Function at 0x100469c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x7c
xor eax, eax
mov dword [esp + 0x34], 0
push ebx
push ebp
mov dword [esp + 0x50], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x88]
push esi
push edi
mov dword [esp + 0x38], 0
mov edi, dword [eax + 8]
mov esi, dword [eax]
mov byte [esp + 0x13], 0
mov dword [esp + 0x34], esi
mov dword [esp + 0x2c], edi
test edi, edi
jne 0x10046a24
cmp dword [eax + 0x74], edi
jne 0x10046a15
test byte [esi + 0x4c], 8
jne 0x10046a15
mov byte [eax + 0x17], 1
push eax
call fcn.1005cd00
add esp, 4
mov dword [esp + 0x2c], eax
mov edi, eax
mov ebp, dword [esp + 0x94]
test byte [ebp + 0x24], 0x20
movsx eax, word [ebp + 0x2a]
mov dword [esp + 0x50], eax
jne 0x10046a4b
mov dword [esp + 0x1c], 0
mov dword [esp + 0x28], 1
jmp 0x10046a76
mov ecx, dword [ebp + 8]
mov dword [esp + 0x1c], ecx
test ecx, ecx
je 0x10046a6e
mov eax, dword [ecx + 0x38]
and al, 3
cmp al, 2
je 0x10046a66
mov ecx, dword [ecx + 0x14]
test ecx, ecx
jne 0x10046a56
mov eax, dword [esp + 0x50]
mov dword [esp + 0x1c], ecx
movzx ecx, word [ecx + 0x32]
mov dword [esp + 0x28], ecx
xor ebx, ebx
test eax, eax
jle 0x10046c8b
xor edx, edx
mov dword [esp + 0x24], edx
jmp 0x10046a90
movsx eax, word [ebp + 0x28]
cmp ebx, eax
je 0x10046c73
mov eax, dword [esp + 0xbc]
test eax, eax
je 0x10046ab1
cmp dword [eax + ebx*4], 0
jl 0x10046c73
mov eax, dword [ebp + 4]
lea ecx, [edx + eax]
mov al, byte [ecx + 0xc]
movzx esi, al
test al, al
je 0x10046c73
mov ah, byte [esp + 0xb0]
cmp ah, 0xb
je 0x10046ad6
movzx esi, ah
jmp 0x10046ada
cmp al, 0xb
je 0x10046ae5
cmp esi, 5
jne 0x10046aea
cmp dword [ecx + 4], 0
jne 0x10046aea
mov esi, 2
lea eax, [esi - 1]
xor ebp, ebp
cmp eax, 4
ja case.0x10046af8.4
jmp dword [eax*4 + 0x100480ac]
mov eax, dword [esp + 0x90]
mov esi, dword [esp + 0xa4]
inc esi
add esi, ebx
dec dword [eax + 0x38]
mov ebp, dword [eax + 0x38]
push ebp
push esi
push 0x33
push edi
call fcn.1005c490
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0xa0]
push esi
mov eax, dword [eax + 4]
push dword [ecx + eax + 4]
push edx
call fcn.10040450
push ebp
push esi
push 0x33
push edi
call fcn.1005c490
mov edx, dword [esp + 0x50]
add esp, 0x2c
mov esi, 2
mov ecx, dword [esp + 0x90]
mov eax, dword [ecx + 0x74]
test eax, eax
jne 0x10046b66
mov eax, ecx
mov byte [eax + 0x15], 1
mov ecx, dword [esp + 0x94]
mov eax, dword [ecx + 4]
push dword [edx + eax]
push dword [ecx]
push str._s._s
push dword [esp + 0x40]
call fcn.1004d0a0
mov edx, dword [esp + 0xb4]
add esp, 0x10
mov ecx, dword [edi + 0x6c]
inc edx
add edx, ebx
mov dword [esp + 0x54], eax
cmp dword [edi + 0x70], ecx
jg 0x10046bb4
push edx
push esi
push 0x513
push 0x44
push edi
call fcn.10025690
add esp, 0x14
jmp 0x10046be3
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x44
mov dword [eax + ecx*4 + 4], 0x513
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
mov edx, dword [esp + 0x54]
cmp byte [eax + 0x51], 0
je 0x10046bfd
push edx
push 0xfffffffffffffff9
push eax
call fcn.10022f30
add esp, 0xc
jmp 0x10046c0f
mov eax, dword [edi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4 - 0x13], 0xf9
mov dword [eax + ecx*4 - 4], edx
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x10046c26
lea ecx, [eax + eax*4]
mov edx, 1
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
test ebp, ebp
je 0x10046c6c
mov ecx, dword [edi + 0xc]
not ebp
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x10046c44
push ebp
push edi
push ecx
call fcn.10031450
add esp, 0xc
jmp 0x10046c6c
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + ebp*4], eax
jmp 0x10046c6c
mov eax, dword [esp + 0xa4]
push dword [esp + 0xb4]
inc eax
add eax, ebx
push eax
push 0x32
push edi
call fcn.1005c490
add esp, 0x10
mov ebp, dword [esp + 0x94]
add dword [esp + 0x24], 0x10
inc ebx
mov edx, dword [esp + 0x24]
cmp ebx, dword [esp + 0x50]
jl 0x10046a90
mov esi, dword [esp + 0x34]
mov edx, dword [ebp + 0x18]
mov ebx, dword [esp + 0x90]
mov dword [esp + 0x30], edx
test edx, edx
je 0x10046ec6
mov eax, dword [esi + 0x20]
and eax, 0x200
or eax, 0
jne 0x10046ec6
mov eax, dword [esp + 0xa4]
not eax
mov dword [ebx + 0x34], eax
mov al, byte [esp + 0xb0]
cmp al, 0xb
je 0x10046cd2
movzx ecx, al
mov dword [esp + 0x40], ecx
jmp 0x10046cda
mov dword [esp + 0x40], 2
cmp dword [edx], 0
mov dword [esp + 0x54], 0
jle 0x10046ebf
lea ebp, [edx + 8]
mov dword [esp + 0x24], ebp
mov eax, dword [esp + 0xbc]
mov esi, dword [ebp - 4]
test eax, eax
je 0x10046d5c
xor ecx, ecx
mov dword [esp + 0x74], 0x10017f20
mov dword [esp + 0x70], ecx
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], eax
test esi, esi
je 0x10046d41
lea eax, [esp + 0x70]
push esi
push eax
call fcn.10078760
mov edx, dword [esp + 0x38]
add esp, 8
cmp byte [esp + 0xac], 0
mov al, byte [esp + 0x84]
jne 0x10046d54
and al, 0xfd
test al, al
je 0x10046ea0
dec dword [ebx + 0x38]
mov ebx, dword [ebx + 0x38]
mov edx, dword [esp + 0x90]
push 0x10
push ebx
push esi
push edx
call fcn.100432a0
mov eax, dword [esp + 0x50]
add esp, 0x10
cmp eax, 4
jne 0x10046ddd
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x10046da2
push 0
push dword [esp + 0xb8]
push 0
push 0xb
push edi
call fcn.10025690
add esp, 0x14
jmp 0x10046e72
mov edx, dword [esp + 0xb4]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x10046e72
mov ebp, dword [ebp]
test ebp, ebp
jne 0x10046ded
mov ecx, dword [esp + 0x94]
mov ebp, dword [ecx]
cmp eax, 5
jne 0x10046dfa
mov dword [esp + 0x40], 2
mov edx, dword [esp + 0x90]
mov esi, dword [edx + 8]
test esi, esi
jne 0x10046e2b
cmp dword [edx + 0x74], esi
jne 0x10046e19
mov eax, dword [edx]
test byte [eax + 0x4c], 8
jne 0x10046e19
mov byte [edx + 0x17], 1
push edx
call fcn.1005cd00
mov edx, dword [esp + 0x94]
add esp, 4
mov esi, eax
mov ecx, dword [esp + 0x40]
cmp ecx, 2
jne 0x10046e41
mov eax, dword [edx + 0x74]
test eax, eax
jne 0x10046e3d
mov eax, edx
mov byte [eax + 0x15], 1
push 0
push ebp
push 0
push ecx
push 0x113
push 0x45
push esi
call fcn.1005c550
mov eax, dword [esi + 0x6c]
add esp, 0x1c
mov ebp, dword [esp + 0x24]
test eax, eax
jle 0x10046e72
lea ecx, [eax + eax*4]
mov edx, 3
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov ecx, dword [edi + 0xc]
not ebx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x10046e8c
push ebx
push edi
push ecx
call fcn.10031450
add esp, 0xc
jmp 0x10046e95
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + ebx*4], eax
mov ebx, dword [esp + 0x90]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x54]
add ebp, 0x18
inc eax
mov dword [esp + 0x24], ebp
mov dword [esp + 0x54], eax
cmp eax, dword [edx]
jl 0x10046cf2
mov ebp, dword [esp + 0x94]
mov dword [ebx + 0x34], 0
mov ecx, dword [esp + 0xc0]
test ecx, ecx
je 0x10046f44
cmp dword [ecx], 0
jne 0x10046eea
mov dl, 4
xor ecx, ecx
mov byte [esp + 0xb0], dl
mov dword [esp + 0xc0], ecx
jmp 0x10046f4b
mov eax, dword [ecx + 0x10]
mov dword [esp + 0x38], eax
test eax, eax
je 0x10046f44
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x3c], edx
cmp dword [edi + 0x70], edx
jg 0x10046f18
push 0
push 0
push 0
push 0xb
push edi
call fcn.10025690
add esp, 0x14
mov dword [esp + 0x3c], eax
jmp 0x10046f3d
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
xor edx, edx
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], edx
mov ecx, dword [esp + 0xc0]
mov dl, byte [esp + 0xb0]
cmp byte [esp + 0xac], 0
je 0x100472d9
cmp dword [esp + 0x1c], 0
jne 0x100472d9
dec dword [ebx + 0x38]
mov esi, dword [ebx + 0x38]
movzx ebx, byte [ebp + 0x30]
cmp dl, 0xb
je 0x10046f78
movzx ebx, dl
jmp 0x10046f82
cmp ebx, 0xb
jne 0x10046f82
mov ebx, 2
test ecx, ecx
je 0x10046f9d
cmp dword [ecx + 0x10], 0
jne 0x10046f9d
xor ebx, ebx
cmp dword [ecx + 8], ebx
setne bl
lea ebx, [ebx*2 + 4]
jmp 0x10046fbc
cmp ebx, 5
jne 0x10046fbc
cmp dl, bl
je 0x10046fbc
cmp dword [ebp + 8], 0
je 0x10046fbc
push 0xb
push edi
call fcn.1005c3e0
add esp, 8
inc eax
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0xa8]
test eax, eax
je 0x1004704c
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x10046ff0
push eax
push esi
push dword [esp + 0xac]
push 0x35
push edi
call fcn.10025690
mov edx, dword [esp + 0xb8]
add esp, 0x14
jmp 0x1004702c
mov ebp, dword [esp + 0xa8]
lea eax, [ecx + 1]
mov edx, dword [esp + 0xa4]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 0xc], ebp
mov ebp, dword [esp + 0x94]
mov dword [eax + ecx*4], 0x35
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x10047053
lea ecx, [eax + eax*4]
mov ebp, 0x90
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], bp
mov ebp, dword [esp + 0x94]
jmp 0x10047053
mov edx, dword [esp + 0xa4]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x10047077
push dword [esp + 0xa4]
push esi
push dword [esp + 0xa4]
push 0x1f
push edi
call fcn.10025690
add esp, 0x14
jmp 0x100470a9
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x9c]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [ebx - 1]
cmp eax, 5
ja case.default.0x100470b5
jmp dword [eax*4 + 0x100480c0]
mov eax, dword [esp + 0x34]
xor ebx, ebx
mov eax, dword [eax + 0x20]
and eax, 0x2000
or eax, ebx
je 0x1004713b
push ebx
push ebx
push 0x79
push ebp
mov ebp, dword [esp + 0xa0]
push ebp
call fcn.10059980
mov ebx, eax
add esp, 0x14
test ebx, ebx
je 0x10047142
mov eax, dword [ebp + 0x74]
test eax, eax
jne 0x100470f2
mov eax, ebp
mov ebp, dword [esp + 0x94]
push 0xffffffffffffffff
push 1
push 5
push 0
push 1
push dword [esp + 0xb8]
mov byte [eax + 0x14], 1
push dword [esp + 0xb8]
push dword [esp + 0xb8]
push ebx
mov ebx, dword [esp + 0xb4]
push ebp
push ebx
call fcn.100483b0
add esp, 0x2c
mov dword [esp + 0x44], 1
jmp 0x1004722b
mov ebp, dword [esp + 0x90]
push 0
push 0
push dword [esp + 0x9c]
push ebp
call fcn.10046790
add esp, 0x10
test eax, eax
jne 0x100470e9
mov ebp, dword [esp + 0x94]
mov ebx, dword [esp + 0x90]
cmp dword [ebp + 8], eax
je 0x1004712e
push ebx
call fcn.1004d630
push 0xffffffffffffffff
push 0
push dword [esp + 0xac]
push dword [esp + 0xac]
push ebp
push ebx
call fcn.10048730
add esp, 0x1c
mov dword [esp + 0x44], 1
jmp 0x1004722b
mov eax, dword [esp + 0xc0]
mov ebx, dword [esp + 0x90]
push 0
push dword [eax + 0x14]
push dword [ebx]
call fcn.10058720
mov ecx, dword [esp + 0xcc]
push ecx
push 0
push 0
push 2
push dword [ecx + 0xc]
push dword [ecx + 8]
push eax
push ebx
call fcn.10059e60
mov eax, dword [esp + 0xec]
add esp, 0x2c
push dword [esp + 0xb4]
mov dword [eax + 8], 0
push edi
mov dword [eax + 0xc], 0
call fcn.10064950
add esp, 8
jmp 0x1004722b
push dword [esp + 0xb4]
mov ebx, dword [esp + 0x94]
push edi
call fcn.10064950
add esp, 8
jmp 0x1004722b
mov ebx, 2
push ebp
push ebx
mov ebx, dword [esp + 0x98]
push ebx
call fcn.100547a0
add esp, 0xc
mov ecx, dword [edi + 0xc]
not esi
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x10047245
push esi
push edi
push ecx
call fcn.10031450
add esp, 0xc
jmp 0x1004724e
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + esi*4], eax
cmp dword [esp + 0x48], 0
je 0x100472d9
mov esi, dword [edi + 0x6c]
mov dword [esp + 0x5c], esi
cmp dword [edi + 0x70], esi
jg 0x1004727c
push 0
push 0
push 0
push 0xb
push edi
call fcn.10025690
add esp, 0x14
mov dword [esp + 0x5c], eax
jmp 0x100472af
lea eax, [esi + 1]
mov dword [edi + 0x6c], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x48]
sub ecx, 1
mov edx, dword [edi + 0x6c]
jns 0x100472be
lea ecx, [edx - 1]
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x100472cd
mov eax, 0x10095994
jmp 0x100472d6
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov esi, dword [ebp + 8]
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], esi
test esi, esi
je 0x1004776c
mov ecx, dword [esp + 0x98]
xor eax, eax
lea esp, [esp]
cmp dword [ecx + eax*4], 0
je 0x10047758
mov eax, dword [esp + 0x38]
cmp eax, esi
jne 0x100473ae
mov ebp, dword [esp + 0x3c]
mov ecx, dword [edi + 0x6c]
inc ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x58], ecx
cmp dword [edi + 0x70], ecx
jg 0x10047342
push 0
push 0
push 0
push 0xb
push edi
call fcn.10025690
add esp, 0x14
mov dword [esp + 0x58], eax
jmp 0x10047375
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x3c]
mov ecx, eax
mov edx, dword [edi + 0x6c]
test eax, eax
jns 0x10047385
lea ecx, [edx - 1]
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x1004739b
mov eax, 0x10095994
mov dword [eax + 8], edx
mov eax, dword [esp + 0x38]
jmp 0x100473b8
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
mov eax, dword [esp + 0x38]
jmp 0x100473b8
dec dword [ebx + 0x38]
mov ebp, dword [ebx + 0x38]
mov dword [esp + 0x24], ebp
cmp byte [esp + 0x13], 0
jne 0x100473e5
test eax, eax
je 0x100473c7
cmp eax, esi
jne 0x100473e5
mov eax, dword [esp + 0xa4]
inc eax
push eax
push dword [esp + 0x98]
push edi
call fcn.100594e0
add esp, 0xc
mov byte [esp + 0x13], 1
cmp dword [esi + 0x24], 0
mov ecx, dword [esp + 0x18]
je 0x100474af
mov eax, dword [esp + 0x98]
mov edx, dword [eax + ecx*4]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x10047417
push 0
push edx
push 0
push 0x49
push edi
call fcn.10025690
add esp, 0x14
jmp 0x1004744a
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x49
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xa4]
not eax
mov dword [ebx + 0x34], eax
mov eax, dword [esi + 0x24]
mov ebx, dword [ebx]
test eax, eax
je 0x10047471
push 0
push 0
push eax
push ebx
call fcn.1001fcc0
add esp, 0x10
mov esi, eax
jmp 0x10047473
xor esi, esi
cmp byte [ebx + 0x51], 0
jne 0x1004748f
push 0x10
push ebp
mov ebp, dword [esp + 0x98]
push esi
push ebp
call fcn.10042e70
add esp, 0x10
jmp 0x10047496
mov ebp, dword [esp + 0x90]
test esi, esi
je 0x100474a4
push esi
push ebx
call fcn.10042b80
add esp, 8
mov ecx, dword [esp + 0x18]
mov dword [ebp + 0x34], 0
mov eax, dword [esp + 0x98]
xor ebp, ebp
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x54], ebp
mov dword [esp + 0x64], ebp
mov edx, dword [eax + ecx*4]
movzx eax, word [ebx + 0x34]
mov ecx, eax
lea esi, [edx + 1]
mov dword [esp + 0x40], esi
cmp bp, ax
jae 0x100476b1
mov ebx, esi
xor esi, esi
mov dword [esp + 0x50], esi
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 4]
movsx edx, word [eax + ebp*2]
cmp edx, 0xfffffffe
jne 0x1004760c
mov ecx, dword [esp + 0x90]
mov eax, dword [esp + 0xa4]
not eax
mov ebp, dword [ecx]
mov dword [ecx + 0x34], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x20], ebp
mov eax, dword [eax + 0x28]
mov eax, dword [eax + esi + 4]
test eax, eax
je 0x1004753a
push 0
push 0
push eax
push ebp
call fcn.1001fcc0
mov ecx, dword [esp + 0xa0]
add esp, 0x10
mov esi, eax
jmp 0x1004753c
xor esi, esi
cmp byte [ebp + 0x51], 0
jne 0x100475ea
test esi, esi
je 0x10047583
cmp byte [esi], 0xa8
jne 0x10047583
mov edx, dword [ecx + 8]
mov ebp, dword [esi + 0x1c]
mov ecx, dword [edx + 0x6c]
cmp dword [edx + 0x70], ecx
jg 0x1004756e
push 0
push ebx
push ebp
push 0x4e
push edx
call fcn.10025690
add esp, 0x14
jmp 0x100475e6
lea eax, [ecx + 1]
mov dword [edx + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edx + 0x68]
mov dword [eax + ecx*4], 0x4e
jmp 0x100475ce
push ebx
push esi
push ecx
call fcn.10041690
mov ebp, eax
add esp, 0xc
cmp ebp, ebx
je 0x100475e6
mov edx, dword [esp + 0x90]
mov edx, dword [edx + 8]
test edx, edx
je 0x100475e6
mov ecx, dword [edx + 0x6c]
cmp dword [edx + 0x70], ecx
jg 0x100475bb
push 0
push ebx
push ebp
push 0x4f
push edx
call fcn.10025690
add esp, 0x14
jmp 0x100475e6
lea eax, [ecx + 1]
mov dword [edx + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edx + 0x68]
mov dword [eax + ecx*4], 0x4f
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 4], ebp
mov ebp, dword [esp + 0x20]
test esi, esi
je 0x100475f8
push esi
push ebp
call fcn.10042b80
add esp, 8
mov eax, dword [esp + 0x90]
mov ebp, dword [esp + 0x54]
mov dword [eax + 0x34], 0
jmp 0x1004767e
cmp edx, 0xffffffff
je 0x1004762c
mov eax, dword [esp + 0x94]
movsx eax, word [eax + 0x28]
cmp edx, eax
je 0x1004762c
mov esi, dword [esp + 0xa4]
inc esi
add esi, edx
jmp 0x10047633
mov esi, dword [esp + 0xa4]
mov ecx, dword [edi + 0x6c]
sar edx, 0x1f
and edx, 1
add edx, 0x4f
cmp dword [edi + 0x70], ecx
jg 0x10047654
push 0
push ebx
push esi
push edx
push edi
call fcn.10025690
add esp, 0x14
jmp 0x1004767e
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], edx
mov byte [eax + ecx*4 + 1], dl
mov eax, dword [esp + 0x14]
inc ebp
mov esi, dword [esp + 0x50]
inc ebx
add esi, 0x18
mov dword [esp + 0x54], ebp
mov dword [esp + 0x50], esi
movzx ecx, word [eax + 0x34]
cmp ebp, ecx
jl 0x100474e5
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x14]
mov edx, dword [edx + eax*4]
mov ebp, dword [esp + 0x40]
movzx esi, cx
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x100476d0
push edx
push esi
push ebp
push 0x5c
push edi
call fcn.10025690
add esp, 0x14
jmp 0x100476f7
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x5c
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0xa8], 0
mov ecx, dword [esp + 0x1c]
je 0x100477a4
cmp ecx, ebx
jne 0x100477a4
cmp byte [esp + 0xac], 0
jne 0x100477a4
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x24]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x10047799
push edx
push edi
push ecx
call fcn.10031450
add esp, 0xc
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esi + 0x14]
inc eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], eax
test esi, esi
jne 0x10047300
mov edx, dword [esp + 0x48]
test edx, edx
je 0x1004801d
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x10047fc5
push 0
push edx
push 0
push 0xb
push edi
call fcn.10025690
add esp, 0x14
jmp 0x10047ff4
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
jmp 0x1004773b
movzx eax, byte [ebx + 0x36]
mov dword [esp + 0x30], eax
test eax, eax
je 0x1004771f
mov dl, byte [esp + 0xb0]
cmp dl, 0xb
je 0x100477c5
movzx eax, dl
jmp 0x100477cf
cmp eax, 0xb
jne 0x100477d3
mov eax, 2
mov dword [esp + 0x30], eax
cmp dword [esp + 0x38], ebx
jne 0x100477f3
mov edx, dword [esp + 0xc0]
xor eax, eax
cmp dword [edx + 8], eax
setne al
lea eax, [eax*2 + 4]
mov dword [esp + 0x30], eax
cmp dword [esp + 0x18], 0
jne 0x100478df
cmp dword [ebx + 0x14], 0
jne 0x100478df
cmp ecx, ebx
jne 0x100478df
cmp eax, 5
jne 0x100478df
mov ebp, dword [esp + 0x34]
mov ebx, dword [esp + 0x90]
mov eax, dword [ebp + 0x20]
and eax, 0x2000
mov dword [esp + 0x68], eax
je 0x1004787b
mov eax, dword [ebx]
xor edx, edx
xor esi, esi
mov eax, dword [eax + 0x20]
and eax, 0x40000
or eax, edx
je 0x10047856
push dword [esp + 0x94]
push ebx
call fcn.10059910
add esp, 8
mov edx, eax
mov ecx, edx
test edx, edx
je 0x10047873
lea esp, [esp]
cmp byte [ecx + 8], 0x79
jne 0x1004786c
movzx eax, byte [ecx + 9]
or esi, eax
mov ecx, dword [ecx + 0x20]
test ecx, ecx
jne 0x10047860
neg esi
sbb esi, esi
test edx, esi
jne 0x100478df
mov eax, dword [ebp + 0x20]
mov ebp, dword [esp + 0x94]
and eax, 0x4000
mov dword [esp + 0x68], eax
je 0x100478b0
cmp dword [ebp + 0x10], 0
jne 0x100478df
mov eax, dword [ebp + 0x48]
push 0
push dword [ebp]
add eax, 0x38
push eax
call fcn.10021270
add esp, 0xc
cmp dword [eax + 8], 0
jne 0x100478df
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x24]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x100478d1
push edx
push edi
push ecx
call fcn.10031450
add esp, 0xc
jmp 0x10047749
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
jmp 0x10047749
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x24]
movzx eax, word [esi + 0x32]
push eax
mov eax, dword [esp + 0x1c]
add eax, dword [esp + 0xa4]
push ebx
push ebp
push eax
push 0x1b
push edi
call fcn.1005c5d0
mov eax, dword [esp + 0x34]
add esp, 0x18
cmp esi, eax
jne 0x10047917
mov dword [esp + 0x20], ebx
jmp 0x10047978
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x90]
cmp eax, 1
jne 0x10047947
mov al, byte [edx + 0x13]
test al, al
jne 0x10047936
inc dword [edx + 0x2c]
mov ebx, dword [edx + 0x2c]
jmp 0x10047970
dec al
mov byte [edx + 0x13], al
movzx eax, al
mov ebx, dword [edx + eax*4 + 0x94]
jmp 0x10047970
mov ecx, dword [edx + 0x1c]
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x20], ebx
cmp eax, ecx
jg 0x10047963
add eax, ebx
sub ecx, dword [esp + 0x28]
mov dword [edx + 0x20], eax
mov dword [edx + 0x1c], ecx
jmp 0x10047974
mov eax, dword [edx + 0x2c]
lea ebx, [eax + 1]
add eax, dword [esp + 0x28]
mov dword [edx + 0x2c], eax
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0xa8]
test edx, edx
jne 0x1004798e
cmp dword [esp + 0x30], 5
jne 0x10047cf6
mov ecx, dword [esp + 0x94]
test byte [ecx + 0x24], 0x20
jne 0x10047a72
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x100479c6
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0xa0]
push 0
push ebx
push eax
push 0x87
push edi
call fcn.10025690
add esp, 0x14
jmp 0x10047a00
mov edx, dword [esp + 0x18]
lea eax, [ecx + 1]
add edx, dword [esp + 0xa0]
lea ecx, [ecx + ecx*4]
mov ebx, dword [esp + 0x20]
mov dword [edi + 0x6c], eax
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0xa8]
test edx, edx
je 0x10047cf6
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x10047a27
push edx
push ebp
push ebx
push 0x35
push edi
call fcn.10025690
add esp, 0x14
jmp 0x10047a4e
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x35
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0x6c]
mov ebp, dword [esp + 0x1c]
test eax, eax
jle 0x10047cfa
lea ecx, [eax + eax*4]
mov edx, 0x90
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x10047cfa
cmp esi, eax
je 0x10047b3a
xor ecx, ecx
xor ebp, ebp
cmp cx, word [eax + 0x32]
jae 0x10047b3a
movzx edx, word [esi + 0x34]
xor ecx, ecx
test edx, edx
je 0x10047aad
mov eax, dword [eax + 4]
movzx esi, word [eax + ebp*2]
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 4]
cmp si, word [eax]
je 0x10047ada
inc ecx
add eax, 2
cmp ecx, edx
jl 0x10047aa0
or eax, 0xffffffff
mov ecx, dword [edi + 0x6c]
movsx edx, ax
mov dword [esp + 0x64], edx
cmp dword [edi + 0x70], ecx
jg 0x10047adf
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0xa0]
push ebx
push edx
push eax
push 0x5a
push edi
call fcn.10025690
add esp, 0x14
jmp 0x10047b19
movzx eax, cx
jmp 0x10047ab0
mov esi, dword [esp + 0x18]
lea eax, [ecx + 1]
add esi, dword [esp + 0xa0]
lea ecx, [ecx + ecx*4]
mov edx, dword [esp + 0x64]
mov dword [edi + 0x6c], eax
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x5a
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x1c]
inc ebp
mov esi, dword [esp + 0x14]
inc ebx
movzx eax, word [eax + 0x32]
cmp ebp, eax
mov eax, dword [esp + 0x1c]
jl 0x10047a88
mov edx, dword [esp + 0xa8]
test edx, edx
je 0x10047cf6
movzx ecx, word [eax + 0x32]
mov eax, dword [esi + 0x38]
mov ebx, dword [edi + 0x6c]
and al, 3
add ebx, ecx
mov dword [esp + 0x4c], 0x34
mov dword [esp + 0x50], ebx
cmp al, 2
jne 0x10047b6a
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x64], ebp
jmp 0x10047b72
mov eax, dword [esp + 0x20]
mov dword [esp + 0x64], eax
mov ebp, dword [esp + 0x1c]
xor edx, edx
mov dword [esp + 0x54], edx
test ecx, ecx
je 0x10047cfa
jmp 0x10047b90
mov eax, dword [ebp + 0x20]
mov ebp, dword [eax + edx*4]
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
mov al, byte [ecx + 0x4e]
mov bl, byte [ecx + 0xa5]
mov byte [esp + 0x60], al
movzx eax, bl
push eax
push ebp
push dword [esp + 0x68]
push ecx
call fcn.10044120
add esp, 0x10
mov esi, eax
test bl, bl
jne 0x10047be5
test esi, esi
je 0x10047bce
cmp dword [esi + 0xc], 0
jne 0x10047be5
push ebp
push esi
push dword [esp + 0x68]
push dword [esp + 0x9c]
call fcn.100488b0
add esp, 0x10
mov esi, eax
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x54]
mov eax, dword [edx + 4]
movsx ecx, word [eax + ebp*2]
movzx eax, word [edx + 0x32]
dec eax
cmp ebp, eax
jne 0x10047c0f
mov eax, dword [esp + 0x24]
mov dword [esp + 0x50], eax
mov dword [esp + 0x4c], 0x35
jmp 0x10047c13
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0xa8]
mov edx, dword [edi + 0x6c]
inc ebx
add ebp, dword [esp + 0x64]
add ebx, ecx
mov dword [esp + 0x68], ebx
cmp dword [edi + 0x70], edx
jg 0x10047c41
push ebp
push eax
push ebx
push dword [esp + 0x58]
push edi
call fcn.10025690
add esp, 0x14
mov edx, eax
jmp 0x10047c7c
mov ebx, dword [esp + 0x4c]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], bl
xor ebx, ebx
mov word [eax + ecx*4 + 2], bx
mov ebx, dword [esp + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x50]
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], ebp
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x10047c92
push esi
push 0xfffffffffffffffe
push eax
call fcn.10022f30
add esp, 0xc
jmp 0x10047cc4
test edx, edx
jns 0x10047c9a
mov edx, dword [edi + 0x6c]
dec edx
mov eax, dword [edi + 0x68]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x10047cb9
push 0xfffffffffffffffe
push esi
push eax
push edi
call fcn.10072b40
add esp, 0x10
jmp 0x10047cc4
test esi, esi
je 0x10047cc4
mov dword [eax + 0x10], esi
mov byte [eax + 1], 0xfe
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x10047cdb
lea ecx, [eax + eax*4]
mov edx, 0x90
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x54]
inc edx
mov dword [esp + 0x54], edx
movzx eax, word [ebp + 0x32]
cmp edx, eax
jl 0x10047b90
jmp 0x10047cfa
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x30]
lea eax, [ebx - 1]
cmp eax, 5
ja case.0x10047d0a.5
jmp dword [eax*4 + 0x100480d8]
push dword [esp + 0x14]
push ebx
mov ebx, dword [esp + 0x98]
push ebx
call fcn.10059a80
mov ebp, dword [esp + 0x2c]
add esp, 0xc
jmp 0x10047ebb
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0xa0]
mov ebx, dword [esp + 0x90]
push eax
push dword [esp + 0x18]
push dword [esp + 0x9c]
push dword [esp + 0xcc]
push ebx
call fcn.1005bc60
add esp, 0x14
jmp 0x10047d66
mov ebx, dword [esp + 0x90]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x10047d8d
push 0
push dword [esp + 0xb8]
push 0
push 0xb
push edi
call fcn.10025690
mov ebp, dword [esp + 0x34]
add esp, 0x14
jmp 0x10047ebb
mov edx, dword [esp + 0xb4]
lea eax, [ecx + 1]
mov ebp, dword [esp + 0x20]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x10047ebb
mov eax, dword [esp + 0x34]
xor esi, esi
mov ebx, dword [esp + 0x90]
mov eax, dword [eax + 0x20]
and eax, 0x2000
or eax, esi
je 0x10047e2b
mov eax, dword [ebx]
xor edx, edx
mov eax, dword [eax + 0x20]
and eax, 0x40000
or eax, edx
je 0x10047e07
push dword [esp + 0x94]
push ebx
call fcn.10059910
add esp, 8
mov edx, eax
mov ecx, edx
test edx, edx
je 0x10047e23
lea ecx, [ecx]
cmp byte [ecx + 8], 0x79
jne 0x10047e1c
movzx eax, byte [ecx + 9]
or esi, eax
mov ecx, dword [ecx + 0x20]
test ecx, ecx
jne 0x10047e10
neg esi
sbb esi, esi
and esi, edx
jne 0x10047e67
mov eax, dword [ebx]
mov eax, dword [eax + 0x20]
and eax, 0x4000
or eax, 0
je 0x10047e74
mov ecx, dword [esp + 0x94]
push 0
mov eax, dword [ecx + 0x48]
push dword [ecx]
add eax, 0x38
push eax
call fcn.10021270
add esp, 0xc
cmp dword [eax + 8], 0
jne 0x10047e67
mov eax, dword [esp + 0x94]
cmp dword [eax + 0x10], 0
je 0x10047e74
mov eax, dword [ebx + 0x74]
test eax, eax
jne 0x10047e70
mov eax, ebx
mov byte [eax + 0x14], 1
mov edx, dword [esp + 0xa0]
mov eax, dword [esp + 0x18]
add eax, edx
cmp dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x20]
push eax
sete al
movzx eax, al
push eax
push 5
push 0
push dword [esp + 0x38]
push ebp
push edx
push dword [esp + 0xb8]
push esi
push dword [esp + 0xb8]
push ebx
call fcn.100483b0
add esp, 0x2c
mov dword [esp + 0x44], 1
mov eax, dword [esp + 0x38]
cmp eax, dword [esp + 0x14]
jne 0x10047f44
mov edx, dword [esp + 0x3c]
mov ecx, dword [edi + 0x6c]
inc edx
cmp dword [edi + 0x70], ecx
jg 0x10047ee4
push 0
push edx
push 0
push 0xb
push edi
call fcn.10025690
add esp, 0x14
jmp 0x10047f13
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x58]
mov ecx, eax
mov edx, dword [edi + 0x6c]
test eax, eax
jns 0x10047f23
lea ecx, [edx - 1]
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x10047f35
mov eax, 0x10095994
mov dword [eax + 8], edx
jmp 0x10047f6b
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
jmp 0x10047f6b
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x24]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x10047f62
push edx
push edi
push ecx
call fcn.10031450
add esp, 0xc
jmp 0x10047f6b
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
cmp ebp, dword [esp + 0x40]
je 0x10047742
mov eax, dword [esp + 0x28]
cmp eax, 1
jne 0x10047fb1
test ebp, ebp
je 0x10047742
mov al, byte [ebx + 0x13]
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x98]
cmp al, 8
jae 0x10047fa5
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ebp
inc byte [ebx + 0x13]
mov ebp, dword [esp + 0x94]
jmp 0x10047754
cmp eax, dword [ebx + 0x1c]
jle 0x10047742
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], ebp
jmp 0x10047742
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x5c]
mov edx, dword [edi + 0x6c]
test ecx, ecx
jns 0x10048002
lea ecx, [edx - 1]
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x10048011
mov eax, 0x10095994
jmp 0x1004801a
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
test byte [ebp + 0x24], 0x20
jne 0x10048096
mov ecx, dword [esp + 0x98]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0xa4]
movsx esi, word [ebp + 0x2a]
inc ebx
mov edx, dword [ecx + eax*4]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x10048055
push edx
push esi
push ebx
push 0x5c
push edi
call fcn.10025690
add esp, 0x14
jmp 0x10048083
mov ebp, dword [esp + 0x94]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x5c
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0x13], 0
jne 0x10048096
push 0
push ebp
push edi
call fcn.100594e0
add esp, 0xc
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebp
mov dword [eax], ecx
pop ebx
add esp, 0x7c
ret