Function at 0x10045c20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x98
mov eax, dword [0x101f1014]
xor eax, ebp
mov dword [esp + 0x90], eax
movzx edi, byte [ecx + 0x2c]
xor esi, esi
inc esi
xor eax, eax
mov dword [esp + 0x18], edi
cmp edi, 2
setne al
lea eax, [eax + eax*4 + 5]
cmovb eax, esi
mov dword [esp + 0x20], eax
mov edi, dword [ecx]
xor esi, esi
mov ebx, 0
mov dword [esp + 0x44], edx
test dx, dx
je 0x10045c76
mov eax, dword [ecx + 8]
test eax, eax
je 0x10045c76
mov ebx, dword [eax]
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x18]
lea edx, [eax*4 + 0x20]
imul edx, dword [esp + 0x20]
mov dword [esp + 0x38], ebx
add edx, ebx
add edx, edx
mov eax, edx
sar eax, 0x1f
mov dword [esp + 0x54], edi
mov ecx, dword [edi]
movzx edi, word [ecx + 0x12c]
cmp edi, edx
sbb esi, eax
jb 0x10045cd2
cmp edx, 0x80
mov ebx, dword [esp + 0x18]
ja 0x10045cfc
mov esi, dword [ecx + 0x150]
test esi, esi
je 0x10045cee
mov eax, dword [esi]
mov dword [ecx + 0x150], eax
inc dword [ecx + 0x138]
mov eax, esi
jmp 0x10045d2f
cmp dword [ecx + 0x128], 0
je 0x10046695
cmp byte [ecx + 0x57], 0
mov ebx, dword [esp + 0x18]
je 0x10045d1e
jmp 0x10046285
mov esi, dword [ecx + 0x14c]
test esi, esi
jne 0x100464cb
mov esi, dword [ecx + 0x148]
test esi, esi
jne 0x10046457
mov esi, dword [ecx + 0x144]
test esi, esi
jne 0x10046688
inc dword [ecx + 0x140]
push eax
call fcn.101372d0
add esp, 4
test eax, eax
je 0x10046285
mov ecx, dword [esp + 0x38]
add ecx, ecx
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x20]
mov edi, edx
shl edi, 5
lea ecx, [eax + edi]
xorps xmm0, xmm0
movups xmmword [eax + edi + 0x10], xmm0
movups xmmword [eax + edi], xmm0
mov dword [esp + 0x14], ecx
lea esi, [ecx + edi]
lea ecx, [edx + edx]
inc ecx
mov dword [esp + 0x5c], eax
lea edx, [eax + 0x18]
mov dword [edx], esi
lea esi, [esi + ebx*4]
dec ecx
add edx, 0x20
cmp ecx, 1
ja 0x10045d63
cmp dword [esp + 0x38], 0
jne 0x100463e7
mov eax, dword [esp + 0x54]
mov ecx, dword [eax + 0x8c]
cmp ecx, 0x30
mov eax, 0x30
cmovb eax, ecx
xor esi, esi
mov ecx, dword [esp + 0x5c]
mov word [ecx + edi + 0x10], ax
mov eax, ecx
test ebx, ebx
mov ecx, dword [esp + 0x20]
mov edx, 1
je 0x10046240
cmp ecx, 3
mov edi, 2
cmovae edi, ecx
mov dword [esp + 0x7c], edi
mov dword [esp + 0x34], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov edi, dword [esp + 0x10]
test edx, edx
jle 0x1004629b
mov ecx, eax
mov eax, dword [esp + 0x34]
lea eax, [eax*4]
mov dword [esp + 0x64], eax
lea eax, [ecx + 0x34]
mov dword [esp + 0x78], eax
mov dword [esp + 0x6c], 0
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x24], edx
mov dword [esp + 0x50], esi
mov edi, dword [edi + 0x40]
test edi, edi
je 0x10046150
mov dword [esp + 0xc], ebx
mov esi, dword [ebx]
mov edx, dword [ebx + 4]
mov eax, esi
mov ecx, edx
not ecx
and ecx, dword [edi + 4]
not eax
and eax, dword [edi]
or eax, ecx
jne 0x10045ec4
mov ecx, edx
mov edx, dword [edi + 8]
mov eax, dword [edi + 0xc]
mov dword [esp + 0x70], eax
mov dword [esp + 0x80], ecx
and eax, ecx
mov ecx, edx
mov dword [esp + 0x84], esi
and ecx, esi
or ecx, eax
jne 0x10045ec4
test byte [edi + 0x2d], 0x40
movzx eax, word [ebx + 0x10]
mov esi, dword [esp + 0x50]
je 0x10045e7f
cmp ax, 3
jl 0x10045ec4
mov dword [esp + 0x68], edx
movzx edx, word [edi + 0x14]
mov dword [esp + 0x40], eax
add dx, ax
movzx eax, word [edi + 0x12]
mov dword [esp + 4], eax
cwde
movsx ecx, dx
cmp ax, cx
jl 0x10045edc
lea edx, [ecx + 0x31]
cmp edx, eax
jl 0x100460a8
lea edx, [ecx + 0x1f]
cmp edx, eax
jl 0x1004648e
mov edx, eax
sub edx, ecx
movzx ecx, byte [edx + str._n_n_t_t_b_b_a_a_a]
add eax, ecx
jmp 0x10045eed
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x24]
mov edi, dword [edi + 0x3c]
test edi, edi
jne 0x10045e31
jmp 0x10046150
lea ebx, [eax + 0x31]
cmp ebx, ecx
jge 0x1004619a
mov eax, edx
mov ebx, dword [esp + 0xc]
movzx edx, word [ebx + 0x14]
mov dword [esp + 4], eax
cwde
movsx ecx, dx
cmp ax, cx
jl 0x10045f23
lea edx, [ecx + 0x31]
cmp edx, eax
jl 0x10045f36
lea edx, [ecx + 0x1f]
cmp edx, eax
jl 0x10046498
mov edx, eax
sub edx, ecx
movzx ecx, byte [edx + str._n_n_t_t_b_b_a_a_a]
add eax, ecx
mov dword [esp + 4], eax
jmp 0x10045f36
lea ebx, [eax + 0x31]
cmp ebx, ecx
jge 0x100461aa
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0x40]
add ax, word [edi + 0x16]
mov dword [esp + 0x40], eax
mov al, byte [ebx + 0x16]
test al, al
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x38]
js 0x100460da
movsd xmm0, qword [ebx + 8]
movsd qword [esp + 0x88], xmm0
test al, al
mov ebx, eax
mov eax, dword [esp + 4]
mov byte [esp + 0xb], bl
js 0x10045f7c
movsx ebx, bl
sub ecx, ebx
jg 0x10046179
mov ecx, eax
mov dword [esp], ecx
lea ecx, [eax - 2]
mov dword [esp + 4], ecx
cmp dword [esp + 0x34], 0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x84]
jne 0x10045fa4
test byte [edi + 0x2f], 2
jne 0x100466a4
test eax, eax
jg 0x10046065
mov ebx, eax
cmp eax, edx
mov ecx, eax
jge 0x10046724
xor eax, eax
cmp ecx, edx
setl al
add ecx, eax
mov dword [esp + 0x30], ecx
shl ebx, 5
add ebx, dword [esp + 0x1c]
mov eax, dword [edi + 0xc]
mov esi, edi
mov edi, dword [esp + 0xc]
or eax, dword [edi + 4]
mov ecx, dword [esi + 8]
or ecx, dword [edi]
mov dword [ebx], ecx
mov dword [ebx + 4], eax
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov dword [ebx + 0xc], ecx
mov dword [ebx + 8], eax
mov eax, dword [esp + 0x40]
mov word [ebx + 0x10], ax
mov eax, dword [esp]
mov word [ebx + 0x12], ax
mov eax, dword [esp + 4]
mov word [ebx + 0x14], ax
mov al, byte [esp + 0xb]
mov byte [ebx + 0x16], al
cmp dword [esp + 0x64], 0
jne 0x10046124
mov eax, dword [ebx + 0x18]
mov ecx, dword [esp + 0x34]
mov dword [eax + ecx*4], esi
cmp dword [esp + 0x30], edx
mov ecx, dword [esp + 0x1c]
mov edi, esi
jl 0x100460b1
mov dword [esp + 0x3c], 0
movzx eax, word [ecx + 0x10]
mov dword [esp + 0x4c], eax
movzx eax, word [ecx + 0x12]
mov dword [esp + 0x48], eax
cmp byte [esp + 0x18], 2
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0xc]
jb 0x10045ecc
jmp 0x100467d1
or dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x80]
or dword [esp + 0x70], ecx
mov ecx, eax
mov ebx, dword [esp + 0x1c]
mov edx, dword [ebx]
xor edx, dword [esp + 0x68]
mov eax, dword [ebx + 4]
xor eax, dword [esp + 0x70]
or eax, edx
jne 0x10046094
mov al, byte [ebx + 0x16]
xor al, byte [esp + 0xb]
jns 0x100460be
add ebx, 0x20
dec ecx
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
je 0x10045fac
jmp 0x1004607a
mov eax, dword [esp + 4]
jmp 0x10045eed
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0xc]
jmp 0x10045ecc
mov eax, dword [esp]
cmp word [ebx + 0x12], ax
jl 0x10046143
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
jne 0x10045fcc
jmp 0x10046506
xor eax, eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x10]
movzx eax, word [ecx + 0x28]
mov dword [esp], eax
mov edx, dword [ecx + 8]
movzx ebx, word [esp + 0x34]
lea eax, [esp + 0x88]
push eax
push edi
push ebx
push dword [esp + 0xc]
push dword [esp + 0x1c]
call fcn.10049ec0
mov edx, dword [esp + 0x34]
add esp, 0x14
mov ecx, dword [esp + 0x38]
jmp 0x10045f63
push dword [esp + 0x64]
mov eax, dword [esp + 0x10]
push dword [eax + 0x18]
push dword [ebx + 0x18]
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esp + 0x2c]
add esp, 0xc
jmp 0x1004601f
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x1c]
jmp 0x100460b5
mov eax, dword [esp + 0x6c]
inc eax
add ebx, 0x20
mov dword [esp + 0x6c], eax
cmp eax, edx
mov edi, dword [esp + 0x10]
jne 0x10045e22
jmp 0x100461ba
add eax, 3
mov dword [esp], eax
mov edx, dword [esp + 0x20]
jmp 0x10045f88
movzx edx, word [esi + ebx*2]
test dx, dx
je 0x10046539
movsx ebx, ax
movsx ecx, dx
cmp ax, cx
jge 0x100464a1
jmp 0x100464d8
lea ebx, [eax + 0x1f]
cmp ebx, ecx
jge 0x10046464
jmp 0x1004652d
lea ebx, [eax + 0x1f]
cmp ebx, ecx
jge 0x10046478
jmp 0x10046533
mov edx, dword [esp + 0x34]
inc edx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x14], ecx
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x24], ebx
mov esi, edx
mov dword [esp + 0x34], edx
mov esi, dword [esp + 0x50]
cmp edx, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
jne 0x10045de2
test ebx, ebx
je 0x1004629b
cmp ebx, 2
jge 0x10046818
mov esi, ecx
mov eax, dword [edi + 4]
mov dword [esp + 4], eax
lea ecx, [edi + 0x348]
xor edx, edx
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x14]
mov esi, dword [eax + 0x18]
mov esi, dword [esi + edx*4]
mov dword [ecx], esi
movzx ebx, byte [esi + 0x10]
mov byte [ecx - 0x14], bl
lea esi, [ebx + ebx*8]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 4]
mov esi, dword [eax + esi*8 + 0x34]
mov dword [ecx - 0x4c], esi
mov esi, dword [esp + 0x14]
inc edx
add ecx, 0x60
cmp ebx, edx
jne 0x1004620d
jmp 0x10046248
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
movzx eax, word [edi + 0x28]
and eax, 0x180
cmp eax, 0x100
je 0x1004675c
mov edx, dword [edi + 8]
mov ecx, dword [edi + 0x30]
mov eax, ecx
and eax, 0xfffffffb
mov dword [edi + 0x30], eax
test edx, edx
jne 0x100462af
movzx eax, word [esi + 0x10]
mov word [edi + 0x34], ax
mov esi, dword [esp + 0x54]
mov ecx, dword [esi]
mov edx, dword [esp + 0x5c]
call fcn.10129dd0
mov ecx, dword [esp + 0x90]
xor ecx, ebp
call fcn.10157a00
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push str.no_query_solution
mov esi, dword [esp + 0x58]
push esi
call fcn.10046a40
add esp, 8
jmp 0x1004627a
movsx ebx, byte [esi + 0x16]
mov byte [edi + 0x2d], bl
movzx eax, word [edi + 0x28]
test al, al
js 0x100466e1
movsd xmm0, qword [esi + 8]
movsd qword [edi + 0x48], xmm0
test bl, bl
jg 0x10046424
mov byte [edi + 0x2d], 0
mov ebx, dword [esp + 0x18]
test ebx, ebx
je 0x1004635b
mov dword [esp + 0x14], esi
mov ecx, dword [esi + 0x18]
mov esi, dword [ecx + ebx*4 - 4]
mov ecx, dword [esi + 0x2c]
bt ecx, 0xc
jb 0x1004644e
and ecx, 0x104
cmp ecx, 0x104
je 0x1004644e
lea eax, [ebx - 1]
xor ecx, ecx
lea edi, [esp + 0x88]
mov dword [edi + 4], ecx
mov dword [edi], ecx
movzx eax, ax
mov ecx, dword [esp + 0x10]
push edi
mov edi, dword [esp + 0x14]
push esi
push eax
push 0x800
mov esi, dword [esp + 0x24]
push esi
call fcn.10049ec0
add esp, 0x14
movsx eax, al
mov edx, dword [edi + 8]
cmp dword [edx], eax
jne 0x10046357
or byte [edi + 0x30], 4
movsd xmm0, qword [esp + 0x88]
movsd qword [edi + 0x48], xmm0
movzx eax, word [edi + 0x28]
bt eax, 9
jae 0x1004626e
movsx eax, byte [edi + 0x2d]
cmp dword [edx], eax
jne 0x1004626e
test bl, bl
je 0x1004626e
xor eax, eax
lea ecx, [esp + 0x88]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov eax, dword [esi + 0x18]
mov dword [esp + 4], eax
lea ecx, [ebx - 1]
movzx eax, cx
mov dword [esp + 0x20], eax
mov ecx, edi
lea eax, [esp + 0x88]
push eax
mov eax, dword [esp + 8]
push dword [eax + ebx*4 - 4]
push dword [esp + 0x28]
xor eax, eax
push eax
mov ebx, esi
push esi
call fcn.10049ec0
add esp, 0x14
movsx eax, al
mov ecx, dword [edi + 8]
cmp dword [ecx], eax
jne 0x100463dc
mov eax, dword [esp + 0x10]
or byte [eax + 0x30], 8
movsd xmm0, qword [esp + 0x88]
movsd qword [eax + 0x48], xmm0
mov edi, dword [esp + 0x10]
mov esi, ebx
jmp 0x1004626e
push dword [esp + 4]
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x54]
mov ecx, dword [eax + 0x8c]
cmp ecx, 0x30
mov eax, 0x30
cmovb eax, ecx
xor ecx, ecx
mov edx, ebx
neg edx
sbb ecx, ecx
or cl, byte [esp + 0x38]
mov edx, dword [esp + 0x5c]
mov byte [edx + edi + 0x16], cl
jmp 0x10045d93
cmp dword [esp + 0x18], 0
je 0x100466fb
cmp bl, 1
jne 0x100466fb
mov dword [esp + 0x14], esi
mov esi, eax
and esi, 3
test si, si
mov ebx, dword [esp + 0x18]
jne 0x10046719
mov esi, dword [esp + 0x14]
jmp 0x1004635b
mov eax, dword [esi]
mov dword [ecx + 0x148], eax
jmp 0x10045cc8
mov edx, ecx
sub edx, eax
movzx eax, byte [edx + str._n_n_t_t_b_b_a_a_a]
add ecx, eax
mov eax, ecx
jmp 0x10045ee9
mov edx, ecx
sub edx, eax
movzx eax, byte [edx + str._n_n_t_t_b_b_a_a_a]
add ecx, eax
mov dword [esp + 4], ecx
jmp 0x10045f32
mov eax, dword [esp + 4]
inc eax
jmp 0x10045eed
inc dword [esp + 4]
jmp 0x10045f36
mov edx, ebx
lea ebx, [ecx + 0x31]
cmp ebx, edx
jl 0x1004616a
lea eax, [ecx + 0x1f]
cmp eax, edx
jl 0x100466d7
sub edx, ecx
movzx eax, byte [edx + str._n_n_t_t_b_b_a_a_a]
add eax, dword [esp + 4]
jmp 0x1004616a
mov eax, dword [esi]
mov dword [ecx + 0x14c], eax
jmp 0x10045cc8
mov eax, edx
mov edx, ebx
add ebx, 0x31
cmp ebx, ecx
jl 0x1004616a
lea ebx, [edx + 0x1f]
cmp ebx, ecx
jl 0x10046713
mov eax, ecx
sub eax, edx
movzx eax, byte [eax + str._n_n_t_t_b_b_a_a_a]
add ecx, eax
mov eax, ecx
jmp 0x1004616a
mov eax, dword [esp + 0x40]
cmp word [ebx + 0x10], ax
jl 0x100460b1
jne 0x10045fcc
mov eax, dword [esp + 4]
cmp word [ebx + 0x14], ax
jle 0x100460b1
jmp 0x10045fcc
inc edx
jmp 0x10045ee7
inc edx
jmp 0x10045f2e
mov dword [esp + 0x60], ebx
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x1c]
mov ebx, dword [eax]
lea eax, [ebx + 0x3b]
mov edx, 0x88888889
imul edx
lea eax, [edx + ebx]
add eax, 0x3b
mov edx, eax
shr edx, 0x1f
sar eax, 4
add eax, edx
cmp eax, 8
jae 0x10046844
cmp eax, 2
jb 0x1004689d
mov edx, eax
sar edx, 0x1f
mov dword [esp], eax
mov bx, 0x28
mov eax, edx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
add ebx, 0xfffffff6
mov dword [esp + 0x28], ebx
mov ebx, dword [esp]
shld eax, ebx, 1
cmp ebx, 4
lea ebx, [ebx + ebx]
mov dword [esp], ebx
mov ebx, dword [esp + 0x28]
sbb edx, 0
mov edx, eax
jb 0x10046583
mov edx, dword [esp]
mov eax, ebx
and edx, 7
mov ebx, eax
add bx, word [edx + edx + 0x101b7f46]
add ebx, 0xfffffff6
add ebx, dword [esp + 0x44]
cmp byte [esp + 0xb], 0
jg 0x100468a4
mov eax, dword [esp + 0x10]
movzx eax, word [eax + 0x28]
bt eax, 0xe
jb 0x100466b2
mov ecx, dword [esp + 0x44]
lea edx, [ecx - 0xa]
test eax, 0x100
cmove edx, ecx
cmp cx, 0xb
cmovl edx, ecx
mov ecx, edx
xor edx, edx
cmp cx, 0xb
jl 0x10046704
mov dword [esp + 0x28], ebx
mov ebx, ecx
movzx eax, cx
mov cx, 0x28
mov dword [esp], ecx
cmp eax, 0x100
jae 0x100468ee
cmp eax, 0x10
mov ebx, edx
sbb ebx, 0
jb 0x10046660
mov ebx, edx
mov ecx, edx
mov edx, dword [esp]
mov dword [esp], eax
add edx, 0xa
mov dword [esp + 0x2c], ecx
mov eax, ecx
mov ecx, dword [esp]
shld eax, ecx, 0x1f
shr ebx, 1
mov ecx, 0x1f
cmp ecx, dword [esp]
mov ecx, 0
sbb ecx, dword [esp + 0x2c]
mov ecx, ebx
jb 0x10046633
mov dword [esp], edx
and eax, 7
mov edx, dword [esp]
add dx, word [eax + eax + 0x101b7f46]
add edx, 0xffffffd5
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x60]
mov ebx, dword [esp + 0x28]
add edx, ebx
mov word [esi + ecx*2], dx
jmp 0x10046186
mov eax, dword [esi]
mov dword [ecx + 0x144], eax
jmp 0x10045cc8
inc dword [ecx + 0x13c]
mov ebx, dword [esp + 0x18]
jmp 0x10045d1e
add dword [esp], 0xfffffff6
add dword [esp + 0x40], 0xffffffe2
jmp 0x10045fa4
lea eax, [ebx + 0x10]
add ebx, 0xa
cmp byte [esp + 0xb], 0
cmovne ebx, eax
mov eax, dword [esp + 0x10]
movzx ecx, word [eax + 0x2a]
mov eax, dword [esp + 0x44]
cmp cx, ax
cmovge ecx, eax
jmp 0x100465fb
mov eax, dword [esp + 4]
inc eax
jmp 0x1004616a
movsx ecx, byte [esi + 0x16]
cmp dword [edx], ecx
jne 0x100466ed
mov byte [edi + 0x2f], 2
mov ecx, dword [edi + 0x10]
mov ecx, dword [ecx + 0x30]
test ecx, ecx
jne 0x10046a1b
mov ebx, dword [esp + 0x18]
jmp 0x1004635b
xor edx, edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x60]
jmp 0x1004667d
inc eax
jmp 0x1004616a
or ecx, 4
mov dword [edi + 0x30], ecx
jmp 0x1004644e
mov ecx, dword [esp]
cmp cx, word [esp + 0x48]
jg 0x10046143
mov ebx, dword [esp + 0x3c]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x30]
jne 0x10045fb8
mov ebx, dword [esp + 0x3c]
mov eax, dword [esp + 4]
cmp ax, word [esp + 0x4c]
jge 0x10046143
jmp 0x10045fb8
cmp word [esp + 0x44], 0
je 0x1004625c
cmp byte [edi + 0x2f], 0
jne 0x1004625c
mov eax, dword [esi + 0x18]
mov dword [esp + 4], eax
lea ecx, [ebx - 1]
mov edx, dword [edi + 0xc]
mov eax, ebx
mov ebx, edi
movzx ecx, cx
mov dword [esp + 0x20], ecx
mov ecx, edi
lea edi, [esp + 0x88]
push edi
mov edi, dword [esp + 8]
push dword [edi + eax*4 - 4]
push dword [esp + 0x28]
push 0x80
mov dword [esp + 0x24], esi
push esi
call fcn.10049ec0
add esp, 0x14
movsx eax, al
mov ecx, dword [ebx + 0xc]
cmp dword [ecx], eax
jne 0x100467c4
mov eax, dword [esp + 0x10]
mov byte [eax + 0x2f], 2
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
jmp 0x1004625c
mov dword [esp + 0x3c], 0
xor eax, eax
inc eax
mov ecx, dword [esp + 0x78]
movzx edx, word [ecx - 2]
cmp dx, word [esp + 0x48]
jle 0x1004680a
movzx ebx, word [ecx]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x48], edx
mov dword [esp + 0x3c], eax
inc eax
add ecx, 0x20
cmp dword [esp + 0x7c], eax
je 0x10046143
jmp 0x100467e0
jne 0x100467fa
movzx ebx, word [ecx]
cmp bx, word [esp + 0x4c]
jg 0x100467ee
jmp 0x100467fa
dec ebx
lea eax, [ecx + 0x20]
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
movzx ecx, word [ecx + 0x12]
mov esi, eax
cmp cx, word [eax + 0x12]
jg 0x10046834
mov esi, dword [esp + 0x1c]
add eax, 0x20
mov dword [esp + 0x1c], esi
dec ebx
je 0x100461fa
jmp 0x10046820
mov dword [esp + 0x58], edi
mov edx, eax
cmp eax, 0x100
jb 0x10046931
mov edi, edx
sar edi, 0x1f
mov ax, 0x28
mov ebx, edx
mov esi, edi
mov dword [esp], edi
add eax, 0x28
mov dword [esp + 0x28], esi
mov edi, esi
mov edx, ebx
shld edi, ebx, 0x1c
mov esi, dword [esp]
shr esi, 4
mov dword [esp], 0
mov ebx, 0xfff
cmp ebx, edx
mov edx, dword [esp]
sbb edx, dword [esp + 0x28]
mov edx, edi
mov ebx, edi
mov dword [esp], esi
jb 0x10046865
jmp 0x1004693d
xor ebx, ebx
jmp 0x100465c2
mov dword [esp + 0x28], ebx
mov dword [esp + 0x58], edi
imul eax, ecx, 0x64
cdq
idiv dword [esp + 0x38]
cmp eax, 8
jae 0x10046995
mov cx, 0xffbe
cmp eax, 2
jb 0x10046a08
mov edx, eax
sar edx, 0x1f
mov cx, 0x28
mov ebx, edx
add ecx, 0xfffffff6
shld ebx, eax, 1
cmp eax, 4
lea eax, [eax + eax]
sbb edx, 0
mov edx, ebx
jb 0x100468d5
jmp 0x100469fa
movzx eax, bx
mov dword [esp + 0x2c], eax
xor ebx, ebx
mov ax, 0x28
mov dword [esp], eax
xor edx, edx
add dword [esp], 0x28
mov ecx, ebx
mov eax, ebx
mov ebx, dword [esp + 0x2c]
shld eax, ebx, 0x1c
shr edx, 4
mov ebx, 0xfff
cmp ebx, dword [esp + 0x2c]
mov ebx, 0
sbb ebx, ecx
mov dword [esp + 0x2c], eax
mov ebx, edx
jae 0x10046622
jmp 0x10046900
mov eax, edx
sar eax, 0x1f
mov dword [esp], eax
mov ax, 0x28
cmp edx, 0x10
mov ebx, dword [esp]
sbb ebx, 0
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x58]
jb 0x100465b2
mov dword [esp + 0x28], edx
add eax, 0xa
mov edx, dword [esp]
mov ebx, dword [esp + 0x28]
shld edx, ebx, 0x1f
mov ebx, dword [esp]
shr ebx, 1
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x74], 0
mov ebx, 0x1f
cmp ebx, dword [esp + 0x28]
mov ebx, dword [esp + 0x74]
sbb ebx, dword [esp]
mov ebx, dword [esp + 0x2c]
mov dword [esp], ebx
jb 0x10046954
jmp 0x100465b2
mov edx, eax
sar edx, 0x1f
mov cx, 0x28
cmp eax, 0x100
jb 0x100469cc
mov esi, eax
mov edi, edx
add ecx, 0x28
mov eax, edi
shld eax, esi, 0x1c
shr edx, 4
mov dword [esp], 0
mov ebx, 0xfff
cmp ebx, esi
sbb dword [esp], edi
mov esi, eax
mov edi, edx
jb 0x100469a9
cmp eax, 0x10
mov ebx, edx
sbb ebx, 0
jb 0x100469fa
mov esi, eax
add ecx, 0xa
mov eax, edx
shld eax, esi, 0x1f
mov edi, edx
shr edi, 1
mov dword [esp], 0
mov ebx, 0x1f
cmp ebx, esi
sbb dword [esp], edx
mov edx, edi
jb 0x100469d6
and eax, 7
add cx, word [eax + eax + 0x101b7f46]
add ecx, 0xffffffb4
add ecx, dword [esp + 0x28]
mov ebx, ecx
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x58]
jmp 0x100465d1
mov ecx, dword [ecx]
cmp ecx, ebx
jge 0x10046a2d
mov edi, dword [esp + 0x10]
mov byte [edi + 0x2d], cl
jmp 0x100466fb
mov edi, dword [esp + 0x10]
jmp 0x100466fb