Function at 0x10161d70
Capabilities:
Authenticate hmac
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x12c
mov eax, dword [0x1025e344]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 8]
lea eax, [edx + 0x50]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x9c], edx
push edi
mov eax, dword [esi]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebx + 0x40]
mov dword [ebp - 0x7c], eax
movzx eax, byte [ebx + 0x2c]
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0x90], ebx
lea ecx, [eax + eax*8]
mov dword [ebp - 0xc4], 0
mov eax, dword [edx + 4]
mov edx, dword [edx + 0x1ec]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [ebp - 0xdc], eax
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x8c], eax
xor eax, eax
test edx, edx
jle 0x10161e1e
mov ecx, dword [ebp - 0x9c]
add ecx, 0x1f0
mov edi, dword [ebp - 0x8c]
cmp dword [ecx], edi
mov edi, dword [ebp - 0xc8]
je 0x10161f24
inc eax
add ecx, 4
cmp eax, edx
jl 0x10161e02
xorps xmm0, xmm0
movlpd qword [ebp - 0xf0], xmm0
mov edx, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xf0]
not ecx
not edx
and ecx, dword [ebp + 0x1c]
and edx, dword [ebp + 0x20]
mov dword [ebx + 0x48], ecx
mov ecx, dword [ebp - 0x9c]
mov dword [ebx + 0x4c], edx
mov eax, dword [ecx + 0x40]
mov edx, dword [ecx + 0x44]
mov ecx, dword [ebp + 0x14]
call fcn.101daa70
and eax, 1
mov dword [ebp - 0xa4], eax
mov eax, dword [esi + 0x38]
dec eax
mov dword [esi + 0x38], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0xc], eax
mov dword [ebp - 0x94], eax
mov eax, dword [esi + 0x38]
dec eax
mov dword [esi + 0x38], eax
cmp byte [ebx + 0x2c], 0
mov dword [ebp - 0xe0], eax
mov dword [ebx + 0x18], eax
jbe 0x10161eae
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x24], 8
je 0x10161eae
mov eax, dword [esi + 0x2c]
inc eax
push eax
push 0
push 0x46
mov dword [esi + 0x2c], eax
push edi
mov dword [ebx], eax
call fcn.10154510
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov ecx, eax
test eax, eax
jle 0x10161edd
mov edx, dword [ebp - 0x9c]
lea eax, [eax + eax*4]
shl eax, 4
add edx, 0x2f0
add eax, edx
nop dword [eax + eax]
cmp dword [eax], 0
jne 0x10161edd
dec ecx
sub eax, 0x50
test ecx, ecx
jg 0x10161ed0
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x9c]
add eax, eax
mov eax, dword [ecx + eax*8 + 0x2fc]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x28], 0x10
je 0x10161fd6
mov ecx, dword [edi + 0x6c]
mov esi, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x10161f3e
push edx
push 0
push esi
push 0xd
push edi
call fcn.10113170
add esp, 0x14
jmp 0x10161f69
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x10161e35
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [edi + 0x6c]
cmp dword [edi + 0x70], edx
jg 0x10161f93
push 0
push dword [ebp - 0x94]
push esi
push 0xe
push edi
call fcn.10113170
mov edx, eax
mov byte [ebx + 0x2d], 0xb
add esp, 0x14
mov dword [ebx + 0x34], edx
jmp 0x10163aac
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [ebx + 0x34], edx
mov byte [ebx + 0x2d], 0xb
jmp 0x10163aac
mov eax, dword [ebp - 0x7c]
mov edx, dword [eax + 0x24]
test edx, 0x400
je 0x1016241b
mov edx, eax
movzx eax, word [edx + 0x28]
mov dword [ebp - 0x78], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x1016201f
mov al, byte [esi + 0x13]
test al, al
jne 0x1016200b
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0x74], eax
jmp 0x10162049
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x94]
mov dword [ebp - 0x74], eax
jmp 0x10162049
mov edx, dword [esi + 0x1c]
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x74], eax
cmp ecx, edx
jg 0x10162038
add eax, ecx
sub edx, ecx
mov dword [esi + 0x20], eax
mov dword [esi + 0x1c], edx
jmp 0x10162046
mov eax, dword [esi + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [ebp - 0x74], edx
mov dword [esi + 0x2c], eax
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebx + 0xc]
xor esi, esi
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x78], esi
jbe 0x101620b3
mov edi, dword [ebp - 0xb4]
nop dword [eax]
mov eax, dword [edx + 0x30]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x101620a7
mov ecx, dword [ebp - 0x74]
add ecx, 2
add ecx, esi
test byte [eax + 0xc], 1
je 0x10162093
push ecx
push dword [ebp - 0xa4]
push esi
push ebx
push eax
push edi
call fcn.100f8240
mov eax, dword [ebx + 0x10]
add esp, 0x18
mov dword [ebp - 0x70], eax
jmp 0x101620a4
mov eax, dword [eax]
push 1
push ecx
push dword [eax + 0x10]
push edi
call fcn.100f8830
add esp, 0x10
mov edx, dword [ebp - 0x7c]
inc esi
cmp esi, dword [ebp - 0x78]
jl 0x10162060
mov edi, dword [ebp - 0xc8]
mov ecx, dword [edi + 0x6c]
mov edx, dword [edx + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x101620d1
push 0
push dword [ebp - 0x74]
push edx
push 0x46
push edi
call fcn.10113170
add esp, 0x14
jmp 0x101620ff
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x74]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0x74]
mov ecx, dword [edi + 0x6c]
inc edx
mov esi, dword [ebp - 0x78]
cmp dword [edi + 0x70], ecx
jg 0x1016211f
push 0
push edx
push esi
push 0x46
push edi
call fcn.10113170
add esp, 0x14
jmp 0x1016214a
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0x7c]
or eax, 0xffffffff
mov edx, 0xfffffff9
cmp byte [ecx + 0x1c], 0
cmovne eax, edx
mov edx, dword [edi + 0x6c]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + 0x20]
mov dword [ebp - 0xac], eax
cmp dword [edi + 0x70], edx
jg 0x1016218b
push dword [ebp - 0x74]
push dword [ebp - 0x70]
push dword [ebp - 0x8c]
push 9
push edi
call fcn.10113170
add esp, 0x14
mov edx, eax
jmp 0x101621c4
mov ebx, dword [ebp - 0x8c]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [ebp - 0x74]
mov dword [eax + ecx*4 + 0xc], ebx
mov ebx, dword [ebp - 0x90]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 0x10], 0
push dword [ebp - 0x68]
push dword [ebp - 0xac]
push edx
push edi
call fcn.101549f0
mov edx, dword [ebp - 0x7c]
add esp, 0x10
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x8c]
mov byte [edx + 0x1c], 0
mov dword [ebx + 0x30], eax
mov eax, 0x3c
cmp byte [ecx + 0x31], 0
mov ecx, 0xaa
cmovne eax, ecx
lea ecx, [esi - 1]
mov byte [ebx + 0x2d], al
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x34], eax
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x6c], ecx
test ecx, ecx
js 0x10163aac
lea esi, [eax + eax*4]
shl esi, 2
mov dword [ebp - 0x70], esi
mov eax, dword [edx + 0x30]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0xac], edx
cmp ecx, 0x10
jge 0x10162252
mov eax, dword [ebp - 0x7c]
mov ax, word [eax + 0x1e]
shr ax, cl
test al, 1
je 0x1016224f
push edx
push ebx
call fcn.100fc370
add esp, 8
jmp 0x10162404
mov ecx, dword [ebp - 0x6c]
test byte [edx + 0xc], 1
je 0x10162407
mov eax, dword [ebp - 0xd4]
cmp byte [eax + 0x51], 0
jne 0x1016230d
mov eax, dword [ebx + 0x3c]
sub esi, 0x14
mov dword [ebp - 0x70], esi
mov ecx, dword [eax + esi + 4]
test ecx, ecx
jns 0x10162281
mov ecx, dword [edi + 0x6c]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x10162290
mov eax, 0x1026970c
jmp 0x10162299
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov al, byte [eax]
mov dword [ebp - 0x68], ecx
mov ecx, dword [edi + 0x6c]
mov byte [ebp - 0x95], al
cmp dword [edi + 0x70], ecx
jg 0x101622c9
push edx
push esi
push dword [ebp - 0x68]
movzx eax, al
push eax
push edi
call fcn.10113170
add esp, 0x14
jmp 0x1016230d
mov bl, byte [ebp - 0x95]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
xor edi, edi
mov word [eax + ecx*4 + 2], di
mov edi, dword [ebp - 0x68]
mov byte [eax + ecx*4], bl
mov ebx, dword [ebp - 0x90]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
mov eax, dword [ebp - 0xb4]
push 0
push 0x34
push dword [eax]
call fcn.10131310
mov esi, eax
add esp, 0xc
test esi, esi
je 0x10162401
push 0x34
push 0
push esi
call fcn.101a08b0
or eax, 0xffffffff
mov byte [esi], 0x35
push esi
mov word [esi + 0x22], ax
call fcn.100ff290
mov ecx, dword [ebp - 0xb4]
add esp, 0x10
mov eax, dword [ecx]
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x10162367
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.10132f50
add esp, 0xc
mov eax, dword [ebp - 0xac]
push 0
push 0x35
push dword [ebp - 0xd4]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esi + 0xc], eax
call fcn.10131310
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x101623b4
push 0x34
push 0
push ebx
call fcn.101a08b0
add esp, 0xc
mov byte [ebx], 0xa8
or eax, 0xffffffff
mov word [ebx + 0x22], ax
lea eax, [ebx + 0x34]
mov dword [ebx + 8], eax
mov byte [eax], 0
mov dword [ebx + 0x18], 1
mov dword [esi + 0x10], ebx
test ebx, ebx
je 0x101623e5
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x6c]
add ecx, 2
add eax, ecx
mov dword [ebx + 0x1c], eax
mov ebx, dword [ebp - 0x90]
push 0
push dword [ebx + 0x18]
push esi
push dword [ebp - 0xb4]
call fcn.10136260
add esp, 0x10
jmp 0x101623eb
mov ebx, dword [ebp - 0x90]
push esi
push dword [ebp - 0xd4]
mov dword [esi + 0xc], 0
call fcn.10135f80
add esp, 8
mov esi, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x7c]
sub ecx, 1
mov dword [ebp - 0x6c], ecx
jns 0x10162221
jmp 0x10163aac
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x101624f7
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
push ecx
push dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
push 0
push ebx
push eax
push esi
mov dword [ebp - 0x68], ecx
call fcn.100f8240
mov ecx, dword [ebp - 0x68]
mov edx, eax
add esp, 0x18
cmp edx, ecx
je 0x1016247c
test ecx, ecx
je 0x1016247c
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x1016247c
movzx eax, al
mov dword [esi + eax*4 + 0x94], ecx
inc byte [esi + 0x13]
mov ecx, dword [edi + 0x6c]
mov esi, dword [ebx + 0x10]
cmp dword [edi + 0x70], ecx
jg 0x1016249c
push edx
push esi
push dword [ebp - 0x8c]
push 0x1e
push edi
call fcn.10113170
add esp, 0x14
jmp 0x101624cf
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0x8c]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0x1e
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0xac]
mov byte [ebx + 0x2d], 0xaa
mov ecx, dword [edx + 0x28]
mov eax, dword [edx + 0x2c]
and ecx, dword [ebx + 0x48]
and eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x10163aac
or word [edx + 0xa], 4
jmp 0x10163aac
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x10162786
xor ecx, ecx
mov dword [ebp - 0x70], 0xaa
xor eax, eax
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xac], ecx
test dl, 0x20
je 0x10162542
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x68], 4
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
xor eax, eax
mov dword [ebp - 0xac], ecx
jmp 0x10162545
mov dword [ebp - 0x68], eax
test dl, 0x10
je 0x10162556
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x68]
mov eax, dword [eax + 0x30]
mov eax, dword [edx + eax]
mov edx, dword [ebp - 0xa4]
test edx, edx
cmove ecx, eax
cmove eax, dword [ebp - 0xac]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xd0], eax
test eax, eax
je 0x1016265f
mov edx, dword [eax]
mov dword [ebp - 0x6c], 0x18161719
mov dword [ebp - 0x68], edx
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0xac], eax
call fcn.10136be0
add esp, 4
test eax, eax
je 0x101625e4
mov al, byte [esi + 0x13]
test al, al
jne 0x101625ad
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x101625bc
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x94]
push 1
push eax
push dword [edx + 0x10]
mov dword [ebp - 0x78], eax
push esi
call fcn.100f8830
mov eax, dword [ebp - 0x68]
add esp, 0x10
mov ecx, dword [ebp - 0x78]
movzx eax, byte [eax]
inc eax
and eax, 2
or eax, 1
mov dl, byte [ebp + eax - 0x6c]
jmp 0x10162628
lea eax, [ebp - 0xbc]
push eax
push dword [ebp - 0xac]
push esi
call fcn.101359a0
push dword [ebp - 0xd0]
mov dword [ebp - 0xac], eax
push ebx
call fcn.100fc370
mov eax, dword [ebp - 0x68]
add esp, 0x14
mov ecx, dword [ebp - 0xac]
movzx eax, byte [eax]
mov dl, byte [ebp + eax - 0xa2]
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x78], eax
push ecx
push dword [ebp - 0x94]
movzx eax, dl
push dword [ebp - 0x8c]
push eax
push edi
call fcn.10154570
mov ecx, dword [ebp - 0x78]
add esp, 0x14
test ecx, ecx
je 0x10162681
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x10162681
movzx eax, al
mov dword [esi + eax*4 + 0x94], ecx
inc byte [esi + 0x13]
jmp 0x10162681
push dword [ebp - 0xbc]
mov eax, edx
push dword [ebp - 0x8c]
xor eax, 1
lea eax, [eax*4 + 0x20]
push eax
push edi
call fcn.10154510
add esp, 0x10
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x1016270f
mov eax, dword [eax]
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
push 1
push ecx
push dword [eax + 0x10]
mov dword [ebp - 0x68], eax
push esi
mov dword [ebp - 0xcc], ecx
call fcn.100f8830
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0x68], eax
call fcn.10136be0
add esp, 0x14
test eax, eax
jne 0x101626e1
mov al, byte [edx]
cmp al, 0x38
je 0x101626cc
cmp al, 0x36
jne 0x101626e1
mov eax, dword [ebp - 0xa4]
xor eax, 1
lea edx, [eax*2 + 0x37]
mov dword [ebp - 0x70], edx
jmp 0x101626f1
mov eax, dword [ebp - 0xa4]
lea eax, [eax*2 + 0x36]
mov dword [ebp - 0x70], eax
push dword [ebp - 0x68]
call fcn.10136be0
add esp, 4
test eax, eax
jne 0x1016270f
push dword [ebp - 0xc0]
push ebx
call fcn.100fc370
add esp, 8
cmp dword [ebp - 0xa4], 0
mov ecx, dword [edi + 0x6c]
sete al
mov dword [ebx + 0x34], ecx
add al, 4
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0x8c]
mov dword [ebx + 0x30], eax
mov ebx, dword [ebp - 0x70]
cmp ebx, 0xaa
je 0x10163aac
inc dword [esi + 0x2c]
mov esi, dword [esi + 0x2c]
push esi
push eax
push 0x80
push edi
call fcn.10154510
push esi
push dword [ebp - 0x94]
push dword [ebp - 0xcc]
push ebx
push edi
call fcn.10154570
mov eax, dword [edi + 0x6c]
add esp, 0x24
test eax, eax
jle 0x10163aac
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x10163aac
test edx, 0x200
je 0x10163143
mov eax, dword [ebp - 0x7c]
mov esi, dword [ebx + 8]
mov dword [ebp - 0xa8], esi
mov esi, dword [ebp - 0x9c]
movzx ecx, word [eax + 0x18]
movzx eax, word [eax + 0x1a]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x7c]
test byte [esi + 0x2c], 1
mov esi, dword [ebp - 0xb4]
mov dword [ebp - 0xac], ecx
movzx eax, word [eax + 0x1c]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov eax, dword [eax + 0x20]
mov dword [ebp - 0xcc], 0
mov byte [ebp - 0x7d], 0
mov byte [ebp - 0x95], 0
mov dword [ebp - 0x74], eax
je 0x10162830
mov ebx, dword [ebp - 0x9c]
cmp byte [ebx + 0x2f], 0
mov ebx, dword [ebp - 0x90]
jle 0x10162830
cmp word [eax + 0x32], cx
jbe 0x10162830
mov byte [ebp - 0x7d], 1
mov dword [ebp - 0x84], 1
movzx ecx, cx
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x68], ecx
test dl, 0x20
je 0x1016287c
mov eax, dword [ebp - 0x7c]
mov edi, ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edi*4]
inc edi
mov dword [ebp - 0x68], edi
mov edi, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], eax
movzx eax, word [edi + 0x1a]
mov edi, dword [ebp - 0x84]
cmp edi, eax
cmovbe edi, eax
mov eax, edi
mov dword [ebp - 0x84], edi
mov edi, dword [ebp - 0xc8]
mov dword [ebp - 0x84], eax
test dl, 0x10
je 0x10162959
mov eax, dword [ebp - 0x7c]
mov ebx, 0x100
mov edx, dword [ebp - 0x68]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x88], eax
movzx edx, word [edx + 0x1c]
cmp dword [ebp - 0x84], edx
cmova edx, dword [ebp - 0x84]
test word [eax + 0xa], bx
mov ebx, dword [ebp - 0x90]
mov dword [ebp - 0xc4], edx
je 0x10162909
mov eax, dword [esi + 0x2c]
inc eax
push eax
push 1
push 0x46
mov dword [esi + 0x2c], eax
push edi
mov dword [ebx + 0x24], eax
call fcn.10154510
mov eax, dword [edi + 0x6c]
xor ecx, ecx
shl dword [ebx + 0x24], 1
add esp, 0x10
mov edx, dword [ebp - 0xa0]
mov dword [ebx + 0x28], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x1c]
cmp byte [edx + eax], 1
sete cl
xor ecx, dword [ebp - 0xa4]
or dword [ebx + 0x24], ecx
mov ecx, edx
mov edx, dword [ebp - 0xc4]
cmp dword [ebp - 0xb8], 0
mov dword [ebp - 0x84], edx
jne 0x10162959
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
movsx ecx, word [eax + ecx*2]
mov dword [ebp - 0xc4], ecx
test ecx, ecx
js 0x10162944
mov eax, dword [ebp - 0x74]
add ecx, ecx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 4]
cmp byte [eax + ecx*8 + 0xc], 0
je 0x1016294f
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x84], edx
cmp ecx, 0xfffffffe
jne 0x10162959
mov byte [ebp - 0x7d], 1
mov dword [ebp - 0x84], edx
mov ecx, dword [ebp - 0x74]
mov edx, dword [ebp - 0xac]
movzx eax, word [ecx + 0x32]
mov dword [ebp - 0xc4], eax
cmp dx, ax
jae 0x10162996
mov eax, dword [ecx + 0x1c]
xor ecx, ecx
mov edx, dword [ebp - 0xa0]
cmp byte [edx + eax], cl
sete cl
cmp dword [ebp - 0xa4], ecx
je 0x101629a4
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xac]
cmp dword [ebp - 0xa4], 0
je 0x101629e1
cmp ax, dx
jne 0x101629e1
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0xb8], eax
mov al, byte [ebp - 0x7d]
mov byte [ebp - 0x95], al
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x88], ecx
movzx ecx, dx
movzx eax, al
mov byte [ebp - 0x7d], 0
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0xbc]
push eax
push dword [ebp - 0x84]
push dword [ebp - 0xa4]
push ebx
push esi
call fcn.100f7940
mov ecx, dword [ebp - 0xbc]
add esp, 0x14
mov edx, eax
mov dword [ebp - 0x6c], edx
test ecx, ecx
je 0x10162a37
cmp word [ebp - 0x94], 0
je 0x10162a37
mov eax, dword [ebp - 0xa0]
add eax, ecx
push eax
push dword [ebp - 0xd4]
call fcn.10131520
mov edx, dword [ebp - 0x6c]
add esp, 8
mov dword [ebp - 0xcc], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x10162a5a
test byte [eax + 0xc], 0x28
mov dword [ebp - 0xd0], 0
je 0x10162a64
mov dword [ebp - 0xd0], 1
mov ecx, dword [ebp - 0x88]
test ecx, ecx
je 0x10162a7b
test byte [ecx + 0xc], 0x28
mov dword [ebp - 0x70], 0
je 0x10162a82
mov dword [ebp - 0x70], 1
test eax, eax
jne 0x10162c48
cmp word [ebp - 0xac], ax
ja 0x10162c48
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x68], eax
mov al, byte [ebp - 0x7d]
mov dword [ebp - 0x84], ecx
test al, al
je 0x10162adf
lea eax, [ecx + edx]
push eax
push 0
push 0x49
push edi
call fcn.10154510
mov eax, dword [ebp - 0xa0]
add esp, 0x10
inc eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x84], eax
mov al, byte [ebp - 0x7d]
mov dword [ebp - 0x68], 1
push dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x84]
movzx eax, al
sub ecx, eax
push ecx
push dword [ebp - 0x6c]
push esi
call fcn.100f7d30
mov ecx, dword [ebp - 0x7c]
add esp, 0x10
movzx eax, word [ecx + 0x2a]
test ax, ax
je 0x10162b11
cmp dword [ebp - 0x84], eax
je 0x10162b64
test dword [ecx + 0x24], 0x40000
je 0x10162b2b
push dword [ebp - 0xa8]
push 0x77
push edi
call fcn.101544b0
add esp, 0xc
push dword [ebp - 0x84]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0xc0]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0xa4]
push dword [ebp - 0xa8]
movzx eax, byte [ecx + eax*2 + 0x1021330c]
push eax
push edi
call fcn.10154640
add esp, 0x18
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x10162d3a
mov eax, dword [eax]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x94]
movzx ecx, ax
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x6c]
push ecx
push eax
push edx
push esi
mov dword [ebp - 0x68], edx
mov dword [ebp - 0xac], eax
call fcn.100f8830
push dword [ebp - 0x88]
mov ebx, dword [ebp - 0x90]
push ebx
push edi
call fcn.10171640
mov edx, dword [ebp - 0x68]
push edx
call fcn.10133860
add esp, 0x20
test eax, eax
je 0x10162bd8
push dword [ebp - 0xc0]
push dword [ebp - 0xac]
push 0x32
push edi
call fcn.10154510
mov edx, dword [ebp - 0x68]
add esp, 0x10
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x10162c12
mov ecx, dword [ebp - 0x94]
push eax
movzx eax, cx
push eax
push edx
call fcn.1016a260
push dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x94]
movzx eax, cx
push eax
push dword [ebp - 0xac]
push esi
call fcn.100f7d30
add esp, 0x1c
mov ecx, dword [ebp - 0x94]
push dword [ebp - 0x68]
movzx eax, cx
add dword [ebp - 0xa0], eax
call fcn.10136be0
add esp, 4
test eax, eax
jne 0x10162d31
push dword [ebp - 0x88]
push ebx
call fcn.100fc370
add esp, 8
jmp 0x10162d67
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x84], ecx
test eax, eax
je 0x10162aa0
mov edx, dword [ebp - 0x78]
mov eax, dword [eax]
add ecx, dword [ebp - 0x6c]
movzx edx, dx
push edx
mov eax, dword [eax + 0x10]
push ecx
push eax
push esi
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xc4], ecx
call fcn.100f8830
push dword [ebp - 0xb8]
mov edi, dword [ebp - 0xc8]
push ebx
push edi
call fcn.10171640
mov edx, dword [ebp - 0xac]
push edx
call fcn.10133860
add esp, 0x20
test eax, eax
je 0x10162cc9
push dword [ebp - 0xc0]
push dword [ebp - 0xc4]
push 0x32
push edi
call fcn.10154510
mov edx, dword [ebp - 0xac]
add esp, 0x10
mov ecx, dword [ebp - 0xbc]
test ecx, ecx
je 0x10162cec
mov eax, dword [ebp - 0xa0]
add eax, ecx
mov ecx, dword [ebp - 0x78]
push eax
movzx eax, cx
push eax
push edx
call fcn.1016a260
add esp, 0xc
mov ecx, dword [ebp - 0x78]
push dword [ebp - 0xac]
movzx eax, cx
add dword [ebp - 0x84], eax
call fcn.10136be0
add esp, 4
test eax, eax
jne 0x10162d20
push dword [ebp - 0xb8]
push ebx
call fcn.100fc370
add esp, 8
xor al, al
jmp 0x10162adf
mov dword [ebp - 0xd0], 1
xor al, al
jmp 0x10162adf
mov dword [ebp - 0x70], 1
jmp 0x10162d67
cmp byte [ebp - 0x95], 0
je 0x10162d67
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x6c]
push eax
push 0
push 0x49
push edi
call fcn.10154510
add esp, 0x10
mov dword [ebp - 0x70], 0
inc dword [ebp - 0xa0]
push dword [ebp - 0xbc]
push dword [ebp - 0xd4]
call fcn.10131260
push dword [ebp - 0xcc]
push dword [ebp - 0xd4]
call fcn.10131260
mov eax, dword [edi + 0x6c]
add esp, 0x10
mov dword [ebx + 0x34], eax
mov eax, dword [ebp - 0xa0]
test eax, eax
je 0x10162dc7
mov ecx, dword [ebp - 0xa4]
push eax
push dword [ebp - 0x6c]
mov eax, dword [ebp - 0x70]
push dword [ebp - 0xc0]
push dword [ebp - 0xa8]
movzx eax, byte [eax + ecx*2 + 0x10213314]
push eax
push edi
call fcn.10154640
add esp, 0x18
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0x24]
test eax, 0x40000
je 0x10162ded
push 1
push dword [ebp - 0xa8]
push 0x77
push edi
call fcn.10154510
mov eax, dword [ebp - 0x7c]
add esp, 0x10
mov eax, dword [eax + 0x24]
mov ecx, dword [ebp - 0x9c]
test al, 0x40
je 0x10162f48
test byte [ecx + 0x2c], 0x20
jne 0x10162f48
mov edx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x70], 1
mov esi, dword [ebp - 0x8c]
cmp dword [ebx], 0
jne 0x10162f0f
mov eax, dword [ebp - 0x9c]
test byte [eax + 0x2c], 0x20
jne 0x10162f0f
mov eax, dword [edx + 0x28]
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x10162f0f
xorps xmm0, xmm0
mov dword [ebp - 0xf4], esi
lea edi, [ebp - 0xf8]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0xfc], edi
xor esi, esi
mov edi, dword [ebp - 0xc8]
movlpd qword [ebp - 0x10c], xmm0
movlpd qword [ebp - 0x104], xmm0
mov dword [ebp - 0x110], 0x101711c0
mov dword [ebp - 0xf0], ecx
cmp dword [eax], esi
jle 0x10162f0f
mov ebx, dword [ebp - 0x9c]
lea ecx, [eax + 4]
mov dword [ebp - 0x68], ecx
mov edi, eax
mov eax, dword [edx + 4]
cmp word [eax + esi*2], 0xfffe
jne 0x10162ef8
mov dword [ebp - 0xec], esi
mov eax, dword [ecx]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x10162ed1
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.10170c60
add esp, 8
push dword [ebx + 8]
lea eax, [ebp - 0x114]
push eax
call fcn.10161070
push dword [ebx + 0xc]
lea eax, [ebp - 0x114]
push eax
call fcn.10161070
mov ecx, dword [ebp - 0x68]
add esp, 0x10
mov edx, dword [ebp - 0x74]
inc esi
add ecx, 0x18
mov dword [ebp - 0x68], ecx
cmp esi, dword [edi]
jl 0x10162ea2
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov eax, dword [edx + 0x24]
test eax, eax
je 0x10162f2f
mov ecx, dword [ebp - 0xd8]
push ecx
push dword [ebp - 0x8c]
push eax
call fcn.10170dd0
mov edx, dword [ebp - 0x74]
add esp, 0xc
mov ecx, dword [ebp - 0x7c]
test dword [ecx + 0x24], 0x1000
je 0x10163106
mov byte [ebx + 0x2d], 0xaa
jmp 0x10163115
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0x70], 0
mov eax, dword [edx + 0xc]
test byte [eax + 0x24], 0x20
jne 0x10162fd3
movzx eax, word [ecx + 0x2c]
test eax, 0x400
jne 0x10162f98
test eax, 0x1000
je 0x10162f73
cmp byte [ecx + 0x31], 1
je 0x10162f98
push dword [ebp - 0xa8]
mov esi, dword [ebp - 0x8c]
push esi
push edx
push ecx
call fcn.100f8010
mov edx, dword [ebp - 0x74]
add esp, 0x10
mov ecx, dword [ebp - 0xa8]
jmp 0x10162e1b
inc dword [esi + 0x2c]
mov esi, dword [esi + 0x2c]
push esi
push dword [ebp - 0xa8]
push 0x87
push edi
call fcn.10154510
push esi
mov esi, dword [ebp - 0x8c]
push 0
push esi
push 0x1f
push edi
call fcn.10154570
mov edx, dword [ebp - 0x74]
add esp, 0x24
mov ecx, dword [ebp - 0xa8]
jmp 0x10162e1b
mov ecx, dword [ebp - 0xa8]
cmp dword [ebp - 0x8c], ecx
je 0x10162e15
push eax
call fcn.1014b0f0
mov dword [ebp - 0xac], eax
movzx eax, word [eax + 0x32]
push eax
push esi
call fcn.10140550
mov esi, dword [ebp - 0xac]
mov edx, eax
mov dword [ebp - 0xc4], 0
add esp, 0xc
mov dword [ebp - 0xc0], edx
movzx eax, word [esi + 0x32]
mov ecx, eax
cmp word [ebp - 0xc4], ax
jae 0x101630db
mov dword [ebp - 0x68], edx
xor ebx, ebx
nop
mov eax, dword [ebp - 0x74]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x1016305d
mov eax, dword [esi + 4]
movzx esi, word [eax + ebx*2]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
nop word [eax + eax]
cmp si, word [eax]
je 0x10163083
inc ecx
add eax, 2
cmp ecx, edx
jl 0x10163050
or eax, 0xffffffff
mov ecx, dword [edi + 0x6c]
movsx edx, ax
cmp dword [edi + 0x70], ecx
jg 0x10163088
mov esi, dword [ebp - 0x68]
push esi
push edx
push dword [ebp - 0xa8]
push 0x5a
push edi
call fcn.10113170
add esp, 0x14
jmp 0x101630b8
movzx eax, cx
jmp 0x10163060
mov esi, dword [ebp - 0xa8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 0x68]
mov dword [eax + ecx*4], 0x5a
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
inc esi
inc ebx
mov dword [ebp - 0x68], esi
mov esi, dword [ebp - 0xac]
movzx ecx, word [esi + 0x32]
cmp ebx, ecx
jl 0x10163030
mov ebx, dword [ebp - 0x90]
mov edx, dword [ebp - 0xc0]
mov esi, dword [ebp - 0x8c]
movzx eax, cx
push eax
push edx
push dword [ebp - 0xe0]
push esi
push 0x1c
push edi
call fcn.10154640
mov edx, dword [ebp - 0x74]
add esp, 0x18
mov ecx, dword [ebp - 0xa8]
jmp 0x10162e1b
cmp dword [ebp - 0xa4], 0
sete al
add al, 4
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0xa8]
mov dword [ebx + 0x30], eax
mov al, byte [ecx + 0x26]
and al, 1
mov byte [ebx + 0x2e], al
test byte [ecx + 0x24], 0xf
jne 0x10163130
mov byte [ebx + 0x2f], 1
xor ecx, ecx
cmp dword [ebp - 0x70], ecx
cmove ecx, edx
mov dword [ebp - 0xc4], ecx
jmp 0x10163aae
test edx, 0x2000
je 0x10163a62
mov eax, dword [esi + 0x28]
dec dword [esi + 0x38]
inc dword [esi + 0x2c]
mov dword [ebp - 0xa8], eax
inc eax
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x38]
mov edx, dword [esi + 0x2c]
mov dword [ebp - 0xac], eax
xor eax, eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x78], 0
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x84], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, dword [eax + 0x1c]
mov dword [ebx + 0x30], edx
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0xcc], eax
mov byte [ebx + 0x2d], 0x42
mov al, byte [edx + 0x2e]
cmp al, 1
jbe 0x10163313
mov ecx, dword [ebp - 0xd4]
movzx eax, al
sub eax, dword [ebp + 0x14]
dec eax
mov dword [ebp - 0x68], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x10163210
push ecx
call fcn.10131310
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0xd0], ecx
jmp 0x10163220
call fcn.10144f40
add esp, 8
mov dword [ebp - 0xd0], eax
mov ecx, eax
test ecx, ecx
jne 0x1016323b
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100d02f2
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0x68]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [ebp - 0xdc]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
mov eax, dword [ebp - 0x9c]
movq qword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
mov dword [ebp - 0x70], eax
cmp edx, 1
jl 0x101632e2
mov edi, dword [ebp - 0x70]
lea eax, [ebx + 0x7c]
add ecx, 0x50
mov ebx, eax
movzx eax, byte [ebx]
lea ebx, [ebx + 0x50]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [edi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [edi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x10163297
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x9c]
test byte [eax + 0x2c], 0x10
jne 0x10163362
test byte [ecx + 0x24], 0x20
jne 0x1016331e
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
push eax
push 0
push 0x49
push edi
mov dword [ebp - 0x78], eax
call fcn.10154510
add esp, 0x10
jmp 0x10163356
mov eax, dword [edx + 4]
mov dword [ebp - 0xd0], eax
jmp 0x101632e8
push ecx
call fcn.1014b0f0
mov esi, eax
mov eax, dword [ebp - 0xb4]
mov edx, dword [eax + 0x28]
mov dword [ebp - 0x78], edx
lea ecx, [edx + 1]
mov dword [eax + 0x28], ecx
movzx ecx, word [esi + 0x32]
push ecx
push edx
push 0x71
push edi
call fcn.10154510
push esi
mov esi, dword [ebp - 0xb4]
push esi
call fcn.1015ee60
add esp, 0x1c
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0xb8], eax
mov ecx, dword [edi + 0x6c]
mov dword [ebp - 0xa0], ecx
cmp dword [edi + 0x70], ecx
jg 0x1016338d
push 0
push dword [ebp - 0xc0]
push 0
push 0x46
push edi
call fcn.10113170
add esp, 0x14
mov dword [ebp - 0xa0], eax
jmp 0x101633c2
mov edx, dword [ebp - 0xc0]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ecx + 0xc]
cmp eax, 1
jle 0x101634f0
xor edx, edx
mov dword [ebp - 0x68], edx
test eax, eax
jle 0x101634f0
mov edi, dword [ebp - 0xd4]
xor ecx, ecx
mov esi, dword [ebp - 0xd8]
xor ebx, ebx
mov dword [ebp - 0x70], ecx
mov eax, dword [esi + 0x14]
add eax, ecx
cmp eax, dword [ebp - 0x7c]
je 0x10163440
test byte [eax + 0xa], 6
jne 0x10163440
mov esi, 0x1fff
test word [eax + 0xc], si
mov esi, dword [ebp - 0xd8]
je 0x10163440
mov eax, dword [eax]
test eax, eax
je 0x1016342b
push 0
push 0
push eax
push edi
call fcn.100fe650
add esp, 0x10
jmp 0x1016342d
xor eax, eax
push eax
push ebx
push edi
call fcn.10133520
mov ecx, dword [ebp - 0x70]
add esp, 0xc
mov edx, dword [ebp - 0x68]
mov ebx, eax
inc edx
add ecx, 0x30
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x70], ecx
cmp edx, dword [esi + 0xc]
jl 0x101633f4
mov edi, dword [ebp - 0xc8]
test ebx, ebx
mov esi, dword [ebp - 0xb4]
mov dword [ebp - 0x88], ebx
mov ebx, dword [ebp - 0x90]
je 0x101634f0
push 0
push 0x34
push dword [esi]
call fcn.10131310
add esp, 0xc
mov dword [ebp - 0x70], eax
test eax, eax
je 0x101634d6
push 0x34
push 0
push eax
call fcn.101a08b0
mov ecx, dword [ebp - 0x70]
or eax, 0xffffffff
push ecx
mov word [ecx + 0x22], ax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0x10], eax
mov byte [ecx], 0x2c
mov eax, dword [eax + 4]
and eax, 0x200104
or dword [ecx + 4], eax
call fcn.100ff290
mov eax, dword [esi]
add esp, 0x10
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x18], ecx
jle 0x101634ea
push ecx
push str.Expression_tree_is_too_large__maximum_depth__d_
push esi
call fcn.10132f50
add esp, 0xc
jmp 0x101634e7
mov eax, dword [ebp - 0x88]
push eax
push dword [esi]
call fcn.10135f80
add esp, 8
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x9c]
mov ecx, 0x400
push str.MULTI_INDEX_OR
push 1
push esi
mov ax, word [eax + 0x2c]
and ax, cx
or ax, 0x20
movzx eax, ax
mov dword [ebp - 0xe4], eax
call fcn.1015bee0
mov ecx, dword [ebp - 0xcc]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x74], eax
cmp dword [ecx + 0xc], eax
jle 0x101638db
mov ebx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x8c]
nop
lea eax, [eax + eax*2]
shl eax, 4
add eax, dword [ecx + 0x14]
cmp dword [eax + 0x14], edx
je 0x1016355d
mov esi, 0x400
test word [eax + 0xc], si
je 0x101638bf
mov esi, dword [eax]
xor eax, eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x10163576
mov dword [eax + 0xc], esi
mov esi, eax
mov eax, dword [ebp - 0x74]
inc eax
push eax
push str.INDEX__d
push 1
push ebx
call fcn.1015bee0
push dword [ebp - 0xa8]
push dword [ebp - 0xe4]
push 0
push 0
push esi
mov esi, dword [ebp - 0xd0]
push esi
push ebx
call fcn.10161260
add esp, 0x2c
mov dword [ebp - 0xec], eax
test eax, eax
je 0x101638b3
push 0
lea ecx, [eax + 0x2f0]
push ecx
push esi
push ebx
call fcn.101647e0
mov eax, dword [ebp - 0x9c]
add esp, 0x10
test byte [eax + 0x2c], 0x10
jne 0x1016377b
mov eax, dword [ebp - 0xcc]
mov esi, dword [ebp - 0x74]
mov eax, dword [eax + 0xc]
dec eax
cmp esi, eax
mov eax, 0xffffffff
cmove esi, eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x68], esi
test byte [eax + 0x24], 0x20
jne 0x10163636
mov edx, dword [ebp - 0xb8]
push edx
push dword [ebp - 0x8c]
push 0x80
push edi
call fcn.10154510
push esi
push dword [ebp - 0xb8]
push 0
push dword [ebp - 0x78]
push 0x2a
push edi
call fcn.10154640
add esp, 0x28
mov esi, eax
jmp 0x10163781
push eax
call fcn.1014b0f0
mov dword [ebp - 0xe8], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
mov dword [ebp - 0x70], eax
call fcn.10140550
xor esi, esi
mov dword [ebp - 0x6c], eax
add esp, 0xc
cmp dword [ebp - 0x70], esi
jbe 0x10163695
mov ebx, dword [ebp - 0x70]
lea ecx, [esi + eax]
mov eax, dword [ebp - 0xe8]
push ecx
mov eax, dword [eax + 4]
movsx eax, word [eax + esi*2]
push eax
push dword [ebp - 0x8c]
push dword [ebp - 0x84]
push edi
call fcn.10133d00
mov eax, dword [ebp - 0x6c]
inc esi
add esp, 0x14
cmp esi, ebx
jl 0x10163660
mov ebx, dword [ebp - 0xb4]
cmp dword [ebp - 0x68], 0
mov esi, dword [ebp - 0x70]
je 0x101636c0
push esi
push eax
push 0
push dword [ebp - 0x78]
push 0x1d
push edi
call fcn.10154640
add esp, 0x18
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x68], 0
jl 0x10163745
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp - 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x101636e0
push dword [ebp - 0xb8]
push esi
push edx
push 0x5c
push edi
call fcn.10113170
add esp, 0x14
jmp 0x1016370d
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0x5c
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push esi
push dword [ebp - 0x6c]
push dword [ebp - 0xb8]
push dword [ebp - 0x78]
push 0x84
push edi
call fcn.10154640
add esp, 0x18
cmp dword [ebp - 0x68], 0
je 0x10163745
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x10163745
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
cmp esi, 1
jne 0x1016376d
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x1016377b
mov al, byte [ebx + 0x13]
mov esi, dword [ebp - 0x94]
cmp al, 8
jae 0x10163781
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x10163781
cmp esi, dword [ebx + 0x1c]
jle 0x1016377b
mov eax, dword [ebp - 0x6c]
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], eax
mov esi, dword [ebp - 0x94]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x101637a4
push 0
push dword [ebp - 0xac]
push dword [ebp - 0xc0]
push 0xc
push edi
call fcn.10113170
add esp, 0x14
jmp 0x101637db
mov edx, dword [ebp - 0xc0]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xac]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test esi, esi
je 0x10163805
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x101637f1
mov eax, 0x1026970c
jmp 0x10163802
test esi, esi
lea eax, [edx - 1]
cmovns eax, esi
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0xec]
mov ecx, 1
mov eax, dword [ebp - 0xa4]
cmp byte [edx + 0x32], 0
cmovne eax, ecx
mov ecx, dword [edx + 0x330]
mov dword [ebp - 0xa4], eax
test dword [ecx + 0x24], 0x200
je 0x10163866
cmp dword [ebp - 0x74], 0
je 0x10163843
mov eax, dword [ebp - 0xbc]
cmp dword [ecx + 0x20], eax
jne 0x10163866
mov eax, dword [ebp - 0x84]
test byte [eax + 0x24], 0x20
je 0x1016385b
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
je 0x10163866
mov esi, dword [ecx + 0x20]
mov dword [ebp - 0xbc], esi
jmp 0x10163870
mov dword [ebp - 0xbc], 0
push edx
call fcn.10163f50
mov ecx, dword [ebx + 0xd4]
add esp, 4
test ecx, ecx
jne 0x10163887
xor eax, eax
jmp 0x101638ad
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x10163892
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x101638a1
mov eax, 0x1026970c
jmp 0x101638aa
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xd4], eax
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp eax, dword [ecx + 0xc]
jl 0x10163540
mov ebx, dword [ebp - 0x90]
mov esi, dword [ebp - 0xb4]
mov ecx, dword [esi + 0xd4]
test ecx, ecx
jne 0x101638e9
xor eax, eax
jmp 0x1016390f
mov edx, dword [esi + 8]
test ecx, ecx
jns 0x101638f4
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x10163903
mov eax, 0x1026970c
jmp 0x1016390c
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [esi + 0xd4], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebx + 0x38], eax
test eax, eax
je 0x1016392b
mov eax, dword [ebp - 0xa8]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x88]
mov esi, dword [ebp - 0xd4]
test eax, eax
je 0x1016394c
push eax
push esi
mov dword [eax + 0xc], 0
call fcn.10135f80
add esp, 8
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x1016395e
mov eax, 0x1026970c
jmp 0x10163975
mov ecx, dword [ebp - 0xa0]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebx + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x10163995
push 0
push edx
push 0
push 0xb
push edi
call fcn.10113170
add esp, 0x14
jmp 0x101639ca
mov ebx, dword [ebp - 0x90]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [ebp - 0xac]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x101639ea
push edx
push edi
push ecx
call fcn.10121130
add esp, 0xc
jmp 0x101639f3
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x9c]
cmp byte [eax + 0x2e], 1
jbe 0x10163a4b
mov ecx, dword [ebp - 0xd0]
test ecx, ecx
je 0x10163a4b
test esi, esi
je 0x10163a42
cmp dword [esi + 0x1e8], 0
je 0x10163a22
push ecx
push esi
call fcn.10116310
add esp, 8
jmp 0x10163a4b
cmp ecx, dword [esi + 0x138]
jb 0x10163a42
cmp ecx, dword [esi + 0x13c]
jae 0x10163a42
mov eax, dword [esi + 0x134]
mov dword [ecx], eax
mov dword [esi + 0x134], ecx
jmp 0x10163a4b
push ecx
call fcn.100e0470
add esp, 4
cmp dword [ebp - 0xa4], 0
jne 0x10163aac
push dword [ebp - 0x7c]
push ebx
call fcn.100fc370
add esp, 8
jmp 0x10163aac
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x28], 0x20
je 0x10163a74
mov byte [ebx + 0x2d], 0xaa
jmp 0x10163aac
mov ecx, dword [ebp - 0xa4]
push dword [ebp - 0xbc]
mov al, byte [ecx + 0x10213318]
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0x8c]
push eax
mov dword [ebx + 0x30], eax
movzx eax, byte [ecx + 0x1021331c]
push eax
push edi
call fcn.10154510
add esp, 0x10
mov byte [ebx + 0x2f], 1
inc eax
mov dword [ebx + 0x34], eax
xor ecx, ecx
mov ebx, dword [ebp - 0xd8]
neg ecx
sbb ecx, ecx
add ecx, 2
mov dword [ebp - 0x68], ecx
nop
mov edx, dword [ebx + 0xc]
xor eax, eax
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x88], edx
test edx, edx
jle 0x10163cef
nop dword [eax]
movzx edx, word [esi + 0xa]
xor ebx, ebx
test dl, 6
jne 0x10163cc5
mov eax, dword [ebp - 0x90]
mov edi, dword [ebp - 0x90]
mov ecx, dword [esi + 0x28]
and ecx, dword [eax + 0x48]
mov eax, dword [esi + 0x2c]
and eax, dword [edi + 0x4c]
or ecx, eax
mov edi, dword [ebp - 0xc8]
je 0x10163b20
mov eax, dword [ebp - 0x9c]
mov byte [eax + 0x32], 1
jmp 0x10163cc2
mov eax, dword [ebp - 0xdc]
mov ecx, dword [esi]
mov dword [ebp - 0xe4], ecx
test byte [eax + 0x24], 8
je 0x10163b3e
test byte [ecx + 4], 1
je 0x10163cc2
mov eax, dword [ebp - 0x68]
cmp eax, 1
jne 0x10163bb9
mov eax, dword [ebp - 0x90]
xorps xmm0, xmm0
mov dword [ebp - 0x114], ebx
movlpd qword [ebp - 0x10c], xmm0
movlpd qword [ebp - 0x104], xmm0
mov eax, dword [eax + 4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x110], 0x100fea50
mov dword [ebp - 0xfc], eax
test ecx, ecx
je 0x10163ba4
push ecx
lea eax, [ebp - 0x114]
push eax
call fcn.10170c60
add esp, 8
cmp byte [ebp - 0x100], bl
je 0x10163bbe
mov eax, 2
mov dword [ebp - 0x6c], eax
jmp 0x10163cc5
cmp eax, 3
jge 0x10163be2
movzx edx, word [esi + 0xa]
test edx, 0x1000
je 0x10163be2
mov eax, dword [ebp - 0x6c]
test eax, eax
jne 0x10163cc5
mov eax, 3
mov dword [ebp - 0x6c], eax
jmp 0x10163cc5
test edx, 0x200
je 0x10163c77
mov eax, dword [ebp - 0x90]
mov eax, dword [eax + 0x24]
test eax, eax
je 0x10163c77
mov ebx, dword [edi + 0x6c]
mov edx, eax
and eax, 1
shr edx, 1
mov dword [ebp - 0xe8], edx
lea eax, [eax*2 + 0x12]
mov dword [ebp - 0xec], eax
cmp dword [edi + 0x70], ebx
jg 0x10163c34
push 0
push 0
push edx
push eax
push edi
call fcn.10113170
add esp, 0x14
mov ebx, eax
jmp 0x10163c77
mov edx, dword [ebp - 0xec]
lea eax, [ebx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov edx, dword [ebp - 0xe8]
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0x10
push dword [ebp - 0xe0]
push dword [ebp - 0xe4]
push dword [ebp - 0xb4]
call fcn.10136260
add esp, 0x10
test ebx, ebx
je 0x10163cbd
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x10163ca9
mov eax, 0x1026970c
jmp 0x10163cba
test ebx, ebx
lea eax, [edx - 1]
cmovns eax, ebx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [esi + 0xa], 4
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x88]
add esi, 0x30
dec edx
mov dword [ebp - 0x88], edx
test edx, edx
jg 0x10163ae0
mov ebx, dword [ebp - 0xd8]
mov edx, dword [ebx + 0xc]
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x68], eax
test eax, eax
jg 0x10163ac0
test edx, edx
jle 0x10163e7f
mov edi, dword [ebp - 0x90]
lea ebx, [esi + 0xc]
mov dword [ebp - 0x78], ebx
mov esi, 0xb
test byte [ebx - 2], 6
jne 0x10163e64
movzx eax, word [ebx]
test al, 0x82
setne cl
bt ax, si
setb al
test al, cl
je 0x10163e64
mov ecx, dword [ebp - 0x8c]
cmp dword [ebx + 8], ecx
jne 0x10163e64
cmp dword [edi], 0
jne 0x10163e64
mov eax, dword [ebx - 0xc]
xor esi, esi
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0xec], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x58], esi
mov word [ebp - 0x54], 0x100
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x50], 0x83
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], ecx
mov byte [ebp - 0x52], 1
cmp eax, 0xfffffffe
je 0x10163dd4
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x64]
push eax
call fcn.10175180
mov edx, eax
add esp, 4
test edx, edx
je 0x10163dd4
nop
mov ebx, dword [edx + 0x20]
mov ecx, ebx
mov eax, dword [edx + 0x24]
and ecx, dword [ebp + 0x1c]
and eax, dword [ebp + 0x20]
or ecx, eax
jne 0x10163dc2
or ebx, dword [edx + 0x24]
jne 0x10163dbd
test byte [edx + 0xc], 0x82
jne 0x10163dd6
test esi, esi
cmove esi, edx
lea eax, [ebp - 0x64]
push eax
call fcn.10175180
mov edx, eax
add esp, 4
test edx, edx
jne 0x10163da0
mov edx, esi
test edx, edx
je 0x10163e56
test byte [edx + 0xa], 4
jne 0x10163e56
test byte [edx + 0xc], 1
je 0x10163dff
mov eax, dword [edx]
test dword [eax + 4], 0x800
je 0x10163dff
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
cmp dword [eax], 1
jg 0x10163e56
mov eax, dword [edx]
push 0x10
push dword [ebp - 0xe0]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x12c], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0x11c], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ebp - 0x10c], xmm0
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xec]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0xb4]
call fcn.10136260
add esp, 0x10
mov ebx, dword [ebp - 0x78]
mov esi, 0xb
mov edx, dword [ebp - 0x88]
dec edx
add ebx, 0x30
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x78], ebx
test edx, edx
jg 0x10163d13
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov edx, dword [ebx]
test edx, edx
je 0x10163f32
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x1c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x10163eaf
push 0
push edx
push 1
push 0x46
push edi
call fcn.10113170
add esp, 0x14
jmp 0x10163ede
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0xd8]
xor edi, edi
mov esi, dword [edx + 0x14]
cmp dword [edx + 0xc], edi
jle 0x10163f32
nop
test byte [esi + 0xa], 6
jne 0x10163f29
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [ebx + 0x48]
and eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x10163f29
push 0x10
push dword [ebp - 0xe0]
push dword [esi]
push dword [ebp - 0xb4]
call fcn.10136260
mov edx, dword [ebp - 0xd8]
add esp, 0x10
or word [esi + 0xa], 4
inc edi
add esi, 0x30
cmp edi, dword [edx + 0xc]
jl 0x10163ef0
mov ecx, dword [ebp - 4]
mov eax, dword [ebx + 0x48]
xor ecx, ebp
mov edx, dword [ebx + 0x4c]
pop edi
pop esi
pop ebx
call fcn.100d02f2
mov esp, ebp
pop ebp
ret