Function at 0x10099350
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x148
mov eax, dword [0x10115034]
xor eax, esp
mov dword [esp + 0x144], eax
push esi
mov esi, dword [ecx]
lea eax, [ecx + 0x50]
mov dword [esp + 0x80], eax
mov dword [esp + 0x64], edx
mov dword [esp + 0x5c], ecx
mov eax, dword [esi]
mov dword [esp + 0x6c], eax
lea eax, [edx + edx*4]
shl eax, 4
lea edx, [ecx + 0x2f0]
add edx, eax
mov dword [esp + 0x70], esi
push edi
mov edi, dword [esi + 8]
mov dword [esp + 0x54], edi
mov eax, dword [edx + 0x40]
mov dword [esp + 0x5c], eax
movzx eax, byte [edx + 0x2c]
mov dword [esp + 0x18], edx
lea ecx, [eax + eax*4]
mov eax, dword [esp + 0x60]
shl ecx, 4
mov eax, dword [eax + 4]
add eax, 8
add eax, ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x14], eax
mov eax, dword [eax + 0x30]
mov dword [esp + 0x44], eax
xor eax, eax
cmp dword [ecx + 0x1e8], eax
jle 0x10099404
add ecx, 0x1ec
nop
mov edi, dword [esp + 0x44]
cmp dword [ecx], edi
mov edi, dword [esp + 0x54]
je 0x100995d2
mov edi, dword [esp + 0x60]
inc eax
add ecx, 4
cmp eax, dword [edi + 0x1e8]
mov edi, dword [esp + 0x54]
jl 0x100993e0
xorps xmm0, xmm0
movlpd qword [esp + 0x88], xmm0
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
not ecx
not eax
and ecx, dword [ebp + 8]
and eax, dword [ebp + 0xc]
mov dword [edx + 0x48], ecx
mov ecx, dword [esp + 0x60]
mov dword [edx + 0x4c], eax
mov eax, dword [ecx + 0x40]
mov edx, dword [ecx + 0x44]
mov ecx, dword [esp + 0x68]
call fcn.100ddd00
and eax, 1
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x5c]
test byte [eax + 0x24], 0x40
je 0x10099464
mov eax, dword [esp + 0x60]
mov dword [esp + 0x34], 1
test byte [eax + 0x28], 0x20
je 0x1009946c
mov dword [esp + 0x34], 0
mov ecx, dword [edi + 0xc]
mov dword [esp + 0x1c], ecx
mov edx, dword [ecx + 0x48]
mov dword [esp + 0x20], edx
lea eax, [edx + 1]
mov dword [ecx + 0x48], eax
lea eax, [edx - 1]
test edx, eax
jne 0x100994a9
lea eax, [edx*8 + 4]
mov edx, dword [ecx + 0x4c]
mov ecx, dword [ecx]
push 0
push eax
call fcn.10032d60
mov ecx, dword [esp + 0x24]
add esp, 8
mov edx, dword [esp + 0x20]
mov dword [ecx + 0x4c], eax
mov eax, dword [ecx + 0x4c]
test eax, eax
je 0x100994b7
mov dword [eax + edx*4], 0xffffffff
mov ecx, dword [esp + 0x18]
or eax, 0xffffffff
mov esi, dword [esp + 0x74]
sub eax, edx
mov dword [esp + 0x30], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0xc], eax
mov edx, dword [edi + 0xc]
mov dword [esp + 0x20], edx
mov eax, dword [edx + 0x48]
mov dword [esp + 0x24], eax
inc eax
mov dword [edx + 0x48], eax
mov eax, dword [esp + 0x24]
dec eax
test dword [esp + 0x24], eax
jne 0x10099515
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [edx + 0x4c]
push 0
lea eax, [eax*8 + 4]
mov ecx, dword [ecx]
push eax
call fcn.10032d60
mov edx, dword [esp + 0x28]
add esp, 8
mov ecx, dword [esp + 0x18]
mov dword [edx + 0x4c], eax
mov edx, dword [edx + 0x4c]
mov eax, dword [esp + 0x24]
test edx, edx
je 0x10099527
mov dword [edx + eax*4], 0xffffffff
or edx, 0xffffffff
sub edx, eax
cmp byte [ecx + 0x2c], 0
mov dword [esp + 0x94], edx
mov dword [ecx + 0x18], edx
jbe 0x10099565
mov eax, dword [esp + 0x14]
test byte [eax + 0x24], 8
je 0x10099565
mov eax, dword [esi + 0x2c]
mov edx, 0x4d
inc eax
mov dword [esi + 0x2c], eax
push eax
mov dword [ecx], eax
mov ecx, edi
push 0
call fcn.10051680
mov ecx, dword [esp + 0x20]
add esp, 8
mov edx, dword [esp + 0x68]
mov eax, edx
test edx, edx
jle 0x1009957e
mov edx, ecx
cmp dword [edx], 0
jne 0x1009957e
dec eax
sub edx, 0x50
test eax, eax
jg 0x10099571
mov edx, dword [esp + 0x60]
lea eax, [eax + eax*4]
add eax, eax
mov eax, dword [edx + eax*8 + 0x2fc]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x28]
mov dword [esp + 0x88], edx
test dl, 0x10
je 0x100996a0
mov esi, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x88]
cmp dword [eax + 0x30], ecx
jg 0x100995f2
push edx
push 0
push esi
mov edx, 0xf
mov ecx, edi
call fcn.100514f0
add esp, 0xc
jmp 0x10099624
xor ecx, ecx
xor esi, esi
bts ecx, eax
cmp eax, 0x20
cmovae esi, ecx
xor ecx, esi
mov dword [esp + 0x1c], esi
cmp eax, 0x40
mov eax, esi
cmovae eax, ecx
jmp 0x1009941e
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov edi, dword [esp + 0x54]
mov dword [eax + ecx*4], 0xf
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0xc]
mov edx, dword [edi + 0x88]
cmp dword [eax + 0x30], edx
jg 0x1009965a
push 0
push dword [esp + 0x34]
mov edx, 0x10
mov ecx, edi
push esi
call fcn.100514f0
mov ecx, dword [esp + 0x24]
mov edx, eax
add esp, 0xc
mov dword [ecx + 0x34], edx
mov byte [ecx + 0x2d], 0xd
jmp 0x10099bbb
lea eax, [edx + 1]
mov dword [edi + 0x88], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x58]
mov edi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x10
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x34], edx
mov byte [ecx + 0x2d], 0xd
jmp 0x10099bbb
mov eax, dword [esp + 0x5c]
mov edx, dword [eax + 0x24]
test edx, 0x400
je 0x10099c26
movzx edx, word [eax + 0x28]
inc dword [esi + 0x40]
mov dword [esp + 0x30], edx
lea eax, [edx + 2]
cmp eax, 1
jne 0x100996ee
mov al, byte [esi + 0x13]
test al, al
jne 0x100996d9
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x28], eax
jmp 0x10099727
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x160]
mov dword [esp + 0x28], eax
jmp 0x10099727
mov ecx, dword [esi + 0x1c]
mov edi, dword [esi + 0x20]
mov dword [esp + 0x28], edi
cmp eax, ecx
jg 0x1009970d
add eax, edi
mov edi, ecx
mov dword [esi + 0x20], eax
lea eax, [edx + 2]
sub edi, eax
mov dword [esi + 0x1c], edi
jmp 0x1009971f
mov eax, dword [esi + 0x2c]
lea edi, [eax + 1]
add eax, 2
add eax, edx
mov dword [esp + 0x28], edi
mov dword [esi + 0x2c], eax
mov edi, dword [esp + 0x54]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x14], eax
test edx, edx
jle 0x10099790
xor edi, edi
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + 0x30]
mov edx, dword [eax + edi*4]
test edx, edx
je 0x10099785
mov eax, dword [esp + 0x28]
add eax, 2
add eax, edi
test byte [edx + 0xc], 1
je 0x1009976f
push eax
push dword [esp + 0x5c]
push edi
push ecx
mov ecx, esi
call fcn.10098660
mov ecx, dword [esp + 0x28]
add esp, 0x10
mov eax, dword [ecx + 0x10]
mov dword [esp + 0x14], eax
jmp 0x10099785
mov edx, dword [edx]
mov ecx, esi
push 1
push eax
mov edx, dword [edx + 0x10]
call fcn.100992a0
mov ecx, dword [esp + 0x20]
add esp, 8
inc edi
cmp edi, dword [esp + 0x30]
jl 0x10099734
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x5c]
mov ecx, dword [edi + 0x88]
mov edx, dword [eax + 0x18]
mov eax, dword [edi + 0xc]
cmp dword [eax + 0x30], ecx
jg 0x100997bd
push 0
push dword [esp + 0x2c]
mov ecx, edi
push edx
mov edx, 0x4d
call fcn.100514f0
add esp, 0xc
jmp 0x100997ef
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x4d
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0xc]
mov edx, dword [esp + 0x28]
mov ecx, dword [edi + 0x88]
inc edx
mov dword [esp + 0x1c], edx
cmp dword [eax + 0x30], ecx
jg 0x1009981e
push 0
push edx
push dword [esp + 0x38]
mov edx, 0x4d
mov ecx, edi
call fcn.100514f0
add esp, 0xc
jmp 0x10099854
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x1c]
mov dword [eax + ecx*4], 0x4d
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x5c]
xor edx, edx
mov ecx, dword [edi + 0x88]
mov dword [esp + 0x34], ecx
cmp byte [eax + 0x1c], dl
mov eax, dword [eax + 0x20]
mov dword [esp + 0x40], eax
setne dl
mov eax, dword [edi + 0xc]
add edx, 0xfffffffe
mov dword [esp + 0x1c], edx
cmp dword [eax + 0x30], ecx
jg 0x100998a1
push dword [esp + 0x28]
mov edx, 0xb
mov ecx, edi
push dword [esp + 0x18]
push dword [esp + 0x4c]
call fcn.100514f0
mov edx, dword [esp + 0x28]
add esp, 0xc
jmp 0x100998df
mov esi, dword [esp + 0x44]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x28]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x74]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x34]
mov ecx, dword [edi]
cmp byte [ecx + 0x45], 0
je 0x100998fb
cmp edx, 0xfffffff8
je 0x10099950
mov eax, dword [esp + 0x40]
push eax
call fcn.10052040
add esp, 4
jmp 0x10099950
test eax, eax
jns 0x10099906
mov eax, dword [edi + 0x88]
dec eax
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
lea ecx, [eax + ecx*4]
test edx, edx
jns 0x1009993e
cmp byte [ecx + 1], 0
jne 0x1009993e
mov eax, dword [esp + 0x40]
cmp edx, 0xfffffff5
jne 0x1009992a
mov dword [ecx + 0x10], eax
mov byte [ecx + 1], dl
jmp 0x10099950
test eax, eax
je 0x10099950
mov dword [ecx + 0x10], eax
mov byte [ecx + 1], dl
cmp edx, 0xfffffff8
jne 0x10099950
inc dword [eax + 0xc]
jmp 0x10099950
mov eax, dword [esp + 0x40]
push edx
mov edx, ecx
mov ecx, edi
push eax
call fcn.10052200
add esp, 8
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x60]
mov byte [eax + 0x1c], 0
mov eax, dword [esp + 0x44]
mov dword [edx + 0x30], eax
mov eax, 0x47
cmp byte [ecx + 0x2d], 0
mov ecx, 0xa2
cmovne eax, ecx
mov ecx, dword [esp + 0x30]
mov byte [edx + 0x2d], al
dec ecx
mov eax, dword [edi + 0x88]
mov dword [edx + 0x34], eax
mov dword [esp + 0x24], ecx
js 0x10099bb0
mov eax, dword [edx + 0x38]
lea eax, [eax + eax*2]
shl eax, 2
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x14], eax
cmp ecx, 0x10
jge 0x100999dc
mov eax, dword [esp + 0x5c]
mov ax, word [eax + 0x1e]
shr ax, cl
test al, 1
je 0x100999d4
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
call fcn.100984b0
jmp 0x10099b9d
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
test byte [eax + 0xc], 1
je 0x10099ba5
mov eax, dword [esp + 0x70]
cmp byte [eax + 0x45], 0
jne 0x10099aa7
mov ecx, dword [esp + 0x20]
mov eax, dword [edx + 0x3c]
sub ecx, 0xc
mov dword [esp + 0x20], ecx
mov ecx, dword [eax + ecx + 4]
test ecx, ecx
jns 0x10099a11
mov ecx, dword [edi + 0x88]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x45], 0
je 0x10099a20
mov eax, 0x101196c4
jmp 0x10099a29
mov eax, dword [edi + 0x58]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp + 0x7c], ecx
mov ecx, dword [eax + 4]
movzx eax, byte [eax]
mov dword [esp + 0x68], eax
mov eax, dword [edi + 0xc]
mov dword [esp + 0x4c], ecx
mov ecx, dword [edi + 0x88]
cmp dword [eax + 0x30], ecx
jg 0x10099a6a
mov ecx, dword [esp + 0x7c]
push edx
mov edx, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x54]
push ecx
mov ecx, edi
call fcn.100514f0
add esp, 0xc
jmp 0x10099aa7
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x68]
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 8], ecx
mov ecx, dword [esi]
push 0
push 0x30
call fcn.10032bb0
add esp, 8
mov dword [esp + 0x38], eax
test eax, eax
je 0x10099b9d
push 0x30
push 0
push eax
call sub.MSVCR120.dll_memset
mov eax, dword [esp + 0x44]
or ecx, 0xffffffff
add esp, 0xc
mov word [eax + 0x22], cx
mov ecx, eax
mov byte [eax], 0x25
call fcn.10065240
mov eax, dword [esi]
mov ecx, dword [eax + 0x6c]
mov eax, dword [esp + 0x38]
cmp dword [eax + 0x18], ecx
jle 0x10099b00
push ecx
push str.Expression_tree_is_too_large__maximum_depth__d_
push esi
call fcn.10035700
add esp, 0xc
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x38]
push 0
push 0x31
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [esp + 0x78]
call fcn.10032bb0
mov edx, eax
add esp, 8
mov dword [esp + 0x1c], edx
test edx, edx
je 0x10099b55
push 0x30
push 0
push edx
call sub.MSVCR120.dll_memset
mov edx, dword [esp + 0x28]
add esp, 0xc
or eax, 0xffffffff
mov word [edx + 0x22], ax
lea eax, [edx + 0x30]
mov byte [edx], 0x9d
mov dword [edx + 8], eax
mov byte [eax], 0
mov dword [edx + 0x18], 1
mov ecx, dword [esp + 0x38]
mov dword [ecx + 0x10], edx
test edx, edx
je 0x10099b8b
mov edi, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add edi, 2
add eax, edi
mov dword [edx + 0x1c], eax
mov eax, dword [esp + 0x18]
push 0
push dword [eax + 0x18]
push ecx
push esi
call fcn.1006b500
mov edi, dword [esp + 0x64]
add esp, 0x10
mov ecx, dword [esp + 0x38]
mov dword [ecx + 0xc], 0
mov edx, ecx
mov ecx, dword [esp + 0x70]
call fcn.10065990
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x18]
dec ecx
mov dword [esp + 0x24], ecx
jns 0x100999a0
mov ecx, esi
call fcn.10069870
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x84]
mov eax, dword [esi + 0xc]
mov edx, dword [esi + 0x14]
mov dword [esp + 0x34], edx
mov dword [esp + 0x1c], eax
test eax, eax
jle 0x1009b2d4
jmp 0x10099be0
movzx eax, word [edx + 0xa]
xor esi, esi
mov dword [esp + 0x88], eax
test al, 6
jne 0x1009b2b5
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x18]
mov ecx, dword [edx + 0x28]
and ecx, dword [eax + 0x48]
mov eax, dword [edx + 0x2c]
and eax, dword [edi + 0x4c]
mov edi, dword [esp + 0x54]
or ecx, eax
mov ecx, dword [esp + 0x18]
je 0x1009b1bd
mov eax, dword [esp + 0x60]
mov byte [eax + 0x2e], 1
jmp 0x1009b2b5
mov dword [esp + 0x4c], edx
and dword [esp + 0x4c], 0x100
je 0x10099cc3
test dl, 5
je 0x10099cc3
mov eax, dword [eax + 0x30]
mov edx, dword [eax]
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
push eax
push dword [esp + 0x5c]
mov dword [esp + 0x24], eax
push 0
push ecx
mov ecx, esi
call fcn.10098660
mov edx, dword [esp + 0x2c]
add esp, 0x10
mov dword [esp + 0x14], eax
cmp eax, edx
je 0x10099c79
mov ecx, esi
call fcn.1006c060
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x1c]
mov edx, 0x20
mov ecx, edi
push dword [eax + 0x10]
push dword [esp + 0x4c]
call fcn.10051530
mov edx, dword [esp + 0x20]
add esp, 0xc
mov ecx, esi
push 1
call fcn.100697f0
mov edx, dword [esp + 0x48]
add esp, 4
push dword [esp + 0x14]
push 0xffffffffffffffff
call fcn.100696e0
mov ecx, dword [esp + 0x20]
add esp, 8
mov byte [ecx + 0x2d], 0xa2
jmp 0x10099bbb
cmp dword [esp + 0x4c], 0
je 0x10099f54
test dl, 2
je 0x10099f54
xor ecx, ecx
mov dword [esp + 0x38], 0xa2
mov dword [esp + 0x4c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x14], ecx
test dl, 0x20
je 0x10099d17
mov eax, dword [eax + 0x30]
mov dword [esp + 0x20], 1
mov ecx, dword [eax]
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x14], ecx
test dl, 0x10
je 0x10099d2c
mov eax, dword [eax + 0x30]
mov edx, dword [esp + 0x20]
mov edx, dword [eax + edx*4]
mov dword [esp + 0x40], edx
jmp 0x10099d2e
xor edx, edx
mov eax, dword [esp + 0x58]
test eax, eax
je 0x10099d40
mov dword [esp + 0x40], ecx
mov ecx, edx
mov dword [esp + 0x14], ecx
test ecx, ecx
je 0x10099e14
mov edx, dword [ecx]
mov dword [esp + 0x24], 0x1917181a
mov dword [esp + 0x20], edx
mov ecx, dword [edx + 0x10]
call fcn.10064bb0
test eax, eax
je 0x10099dac
mov al, byte [esi + 0x13]
test al, al
jne 0x10099d71
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x10099d80
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x160]
mov edx, dword [edx + 0x10]
mov ecx, esi
push 1
push eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x70], eax
call fcn.100992a0
mov ecx, dword [esp + 0x28]
add esp, 8
movzx eax, byte [ecx]
sub eax, 0x26
or eax, 1
movzx edx, byte [esp + eax + 0x24]
jmp 0x10099de3
mov edx, dword [edx + 0x10]
lea eax, [esp + 0x34]
push eax
mov ecx, esi
call fcn.1006ac10
mov edx, dword [esp + 0x18]
add esp, 4
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x68], eax
call fcn.100984b0
mov ecx, dword [esp + 0x20]
movzx eax, byte [ecx]
movzx edx, byte [esp + eax - 2]
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
push dword [esp + 0x68]
mov ecx, edi
push dword [esp + 0x34]
push dword [esp + 0x4c]
call fcn.10051530
mov edx, dword [esp + 0x74]
add esp, 0xc
mov ecx, esi
push 1
call fcn.100697f0
mov edx, dword [esp + 0x18]
add esp, 4
call fcn.1006c060
jmp 0x10099e35
push dword [esp + 0x1c]
test eax, eax
mov ecx, 0x35
push dword [esp + 0x48]
mov edx, 0x3a
cmovne edx, ecx
mov ecx, edi
call fcn.10051680
add esp, 8
mov eax, dword [esp + 0x40]
test eax, eax
je 0x10099ec7
mov eax, dword [eax]
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
push 1
mov edx, dword [eax + 0x10]
mov dword [esp + 0x50], ecx
push ecx
mov ecx, esi
mov dword [esp + 0x24], eax
call fcn.100992a0
mov edx, dword [esp + 0x24]
add esp, 8
mov eax, dword [edx + 0x10]
mov ecx, eax
mov dword [esp + 0x1c], eax
call fcn.10064bb0
test eax, eax
jne 0x10099e97
mov al, byte [edx]
cmp al, 0x28
je 0x10099e81
cmp al, 0x26
jne 0x10099e97
xor edx, edx
cmp dword [esp + 0x58], edx
sete dl
lea edx, [edx*2 + 0x27]
mov dword [esp + 0x38], edx
jmp 0x10099ead
mov ecx, dword [esp + 0x58]
xor eax, eax
test ecx, ecx
setne al
lea eax, [eax*2 + 0x26]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x1c]
call fcn.10064bb0
test eax, eax
jne 0x10099ec7
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x18]
call fcn.100984b0
cmp dword [esp + 0x58], 0
mov edx, dword [esp + 0x18]
mov ecx, dword [edi + 0x88]
sete al
add al, 6
cmp dword [esp + 0x38], 0xa2
mov byte [edx + 0x2d], al
mov eax, dword [esp + 0x44]
mov dword [edx + 0x30], eax
mov dword [edx + 0x34], ecx
je 0x1009b1b6
inc dword [esi + 0x2c]
mov edx, 0x7b
mov esi, dword [esi + 0x2c]
mov ecx, edi
push esi
push eax
call fcn.10051680
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x7c]
push esi
push 0xffffffffffffffff
call fcn.100696e0
mov edx, dword [esp + 0x48]
mov ecx, edi
push esi
push dword [esp + 0x44]
push dword [esp + 0x64]
call fcn.10051530
mov eax, dword [edi + 0x88]
add esp, 0x1c
test eax, eax
jle 0x10099bb7
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [edi + 0x58]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x10099bb7
test edx, 0x200
je 0x1009a7fd
movzx esi, word [eax + 0x18]
mov dword [esp + 0x30], esi
movzx esi, word [eax + 0x1a]
mov dword [esp + 0x1c], esi
movzx esi, si
mov dword [esp + 0x40], esi
movzx esi, word [eax + 0x1c]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x20], esi
movzx esi, si
mov dword [esp + 0x80], esi
mov esi, dword [ecx + 8]
mov dword [esp + 0x48], esi
mov esi, dword [esp + 0x60]
mov dword [esp + 0x78], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x3c], 0
test byte [esi + 0x28], 1
mov esi, dword [esp + 0x74]
mov dword [esp + 0x4c], 0
mov byte [esp + 0x2f], 0
mov byte [esp + 0x53], 0
mov dword [esp + 0x24], eax
je 0x10099ff8
mov esi, dword [esp + 0x60]
cmp byte [esi + 0x2b], 0
mov esi, dword [esp + 0x74]
jle 0x10099ff8
mov ecx, dword [esp + 0x30]
cmp word [eax + 0x32], cx
mov ecx, dword [esp + 0x18]
jbe 0x10099ff8
mov byte [esp + 0x2f], 1
mov dword [esp + 0x3c], 1
mov eax, dword [esp + 0x30]
movzx eax, ax
mov dword [esp + 0x28], eax
mov dword [esp + 0x14], eax
test dl, 0x20
je 0x1009a041
mov eax, dword [esp + 0x5c]
mov edi, dword [esp + 0x14]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edi*4]
inc edi
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x3c]
movzx eax, ax
cmp edi, eax
cmovle edi, eax
mov eax, edi
mov dword [esp + 0x3c], edi
mov edi, dword [esp + 0x54]
mov dword [esp + 0x3c], eax
test dl, 0x10
je 0x1009a10b
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x14]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edx*4]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x20]
movzx eax, ax
cmp edx, eax
cmovle edx, eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x3c], edx
mov edx, 0x100
test word [eax + 0xa], dx
je 0x1009a0ca
mov eax, dword [esi + 0x2c]
mov edx, 0x4d
inc eax
mov dword [esi + 0x2c], eax
push eax
mov dword [ecx + 0x24], eax
mov ecx, edi
push 1
call fcn.10051680
mov edx, dword [esp + 0x20]
xor ecx, ecx
mov eax, dword [edi + 0x88]
add esp, 8
mov edi, dword [esp + 0x28]
shl dword [edx + 0x24], 1
mov dword [edx + 0x28], eax
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x1c]
cmp byte [edi + eax], 1
mov edi, dword [esp + 0x54]
sete cl
xor ecx, dword [esp + 0x58]
or dword [edx + 0x24], ecx
cmp dword [esp + 0x78], 0
mov edx, dword [esp + 0x28]
jne 0x1009a10f
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 4]
movsx ecx, word [eax + edx*2]
mov dword [esp + 0x1c], ecx
test ecx, ecx
js 0x1009a0ff
mov eax, dword [esp + 0x24]
add ecx, ecx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 4]
cmp byte [eax + ecx*8 + 0xc], 0
je 0x1009a104
mov ecx, dword [esp + 0x1c]
cmp ecx, 0xfffffffe
jne 0x1009a10f
mov byte [esp + 0x2f], 1
jmp 0x1009a10f
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
movzx ecx, word [eax + 0x32]
mov dword [esp + 0x1c], ecx
cmp word [esp + 0x30], cx
jae 0x1009a13b
mov eax, dword [eax + 0x1c]
xor ecx, ecx
cmp byte [edx + eax], cl
mov edx, dword [esp + 0x58]
sete cl
cmp edx, ecx
je 0x1009a14a
mov ecx, dword [esp + 0x1c]
jmp 0x1009a13f
mov edx, dword [esp + 0x58]
test edx, edx
je 0x1009a187
cmp cx, word [esp + 0x30]
jne 0x1009a187
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x78]
mov edi, dword [esp + 0x80]
mov dword [esp + 0x78], eax
mov al, byte [esp + 0x2f]
mov byte [esp + 0x53], al
mov eax, dword [esp + 0x40]
mov dword [esp + 0x64], ecx
movzx ecx, di
mov edi, dword [esp + 0x54]
movzx eax, al
mov byte [esp + 0x2f], 0
mov dword [esp + 0x40], ecx
mov dword [esp + 0x80], eax
lea eax, [esp + 0x7c]
mov ecx, esi
push eax
push dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x24]
call fcn.10098d70
mov ecx, dword [esp + 0x88]
add esp, 0xc
mov dword [esp + 0x38], eax
test ecx, ecx
je 0x1009a1cd
cmp word [esp + 0x80], 0
je 0x1009a1cd
mov edx, dword [esp + 0x28]
lea edx, [edx + ecx]
mov ecx, dword [esp + 0x70]
call fcn.10032e20
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x78]
test eax, eax
je 0x1009a1ee
test byte [eax + 0xc], 0x28
mov dword [esp + 0x6c], 0
je 0x1009a1f6
mov dword [esp + 0x6c], 1
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x1009a20c
test byte [ecx + 0xc], 0x28
mov dword [esp + 0x14], 0
je 0x1009a214
mov dword [esp + 0x14], 1
test eax, eax
jne 0x1009a347
cmp word [esp + 0x30], ax
ja 0x1009a347
mov ecx, dword [esp + 0x28]
mov edx, ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x3c], edx
mov al, byte [esp + 0x2f]
test al, al
je 0x1009a272
mov eax, dword [esp + 0x38]
mov edx, 0x50
add eax, ecx
mov ecx, edi
push eax
push 0
call fcn.10051680
mov edx, dword [esp + 0x44]
add esp, 8
mov al, byte [esp + 0x2f]
inc edx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x20], 1
push dword [esp + 0x7c]
movzx eax, al
mov ecx, esi
sub edx, eax
push edx
mov edx, dword [esp + 0x40]
call fcn.10098520
mov eax, dword [esp + 0x64]
add esp, 8
mov ecx, dword [esp + 0x3c]
movzx eax, word [eax + 0x2a]
test ax, ax
je 0x1009a29f
cmp ecx, eax
je 0x1009a2cd
mov eax, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x24]
push dword [esp + 0x3c]
push dword [esp + 0x70]
lea eax, [eax + ecx*2]
mov ecx, dword [esp + 0x64]
push dword [esp + 0x54]
movzx edx, byte [ecx + eax*2 + 0x100f26c8]
mov ecx, edi
call fcn.100519e0
add esp, 0x10
mov eax, dword [esp + 0x64]
test eax, eax
je 0x1009a54c
mov eax, dword [eax]
mov ecx, esi
push 1
mov eax, dword [eax + 0x10]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x2c]
add eax, dword [esp + 0x3c]
mov edx, eax
mov dword [esp + 0x24], eax
call fcn.100697f0
mov eax, dword [esp + 0x84]
add esp, 4
mov edx, dword [esp + 0x6c]
movzx eax, ax
push eax
push dword [esp + 0x24]
call fcn.100992a0
mov eax, dword [esp + 0x6c]
mov ecx, 0x100
add esp, 8
test word [eax + 0xa], cx
je 0x1009a49c
mov eax, dword [edi]
mov ecx, dword [edi + 0x88]
dec ecx
cmp byte [eax + 0x45], 0
je 0x1009a47b
mov edx, 0x101196c4
jmp 0x1009a484
mov ecx, dword [esp + 0x28]
mov edx, ecx
mov dword [esp + 0x20], 1
mov dword [esp + 0x3c], edx
test eax, eax
je 0x1009a235
mov eax, dword [eax]
mov edx, dword [esp + 0x40]
add ecx, dword [esp + 0x38]
movzx edx, dx
mov eax, dword [eax + 0x10]
push edx
mov dword [esp + 0x20], ecx
mov edx, eax
push ecx
mov ecx, esi
mov dword [esp + 0x38], eax
call fcn.100992a0
mov eax, dword [esp + 0x80]
mov ecx, 0x100
mov edi, dword [esp + 0x5c]
add esp, 8
test word [eax + 0xa], cx
je 0x1009a3d4
mov eax, dword [edi]
mov ecx, dword [edi + 0x88]
dec ecx
cmp byte [eax + 0x45], 0
je 0x1009a3b3
mov edx, 0x101196c4
jmp 0x1009a3bc
mov eax, dword [edi + 0x58]
lea ecx, [ecx + ecx*4]
lea edx, [eax + ecx*4]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x24]
shr eax, 1
mov dword [edx + 0xc], eax
mov al, byte [ecx + 0x24]
and al, 1
movzx eax, al
mov word [edx + 2], ax
mov ecx, dword [esp + 0x30]
call fcn.10066e60
test eax, eax
je 0x1009a3f8
push dword [esp + 0x68]
mov edx, 0x22
mov ecx, edi
push dword [esp + 0x20]
call fcn.10051680
add esp, 8
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x1009a41a
mov eax, dword [esp + 0x28]
add eax, ecx
mov ecx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x44]
movzx edx, ax
call fcn.10098590
add esp, 4
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
movzx eax, cx
add edx, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x3c], edx
mov cl, byte [eax]
cmp cl, 0x9d
jne 0x1009a439
mov cl, byte [eax + 0x26]
cmp cl, 0x9e
jne 0x1009a443
mov eax, dword [eax + 0x14]
jmp 0x1009a44d
cmp cl, 0x77
jne 0x1009a463
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
cmp eax, 1
jle 0x1009a463
mov dword [esp + 0x6c], 1
xor al, al
jmp 0x1009a272
mov edx, dword [esp + 0x78]
mov ecx, dword [esp + 0x18]
call fcn.100984b0
mov edx, dword [esp + 0x3c]
xor al, al
jmp 0x1009a272
mov eax, dword [edi + 0x58]
lea ecx, [ecx + ecx*4]
lea edx, [eax + ecx*4]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x24]
shr eax, 1
mov dword [edx + 0xc], eax
mov al, byte [ecx + 0x24]
and al, 1
movzx eax, al
mov word [edx + 2], ax
mov ecx, dword [esp + 0x6c]
call fcn.10066e60
test eax, eax
je 0x1009a4c0
push dword [esp + 0x68]
mov edx, 0x22
mov ecx, edi
push dword [esp + 0x24]
call fcn.10051680
add esp, 8
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x1009a4fc
mov ecx, dword [esp + 0x6c]
push eax
mov eax, dword [esp + 0x84]
movzx edx, ax
call fcn.10098590
mov ecx, dword [esp + 0x84]
add esp, 4
mov edx, dword [esp + 0x20]
movzx eax, cx
mov ecx, esi
push dword [esp + 0x4c]
push eax
call fcn.10098520
add esp, 8
mov ecx, dword [esp + 0x80]
movzx eax, cx
add dword [esp + 0x28], eax
mov eax, dword [esp + 0x6c]
mov cl, byte [eax]
cmp cl, 0x9d
jne 0x1009a518
mov cl, byte [eax + 0x26]
cmp cl, 0x9e
jne 0x1009a522
mov eax, dword [eax + 0x14]
jmp 0x1009a52c
cmp cl, 0x77
jne 0x1009a53d
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
cmp eax, 1
jle 0x1009a53d
mov dword [esp + 0x14], 1
jmp 0x1009a579
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x18]
call fcn.100984b0
jmp 0x1009a579
cmp byte [esp + 0x53], 0
je 0x1009a579
mov eax, dword [esp + 0x28]
mov edx, 0x50
add eax, dword [esp + 0x38]
mov ecx, edi
push eax
push 0
call fcn.10051680
add esp, 8
mov dword [esp + 0x14], 0
inc dword [esp + 0x28]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x70]
test ecx, ecx
je 0x1009a5d2
test edx, edx
je 0x1009a5c5
cmp dword [edx + 0x1c8], 0
je 0x1009a59f
mov edx, ecx
mov ecx, dword [esp + 0x70]
call fcn.10032820
jmp 0x1009a5ce
cmp ecx, dword [edx + 0x120]
jb 0x1009a5c5
cmp ecx, dword [edx + 0x124]
jae 0x1009a5c5
mov eax, dword [edx + 0x11c]
mov dword [ecx], eax
dec dword [edx + 0x108]
mov dword [edx + 0x11c], ecx
jmp 0x1009a5d2
push ecx
call fcn.100327b0
add esp, 4
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x1009a623
test edx, edx
je 0x1009a61a
cmp dword [edx + 0x1c8], 0
je 0x1009a5f4
mov edx, ecx
mov ecx, dword [esp + 0x70]
call fcn.10032820
jmp 0x1009a623
cmp ecx, dword [edx + 0x120]
jb 0x1009a61a
cmp ecx, dword [edx + 0x124]
jae 0x1009a61a
mov eax, dword [edx + 0x11c]
mov dword [ecx], eax
dec dword [edx + 0x108]
mov dword [edx + 0x11c], ecx
jmp 0x1009a623
push ecx
call fcn.100327b0
add esp, 4
mov ecx, dword [esp + 0x18]
mov eax, dword [edi + 0x88]
mov dword [ecx + 0x34], eax
mov eax, dword [esp + 0x28]
test eax, eax
je 0x1009a65f
mov ecx, dword [esp + 0x14]
push eax
push dword [esp + 0x3c]
mov eax, dword [esp + 0x60]
push dword [esp + 0x70]
push dword [esp + 0x54]
movzx edx, byte [ecx + eax*2 + 0x100f4df8]
mov ecx, edi
call fcn.100519e0
add esp, 0x10
cmp dword [esp + 0x34], 0
jne 0x1009a7ae
mov edx, dword [esp + 0x24]
mov ecx, dword [edx + 0xc]
test byte [ecx + 0x24], 0x20
jne 0x1009a6eb
mov ecx, dword [esp + 0x60]
movzx eax, word [ecx + 0x28]
test eax, 0x400
jne 0x1009a6a9
test eax, 0x1000
je 0x1009a693
cmp byte [ecx + 0x2d], 1
je 0x1009a6a9
mov esi, dword [esp + 0x48]
push esi
push dword [esp + 0x48]
call fcn.10099150
add esp, 8
jmp 0x1009a7b2
inc dword [esi + 0x2c]
mov edx, 0x81
mov esi, dword [esi + 0x2c]
mov ecx, edi
push esi
push dword [esp + 0x4c]
call fcn.10051680
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x7c]
push esi
push 0xffffffffffffffff
call fcn.100696e0
push esi
push 0
push dword [esp + 0x5c]
mov edx, 0x21
mov ecx, edi
call fcn.10051530
add esp, 0x1c
jmp 0x1009a7ae
mov eax, dword [esp + 0x44]
cmp eax, dword [esp + 0x48]
je 0x1009a7ae
call fcn.10070be0
mov ecx, esi
mov dword [esp + 0x14], eax
movzx edx, word [eax + 0x32]
call fcn.1006c0b0
mov dword [esp + 0x34], eax
xor esi, esi
mov eax, dword [esp + 0x14]
xor ecx, ecx
mov dword [esp + 0x20], esi
cmp cx, word [eax + 0x32]
jae 0x1009a78b
mov edx, dword [esp + 0x24]
xor ecx, ecx
movzx edx, word [edx + 0x34]
test edx, edx
jle 0x1009a755
mov eax, dword [eax + 4]
movzx esi, word [eax + esi*2]
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 4]
nop
cmp si, word [eax]
je 0x1009a7c9
inc ecx
add eax, 2
cmp ecx, edx
jl 0x1009a740
mov esi, dword [esp + 0x20]
or ecx, 0xffffffff
mov eax, dword [esp + 0x34]
mov edx, 0x62
add eax, esi
push eax
movsx eax, cx
mov ecx, edi
push eax
push dword [esp + 0x50]
call fcn.10051530
mov eax, dword [esp + 0x20]
inc esi
add esp, 0xc
mov dword [esp + 0x20], esi
movzx eax, word [eax + 0x32]
cmp esi, eax
mov eax, dword [esp + 0x14]
jl 0x1009a723
movzx eax, word [eax + 0x32]
mov edx, 0x1e
push eax
push dword [esp + 0x38]
mov ecx, edi
push dword [esp + 0x9c]
push dword [esp + 0x50]
call fcn.100519e0
add esp, 0x10
mov esi, dword [esp + 0x48]
mov edx, dword [esp + 0x5c]
mov ecx, dword [esp + 0x18]
test dword [edx + 0x24], 0x1000
je 0x1009a7d2
mov byte [ecx + 0x2d], 0xa2
jmp 0x1009a7df
mov esi, dword [esp + 0x20]
movzx ecx, cx
jmp 0x1009a758
cmp dword [esp + 0x58], 0
sete al
add al, 6
mov byte [ecx + 0x2d], al
mov dword [ecx + 0x30], esi
mov al, byte [edx + 0x26]
and al, 1
mov byte [ecx + 0x2e], al
test byte [edx + 0x24], 0xf
jne 0x10099bbb
mov byte [ecx + 0x2f], 1
jmp 0x10099bbb
test edx, 0x2000
je 0x1009b168
mov eax, dword [esi + 0x28]
mov ecx, edi
inc dword [esi + 0x2c]
mov dword [esp + 0x28], eax
inc eax
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x80], 0
mov dword [esp + 0x4c], eax
mov dword [esp + 0x30], 0
mov dword [esp + 0x40], 0
call fcn.10051af0
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x58], 0
mov dword [esp + 0x64], 0
mov ecx, dword [eax + 0x10]
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x38], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
mov dword [esp + 0x1c], eax
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x18]
mov dword [eax + 0x30], edx
mov edx, dword [esp + 0x60]
mov byte [eax + 0x2d], 0x49
mov al, byte [edx + 0x2a]
cmp al, 1
jbe 0x1009a9c1
movzx eax, al
sub eax, dword [esp + 0x68]
dec eax
push 0
mov dword [esp + 0x38], eax
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x58
push ecx
mov ecx, dword [esp + 0x78]
call fcn.10032b70
mov ecx, eax
add esp, 8
mov dword [esp + 0x78], ecx
test ecx, ecx
jne 0x1009a8d9
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
pop edi
pop esi
mov ecx, dword [esp + 0x144]
xor ecx, esp
call fcn.100dc8fb
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x34]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
movdqu xmm0, xmmword [eax]
movdqu xmmword [ecx + 8], xmm0
movdqu xmm0, xmmword [eax + 0x10]
movdqu xmmword [ecx + 0x18], xmm0
movdqu xmm0, xmmword [eax + 0x20]
movdqu xmmword [ecx + 0x28], xmm0
movdqu xmm0, xmmword [eax + 0x30]
movdqu xmmword [ecx + 0x38], xmm0
movdqu xmm0, xmmword [eax + 0x40]
mov eax, dword [esp + 0x60]
movdqu xmmword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
mov dword [esp + 0x34], eax
cmp edx, 1
jl 0x1009a98b
mov edi, dword [esp + 0x18]
add ecx, 0x58
add edi, 0x7c
lea ebx, [ebx]
movzx eax, byte [edi]
lea edi, [edi + 0x50]
lea ecx, [ecx + 0x50]
lea eax, [eax + eax*4]
shl eax, 4
add eax, dword [esp + 0x34]
movdqu xmm0, xmmword [eax]
movdqu xmmword [ecx - 0x50], xmm0
movdqu xmm0, xmmword [eax + 0x10]
movdqu xmmword [ecx - 0x40], xmm0
movdqu xmm0, xmmword [eax + 0x20]
movdqu xmmword [ecx - 0x30], xmm0
movdqu xmm0, xmmword [eax + 0x30]
movdqu xmmword [ecx - 0x20], xmm0
movdqu xmm0, xmmword [eax + 0x40]
movdqu xmmword [ecx - 0x10], xmm0
dec edx
jne 0x1009a940
mov edi, dword [esp + 0x54]
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x60]
test byte [eax + 0x28], 0x10
jne 0x1009aa20
test byte [ecx + 0x24], 0x20
jne 0x1009a9ca
inc dword [esi + 0x2c]
mov edx, 0x50
mov eax, dword [esi + 0x2c]
mov ecx, edi
push eax
push 0
mov dword [esp + 0x38], eax
call fcn.10051680
add esp, 8
jmp 0x1009aa16
mov eax, dword [edx + 4]
mov dword [esp + 0x78], eax
jmp 0x1009a98f
mov ecx, dword [ecx + 8]
mov dword [esp + 0x34], ecx
test ecx, ecx
je 0x1009a9e9
mov eax, dword [ecx + 0x38]
and al, 3
cmp al, 2
je 0x1009a9e5
mov ecx, dword [ecx + 0x14]
test ecx, ecx
jne 0x1009a9d5
mov dword [esp + 0x34], ecx
mov edx, dword [esi + 0x28]
mov dword [esp + 0x30], edx
lea eax, [edx + 1]
mov dword [esi + 0x28], eax
movzx eax, word [ecx + 0x32]
mov ecx, edi
push eax
push edx
mov edx, 0x6c
call fcn.10051680
mov edx, dword [esp + 0x3c]
add esp, 8
mov ecx, esi
call fcn.100523b0
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x40], eax
push dword [esp + 0x4c]
mov edx, 0x4d
mov ecx, edi
push 0
call fcn.10051680
mov dword [esp + 0x90], eax
add esp, 8
mov eax, dword [esp + 0x84]
xor edx, edx
mov ecx, dword [eax + 0xc]
cmp ecx, 1
jle 0x1009ab6f
mov dword [esp + 0x34], edx
test ecx, ecx
jle 0x1009ab6d
mov esi, dword [esp + 0x70]
xor ecx, ecx
mov dword [esp + 0x20], ecx
mov eax, dword [eax + 0x14]
add eax, ecx
mov edi, dword [eax]
mov dword [esp + 0x14], edi
cmp eax, dword [esp + 0x1c]
je 0x1009aab9
test byte [edi + 4], 1
jne 0x1009aab9
test byte [eax + 0xa], 6
jne 0x1009aab9
mov edi, 0x1fff
test word [eax + 0xc], di
je 0x1009aab9
mov edx, dword [esp + 0x14]
mov ecx, esi
push 0
push 0
call fcn.10065b60
mov edx, dword [esp + 0x6c]
mov ecx, esi
push eax
call fcn.100656b0
mov ecx, dword [esp + 0x2c]
add esp, 0xc
mov edx, dword [esp + 0x34]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x84]
inc edx
add ecx, 0x30
mov dword [esp + 0x34], edx
mov dword [esp + 0x20], ecx
cmp edx, dword [eax + 0xc]
jl 0x1009aa67
mov edx, dword [esp + 0x64]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x74]
test edx, edx
je 0x1009ab6f
mov ecx, dword [esi]
push 0
push 0x30
call fcn.10032bb0
add esp, 8
mov dword [esp + 0x14], eax
test eax, eax
je 0x1009ab56
push 0x30
push 0
push eax
call sub.MSVCR120.dll_memset
mov ecx, dword [esp + 0x20]
or eax, 0xffffffff
add esp, 0xc
mov word [ecx + 0x22], ax
mov eax, dword [esp + 0x64]
mov dword [ecx + 0x10], eax
mov byte [ecx], 0x1c
mov eax, dword [eax + 4]
and eax, 0x200100
or dword [ecx + 4], eax
call fcn.10065240
mov eax, dword [esi]
mov ecx, dword [eax + 0x6c]
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x18], ecx
jle 0x1009ab65
push ecx
push str.Expression_tree_is_too_large__maximum_depth__d_
push esi
call fcn.10035700
mov eax, dword [esp + 0x20]
add esp, 0xc
mov edx, eax
mov dword [esp + 0x64], edx
jmp 0x1009ab6f
mov edx, dword [esp + 0x64]
mov ecx, dword [esi]
call fcn.10065990
mov eax, dword [esp + 0x14]
mov edx, eax
mov dword [esp + 0x64], edx
jmp 0x1009ab6f
xor edx, edx
mov eax, dword [esp + 0x60]
mov ecx, 0x400
mov ax, word [eax + 0x28]
and ax, cx
mov ecx, dword [esp + 0x7c]
or ax, 0x20
movzx eax, ax
mov dword [esp + 0xa4], eax
xor eax, eax
mov dword [esp + 0x6c], eax
cmp dword [ecx + 0xc], eax
jle 0x1009b01a
mov dword [esp + 0xac], 0x10
mov dword [esp + 0x90], 1
mov edi, dword [esp + 0x44]
lea eax, [eax + eax*2]
shl eax, 4
add eax, dword [ecx + 0x14]
cmp dword [eax + 0x14], edi
mov edi, dword [esp + 0x54]
je 0x1009abdf
mov edi, 0x400
test word [eax + 0xc], di
mov edi, dword [esp + 0x54]
je 0x1009b004
mov eax, dword [eax]
xor ecx, ecx
mov dword [esp + 0x20], ecx
test edx, edx
je 0x1009abf6
test byte [eax + 4], 1
jne 0x1009abf6
mov dword [edx + 0xc], eax
mov eax, edx
push dword [esp + 0x28]
mov edx, dword [esp + 0x7c]
mov ecx, esi
push dword [esp + 0xa8]
push 0
push 0
push eax
call fcn.100a2770
mov edx, eax
add esp, 0x14
mov dword [esp + 0xa8], edx
test edx, edx
je 0x1009b000
mov eax, dword [esp + 0x18]
push 0
movzx ecx, byte [eax + 0x2c]
push ecx
push dword [esp + 0x70]
lea ecx, [edx + 0x2f0]
mov edx, dword [esp + 0x84]
push ecx
mov ecx, esi
call fcn.100981e0
mov eax, dword [esp + 0x70]
add esp, 0x10
test byte [eax + 0x28], 0x10
jne 0x1009af02
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x6c]
mov eax, dword [eax + 0xc]
dec eax
cmp ecx, eax
mov eax, 0xffffffff
cmove ecx, eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x14], ecx
test byte [eax + 0x24], 0x20
jne 0x1009acb6
push 0
push dword [esp + 0x44]
mov edx, eax
mov ecx, esi
push dword [esp + 0x4c]
push 0xffffffffffffffff
call fcn.10069a60
push dword [esp + 0x24]
mov edx, 0x40
mov ecx, edi
push eax
push 0
push dword [esp + 0x4c]
call fcn.100519e0
add esp, 0x20
mov dword [esp + 0x20], eax
jmp 0x1009af02
mov ecx, eax
call fcn.10070be0
mov ecx, esi
mov dword [esp + 0x9c], eax
movzx edx, word [eax + 0x32]
mov dword [esp + 0x24], edx
call fcn.1006c0b0
xor ecx, ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x5c], ecx
test edx, edx
jle 0x1009adaa
mov edi, eax
jmp 0x1009acf0
mov eax, dword [esp + 0x9c]
mov edx, dword [esp + 0x38]
push 0
push edi
mov eax, dword [eax + 4]
push dword [esp + 0x4c]
movsx eax, word [eax + ecx*2]
mov ecx, esi
push eax
call fcn.10069a60
add esp, 0x10
mov dword [esp + 0x34], eax
cmp eax, edi
je 0x1009ad8c
mov ecx, dword [esi + 8]
mov dword [esp + 0xa0], ecx
mov edx, dword [ecx + 0xc]
mov eax, dword [ecx + 0x88]
mov dword [esp + 0x98], eax
cmp dword [edx + 0x30], eax
mov edx, dword [esp + 0x34]
jg 0x1009ad52
push 0
push edi
push edx
mov edx, 0x56
call fcn.100514f0
add esp, 0xc
jmp 0x1009ad8c
inc eax
mov dword [ecx + 0x88], eax
mov eax, dword [esp + 0x98]
lea ecx, [eax + eax*4]
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x58]
mov dword [eax + ecx*4], 0x56
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x5c]
inc edi
mov edx, dword [esp + 0x24]
inc ecx
mov dword [esp + 0x5c], ecx
cmp ecx, edx
jl 0x1009acf0
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x48]
cmp dword [esp + 0x14], 0
je 0x1009add7
push edx
push eax
push 0
push dword [esp + 0x3c]
mov edx, 0x1f
mov ecx, edi
call fcn.100519e0
add esp, 0x10
mov dword [esp + 0x20], eax
cmp dword [esp + 0x14], 0
jl 0x1009ae7b
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x88]
cmp dword [eax + 0x30], ecx
jg 0x1009ae03
push dword [esp + 0x40]
mov edx, dword [esp + 0x28]
mov ecx, edi
push edx
push dword [esp + 0x50]
mov edx, 0x64
call fcn.100514f0
add esp, 0xc
jmp 0x1009ae39
mov edx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x24]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x40]
mov dword [eax + ecx*4], 0x64
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push dword [esp + 0x24]
mov edx, 0x7e
mov ecx, edi
push dword [esp + 0x4c]
push dword [esp + 0x48]
push dword [esp + 0x3c]
call fcn.100519e0
add esp, 0x10
cmp dword [esp + 0x14], 0
je 0x1009ae7b
mov eax, dword [edi + 0x88]
test eax, eax
jle 0x1009ae7b
mov edx, dword [esp + 0xac]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
mov word [eax + ecx*4 - 0x12], dx
mov eax, dword [esp + 0x24]
cmp eax, 1
jne 0x1009aee0
cmp dword [esp + 0x48], 0
je 0x1009af02
mov al, byte [esi + 0x13]
mov byte [esp + 0x53], al
cmp al, 8
jae 0x1009af02
movzx edx, byte [esi + 0x19]
lea eax, [esi + 0x98]
xor ecx, ecx
test edx, edx
jle 0x1009aec5
jmp 0x1009aeb0
mov edi, dword [esp + 0x48]
cmp dword [eax + 0xc], edi
mov edi, dword [esp + 0x54]
je 0x1009aeda
inc ecx
add eax, 0x14
cmp ecx, edx
jl 0x1009aeb0
movzx eax, byte [esp + 0x53]
mov ecx, dword [esp + 0x48]
mov dword [esi + eax*4 + 0x160], ecx
inc byte [esi + 0x13]
jmp 0x1009af02
mov byte [eax + 6], 1
jmp 0x1009af02
mov edx, dword [esp + 0x48]
mov ecx, esi
push eax
call fcn.100697f0
mov eax, dword [esp + 0x28]
add esp, 4
cmp eax, dword [esi + 0x1c]
jle 0x1009af02
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x48]
mov dword [esi + 0x20], eax
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x88]
cmp dword [eax + 0x30], ecx
jg 0x1009af2b
push 0
push dword [esp + 0x40]
mov edx, 0xe
mov ecx, edi
push dword [esp + 0x54]
call fcn.100514f0
add esp, 0xc
jmp 0x1009af61
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x1009af8f
mov edx, dword [edi + 0x88]
jns 0x1009af74
lea ecx, [edx - 1]
mov eax, dword [edi]
cmp byte [eax + 0x45], 0
je 0x1009af83
mov eax, 0x101196c4
jmp 0x1009af8c
mov eax, dword [edi + 0x58]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [esp + 0xa8]
mov eax, dword [esp + 0x58]
cmp byte [edx + 0x2e], 0
mov ecx, dword [edx + 0x330]
cmovne eax, dword [esp + 0x90]
mov dword [esp + 0x58], eax
test dword [ecx + 0x24], 0x200
je 0x1009afee
cmp dword [esp + 0x6c], 0
je 0x1009afcc
mov eax, dword [esp + 0x80]
cmp dword [ecx + 0x20], eax
jne 0x1009afee
mov eax, dword [esp + 0x38]
test byte [eax + 0x24], 0x20
je 0x1009afe2
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
je 0x1009afee
mov eax, dword [ecx + 0x20]
mov dword [esp + 0x80], eax
jmp 0x1009aff9
mov dword [esp + 0x80], 0
mov ecx, edx
call fcn.100a31f0
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x64]
inc eax
mov dword [esp + 0x6c], eax
cmp eax, dword [ecx + 0xc]
jl 0x1009abb6
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x80]
mov dword [esi + 0x38], eax
test eax, eax
je 0x1009b033
mov eax, dword [esp + 0x28]
mov dword [esi + 8], eax
mov eax, dword [esp + 0x64]
test eax, eax
je 0x1009b04d
mov ecx, dword [esp + 0x70]
mov edx, eax
mov dword [eax + 0xc], 0
call fcn.10065990
mov ecx, dword [esp + 0x88]
mov edx, dword [edi + 0x88]
test ecx, ecx
jns 0x1009b061
lea ecx, [edx - 1]
mov eax, dword [edi]
cmp byte [eax + 0x45], 0
je 0x1009b070
mov eax, 0x101196c4
jmp 0x1009b079
mov eax, dword [edi + 0x58]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x88]
mov edx, dword [esi + 0xc]
cmp dword [eax + 0x30], ecx
jg 0x1009b0a3
push 0
push edx
push 0
mov edx, 0xd
mov ecx, edi
call fcn.100514f0
add esp, 0xc
jmp 0x1009b0d5
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0xc]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
je 0x1009b0f4
mov eax, dword [esp + 0x3c]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [edi + 0x88]
mov dword [ecx], eax
mov eax, dword [esp + 0x60]
cmp byte [eax + 0x2a], 1
jbe 0x1009b14d
mov edx, dword [esp + 0x78]
test edx, edx
je 0x1009b14d
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x1009b144
cmp dword [ecx + 0x1c8], 0
je 0x1009b11e
call fcn.10032820
jmp 0x1009b14d
cmp edx, dword [ecx + 0x120]
jb 0x1009b144
cmp edx, dword [ecx + 0x124]
jae 0x1009b144
mov eax, dword [ecx + 0x11c]
mov dword [edx], eax
dec dword [ecx + 0x108]
mov dword [ecx + 0x11c], edx
jmp 0x1009b14d
push edx
call fcn.100327b0
add esp, 4
cmp dword [esp + 0x58], 0
jne 0x10099bb7
mov edx, dword [esp + 0x1c]
mov ecx, esi
call fcn.100984b0
jmp 0x10099bb7
test byte [esp + 0x88], 0x20
je 0x1009b17b
mov byte [ecx + 0x2d], 0xa2
jmp 0x10099bbb
mov edx, dword [esp + 0x58]
push dword [esp + 0x1c]
mov al, byte [edx + 0x100f20bc]
movzx edx, byte [edx + 0x100f22ec]
mov byte [ecx + 0x2d], al
mov eax, dword [esp + 0x48]
mov dword [ecx + 0x30], eax
mov ecx, edi
push eax
call fcn.10051680
mov ecx, dword [esp + 0x20]
add esp, 8
inc eax
mov dword [ecx + 0x34], eax
mov byte [ecx + 0x2f], 1
jmp 0x10099bbb
mov ecx, edx
jmp 0x10099bbb
mov eax, dword [edx]
mov dword [esp + 0x90], eax
cmp dword [ecx], esi
je 0x1009b1d4
test byte [eax + 4], 1
je 0x1009b2b5
test dword [esp + 0x88], 0x200
je 0x1009b265
mov eax, dword [ecx + 0x24]
mov edx, esi
mov esi, dword [edi + 0x88]
mov ecx, eax
shr ecx, 1
test al, 1
mov eax, dword [edi + 0xc]
setne dl
mov dword [esp + 0x88], ecx
add edx, 0x15
cmp dword [eax + 0x30], esi
jg 0x1009b21e
push 0
push 0
push ecx
mov ecx, edi
call fcn.100514f0
add esp, 0xc
mov esi, eax
jmp 0x1009b25e
lea eax, [esi + 1]
mov dword [edi + 0x88], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x58]
mov byte [eax + ecx*4], dl
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
lea eax, [eax + ecx*4]
xor ecx, ecx
mov dword [eax + 0x10], 0
mov word [eax + 2], cx
mov ecx, dword [esp + 0x88]
mov dword [eax + 4], ecx
mov byte [eax + 1], 0
mov eax, dword [esp + 0x90]
push 0x10
push dword [esp + 0x98]
push eax
push dword [esp + 0x80]
call fcn.1006b500
add esp, 0x10
test esi, esi
je 0x1009b2a8
mov edx, dword [edi + 0x88]
jns 0x1009b28d
lea esi, [edx - 1]
mov eax, dword [edi]
cmp byte [eax + 0x45], 0
je 0x1009b29c
mov eax, 0x101196c4
jmp 0x1009b2a5
mov eax, dword [edi + 0x58]
lea ecx, [esi + esi*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
or word [edx + 0xa], 4
mov eax, dword [esp + 0x1c]
add edx, 0x30
dec eax
mov dword [esp + 0x34], edx
mov dword [esp + 0x1c], eax
test eax, eax
jg 0x10099be0
mov esi, dword [esp + 0x84]
mov edx, dword [esi + 0xc]
mov eax, dword [esi + 0x14]
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], edx
test edx, edx
jle 0x1009b45f
mov edi, dword [esp + 0x74]
mov edi, edi
test byte [eax + 0xa], 6
jne 0x1009b43f
movzx edx, word [eax + 0xc]
test dl, 0x82
je 0x1009b43f
test edx, 0x800
je 0x1009b43f
mov edx, dword [esp + 0x44]
cmp dword [eax + 0x14], edx
jne 0x1009b43f
cmp dword [ecx], 0
jne 0x1009b43f
mov ecx, dword [eax]
xor esi, esi
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf4], esi
mov byte [esp + 0xf8], 0
mov dword [esp + 0xf0], esi
cmp eax, 0xfffffffe
je 0x1009b3d9
lea ecx, [esp + 0xe8]
mov dword [esp + 0xfc], 0x83
mov dword [esp + 0x100], esi
mov dword [esp + 0x104], edx
mov word [esp + 0x130], ax
mov word [esp + 0xf9], 0x101
call fcn.1009d6c0
mov edx, eax
test edx, edx
je 0x1009b3d9
mov ecx, dword [edx + 0x20]
mov eax, dword [edx + 0x24]
and ecx, dword [ebp + 8]
and eax, dword [ebp + 0xc]
or ecx, eax
jne 0x1009b3c7
mov eax, dword [edx + 0x20]
or eax, dword [edx + 0x24]
jne 0x1009b3c2
test byte [edx + 0xc], 0x82
jne 0x1009b3db
test esi, esi
cmove esi, edx
lea ecx, [esp + 0xe8]
call fcn.1009d6c0
mov edx, eax
test edx, edx
jne 0x1009b3a4
mov edx, esi
test edx, edx
je 0x1009b43b
test byte [edx + 0xa], 4
jne 0x1009b43b
mov eax, dword [edx]
push 0x10
push dword [esp + 0x98]
movdqu xmm0, xmmword [eax]
movdqu xmmword [esp + 0xb8], xmm0
movdqu xmm0, xmmword [eax + 0x10]
movdqu xmmword [esp + 0xc8], xmm0
movdqu xmm0, xmmword [eax + 0x20]
mov eax, dword [esp + 0x98]
movdqu xmmword [esp + 0xd8], xmm0
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc4], eax
lea eax, [esp + 0xb8]
push eax
push edi
call fcn.1006b500
add esp, 0x10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
add eax, 0x30
dec ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ecx
test ecx, ecx
mov ecx, dword [esp + 0x18]
jg 0x1009b2f0
mov edi, dword [esp + 0x54]
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
test esi, esi
je 0x1009b57e
mov eax, dword [edi + 0x88]
mov dword [ecx + 0x1c], eax
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x88]
cmp dword [eax + 0x30], ecx
jg 0x1009b49a
push 0
push esi
push 1
mov edx, 0x4d
mov ecx, edi
call fcn.100514f0
add esp, 0xc
jmp 0x1009b4cc
lea eax, [ecx + 1]
mov dword [edi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x58]
mov dword [eax + ecx*4], 0x4d
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x74]
xor edi, edi
cmp byte [edx + 0x19], 0
jbe 0x1009b508
lea esi, [edx + 0xa4]
mov edi, edi
cmp byte [esi - 6], 0
je 0x1009b4fc
mov al, byte [edx + 0x13]
cmp al, 8
jae 0x1009b4fc
movzx ecx, al
mov eax, dword [esi]
mov dword [edx + ecx*4 + 0x160], eax
inc byte [edx + 0x13]
movzx eax, byte [edx + 0x19]
inc edi
add esi, 0x14
cmp edi, eax
jl 0x1009b4e0
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x84]
mov byte [edx + 0x19], 0
mov esi, dword [eax + 0x14]
xor eax, eax
mov dword [esp + 0x20], eax
cmp dword [ecx + 0xc], eax
jle 0x1009b57a
test byte [esi + 0xa], 6
jne 0x1009b56d
mov edi, dword [esp + 0x18]
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [edi + 0x48]
and eax, dword [edi + 0x4c]
or ecx, eax
jne 0x1009b562
push 0x10
push dword [esp + 0x98]
push dword [esi]
push edx
call fcn.1006b500
mov edx, dword [esp + 0x84]
add esp, 0x10
or word [esi + 0xa], 4
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x20]
inc eax
add esi, 0x30
mov dword [esp + 0x20], eax
cmp eax, dword [ecx + 0xc]
jl 0x1009b528
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x48]
mov edx, dword [ecx + 0x4c]
mov ecx, dword [esp + 0x14c]
pop edi
pop esi
xor ecx, esp
call fcn.100dc8fb
mov esp, ebp
pop ebp
ret