Function at 0x1009b5a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x138
push esi
mov esi, edx
mov dword [esp + 0x6c], 0
mov edx, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [esp + 0x38], esi
mov ecx, dword [ebp + 0x10]
lea eax, [edx + 0x58]
mov dword [esp + 0xc], edi
mov dword [esp + 0x9c], eax
mov eax, dword [edi]
mov dword [esp + 0x64], eax
mov eax, dword [ecx + 0x4c]
mov dword [esp + 0x28], eax
movzx eax, byte [ecx + 0x38]
lea ecx, [eax + eax*8]
mov eax, dword [edx + 4]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [esp + 0x7c], eax
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x34], eax
cmp dword [edx + 0x200], eax
jne 0x1009b60b
mov ecx, 1
xor edx, edx
jmp 0x1009b655
mov edx, dword [edx + 0x1fc]
mov eax, 1
cmp edx, eax
jle 0x1009b63b
mov ecx, dword [ebp + 8]
add ecx, 0x204
mov esi, dword [esp + 0x34]
cmp dword [ecx], esi
mov esi, dword [esp + 0x38]
je 0x1009b6dc
inc eax
add ecx, 4
cmp eax, edx
jl 0x1009b623
xorps xmm0, xmm0
movlpd qword [esp + 0x90], xmm0
mov edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
mov eax, dword [ebp + 0x10]
not ecx
and ecx, dword [ebp + 0x14]
not edx
and edx, dword [ebp + 0x18]
mov dword [eax + 0x50], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0x54], edx
mov eax, dword [ecx + 0x50]
mov edx, dword [ecx + 0x54]
mov ecx, dword [ebp + 0xc]
call fcn.100fe260
mov ecx, dword [ebp + 0x10]
and eax, 1
mov dword [esp + 0x30], eax
mov eax, dword [edi + 0x38]
dec eax
mov dword [edi + 0x38], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0xc], eax
mov dword [esp + 0x14], eax
mov eax, dword [edi + 0x38]
dec eax
mov dword [edi + 0x38], eax
cmp byte [ecx + 0x38], 0
mov dword [esp + 0x80], eax
mov dword [ecx + 0x18], eax
jbe 0x1009b725
mov eax, dword [esp + 0x7c]
test byte [eax + 0x24], 8
je 0x1009b725
mov edx, dword [edi + 0x2c]
inc edx
mov dword [edi + 0x2c], edx
mov dword [ecx], edx
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x1009b6f6
push 0
push edx
push 0
mov edx, 0x47
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009b725
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x1009b655
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 0xc]
mov ecx, eax
test eax, eax
jle 0x1009b74d
mov edx, dword [ebp + 8]
imul eax, eax, 0x58
add edx, 0x300
add eax, edx
nop dword [eax]
cmp dword [eax], 0
jne 0x1009b74d
dec ecx
sub eax, 0x58
test ecx, ecx
jg 0x1009b740
imul eax, ecx, 0x58
mov ecx, dword [ebp + 8]
mov edi, dword [eax + ecx + 0x30c]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x60], edi
test byte [eax + 0x28], 0x10
je 0x1009b82f
mov ecx, dword [esi + 0x74]
mov edi, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [esi + 0x78], ecx
jg 0x1009b78f
push edx
push 0
push edi
mov edx, 0xd
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009b7be
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x1009b7ed
push 0
push dword [esp + 0x18]
mov edx, 0xe
mov ecx, esi
push edi
call fcn.10033da0
mov ecx, dword [ebp + 0x10]
mov edx, eax
add esp, 0xc
mov dword [ecx + 0x40], edx
mov byte [ecx + 0x39], 0xb
jmp 0x1009bf4c
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 0x40], edx
mov byte [ecx + 0x39], 0xb
jmp 0x1009bf4c
mov eax, dword [esp + 0x28]
mov edx, dword [eax + 0x2c]
test edx, 0x400
je 0x1009be23
movzx eax, word [eax + 0x30]
mov dword [esp + 0x14], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x1009b87c
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
test al, al
jne 0x1009b86b
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov edx, eax
mov dword [esp + 0x2c], eax
jmp 0x1009b8b6
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov edx, dword [ecx + eax*4 + 0x98]
jmp 0x1009b8b2
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x1c]
mov edi, dword [eax + 0x20]
mov dword [esp + 0x2c], edi
cmp ecx, edx
jg 0x1009b8a3
lea eax, [ecx + edi]
sub edx, ecx
mov edi, dword [esp + 0xc]
mov dword [edi + 0x1c], edx
mov edx, dword [esp + 0x2c]
mov dword [edi + 0x20], eax
jmp 0x1009b8b6
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x2c], eax
mov dword [esp + 0x2c], edx
mov eax, dword [ebp + 0x10]
xor edi, edi
mov eax, dword [eax + 0xc]
mov dword [esp + 0x58], eax
cmp dword [esp + 0x14], edi
jbe 0x1009b990
mov eax, dword [esp + 0x28]
add edx, 2
mov dword [esp + 0x18], edx
nop word [eax + eax]
mov eax, dword [eax + 0x38]
mov ecx, dword [eax + edi*4]
mov dword [esp + 0x1c], ecx
test ecx, ecx
je 0x1009b981
test byte [ecx + 0xc], 1
je 0x1009ba1f
cmp edi, 0x1f
ja 0x1009b910
mov ecx, edi
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x1c]
jmp 0x1009b912
xor eax, eax
mov esi, dword [esp + 0x28]
test dword [esi + 0x28], eax
mov esi, dword [esp + 0x38]
je 0x1009b9f6
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0xc]
mov edx, dword [eax + 0x28]
mov dword [esp + 0x1c], edx
push edx
lea eax, [edx + 1]
mov dword [esi + 0x28], eax
mov eax, esi
inc dword [eax + 0x2c]
mov edx, dword [ecx]
mov ecx, esi
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x24], eax
call fcn.1004e360
mov esi, dword [esp + 0x3c]
add esp, 4
mov eax, dword [esp + 0x18]
add eax, edi
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x1009b9bf
mov edx, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x20]
push eax
push edx
mov edx, 0xad
mov ecx, esi
call fcn.10033da0
add esp, 0xc
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
inc edi
cmp edi, dword [esp + 0x14]
jl 0x1009b8e0
mov eax, dword [esp + 0x28]
mov ecx, dword [esi + 0x74]
mov edi, dword [esp + 0x2c]
mov edx, dword [eax + 0x18]
cmp dword [esi + 0x78], ecx
jg 0x1009baab
push 0
push edi
push edx
mov edx, 0x47
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009bad6
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x18]
add edx, edi
mov dword [eax + ecx*4], 0xad
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x1009b97d
lea eax, [edx + edi]
mov edx, ecx
mov ecx, dword [esp + 0xc]
push eax
push dword [esp + 0x34]
push edi
push dword [ebp + 0x10]
call fcn.1009a140
mov eax, dword [ebp + 0x10]
add esp, 0x10
mov eax, dword [eax + 0x10]
mov dword [esp + 0x58], eax
jmp 0x1009b97d
lea eax, [edx + edi]
mov edx, dword [ecx]
mov ecx, dword [esp + 0xc]
push 1
push eax
mov edx, dword [edx + 0x10]
call fcn.1009ae10
mov eax, dword [esp + 0x24]
add esp, 8
cmp byte [eax + 0xf], 0x4a
mov eax, dword [esp + 0x28]
jne 0x1009baa2
test byte [eax + 0x1c], 2
je 0x1009baa2
mov eax, dword [ebp + 8]
mov ecx, dword [esi + 0x74]
mov eax, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
cmp dword [esi + 0x78], ecx
jg 0x1009ba6a
push 0
push edx
push 0
mov edx, 0x47
jmp 0x1009b973
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x1009b97d
mov edx, dword [esp + 0x18]
jmp 0x1009b985
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
lea edx, [edi + 1]
cmp dword [esi + 0x78], ecx
jg 0x1009baf9
push 0
push edx
push dword [esp + 0x1c]
mov edx, 0x47
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009bb2c
mov edi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x28]
mov edx, 0xfffffff9
mov eax, 0xffffffff
test byte [ecx + 0x1c], 1
cmovne eax, edx
mov edx, 9
push eax
push dword [ecx + 0x24]
mov ecx, esi
push edi
push dword [esp + 0x64]
push dword [esp + 0x44]
call fcn.100340d0
mov eax, dword [esp + 0x3c]
add esp, 0x14
mov ecx, dword [esp + 0x64]
and dword [eax + 0x1c], 0xfffffffe
cmp byte [ecx + 0x57], 0
je 0x1009bb76
mov dword [eax + 0x24], 0
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [esp + 0x34]
mov dword [ecx + 0x3c], eax
mov eax, 0x3e
cmp byte [edx + 0x32], 0
mov edx, 0xb6
cmovne eax, edx
mov byte [ecx + 0x39], al
mov eax, dword [esi + 0x74]
mov dword [ecx + 0x40], eax
xor ecx, ecx
mov dword [esp + 0x18], ecx
cmp dword [esp + 0x14], ecx
jbe 0x1009bf4c
lea eax, [edi + 2]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x20], eax
nop dword [eax + eax]
mov eax, dword [edi + 0x38]
mov edx, dword [eax + ecx*4]
mov dword [esp + 0x74], edx
cmp ecx, 0x10
jae 0x1009bbeb
mov ax, word [edi + 0x22]
shr ax, cl
test al, 1
je 0x1009bbe7
mov ecx, dword [ebp + 0x10]
call fcn.10099dc0
jmp 0x1009be0b
mov ecx, dword [esp + 0x18]
test byte [edx + 0xc], 1
je 0x1009be0f
cmp ecx, 0x1f
ja 0x1009bc03
mov eax, 1
shl eax, cl
jmp 0x1009bc05
xor eax, eax
test dword [edi + 0x28], eax
jne 0x1009be0f
mov eax, dword [esp + 0x64]
cmp byte [eax + 0x57], 0
jne 0x1009be0f
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x1c], 0
cmp dword [ecx + 0x44], 0
jle 0x1009bd03
mov eax, dword [esi]
mov edi, dword [ecx + 0x48]
add edi, 4
mov dh, byte [eax + 0x57]
nop dword [eax]
mov eax, dword [edi]
test eax, eax
jns 0x1009bc4a
mov eax, dword [esi + 0x74]
dec eax
test dh, dh
je 0x1009bc55
mov ecx, 0x101257b4
jmp 0x1009bc5e
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea ecx, [eax + ecx*4]
mov dl, byte [ecx]
cmp dl, 0x5d
jne 0x1009bc72
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
cmp dword [ecx + 0xc], eax
jmp 0x1009bc82
cmp dl, 0x86
jne 0x1009bc88
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
cmp dword [ecx + 8], eax
mov esi, dword [esp + 0x38]
je 0x1009bc9e
mov ecx, dword [esp + 0x1c]
add edi, 0x14
mov eax, dword [ebp + 0x10]
inc ecx
mov dword [esp + 0x1c], ecx
cmp ecx, dword [eax + 0x44]
jl 0x1009bc40
jmp 0x1009bd03
mov eax, dword [ecx + 8]
mov edi, dword [ecx + 0xc]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x50], eax
cmp dword [esi + 0x78], ecx
jg 0x1009bccd
mov ecx, dword [esp + 0x1c]
push edi
push eax
push ecx
movzx edx, dl
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009bd03
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov eax, dword [esp + 0xc]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.1000f5d0
mov edi, eax
add esp, 8
test edi, edi
je 0x1009bd59
push 0x34
push 0
push edi
call fcn.100dd0a0
add esp, 0xc
mov byte [edi], 0x35
or eax, 0xffffffff
mov ecx, edi
mov word [edi + 0x22], ax
call fcn.1004b250
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x84]
cmp dword [edi + 0x18], eax
jle 0x1009bd59
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.10012a20
add esp, 0xc
mov eax, dword [esp + 0x64]
cmp byte [eax + 0x57], 0
jne 0x1009bdfa
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
test ecx, ecx
jle 0x1009bd81
mov eax, dword [edx + 0x14]
lea ecx, [ecx + ecx*4]
mov edx, dword [eax + ecx*4 - 0xc]
mov ecx, dword [esp + 0x64]
push 0
push 0x35
mov dword [edi + 0xc], edx
call fcn.1000f5d0
add esp, 8
mov dword [esp + 0x50], eax
test eax, eax
je 0x1009bdec
push 0x34
push 0
push eax
call fcn.100dd0a0
mov ecx, dword [esp + 0x5c]
or eax, 0xffffffff
add esp, 0xc
mov word [ecx + 0x22], ax
lea eax, [ecx + 0x34]
mov dword [ecx + 8], eax
mov byte [ecx], 0xb0
mov byte [eax], 0
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
mov dword [ecx + 0x18], 1
mov dword [edi + 0x10], ecx
mov dword [ecx + 0x1c], eax
mov eax, dword [ebp + 0x10]
push 0x10
push dword [eax + 0x18]
push edi
push dword [esp + 0x18]
call fcn.10053a90
add esp, 0x10
jmp 0x1009bdef
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x64]
mov dword [edi + 0xc], 0
test edi, edi
je 0x1009be07
mov edx, edi
mov ecx, eax
call fcn.1004bdf0
mov edi, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
inc ecx
mov dword [esp + 0x18], ecx
cmp ecx, dword [esp + 0x14]
jl 0x1009bbc0
jmp 0x1009bf4c
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x1009bff5
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x30]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
mov eax, dword [esp + 0xc]
inc dword [eax + 0x2c]
mov edi, dword [eax + 0x2c]
push edi
push ecx
push 0
push dword [ebp + 0x10]
mov ecx, eax
call fcn.1009a140
mov ecx, eax
add esp, 0x10
mov dword [esp + 0x20], ecx
cmp ecx, edi
je 0x1009be86
test edi, edi
je 0x1009be86
mov edx, dword [esp + 0xc]
mov al, byte [edx + 0x13]
cmp al, 8
jae 0x1009be86
movzx eax, al
mov dword [edx + eax*4 + 0x98], edi
inc byte [edx + 0x13]
mov eax, dword [ebp + 0x10]
mov edi, dword [eax + 0x10]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x50], eax
test eax, eax
je 0x1009bf24
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x1009beb9
push ecx
push edi
push eax
mov edx, 0x3f
mov ecx, esi
call fcn.10033da0
add esp, 0xc
mov edx, eax
jmp 0x1009beec
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x50]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x20]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0x3f
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x1009bf07
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], 1
push dword [ebp + 0x18]
mov edx, dword [ebp + 8]
push dword [ebp + 0x14]
mov ecx, dword [esp + 0x14]
push edi
push dword [ebp + 0xc]
call fcn.1009b300
mov ecx, dword [esp + 0x30]
add esp, 0x10
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x1009bfc1
push ecx
push edi
push dword [esp + 0x3c]
mov edx, 0x20
mov ecx, esi
call fcn.10033da0
add esp, 0xc
mov eax, dword [ebp + 0x10]
mov byte [eax + 0x39], 0xb6
xor eax, eax
neg eax
sbb edx, edx
add edx, 2
mov dword [esp + 0x20], edx
mov edx, dword [ebp + 8]
nop dword [eax]
mov eax, dword [edx + 0x64]
xor ecx, ecx
mov edi, dword [edx + 0x70]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x50], eax
test eax, eax
jle 0x1009e413
nop dword [eax + eax]
movzx edx, word [edi + 0xa]
xor eax, eax
mov dword [esp + 0x1c], eax
test dl, 6
jne 0x1009e3f9
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0x10]
mov ecx, dword [edi + 0x28]
and ecx, dword [eax + 0x50]
mov eax, dword [edi + 0x2c]
and eax, dword [esi + 0x54]
or ecx, eax
mov esi, dword [esp + 0x38]
je 0x1009e230
mov edx, dword [ebp + 8]
mov ecx, dword [esp + 0x14]
or dword [edx + 0x34], 2
jmp 0x1009e3fc
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x20
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x1009bf45
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x1009c3ab
xor ecx, ecx
mov dword [esp + 0x58], 0
mov eax, 0xb6
mov dword [esp + 0x20], ecx
xor edi, edi
mov dword [esp + 0x48], eax
test dl, 0x20
je 0x1009c038
mov eax, dword [esp + 0x28]
mov dword [esp + 0x1c], 4
mov eax, dword [eax + 0x38]
mov edi, dword [eax]
jmp 0x1009c03c
mov dword [esp + 0x1c], ecx
test dl, 0x10
je 0x1009c053
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x1c]
mov eax, dword [eax + 0x38]
mov ecx, dword [ecx + eax]
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x30]
test eax, eax
je 0x1009c061
mov dword [esp + 0x20], edi
mov edi, ecx
test edi, edi
je 0x1009c193
mov ecx, dword [edi]
mov dword [esp + 0x4c], 0x1917181a
mov dword [esp + 0x1c], ecx
mov edx, dword [ecx + 0x10]
mov al, byte [edx]
cmp al, 0xb0
jne 0x1009c083
mov al, byte [edx + 2]
cmp al, 0xb1
jne 0x1009c08c
mov eax, dword [edx + 0x14]
jmp 0x1009c096
cmp al, 0x8a
jne 0x1009c0e5
mov eax, dword [edx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x1009c0e5
mov edx, dword [esp + 0xc]
mov al, byte [edx + 0x13]
test al, al
jne 0x1009c0ae
inc dword [edx + 0x2c]
mov edi, dword [edx + 0x2c]
jmp 0x1009c0bd
dec al
mov byte [edx + 0x13], al
movzx eax, al
mov edi, dword [edx + eax*4 + 0x98]
mov edx, dword [ecx + 0x10]
mov ecx, dword [esp + 0xc]
push 1
push edi
call fcn.1009ae10
mov ecx, dword [esp + 0x24]
add esp, 8
mov edx, edi
movzx eax, byte [ecx]
inc eax
and eax, 2
or eax, 1
mov al, byte [esp + eax + 0x4c]
jmp 0x1009c117
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x50]
push eax
call fcn.10053040
mov ecx, dword [ebp + 0x10]
add esp, 4
mov edx, edi
mov dword [esp + 0x74], eax
call fcn.10099dc0
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x74]
movzx eax, byte [ecx]
mov al, byte [esp + eax + 0x16]
mov ecx, dword [esi + 0x74]
mov byte [esp + 0x13], al
cmp dword [esi + 0x78], ecx
jg 0x1009c13b
push edx
push dword [esp + 0x18]
movzx edx, al
mov ecx, esi
push dword [esp + 0x3c]
call fcn.10033da0
add esp, 0xc
jmp 0x1009c175
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x13]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x34]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x14]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xc]
test edi, edi
je 0x1009c1fa
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x1009c1fa
movzx eax, al
mov dword [ecx + eax*4 + 0x98], edi
inc byte [ecx + 0x13]
jmp 0x1009c1fa
mov ecx, dword [esi + 0x74]
xor eax, 1
lea edx, [eax*4 + 0x22]
cmp dword [esi + 0x78], ecx
jg 0x1009c1bc
mov ecx, dword [esp + 0x60]
push 0
push ecx
push dword [esp + 0x3c]
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009c1f6
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x34]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 0x20]
test edi, edi
je 0x1009c2af
mov eax, dword [edi]
inc dword [ecx + 0x2c]
mov ecx, dword [ecx + 0x2c]
push 1
mov edx, dword [eax + 0x10]
mov dword [esp + 0x5c], ecx
push ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
call fcn.1009ae10
mov ecx, dword [esp + 0x24]
add esp, 8
mov ecx, dword [ecx + 0x10]
mov dl, byte [ecx]
mov al, dl
cmp al, 0xb0
jne 0x1009c23a
mov al, byte [ecx + 2]
cmp al, 0xb1
jne 0x1009c243
mov eax, dword [ecx + 0x14]
jmp 0x1009c24d
cmp al, 0x8a
jne 0x1009c252
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x1009c260
mov eax, dword [esp + 0x1c]
mov al, byte [eax]
cmp al, 0x38
je 0x1009c26d
cmp al, 0x36
je 0x1009c26d
mov eax, dword [esp + 0x30]
lea eax, [eax*2 + 0x36]
jmp 0x1009c27b
mov eax, dword [esp + 0x30]
xor eax, 1
lea eax, [eax*2 + 0x37]
mov dword [esp + 0x48], eax
cmp dl, 0xb0
jne 0x1009c287
mov dl, byte [ecx + 2]
cmp dl, 0xb1
jne 0x1009c291
mov eax, dword [ecx + 0x14]
jmp 0x1009c29c
cmp dl, 0x8a
jne 0x1009c2a1
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x1009c2af
mov edx, edi
mov edi, dword [ebp + 0x10]
mov ecx, edi
call fcn.10099dc0
jmp 0x1009c2b2
mov edi, dword [ebp + 0x10]
cmp dword [esp + 0x30], 0
mov ecx, dword [esi + 0x74]
sete al
mov dword [edi + 0x40], ecx
add al, 4
cmp dword [esp + 0x48], 0xb6
mov byte [edi + 0x39], al
mov eax, dword [esp + 0x34]
mov dword [edi + 0x3c], eax
je 0x1009bf4c
mov eax, dword [esp + 0xc]
inc dword [eax + 0x2c]
mov ecx, dword [esi + 0x74]
mov edi, dword [eax + 0x2c]
cmp dword [esi + 0x78], ecx
jg 0x1009c304
push 0
push edi
push dword [esp + 0x3c]
mov edx, 0x86
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009c333
mov edx, dword [esp + 0x34]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x86
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x74]
mov edx, dword [esp + 0x48]
cmp dword [esi + 0x78], ecx
jg 0x1009c355
mov ecx, dword [esp + 0x58]
push edi
push dword [esp + 0x18]
push ecx
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009c38b
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov byte [eax + 1], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x58]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x14]
mov dword [eax + 8], ecx
mov eax, dword [esi + 0x74]
test eax, eax
jle 0x1009bf4c
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x1009bf4c
test edx, 0x200
je 0x1009d520
mov edi, dword [esp + 0x28]
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov byte [esp + 0x13], 0
movzx eax, word [edi + 0x1a]
movzx ecx, word [edi + 0x18]
mov dword [esp + 0x6c], eax
movzx eax, word [edi + 0x1c]
xor edi, edi
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x5c], edi
mov byte [esp + 0x27], 0
mov eax, dword [eax + 0x20]
mov dword [esp + 0x70], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x20], edi
mov eax, dword [eax + 8]
mov dword [esp + 0x44], eax
movzx eax, cx
mov dword [esp + 0x40], eax
mov ecx, eax
test dl, 0x20
je 0x1009c431
mov edi, dword [esp + 0x28]
mov eax, dword [edi + 0x38]
movzx edi, word [edi + 0x1a]
mov eax, dword [eax + ecx*4]
inc ecx
mov dword [esp + 0x48], eax
test dl, 0x10
je 0x1009c534
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x38]
movzx edx, word [edx + 0x1c]
cmp edi, edx
mov ecx, dword [eax + ecx*4]
cmova edx, edi
mov eax, 0x100
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], edx
test word [ecx + 0xa], ax
je 0x1009c4f3
mov eax, dword [esp + 0xc]
mov edi, dword [ebp + 0x10]
inc dword [eax + 0x2c]
mov edx, dword [eax + 0x2c]
mov dword [edi + 0x2c], edx
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x1009c492
push 0
push edx
push 1
mov edx, 0x47
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009c4c1
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x74]
xor ecx, ecx
mov edx, dword [edi + 0x2c]
mov dword [edi + 0x30], eax
add edx, edx
mov eax, dword [esp + 0x70]
mov dword [edi + 0x2c], edx
mov edi, dword [esp + 0x40]
mov eax, dword [eax + 0x1c]
cmp byte [edi + eax], 1
mov eax, dword [ebp + 0x10]
sete cl
xor ecx, dword [esp + 0x30]
or ecx, edx
mov edx, dword [esp + 0x50]
mov dword [eax + 0x2c], ecx
cmp dword [esp + 0x48], 0
mov edi, edx
jne 0x1009c534
mov edi, dword [esp + 0x70]
mov ecx, dword [esp + 0x40]
mov eax, dword [edi + 4]
movsx ecx, word [eax + ecx*2]
mov dword [esp + 0x50], ecx
test ecx, ecx
js 0x1009c526
mov eax, dword [edi + 0xc]
add ecx, ecx
mov eax, dword [eax + 4]
test byte [eax + ecx*8 + 4], 0xf
je 0x1009c52d
mov ecx, dword [esp + 0x50]
mov edi, edx
cmp ecx, 0xfffffffe
jne 0x1009c534
mov byte [esp + 0x13], 1
mov edi, edx
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0x2c]
test al, 0x30
jne 0x1009c5d4
test eax, 0x80000
je 0x1009c5d4
mov edx, dword [esp + 0xc]
mov edi, 1
mov ecx, dword [ebp + 0x10]
mov byte [esp + 0x13], 1
inc dword [edx + 0x2c]
cmp dword [ecx], 0
mov eax, dword [edx + 0x2c]
mov dword [esp + 0x2c], eax
mov dword [ecx + 0x24], eax
je 0x1009c5cb
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x1009c591
push 0
push eax
push 0
lea edx, [edi + 0x46]
mov ecx, esi
call fcn.10033da0
mov edx, dword [esp + 0x18]
add esp, 0xc
jmp 0x1009c5c8
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp + 0x10]
dec dword [edx + 0x38]
mov eax, dword [edx + 0x38]
mov dword [ecx + 0x28], eax
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x1c]
cmp ax, word [ecx + 0x34]
jae 0x1009c62a
mov eax, dword [ecx + 0x1c]
xor ecx, ecx
mov edx, dword [esp + 0x40]
cmp byte [edx + eax], cl
sete cl
cmp dword [esp + 0x30], ecx
jne 0x1009c62a
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov al, byte [esp + 0x13]
mov byte [esp + 0x27], al
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x4c], ecx
movzx ecx, dx
movzx eax, al
mov byte [esp + 0x13], 0
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x14], eax
cmp dword [ebp + 0xc], 0
jle 0x1009c691
mov eax, dword [esp + 0x28]
test dword [eax + 0x2c], 0x100000
je 0x1009c691
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x1009c65e
push 0
push 0
push dword [esp + 0x4c]
mov edx, 0x87
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009c691
mov edx, dword [esp + 0x44]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 0x10]
lea eax, [esp + 0x78]
mov ecx, dword [esp + 0xc]
push eax
push edi
push dword [esp + 0x38]
call fcn.1009a7a0
mov edi, dword [esp + 0x4c]
mov edx, eax
mov eax, dword [esp + 0x84]
add esp, 0xc
mov dword [esp + 0x3c], edx
test eax, eax
je 0x1009c72f
cmp word [esp + 0x14], 0
je 0x1009c72f
add eax, edi
jne 0x1009c6d3
xor ecx, ecx
mov dword [esp + 0x5c], ecx
jmp 0x1009c72f
mov ecx, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1009c6d8
mov eax, dword [esp + 0x64]
sub ecx, edx
push 0
lea edi, [ecx + 1]
push edi
test eax, eax
je 0x1009c6fe
mov ecx, eax
call fcn.1000f5d0
mov ecx, eax
mov dword [esp + 0x64], ecx
jmp 0x1009c709
call fcn.1000ef10
mov ecx, eax
mov dword [esp + 0x64], eax
add esp, 8
test ecx, ecx
je 0x1009c727
mov eax, dword [esp + 0x78]
push edi
mov edi, dword [esp + 0x44]
add eax, edi
push eax
push ecx
call fcn.100dcb20
add esp, 0xc
jmp 0x1009c72b
mov edi, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x2c], 0
mov eax, dword [ebp + 0x10]
je 0x1009c742
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x54], ecx
jmp 0x1009c749
mov eax, dword [eax + 0x10]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x48]
test eax, eax
je 0x1009c75f
test byte [eax + 0xc], 0x28
mov dword [esp + 0x68], 0
je 0x1009c767
mov dword [esp + 0x68], 1
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x1009c77d
test byte [ecx + 0xc], 0x28
mov dword [esp + 0x58], 0
je 0x1009c785
mov dword [esp + 0x58], 1
test eax, eax
jne 0x1009c7ce
cmp word [esp + 0x1c], ax
ja 0x1009c7ce
mov dword [esp + 0x60], eax
cmp byte [esp + 0x13], 0
je 0x1009c94f
mov ecx, dword [esi + 0x74]
add edx, edi
mov dword [esp + 0x68], 0
cmp dword [esi + 0x78], ecx
jg 0x1009c940
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009c9af
mov dword [esp + 0x60], 1
mov dword [esp + 0x18], edi
test eax, eax
je 0x1009c794
mov eax, dword [eax]
mov edi, dword [eax + 0x10]
mov eax, dword [esp + 0x6c]
movzx ecx, ax
mov eax, dword [esp + 0x40]
add eax, edx
mov dword [esp + 0x50], edi
push ecx
mov ecx, dword [esp + 0x10]
mov edx, edi
push eax
call fcn.1009ae10
mov eax, dword [esp + 0x50]
mov ecx, 0x100
add esp, 8
test word [eax + 0xa], cx
je 0x1009c857
mov eax, dword [esi + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [esi]
shl ecx, 2
cmp byte [eax + 0x57], 0
je 0x1009c830
mov ecx, 0x101257c0
mov edx, 0x101257b6
jmp 0x1009c83b
mov eax, dword [esi + 0x70]
add eax, ecx
lea ecx, [eax - 8]
lea edx, [eax - 0x12]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x2c]
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov al, byte [eax + 0x2c]
and al, 1
movzx eax, al
mov word [edx], ax
mov eax, dword [esp + 0x48]
test byte [eax + 0xa], 0x80
jne 0x1009c8c7
mov ecx, edi
call fcn.1004d580
test eax, eax
je 0x1009c8c7
mov edx, dword [esp + 0x40]
mov ecx, dword [esi + 0x74]
add edx, dword [esp + 0x3c]
cmp dword [esi + 0x78], ecx
jg 0x1009c890
push 0
push dword [esp + 0x58]
mov ecx, esi
push edx
mov edx, 0x32
call fcn.10033da0
add esp, 0xc
jmp 0x1009c8c7
mov edi, dword [esp + 0x50]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x1009c8e7
mov eax, dword [esp + 0x40]
add eax, ecx
mov ecx, edi
push eax
mov eax, dword [esp + 0x70]
movzx edx, ax
call fcn.10099e30
add esp, 4
mov ecx, dword [esp + 0x6c]
movzx eax, cx
add dword [esp + 0x18], eax
mov al, byte [edi]
cmp al, 0xb0
jne 0x1009c8fb
mov al, byte [edi + 2]
cmp al, 0xb1
jne 0x1009c904
mov eax, dword [edi + 0x14]
jmp 0x1009c90e
cmp al, 0x8a
jne 0x1009c929
mov eax, dword [edi + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x1009c929
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x68], 1
mov byte [esp + 0x13], 0
jmp 0x1009c9be
mov edx, dword [esp + 0x48]
mov ecx, dword [ebp + 0x10]
call fcn.10099dc0
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x13], 0
jmp 0x1009c9be
mov edi, dword [esp + 0x40]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x70]
jmp 0x1009c989
cmp dword [esp + 0x2c], 0
mov ecx, edi
mov dword [esp + 0x18], ecx
je 0x1009c9be
mov ecx, dword [esi + 0x74]
add edx, edi
cmp dword [esi + 0x78], ecx
jg 0x1009c97c
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009c9af
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x38]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 4], 0
lea ecx, [edi + 1]
mov dword [esp + 0x60], 1
mov dword [esp + 0x18], ecx
movzx edi, byte [esp + 0x13]
mov eax, ecx
mov edx, dword [esp + 0x78]
sub eax, edi
mov dword [esp + 0x6c], edi
mov edi, dword [esp + 0x3c]
test edx, edx
je 0x1009ca20
test eax, eax
jle 0x1009c9ec
nop dword [eax + eax]
cmp byte [edx], 0x41
jg 0x1009c9ec
dec eax
inc edi
inc edx
test eax, eax
jg 0x1009c9e0
cmp eax, 1
jle 0x1009c9fe
cmp byte [eax + edx - 1], 0x41
jg 0x1009ca02
dec eax
cmp eax, 1
jg 0x1009c9f1
test eax, eax
jle 0x1009ca20
push eax
push edx
push 0
push eax
mov eax, dword [esp + 0x1c]
mov edx, 0x5f
push edi
mov ecx, dword [eax + 8]
call fcn.100340d0
mov ecx, dword [esp + 0x2c]
add esp, 0x14
mov eax, dword [esp + 0x28]
movzx eax, word [eax + 0x32]
test ax, ax
je 0x1009ca35
cmp ecx, eax
je 0x1009cd50
mov edx, dword [esp + 0x2c]
test edx, edx
je 0x1009ca8a
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x1009ca5b
push 0
push edx
push 1
mov edx, 0x47
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009ca8a
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 0x10]
mov edi, dword [eax + 0x34]
test edi, edi
je 0x1009cb27
mov edx, dword [esi + 0x74]
cmp dword [esi + 0x78], edx
jg 0x1009cabc
push dword [esp + 0x3c]
mov edx, 0x3f
mov ecx, esi
push dword [esp + 0x58]
push edi
call fcn.10033da0
add esp, 0xc
mov edx, eax
jmp 0x1009caef
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0x3f
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edi, dword [esp + 0x54]
cmp byte [eax + 0x57], 0
jne 0x1009cb0e
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x40]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
push dword [ebp + 0x18]
mov edx, dword [ebp + 8]
push dword [ebp + 0x14]
mov ecx, dword [esp + 0x14]
push edi
push dword [ebp + 0xc]
call fcn.1009b300
add esp, 0x10
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x60]
lea eax, [ecx + eax*2]
mov ecx, dword [esp + 0x30]
mov dl, byte [ecx + eax*2 + 0x1010fa44]
mov ecx, dword [esp + 0x28]
movzx eax, dl
mov byte [esp + 0x13], dl
mov dword [esp + 0x50], eax
test dword [ecx + 0x2c], 0x100000
je 0x1009cbd9
cmp eax, 0x19
jne 0x1009cbd9
mov eax, dword [esp + 0x70]
mov eax, dword [eax + 8]
movsx ecx, word [eax]
mov eax, 0x66666667
add ecx, 9
imul ecx
sar edx, 2
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [esi + 0x74]
mov dword [esp + 0x20], edx
cmp dword [esi + 0x78], edx
jg 0x1009cba2
push 0
push 0
push edi
mov edx, 0x7b
mov ecx, esi
call fcn.10033da0
add esp, 0xc
mov dword [esp + 0x20], eax
jmp 0x1009cbd1
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x7b
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x50]
mov dl, byte [esp + 0x13]
mov edi, dword [esi + 0x74]
cmp dword [esi + 0x78], edi
jg 0x1009cbfd
push dword [esp + 0x3c]
mov edx, eax
mov ecx, esi
push dword [esp + 0x58]
push dword [esp + 0x4c]
call fcn.10033da0
add esp, 0xc
mov edi, eax
jmp 0x1009cc37
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x1009cc54
mov eax, dword [esi + 0x70]
lea ecx, [edi + edi*4]
mov edi, dword [esp + 0x18]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
jmp 0x1009cc58
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x1009cd54
mov ecx, dword [esi + 0x74]
lea edx, [ecx + 2]
cmp dword [esi + 0x78], ecx
jg 0x1009cc85
push 0
push edx
push 0
mov edx, 0xb
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009ccb8
mov edi, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x30]
mov eax, 1
mov edx, dword [esi + 0x74]
cmp eax, edi
sbb eax, eax
and eax, 4
mov al, byte [eax + ecx + 0x1010fa46]
mov byte [esp + 0x13], al
cmp dword [esi + 0x78], edx
jg 0x1009ccf8
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
push dword [esp + 0x58]
push dword [esp + 0x4c]
call fcn.10033da0
add esp, 0xc
mov edx, eax
jmp 0x1009cd35
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x13]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x1009cd50
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
sub edi, dword [esp + 0x68]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x40]
mov edi, edx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x1c], edi
test ecx, ecx
je 0x1009cf18
cmp dword [esp + 0x20], 0
mov eax, dword [ecx]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x68], ecx
je 0x1009cd83
mov edi, dword [ebp + 0x10]
mov eax, dword [esi + 0x74]
mov dword [edi + 0x40], eax
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x3c]
movzx eax, ax
add edi, edx
push eax
mov edx, ecx
mov dword [esp + 0x64], edi
mov ecx, dword [esp + 0x10]
push edi
call fcn.1009ae10
mov eax, dword [esp + 0x54]
mov ecx, 0x100
add esp, 8
test word [eax + 0xa], cx
je 0x1009cdf7
mov eax, dword [esi + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [esi]
shl ecx, 2
cmp byte [eax + 0x57], 0
je 0x1009cdd0
mov ecx, 0x101257c0
mov edx, 0x101257b6
jmp 0x1009cddb
mov eax, dword [esi + 0x70]
add eax, ecx
lea ecx, [eax - 8]
lea edx, [eax - 0x12]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x2c]
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov al, byte [eax + 0x2c]
and al, 1
movzx eax, al
mov word [edx], ax
mov eax, dword [esp + 0x4c]
test byte [eax + 0xa], 0x80
jne 0x1009ce59
mov ecx, dword [esp + 0x68]
call fcn.1004d580
test eax, eax
je 0x1009ce59
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x1009ce2a
push 0
push dword [esp + 0x58]
mov edx, 0x32
mov ecx, esi
push edi
call fcn.10033da0
add esp, 0xc
jmp 0x1009ce59
mov edx, dword [esp + 0x54]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edi, dword [esp + 0x5c]
test edi, edi
je 0x1009cece
mov ecx, dword [esp + 0x14]
movzx edx, cx
mov ecx, dword [esp + 0x68]
push edi
call fcn.10099e30
mov eax, dword [esp + 0x18]
add esp, 4
movzx ecx, ax
mov eax, ecx
test ecx, ecx
je 0x1009ce96
mov ecx, dword [esp + 0x60]
cmp byte [edi], 0x41
jg 0x1009ce92
dec eax
inc ecx
inc edi
test eax, eax
jg 0x1009ce86
mov dword [esp + 0x60], ecx
cmp eax, 1
jle 0x1009cead
nop dword [eax + eax]
cmp byte [eax + edi - 1], 0x41
jg 0x1009ceb1
dec eax
cmp eax, 1
jg 0x1009cea0
test eax, eax
jle 0x1009cece
push eax
push edi
push 0
push eax
mov eax, dword [esp + 0x1c]
mov edx, 0x5f
push dword [esp + 0x70]
mov ecx, dword [eax + 8]
call fcn.100340d0
add esp, 0x14
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
movzx eax, cx
mov ecx, dword [esp + 0x68]
add edi, eax
mov al, byte [ecx]
cmp al, 0xb0
jne 0x1009cee8
mov al, byte [ecx + 2]
cmp al, 0xb1
jne 0x1009cef1
mov eax, dword [ecx + 0x14]
jmp 0x1009cefb
cmp al, 0x8a
jne 0x1009cf0a
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jle 0x1009cf0a
mov dword [esp + 0x58], 1
jmp 0x1009cf7f
mov edx, dword [esp + 0x4c]
mov ecx, dword [ebp + 0x10]
call fcn.10099dc0
jmp 0x1009cf7f
cmp byte [esp + 0x27], 0
je 0x1009cf7f
test eax, eax
jne 0x1009cf7e
mov edi, dword [esp + 0x3c]
mov ecx, dword [esi + 0x74]
add edi, edx
cmp dword [esi + 0x78], ecx
jg 0x1009cf43
push eax
push edi
push eax
lea edx, [eax + 0x4a]
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009cf72
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x58], 0
inc edi
mov eax, dword [esp + 0x78]
test eax, eax
je 0x1009cf92
mov ecx, dword [esp + 0x64]
mov edx, eax
call fcn.1000f1f0
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x1009cfa5
mov ecx, dword [esp + 0x64]
mov edx, eax
call fcn.1000f1f0
mov ecx, dword [ebp + 0x10]
cmp dword [ecx + 0x40], 0
jne 0x1009cfb4
mov eax, dword [esi + 0x74]
mov dword [ecx + 0x40], eax
test edi, edi
je 0x1009d0ce
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x1009d017
mov ecx, dword [esi + 0x74]
lea edx, [ecx + 3]
cmp dword [esi + 0x78], ecx
jg 0x1009cfe4
push 0
push edx
push eax
mov edx, 0x14
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009d017
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0x14
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x30]
mov edx, dword [esi + 0x74]
mov al, byte [eax + ecx*2 + str.__]
mov byte [esp + 0x27], al
cmp dword [esi + 0x78], edx
jg 0x1009d04f
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
push dword [esp + 0x58]
push dword [esp + 0x4c]
call fcn.10033da0
add esp, 0xc
mov edx, eax
jmp 0x1009d08c
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x27]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x1009d0a3
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x1009d0ce
mov edx, dword [esi + 0x74]
jns 0x1009d0b3
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x1009d0c2
mov eax, 0x101257b4
jmp 0x1009d0cb
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x1009d1c1
mov ecx, dword [esi + 0x74]
lea edx, [ecx + 2]
cmp dword [esi + 0x78], ecx
jg 0x1009d0fa
push 0
push edx
push eax
mov edx, 0x12
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009d12d
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0x12
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x30]
mov edx, dword [esi + 0x74]
mov al, byte [eax + ecx*2 + str.__]
mov byte [esp + 0x27], al
cmp dword [esi + 0x78], edx
jg 0x1009d165
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
push dword [esp + 0x58]
push dword [esp + 0x4c]
call fcn.10033da0
add esp, 0xc
mov edx, eax
jmp 0x1009d1a2
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x27]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x1009d1c1
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x6c]
add eax, edi
mov dword [ecx + 0x10], eax
mov edi, dword [esp + 0x28]
test dword [edi + 0x2c], 0x40000
je 0x1009d220
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x1009d1f1
mov eax, dword [esp + 0x40]
mov edx, 0x7c
push eax
push eax
push dword [esp + 0x4c]
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009d220
mov edx, dword [esp + 0x44]
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x40]
mov dword [eax + ecx*4], 0x7c
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
test byte [edi + 0x2c], 0x40
mov eax, dword [ebp + 8]
je 0x1009d29b
test byte [eax + 0x2c], 0x20
jne 0x1009d29b
mov dword [esp + 0x5c], 1
mov edi, dword [esp + 0x44]
mov ecx, dword [esp + 0x34]
mov eax, dword [ebp + 0x10]
cmp dword [eax], 0
jne 0x1009d27e
mov eax, dword [ebp + 8]
test byte [eax + 0x2c], 0x20
jne 0x1009d260
push eax
mov edx, ecx
mov ecx, dword [esp + 0x74]
push edi
call fcn.1009b0a0
add esp, 8
mov eax, dword [esp + 0x70]
mov ecx, dword [eax + 0x24]
test ecx, ecx
je 0x1009d27e
push dword [esp + 0x9c]
mov edx, dword [esp + 0x38]
call fcn.1009b280
add esp, 4
mov ecx, dword [esp + 0x28]
test dword [ecx + 0x2c], 0x1000
je 0x1009d4e0
mov eax, dword [ebp + 0x10]
mov byte [eax + 0x39], 0xb6
jmp 0x1009d4f2
mov ecx, dword [esp + 0x70]
xor edx, edx
mov edi, dword [ecx + 0xc]
test byte [edi + 0x1c], 0x80
jne 0x1009d2cc
mov edi, dword [esp + 0x44]
mov edx, ecx
push edi
push dword [esp + 0x38]
mov ecx, eax
call fcn.1009aca0
add esp, 8
mov dword [esp + 0x5c], 0
jmp 0x1009d23b
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x5c], edx
cmp ecx, dword [esp + 0x44]
je 0x1009d4d7
mov edi, dword [edi + 8]
mov dword [esp + 0x5c], edx
test edi, edi
je 0x1009d300
mov dword [esp + 0x5c], edx
nop dword [eax]
mov eax, dword [edi + 0x38]
and al, 3
cmp al, 2
je 0x1009d300
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x1009d2f0
movzx ecx, word [edi + 0x32]
cmp ecx, 1
jne 0x1009d335
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
test al, al
jne 0x1009d320
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov dword [esp + 0x14], eax
jmp 0x1009d374
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov eax, dword [ecx + eax*4 + 0x98]
mov dword [esp + 0x14], eax
jmp 0x1009d374
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 0x20]
mov edx, dword [edx + 0x1c]
mov dword [esp + 0x14], eax
cmp ecx, edx
jg 0x1009d35d
mov esi, dword [esp + 0xc]
add eax, ecx
sub edx, ecx
mov dword [esi + 0x20], eax
mov eax, esi
mov esi, dword [esp + 0x38]
mov dword [eax + 0x1c], edx
jmp 0x1009d374
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x14], edx
mov dword [ecx + 0x2c], eax
movzx eax, word [edi + 0x32]
xor edx, edx
mov dword [esp + 0x58], 0
mov ecx, eax
cmp dx, ax
jae 0x1009d450
mov eax, dword [esp + 0x14]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x70]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x1009d3d5
mov eax, dword [edi + 4]
mov esi, dword [esp + 0x58]
movzx eax, word [eax + esi*2]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x70]
mov eax, dword [eax + 4]
nop dword [eax]
mov esi, dword [esp + 0x50]
cmp si, word [eax]
mov esi, dword [esp + 0x38]
je 0x1009d3fd
inc ecx
add eax, 2
cmp ecx, edx
jl 0x1009d3c0
or eax, 0xffffffff
mov ecx, dword [esi + 0x74]
movsx edx, ax
cmp dword [esi + 0x78], ecx
jg 0x1009d402
push dword [esp + 0x20]
mov ecx, esi
push edx
push dword [esp + 0x4c]
mov edx, 0x5d
call fcn.10033da0
add esp, 0xc
jmp 0x1009d435
movzx eax, cx
jmp 0x1009d3d8
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x44]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0x5d
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x58]
movzx edx, word [edi + 0x32]
inc ecx
inc dword [esp + 0x20]
mov dword [esp + 0x58], ecx
cmp ecx, edx
jl 0x1009d395
mov ecx, edx
mov edx, dword [esi + 0x74]
movzx edi, cx
cmp dword [esi + 0x78], edx
jg 0x1009d47d
push dword [esp + 0x14]
mov edx, 0x1e
mov ecx, esi
push dword [esp + 0x84]
push dword [esp + 0x3c]
call fcn.10033da0
add esp, 0xc
mov edx, eax
jmp 0x1009d4b7
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x80]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0x1e
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x1009d237
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
jmp 0x1009d237
mov edi, dword [esp + 0x44]
jmp 0x1009d23f
cmp dword [esp + 0x30], 0
mov edx, dword [ebp + 0x10]
sete al
add al, 4
mov byte [edx + 0x39], al
mov eax, edx
mov dword [eax + 0x3c], edi
mov al, byte [ecx + 0x2e]
mov edi, dword [ebp + 0x10]
and al, 1
mov byte [edi + 0x3a], al
test byte [ecx + 0x2c], 0xf
jne 0x1009d50a
mov byte [edi + 0x3b], 1
cmp dword [esp + 0x5c], 0
je 0x1009e227
xor eax, eax
mov dword [esp + 0x70], eax
jmp 0x1009bf4e
test edx, 0x2000
je 0x1009e17b
mov ecx, dword [esp + 0xc]
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x60], 0
mov dword [esp + 0x18], 0
mov eax, dword [ecx + 0x28]
dec dword [ecx + 0x38]
mov dword [esp + 0x98], eax
inc eax
mov dword [ecx + 0x28], eax
mov eax, dword [ecx + 0x2c]
inc eax
mov dword [esp + 0x4c], 0
mov dword [ecx + 0x2c], eax
mov dword [esp + 0x5c], eax
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x2c], 0
mov edx, dword [eax + 0x10]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x68], edx
mov eax, dword [eax + 0x38]
mov eax, dword [eax]
mov dword [esp + 0x50], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x5c]
mov dword [edi + 0x3c], eax
mov eax, dword [ebp + 8]
mov byte [edi + 0x39], 0x43
mov al, byte [eax + 0x30]
cmp al, 1
jbe 0x1009d700
mov ecx, dword [esp + 0x64]
movzx eax, al
sub eax, dword [ebp + 0xc]
dec eax
mov dword [esp + 0x74], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x1009d5e3
call fcn.1000f5d0
mov ecx, eax
mov dword [esp + 0x74], ecx
jmp 0x1009d5ee
call fcn.1000ef10
mov ecx, eax
mov dword [esp + 0x74], eax
add esp, 8
test ecx, ecx
jne 0x1009d601
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x18]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x74]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [esp + 0x7c]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
mov eax, dword [ebp + 8]
movq qword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
cmp edx, 1
jl 0x1009d699
add ecx, 0x50
mov esi, eax
add edi, 0x90
movzx eax, byte [edi]
lea edi, [edi + 0x58]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [esi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [esi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [esi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x1009d656
mov esi, dword [esp + 0x38]
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0xc]
mov eax, dword [ebp + 8]
test byte [eax + 0x2c], 0x10
jne 0x1009d862
test byte [edx + 0x1c], 0x80
jne 0x1009d753
inc dword [ecx + 0x2c]
lea edi, [esi + 0x74]
mov edx, dword [ecx + 0x2c]
lea eax, [esi + 0x78]
mov ecx, dword [edi]
mov dword [esp + 0x18], edx
mov dword [esp + 0x30], edi
mov dword [esp + 0x3c], eax
cmp dword [eax], ecx
jg 0x1009d70c
push 0
push edx
push 0
mov edx, 0x4a
mov ecx, esi
call fcn.10033da0
mov eax, dword [esp + 0x18]
lea ecx, [esi + 0x78]
add esp, 0xc
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x4c], eax
jmp 0x1009d870
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [esp + 0x6c], eax
jmp 0x1009d6a1
lea eax, [ecx + 1]
mov dword [edi], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x4a
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xc]
lea edi, [esi + 0x74]
lea ecx, [esi + 0x78]
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x4c], eax
jmp 0x1009d870
mov edi, dword [edx + 8]
test edi, edi
je 0x1009d770
nop word [eax + eax]
mov eax, dword [edi + 0x38]
and al, 3
cmp al, 2
je 0x1009d770
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x1009d760
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x18], eax
inc eax
mov dword [ecx + 0x28], eax
lea eax, [esi + 0x74]
mov ecx, dword [eax]
movzx edx, word [edi + 0x32]
mov dword [esp + 0x30], eax
lea eax, [esi + 0x78]
mov dword [esp + 0x3c], eax
cmp dword [eax], ecx
jg 0x1009d7ab
push 0
push edx
push dword [esp + 0x20]
mov edx, 0x74
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009d7de
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0x74
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0xc]
mov edx, edi
mov eax, dword [ecx + 8]
mov dword [esp + 0x74], eax
call fcn.10066f30
mov edi, eax
test edi, edi
je 0x1009d73a
mov edx, dword [esp + 0x74]
mov ecx, dword [edx]
cmp byte [ecx + 0x57], 0
je 0x1009d832
push edi
mov edx, 0xfffffff7
call fcn.10034850
mov eax, dword [esp + 0x10]
lea edi, [esi + 0x74]
add esp, 4
mov dword [esp + 0x30], edi
lea ecx, [esi + 0x78]
mov dword [esp + 0x3c], ecx
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x4c], eax
jmp 0x1009d870
mov eax, dword [edx + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x70]
mov dword [eax + ecx*4 - 4], edi
lea edi, [esi + 0x74]
mov byte [eax + ecx*4 - 0x13], 0xf7
lea ecx, [esi + 0x78]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], edi
mov dword [esp + 0x3c], ecx
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x4c], eax
jmp 0x1009d870
lea edi, [esi + 0x74]
lea ecx, [esi + 0x78]
mov dword [esp + 0x30], edi
mov dword [esp + 0x3c], ecx
mov edx, dword [edi]
mov dword [esp + 0x74], edx
cmp dword [ecx], edx
jg 0x1009d897
push 0
push dword [esp + 0x60]
mov edx, 0x47
mov ecx, esi
push 0
call fcn.10033da0
add esp, 0xc
mov dword [esp + 0x74], eax
jmp 0x1009d8c9
lea eax, [edx + 1]
mov dword [edi], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x5c]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x64], 1
jle 0x1009d9d8
xor ecx, ecx
xor edi, edi
mov dword [esp + 0x20], ecx
nop
mov eax, dword [edx + 0x70]
mov edx, dword [eax + edi]
add eax, edi
cmp eax, dword [esp + 0x50]
je 0x1009d93b
mov esi, 0x8006
test word [eax + 0xa], si
mov esi, dword [esp + 0xc]
jne 0x1009d93b
mov ecx, 0x1fff
test word [eax + 0xc], cx
mov ecx, dword [esp + 0x20]
je 0x1009d93b
test dword [edx + 4], 0x200000
jne 0x1009d93b
mov ecx, dword [esp + 0x64]
push 0
push 0
call fcn.1004c0e0
mov edx, dword [esp + 0x34]
mov ecx, esi
push eax
call fcn.1004b650
mov ecx, dword [esp + 0x2c]
add esp, 0xc
mov dword [esp + 0x2c], eax
jmp 0x1009d93f
mov eax, dword [esp + 0x2c]
mov edx, dword [ebp + 8]
inc ecx
add edi, 0x30
mov dword [esp + 0x20], ecx
cmp ecx, dword [edx + 0x64]
jl 0x1009d8e0
mov esi, dword [esp + 0x38]
test eax, eax
je 0x1009d9d8
mov eax, dword [esp + 0xc]
push 0
push 0x34
mov ecx, dword [eax]
call fcn.1000f5d0
mov edi, eax
add esp, 8
test edi, edi
je 0x1009d9c5
push 0x34
push 0
push edi
call fcn.100dd0a0
or eax, 0xffffffff
mov byte [edi], 0x2c
mov word [edi + 0x22], ax
add esp, 0xc
mov eax, dword [esp + 0x2c]
mov ecx, edi
mov dword [edi + 0x10], eax
mov eax, dword [eax + 4]
and eax, 0x200104
or dword [edi + 4], eax
call fcn.1004b250
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x84]
cmp dword [edi + 0x18], eax
jle 0x1009d9d4
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.10012a20
add esp, 0xc
jmp 0x1009d9d4
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x2c]
mov ecx, dword [eax]
call fcn.1004bdf0
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0xc]
push str.MULTI_INDEX_OR
push 1
push edi
call fcn.10034330
mov edx, dword [esp + 0x64]
xor ecx, ecx
add esp, 0xc
mov dword [esp + 0x14], ecx
cmp dword [edx + 0xc], ecx
jle 0x1009da8f
mov dword [esp + 0x8c], 1
nop word [eax + eax]
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [edx + 0x18]
mov edx, dword [esp + 0x34]
cmp dword [eax + 0x14], edx
je 0x1009da2d
mov edx, 0x400
test word [eax + 0xc], dx
je 0x1009da7f
mov edx, dword [eax]
mov dword [esp + 0x78], 0
test edx, edx
je 0x1009da53
mov ecx, dword [esp + 0x64]
push 0
push 0
call fcn.1004c0e0
mov ecx, dword [esp + 0x1c]
add esp, 8
mov edi, eax
jmp 0x1009da55
xor edi, edi
mov eax, dword [esp + 0x64]
mov dword [esp + 0x84], edi
cmp byte [eax + 0x57], 0
je 0x1009daa4
test edi, edi
je 0x1009e032
mov edx, edi
mov ecx, eax
call fcn.1004bdf0
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x58]
inc ecx
mov dword [esp + 0x14], ecx
mov edx, eax
cmp ecx, dword [eax + 0xc]
jl 0x1009da10
mov ecx, dword [edi + 0xdc]
test ecx, ecx
jne 0x1009e03b
xor eax, eax
jmp 0x1009e061
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x1009dab1
mov dword [eax + 0xc], edi
mov edi, eax
lea eax, [ecx + 1]
push eax
push str.INDEX__d
push 1
push dword [esp + 0x18]
call fcn.10034330
push dword [esp + 0xa8]
mov edx, dword [esp + 0x80]
push 0x20
push 0
push 0
push 0
push edi
mov edi, dword [esp + 0x34]
mov ecx, edi
call fcn.100a8c70
add esp, 0x28
mov dword [esp + 0x54], eax
test eax, eax
je 0x1009e013
mov edx, dword [esp + 0x6c]
lea ecx, [eax + 0x300]
push 0
push ecx
mov ecx, edi
call fcn.100997e0
mov eax, dword [ebp + 8]
add esp, 8
test byte [eax + 0x2c], 0x10
jne 0x1009dec7
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x14]
mov eax, dword [eax + 0xc]
dec eax
cmp ecx, eax
mov eax, 0xffffffff
cmove ecx, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x20], ecx
test byte [eax + 0x1c], 0x80
jne 0x1009dc2a
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x3c]
mov ecx, dword [edx]
cmp dword [eax], ecx
jg 0x1009db6b
push 0
push dword [esp + 0x50]
mov edx, 0x86
mov ecx, esi
push dword [esp + 0x3c]
call fcn.10033da0
add esp, 0xc
jmp 0x1009db9d
lea eax, [ecx + 1]
mov dword [edx], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + ecx*4], 0x86
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x3c]
mov edx, dword [ecx]
mov dword [esp + 0x78], edx
cmp dword [eax], edx
jg 0x1009dbd0
push dword [esp + 0x4c]
mov edx, 0x2e
mov ecx, esi
push 0
push dword [esp + 0x20]
call fcn.10033da0
mov edx, eax
add esp, 0xc
mov dword [esp + 0x78], edx
jmp 0x1009dc06
mov edi, dword [esp + 0x18]
lea eax, [edx + 1]
mov dword [ecx], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x4c]
mov dword [eax + ecx*4 + 0xc], edi
mov edi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x2e
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x1009dec7
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x20]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
jmp 0x1009dec7
mov ecx, eax
call fcn.1005e9d0
mov dword [esp + 0x88], eax
movzx ecx, word [eax + 0x32]
mov edi, ecx
mov eax, ecx
mov dword [esp + 0x28], eax
mov dword [esp + 0x48], edi
cmp edi, 1
jne 0x1009dc7d
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
test al, al
jne 0x1009dc66
inc dword [ecx + 0x2c]
xor edi, edi
mov edx, dword [ecx + 0x2c]
mov dword [esp + 0x40], edx
jmp 0x1009dcc4
dec al
xor edi, edi
mov byte [ecx + 0x13], al
movzx eax, al
mov edx, dword [ecx + eax*4 + 0x98]
mov dword [esp + 0x40], edx
jmp 0x1009dcc4
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x1c]
mov edx, dword [eax + 0x20]
mov dword [esp + 0x40], edx
cmp edi, ecx
jg 0x1009dca6
mov esi, dword [esp + 0xc]
lea eax, [edi + edx]
sub ecx, edi
mov dword [esi + 0x20], eax
mov eax, esi
mov esi, dword [esp + 0x38]
mov dword [eax + 0x1c], ecx
jmp 0x1009dcb9
mov eax, dword [eax + 0x2c]
mov ecx, dword [esp + 0xc]
lea edx, [eax + 1]
add eax, edi
mov dword [esp + 0x40], edx
mov dword [ecx + 0x2c], eax
xor eax, eax
xor edi, edi
cmp ax, word [esp + 0x28]
jae 0x1009dcf4
lea eax, [edi + edx]
mov ecx, esi
mov edx, dword [esp + 0x68]
push eax
mov eax, dword [esp + 0x8c]
mov eax, dword [eax + 4]
movsx eax, word [eax + edi*2]
push eax
push dword [esp + 0x3c]
call fcn.10050730
mov edx, dword [esp + 0x4c]
inc edi
add esp, 0xc
cmp edi, dword [esp + 0x48]
jl 0x1009dcc4
mov eax, dword [esp + 0x20]
test eax, eax
je 0x1009dd87
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x3c]
mov edi, dword [ecx]
mov dword [esp + 0x78], edi
cmp dword [eax], edi
jg 0x1009dd34
push edx
push 0
push dword [esp + 0x20]
mov edx, 0x1f
mov ecx, esi
call fcn.10033da0
mov edx, dword [esp + 0x4c]
add esp, 0xc
mov edi, eax
mov dword [esp + 0x78], eax
jmp 0x1009dd66
lea eax, [edi + 1]
mov dword [ecx], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x1009dd81
mov eax, dword [esi + 0x70]
lea ecx, [edi + edi*4]
mov edi, dword [esp + 0x48]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov eax, dword [esp + 0x20]
test eax, eax
js 0x1009de86
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov eax, dword [esp + 0x3c]
cmp dword [eax], ecx
jg 0x1009ddb6
mov edi, dword [esp + 0x4c]
mov ecx, esi
push edi
push dword [esp + 0x4c]
push edx
mov edx, 0x60
call fcn.10033da0
add esp, 0xc
jmp 0x1009dde8
mov edi, dword [esp + 0x30]
lea eax, [ecx + 1]
lea ecx, [ecx + ecx*4]
mov dword [edi], eax
mov eax, dword [esi + 0x70]
mov edi, dword [esp + 0x48]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x4c]
mov dword [eax + ecx*4], 0x60
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x3c]
mov edx, dword [ecx]
cmp dword [eax], edx
jg 0x1009de16
mov edi, dword [esp + 0x40]
mov edx, 0x89
push edi
push dword [esp + 0x50]
mov ecx, esi
push dword [esp + 0x20]
call fcn.10033da0
add esp, 0xc
mov edx, eax
jmp 0x1009de48
lea eax, [edx + 1]
mov dword [ecx], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x40]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x38]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
jne 0x1009de63
mov eax, dword [esi + 0x70]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x48]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edx
cmp dword [esp + 0x20], 0
je 0x1009de8a
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
test eax, eax
jle 0x1009de8a
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [esi + 0x70]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x1009de8a
mov edi, dword [esp + 0x40]
cmp word [esp + 0x28], 1
jne 0x1009deb2
test edi, edi
je 0x1009def4
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 0x13]
cmp al, 8
jae 0x1009dec5
movzx eax, al
mov dword [ecx + eax*4 + 0x98], edi
mov edi, ecx
inc byte [edi + 0x13]
jmp 0x1009dec7
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x48]
cmp eax, dword [ecx + 0x1c]
jle 0x1009dec5
mov dword [ecx + 0x1c], eax
mov dword [ecx + 0x20], edi
mov edi, ecx
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x3c]
mov ecx, dword [edx]
cmp dword [eax], ecx
jg 0x1009defa
push 0
push dword [esp + 0x48]
mov edx, 0xc
mov ecx, esi
push dword [esp + 0x64]
call fcn.10033da0
mov edx, dword [esp + 0x3c]
add esp, 0xc
jmp 0x1009df30
mov edi, dword [esp + 0xc]
jmp 0x1009dec7
mov edi, dword [esp + 0x5c]
lea eax, [ecx + 1]
mov dword [edx], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x44]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x1009df5a
mov edx, dword [edx]
jns 0x1009df3f
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x1009df4e
mov eax, 0x101257b4
jmp 0x1009df57
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x1c]
mov edx, dword [eax + 0x34]
test dl, 2
cmovne ecx, dword [esp + 0x8c]
mov dword [esp + 0x1c], ecx
mov ecx, dword [eax + 0x34c]
test dword [ecx + 0x2c], 0x200
je 0x1009dfbe
cmp dword [esp + 0x14], 0
je 0x1009df97
mov edi, dword [esp + 0x60]
cmp dword [ecx + 0x20], edi
mov edi, dword [esp + 0xc]
jne 0x1009dfbe
mov esi, dword [esp + 0x68]
test byte [esi + 0x1c], 0x80
mov esi, dword [esp + 0x38]
je 0x1009dfb5
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
mov eax, dword [esp + 0x54]
je 0x1009dfbe
mov ecx, dword [ecx + 0x20]
mov dword [esp + 0x60], ecx
jmp 0x1009dfc6
mov dword [esp + 0x60], 0
test dl, 1
je 0x1009dfd2
mov ecx, dword [ebp + 8]
or dword [ecx + 0x34], 1
mov ecx, eax
call fcn.100a9960
mov ecx, dword [edi + 0xdc]
test ecx, ecx
jne 0x1009dfe7
xor eax, eax
jmp 0x1009e00d
mov edx, dword [edi + 8]
test ecx, ecx
jns 0x1009dff2
mov ecx, dword [edx + 0x74]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x1009e001
mov eax, 0x101257b4
jmp 0x1009e00a
mov eax, dword [edx + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [edi + 0xdc], eax
mov eax, dword [esp + 0x84]
test eax, eax
je 0x1009da7b
mov ecx, dword [esp + 0x64]
mov edx, eax
call fcn.1004bdf0
jmp 0x1009da7b
mov edi, dword [esp + 0xc]
jmp 0x1009da7f
mov edx, dword [edi + 8]
test ecx, ecx
jns 0x1009e046
mov ecx, dword [edx + 0x74]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x1009e055
mov eax, 0x101257b4
jmp 0x1009e05e
mov eax, dword [edx + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x60]
mov dword [edi + 0xdc], eax
mov eax, dword [ebp + 0x10]
mov dword [eax + 0x44], ecx
test ecx, ecx
je 0x1009e07f
mov ecx, dword [esp + 0x98]
mov dword [eax + 8], ecx
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x1009e099
mov ecx, dword [esp + 0x64]
mov edx, eax
mov dword [eax + 0xc], 0
call fcn.1004bdf0
mov edi, dword [esp + 0x30]
mov ecx, dword [esp + 0x74]
mov edx, dword [edi]
test ecx, ecx
jns 0x1009e0aa
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x1009e0b9
mov eax, 0x101257b4
jmp 0x1009e0c2
mov eax, dword [esi + 0x70]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [edi]
mov edx, dword [eax + 0xc]
mov eax, dword [esp + 0x3c]
cmp dword [eax], ecx
jg 0x1009e0eb
push 0
push edx
push 0
mov edx, 0xb
mov ecx, esi
call fcn.10033da0
add esp, 0xc
jmp 0x1009e11d
lea eax, [ecx + 1]
mov dword [edi], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x44]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x1009e13b
push edx
mov edx, esi
call fcn.10034550
add esp, 4
jmp 0x1009e143
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp + 8]
cmp byte [eax + 0x30], 1
jbe 0x1009e15f
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x1009e15f
mov ecx, dword [esp + 0x64]
mov edx, eax
call fcn.1000f1f0
cmp dword [esp + 0x1c], 0
jne 0x1009bf4c
mov edx, dword [esp + 0x50]
mov ecx, dword [ebp + 0x10]
call fcn.10099dc0
jmp 0x1009bf4c
mov eax, dword [esp + 0x7c]
test byte [eax + 0x28], 0x20
jne 0x1009bf45
mov ecx, dword [esp + 0x30]
mov edx, dword [ebp + 0x10]
movzx eax, byte [ecx + 0x1010e080]
mov byte [edx + 0x39], al
mov eax, dword [esp + 0x34]
mov dword [edx + 0x3c], eax
mov al, byte [ecx + 0x1010e0cc]
mov edx, dword [esi + 0x74]
mov byte [esp + 0x27], al
cmp dword [esi + 0x78], edx
jg 0x1009e1db
push 0
push edi
push dword [esp + 0x3c]
movzx edx, al
mov ecx, esi
call fcn.10033da0
mov ecx, dword [ebp + 0x10]
mov edx, eax
add esp, 0xc
lea eax, [edx + 1]
mov byte [ecx + 0x3b], 1
mov dword [ecx + 0x40], eax
jmp 0x1009bf4c
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
mov cl, byte [esp + 0x27]
mov byte [eax + 1], 0
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x34]
mov dword [eax + 4], ecx
lea eax, [edx + 1]
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 0x40], eax
mov byte [ecx + 0x3b], 1
jmp 0x1009bf4c
mov eax, dword [esp + 0x70]
jmp 0x1009bf4e
mov eax, dword [esp + 0x7c]
mov ecx, dword [edi]
mov dword [esp + 0x88], ecx
test byte [eax + 0x24], 8
je 0x1009e24d
test byte [ecx + 4], 1
je 0x1009e3f5
cmp dword [esp + 0x20], 1
mov eax, edx
jne 0x1009e2df
mov eax, dword [ebp + 0x10]
xorps xmm0, xmm0
mov dword [esp + 0xa0], 0
movlpd qword [esp + 0xa8], xmm0
movlpd qword [esp + 0xb0], xmm0
mov eax, dword [eax + 4]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x90], eax
lea eax, [esp + 0x90]
mov dword [esp + 0xb8], eax
mov eax, edx
mov dword [esp + 0xa4], 0x100548a0
test ecx, ecx
je 0x1009e2c3
mov edx, ecx
lea ecx, [esp + 0xa0]
call fcn.100475f0
movzx eax, word [edi + 0xa]
cmp word [esp + 0xb4], 0
movzx eax, ax
je 0x1009e2e6
mov ecx, 2
mov dword [esp + 0x14], ecx
jmp 0x1009e3f9
cmp dword [esp + 0x20], 3
jge 0x1009e30a
test eax, 0x1000
je 0x1009e30a
mov ecx, dword [esp + 0x14]
mov edx, dword [ebp + 8]
test ecx, ecx
jne 0x1009e3fc
mov ecx, 3
mov dword [esp + 0x14], ecx
jmp 0x1009e3fc
test eax, 0x200
je 0x1009e3a6
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x1009e3a6
mov edx, dword [esi + 0x74]
mov ecx, eax
and eax, 1
shr ecx, 1
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x1c], edx
lea eax, [eax*2 + 0x12]
mov dword [esp + 0x84], eax
cmp dword [esi + 0x78], edx
jg 0x1009e362
push 0
push 0
push ecx
mov edx, eax
mov ecx, esi
call fcn.10033da0
add esp, 0xc
mov dword [esp + 0x1c], eax
jmp 0x1009e3a6
lea eax, [edx + 1]
mov dword [esi + 0x74], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x84]
mov byte [eax + 1], 0
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x8c]
mov dword [eax + 4], ecx
push 0x10
push dword [esp + 0x84]
push dword [esp + 0x90]
push dword [esp + 0x18]
call fcn.10053a90
mov ecx, dword [esp + 0x2c]
add esp, 0x10
test ecx, ecx
je 0x1009e3f0
mov eax, dword [esi]
mov edx, dword [esi + 0x74]
cmp byte [eax + 0x57], 0
je 0x1009e3dc
mov eax, 0x101257b4
jmp 0x1009e3ed
test ecx, ecx
lea eax, [edx - 1]
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x70]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [edi + 0xa], 4
mov ecx, dword [esp + 0x14]
mov edx, dword [ebp + 8]
mov eax, dword [esp + 0x50]
add edi, 0x30
dec eax
mov dword [esp + 0x50], eax
test eax, eax
jg 0x1009bf80
mov edi, dword [edx + 0x70]
mov dword [esp + 0x20], ecx
test ecx, ecx
jg 0x1009bf60
mov eax, dword [edx + 0x6c]
mov dword [esp + 0x14], eax
test eax, eax
jle 0x1009e598
lea esi, [edi + 0xc]
mov edi, eax
test byte [esi - 2], 6
jne 0x1009e584
movzx eax, word [esi]
mov edx, 0xb
test al, 0x82
setne cl
bt ax, dx
setb al
test al, cl
je 0x1009e584
mov ecx, dword [esp + 0x34]
cmp dword [esi + 8], ecx
jne 0x1009e584
mov eax, dword [esp + 0x7c]
test byte [eax + 0x24], 8
jne 0x1009e584
mov eax, dword [esi - 0xc]
mov edx, dword [esp + 0x9c]
push 0
push 0x83
push dword [esi + 0xc]
mov dword [esp + 0x90], eax
push ecx
lea ecx, [esp + 0xf0]
mov dword [esp + 0x2c], 0
call fcn.100a2210
mov edi, eax
add esp, 0x10
test edi, edi
je 0x1009e4ec
nop dword [eax]
mov edx, dword [edi + 0x20]
mov ecx, edx
mov eax, dword [edi + 0x24]
and ecx, dword [ebp + 0x14]
and eax, dword [ebp + 0x18]
or ecx, eax
jne 0x1009e4da
or edx, dword [edi + 0x24]
jne 0x1009e4cd
test byte [edi + 0xc], 0x82
jne 0x1009e4f0
mov eax, dword [esp + 0x1c]
test eax, eax
cmove eax, edi
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0xe0]
call fcn.100a1e40
mov edi, eax
test edi, edi
jne 0x1009e4b0
mov edi, dword [esp + 0x1c]
test edi, edi
je 0x1009e580
test byte [edi + 0xa], 4
jne 0x1009e580
test byte [edi + 0xc], 1
je 0x1009e51e
mov eax, dword [edi]
test dword [eax + 4], 0x800
je 0x1009e51e
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x1009e580
mov eax, dword [edi]
push 0x10
push dword [esp + 0x84]
movups xmm0, xmmword [eax]
movups xmmword [esp + 0xa8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [esp + 0xb8], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [esp + 0xc8], xmm0
mov eax, dword [eax + 0x30]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x8c]
mov eax, dword [eax + 0xc]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0xa8]
push eax
push dword [esp + 0x18]
call fcn.10053a90
add esp, 0x10
or word [edi + 0xa], 4
mov edi, dword [esp + 0x14]
dec edi
add esi, 0x30
mov dword [esp + 0x14], edi
test edi, edi
jg 0x1009e433
mov esi, dword [esp + 0x38]
mov edx, dword [ebp + 0x10]
mov edi, dword [edx]
test edi, edi
je 0x1009e649
mov eax, dword [esi + 0x74]
mov dword [edx + 0x1c], eax
mov ecx, dword [esi + 0x74]
cmp dword [esi + 0x78], ecx
jg 0x1009e5cc
push 0
push edi
push 1
mov edx, 0x47
mov ecx, esi
call fcn.10033da0
mov edx, dword [ebp + 0x10]
add esp, 0xc
jmp 0x1009e5fb
lea eax, [ecx + 1]
mov dword [esi + 0x74], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x70]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 8]
xor edi, edi
mov esi, dword [eax + 0x70]
cmp dword [eax + 0x6c], edi
jle 0x1009e649
test byte [esi + 0xa], 6
jne 0x1009e63a
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [edx + 0x50]
and eax, dword [edx + 0x54]
or ecx, eax
jne 0x1009e63a
push 0x10
push dword [esp + 0x84]
push dword [esi]
push dword [esp + 0x18]
call fcn.10053a90
add esp, 0x10
or word [esi + 0xa], 4
mov edx, dword [ebp + 8]
inc edi
add esi, 0x30
cmp edi, dword [edx + 0x6c]
mov edx, dword [ebp + 0x10]
jl 0x1009e608
mov ecx, dword [ebp + 0x10]
pop edi
pop esi
mov eax, dword [ecx + 0x50]
mov edx, dword [ecx + 0x54]
mov esp, ebp
pop ebp
ret