Function at 0x100d26c0
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x200
mov esi, esp
mov dword [esi + 0x1e8], ebp
mov edi, dword [ebp + 0xc]
mov dword [esi + 0x1ec], esp
mov dword [esi + 0x1f8], 0xffffffff
lea eax, [esi + 0x1f0]
mov dword [esi + 0x1f4], 0x100d49f0
mov ecx, dword fs:[0]
mov dword [esi + 0x1f0], ecx
mov dword fs:[0], eax
push edi
call fcn.100cc5c0
add esp, 4
mov dword [edi + 8], 0
pxor xmm0, xmm0
movdqu xmmword [edi + 0x20], xmm0
mov dword [edi + 0x34], 0
mov dword [edi + 0x30], 0
mov ecx, edi
call fcn.100c49d0
mov eax, dword [edi + 0x50]
mov dword [esi + 0x20], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x58], eax
test eax, eax
jle 0x100d278b
mov ecx, dword [esi + 0x58]
cmp ecx, 9
mov eax, 8
cmovge eax, ecx
imul eax, eax, 0x54
mov dword [esi + 0x40], 0
mov dword [esi + 0x44], 0
mov dword [esi + 0x1f8], 7
push eax
call fcn.100a64d0
add esp, 4
mov dword [esi + 0x1c], eax
mov edi, dword [ebp + 0xc]
mov eax, dword [edi + 0x38]
test eax, eax
mov dword [esi + 0x48], eax
jle 0x100d27d1
cmp eax, 9
mov ecx, eax
mov eax, 8
cmovge eax, ecx
shl eax, 3
lea eax, [eax + eax*2]
mov dword [esi + 0x40], 0
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x44], ecx
mov dword [esi + 0x1f8], 7
push eax
call fcn.100a64d0
add esp, 4
mov dword [esi + 0x20], eax
mov edi, dword [ebp + 0xc]
mov eax, dword [esi + 0x48]
mov ebx, eax
lea eax, [edi + 0x20]
mov dword [esi + 0xa4], eax
imul eax, dword [esi + 0x58], 0x54
push eax
push 0
push dword [esi + 0x1c]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebx*8]
lea eax, [eax + eax*2]
push eax
push 0
push dword [esi + 0x20]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, 0x3f
movd xmm0, eax
movdqa xmmword [esi + 0x60], xmm0
xor eax, eax
mov ecx, dword [edi + 0x50]
mov dword [esi + 0xdc], ecx
cmp eax, ecx
mov ecx, eax
mov dword [esi + 0x9c], eax
jge 0x100d2b03
mov eax, edi
imul edx, ecx, 0x54
mov edi, dword [edi + 0x58]
mov ecx, eax
mov eax, dword [esi + 0x1c]
mov dword [esi + 0xc], edx
mov dword [eax + edx + 0x30], 0xffffffff
mov ecx, dword [ecx + 0x38]
test ecx, ecx
jle 0x100d2aab
mov edx, dword [esi + 0xc]
mov dword [esi + 0x10], edi
mov eax, dword [esi + 0x1c]
lea edi, [eax + edx]
mov dword [esi + 0x18], edi
mov eax, dword [esi + 0x10]
imul ebx, dword [esi + 0x9c], 0x7c
lea edi, [eax + ebx]
mov dword [esi + 0x24], edi
mov edi, eax
mov eax, dword [esi + 0x1c]
lea eax, [eax + edx + 0x30]
mov dword [esi + 0x28], eax
mov dword [esi + 0x14], ebx
mov edx, dword [edi + ebx + 0x78]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x40]
xor ebx, ebx
nop dword [eax]
cmp edx, dword [eax + ebx*4]
je 0x100d28a0
inc ebx
cmp ebx, ecx
jl 0x100d2890
jmp 0x100d2aab
mov eax, dword [esi + 0x28]
mov dword [eax], ebx
mov eax, dword [esi + 0x18]
lea ebx, [eax + 0x18]
push ebx
mov eax, dword [esi + 0x14]
push dword [edi + eax + 0xc]
push dword [edi + eax + 4]
mov eax, dword [esi + 0x24]
push dword [eax]
push dword [ebp + 8]
call fcn.100eec80
add esp, 0x14
test eax, eax
jne 0x100d2aab
push 0x756e6963
push dword [ebx]
call fcn.100ef8f0
add esp, 8
test eax, eax
jne 0x100d2aab
xorps xmm1, xmm1
mov edi, dword [esi + 0x18]
movups xmmword [edi], xmm1
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x14]
movss xmm0, dword [eax + ecx + 0x10]
cvttss2si eax, xmm0
mov ecx, eax
subss xmm0, dword [0x10154048]
cvttss2si ebx, xmm0
sar ecx, 0x1f
and ebx, ecx
or ebx, eax
movsd xmm0, qword [0x10154000]
movsd qword [esi + 0xe8], xmm0
mov eax, ebx
shl eax, 6
mov dword [esi + 0xf0], eax
movlps qword [esi + 0xf4], xmm1
lea eax, [esi + 0xe8]
push eax
push dword [edi + 0x18]
call fcn.100eee60
add esp, 8
mov eax, dword [edi + 0x18]
mov ecx, dword [eax + 0x58]
mov eax, dword [ecx + 0x24]
movq xmm0, qword [ecx + 0x18]
movd xmm1, dword [ecx + 0x20]
mov dword [edi], ebx
mov ebx, edi
mov edi, dword [esi + 0x10]
movdqa xmm2, xmm0
paddd xmm2, xmmword [0x101631f0]
pshufd xmm3, xmm2, 0x55
psubd xmm3, xmm0
movdqa xmm0, xmmword [esi + 0x60]
punpckldq xmm0, xmm3
pshufd xmm1, xmm1, 0x50
paddd xmm1, xmm0
punpcklqdq xmm2, xmm1
psrad xmm2, 6
cvtdq2ps xmm0, xmm2
movups xmmword [ebx + 4], xmm0
add eax, 0x3f
sar eax, 6
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
movss dword [ebx + 0x14], xmm0
mov eax, dword [esi + 0x14]
mov eax, dword [edi + eax + 0x44]
or eax, dword [ebp + 0x10]
mov dword [ebx + 0x1c], eax
mov ecx, eax
and ecx, 2
shl ecx, 0xe
mov edx, eax
and edx, 4
lea ecx, [ecx + edx*8]
mov edx, eax
and edx, 1
lea ecx, [ecx + edx*2]
add ecx, 8
mov dword [ebx + 0x20], ecx
mov edx, 0x10000
test al, 8
jne 0x100d29f6
mov edx, 0x20000
test al, 0x10
je 0x100d29fb
or edx, ecx
mov dword [ebx + 0x20], edx
shr eax, 6
and eax, 2
mov dword [ebx + 0x24], eax
mov eax, dword [esi + 0x14]
mov eax, dword [edi + eax + 0x30]
mov ecx, dword [esi + 0x28]
mov ebx, dword [ecx]
test eax, eax
jne 0x100d2a38
mov dword [esi + 0x10], ebx
mov eax, dword [esi + 0x20]
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x44], eax
mov dword [esi + 0x1f8], 7
mov ecx, dword [ebp + 0xc]
call fcn.100c5050
mov ebx, dword [esi + 0x10]
mov ecx, dword [esi + 0x1c]
mov edx, dword [esi + 0xc]
mov dword [ecx + edx + 0x2c], eax
cmp word [eax], 0
je 0x100d2a7a
mov ecx, dword [esi + 0x1c]
mov edx, dword [esi + 0xc]
add ecx, edx
add ecx, 0x34
add eax, 4
nop word cs:[eax + eax]
movzx edx, word [eax - 2]
test edx, edx
je 0x100d2a7a
mov edi, dword [ecx]
cmp edi, edx
cmovg edx, edi
mov dword [ecx], edx
cmp word [eax], 0
lea eax, [eax + 4]
jne 0x100d2a60
lea eax, [ebx + ebx*2]
mov edi, dword [esi + 0x20]
lea ecx, [edi + eax*8]
inc dword [ecx]
mov ecx, dword [esi + 0x1c]
mov edx, dword [esi + 0xc]
mov ecx, dword [ecx + edx + 0x34]
mov edx, dword [edi + eax*8 + 4]
cmp edx, ecx
cmovg ecx, edx
mov dword [edi + eax*8 + 4], ecx
mov eax, dword [esi + 0x9c]
inc eax
mov edi, dword [ebp + 0xc]
jmp 0x100d2816
mov eax, dword [esi + 0x20]
test eax, eax
je 0x100d2ac5
mov dword [esi + 0x1f8], 5
push eax
call fcn.100a6500
add esp, 4
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x100d2adf
mov dword [esi + 0x1f8], 6
push eax
call fcn.100a6500
add esp, 4
mov eax, dword [esi + 0xdc]
cmp dword [esi + 0x9c], eax
setge al
mov ecx, dword [esi + 0x1f0]
mov dword fs:[0], ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor edi, edi
mov dword [esi + 0x30], 0
jmp 0x100d2b14
mov edi, dword [esi + 0x60]
inc edi
mov eax, dword [esi + 0x1c]
cmp edi, dword [esi + 0x58]
jge 0x100d2dc8
imul ecx, edi, 0x54
mov edx, dword [eax + ecx + 0x30]
mov dword [esi + 0x10], edx
mov ebx, dword [eax + ecx + 0x34]
lea edx, [eax + ecx]
add edx, 0x3c
mov dword [esi + 0x28], edx
mov edx, ebx
add edx, 0x20
sar edx, 5
mov dword [esi + 0xc], ecx
mov eax, dword [eax + ecx + 0x40]
cmp eax, edx
mov dword [esi + 0x60], edi
jge 0x100d2be8
test eax, eax
je 0x100d2b62
mov ebx, eax
shr ebx, 0x1f
add ebx, eax
sar ebx, 1
add ebx, eax
jmp 0x100d2b67
mov ebx, 8
cmp ebx, edx
cmovle ebx, edx
cmp eax, ebx
jge 0x100d2be8
mov dword [esi + 0x14], edx
mov dword [esi + 0x18], ebx
lea eax, [ebx*4]
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x40], ecx
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x44], ecx
mov dword [esi + 0x1f8], 7
push eax
call fcn.100a64d0
add esp, 4
mov edx, eax
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 8]
test eax, eax
je 0x100d2bd9
mov edi, dword [esi + 0x28]
mov ecx, dword [edi]
shl ecx, 2
push ecx
push eax
push edx
mov dword [esi + 0x24], edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [edi + 8]
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x40], ecx
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x44], ecx
push eax
call fcn.100a6500
mov edx, dword [esi + 0x24]
add esp, 4
mov eax, dword [esi + 0x28]
mov dword [eax + 8], edx
mov ecx, dword [esi + 0x18]
mov dword [eax + 4], ecx
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x28]
mov dword [eax], edx
shl edx, 2
push edx
push 0
push dword [eax + 8]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [esi + 0x10]
lea ebx, [eax + eax*2]
mov eax, dword [esi + 0x20]
lea edx, [eax + ebx*8]
add edx, 0xc
cmp dword [eax + ebx*8 + 0xc], 0
mov dword [esi + 0x18], edx
mov edi, dword [esi + 0xc]
jne 0x100d2cf7
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + ebx*8 + 4]
add ecx, 0x20
sar ecx, 5
mov eax, dword [edx + 4]
cmp eax, ecx
jge 0x100d2ce1
test eax, eax
mov dword [esi + 0x10], eax
je 0x100d2c4d
mov eax, dword [esi + 0x10]
shr eax, 0x1f
add eax, dword [esi + 0x10]
sar eax, 1
add eax, dword [esi + 0x10]
jmp 0x100d2c52
mov eax, 8
cmp eax, ecx
cmovle eax, ecx
cmp dword [esi + 0x10], eax
jge 0x100d2ce1
mov dword [esi + 0x14], ecx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x24], eax
lea eax, [eax*4]
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x40], ecx
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x44], ecx
mov dword [esi + 0x1f8], 7
push eax
call fcn.100a64d0
mov edx, dword [esi + 0x18]
add esp, 4
mov edi, eax
mov eax, dword [edx + 8]
test eax, eax
je 0x100d2ccf
mov ecx, dword [edx]
shl ecx, 2
push ecx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 0x18]
mov eax, dword [eax + 8]
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x40], ecx
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x44], ecx
push eax
mov dword [esi + 0x2c], edi
call fcn.100a6500
mov edi, dword [esi + 0x2c]
mov edx, dword [esi + 0x18]
add esp, 4
mov dword [edx + 8], edi
mov eax, dword [esi + 0x24]
mov dword [edx + 4], eax
mov edi, dword [esi + 0xc]
mov ebx, dword [esi + 0x10]
mov ecx, dword [esi + 0x14]
mov dword [edx], ecx
shl ecx, 2
push ecx
push 0
push dword [edx + 8]
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esi + 0x18]
add esp, 0xc
mov ecx, dword [esi + 0x1c]
mov eax, dword [ecx + edi + 0x2c]
mov dword [esi + 0xc], eax
movzx eax, word [eax]
test ax, ax
je 0x100d2b10
add ecx, edi
add ecx, 0x18
mov dword [esi + 0x10], ecx
mov ecx, dword [esi + 0x20]
lea ecx, [ecx + ebx*8]
add ecx, 8
mov dword [esi + 0x24], ecx
mov edi, dword [esi + 0xc]
jmp 0x100d2d40
movzx eax, word [edi + 4]
add edi, 4
test ax, ax
je 0x100d2b10
movzx ecx, word [edi + 2]
test cx, cx
je 0x100d2b10
cmp ax, cx
ja 0x100d2d30
movzx ebx, ax
mov dword [esi + 0xc], edi
jmp 0x100d2d93
mov eax, dword [esi + 0x10]
inc dword [eax + 0x20]
mov eax, dword [esi + 0x24]
inc dword [eax]
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 8]
mov ecx, dword [esi + 0x14]
or dword [eax + edi*4], ecx
mov edx, dword [esi + 0x18]
mov eax, dword [edx + 8]
or dword [eax + edi*4], ecx
inc dword [esi + 0x30]
lea eax, [ebx + 1]
mov edi, dword [esi + 0xc]
movzx ecx, word [edi + 2]
cmp ebx, ecx
mov ebx, eax
jae 0x100d2d30
mov eax, dword [edx + 8]
mov edi, 1
mov ecx, ebx
shl edi, cl
mov ecx, edi
mov edi, ebx
shr edi, 5
mov eax, dword [eax + edi*4]
bt eax, ebx
jb 0x100d2d83
mov dword [esi + 0x14], ecx
push ebx
mov eax, dword [esi + 0x10]
push dword [eax]
call fcn.100ef9b0
add esp, 8
test eax, eax
jne 0x100d2d60
mov edx, dword [esi + 0x18]
jmp 0x100d2d83
xor ecx, ecx
pxor xmm0, xmm0
jmp 0x100d2de2
mov dword [eax + 8], 0
pxor xmm0, xmm0
mov ecx, dword [esi + 0x54]
inc ecx
mov eax, dword [esi + 0x1c]
cmp ecx, dword [esi + 0x58]
jge 0x100d3029
mov dword [esi + 0x54], ecx
imul edx, ecx, 0x54
lea edi, [eax + edx]
add edi, 0x48
mov ebx, dword [eax + edx + 0x38]
cmp dword [eax + edx + 0x4c], ebx
mov dword [esi + 0x60], edi
jge 0x100d2e9a
mov ecx, eax
lea eax, [ebx + ebx*8]
lea eax, [eax + eax*2]
mov dword [esi + 0x10], ebx
add eax, ebx
mov dword [esi + 0xc], edx
mov edx, dword [esi + 0x20]
mov dword [esi + 0x40], edx
mov dword [esi + 0x44], ecx
mov dword [esi + 0x1f8], 7
push eax
call fcn.100a64d0
mov edx, dword [esi + 0xc]
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x1c]
lea ebx, [eax + edx]
add ebx, 0x50
mov eax, dword [eax + edx + 0x50]
test eax, eax
je 0x100d2e88
mov ecx, dword [esi + 0x60]
mov ecx, dword [ecx]
lea edx, [ecx + ecx*8]
lea edx, [edx + edx*2]
add edx, ecx
push edx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebx]
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x40], ecx
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x44], ecx
push eax
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], ebx
call fcn.100a6500
mov ebx, dword [esi + 0x18]
mov edi, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
add esp, 4
mov dword [ebx], edi
mov edi, dword [esi + 0x60]
mov eax, dword [esi + 0x10]
mov dword [edi + 4], eax
mov eax, dword [esi + 0x1c]
pxor xmm0, xmm0
lea ecx, [eax + edx]
add ecx, 0x3c
mov dword [esi + 0x10], ecx
mov ecx, eax
mov eax, dword [eax + edx + 0x3c]
mov ecx, dword [ecx + edx + 0x44]
lea eax, [ecx + eax*4]
mov dword [esi + 0x3c], eax
mov dword [esi + 0x38], ecx
jmp 0x100d2ec3
add ecx, 4
cmp ecx, dword [esi + 0x3c]
jae 0x100d2ff0
mov eax, dword [ecx]
mov dword [esi + 0xc], eax
test eax, eax
je 0x100d2ec0
mov eax, ecx
sub eax, dword [esi + 0x38]
shl eax, 3
mov dword [esi + 0x18], eax
xor edx, edx
mov dword [esi + 0x14], ecx
jmp 0x100d2f35
mov dword [edi + 0x14], ebx
mov edi, dword [esi + 0x60]
mov eax, dword [esi + 0x24]
mov dword [edi + 4], eax
mov eax, dword [edi]
pxor xmm0, xmm0
mov edx, dword [esi + 0x28]
mov ecx, dword [esi + 0x18]
add ecx, edx
movzx ecx, cx
mov ebx, edx
lea edx, [eax + eax*8]
lea edx, [edx + edx*2]
add edx, eax
mov eax, dword [esi + 0x10]
mov eax, dword [eax + 0x14]
movdqu xmmword [eax + edx], xmm0
mov dword [eax + edx + 0x10], 0
mov dword [eax + edx + 0x14], ecx
mov dword [eax + edx + 0x18], 0
mov edx, ebx
inc dword [edi]
mov ecx, dword [esi + 0x14]
inc edx
cmp edx, 0x1f
ja 0x100d2ec0
mov eax, dword [esi + 0xc]
bt eax, edx
jae 0x100d2f34
mov eax, dword [edi]
cmp eax, dword [edi + 4]
jne 0x100d2efc
lea ebx, [eax + 1]
test eax, eax
je 0x100d2f5d
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
sar ecx, 1
add ecx, eax
jmp 0x100d2f62
mov ecx, 8
cmp ecx, ebx
cmovg ebx, ecx
cmp eax, ebx
jge 0x100d2efc
mov dword [esi + 0x28], edx
lea eax, [ebx + ebx*8]
lea eax, [eax + eax*2]
mov dword [esi + 0x24], ebx
add eax, ebx
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x40], ecx
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x44], ecx
mov dword [esi + 0x1f8], 7
push eax
call fcn.100a64d0
mov edi, dword [esi + 0x10]
add esp, 4
mov ebx, eax
mov eax, dword [edi + 0x14]
test eax, eax
je 0x100d2ee7
mov ecx, dword [esi + 0x60]
mov ecx, dword [ecx]
lea edx, [ecx + ecx*8]
lea edx, [edx + edx*2]
add edx, ecx
push edx
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [edi + 0x14]
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x40], ecx
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x44], ecx
push eax
mov dword [esi + 0x2c], ebx
call fcn.100a6500
mov ebx, dword [esi + 0x2c]
mov edi, dword [esi + 0x10]
add esp, 4
jmp 0x100d2ee7
mov ecx, dword [esi + 0x10]
mov eax, dword [ecx + 8]
test eax, eax
je 0x100d2ddb
movq qword [ecx], xmm0
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x40], ecx
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x44], ecx
mov dword [esi + 0x1f8], 7
push eax
call fcn.100a6500
mov eax, dword [esi + 0x10]
add esp, 4
jmp 0x100d2dd0
xor edx, edx
jmp 0x100d303e
mov eax, dword [esi + 0x10]
mov dword [eax + 8], 0
mov edx, dword [esi + 0xc]
inc edx
cmp edx, dword [esi + 0x48]
mov eax, dword [esi + 0x20]
jge 0x100d3086
lea ecx, [edx + edx*2]
mov eax, dword [eax + ecx*8 + 0x14]
test eax, eax
je 0x100d303d
mov dword [esi + 0xc], edx
mov edx, dword [esi + 0x20]
lea ecx, [edx + ecx*8]
add ecx, 0xc
pxor xmm0, xmm0
mov dword [esi + 0x10], ecx
movq qword [ecx], xmm0
mov dword [esi + 0x40], edx
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x44], ecx
mov dword [esi + 0x1f8], 7
push eax
call fcn.100a6500
add esp, 4
jmp 0x100d3030
test eax, eax
je 0x100d30a9
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x40], ecx
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x44], eax
mov dword [esi + 0x1f8], 7
push ecx
call fcn.100a6500
add esp, 4
pxor xmm0, xmm0
movq qword [esi + 0xb4], xmm0
mov dword [esi + 0xbc], 0
mov eax, dword [esi + 0x30]
test eax, eax
jle 0x100d30fd
cmp eax, 9
mov ecx, 8
cmovge ecx, eax
mov dword [esi + 0xc], ecx
mov eax, ecx
shl eax, 4
mov dword [esi + 0x1f8], 8
push eax
call fcn.100a64d0
add esp, 4
mov dword [esi + 0xbc], eax
mov ecx, dword [esi + 0xc]
mov dword [esi + 0xb8], ecx
jmp 0x100d30ff
xor eax, eax
mov ecx, dword [esi + 0x30]
mov dword [esi + 0xb4], ecx
shl ecx, 4
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
pxor xmm0, xmm0
movq qword [esi + 0x88], xmm0
mov dword [esi + 0x90], 0
mov dword [esi + 0x1f8], 9
push 0x40000
call fcn.100a64d0
add esp, 4
mov dword [esi + 0xc], eax
push 0x20
call fcn.100a64d0
add esp, 4
mov dword [esi + 0x90], eax
mov dword [esi + 0x8c], 8
mov ecx, dword [esi + 0xc]
mov dword [eax], ecx
inc dword [esi + 0x88]
xor ecx, ecx
xor ebx, ebx
mov dword [esi + 0x5c], 0
mov dword [esi + 0x34], 0
mov eax, dword [esi + 0x1c]
jmp 0x100d3197
mov ebx, dword [esi + 0x94]
inc ecx
cmp ecx, dword [esi + 0x58]
jge 0x100d37fe
imul edi, ecx, 0x54
mov edx, dword [eax + edi + 0x38]
mov dword [esi + 0x94], edx
test edx, edx
je 0x100d3196
mov edx, eax
mov dword [esi + 0xc], ebx
mov eax, ebx
shl eax, 4
add eax, dword [esi + 0xbc]
mov ebx, ecx
mov ecx, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x58]
mov dword [edx + edi + 0x28], eax
mov dword [esi + 0x48], ebx
imul eax, ebx, 0x7c
movss xmm0, dword [ecx + eax + 0x48]
xor ebx, ebx
movss dword [esi + 0x7c], xmm0
ucomiss xmm0, dword [0x10154df4]
mov dword [esi + 0x20], 0
jne 0x100d31f2
jnp 0x100d322c
mov dword [esi + 0x1f8], 9
sub esp, 8
movss xmm0, dword [esi + 0x7c]
movss dword [esp + 4], xmm0
lea eax, [esi + 0xe8]
mov dword [esp], eax
mov dword [esi + 0x10], edi
call fcn.100cc140
mov edi, dword [esi + 0x10]
xor ebx, ebx
add esp, 8
lea eax, [esi + 0xe8]
mov dword [esi + 0x20], eax
mov eax, dword [esi + 0x1c]
lea edx, [eax + edi]
add edi, eax
add edi, 0x28
mov ecx, dword [esi + 0xc]
add dword [esi + 0x94], ecx
mov ecx, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x10]
mov dword [esi + 0x98], ecx
mov ecx, dword [esi + 0x48]
mov dword [esi + 0x50], edx
mov dword [esi + 0xc0], edi
jmp 0x100d326f
mov edx, edi
mov edi, dword [esi + 0xc0]
inc ebx
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x48]
cmp ebx, dword [edi + 0x20]
jge 0x100d3190
mov ecx, dword [edi + 0x28]
lea eax, [ebx + ebx*8]
lea eax, [eax + eax*2]
add eax, ebx
mov dword [esi + 0xc], ecx
mov dword [esi + 0x10], eax
push dword [ecx + eax + 0x14]
push dword [edx + 0x18]
mov edi, edx
call fcn.100ef9b0
add esp, 8
test eax, eax
je 0x100d3260
push dword [edi + 0x20]
push eax
push dword [edi + 0x18]
call fcn.100ef070
add esp, 0xc
test eax, eax
jne 0x100d3260
mov ecx, dword [edi + 0x18]
mov eax, dword [edi + 0x1c]
mov edx, dword [ecx + 0x54]
test al, 0x20
je 0x100d32d1
push edx
mov edi, edx
call fcn.100f6a70
mov edx, edi
mov edi, dword [esi + 0x50]
add esp, 4
mov eax, dword [edi + 0x1c]
mov dword [esi + 0x84], ebx
test al, 0x40
je 0x100d32e7
push edx
call fcn.100f6b70
mov edi, dword [esi + 0x50]
add esp, 4
mov eax, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
lea ebx, [eax + edx]
mov eax, dword [edi + 0x18]
mov eax, dword [eax + 0x54]
push dword [edi + 0x24]
mov dword [esi + 0x14], eax
push eax
call fcn.100ef750
add esp, 8
test eax, eax
je 0x100d3317
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov dword [esi + 0x14], 0
jmp 0x100d337a
mov eax, dword [edi + 0x18]
mov eax, dword [eax + 0x54]
mov ecx, dword [eax + 0x50]
mov dword [esi + 0x2c], ecx
mov dword [ebx], ecx
mov ecx, dword [eax + 0x4c]
mov dword [esi + 0x80], ecx
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x18]
mov ecx, dword [ecx + 0x54]
mov ecx, dword [ecx + 0x64]
mov dword [ebx + 8], ecx
mov ecx, dword [edi + 0x18]
mov ecx, dword [ecx + 0x54]
xor edx, edx
sub edx, dword [ecx + 0x68]
mov dword [ebx + 0xc], edx
mov ecx, dword [esi + 0x14]
mov ecx, dword [ecx + 0x40]
add ecx, 0x3f
and ecx, 0xffffffc0
test ecx, ecx
lea edx, [ecx + 0x3f]
cmovns edx, ecx
mov ecx, dword [esi + 0x2c]
sar edx, 6
cvtsi2ss xmm0, edx
add eax, 0x4c
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x80]
movss dword [ebx + 0x10], xmm0
mov dword [esi + 0x4c], ebx
imul eax, ecx
mov dword [esi + 0x80], eax
mov edi, dword [esi + 0x34]
add eax, edi
cmp eax, 0x40000
jle 0x100d33d7
mov dword [esi + 0x1f8], 9
push 0x40000
call fcn.100a64d0
add esp, 4
mov edi, eax
mov ebx, dword [esi + 0x88]
cmp ebx, dword [esi + 0x8c]
mov ecx, dword [esi + 0x4c]
jne 0x100d345c
lea eax, [ebx + 1]
mov dword [esi + 0x18], eax
test ebx, ebx
je 0x100d33e5
mov eax, ebx
shr eax, 0x1f
add eax, ebx
sar eax, 1
add eax, ebx
jmp 0x100d33ea
mov dword [esi + 0x2c], ecx
mov eax, dword [esi + 0x88]
jmp 0x100d3479
mov eax, 8
mov ecx, dword [esi + 0x18]
cmp eax, ecx
cmovg ecx, eax
cmp ebx, ecx
jge 0x100d3459
mov dword [esi + 0x24], ebx
mov dword [esi + 0x18], ecx
lea eax, [ecx*4]
push eax
mov dword [esi + 0x28], edi
call fcn.100a64d0
mov edi, dword [esi + 0x28]
add esp, 4
mov edx, dword [esi + 0x90]
test edx, edx
mov ebx, dword [esi + 0x24]
je 0x100d344a
shl ebx, 2
push ebx
push edx
push eax
mov dword [esi + 0x24], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push dword [esi + 0x90]
call fcn.100a6500
mov eax, dword [esi + 0x24]
mov edi, dword [esi + 0x28]
add esp, 4
mov ebx, dword [esi + 0x88]
mov dword [esi + 0x90], eax
mov eax, dword [esi + 0x18]
mov dword [esi + 0x8c], eax
mov ecx, dword [esi + 0x4c]
mov eax, dword [esi + 0x90]
mov dword [eax + ebx*4], edi
mov eax, dword [esi + 0x88]
inc eax
mov dword [esi + 0x88], eax
mov ecx, dword [ecx]
mov dword [esi + 0x2c], ecx
xor edi, edi
mov dword [esi + 0x34], edi
mov ecx, dword [esi + 0x90]
mov ecx, dword [ecx + eax*4 - 4]
add ecx, edi
mov eax, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov dword [eax + edx + 0x18], ecx
mov edx, dword [esi + 0x14]
mov eax, dword [edx]
mov dword [esi + 0x30], eax
mov eax, dword [edx + 4]
mov dword [esi + 0x60], eax
mov ebx, dword [edx + 0xc]
mov edi, dword [edx + 8]
movzx eax, byte [edx + 0x12]
cmp eax, 1
mov dword [esi + 0x18], edi
je 0x100d35bf
cmp eax, 2
mov eax, dword [esi + 0x60]
jne 0x100d37a0
movss xmm0, dword [esi + 0x7c]
ucomiss xmm0, dword [0x10154df4]
jne 0x100d34d6
jnp 0x100d35eb
cmp dword [esi + 0x30], 0
je 0x100d37a0
lea edx, [eax - 1]
mov dword [esi + 0x3c], edx
mov edx, eax
and edx, 3
mov dword [esi + 0x38], edx
mov edx, eax
and edx, 0xfffffffc
mov dword [esi + 0x14], edx
xor edx, edx
jmp 0x100d351c
mov edx, dword [esi + 0x24]
inc edx
mov ebx, dword [esi + 0x28]
add ebx, dword [esi + 0x18]
mov ecx, dword [esi + 0xc]
add ecx, dword [esi + 0x2c]
cmp edx, dword [esi + 0x30]
mov eax, dword [esi + 0x60]
je 0x100d37a0
mov dword [esi + 0x24], edx
mov dword [esi + 0x28], ebx
mov dword [esi + 0xc], ecx
test eax, eax
mov edx, dword [esi + 0x20]
je 0x100d3500
xor edi, edi
cmp dword [esi + 0x3c], 3
mov ecx, dword [esi + 0xc]
mov ebx, dword [esi + 0x28]
jb 0x100d357c
xor edi, edi
nop dword [eax]
movzx eax, byte [ebx + edi]
movzx eax, byte [edx + eax]
mov byte [ecx + edi], al
movzx eax, byte [ebx + edi + 1]
movzx eax, byte [edx + eax]
mov byte [ecx + edi + 1], al
movzx eax, byte [ebx + edi + 2]
movzx eax, byte [edx + eax]
mov byte [ecx + edi + 2], al
movzx eax, byte [ebx + edi + 3]
movzx eax, byte [edx + eax]
mov byte [ecx + edi + 3], al
mov eax, dword [esi + 0x14]
add edi, 4
cmp eax, edi
jne 0x100d3540
mov ecx, dword [esi + 0x38]
test ecx, ecx
mov dword [esi + 0x20], edx
je 0x100d3500
mov eax, dword [esi + 0xc]
add eax, edi
mov dword [esi + 0x10], eax
add edi, dword [esi + 0x28]
xor edx, edx
nop word [eax + eax]
movzx ebx, byte [edi + edx]
mov eax, ecx
mov ecx, dword [esi + 0x20]
movzx ebx, byte [ecx + ebx]
mov ecx, eax
mov eax, dword [esi + 0x10]
mov byte [eax + edx], bl
inc edx
cmp ecx, edx
jne 0x100d35a0
jmp 0x100d3500
movss xmm0, dword [esi + 0x7c]
ucomiss xmm0, dword [0x10154df4]
jne 0x100d35d3
jnp 0x100d36a6
mov eax, dword [esi + 0x20]
movzx eax, byte [eax]
mov dword [esi + 0x38], eax
movzx eax, byte [esi + 0x1e7]
mov byte [esi + 0x54], al
jmp 0x100d36b1
cmp dword [esi + 0x30], 0
je 0x100d37a0
mov edx, dword [esi + 0x30]
lea eax, [edx - 1]
mov edi, edx
and edi, 3
mov dword [esi + 0xc], edi
cmp eax, 3
jb 0x100d366f
and edx, 0xfffffffc
nop dword [eax + eax]
mov dword [esi + 0x30], edx
push dword [esi + 0x60]
push ebx
push ecx
mov edi, ebx
mov ebx, ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add edi, dword [esi + 0x18]
add ebx, dword [esi + 0x2c]
push dword [esi + 0x60]
push edi
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add edi, dword [esi + 0x18]
add ebx, dword [esi + 0x2c]
push dword [esi + 0x60]
push edi
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add edi, dword [esi + 0x18]
add ebx, dword [esi + 0x2c]
push dword [esi + 0x60]
push edi
push ebx
call sub.VCRUNTIME140.dll_memcpy
mov ecx, ebx
mov ebx, edi
mov edx, dword [esi + 0x30]
add esp, 0xc
add ebx, dword [esi + 0x18]
add ecx, dword [esi + 0x2c]
add edx, 0xfffffffc
jne 0x100d3610
mov edi, dword [esi + 0xc]
test edi, edi
mov eax, dword [esi + 0x60]
je 0x100d37a0
nop dword [eax]
mov dword [esi + 0x28], ebx
push eax
push ebx
push ecx
mov ebx, ecx
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esi + 0x60]
mov ecx, ebx
mov ebx, dword [esi + 0x28]
add esp, 0xc
add ebx, dword [esi + 0x18]
add ecx, dword [esi + 0x2c]
dec edi
jne 0x100d3680
jmp 0x100d37a0
mov byte [esi + 0x54], 0xff
mov dword [esi + 0x38], 0
mov eax, dword [esi + 0x60]
cmp dword [esi + 0x30], 0
je 0x100d37a0
mov edx, eax
and edx, 0xfffffffe
mov dword [esi + 0x28], edx
mov dword [esi + 0x3c], 0
jmp 0x100d36fe
test al, al
movzx eax, byte [esi + 0x54]
movzx edx, byte [esi + 0x38]
cmovs edx, eax
mov eax, dword [esi + 0xc]
mov byte [eax + ecx], dl
mov eax, dword [esi + 0x3c]
inc eax
add ebx, edi
mov ecx, dword [esi + 0xc]
add ecx, dword [esi + 0x2c]
mov dword [esi + 0x3c], eax
cmp eax, dword [esi + 0x30]
mov eax, dword [esi + 0x60]
je 0x100d37a0
mov dword [esi + 0xc], ecx
test eax, eax
je 0x100d36e3
mov ecx, 0
mov dword [esi + 0x24], ebx
mov eax, 0
cmp dword [esi + 0x60], 1
jne 0x100d3730
test byte [esi + 0x60], 1
je 0x100d36e3
test cl, 7
jne 0x100d36d0
mov eax, dword [esi + 0x24]
movzx eax, byte [eax]
jmp 0x100d36d0
movzx eax, byte [esi + 0x54]
mov dword [esi + 0x10], eax
movzx eax, byte [esi + 0x38]
mov dword [esi + 0x14], eax
xor ecx, ecx
mov dword [esi + 0x24], ebx
xor eax, eax
jmp 0x100d3767
mov ebx, dword [esi + 0xc]
mov byte [ebx + ecx + 1], dl
add ecx, 2
shl al, 2
cmp dword [esi + 0x28], ecx
mov ebx, edi
mov edi, dword [esi + 0x18]
je 0x100d3718
test cl, 6
jne 0x100d3776
mov edx, dword [esi + 0x24]
movzx eax, byte [edx]
inc edx
mov dword [esi + 0x24], edx
mov edi, ebx
mov edx, dword [esi + 0x10]
test al, al
js 0x100d3782
mov edx, dword [esi + 0x14]
mov ebx, dword [esi + 0xc]
mov byte [ebx + ecx], dl
mov edx, dword [esi + 0x14]
test al, 0x40
je 0x100d3750
mov edx, dword [esi + 0x10]
jmp 0x100d3750
mov eax, dword [esi + 0x4c]
mov ecx, dword [eax]
mov ebx, dword [esi + 0x98]
add ecx, ebx
mov eax, dword [esi + 0x84]
shl eax, 4
mov edi, dword [esi + 0xc0]
mov edx, dword [edi]
mov word [edx + eax + 4], cx
mov ecx, dword [esi + 0x34]
add ecx, dword [esi + 0x80]
mov dword [esi + 0x34], ecx
mov ecx, dword [esi + 0x4c]
mov ecx, dword [ecx + 4]
add ecx, ebx
mov ebx, dword [esi + 0x84]
mov edx, dword [edi]
mov word [edx + eax + 6], cx
mov ecx, dword [edi]
movzx edx, word [ecx + eax + 4]
movzx eax, word [ecx + eax + 6]
imul eax, edx
add dword [esi + 0x5c], eax
mov edx, dword [esi + 0x50]
jmp 0x100d3268
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [esi + 0x5c]
cvtss2sd xmm0, xmm0
xorpd xmm1, xmm1
ucomisd xmm0, xmm1
jb 0x100d381a
sqrtsd xmm0, xmm0
jmp 0x100d3838
sub esp, 8
movsd qword [esp], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
add esp, 8
fstp qword [esi + 0xe0]
movsd xmm0, qword [esi + 0xe0]
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x24], 0
mov ecx, dword [eax + 0xc]
test ecx, ecx
jg 0x100d387c
cvtsd2ss xmm0, xmm0
cvttss2si eax, xmm0
mov ecx, 0x1000
cmp eax, 0xb32
jg 0x100d387c
mov ecx, 0x800
cmp eax, 0x598
jg 0x100d387c
xor ecx, ecx
cmp eax, 0x2cc
setge cl
shl ecx, 9
add ecx, 0x200
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x20], ecx
mov edi, ecx
xorps xmm0, xmm0
sub edi, dword [eax + 0x10]
movlps qword [esi + 0xa8], xmm0
mov dword [esi + 0xb0], 0
jle 0x100d3983
cmp edi, 9
mov eax, 8
cmovge eax, edi
mov dword [esi + 0x10], eax
lea eax, [eax*8]
mov dword [esi + 0x1f8], 0xa
push eax
mov dword [esi + 0xc], edi
call fcn.100a64d0
add esp, 4
mov ebx, eax
mov eax, dword [esi + 0xa4]
mov ecx, dword [eax]
mov dword [esi + 0xb0], ebx
mov eax, dword [esi + 0x10]
mov dword [esi + 0xac], eax
mov edi, dword [esi + 0xc]
mov dword [esi + 0xa8], edi
xor eax, eax
cmp edi, 2
jb 0x100d3998
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], ecx
lea edx, [edi - 1]
lea eax, [edi - 2]
mov dword [esi + 0x10], edx
and edx, 7
xor edi, edi
cmp eax, 7
jb 0x100d3959
mov eax, dword [esi + 0x10]
and eax, 0xfffffff8
xor edi, edi
mov ecx, dword [esi + 0x14]
nop dword [eax]
lea ebx, [ecx + 8]
mov dword [ecx + 4], ebx
lea ebx, [ecx + 0x10]
mov dword [ecx + 0xc], ebx
lea ebx, [ecx + 0x18]
mov dword [ecx + 0x14], ebx
lea ebx, [ecx + 0x20]
mov dword [ecx + 0x1c], ebx
lea ebx, [ecx + 0x28]
mov dword [ecx + 0x24], ebx
lea ebx, [ecx + 0x30]
mov dword [ecx + 0x2c], ebx
lea ebx, [ecx + 0x38]
mov dword [ecx + 0x34], ebx
add edi, 8
lea ebx, [ecx + 0x40]
mov dword [ecx + 0x3c], ebx
mov ecx, ebx
cmp eax, edi
jne 0x100d3920
test edx, edx
je 0x100d46d1
mov ebx, dword [esi + 0x14]
lea eax, [ebx + edi*8]
add eax, 8
mov ecx, dword [esi + 0x18]
nop dword [eax]
mov dword [eax - 4], eax
add eax, 8
dec edx
jne 0x100d3970
mov eax, dword [esi + 0x10]
mov edx, eax
mov edi, dword [esi + 0xc]
jmp 0x100d399a
mov dword [esi + 0xa8], edi
lea eax, [edi - 1]
mov dword [esi + 0x1f8], 0xa
xor ebx, ebx
xor edx, edx
mov dword [ebx + edx*8 + 4], 0
movsd xmm0, qword [0x10154000]
movsd qword [esi + 0xf4], xmm0
mov dword [esi + 0x104], ebx
lea edx, [esi + 0x108]
mov dword [esi + 0x100], edx
mov dword [esi + 0xe8], ecx
mov dword [esi + 0xec], 0x8000
mov dword [esi + 0xfc], edi
add eax, ecx
cdq
idiv edi
mov dword [esi + 0xf0], eax
mov dword [esi + 0x108], 0
lea eax, [esi + 0x110]
mov dword [esi + 0x10c], eax
mov word [esi + 0x110], cx
mov word [esi + 0x112], 0xffff
mov dword [esi + 0x114], 0
mov dword [esi + 0x1f8], 0xa
lea eax, [esi + 0xe8]
push eax
push dword [ebp + 0xc]
call fcn.100ccd40
add esp, 8
cmp dword [esi + 0x58], 0
jle 0x100d4188
xor eax, eax
jmp 0x100d3a50
mov eax, dword [esi + 0x94]
inc eax
cmp eax, dword [esi + 0x58]
je 0x100d4188
mov dword [esi + 0x94], eax
imul ecx, eax, 0x54
mov eax, dword [esi + 0x1c]
mov eax, dword [eax + ecx + 0x38]
mov dword [esi + 0x50], eax
test eax, eax
je 0x100d3a40
mov eax, dword [esi + 0x1c]
mov dword [esi + 0xa0], ecx
mov ecx, dword [eax + ecx + 0x28]
jle 0x100d40c0
mov dword [esi + 0x5c], ecx
mov eax, dword [esi + 0x50]
lea edx, [eax - 1]
and eax, 3
xor ecx, ecx
mov dword [esi + 0xd4], edx
cmp edx, 3
jb 0x100d3ace
mov edx, dword [esi + 0x50]
and edx, 0xfffffffc
mov ecx, dword [esi + 0x5c]
lea edi, [ecx + 0x3c]
xor ecx, ecx
nop word cs:[eax + eax]
mov dword [edi - 0x30], ecx
lea ebx, [ecx + 1]
mov dword [edi - 0x20], ebx
lea ebx, [ecx + 2]
mov dword [edi - 0x10], ebx
lea ebx, [ecx + 3]
mov dword [edi], ebx
add ecx, 4
add edi, 0x40
cmp ecx, edx
jne 0x100d3ab0
test eax, eax
je 0x100d3afb
mov edx, ecx
shl edx, 4
mov edi, dword [esi + 0x5c]
add edx, edi
add edx, 0xc
shl eax, 4
xor edi, edi
nop word cs:[eax + eax]
mov dword [edx + edi], ecx
inc ecx
add edi, 0x10
cmp eax, edi
jne 0x100d3af0
push 0x100d0e30
push 0x10
mov ebx, dword [esi + 0x50]
push ebx
mov edi, dword [esi + 0x5c]
push edi
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
mov ecx, ebx
mov eax, edi
add esp, 0x10
xor edx, edx
jmp 0x100d3b31
mov dword [eax + edi + 8], 0
inc edx
cmp edx, ecx
je 0x100d4040
mov edi, edx
shl edi, 4
movzx ebx, word [eax + edi + 4]
mov dword [esi + 0x80], ebx
test ebx, ebx
je 0x100d3b20
movzx ecx, word [eax + edi + 6]
mov ebx, ecx
mov dword [esi + 0x54], ecx
test ecx, ecx
mov ecx, dword [esi + 0x50]
je 0x100d3b20
mov dword [esi + 0x98], edx
mov ecx, dword [esi + 0xf0]
mov dword [esi + 0xc], ecx
mov eax, dword [esi + 0x80]
lea ebx, [eax + ecx]
dec ebx
mov eax, ebx
cdq
mov ecx, dword [esi + 0xe8]
mov dword [esi + 0x34], ecx
idiv dword [esi + 0xc]
sub ebx, edx
mov dword [esi + 0x24], ebx
cmp ebx, dword [esi + 0x34]
jg 0x100d3c50
mov eax, dword [esi + 0xec]
mov dword [esi + 0xc0], eax
cmp eax, dword [esi + 0x54]
jl 0x100d3c50
mov ecx, dword [esi + 0x100]
movzx edx, word [ecx]
mov eax, dword [esi + 0x24]
lea ebx, [eax + edx]
mov dword [esi + 0x20], ebx
cmp ebx, dword [esi + 0x34]
mov dword [esi + 0x7c], edi
mov dword [esi + 0x3c], ecx
mov dword [esi + 0xd8], edx
jle 0x100d3c69
xor eax, eax
mov dword [esi + 0x4c], 0x40000000
mov edx, dword [esi + 0xf8]
mov dword [esi + 0x38], 0x40000000
mov dword [esi + 0x34], 0
cmp edx, 1
je 0x100d3e11
mov ecx, eax
test ecx, ecx
mov edi, dword [esi + 0x7c]
je 0x100d3c50
mov ebx, ecx
mov ecx, dword [esi + 0x54]
add ecx, dword [esi + 0x38]
cmp ecx, dword [esi + 0xc0]
jg 0x100d3c50
mov eax, ecx
mov ecx, dword [esi + 0x104]
test ecx, ecx
je 0x100d3c50
mov edi, dword [esi + 0x34]
mov edx, edi
mov word [esi + 0xc], di
mov word [ecx], di
mov word [ecx + 2], ax
mov eax, dword [ecx + 4]
mov dword [esi + 0x104], eax
mov edx, dword [ebx]
movzx eax, word [edx]
cmp edi, eax
jle 0x100d3fbb
mov eax, dword [edx + 4]
add edx, 4
mov edi, edx
mov edx, eax
jmp 0x100d3fbd
mov eax, dword [esi + 0x5c]
mov dword [eax + edi + 8], 0xffffffff
mov ecx, dword [esi + 0x50]
mov edx, dword [esi + 0x98]
jmp 0x100d3b28
mov eax, edx
mov dword [esi + 0x2c], 0
mov dword [esi + 0x4c], 0x40000000
mov edx, dword [esi + 0xf8]
mov dword [esi + 0x60], eax
mov dword [esi + 0x30], ecx
lea eax, [esi + 0x100]
mov dword [esi + 0x48], eax
mov dword [esi + 0x38], 0x40000000
mov ecx, dword [esi + 0x24]
mov dword [esi + 0x84], edx
jmp 0x100d3cdd
mov eax, dword [esi + 0x38]
cmp ebx, eax
cmovl eax, ebx
mov dword [esi + 0x38], eax
mov eax, dword [esi + 0x2c]
cmovl eax, dword [esi + 0x48]
mov dword [esi + 0x2c], eax
mov eax, dword [esi + 0x30]
mov ecx, eax
mov eax, dword [eax + 4]
add ecx, 4
mov dword [esi + 0x48], ecx
movzx ebx, word [eax]
mov ecx, dword [esi + 0x24]
mov dword [esi + 0x60], ebx
add ebx, ecx
mov dword [esi + 0x30], eax
mov dword [esi + 0x20], ebx
cmp ebx, dword [esi + 0x34]
jg 0x100d3de6
mov ebx, 0
mov edx, 0
test ecx, ecx
jle 0x100d3da0
xor edx, edx
mov eax, dword [esi + 0x60]
mov dword [esi + 0x14], eax
xor ecx, ecx
xor eax, eax
mov edi, dword [esi + 0x30]
mov dword [esi + 0x10], edi
jmp 0x100d3d53
mov ebx, dword [ebx + 4]
mov dword [esi + 0x10], ebx
movzx ecx, word [ebx]
mov dword [esi + 0x28], ecx
sub ecx, dword [esi + 0x14]
mov dword [esi + 0x14], ecx
mov ebx, dword [esi + 0x24]
mov ecx, dword [esi + 0xc]
sub ebx, ecx
mov edi, dword [esi + 0x14]
add edi, ecx
cmp edi, dword [esi + 0x24]
cmovle ebx, dword [esi + 0x14]
imul edx, ebx
mov edi, eax
mov eax, dword [esi + 0x18]
add eax, edx
mov edx, eax
add ecx, ebx
mov ebx, dword [esi + 0x28]
mov dword [esi + 0x14], ebx
mov eax, edi
cmp dword [esi + 0x20], ebx
mov ebx, edi
jle 0x100d3da0
mov dword [esi + 0xc], ecx
mov dword [esi + 0x18], edx
mov ebx, dword [esi + 0x10]
movzx edi, word [ebx + 2]
mov edx, eax
sub edx, edi
jge 0x100d3d10
mov ecx, edi
mov edx, edi
sub edx, eax
imul edx, dword [esi + 0xc]
mov ebx, dword [ebx + 4]
mov dword [esi + 0x10], ebx
movzx ebx, word [ebx]
mov eax, dword [esi + 0x60]
mov edi, dword [esi + 0x14]
cmp edi, eax
mov dword [esi + 0x28], ebx
jae 0x100d3d90
sub ebx, eax
jmp 0x100d3d92
sub ebx, edi
mov edi, ecx
mov ecx, dword [esi + 0xc]
jmp 0x100d3d3b
mov ecx, edx
mov edx, dword [esi + 0x84]
test edx, edx
je 0x100d3ca0
mov eax, dword [esi + 0x54]
add eax, ebx
cmp eax, dword [esi + 0xc0]
jg 0x100d3cb5
cmp ebx, dword [esi + 0x38]
jl 0x100d3dd5
jne 0x100d3cb5
cmp ecx, dword [esi + 0x4c]
jge 0x100d3cb5
mov dword [esi + 0x38], ebx
mov eax, dword [esi + 0x48]
mov dword [esi + 0x2c], eax
mov dword [esi + 0x4c], ecx
jmp 0x100d3cb5
cmp dword [esi + 0x2c], 0
je 0x100d3dfc
mov eax, dword [esi + 0x2c]
mov eax, dword [eax]
movzx eax, word [eax]
mov dword [esi + 0x34], eax
mov eax, dword [esi + 0x2c]
jmp 0x100d3e05
xor eax, eax
mov dword [esi + 0x34], 0
mov ecx, dword [esi + 0x3c]
cmp edx, 1
jne 0x100d3bee
mov edx, ecx
mov ecx, eax
mov ebx, edx
mov edx, dword [esi + 0x24]
cmp edx, dword [esi + 0xd8]
jle 0x100d3e3a
mov ebx, dword [esi + 0x3c]
nop word cs:[eax + eax]
mov ebx, dword [ebx + 4]
movzx eax, word [ebx]
cmp edx, eax
jg 0x100d3e30
lea edx, [esi + 0x100]
jmp 0x100d3e6b
mov dword [esi + 0x38], eax
mov eax, edx
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x34], ecx
mov ecx, edx
mov dword [esi + 0x4c], edi
mov ebx, dword [ebx + 4]
test ebx, ebx
je 0x100d3bf0
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x30], ebx
movzx eax, word [ebx]
mov word [esi + 0x14], ax
movzx eax, ax
mov dword [esi + 0x20], eax
sub eax, dword [esi + 0x24]
mov dword [esi + 0xc], eax
mov ecx, edx
mov edx, dword [esi + 0x3c]
nop dword [eax]
mov ebx, edx
mov eax, ecx
lea ecx, [edx + 4]
mov edx, dword [edx + 4]
movzx edi, word [edx]
cmp dword [esi + 0xc], edi
jge 0x100d3e90
mov dword [esi + 0x48], eax
mov dword [esi + 0x3c], ebx
movzx eax, word [ebx]
xor ecx, ecx
mov ebx, 0
mov dword [esi + 0x10], eax
cmp word [esi + 0x14], ax
jbe 0x100d3f60
xor ebx, ebx
xor edi, edi
xor eax, eax
mov edx, dword [esi + 0x3c]
jmp 0x100d3f0d
mov edx, dword [edx + 4]
mov dword [esi + 0x14], edx
movzx ecx, word [edx]
mov dword [esi + 0x28], ecx
sub ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x24]
sub edx, edi
mov dword [esi + 0x10], ebx
lea ebx, [ecx + edi]
cmp ebx, dword [esi + 0x24]
mov ebx, dword [esi + 0x10]
cmovle edx, ecx
imul eax, edx
mov ecx, dword [esi + 0x18]
add ebx, eax
add edi, edx
mov edx, dword [esi + 0x28]
mov dword [esi + 0x10], edx
mov eax, ecx
cmp edx, dword [esi + 0x20]
mov edx, dword [esi + 0x14]
jae 0x100d3f60
movzx ecx, word [edx + 2]
mov dword [esi + 0x18], eax
sub eax, ecx
jge 0x100d3ed0
mov dword [esi + 0x60], ecx
mov eax, ecx
sub eax, dword [esi + 0x18]
mov dword [esi + 0x18], edi
imul eax, edi
mov edx, dword [edx + 4]
mov dword [esi + 0x14], edx
movzx edi, word [edx]
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
cmp edx, ecx
mov dword [esi + 0x28], edi
jge 0x100d3f50
mov edx, edi
sub edx, ecx
jmp 0x100d3f58
mov ecx, edi
mov edi, edx
mov edx, ecx
sub edx, edi
mov edi, dword [esi + 0x18]
mov ecx, dword [esi + 0x60]
jmp 0x100d3ef9
mov eax, dword [esi + 0x54]
add eax, ecx
cmp eax, dword [esi + 0xc0]
mov edx, dword [esi + 0x48]
jg 0x100d3fb0
mov edi, ebx
mov eax, ecx
cmp ecx, dword [esi + 0x38]
mov ecx, dword [esi + 0x2c]
mov ebx, dword [esi + 0x30]
jg 0x100d3e60
jl 0x100d3e50
cmp edi, dword [esi + 0x4c]
jl 0x100d3e50
jne 0x100d3e60
mov ecx, dword [esi + 0xc]
cmp ecx, dword [esi + 0x34]
mov ecx, dword [esi + 0x2c]
jl 0x100d3e50
jmp 0x100d3e60
mov ecx, dword [esi + 0x2c]
mov ebx, dword [esi + 0x30]
jmp 0x100d3e60
mov edi, ebx
mov dword [edi], ecx
mov eax, dword [edx + 4]
mov edi, dword [esi + 0x34]
add edi, dword [esi + 0x80]
mov dword [esi + 0x34], edi
test eax, eax
je 0x100d4006
lea ebx, [edx + 4]
nop word cs:[eax + eax]
mov edi, eax
movzx eax, word [eax]
cmp dword [esi + 0x34], eax
jl 0x100d4006
mov eax, dword [esi + 0x104]
mov dword [ebx], eax
mov dword [esi + 0x104], edx
lea ebx, [edi + 4]
mov eax, dword [edi + 4]
mov edx, edi
test eax, eax
jne 0x100d3fe0
jmp 0x100d4008
mov edi, edx
mov dword [ecx + 4], edi
movzx eax, word [edi]
mov ecx, dword [esi + 0x34]
cmp ecx, eax
jle 0x100d401a
mov eax, ecx
mov word [edi], ax
mov eax, dword [esi + 0x5c]
mov ecx, dword [esi + 0x7c]
movzx edx, word [esi + 0xc]
mov word [eax + ecx + 8], dx
mov edx, dword [esi + 0x38]
mov word [eax + ecx + 0xa], dx
jmp 0x100d3c5b
push 0x100d0e70
push 0x10
push ecx
push eax
mov edi, eax
mov ebx, ecx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
add esp, 0x10
cmp dword [esi + 0xd4], 0
je 0x100d40f1
and ebx, 0xfffffffe
mov eax, edi
mov edi, ebx
lea edx, [eax + 0x1c]
xor eax, eax
jmp 0x100d408e
mov dword [edx], ebx
add eax, 2
add edx, 0x20
mov ecx, edi
cmp edi, eax
je 0x100d40f3
mov ebx, 1
cmp word [edx - 0x14], 0xffff
mov ecx, 1
jne 0x100d40a9
xor ecx, ecx
cmp word [edx - 0x12], 0xffff
setne cl
mov dword [edx - 0x10], ecx
cmp word [edx - 4], 0xffff
jne 0x100d4080
xor ebx, ebx
cmp word [edx - 2], 0xffff
setne bl
jmp 0x100d4080
push 0x100d0e30
push 0x10
mov edi, dword [esi + 0x50]
push edi
push ecx
mov ebx, ecx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
add esp, 0x10
push 0x100d0e70
push 0x10
push edi
push ebx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
add esp, 0x10
mov edx, dword [esi + 0xa0]
jmp 0x100d4121
xor eax, eax
test byte [esi + 0x50], 1
mov edx, dword [esi + 0xa0]
je 0x100d4121
shl eax, 4
mov ecx, 1
mov edi, dword [esi + 0x5c]
cmp word [edi + eax + 8], 0xffff
jne 0x100d411d
xor ecx, ecx
cmp word [edi + eax + 0xa], 0xffff
setne cl
mov dword [edi + eax + 0xc], ecx
mov eax, dword [esi + 0x1c]
add eax, edx
add eax, 0x38
mov dword [esi + 0x10], eax
mov ebx, dword [eax]
test ebx, ebx
jle 0x100d3a40
mov eax, dword [esi + 0x1c]
add eax, edx
add eax, 0x28
mov dword [esi + 0xc], eax
xor edx, edx
mov edi, 0xc
jmp 0x100d415c
inc edx
add edi, 0x10
cmp edx, ebx
jge 0x100d3a40
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
cmp dword [eax + edi], 0
je 0x100d4150
movzx ebx, word [eax + edi - 2]
movzx eax, word [eax + edi - 6]
add eax, ebx
mov ecx, dword [ebp + 0xc]
mov ebx, dword [ecx + 0x24]
cmp ebx, eax
cmovg eax, ebx
mov dword [ecx + 0x24], eax
mov eax, dword [esi + 0x10]
mov ebx, dword [eax]
jmp 0x100d4150
mov eax, dword [ebp + 0xc]
test byte [eax + 4], 1
mov eax, dword [eax + 0x24]
jne 0x100d41c1
dec eax
mov ecx, eax
sar ecx, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or eax, ecx
mov ecx, eax
sar ecx, 4
or ecx, eax
mov edx, ecx
sar edx, 8
or edx, ecx
mov eax, edx
sar eax, 0x10
or eax, edx
mov dword [esi + 0x1f8], 0xa
inc eax
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x24], eax
mov ecx, dword [edx + 0x20]
movd xmm0, eax
movd xmm1, ecx
punpckldq xmm1, xmm0
cvtdq2ps xmm0, xmm1
movaps xmm1, xmmword [0x10153fd0]
divps xmm1, xmm0
movlps qword [edx + 0x28], xmm1
imul eax, ecx
mov dword [esi + 0x1f8], 0xa
push eax
call fcn.100a64d0
add esp, 4
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x18], eax
mov ecx, dword [edx + 0x24]
imul ecx, dword [edx + 0x20]
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
xor ecx, ecx
mov eax, dword [esi + 0x1c]
jmp 0x100d422e
mov dword [edx - 0x10], 0
mov ecx, dword [esi + 0x84]
inc ecx
cmp ecx, dword [esi + 0x58]
jge 0x100d45af
imul edx, ecx, 0x54
mov dword [esi + 0xc], edx
cmp dword [eax + edx + 0x38], 0
je 0x100d422d
mov edx, dword [ebp + 0xc]
mov edi, dword [edx + 0x58]
mov dword [esi + 0x84], ecx
imul ebx, ecx, 0x7c
mov ecx, eax
lea eax, [edi + ebx]
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ebx
mov edi, dword [edi + ebx + 0x78]
mov ebx, dword [esi + 0xc]
movss xmm0, dword [ecx + ebx + 4]
movss xmm1, dword [ecx + ebx + 8]
mov dword [esi + 0x1f8], 0xa
sub esp, 0x14
movss dword [esp + 0x10], xmm1
movss dword [esp + 0xc], xmm0
mov dword [esp + 8], eax
mov dword [esi + 0x48], edi
mov dword [esp + 4], edi
mov dword [esp], edx
call fcn.100cd5a0
add esp, 0x14
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0xc]
lea edx, [eax + ecx]
add edx, 0x38
mov ecx, dword [esi + 0x48]
movss xmm0, dword [ecx + 0x4c]
addss xmm0, dword [0x10154044]
cvttps2dq xmm0, xmm0
cvtdq2ps xmm0, xmm0
mov edi, dword [esi + 0x10]
mov ebx, dword [esi + 0x14]
addss xmm0, dword [edi + ebx + 0x2c]
movaps xmmword [esi + 0xc0], xmm0
movss xmm0, dword [edi + ebx + 0x28]
movss dword [esi + 0x3c], xmm0
mov ecx, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x10]
mov dword [esi + 0x34], ecx
lea ecx, [edi + ebx]
add ecx, 0x38
mov dword [esi + 0x38], ecx
xor edi, edi
mov dword [esi + 0x4c], edx
cmp edi, dword [edx]
jge 0x100d4220
mov eax, dword [edx + 0x18]
mov dword [esi + 0x28], eax
mov eax, dword [edx - 0x10]
mov ecx, edi
shl ecx, 4
movzx ebx, word [eax + ecx + 8]
movzx edx, word [eax + ecx + 0xa]
lea eax, [edi + edi*8]
lea ecx, [eax + eax*2]
mov dword [esi + 0x30], edi
add ecx, edi
mov eax, dword [esi + 0x34]
add ebx, eax
mov dword [esi + 0x60], ebx
add edx, eax
mov dword [esi + 0x20], edx
mov edx, dword [esi + 0x28]
lea eax, [edx + ecx]
mov dword [esi + 0x2c], eax
mov dword [esi + 0x24], ecx
mov edi, dword [edx + ecx + 4]
test edi, edi
jle 0x100d442c
mov ecx, dword [esi + 0x28]
mov edx, dword [esi + 0x24]
mov eax, dword [ecx + edx]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0xa4]
mov eax, dword [eax]
mov ebx, dword [esi + 0x20]
mov dword [esi + 0x10], eax
imul ebx, eax
mov eax, dword [ebp + 0xc]
add ebx, dword [eax + 0x18]
mov eax, edi
add ebx, dword [esi + 0x60]
mov edi, dword [ecx + edx + 0x18]
lea ecx, [eax - 1]
mov dword [esi + 0x54], ecx
mov ecx, eax
and ecx, 3
je 0x100d43c0
mov dword [esi + 0x18], ecx
mov ecx, dword [esi + 0xc]
nop word [eax + eax]
mov dword [esi + 0x14], eax
push ecx
push edi
push ebx
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
mov eax, dword [esi + 0x14]
add esp, 0xc
dec eax
add ebx, edx
add edi, ecx
dec dword [esi + 0x18]
jne 0x100d4390
cmp dword [esi + 0x54], 3
jae 0x100d43c9
jmp 0x100d442c
mov ecx, dword [esi + 0xc]
cmp dword [esi + 0x54], 3
jb 0x100d442c
dec eax
nop word [eax + eax]
mov dword [esi + 0x14], eax
push ecx
push edi
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, dword [esi + 0x10]
add edi, dword [esi + 0xc]
push dword [esi + 0xc]
push edi
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, dword [esi + 0x10]
add edi, dword [esi + 0xc]
push dword [esi + 0xc]
push edi
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, dword [esi + 0x10]
add edi, dword [esi + 0xc]
push dword [esi + 0xc]
push edi
push ebx
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
mov eax, dword [esi + 0x14]
add esp, 0xc
add ebx, edx
add edi, ecx
add eax, 0xfffffffc
cmp eax, 0xfffffffe
jb 0x100d43d0
mov ecx, dword [esi + 0x2c]
movss xmm0, dword [ecx + 0x10]
mov eax, dword [esi + 0x38]
movss xmm1, dword [eax]
movss xmm3, dword [eax - 4]
minss xmm1, xmm0
movaps xmm2, xmm0
cmpltss xmm2, xmm3
movaps xmm4, xmm2
andnps xmm4, xmm1
andps xmm2, xmm3
orps xmm2, xmm4
ucomiss xmm0, xmm2
movss xmm1, dword [esi + 0x3c]
jne 0x100d4464
jnp 0x100d4492
mov eax, dword [esi + 0x38]
cmp byte [eax - 0x1c], 0
movaps xmm1, xmm2
subss xmm1, xmm0
mulss xmm1, dword [0x10154044]
je 0x100d4483
cvttps2dq xmm1, xmm1
cvtdq2ps xmm1, xmm1
addss xmm1, dword [esi + 0x3c]
mov dword [esi + 0x1f8], 0xa
mov eax, dword [ecx]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
movss dword [esi + 0x10], xmm0
mov edx, dword [esi + 0x60]
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
movss dword [esi + 0xc], xmm0
add eax, edx
xorps xmm4, xmm4
cvtsi2ss xmm4, eax
mov eax, dword [ecx + 4]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
movss dword [esi + 0x14], xmm0
mov edx, dword [esi + 0x20]
cvtsi2ss xmm6, edx
add eax, edx
cvtsi2ss xmm7, eax
movaps xmm0, xmm1
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [ecx + 8]
mov eax, dword [ebp + 0xc]
xorps xmm3, xmm3
cvtsi2ss xmm3, dword [eax + 0x20]
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [eax + 0x24]
movss xmm5, dword [esi + 0xc]
divss xmm5, xmm3
movss dword [esi + 0xc], xmm5
divss xmm4, xmm3
divss xmm6, xmm0
divss xmm7, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [ecx + 0xc]
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x24]
movzx eax, word [eax + ecx + 0x14]
addss xmm0, dword [esi + 0xc0]
movss xmm3, dword [esi + 0x10]
addss xmm3, xmm1
movss xmm5, dword [esi + 0x14]
addss xmm5, xmm0
mov dword [esi + 0x1f8], 0xa
sub esp, 0x2c
movss dword [esp + 0x28], xmm2
movss dword [esp + 0x24], xmm7
movss dword [esp + 0x20], xmm4
movss dword [esp + 0x1c], xmm6
movss xmm2, dword [esi + 0xc]
movss dword [esp + 0x18], xmm2
movss dword [esp + 0x14], xmm5
movss dword [esp + 0x10], xmm3
movss dword [esp + 0xc], xmm0
movss dword [esp + 8], xmm1
mov dword [esp + 4], eax
mov dword [esp], 0
mov ecx, dword [esi + 0x48]
call fcn.100cd680
mov edi, dword [esi + 0x30]
inc edi
mov eax, dword [esi + 0x1c]
mov edx, dword [esi + 0x4c]
cmp edi, dword [edx]
jl 0x100d4300
jmp 0x100d4220
xor ecx, ecx
mov eax, dword [esi + 0x88]
mov dword [esi + 0x10], eax
cmp ecx, dword [esi + 0x10]
jge 0x100d45e8
nop
mov eax, dword [esi + 0x90]
mov dword [esi + 0xc], ecx
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x1f8], 0xa
push eax
call fcn.100a6500
add esp, 4
mov ecx, dword [esi + 0xc]
inc ecx
cmp ecx, dword [esi + 0x10]
jl 0x100d45c0
cmp dword [esi + 0x58], 0
jle 0x100d465c
mov eax, dword [esi + 0x1c]
lea edi, [eax + 0x18]
jmp 0x100d4608
add edi, 0x54
dec dword [esi + 0x58]
je 0x100d465c
mov eax, dword [edi + 0x38]
test eax, eax
mov dword [esi + 0xc], edi
je 0x100d4628
mov dword [esi + 0x1f8], 0
push eax
call fcn.100a6500
mov edi, dword [esi + 0xc]
add esp, 4
mov eax, dword [edi + 0x2c]
test eax, eax
je 0x100d4645
mov dword [esi + 0x1f8], 1
push eax
call fcn.100a6500
mov edi, dword [esi + 0xc]
add esp, 4
mov eax, dword [edi]
test eax, eax
je 0x100d4600
push eax
call fcn.100eecf0
add esp, 4
mov dword [edi], 0
jmp 0x100d4600
mov dword [esi + 0x1f8], 0xa
push dword [ebp + 0xc]
call fcn.100cd8c0
add esp, 4
mov eax, dword [esi + 0xb0]
test eax, eax
je 0x100d468e
mov dword [esi + 0x1f8], 2
push eax
call fcn.100a6500
add esp, 4
mov eax, dword [esi + 0x90]
test eax, eax
je 0x100d46ab
mov dword [esi + 0x1f8], 3
push eax
call fcn.100a6500
add esp, 4
mov eax, dword [esi + 0xbc]
test eax, eax
je 0x100d2ac5
mov dword [esi + 0x1f8], 4
push eax
call fcn.100a6500
add esp, 4
jmp 0x100d2ac5
mov eax, dword [esi + 0x10]
mov edx, eax
mov ecx, dword [esi + 0x18]
mov edi, dword [esi + 0xc]
mov ebx, dword [esi + 0x14]
jmp 0x100d399a