah, 1
je 0x10012c42
jmp 0x10012c47
jmp 0x10012b23
mov eax, dword [ebp - 0x297e0c]
sub eax, 1
imul eax, eax, 0x22
mov ecx, dword [ebp - 0x30]
movsx edx, word [ecx + eax]
cmp dword [ebp - 0x297e18], edx
jg 0x10012c67
jmp 0x100127dd
mov dword [ebp - 0x297e20], 1
jmp 0x10012c82
mov eax, dword [ebp - 0x297e20]
add eax, 1
mov dword [ebp - 0x297e20], eax
mov ecx, dword [ebp - 0x297e0c]
sub ecx, 1
imul ecx, ecx, 0x22
mov edx, dword [ebp - 0x34]
movsx eax, word [edx + ecx]
cmp dword [ebp - 0x297e20], eax
jg 0x10012d7b
mov ecx, dword [ebp - 0x297e0c]
sub ecx, 1
imul ecx, ecx, 0x22
mov edx, dword [ebp - 0x34]
add edx, ecx
mov eax, dword [ebp - 0x297e20]
movsx ecx, word [edx + eax*2]
mov dword [ebp - 0x297e30], ecx
mov edx, dword [ebp - 0x297e30]
push edx
lea ecx, [ebp - 0x129240]
call fcn.100168b0
cmp eax, dword [ebp - 0x297e0c]
jne 0x10012d1c
mov eax, dword [ebp - 0x297e30]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x297df0]
sub ecx, 1
push ecx
mov ecx, 0x100d2e48
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016fd0
mov edx, dword [ebp - 0x297e10]
fld dword [edx + 0x14]
fsub dword [eax + 0x18]
fcomp qword [0x100bd608]
fnstsw ax
test ah, 1
je 0x10012d1c
jmp 0x10012d7b
mov eax, dword [ebp - 0x297e30]
push eax
lea ecx, [ebp - 0x129240]
call fcn.100168e0
cmp eax, dword [ebp - 0x297e0c]
jne 0x10012d76
mov ecx, dword [ebp - 0x297e30]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x297df0]
sub edx, 1
push edx
mov ecx, 0x100d2e48
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016fd0
mov ecx, dword [ebp - 0x297e10]
fld dword [ecx + 0x14]
fsub dword [eax + 0x1c]
fcomp qword [0x100bd608]
fnstsw ax
test ah, 1
je 0x10012d76
jmp 0x10012d7b
jmp 0x10012c73
mov edx, dword [ebp - 0x297e0c]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x34]
movsx ecx, word [eax + edx]
cmp dword [ebp - 0x297e20], ecx
jg 0x10012d9b
jmp 0x100127dd
mov dword [ebp - 0x297e1c], 0
jmp 0x10012db6
mov edx, dword [ebp - 0x297e1c]
add edx, 1
mov dword [ebp - 0x297e1c], edx
mov eax, dword [ebp - 0x297e1c]
cmp eax, dword [ebp - 0x11978]
jge 0x10012e95
mov ecx, dword [ebp - 0x297e1c]
imul ecx, ecx, 0x24
movsx edx, word [ebp + ecx - 0x11972]
cmp edx, dword [ebp - 0x297e0c]
jne 0x10012e2c
mov eax, dword [ebp - 0x297e1c]
push eax
mov ecx, dword [ebp - 0x297df0]
sub ecx, 1
push ecx
mov ecx, 0x100d2e58
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10017010
mov edx, dword [ebp - 0x297e10]
fld dword [edx + 0x14]
fsub dword [eax + 0x10]
sub esp, 8
fstp qword [esp]
call fcn.1009f9cf
add esp, 8
fcomp qword [0x100bd608]
fnstsw ax
test ah, 1
je 0x10012e2c
jmp 0x10012e95
mov eax, dword [ebp - 0x297e1c]
imul eax, eax, 0x24
movsx ecx, word [ebp + eax - 0x1196a]
cmp ecx, dword [ebp - 0x297e0c]
jne 0x10012e90
mov edx, dword [ebp - 0x297e1c]
push edx
mov eax, dword [ebp - 0x297df0]
sub eax, 1
push eax
mov ecx, 0x100d2e58
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10017010
mov ecx, dword [ebp - 0x297e10]
fld dword [ecx + 0x14]
fsub dword [eax + 0x1c]
sub esp, 8
fstp qword [esp]
call fcn.1009f9cf
add esp, 8
fcomp qword [0x100bd608]
fnstsw ax
test ah, 1
je 0x10012e90
jmp 0x10012e95
jmp 0x10012da7
mov edx, dword [ebp - 0x297e1c]
cmp edx, dword [ebp - 0x11978]
jge 0x10012ea8
jmp 0x100127dd
mov eax, dword [ebp - 0x297de8]
imul eax, eax, 0x18
mov ecx, dword [ebp + eax - 0x1d0574]
push ecx
mov edx, dword [ebp - 0x297de8]
add edx, 1
push edx
lea ecx, [ebp - 0x2986e4]
call fcn.100169b0
mov dword [ebp - 0x2987fc], eax
mov eax, dword [ebp - 0x2987fc]
mov dword [ebp - 0x298800], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x298800]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x12d308]
add ecx, edx
call fcn.10026ee0
push eax
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x12d308]
add ecx, eax
call fcn.100515a0
push eax
call fcn.1001a990
add esp, 0xc
mov esi, eax
mov ecx, dword [ebp - 0x28c23c]
sub ecx, 1
shl ecx, 4
mov edx, dword [ebp - 0x12d308]
add ecx, edx
call fcn.10026ee0
xor ecx, ecx
cmp esi, eax
sete cl
mov byte [ebp - 0x2986dc], cl
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2986e4]
call fcn.1000dd40
mov edx, dword [ebp - 0x2986dc]
and edx, 0xff
test edx, edx
je 0x10012fd9
mov eax, dword [ebp - 0x297de8]
imul eax, eax, 0x18
mov ecx, dword [ebp + eax - 0x1d0574]
push ecx
mov edx, dword [ebp - 0x297de8]
add edx, 1
push edx
lea ecx, [ebp - 0x2986ec]
call fcn.100169b0
mov dword [ebp - 0x298804], eax
mov eax, dword [ebp - 0x298804]
mov dword [ebp - 0x298808], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x298808]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x12d308]
add ecx, edx
call fcn.10016e50
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2986ec]
call fcn.1000dd40
jmp 0x100127dd
lea eax, [ebp - 0x2986f0]
push eax
lea ecx, [ebp - 0x297e00]
call fcn.10027610
mov byte [ebp - 4], 0x18
push 1
lea ecx, [ebp - 0x297e00]
push ecx
lea edx, [ebp - 0x129240]
push edx
lea eax, [ebp - 0x280608]
push eax
mov ecx, dword [ebp - 0x297df0]
push ecx
mov edx, dword [ebp - 0x28c240]
push edx
call fcn.100160c3
add esp, 0x18
lea eax, [ebp - 0x297df0]
push eax
lea ecx, [ebp - 0x297df0]
push ecx
lea edx, [ebp - 0x28c240]
push edx
call sym.PmsrwDataZ_V6.dll__MERGEJAN_3_12
mov dword [ebp - 0x297ddc], 0
jmp 0x10013056
mov eax, dword [ebp - 0x297ddc]
add eax, 1
mov dword [ebp - 0x297ddc], eax
mov ecx, dword [ebp - 0x297ddc]
cmp ecx, dword [ebp - 0x1b30c8]
jge 0x10013d10
mov edx, dword [ebp - 0x297ddc]
add edx, 1
push edx
lea ecx, [ebp - 0x280608]
call fcn.100168b0
sub eax, 1
push eax
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x12d30c]
add ecx, eax
call fcn.1000e0c0
cmp dword [eax], 0
jg 0x100130d6
mov ecx, dword [ebp - 0x297ddc]
add ecx, 1
push ecx
lea ecx, [ebp - 0x280608]
call fcn.100168e0
sub eax, 1
push eax
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x12d30c]
add ecx, edx
call fcn.1000e0c0
cmp dword [eax], 0
jle 0x100130db
jmp 0x10013047
mov eax, dword [ebp - 0x297ddc]
mov ecx, dword [ebp + eax*4 - 0x12d2f0]
push ecx
call fcn.1009fc10
add esp, 4
cmp eax, dword [ebp - 0x297df0]
je 0x10013118
mov edx, dword [ebp - 0x297ddc]
mov eax, dword [ebp + edx*4 - 0x12d2f0]
push eax
call fcn.1009fc10
add esp, 4
test eax, eax
je 0x10013118
jmp 0x10013047
mov ecx, dword [ebp - 0x297ddc]
push ecx
mov edx, dword [ebp - 0x149850]
push edx
mov ecx, 0x100d2e48
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016fd0
mov dword [ebp - 0x298568], eax
cmp dword [ebp - 0x297e04], 0
je 0x10013157
mov eax, dword [ebp - 0x298568]
cmp dword [eax + 4], 0
jne 0x10013157
jmp 0x10013047
mov ecx, dword [ebp - 0x297ddc]
add ecx, 1
push ecx
lea ecx, [ebp - 0x280608]
call fcn.100168b0
mov word [ebp - 0x298574], ax
mov edx, dword [ebp - 0x297ddc]
add edx, 1
push edx
lea ecx, [ebp - 0x280608]
call fcn.100168e0
mov word [ebp - 0x297e38], ax
mov eax, dword [ebp - 0x297ddc]
shl eax, 4
movsx ecx, word [ebp + eax - 0x1b30c2]
movsx edx, word [ebp + ecx*2 - 0x236e2e]
mov dword [ebp - 0x297e44], edx
mov eax, dword [ebp - 0x297e44]
movsx ecx, word [ebp + eax*2 - 0x24ba3a]
test ecx, ecx
jle 0x100131cc
mov dword [ebp - 0x29880c], 0
jmp 0x100131e2
mov edx, dword [ebp - 0x297e44]
movsx eax, word [ebp + edx*2 - 0x24ba3a]
neg eax
mov dword [ebp - 0x29880c], eax
mov ecx, dword [ebp - 0x29880c]
mov dword [ebp - 0x2980a0], ecx
mov dword [ebp - 0x29856c], 0
lea edx, [ebp - 0x298554]
push edx
lea eax, [ebp - 0x2982fc]
push eax
lea ecx, [ebp - 0x29809c]
push ecx
lea edx, [ebp - 0x29856c]
push edx
lea eax, [ebp - 0x297e44]
push eax
call sym.PmsrwDataZ_V6.dll__GETMERGEJAN_3_20
xor ecx, ecx
cmp dword [ebp - 0x2980a0], 0
setne cl
add ecx, 2
mov dword [ebp - 0x297e40], ecx
lea edx, [ebp - 0x298574]
push edx
mov eax, dword [ebp - 0x29856c]
lea ecx, [ebp + eax*2 - 0x29809c]
push ecx
mov edx, dword [ebp - 0x297e40]
lea eax, [ebp + edx*2 - 0x29809c]
push eax
call fcn.1000fee0
add esp, 0xc
mov dword [ebp - 0x298560], eax
lea ecx, [ebp - 0x297e38]
push ecx
mov edx, dword [ebp - 0x29856c]
lea eax, [ebp + edx*2 - 0x29809c]
push eax
mov ecx, dword [ebp - 0x297e40]
lea edx, [ebp + ecx*2 - 0x29809c]
push edx
call fcn.1000fee0
add esp, 0xc
mov dword [ebp - 0x298564], eax
mov eax, dword [ebp - 0x298560]
lea ecx, [ebp - 0x29809c]
sub eax, ecx
sar eax, 1
movsx edx, word [ebp + eax*2 - 0x2982fc]
mov dword [ebp - 0x298570], edx
mov eax, dword [ebp - 0x298564]
lea ecx, [ebp - 0x29809c]
sub eax, ecx
sar eax, 1
movsx edx, word [ebp + eax*2 - 0x2982fc]
mov dword [ebp - 0x297e34], edx
mov dword [ebp - 0x297e3c], 0
jmp 0x100132ee
mov eax, dword [ebp - 0x297e3c]
add eax, 1
mov dword [ebp - 0x297e3c], eax
cmp dword [ebp - 0x297e3c], 2
jge 0x10013705
cmp dword [ebp - 0x297e3c], 0
jne 0x10013312
mov ecx, dword [ebp - 0x298570]
mov dword [ebp - 0x298810], ecx
jmp 0x1001331e
mov edx, dword [ebp - 0x297e34]
mov dword [ebp - 0x298810], edx
mov eax, dword [ebp - 0x298810]
mov dword [ebp - 0x298578], eax
cmp dword [ebp - 0x298578], 0
je 0x1001361f
mov ecx, dword [ebp - 0x298578]
mov edx, dword [ebp - 0x2c]
movsx eax, word [edx + ecx*2 - 2]
test eax, eax
jle 0x100133a2
mov ecx, dword [ebp - 0x298578]
mov edx, dword [ebp - 0x2c]
movsx eax, word [edx + ecx*2 - 2]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x297df0]
sub ecx, 1
push ecx
mov ecx, 0x100d2e68
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016f50
mov edx, dword [ebp - 0x298568]
fld dword [edx + 0x20]
fsub dword [eax + 0x10]
sub esp, 8
fstp qword [esp]
call fcn.1009f9cf
add esp, 8
fcomp qword [0x100bd608]
fnstsw ax
test ah, 1
je 0x100133a2
jmp 0x10013705
mov eax, dword [ebp - 0x298578]
sub eax, 1
imul eax, eax, 0x22
mov ecx, dword [ebp - 0x34]
movsx edx, word [ecx + eax]
test edx, edx
jle 0x100134de
mov dword [ebp - 0x29857c], 1
jmp 0x100133d8
mov eax, dword [ebp - 0x29857c]
add eax, 1
mov dword [ebp - 0x29857c], eax
mov ecx, dword [ebp - 0x298578]
sub ecx, 1
imul ecx, ecx, 0x22
mov edx, dword [ebp - 0x34]
movsx eax, word [edx + ecx]
cmp dword [ebp - 0x29857c], eax
jg 0x100134be
mov ecx, dword [ebp - 0x298578]
sub ecx, 1
imul ecx, ecx, 0x22
mov edx, dword [ebp - 0x34]
add edx, ecx
mov eax, dword [ebp - 0x29857c]
movsx ecx, word [edx + eax*2]
mov dword [ebp - 0x298580], ecx
mov edx, dword [ebp - 0x298580]
sub edx, 1
push edx
mov eax, dword [ebp - 0x297df0]
sub eax, 1
push eax
mov ecx, 0x100d2e48
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016fd0
mov dword [ebp - 0x298584], eax
mov ecx, dword [ebp - 0x298580]
push ecx
lea ecx, [ebp - 0x129240]
call fcn.100168b0
cmp eax, dword [ebp - 0x298578]
jne 0x1001347e
mov edx, dword [ebp - 0x298568]
mov eax, dword [ebp - 0x298584]
fld dword [edx + 0x20]
fsub dword [eax + 0x18]
fcomp qword [0x100bd608]
fnstsw ax
test ah, 1
je 0x1001347e
jmp 0x100134be
mov ecx, dword [ebp - 0x298580]
push ecx
lea ecx, [ebp - 0x129240]
call fcn.100168e0
cmp eax, dword [ebp - 0x298578]
jne 0x100134b9
mov edx, dword [ebp - 0x298568]
mov eax, dword [ebp - 0x298584]
fld dword [edx + 0x20]
fsub dword [eax + 0x1c]
fcomp qword [0x100bd608]
fnstsw ax
test ah, 1
je 0x100134b9
jmp 0x100134be
jmp 0x100133c9
mov ecx, dword [ebp - 0x298578]
sub ecx, 1
imul ecx, ecx, 0x22
mov edx, dword [ebp - 0x34]
movsx eax, word [edx + ecx]
cmp dword [ebp - 0x29857c], eax
jg 0x100134de
jmp 0x10013705
mov ecx, dword [ebp - 0x298578]
sub ecx, 1
imul ecx, ecx, 0x22
mov edx, dword [ebp - 0x30]
movsx eax, word [edx + ecx]
test eax, eax
jle 0x1001361a
mov dword [ebp - 0x298588], 1
jmp 0x10013514
mov ecx, dword [ebp - 0x298588]
add ecx, 1
mov dword [ebp - 0x298588], ecx
mov edx, dword [ebp - 0x298578]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x30]
movsx ecx, word [eax + edx]
cmp dword [ebp - 0x298588], ecx
jg 0x100135fa
mov edx, dword [ebp - 0x298578]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x30]
add eax, edx
mov ecx, dword [ebp - 0x298588]
movsx edx, word [eax + ecx*2]
mov dword [ebp - 0x298590], edx
mov eax, dword [ebp - 0x298590]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x297df0]
sub ecx, 1
push ecx
mov ecx, 0x100d2e30
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016f90
mov dword [ebp - 0x29858c], eax
mov edx, dword [ebp - 0x298590]
push edx
lea ecx, [ebp - 0x129240]
call fcn.10016910
cmp eax, dword [ebp - 0x298578]
jne 0x100135ba
mov eax, dword [ebp - 0x298568]
mov ecx, dword [ebp - 0x29858c]
fld dword [eax + 0x20]
fsub dword [ecx + 0x18]
fcomp qword [0x100bd608]
fnstsw ax
test ah, 1
je 0x100135ba
jmp 0x100135fa
mov edx, dword [ebp - 0x298590]
push edx
lea ecx, [ebp - 0x129240]
call fcn.10016940
cmp eax, dword [ebp - 0x298578]
jne 0x100135f5
mov eax, dword [ebp - 0x298568]
mov ecx, dword [ebp - 0x29858c]
fld dword [eax + 0x20]
fsub dword [ecx + 0x1c]
fcomp qword [0x100bd608]
fnstsw ax
test ah, 1
je 0x100135f5
jmp 0x100135fa
jmp 0x10013505
mov edx, dword [ebp - 0x298578]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x30]
movsx ecx, word [eax + edx]
cmp dword [ebp - 0x298588], ecx
jg 0x1001361a
jmp 0x10013705
jmp 0x10013700
cmp dword [ebp - 0x149850], 0
jne 0x10013638
mov dx, word [ebp - 0x298574]
mov word [ebp - 0x298812], dx
jmp 0x10013646
mov ax, word [ebp - 0x297e38]
mov word [ebp - 0x298812], ax
movsx ecx, word [ebp - 0x298812]
mov dword [ebp - 0x298594], ecx
mov edx, dword [ebp - 0x298594]
push edx
lea ecx, [ebp - 0x297e00]
call fcn.1000e0c0
mov eax, dword [eax]
mov dword [ebp - 0x298598], eax
cmp dword [ebp - 0x298598], 0
je 0x10013700
mov ecx, dword [ebp - 0x298598]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x297df0]
sub edx, 1
push edx
mov ecx, 0x100d2e48
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016fd0
mov dword [ebp - 0x29859c], eax
mov eax, dword [ebp - 0x29859c]
fld dword [eax + 0x18]
mov ecx, dword [ebp - 0x29859c]
fld dword [ecx + 0x1c]
fcompp
fnstsw ax
test ah, 1
je 0x100136d1
mov edx, dword [ebp - 0x29859c]
fld dword [edx + 0x18]
fstp dword [ebp - 0x298818]
jmp 0x100136e0
mov eax, dword [ebp - 0x29859c]
fld dword [eax + 0x1c]
fstp dword [ebp - 0x298818]
mov ecx, dword [ebp - 0x298568]
fld dword [ecx + 0x20]
fld dword [ebp - 0x298818]
fadd qword [0x100bd608]
fcompp
fnstsw ax
test ah, 0x41
jne 0x10013700
jmp 0x10013705
jmp 0x100132df
cmp dword [ebp - 0x297e3c], 2
jge 0x10013713
jmp 0x10013047
mov edx, dword [ebp - 0x298560]
lea eax, [ebp - 0x29809c]
sub edx, eax
sar edx, 1
sub edx, 1
mov dword [ebp - 0x2980a4], edx
jmp 0x1001373d
mov ecx, dword [ebp - 0x2980a4]
sub ecx, 1
mov dword [ebp - 0x2980a4], ecx
mov edx, dword [ebp - 0x2980a4]
cmp edx, dword [ebp - 0x297e40]
jl 0x10013761
mov eax, dword [ebp - 0x2980a4]
movsx ecx, word [ebp + eax*2 - 0x2982fc]
test ecx, ecx
jle 0x1001375f
jmp 0x10013761
jmp 0x1001372e
mov edx, dword [ebp - 0x297e40]
sub edx, 1
cmp dword [ebp - 0x2980a4], edx
jne 0x100137c0
mov eax, dword [ebp - 0x298560]
lea ecx, [ebp - 0x29809c]
sub eax, ecx
sar eax, 1
add eax, 1
mov dword [ebp - 0x2980a4], eax
jmp 0x1001379c
mov edx, dword [ebp - 0x2980a4]
add edx, 1
mov dword [ebp - 0x2980a4], edx
mov eax, dword [ebp - 0x2980a4]
cmp eax, dword [ebp - 0x29856c]
jge 0x100137c0
mov ecx, dword [ebp - 0x2980a4]
movsx edx, word [ebp + ecx*2 - 0x2982fc]
test edx, edx
jle 0x100137be
jmp 0x100137c0
jmp 0x1001378d
mov eax, dword [ebp - 0x298564]
lea ecx, [ebp - 0x29809c]
sub eax, ecx
sar eax, 1
add eax, 1
mov dword [ebp - 0x29855c], eax
jmp 0x100137ea
mov edx, dword [ebp - 0x29855c]
add edx, 1
mov dword [ebp - 0x29855c], edx
mov eax, dword [ebp - 0x29855c]
cmp eax, dword [ebp - 0x29856c]
jge 0x1001380e
mov ecx, dword [ebp - 0x29855c]
movsx edx, word [ebp + ecx*2 - 0x2982fc]
test edx, edx
jle 0x1001380c
jmp 0x1001380e
jmp 0x100137db
mov eax, dword [ebp - 0x29855c]
cmp eax, dword [ebp - 0x29856c]
jne 0x1001386a
mov ecx, dword [ebp - 0x298564]
lea edx, [ebp - 0x29809c]
sub ecx, edx
sar ecx, 1
sub ecx, 1
mov dword [ebp - 0x29855c], ecx
jmp 0x10013846
mov eax, dword [ebp - 0x29855c]
sub eax, 1
mov dword [ebp - 0x29855c], eax
mov ecx, dword [ebp - 0x29855c]
cmp ecx, dword [ebp - 0x2980a4]
jle 0x1001386a
mov edx, dword [ebp - 0x29855c]
movsx eax, word [ebp + edx*2 - 0x2982fc]
test eax, eax
jle 0x10013868
jmp 0x1001386a
jmp 0x10013837
mov ecx, dword [ebp - 0x2980a4]
mov dword [ebp - 0x298558], ecx
jmp 0x10013887
mov edx, dword [ebp - 0x298558]
add edx, 1
mov dword [ebp - 0x298558], edx
mov eax, dword [ebp - 0x298558]
cmp eax, dword [ebp - 0x29855c]
jg 0x10013bc7
mov ecx, dword [ebp - 0x298558]
movsx edx, word [ebp + ecx*2 - 0x2982fc]
test edx, edx
jne 0x100138ad
jmp 0x10013878
mov eax, dword [ebp - 0x298558]
add eax, 1
mov dword [ebp - 0x2985a0], eax
mov ecx, dword [ebp - 0x2985a0]
movsx edx, word [ebp + ecx*2 - 0x2982fc]
test edx, edx
jne 0x100138ed
mov eax, dword [ebp - 0x2985a0]
cmp eax, dword [ebp - 0x29856c]
jge 0x100138ed
mov ecx, dword [ebp - 0x2985a0]
add ecx, 1
mov dword [ebp - 0x2985a0], ecx
jmp 0x100138bc
mov edx, dword [ebp - 0x298560]
lea eax, [ebp - 0x29809c]
sub edx, eax
sar edx, 1
cmp dword [ebp - 0x298558], edx
jle 0x1001394e
mov ecx, dword [ebp - 0x298564]
lea edx, [ebp - 0x29809c]
sub ecx, edx
sar ecx, 1
cmp dword [ebp - 0x298558], ecx
jge 0x1001394e
mov eax, dword [ebp - 0x298558]
movsx ecx, word [ebp + eax*2 - 0x2982fc]
test ecx, ecx
je 0x1001394e
mov edx, dword [ebp - 0x298558]
movsx eax, word [ebp + edx*2 - 0x2982fc]
mov ecx, dword [ebp - 0x2c]
movsx edx, word [ecx + eax*2 - 2]
test edx, edx
je 0x1001394e
jmp 0x10013bc7
mov eax, dword [ebp - 0x298558]
cmp eax, dword [ebp - 0x29855c]
jge 0x10013bc2
mov ecx, dword [ebp - 0x298558]
movsx edx, word [ebp + ecx*2 - 0x2982fc]
test edx, edx
jle 0x10013bc2
mov eax, dword [ebp - 0x2985a0]
movsx ecx, word [ebp + eax*2 - 0x2982fc]
test ecx, ecx
jle 0x10013bc2
mov word [ebp - 0x2985a4], 0
mov edx, dword [ebp - 0x2985a0]
movsx eax, word [ebp + edx*2 - 0x2982fc]
sub eax, 1
imul eax, eax, 0x22
mov ecx, dword [ebp - 0x34]
lea edx, [ecx + eax + 2]
push edx
mov eax, dword [ebp - 0x2985a0]
movsx ecx, word [ebp + eax*2 - 0x2982fc]
sub ecx, 1
imul ecx, ecx, 0x22
mov edx, dword [ebp - 0x34]
movsx eax, word [edx + ecx]
push eax
mov ecx, dword [ebp - 0x298558]
movsx edx, word [ebp + ecx*2 - 0x2982fc]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x34]
lea ecx, [eax + edx + 2]
push ecx
mov edx, dword [ebp - 0x298558]
movsx eax, word [ebp + edx*2 - 0x2982fc]
sub eax, 1
imul eax, eax, 0x22
mov ecx, dword [ebp - 0x34]
movsx edx, word [ecx + eax]
push edx
call fcn.10010fb6
add esp, 0x10
mov word [ebp - 0x2985a4], ax
movsx eax, word [ebp - 0x2985a4]
test eax, eax
je 0x10013aad
movsx ecx, word [ebp - 0x2985a4]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x297df0]
sub edx, 1
push edx
mov ecx, 0x100d2e48
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016fd0
mov dword [ebp - 0x2985a8], eax
mov eax, dword [ebp - 0x2985a8]
fld dword [eax + 0x18]
mov ecx, dword [ebp - 0x2985a8]
fld dword [ecx + 0x1c]
fcompp
fnstsw ax
test ah, 1
je 0x10013a7b
mov edx, dword [ebp - 0x2985a8]
fld dword [edx + 0x18]
fstp dword [ebp - 0x29881c]
jmp 0x10013a8a
mov eax, dword [ebp - 0x2985a8]
fld dword [eax + 0x1c]
fstp dword [ebp - 0x29881c]
mov ecx, dword [ebp - 0x298568]
fld dword [ecx + 0x20]
fld dword [ebp - 0x29881c]
fadd qword [0x100bd608]
fcompp
fnstsw ax
test ah, 0x41
jne 0x10013aad
jmp 0x10013bc7
mov edx, dword [ebp - 0x2985a0]
movsx eax, word [ebp + edx*2 - 0x2982fc]
sub eax, 1
imul eax, eax, 0x22
mov ecx, dword [ebp - 0x30]
lea edx, [ecx + eax + 2]
push edx
mov eax, dword [ebp - 0x2985a0]
movsx ecx, word [ebp + eax*2 - 0x2982fc]
sub ecx, 1
imul ecx, ecx, 0x22
mov edx, dword [ebp - 0x30]
movsx eax, word [edx + ecx]
push eax
mov ecx, dword [ebp - 0x298558]
movsx edx, word [ebp + ecx*2 - 0x2982fc]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x30]
lea ecx, [eax + edx + 2]
push ecx
mov edx, dword [ebp - 0x298558]
movsx eax, word [ebp + edx*2 - 0x2982fc]
sub eax, 1
imul eax, eax, 0x22
mov ecx, dword [ebp - 0x30]
movsx edx, word [ecx + eax]
push edx
call fcn.10010fb6
add esp, 0x10
mov word [ebp - 0x2985a4], ax
movsx eax, word [ebp - 0x2985a4]
test eax, eax
je 0x10013bc2
movsx ecx, word [ebp - 0x2985a4]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x297df0]
sub edx, 1
push edx
mov ecx, 0x100d2e30
call fcn.1000e0c0
mov ecx, dword [eax]
call fcn.10016f90
mov dword [ebp - 0x2985ac], eax
mov eax, dword [ebp - 0x2985ac]
fld dword [eax + 0x18]
mov ecx, dword [ebp - 0x2985ac]
fld dword [ecx + 0x1c]
fcompp
fnstsw ax
test ah, 1
je 0x10013b93
mov edx, dword [ebp - 0x2985ac]
fld dword [edx + 0x18]
fstp dword [ebp - 0x298820]
jmp 0x10013ba2
mov eax, dword [ebp - 0x2985ac]
fld dword [eax + 0x1c]
fstp dword [ebp - 0x298820]
mov ecx, dword [ebp - 0x298568]
fld dword [ecx + 0x20]
fld dword [ebp - 0x298820]
fadd qword [0x100bd608]
fcompp
fnstsw ax
test ah, 0x41
jne 0x10013bc2
jmp 0x10013bc7
jmp 0x10013878
mov edx, dword [ebp - 0x298558]
cmp edx, dword [ebp - 0x29855c]
jg 0x10013bda
jmp 0x10013047
mov eax, dword [ebp - 0x297ddc]
shl eax, 4
mov ecx, dword [ebp + eax - 0x1b30b8]
push ecx
mov edx, dword [ebp - 0x297ddc]
add edx, 1
push edx
lea ecx, [ebp - 0x2986fc]
call fcn.100169b0
mov dword [ebp - 0x298824], eax
mov eax, dword [ebp - 0x298824]
mov dword [ebp - 0x298828], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x298828]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x14984c]
add ecx, edx
call fcn.10026ee0
push eax
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x14984c]
add ecx, eax
call fcn.100515a0
push eax
call fcn.1001a990
add esp, 0xc
mov esi, eax
mov ecx, dword [ebp - 0x28c23c]
sub ecx, 1
shl ecx, 4
mov edx, dword [ebp - 0x14984c]
add ecx, edx
call fcn.10026ee0
xor ecx, ecx
cmp esi, eax
sete cl
mov byte [ebp - 0x2986f4], cl
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2986fc]
call fcn.1000dd40
mov edx, dword [ebp - 0x2986f4]
and edx, 0xff
test edx, edx
je 0x10013d0b
mov eax, dword [ebp - 0x297ddc]
shl eax, 4
mov ecx, dword [ebp + eax - 0x1b30b8]
push ecx
mov edx, dword [ebp - 0x297ddc]
add edx, 1
push edx
lea ecx, [ebp - 0x298704]
call fcn.100169b0
mov dword [ebp - 0x29882c], eax
mov eax, dword [ebp - 0x29882c]
mov dword [ebp - 0x298830], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x298830]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x14984c]
add ecx, edx
call fcn.10016e50
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x298704]
call fcn.1000dd40
jmp 0x10013047
mov dword [ebp - 0x297de4], 0
jmp 0x10013d2b
mov eax, dword [ebp - 0x297de4]
add eax, 1
mov dword [ebp - 0x297de4], eax
mov ecx, dword [ebp - 0x297de4]
cmp ecx, dword [ebp - 0x168d40]
jge 0x10014165
mov edx, dword [ebp - 0x297de4]
imul edx, edx, 0x24
movsx eax, word [ebp + edx - 0x168d34]
mov ecx, dword [ebp - 0x297de4]
imul ecx, ecx, 0x24
movsx edx, word [ebp + ecx - 0x168d2c]
cmp eax, edx
jge 0x10013d7d
mov eax, dword [ebp - 0x297de4]
imul eax, eax, 0x24
mov cx, word [ebp + eax - 0x168d3a]
mov word [ebp - 0x298832], cx
jmp 0x10013d95
mov edx, dword [ebp - 0x297de4]
imul edx, edx, 0x24
mov ax, word [ebp + edx - 0x168d32]
mov word [ebp - 0x298832], ax
movsx ecx, word [ebp - 0x298832]
mov dword [ebp - 0x2985b4], ecx
mov edx, dword [ebp - 0x297de4]
imul edx, edx, 0x24
movsx eax, word [ebp + edx - 0x168d34]
mov ecx, dword [ebp - 0x297de4]
imul ecx, ecx, 0x24
movsx edx, word [ebp + ecx - 0x168d2c]
cmp eax, edx
jge 0x10013de2
mov eax, dword [ebp - 0x297de4]
imul eax, eax, 0x24
mov cx, word [ebp + eax - 0x168d34]
mov word [ebp - 0x298834], cx
jmp 0x10013dfa
mov edx, dword [ebp - 0x297de4]
imul edx, edx, 0x24
mov ax, word [ebp + edx - 0x168d2c]
mov word [ebp - 0x298834], ax
movsx ecx, word [ebp - 0x298834]
mov dword [ebp - 0x2985b8], ecx
cmp dword [ebp - 0x2985b8], 1
je 0x10013e42
cmp dword [ebp - 0x2985b8], 0
je 0x10013e42
mov edx, dword [ebp - 0x28c240]
mov eax, dword [0x101aa754]
movsx ecx, word [eax + edx*2 - 2]
cmp dword [ebp - 0x2985b8], ecx
jge 0x10013f1b
cmp dword [ebp - 0x2985b8], 0
jle 0x10013f1b
mov edx, dword [ebp - 0x2985b4]
mov eax, dword [ebp - 0x1573f4]
movsx ecx, word [eax + edx*2 - 2]
test ecx, ecx
jg 0x10013e8b
mov edx, dword [ebp - 0x2985b4]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x1573f8]
movsx ecx, word [eax + edx]
test ecx, ecx
jg 0x10013e8b
mov edx, dword [ebp - 0x2985b4]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x1573fc]
movsx ecx, word [eax + edx]
test ecx, ecx
jle 0x10013e90
jmp 0x10013d1c
mov edx, dword [ebp - 0x297de4]
imul edx, edx, 0x24
movsx eax, word [ebp + edx - 0x168d34]
mov ecx, dword [ebp - 0x297de4]
imul ecx, ecx, 0x24
movsx edx, word [ebp + ecx - 0x168d2c]
cmp eax, edx
jne 0x10013f1b
mov eax, dword [ebp - 0x297de4]
imul eax, eax, 0x24
movsx ecx, word [ebp + eax - 0x168d3a]
mov dword [ebp - 0x2985bc], ecx
mov edx, dword [ebp - 0x2985bc]
mov eax, dword [ebp - 0x1573f4]
movsx ecx, word [eax + edx*2 - 2]
test ecx, ecx
jg 0x10013f16
mov edx, dword [ebp - 0x2985bc]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x1573f8]
movsx ecx, word [eax + edx]
test ecx, ecx
jg 0x10013f16
mov edx, dword [ebp - 0x2985bc]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x1573fc]
movsx ecx, word [eax + edx]
test ecx, ecx
jle 0x10013f1b
jmp 0x10013d1c
mov edx, dword [ebp - 0x297de4]
imul edx, edx, 0x24
movsx eax, word [ebp + edx - 0x168d3a]
sub eax, 1
imul eax, eax, 0x44
mov ecx, dword [ebp - 0x2806b4]
cmp dword [ecx + eax], 1
jg 0x10013f61
mov edx, dword [ebp - 0x297de4]
imul edx, edx, 0x24
movsx eax, word [ebp + edx - 0x168d32]
sub eax, 1
imul eax, eax, 0x44
mov ecx, dword [ebp - 0x2806b4]
cmp dword [ecx + eax], 1
jle 0x10013f66
jmp 0x10013d1c
mov edx, dword [ebp - 0x297de4]
mov eax, dword [ebp + edx*4 - 0x1573d0]
push eax
call fcn.1009fc10
add esp, 4
cmp eax, dword [ebp - 0x297df0]
je 0x10013f89
jmp 0x10013d1c
mov ecx, dword [ebp - 0x2985b4]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x12d30c]
add ecx, edx
call fcn.1000e0c0
cmp dword [eax], 0
jle 0x10013fb6
jmp 0x10013d1c
mov eax, dword [ebp - 0x2985b4]
mov ecx, dword [ebp + eax*4 - 0x155490]
mov dword [ebp - 0x2985b0], ecx
cmp dword [ebp - 0x2985b0], 0
je 0x1001402f
mov edx, dword [ebp - 0x2985b0]
mov eax, dword [ebp - 0x2c]
movsx ecx, word [eax + edx*2 - 2]
test ecx, ecx
jg 0x1001402a
mov edx, dword [ebp - 0x2985b0]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x30]
movsx ecx, word [eax + edx]
test ecx, ecx
jg 0x1001402a
mov edx, dword [ebp - 0x2985b0]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x34]
movsx ecx, word [eax + edx]
test ecx, ecx
jg 0x1001402a
mov edx, dword [ebp - 0x2985b0]
sub edx, 1
imul edx, edx, 0x44
mov eax, dword [ebp - 0x297e08]
cmp dword [eax + edx], 0
jle 0x1001402f
jmp 0x10013d1c
mov ecx, dword [ebp - 0x297de4]
imul ecx, ecx, 0x24
mov edx, dword [ebp + ecx - 0x168d1c]
push edx
mov eax, dword [ebp - 0x297de4]
add eax, 1
push eax
lea ecx, [ebp - 0x298710]
call fcn.100169b0
mov dword [ebp - 0x298838], eax
mov ecx, dword [ebp - 0x298838]
mov dword [ebp - 0x29883c], ecx
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x29883c]
push edx
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x149848]
add ecx, eax
call fcn.10026ee0
push eax
mov ecx, dword [ebp - 0x28c23c]
sub ecx, 1
shl ecx, 4
mov edx, dword [ebp - 0x149848]
add ecx, edx
call fcn.100515a0
push eax
call fcn.1001a990
add esp, 0xc
mov esi, eax
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x149848]
add ecx, eax
call fcn.10026ee0
xor ecx, ecx
cmp esi, eax
sete cl
mov byte [ebp - 0x298708], cl
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x298710]
call fcn.1000dd40
mov edx, dword [ebp - 0x298708]
and edx, 0xff
test edx, edx
je 0x10014160
mov eax, dword [ebp - 0x297de4]
imul eax, eax, 0x24
mov ecx, dword [ebp + eax - 0x168d1c]
push ecx
mov edx, dword [ebp - 0x297de4]
add edx, 1
push edx
lea ecx, [ebp - 0x298718]
call fcn.100169b0
mov dword [ebp - 0x298840], eax
mov eax, dword [ebp - 0x298840]
mov dword [ebp - 0x298844], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x298844]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x149848]
add ecx, edx
call fcn.10016e50
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x298718]
call fcn.1000dd40
jmp 0x10013d1c
mov dword [ebp - 0x297de0], 0
jmp 0x10014180
mov eax, dword [ebp - 0x297de0]
add eax, 1
mov dword [ebp - 0x297de0], eax
mov ecx, dword [ebp - 0x297de0]
cmp ecx, dword [ebp - 0x1a36c4]
jge 0x100142ad
mov dword [ebp - 0x2985c0], 0
jmp 0x100141ad
mov edx, dword [ebp - 0x2985c0]
add edx, 1
mov dword [ebp - 0x2985c0], edx
cmp dword [ebp - 0x2985c0], 2
jge 0x100142a8
mov eax, dword [ebp - 0x297de0]
lea ecx, [ebp + eax*8 - 0x149830]
mov edx, dword [ebp - 0x2985c0]
movsx eax, word [ecx + edx*4]
cmp eax, dword [ebp - 0x297df0]
jne 0x100142a3
mov ecx, dword [ebp - 0x297de0]
lea edx, [ebp + ecx*8 - 0x149830]
mov eax, dword [ebp - 0x2985c0]
movsx ecx, word [edx + eax*4 + 2]
mov dword [ebp - 0x2985c4], ecx
cmp dword [ebp - 0x2985c4], 0
je 0x100142a3
mov edx, dword [ebp - 0x2985c4]
mov eax, dword [ebp - 0x2c]
movsx ecx, word [eax + edx*2 - 2]
test ecx, ecx
jne 0x10014260
mov edx, dword [ebp - 0x2985c4]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x30]
movsx ecx, word [eax + edx]
test ecx, ecx
jne 0x10014260
mov edx, dword [ebp - 0x2985c4]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x34]
movsx ecx, word [eax + edx]
test ecx, ecx
jne 0x10014260
mov edx, dword [ebp - 0x2985c4]
sub edx, 1
imul edx, edx, 0x44
mov eax, dword [ebp - 0x297e08]
cmp dword [eax + edx], 0
je 0x100142a3
cmp dword [ebp - 0x2985c0], 0
jne 0x10014281
mov ecx, dword [ebp - 0x297de0]
push ecx
lea ecx, [ebp - 0x2806a8]
call fcn.10027760
mov dword [eax], 1
cmp dword [ebp - 0x2985c0], 1
jne 0x100142a3
mov edx, dword [ebp - 0x297de0]
push edx
lea ecx, [ebp - 0x2806a8]
call fcn.10027760
mov dword [eax + 4], 1
jmp 0x1001419e
jmp 0x10014171
mov eax, dword [ebp - 0x297e08]
mov dword [ebp - 0x29871c], eax
mov ecx, dword [ebp - 0x29871c]
push ecx
call fcn.100af3c9
add esp, 4
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x297e00]
call fcn.1000e0e0
jmp 0x10012554
mov dword [ebp - 0x298720], 1
lea edx, [ebp - 0x298720]
push edx
lea eax, [ebp - 0x280668]
push eax
lea ecx, [ebp - 0x28c240]
push ecx
call sym.PmsrwDataZ_V6.dll__IGETUPDOWNZRC_12
mov dword [ebp - 0x129248], eax
mov dword [ebp - 0x28c238], 0
jmp 0x10014321
mov edx, dword [ebp - 0x28c238]
add edx, 1
mov dword [ebp - 0x28c238], edx
mov eax, dword [ebp - 0x28c238]
cmp eax, dword [ebp - 0x129248]
jge 0x10014491
push 0
mov ecx, dword [ebp - 0x14983c]
mov edx, dword [ecx + 0x170]
mov eax, dword [ebp - 0x28c238]
movsx ecx, word [edx + eax*2]
push ecx
lea ecx, [ebp - 0x129240]
call fcn.1001ae25
mov dword [ebp - 0x2985c8], 0
jmp 0x10014372
mov edx, dword [ebp - 0x2985c8]
add edx, 1
mov dword [ebp - 0x2985c8], edx
mov eax, dword [ebp - 0x2985c8]
cmp eax, dword [ebp - 0x1a36c4]
jge 0x1001448c
mov dword [ebp - 0x2985cc], 0
jmp 0x1001439f
mov ecx, dword [ebp - 0x2985cc]
add ecx, 1
mov dword [ebp - 0x2985cc], ecx
cmp dword [ebp - 0x2985cc], 2
jge 0x10014487
mov edx, dword [ebp - 0x2985c8]
lea eax, [ebp + edx*8 - 0x149830]
mov ecx, dword [ebp - 0x2985cc]
movsx edx, word [eax + ecx*4]
mov eax, dword [ebp - 0x28c238]
add eax, 1
cmp edx, eax
jne 0x10014482
mov ecx, dword [ebp - 0x2985c8]
lea edx, [ebp + ecx*8 - 0x149830]
mov eax, dword [ebp - 0x2985cc]
movsx ecx, word [edx + eax*4 + 2]
mov dword [ebp - 0x2985d0], ecx
cmp dword [ebp - 0x2985d0], 0
je 0x10014482
mov edx, dword [ebp - 0x2985d0]
mov eax, dword [ebp - 0x2c]
movsx ecx, word [eax + edx*2 - 2]
test ecx, ecx
jne 0x1001443f
mov edx, dword [ebp - 0x2985d0]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x30]
movsx ecx, word [eax + edx]
test ecx, ecx
jne 0x1001443f
mov edx, dword [ebp - 0x2985d0]
sub edx, 1
imul edx, edx, 0x22
mov eax, dword [ebp - 0x34]
movsx ecx, word [eax + edx]
test ecx, ecx
je 0x10014482
cmp dword [ebp - 0x2985cc], 0
jne 0x10014460
mov edx, dword [ebp - 0x2985c8]
push edx
lea ecx, [ebp - 0x2806a8]
call fcn.10027760
mov dword [eax], 1
cmp dword [ebp - 0x2985cc], 1
jne 0x10014482
mov eax, dword [ebp - 0x2985c8]
push eax
lea ecx, [ebp - 0x2806a8]
call fcn.10027760
mov dword [eax + 4], 1
jmp 0x10014390
jmp 0x10014363
jmp 0x10014312
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28c244], eax
push 0xbb80
push 0
lea ecx, [ebp - 0x297dc4]
push ecx
call fcn.1009ecd0
add esp, 0xc
mov dword [ebp - 0x2806ac], 0
jmp 0x100144ce
mov edx, dword [ebp - 0x2806ac]
add edx, 1
mov dword [ebp - 0x2806ac], edx
mov eax, dword [ebp - 0x2806ac]
cmp eax, dword [ebp - 0x1a36c4]
jge 0x100145b0
mov ecx, dword [ebp - 0x2806ac]
cmp dword [ebp + ecx*4 - 0x297dc4], 0
je 0x100144f2
jmp 0x100144bf
push 0xbb80
push 0
lea edx, [ebp - 0x28c234]
push edx
call fcn.1009ecd0
add esp, 0xc
mov eax, dword [ebp - 0x2806b4]
push eax
lea ecx, [ebp - 0x129460]
push ecx
push 0
lea ecx, [ebp - 0x2806a8]
call fcn.10027760
push eax
lea edx, [ebp - 0x28c234]
push edx
lea eax, [ebp - 0x280608]
push eax
mov ecx, dword [ebp - 0x2806ac]
add ecx, 1
push ecx
call fcn.10015c09
add esp, 0x18
mov dword [ebp - 0x2985d8], eax
cmp dword [ebp - 0x2985d8], 0
jne 0x1001455d
mov dword [ebp - 0x2985d8], 0xffffffff
mov dword [ebp - 0x2985d4], 0
jmp 0x10014578
mov edx, dword [ebp - 0x2985d4]
add edx, 1
mov dword [ebp - 0x2985d4], edx
mov eax, dword [ebp - 0x2985d4]
cmp eax, dword [ebp - 0x1a36c4]
jge 0x100145ab
mov ecx, dword [ebp - 0x2985d4]
cmp dword [ebp + ecx*4 - 0x28c234], 0
jle 0x100145a9
mov edx, dword [ebp - 0x2985d4]
mov eax, dword [ebp - 0x2985d8]
mov dword [ebp + edx*4 - 0x297dc4], eax
jmp 0x10014569
jmp 0x100144bf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x28c244]
mov dword [ebp - 0x28c244], eax
mov dword [ebp - 0x2806ac], 0
jmp 0x100145dd
mov ecx, dword [ebp - 0x2806ac]
add ecx, 1
mov dword [ebp - 0x2806ac], ecx
mov edx, dword [ebp - 0x2806ac]
cmp edx, dword [ebp - 0x1a36c4]
jge 0x10014739
mov eax, dword [ebp - 0x2806ac]
cmp dword [ebp + eax*4 - 0x297dc4], 0
jge 0x10014734
mov ecx, dword [ebp - 0x2806ac]
imul ecx, ecx, 0x14
mov edx, dword [ebp + ecx - 0x1a36b0]
push edx
mov eax, dword [ebp - 0x2806ac]
add eax, 1
push eax
lea ecx, [ebp - 0x29872c]
call fcn.100169b0
mov dword [ebp - 0x298848], eax
mov ecx, dword [ebp - 0x298848]
mov dword [ebp - 0x29884c], ecx
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x29884c]
push edx
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x12d304]
add ecx, eax
call fcn.10026ee0
push eax
mov ecx, dword [ebp - 0x28c23c]
sub ecx, 1
shl ecx, 4
mov edx, dword [ebp - 0x12d304]
add ecx, edx
call fcn.100515a0
push eax
call fcn.1001a990
add esp, 0xc
mov esi, eax
mov eax, dword [ebp - 0x28c23c]
sub eax, 1
shl eax, 4
mov ecx, dword [ebp - 0x12d304]
add ecx, eax
call fcn.10026ee0
xor ecx, ecx
cmp esi, eax
sete cl
mov byte [ebp - 0x298724], cl
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x29872c]
call fcn.1000dd40
mov edx, dword [ebp - 0x298724]
and edx, 0xff
test edx, edx
je 0x10014734
mov eax, dword [ebp - 0x2806ac]
imul eax, eax, 0x14
mov ecx, dword [ebp + eax - 0x1a36b0]
push ecx
mov edx, dword [ebp - 0x2806ac]
add edx, 1
push edx
lea ecx, [ebp - 0x298734]
call fcn.100169b0
mov dword [ebp - 0x298850], eax
mov eax, dword [ebp - 0x298850]
mov dword [ebp - 0x298854], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x298854]
push ecx
mov edx, dword [ebp - 0x28c23c]
sub edx, 1
shl edx, 4
mov ecx, dword [ebp - 0x12d304]
add ecx, edx
call fcn.10016e50
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x298734]
call fcn.1000dd40
jmp 0x100145ce
mov eax, dword [ebp - 0x2806b4]
mov dword [ebp - 0x298738], eax
mov ecx, dword [ebp - 0x298738]
push ecx
call fcn.100af3c9
add esp, 4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2806a8]
call fcn.10016e80
jmp 0x10011c6a
push 0x1001
push 0x100cc1b4
lea ecx, [ebp - 0x1498b0]
call fcn.100af4c0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x1498b0]
call fcn.10016830
test eax, eax
je 0x10015001
lea ecx, [ebp - 0x2985e0]
call fcn.10016850
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x2985dc], 0
jmp 0x100147be
mov edx, dword [ebp - 0x2985dc]
add edx, 1
mov dword [ebp - 0x2985dc], edx
mov eax, dword [ebp - 0x14983c]
mov ecx, dword [eax + 0x164]
mov edx, dword [ebp - 0x2985dc]
cmp edx, dword [ecx]
jge 0x10014fe7
mov eax, dword [ebp - 0x2985dc]
shl eax, 4
mov ecx, dword [ebp - 0x14984c]
add ecx, eax
call fcn.10017400
test eax, eax
jne 0x10014845
mov ecx, dword [ebp - 0x2985dc]
shl ecx, 4
mov edx, dword [ebp - 0x1498bc]
add ecx, edx
call fcn.10017400
test eax, eax
jne 0x10014845
mov eax, dword [ebp - 0x2985dc]
shl eax, 4
mov ecx, dword [ebp - 0x12d308]
add ecx, eax
call fcn.10017400
test eax, eax
jne 0x10014845
mov ecx, dword [ebp - 0x2985dc]
shl ecx, 4
mov edx, dword [ebp - 0x12d304]
add ecx, edx
call fcn.10017400
test eax, eax
jne 0x10014845
jmp 0x100147af
push 0x100cc1c0
lea ecx, [ebp - 0x29873c]
call fcn.100aef4b
mov dword [ebp - 0x298858], eax
mov eax, dword [ebp - 0x298858]
mov dword [ebp - 0x29885c], eax
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x29885c]
push ecx
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc1c4
call fcn.100351d6
add esp, 8
push eax
lea edx, [ebp - 0x2985e4]
push edx
call fcn.100af180
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x29873c]
call fcn.100aeedd
mov eax, dword [ebp - 0x2985dc]
add eax, 1
push eax
lea ecx, [ebp - 0x2985e4]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x2985e0]
push ecx
call fcn.100ae2e1
add esp, 0xc
lea ecx, [ebp - 0x2985e0]
call fcn.10016870
push eax
lea ecx, [ebp - 0x2985e0]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x1498b0]
call fcn.100af774
mov dword [ebp - 0x2985e8], 0
jmp 0x10014909
mov edx, dword [ebp - 0x2985e8]
add edx, 1
mov dword [ebp - 0x2985e8], edx
mov eax, dword [ebp - 0x2985dc]
shl eax, 4
mov ecx, dword [ebp - 0x12d308]
add ecx, eax
call fcn.10017400
cmp dword [ebp - 0x2985e8], eax
jae 0x10014a4f
cmp dword [ebp - 0x2985e8], 0
jne 0x100149f3
push 0x100cc1dc
lea ecx, [ebp - 0x298740]
call fcn.100aef4b
mov dword [ebp - 0x298860], eax
mov ecx, dword [ebp - 0x298860]
mov dword [ebp - 0x298864], ecx
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x298864]
push edx
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc1e0
call fcn.100351d6
add esp, 8
push eax
lea eax, [ebp - 0x298744]
push eax
call fcn.100af180
mov dword [ebp - 0x298868], eax
mov ecx, dword [ebp - 0x298868]
mov dword [ebp - 0x29886c], ecx
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x29886c]
push edx
lea ecx, [ebp - 0x2985e0]
call fcn.100af016
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x298744]
call fcn.100aeedd
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x298740]
call fcn.100aeedd
lea ecx, [ebp - 0x2985e0]
call fcn.10016870
push eax
lea ecx, [ebp - 0x2985e0]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x1498b0]
call fcn.100af774
mov eax, dword [ebp - 0x2985e8]
push eax
mov ecx, dword [ebp - 0x2985dc]
shl ecx, 4
mov edx, dword [ebp - 0x12d308]
add ecx, edx
call fcn.10027760
mov eax, dword [eax]
push eax
push 0x100cc1f8
lea ecx, [ebp - 0x2985e0]
push ecx
call fcn.100ae2e1
add esp, 0xc
lea ecx, [ebp - 0x2985e0]
call fcn.10016870
push eax
lea ecx, [ebp - 0x2985e0]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x1498b0]
call fcn.100af774
jmp 0x100148fa
mov dword [ebp - 0x2985e8], 0
jmp 0x10014a6a
mov edx, dword [ebp - 0x2985e8]
add edx, 1
mov dword [ebp - 0x2985e8], edx
mov eax, dword [ebp - 0x2985dc]
shl eax, 4
mov ecx, dword [ebp - 0x1498bc]
add ecx, eax
call fcn.10017400
cmp dword [ebp - 0x2985e8], eax
jae 0x10014bb0
cmp dword [ebp - 0x2985e8], 0
jne 0x10014b54
push 0x100cc200
lea ecx, [ebp - 0x298748]
call fcn.100aef4b
mov dword [ebp - 0x298870], eax
mov ecx, dword [ebp - 0x298870]
mov dword [ebp - 0x298874], ecx
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x298874]
push edx
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc204
call fcn.100351d6
add esp, 8
push eax
lea eax, [ebp - 0x29874c]
push eax
call fcn.100af180
mov dword [ebp - 0x298878], eax
mov ecx, dword [ebp - 0x298878]
mov dword [ebp - 0x29887c], ecx
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x29887c]
push edx
lea ecx, [ebp - 0x2985e0]
call fcn.100af016
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x29874c]
call fcn.100aeedd
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x298748]
call fcn.100aeedd
lea ecx, [ebp - 0x2985e0]
call fcn.10016870
push eax
lea ecx, [ebp - 0x2985e0]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x1498b0]
call fcn.100af774
mov eax, dword [ebp - 0x2985e8]
push eax
mov ecx, dword [ebp - 0x2985dc]
shl ecx, 4
mov edx, dword [ebp - 0x1498bc]
add ecx, edx
call fcn.10027760
mov eax, dword [eax]
push eax
push 0x100cc21c
lea ecx, [ebp - 0x2985e0]
push ecx
call fcn.100ae2e1
add esp, 0xc
lea ecx, [ebp - 0x2985e0]
call fcn.10016870
push eax
lea ecx, [ebp - 0x2985e0]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x1498b0]
call fcn.100af774
jmp 0x10014a5b
mov dword [ebp - 0x2985e8], 0
jmp 0x10014bcb
mov edx, dword [ebp - 0x2985e8]
add edx, 1
mov dword [ebp - 0x2985e8], edx
mov eax, dword [ebp - 0x2985dc]
shl eax, 4
mov ecx, dword [ebp - 0x14984c]
add ecx, eax
call fcn.10017400
cmp dword [ebp - 0x2985e8], eax
jae 0x10014d11
cmp dword [ebp - 0x2985e8], 0
jne 0x10014cb5
push 0x100cc224
lea ecx, [ebp - 0x298750]
call fcn.100aef4b
mov dword [ebp - 0x298880], eax
mov ecx, dword [ebp - 0x298880]
mov dword [ebp - 0x298884], ecx
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x298884]
push edx
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc228
call fcn.100351d6
add esp, 8
push eax
lea eax, [ebp - 0x298754]
push eax
call fcn.100af180
mov dword [ebp - 0x298888], eax
mov ecx, dword [ebp - 0x298888]
mov dword [ebp - 0x29888c], ecx
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x29888c]
push edx
lea ecx, [ebp - 0x2985e0]
call fcn.100af016
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x298754]
call fcn.100aeedd
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x298750]
call fcn.100aeedd
lea ecx, [ebp - 0x2985e0]
call fcn.10016870
push eax
lea ecx, [ebp - 0x2985e0]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x1498b0]
call fcn.100af774
mov eax, dword [ebp - 0x2985e8]
push eax
mov ecx, dword [ebp - 0x2985dc]
shl ecx, 4
mov edx, dword [ebp - 0x14984c]
add ecx, edx
call fcn.10027760
mov eax, dword [eax]
push eax
push 0x100cc23c
lea ecx, [ebp - 0x2985e0]
push ecx
call fcn.100ae2e1
add esp, 0xc
lea ecx, [ebp - 0x2985e0]
call fcn.10016870
push eax
lea ecx, [ebp - 0x2985e0]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x1498b0]
call fcn.100af774
jmp 0x10014bbc
mov dword [ebp - 0x2985e8], 0
jmp 0x10014d2c
mov edx, dword [ebp - 0x2985e8]
add edx, 1
mov dword [ebp - 0x2985e8], edx
mov eax, dword [ebp - 0x2985dc]
shl eax, 4
mov ecx, dword [ebp - 0x149848]
add ecx, eax
call fcn.10017400
cmp dword [ebp - 0x2985e8], eax
jae 0x10014e72
cmp dword [ebp - 0x2985e8], 0
jne 0x10014e16
push 0x100cc244
lea ecx, [ebp - 0x298758]
call fcn.100aef4b
mov dword [ebp - 0x298890], eax
mov ecx, dword [ebp - 0x298890]
mov dword [ebp - 0x298894], ecx
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x298894]
push edx
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc248
call fcn.100351d6
add esp, 8
push eax
lea eax, [ebp - 0x29875c]
push eax
call fcn.100af180
mov dword [ebp - 0x298898], eax
mov ecx, dword [ebp - 0x298898]
mov dword [ebp - 0x29889c], ecx
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x29889c]
push edx
lea ecx, [ebp - 0x2985e0]
call fcn.100af016
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x29875c]
call fcn.100aeedd
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x298758]
call fcn.100aeedd
lea ecx, [ebp - 0x2985e0]
call fcn.10016870
push eax
lea ecx, [ebp - 0x2985e0]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x1498b0]
call fcn.100af774
mov eax, dword [ebp - 0x2985e8]
push eax
mov ecx, dword [ebp - 0x2985dc]
shl ecx, 4
mov edx, dword [ebp - 0x149848]
add ecx, edx
call fcn.10027760
mov eax, dword [eax]
push eax
push 0x100cc25c
lea ecx, [ebp - 0x2985e0]
push ecx
call fcn.100ae2e1
add esp, 0xc
lea ecx, [ebp - 0x2985e0]
call fcn.10016870
push eax
lea ecx, [ebp - 0x2985e0]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x1498b0]
call fcn.100af774
jmp 0x10014d1d
mov dword [ebp - 0x2985e8], 0
jmp 0x10014e8d
mov edx, dword [ebp - 0x2985e8]
add edx, 1
mov dword [ebp - 0x2985e8], edx
mov eax, dword [ebp - 0x2985dc]
shl eax, 4
mov ecx, dword [ebp - 0x12d304]
add ecx, eax
call fcn.10017400
cmp dword [ebp - 0x2985e8], eax
jae 0x10014fd3
cmp dword [ebp - 0x2985e8], 0
jne 0x10014f77
push 0x100cc264
lea ecx, [ebp - 0x298760]
call fcn.100aef4b
mov dword [ebp - 0x2988a0], eax
mov ecx, dword [ebp - 0x2988a0]
mov dword [ebp - 0x2988a4], ecx
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x2988a4]
push edx
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc268
call fcn.100351d6
add esp, 8
push eax
lea eax, [ebp - 0x298764]
push eax
call fcn.100af180
mov dword [ebp - 0x2988a8], eax
mov ecx, dword [ebp - 0x2988a8]
mov dword [ebp - 0x2988ac], ecx
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x2988ac]
push edx
lea ecx, [ebp - 0x2985e0]
call fcn.100af016
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x298764]
call fcn.100aeedd
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x298760]
call fcn.100aeedd
lea ecx, [ebp - 0x2985e0]
call fcn.10016870
push eax
lea ecx, [ebp - 0x2985e0]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x1498b0]
call fcn.100af774
mov eax, dword [ebp - 0x2985e8]
push eax
mov ecx, dword [ebp - 0x2985dc]
shl ecx, 4
mov edx, dword [ebp - 0x12d304]
add ecx, edx
call fcn.10027760
mov eax, dword [eax]
push eax
push str._t_d_r_n
lea ecx, [ebp - 0x2985e0]
push ecx
call fcn.100ae2e1
add esp, 0xc
lea ecx, [ebp - 0x2985e0]
call fcn.10016870
push eax
lea ecx, [ebp - 0x2985e0]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x1498b0]
call fcn.100af774
jmp 0x10014e7e
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2985e4]
call fcn.100aeedd
jmp 0x100147af
lea ecx, [ebp - 0x1498b0]
call fcn.100af838
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x2985e0]
call fcn.100aeedd
lea ecx, [ebp - 0x129450]
call fcn.10016850
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x12944c]
call fcn.10016850
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x132130]
call fcn.10016850
mov byte [ebp - 4], 0x30
lea edx, [ebp - 0x129448]
push edx
push 0x200
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push 0x100cc284
lea eax, [ebp - 0x129448]
push eax
call fcn.1009fb30
add esp, 8
lea ecx, [ebp - 0x129448]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x129470]
call fcn.10016b90
test eax, eax
jbe 0x100151dd
lea ecx, [ebp - 0x129470]
call fcn.10016b90
push eax
push 0x100cc294
lea edx, [ebp - 0x132130]
push edx
call fcn.100ae2e1
add esp, 0xc
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc298
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x129450]
call fcn.100af066
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc2ac
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x12944c]
call fcn.100af066
lea eax, [ebp - 0x129448]
push eax
lea ecx, [ebp - 0x132130]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x12944c]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x129450]
call fcn.1002ad80
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov dword [ebp - 0x149850], 0
jmp 0x10015128
mov ecx, dword [ebp - 0x149850]
add ecx, 1
mov dword [ebp - 0x149850], ecx
lea ecx, [ebp - 0x129470]
call fcn.10016b90
cmp dword [ebp - 0x149850], eax
jae 0x100151dd
mov edx, dword [ebp - 0x149850]
add edx, 1
push edx
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc2c4
call fcn.100351d6
add esp, 8
push eax
lea eax, [ebp - 0x12944c]
push eax
call fcn.100ae2e1
add esp, 0xc
mov ecx, dword [ebp - 0x149850]
push ecx
lea ecx, [ebp - 0x129470]
call fcn.1000e0c0
mov edx, dword [eax]
push edx
push 0x100cc2dc
lea eax, [ebp - 0x132130]
push eax
call fcn.100ae2e1
add esp, 0xc
lea ecx, [ebp - 0x129448]
push ecx
lea ecx, [ebp - 0x132130]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x12944c]
call fcn.1002ad80
push eax
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc2e0
call fcn.100351d6
add esp, 8
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x10015119
lea ecx, [ebp - 0x12d300]
call fcn.10016b90
test eax, eax
jbe 0x10015359
lea ecx, [ebp - 0x12d300]
call fcn.10016b90
push eax
push 0x100cc2f4
lea edx, [ebp - 0x132130]
push edx
call fcn.100ae2e1
add esp, 0xc
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc2f8
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x129450]
call fcn.100af066
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc30c
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x12944c]
call fcn.100af066
lea eax, [ebp - 0x129448]
push eax
lea ecx, [ebp - 0x132130]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x12944c]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x129450]
call fcn.1002ad80
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov dword [ebp - 0x149850], 0
jmp 0x100152a4
mov ecx, dword [ebp - 0x149850]
add ecx, 1
mov dword [ebp - 0x149850], ecx
lea ecx, [ebp - 0x12d300]
call fcn.10016b90
cmp dword [ebp - 0x149850], eax
jae 0x10015359
mov edx, dword [ebp - 0x149850]
add edx, 1
push edx
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc320
call fcn.100351d6
add esp, 8
push eax
lea eax, [ebp - 0x12944c]
push eax
call fcn.100ae2e1
add esp, 0xc
mov ecx, dword [ebp - 0x149850]
push ecx
lea ecx, [ebp - 0x12d300]
call fcn.1000e0c0
mov edx, dword [eax]
push edx
push 0x100cc334
lea eax, [ebp - 0x132130]
push eax
call fcn.100ae2e1
add esp, 0xc
lea ecx, [ebp - 0x129448]
push ecx
lea ecx, [ebp - 0x132130]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x12944c]
call fcn.1002ad80
push eax
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc338
call fcn.100351d6
add esp, 8
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x10015295
lea ecx, [ebp - 0x280618]
call fcn.10016b90
test eax, eax
jbe 0x100154c1
lea ecx, [ebp - 0x280618]
call fcn.10016b90
push eax
push 0x100cc34c
lea edx, [ebp - 0x132130]
push edx
call fcn.100ae2e1
add esp, 0xc
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc350
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x129450]
call fcn.100af066
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc368
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x12944c]
call fcn.100af066
lea eax, [ebp - 0x129448]
push eax
lea ecx, [ebp - 0x132130]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x12944c]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x129450]
call fcn.1002ad80
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov dword [ebp - 0x149850], 0
jmp 0x10015420
mov ecx, dword [ebp - 0x149850]
add ecx, 1
mov dword [ebp - 0x149850], ecx
lea ecx, [ebp - 0x280618]
call fcn.10016b90
cmp dword [ebp - 0x149850], eax
jae 0x100154c1
mov edx, dword [ebp - 0x149850]
add edx, 1
push edx
push 0x100cc37c
lea eax, [ebp - 0x12944c]
push eax
call fcn.100ae2e1
add esp, 0xc
mov ecx, dword [ebp - 0x149850]
push ecx
lea ecx, [ebp - 0x280618]
call fcn.1000e0c0
mov edx, dword [eax]
push edx
push 0x100cc384
lea eax, [ebp - 0x132130]
push eax
call fcn.100ae2e1
add esp, 0xc
lea ecx, [ebp - 0x129448]
push ecx
lea ecx, [ebp - 0x132130]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x12944c]
call fcn.1002ad80
push eax
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc388
call fcn.100351d6
add esp, 8
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x10015411
mov dword [ebp - 0x149844], 0x50
mov dword [ebp - 0x149850], 0
jmp 0x100154e6
mov edx, dword [ebp - 0x149850]
add edx, 1
mov dword [ebp - 0x149850], edx
mov eax, dword [ebp - 0x14983c]
mov ecx, dword [eax + 0x164]
mov edx, dword [ebp - 0x149850]
cmp edx, dword [ecx]
jge 0x100159e0
mov eax, dword [ebp - 0x149850]
shl eax, 4
mov ecx, dword [ebp - 0x12d308]
add ecx, eax
call fcn.10017400
test eax, eax
jne 0x10015587
mov ecx, dword [ebp - 0x149850]
shl ecx, 4
mov edx, dword [ebp - 0x1498bc]
add ecx, edx
call fcn.10017400
test eax, eax
jne 0x10015587
mov eax, dword [ebp - 0x149850]
shl eax, 4
mov ecx, dword [ebp - 0x14984c]
add ecx, eax
call fcn.10017400
test eax, eax
jne 0x10015587
mov ecx, dword [ebp - 0x149850]
shl ecx, 4
mov edx, dword [ebp - 0x12d304]
add ecx, edx
call fcn.10017400
test eax, eax
jne 0x10015587
mov eax, dword [ebp - 0x149850]
shl eax, 4
mov ecx, dword [ebp - 0x149848]
add ecx, eax
call fcn.10017400
test eax, eax
jne 0x10015587
jmp 0x100154d7
mov ecx, dword [ebp - 0x149850]
add ecx, 1
push ecx
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc3a0
call fcn.100351d6
add esp, 8
push eax
lea edx, [ebp - 0x129450]
push edx
call fcn.100ae2e1
add esp, 0xc
mov dword [ebp - 0x2985f0], 0
jmp 0x100155d4
mov eax, dword [ebp - 0x2985f0]
add eax, 1
mov dword [ebp - 0x2985f0], eax
cmp dword [ebp - 0x2985f0], 5
jge 0x100159db
cmp dword [ebp - 0x2985f0], 0
jne 0x100155f6
mov ecx, dword [ebp - 0x12d308]
mov dword [ebp - 0x2985f8], ecx
cmp dword [ebp - 0x2985f0], 1
jne 0x1001560b
mov edx, dword [ebp - 0x14984c]
mov dword [ebp - 0x2985f8], edx
cmp dword [ebp - 0x2985f0], 2
jne 0x10015620
mov eax, dword [ebp - 0x12d304]
mov dword [ebp - 0x2985f8], eax
cmp dword [ebp - 0x2985f0], 3
jne 0x10015635
mov ecx, dword [ebp - 0x149848]
mov dword [ebp - 0x2985f8], ecx
cmp dword [ebp - 0x2985f0], 4
jne 0x1001564a
mov edx, dword [ebp - 0x1498bc]
mov dword [ebp - 0x2985f8], edx
mov dword [ebp - 0x2985f4], 0
jmp 0x10015665
mov eax, dword [ebp - 0x2985f4]
add eax, 1
mov dword [ebp - 0x2985f4], eax
mov ecx, dword [ebp - 0x149850]
shl ecx, 4
mov edx, dword [ebp - 0x2985f8]
add ecx, edx
call fcn.10017400
cmp dword [ebp - 0x2985f4], eax
jae 0x100159d6
cmp dword [ebp - 0x2985f4], 0
jne 0x10015932
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc3b8
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x12944c]
call fcn.100af066
push 0x100cc3cc
lea ecx, [ebp - 0x132130]
call fcn.100af066
lea eax, [ebp - 0x129448]
push eax
push 0x50
lea ecx, [ebp - 0x14990c]
push ecx
lea ecx, [ebp - 0x132130]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x12944c]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x129450]
call fcn.1002ad80
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x14990c]
push edx
call fcn.1009fb0f
add esp, 4
add eax, 1
mov dword [ebp - 0x2985ec], eax
mov eax, dword [ebp - 0x2985ec]
push eax
push 0x100cc3d0
lea ecx, [ebp - 0x132130]
push ecx
call fcn.100ae2e1
add esp, 0xc
lea edx, [ebp - 0x129448]
push edx
lea ecx, [ebp - 0x132130]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x12944c]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x129450]
call fcn.1002ad80
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebp - 0x2985ec]
push eax
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc3d4
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x12944c]
push ecx
call fcn.100ae2e1
add esp, 0xc
cmp dword [ebp - 0x2985f0], 0
jne 0x100157c2
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc3e8
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x132130]
call fcn.100af066
cmp dword [ebp - 0x2985f0], 1
jne 0x100157ef
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc400
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x132130]
call fcn.100af066
cmp dword [ebp - 0x2985f0], 2
jne 0x1001581c
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc414
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x132130]
call fcn.100af066
cmp dword [ebp - 0x2985f0], 3
jne 0x10015849
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc428
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x132130]
call fcn.100af066
cmp dword [ebp - 0x2985f0], 4
jne 0x10015876
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc43c
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x132130]
call fcn.100af066
lea edx, [ebp - 0x129448]
push edx
lea ecx, [ebp - 0x132130]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x12944c]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x129450]
call fcn.1002ad80
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebp - 0x2985ec]
push eax
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc454
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x12944c]
push ecx
call fcn.100ae2e1
add esp, 0xc
mov edx, dword [ebp - 0x149850]
shl edx, 4
mov ecx, dword [ebp - 0x2985f8]
add ecx, edx
call fcn.10017400
push eax
push 0x100cc468
lea eax, [ebp - 0x132130]
push eax
call fcn.100ae2e1
add esp, 0xc
lea ecx, [ebp - 0x129448]
push ecx
lea ecx, [ebp - 0x132130]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x12944c]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x129450]
call fcn.1002ad80
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov edx, dword [ebp - 0x2985f4]
add edx, 1
push edx
mov eax, dword [ebp - 0x2985ec]
push eax
mov ecx, 0x100d2d54
call fcn.1002ad80
push eax
push 0x100cc46c
call fcn.100351d6
add esp, 8
push eax
lea ecx, [ebp - 0x12944c]
push ecx
call fcn.100ae2e1
add esp, 0x10
mov edx, dword [ebp - 0x2985f4]
push edx
mov eax, dword [ebp - 0x149850]
shl eax, 4
mov ecx, dword [ebp - 0x2985f8]
add ecx, eax
call fcn.10027760
mov ecx, dword [eax + 4]
push ecx
push 0x100cc47c
lea edx, [ebp - 0x132130]
push edx
call fcn.100ae2e1
add esp, 0xc
lea eax, [ebp - 0x129448]
push eax
lea ecx, [ebp - 0x132130]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x12944c]
call fcn.1002ad80
push eax
lea ecx, [ebp - 0x129450]
call fcn.1002ad80
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x10015656
jmp 0x100155c5
jmp 0x100154d7
mov ecx, dword [ebp - 0x12d308]
mov dword [ebp - 0x29876c], ecx
mov edx, dword [ebp - 0x29876c]
mov dword [ebp - 0x298768], edx
cmp dword [ebp - 0x298768], 0
je 0x10015a16
push 3
mov ecx, dword [ebp - 0x298768]
call fcn.10016ab0
mov dword [ebp - 0x2988b0], eax
jmp 0x10015a20
mov dword [ebp - 0x2988b0], 0
mov eax, dword [ebp - 0x1498bc]
mov dword [ebp - 0x298774], eax
mov ecx, dword [ebp - 0x298774]
mov dword [ebp - 0x298770], ecx
cmp dword [ebp - 0x298770], 0
je 0x10015a56
push 3
mov ecx, dword [ebp - 0x298770]
call fcn.10016ab0
mov dword [ebp - 0x2988b4], eax
jmp 0x10015a60
mov dword [ebp - 0x2988b4], 0
mov edx, dword [ebp - 0x14984c]
mov dword [ebp - 0x29877c], edx
mov eax, dword [ebp - 0x29877c]
mov dword [ebp - 0x298778], eax
cmp dword [ebp - 0x298778], 0
je 0x10015a96
push 3
mov ecx, dword [ebp - 0x298778]
call fcn.10016ab0
mov dword [ebp - 0x2988b8], eax
jmp 0x10015aa0
mov dword [ebp - 0x2988b8], 0
mov ecx, dword [ebp - 0x149848]
mov dword [ebp - 0x298784], ecx
mov edx, dword [ebp - 0x298784]
mov dword [ebp - 0x298780], edx
cmp dword [ebp - 0x298780], 0
je 0x10015ad6
push 3
mov ecx, dword [ebp - 0x298780]
call fcn.10016ab0
mov dword [ebp - 0x2988bc], eax
jmp 0x10015ae0
mov dword [ebp - 0x2988bc], 0
mov eax, dword [ebp - 0x12d304]
mov dword [ebp - 0x29878c], eax
mov ecx, dword [ebp - 0x29878c]
mov dword [ebp - 0x298788], ecx
cmp dword [ebp - 0x298788], 0
je 0x10015b16
push 3
mov ecx, dword [ebp - 0x298788]
call fcn.10016ab0
mov dword [ebp - 0x2988c0], eax
jmp 0x10015b20
mov dword [ebp - 0x2988c0], 0
mov edx, dword [ebp - 0x12d30c]
mov dword [ebp - 0x298794], edx
mov eax, dword [ebp - 0x298794]
mov dword [ebp - 0x298790], eax
cmp dword [ebp - 0x298790], 0
je 0x10015b56
push 3
mov ecx, dword [ebp - 0x298790]
call fcn.10016a20
mov dword [ebp - 0x2988c4], eax
jmp 0x10015b60
mov dword [ebp - 0x2988c4], 0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x132130]
call fcn.100aeedd
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x12944c]
call fcn.100aeedd
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x129450]
call fcn.100aeedd
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1498b0]
call fcn.100af560
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x129240]
call fcn.1001ad52
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x280608]
call fcn.1001ad52
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x280618]
call fcn.1000e0e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x12d300]
call fcn.1000e0e0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x129470]
call fcn.1000e0e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x129460]
call fcn.10016a90
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret