Function at 0x106cdea
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0xc8
push ebx
push esi
xor esi, esi
push edi
mov ebx, ecx
mov dword [ebp + 0x74], esi
call fcn.01068ac3
cmp dword [ebx + 8], esi
mov dword [ebp + 0x64], esi
mov dword [ebp + 0x38], esi
jbe 0x106ce30
mov edx, dword [ebx + 0x60]
mov ecx, dword [ebx + 0x14]
mov esi, dword [ebx + 8]
mov eax, dword [ecx]
cmp edx, dword [eax]
jne 0x106ce2a
mov eax, dword [eax + 8]
cmp dword [ebp + 0x64], eax
ja 0x106ce2a
inc eax
mov dword [ebp + 0x64], eax
add ecx, 4
dec esi
jne 0x106ce18
test byte [ebx + 0x90], 1
je 0x106cf81
mov ecx, dword [ebx + 0xc]
xor eax, eax
test ecx, ecx
mov dword [ebp + 0x50], ecx
mov dword [ebp + 0x5c], eax
jbe 0x106cf81
mov ecx, dword [ebx + 0x18]
mov esi, dword [ecx + eax*4]
mov ecx, esi
call fcn.01064ca3
test eax, eax
jne 0x106cf71
mov eax, dword [esi + 0xc]
test eax, eax
je 0x106cf71
mov edx, dword [esi + 0x10]
mov edx, dword [edx]
mov ecx, dword [ebx + 0x14]
mov edx, dword [ecx + edx*4]
mov edx, dword [edx]
mov edi, dword [ebx + 0x10]
mov edx, dword [edi + edx*4]
test byte [edx + 4], 0x10
je 0x106cf71
xor edx, edx
cmp edx, dword [esi + 4]
jae 0x106ceb4
mov edi, dword [esi + 8]
mov dword [ebp + 0x68], edi
mov edi, dword [ebp + 0x68]
mov edi, dword [edi]
mov edi, dword [ecx + edi*4]
cmp edx, dword [edi + 0xc]
jne 0x106ceb1
add dword [ebp + 0x68], 4
inc edx
cmp edx, dword [esi + 4]
jb 0x106ce9a
cmp edx, dword [esi + 4]
je 0x106cf71
push 0xffffffffffffffff
and eax, 0xffffff
push 0xffffffffffffffff
or eax, 0x10000000
push eax
mov ecx, ebx
call fcn.01064738
cmp eax, 0xffffffff
je 0x106e1a1
mov ecx, dword [ebx + 0x18]
mov eax, dword [ecx + eax*4]
push esi
mov ecx, eax
mov dword [ebp + 0x68], eax
call fcn.01064c4f
and dword [ebp + 0x6c], 0
cmp dword [esi + 0xc], 0
jbe 0x106cf67
mov eax, dword [ebp + 0x6c]
fldz
mov ecx, dword [esi + 0x10]
mov edx, dword [ebp + 0x68]
mov edx, dword [edx + 0x10]
mov edi, eax
shl edi, 2
mov ecx, dword [edi + ecx]
push ecx
push ecx
fstp qword [esp]
push eax
push dword [ebp + 0x64]
mov dword [edi + edx], ecx
push dword [ebx + 0x60]
mov ecx, ebx
call fcn.010646dc
mov ecx, dword [esi + 0x10]
mov dword [edi + ecx], eax
mov ecx, dword [esi + 0x10]
mov eax, dword [ebp + 0x68]
mov edx, dword [eax + 8]
mov ecx, dword [edi + ecx]
mov dword [edi + edx], ecx
mov eax, dword [eax + 8]
mov ecx, dword [edi + eax]
cmp ecx, 0xffffffff
je 0x106e1a1
mov edx, dword [ebp + 0x68]
mov edx, dword [edx + 0x10]
mov eax, dword [ebx + 0x14]
mov edx, dword [edi + edx]
mov edx, dword [eax + edx*4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [edx + 0x18]
inc dword [ebp + 0x6c]
mov dword [eax + 0x18], ecx
mov eax, dword [ebp + 0x6c]
cmp eax, dword [esi + 0xc]
jb 0x106cef4
inc dword [ebp + 0x64]
mov dword [ebp + 0x74], 1
mov eax, dword [ebp + 0x5c]
inc eax
cmp eax, dword [ebp + 0x50]
mov dword [ebp + 0x5c], eax
jb 0x106ce50
test byte [ebx + 0x93], 2
je 0x106d0ea
and dword [ebp + 0x70], 0
cmp dword [ebx + 0xc], 0
jbe 0x106d0ea
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebp + 0x70]
mov esi, dword [eax + ecx*4]
mov ecx, esi
mov dword [ebp + 0x5c], esi
call fcn.01064d52
test eax, eax
je 0x106d0db
lea ecx, [ebp + 0x60]
xor eax, eax
inc eax
push ecx
mov dword [ebp + 0x68], eax
push eax
mov ecx, esi
jmp 0x106d0cb
xor ecx, ecx
test eax, eax
jbe 0x106cfe5
mov edx, dword [ebx + 0x14]
mov esi, dword [ebp + 0x60]
mov esi, dword [esi + ecx*4]
mov esi, dword [edx + esi*4]
cmp dword [esi + 0xc], ecx
jne 0x106cfe5
inc ecx
cmp ecx, eax
jb 0x106cfd2
cmp ecx, eax
je 0x106d0be
mov eax, dword [ebp + 0x58]
push 0xffffffffffffffff
and eax, 0xffffff
push 0xffffffffffffffff
or eax, 0x10000000
push eax
mov ecx, ebx
call fcn.01064738
mov edi, eax
cmp edi, 0xffffffff
mov dword [ebp + 0x50], edi
je 0x106e1a1
mov eax, dword [ebx + 0x18]
mov esi, dword [eax + edi*4]
push dword [ebp + 0x5c]
mov ecx, esi
call fcn.01064c4f
and dword [ebp + 0x6c], 0
cmp dword [ebp + 0x58], 0
jbe 0x106d0a6
mov ecx, dword [esi + 8]
fldz
mov eax, dword [ebp + 0x6c]
mov edx, dword [ebp + 0x60]
push ecx
push ecx
fstp qword [esp]
mov edi, eax
push eax
push dword [ebp + 0x64]
shl edi, 2
mov edx, dword [edi + edx]
mov dword [edi + ecx], edx
push dword [ebx + 0x60]
mov ecx, ebx
call fcn.010646dc
mov ecx, dword [ebp + 0x60]
mov dword [edi + ecx], eax
mov ecx, dword [ebp + 0x60]
mov eax, dword [esi + 0x10]
mov ecx, dword [edi + ecx]
mov dword [edi + eax], ecx
mov eax, dword [esi + 0x10]
mov ecx, dword [edi + eax]
cmp ecx, 0xffffffff
je 0x106e1a1
mov edx, dword [esi + 8]
mov eax, dword [ebx + 0x14]
mov edx, dword [edi + edx]
mov edx, dword [eax + edx*4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [edx + 0x18]
inc dword [ebp + 0x6c]
mov dword [eax + 0x18], ecx
mov eax, dword [ebp + 0x6c]
cmp eax, dword [ebp + 0x58]
jb 0x106d02e
mov edi, dword [ebp + 0x50]
jmp 0x106d0a6
lea eax, [eax + edi*4]
mov ecx, dword [eax - 4]
mov dword [eax], ecx
dec edi
cmp edi, dword [ebp + 0x70]
mov eax, dword [ebx + 0x18]
ja 0x106d09d
inc dword [ebp + 0x70]
inc dword [ebp + 0x64]
mov dword [eax + edi*4], esi
mov dword [ebp + 0x74], 1
inc dword [ebp + 0x68]
mov ecx, dword [ebp + 0x5c]
lea eax, [ebp + 0x60]
push eax
push dword [ebp + 0x68]
call fcn.01064c69
test eax, eax
mov dword [ebp + 0x58], eax
jne 0x106cfc9
inc dword [ebp + 0x70]
mov eax, dword [ebp + 0x70]
cmp eax, dword [ebx + 0xc]
jb 0x106cf9c
and dword [ebp + 0x70], 0
cmp dword [ebx + 0xc], 0
jbe 0x106d28c
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebp + 0x70]
mov edi, dword [eax + ecx*4]
mov eax, dword [edi]
and eax, 0xff000000
cmp eax, 0x34000000
mov dword [ebp + 0x5c], edi
jne 0x106d27d
cmp dword [edi + 4], 4
jne 0x106d169
mov eax, dword [edi + 8]
mov ecx, dword [ebx + 0x14]
mov edx, dword [eax]
mov edx, dword [ecx + edx*4]
mov esi, dword [ebx + 0x10]
mov dword [ebp + 0x50], edx
mov edx, dword [edx]
mov edx, dword [esi + edx*4]
test byte [edx + 5], 1
jne 0x106d169
mov edx, dword [ebp + 0x50]
cmp dword [edx + 0xc], 0
jne 0x106d169
mov edx, dword [eax + 4]
mov edx, dword [ecx + edx*4]
cmp dword [edx + 0xc], 1
jne 0x106d169
mov edx, dword [eax + 8]
mov edx, dword [ecx + edx*4]
cmp dword [edx + 0xc], 2
jne 0x106d169
mov eax, dword [eax + 0xc]
mov eax, dword [ecx + eax*4]
cmp dword [eax + 0xc], 3
je 0x106d27d
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x10000004
mov ecx, ebx
call fcn.01064738
push 0xffffffffffffffff
push 0xffffffffffffffff
mov esi, eax
push 0x34000004
mov ecx, ebx
mov dword [ebp + 0x50], esi
call fcn.01064738
cmp esi, 0xffffffff
je 0x106e1a1
cmp eax, 0xffffffff
je 0x106e1a1
mov ecx, dword [ebx + 0x18]
mov esi, dword [ecx + esi*4]
mov eax, dword [ecx + eax*4]
push edi
mov ecx, esi
mov dword [ebp + 0x68], eax
call fcn.01064c4f
mov ecx, dword [ebp + 0x68]
push edi
call fcn.01064c4f
and dword [ebp + 0x74], 0
mov eax, dword [ebp + 0x5c]
mov ecx, dword [eax + 4]
mov edx, dword [ebp + 0x74]
cmp edx, ecx
mov eax, dword [eax + 8]
jae 0x106d1d6
mov eax, dword [eax + edx*4]
jmp 0x106d1da
mov eax, dword [eax + ecx*4 - 4]
mov ecx, dword [ebp + 0x74]
fldz
mov edx, dword [esi + 8]
push ecx
push ecx
fstp qword [esp]
push ecx
push dword [ebp + 0x64]
mov edi, ecx
shl edi, 2
mov dword [edi + edx], eax
push dword [ebx + 0x60]
mov ecx, ebx
call fcn.010646dc
mov ecx, dword [ebp + 0x68]
mov edx, dword [ecx + 8]
mov dword [edi + edx], eax
mov eax, dword [ecx + 8]
mov ecx, dword [esi + 0x10]
mov eax, dword [edi + eax]
mov dword [edi + ecx], eax
mov eax, dword [esi + 0x10]
mov ecx, dword [edi + eax]
cmp ecx, 0xffffffff
je 0x106e1a1
mov edx, dword [esi + 8]
mov eax, dword [ebx + 0x14]
mov edx, dword [edi + edx]
mov edx, dword [eax + edx*4]
mov eax, dword [eax + ecx*4]
inc dword [ebp + 0x74]
cmp dword [ebp + 0x74], 4
mov ecx, dword [edx + 0x18]
mov dword [eax + 0x18], ecx
jb 0x106d1c1
mov ecx, dword [ebp + 0x50]
jmp 0x106d24d
lea eax, [eax + ecx*4]
mov edx, dword [eax - 4]
mov dword [eax], edx
dec ecx
cmp ecx, dword [ebp + 0x70]
mov eax, dword [ebx + 0x18]
ja 0x106d244
mov edi, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x5c]
mov dword [eax + edi*4], esi
xor esi, esi
inc esi
inc edi
push esi
mov dword [ebp + 0x70], edi
call fcn.01064393
dec dword [ebx + 0xc]
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebp + 0x68]
inc dword [ebp + 0x64]
mov dword [eax + edi*4], ecx
mov dword [ebp + 0x74], esi
inc dword [ebp + 0x70]
mov eax, dword [ebp + 0x70]
cmp eax, dword [ebx + 0xc]
jb 0x106d0f8
test byte [ebx + 0x90], 6
je 0x106d7e4
xor edx, edx
cmp dword [ebx + 0xc], edx
mov dword [ebp + 0x60], edx
jbe 0x106d4b9
mov eax, dword [ebx + 0x18]
mov esi, dword [eax + edx*4]
mov eax, dword [esi]
and eax, 0xff000000
cmp eax, 0x10000000
mov dword [ebp + 0x3c], esi
jne 0x106d4ac
mov ecx, dword [esi + 0x10]
mov ecx, dword [ecx]
mov eax, dword [ebx + 0x14]
mov ecx, dword [eax + ecx*4]
mov ecx, dword [ecx]
mov edi, dword [ebx + 0x10]
mov ecx, dword [edi + ecx*4]
test byte [ecx + 4], 0x10
jne 0x106d4ac
and dword [ebp + 0x6c], 0
cmp dword [esi + 0xc], 0
jbe 0x106d319
mov ecx, dword [esi + 8]
mov edi, dword [ecx]
mov edi, dword [eax + edi*4]
mov edi, dword [edi + 0x2c]
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x68], ecx
mov ecx, dword [ebp + 0x68]
mov ecx, dword [ecx]
mov ecx, dword [eax + ecx*4]
mov edi, dword [ebp + 0x50]
cmp edi, dword [ecx + 0x2c]
jne 0x106d319
inc dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x6c]
add dword [ebp + 0x68], 4
cmp ecx, dword [esi + 0xc]
jb 0x106d2fa
mov eax, dword [ebp + 0x6c]
cmp eax, dword [esi + 0xc]
je 0x106d4ac
mov eax, dword [esi + 4]
and dword [ebp + 0x70], 0
and dword [ebp + 0x74], 0
test eax, eax
jbe 0x106d44e
mov edx, dword [ebp + 0x74]
mov ecx, dword [esi + 8]
lea edi, [ecx + edx*4]
mov edx, dword [edi]
cmp edx, 0xffffffff
je 0x106d423
mov ecx, dword [ebx + 0x14]
mov edx, dword [ecx + edx*4]
mov edx, dword [edx + 0x2c]
mov dword [ebp + 0x54], edx
xor edx, edx
cmp dword [ebp + 0x74], eax
jae 0x106d387
sub eax, dword [ebp + 0x74]
mov dword [ebp + 0x68], edi
mov dword [ebp + 0x5c], eax
mov eax, dword [ebp + 0x68]
mov eax, dword [eax]
cmp eax, 0xffffffff
je 0x106d37e
mov eax, dword [ecx + eax*4]
mov edi, dword [ebp + 0x54]
cmp edi, dword [eax + 0x2c]
jne 0x106d37e
inc edx
add dword [ebp + 0x68], 4
dec dword [ebp + 0x5c]
jne 0x106d368
push 0xffffffffffffffff
and edx, 0xffffff
push 0xffffffffffffffff
or edx, 0x10000000
push edx
mov ecx, ebx
call fcn.01064738
cmp eax, 0xffffffff
je 0x106e1a1
mov ecx, dword [ebx + 0x18]
mov edi, dword [ecx + eax*4]
push esi
mov ecx, edi
mov dword [ebp + 0x4c], edi
call fcn.01064c4f
mov eax, dword [ebp + 0x74]
inc dword [ebp + 0x70]
cmp eax, dword [esi + 4]
mov dword [ebp + 0x6c], eax
jae 0x106d423
and dword [ebp + 0x5c], 0
mov eax, dword [ebp + 0x6c]
mov ecx, dword [esi + 8]
shl eax, 2
mov ecx, dword [eax + ecx]
cmp ecx, 0xffffffff
je 0x106d418
mov edx, dword [ebx + 0x14]
mov ecx, dword [edx + ecx*4]
mov edx, dword [ebp + 0x54]
cmp edx, dword [ecx + 0x2c]
jne 0x106d418
mov edx, dword [edi + 0x10]
mov ecx, dword [esi + 0x10]
mov edi, dword [eax + ecx]
mov ecx, dword [ebp + 0x5c]
mov dword [ecx + edx], edi
mov edx, dword [esi + 8]
mov edi, dword [ebp + 0x4c]
mov edi, dword [edi + 8]
mov edx, dword [eax + edx]
mov dword [ecx + edi], edx
mov edx, dword [esi + 8]
or dword [eax + edx], 0xffffffff
mov edi, dword [ebp + 0x4c]
add ecx, 4
mov dword [ebp + 0x5c], ecx
inc dword [ebp + 0x6c]
mov eax, dword [ebp + 0x6c]
cmp eax, dword [esi + 4]
jb 0x106d3cb
inc dword [ebp + 0x74]
mov eax, dword [esi + 4]
cmp dword [ebp + 0x74], eax
jb 0x106d338
cmp dword [ebp + 0x70], 0
jbe 0x106d44e
mov ecx, dword [ebp + 0x70]
mov eax, dword [ebx + 0xc]
mov edx, dword [ebx + 0x18]
sub eax, ecx
lea esi, [edx + eax*4]
lea edi, [ebp]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 0x3c]
mov eax, dword [ebx + 0xc]
dec eax
cmp eax, dword [ebp + 0x60]
jbe 0x106d471
mov edx, eax
sub edx, dword [ebp + 0x70]
shl edx, 2
mov ecx, dword [ebx + 0x18]
mov edi, dword [ecx + edx]
sub edx, 4
dec eax
cmp eax, dword [ebp + 0x60]
mov dword [ecx + eax*4], edi
ja 0x106d45f
xor eax, eax
cmp dword [ebp + 0x70], eax
jbe 0x106d491
mov ecx, dword [ebp + 0x60]
shl ecx, 2
mov edi, dword [ebp + eax*4]
mov edx, dword [ebx + 0x18]
mov dword [ecx + edx], edi
inc eax
add ecx, 4
cmp eax, dword [ebp + 0x70]
jb 0x106d47e
xor edi, edi
inc edi
push edi
mov ecx, esi
call fcn.01064393
mov eax, dword [ebp + 0x60]
mov ecx, dword [ebp + 0x70]
dec dword [ebx + 0xc]
lea edx, [eax + ecx - 1]
mov dword [ebp + 0x74], edi
inc edx
cmp edx, dword [ebx + 0xc]
mov dword [ebp + 0x60], edx
jb 0x106d2a7
and dword [ebp + 0x60], 0
cmp dword [ebx + 0xc], 0
jbe 0x106d7e4
mov eax, dword [ebp + 0x60]
mov ecx, dword [ebx + 0x18]
shl eax, 2
mov edi, dword [eax + ecx]
mov eax, dword [edi]
and eax, 0xff000000
cmp eax, 0x10000000
mov dword [ebp + 0x50], edi
jne 0x106d7d5
mov esi, dword [edi + 0x10]
mov eax, dword [ebx + 0x14]
mov ecx, dword [esi]
mov ecx, dword [eax + ecx*4]
mov ecx, dword [ecx]
mov edx, dword [ebx + 0x10]
mov ecx, dword [edx + ecx*4]
test byte [ecx + 4], 0x10
jne 0x106d7d5
mov edx, dword [edi + 0xc]
xor ecx, ecx
and dword [ebp + 0x6c], ecx
and dword [ebp + 0x70], ecx
test edx, edx
jbe 0x106d583
mov edx, dword [edi + 8]
mov dword [ebp + 0x68], esi
sub dword [ebp + 0x68], edx
mov dword [ebp + 0x48], edx
mov edx, dword [ebp + 0x48]
mov esi, dword [edx]
mov esi, dword [eax + esi*4]
mov esi, dword [esi + 0xc]
mov dword [ebp + 0x5c], esi
mov esi, dword [ebp + 0x68]
mov edx, dword [esi + edx]
mov edx, dword [eax + edx*4]
mov edx, dword [edx + 0xc]
cmp edx, dword [ebp + 0x5c]
jne 0x106d540
inc ecx
and dword [ebp + 0x58], 0
cmp dword [ebp + 0x70], 0
jbe 0x106d574
mov edx, dword [edi + 8]
mov dword [ebp + 0x44], edx
mov edx, dword [ebp + 0x44]
mov edx, dword [edx]
mov edx, dword [eax + edx*4]
mov esi, dword [ebp + 0x5c]
cmp dword [edx + 0xc], esi
je 0x106d571
inc dword [ebp + 0x58]
mov edx, dword [ebp + 0x58]
add dword [ebp + 0x44], 4
cmp edx, dword [ebp + 0x70]
jb 0x106d550
jmp 0x106d574
inc dword [ebp + 0x6c]
inc dword [ebp + 0x70]
mov edx, dword [edi + 0xc]
add dword [ebp + 0x48], 4
cmp dword [ebp + 0x70], edx
jb 0x106d520
cmp ecx, edx
je 0x106d7d5
mov eax, dword [ebp + 0x6c]
inc eax
cmp eax, edx
je 0x106d7d5
cmp ecx, 1
ja 0x106d5a6
cmp dword [ebp + 0x6c], 0
je 0x106d7d5
and dword [ebp + 0x70], 0
cmp ecx, 1
jbe 0x106d64f
push 0xffffffffffffffff
and ecx, 0xffffff
or ecx, 0x10000000
push 0xffffffffffffffff
push ecx
mov ecx, ebx
call fcn.01064738
cmp eax, 0xffffffff
je 0x106e1a1
mov ecx, dword [ebx + 0x18]
mov eax, dword [ecx + eax*4]
push edi
mov ecx, eax
mov dword [ebp + 0x5c], eax
call fcn.01064c4f
xor eax, eax
cmp dword [edi + 0xc], eax
mov dword [ebp + 0x70], 1
mov dword [ebp + 0x6c], eax
jbe 0x106d64f
mov dword [ebp + 0x54], eax
mov eax, dword [ebp + 0x6c]
mov esi, dword [edi + 8]
mov ecx, dword [edi + 0x10]
mov edx, dword [ebx + 0x14]
shl eax, 2
mov esi, dword [eax + esi]
mov esi, dword [edx + esi*4]
mov ecx, dword [eax + ecx]
mov edx, dword [edx + ecx*4]
mov edx, dword [edx + 0xc]
cmp edx, dword [esi + 0xc]
jne 0x106d644
mov edx, dword [ebp + 0x5c]
mov esi, dword [edx + 0x10]
mov edx, dword [ebp + 0x54]
mov dword [edx + esi], ecx
mov ecx, dword [edi + 8]
mov esi, dword [ebp + 0x5c]
mov ecx, dword [eax + ecx]
mov esi, dword [esi + 8]
mov dword [edx + esi], ecx
mov ecx, dword [edi + 8]
or dword [eax + ecx], 0xffffffff
add edx, 4
mov dword [ebp + 0x54], edx
inc dword [ebp + 0x6c]
mov eax, dword [ebp + 0x6c]
cmp eax, dword [edi + 0xc]
jb 0x106d5f9
mov eax, dword [edi + 4]
and dword [ebp + 0x74], 0
test eax, eax
jbe 0x106d758
mov edx, dword [ebp + 0x74]
mov ecx, dword [edi + 8]
lea esi, [ecx + edx*4]
mov edx, dword [esi]
cmp edx, 0xffffffff
je 0x106d749
mov ecx, dword [ebx + 0x14]
mov edx, dword [ecx + edx*4]
mov edx, dword [edx + 0xc]
mov dword [ebp + 0x54], edx
xor edx, edx
cmp dword [ebp + 0x74], eax
jae 0x106d6ad
sub eax, dword [ebp + 0x74]
mov dword [ebp + 0x48], esi
mov dword [ebp + 0x5c], eax
mov eax, dword [ebp + 0x48]
mov eax, dword [eax]
cmp eax, 0xffffffff
je 0x106d6a4
mov eax, dword [ecx + eax*4]
mov esi, dword [ebp + 0x54]
cmp esi, dword [eax + 0xc]
jne 0x106d6a4
inc edx
add dword [ebp + 0x48], 4
dec dword [ebp + 0x5c]
jne 0x106d68e
push 0xffffffffffffffff
and edx, 0xffffff
push 0xffffffffffffffff
or edx, 0x10000000
push edx
mov ecx, ebx
call fcn.01064738
cmp eax, 0xffffffff
je 0x106e1a1
mov ecx, dword [ebx + 0x18]
mov esi, dword [ecx + eax*4]
push edi
mov ecx, esi
mov dword [ebp + 0x4c], esi
call fcn.01064c4f
mov eax, dword [ebp + 0x74]
inc dword [ebp + 0x70]
cmp eax, dword [edi + 4]
mov dword [ebp + 0x6c], eax
jae 0x106d749
and dword [ebp + 0x5c], 0
mov eax, dword [ebp + 0x6c]
mov ecx, dword [edi + 8]
shl eax, 2
mov ecx, dword [eax + ecx]
cmp ecx, 0xffffffff
je 0x106d73e
mov edx, dword [ebx + 0x14]
mov ecx, dword [edx + ecx*4]
mov edx, dword [ebp + 0x54]
cmp edx, dword [ecx + 0xc]
jne 0x106d73e
mov edx, dword [esi + 0x10]
mov ecx, dword [edi + 0x10]
mov esi, dword [eax + ecx]
mov ecx, dword [ebp + 0x5c]
mov dword [ecx + edx], esi
mov edx, dword [edi + 8]
mov esi, dword [ebp + 0x4c]
mov esi, dword [esi + 8]
mov edx, dword [eax + edx]
mov dword [ecx + esi], edx
mov edx, dword [edi + 8]
or dword [eax + edx], 0xffffffff
mov esi, dword [ebp + 0x4c]
add ecx, 4
mov dword [ebp + 0x5c], ecx
inc dword [ebp + 0x6c]
mov eax, dword [ebp + 0x6c]
cmp eax, dword [edi + 4]
jb 0x106d6f1
inc dword [ebp + 0x74]
mov eax, dword [edi + 4]
cmp dword [ebp + 0x74], eax
jb 0x106d65e
cmp dword [ebp + 0x70], 0
jbe 0x106d774
mov ecx, dword [ebp + 0x70]
mov eax, dword [ebx + 0xc]
mov edx, dword [ebx + 0x18]
sub eax, ecx
lea esi, [edx + eax*4]
lea edi, [ebp]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp + 0x50]
mov eax, dword [ebx + 0xc]
dec eax
cmp eax, dword [ebp + 0x60]
jbe 0x106d797
mov edx, eax
sub edx, dword [ebp + 0x70]
shl edx, 2
mov ecx, dword [ebx + 0x18]
mov esi, dword [ecx + edx]
sub edx, 4
dec eax
cmp eax, dword [ebp + 0x60]
mov dword [ecx + eax*4], esi
ja 0x106d785
xor eax, eax
cmp dword [ebp + 0x70], eax
jbe 0x106d7b7
mov ecx, dword [ebp + 0x60]
shl ecx, 2
mov esi, dword [ebp + eax*4]
mov edx, dword [ebx + 0x18]
mov dword [ecx + edx], esi
inc eax
add ecx, 4
cmp eax, dword [ebp + 0x70]
jb 0x106d7a4
xor esi, esi
inc esi
push esi
mov ecx, edi
call fcn.01064393
mov eax, dword [ebp + 0x60]
mov ecx, dword [ebp + 0x70]
dec dword [ebx + 0xc]
lea eax, [eax + ecx - 1]
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x74], esi
inc dword [ebp + 0x60]
mov eax, dword [ebp + 0x60]
cmp eax, dword [ebx + 0xc]
jb 0x106d4c7
cmp dword [ebp + 0x74], 0
je 0x106d7f1
mov ecx, ebx
call fcn.01068ac3
mov esi, dword [ebp + 0x64]
shl esi, 2
push esi
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
test eax, eax
pop ecx
mov dword [ebp + 0x38], eax
je 0x106e1a1
mov ecx, esi
mov esi, dword [ebp + 0x38]
mov edx, ecx
shr ecx, 2
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
xor edx, edx
rep stosb byte es:[edi], al
cmp dword [ebx + 8], edx
jbe 0x106d84e
mov eax, dword [ebx + 0x14]
mov eax, dword [eax + edx*4]
and dword [eax + 0x40], 0
mov ecx, dword [ebx + 0x60]
cmp ecx, dword [eax]
jne 0x106d848
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
lea ecx, [esi + ecx*4]
cmp eax, dword [ecx]
jb 0x106d848
inc eax
mov dword [ecx], eax
inc edx
cmp edx, dword [ebx + 8]
jb 0x106d827
mov eax, dword [ebx + 0xc]
test eax, eax
ja 0x106d870
and dword [ebp + 0x68], 0
push dword [ebp + 0x38]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
mov eax, dword [ebp + 0x68]
pop ecx
pop edi
pop esi
pop ebx
add ebp, 0x78
leave
ret
mov eax, dword [ebp + 0x5c]
mov ecx, dword [ebx + 0x18]
dec eax
mov esi, dword [ecx + eax*4]
mov ecx, esi
mov dword [ebp + 0x5c], eax
call fcn.01064ca3
test eax, eax
jne 0x106e192
mov edi, dword [esi]
and edi, 0xffffff
cmp dword [esi + 0xc], eax
je 0x106d97b
mov ecx, esi
call fcn.01064ce6
test eax, eax
je 0x106d8b4
push 1
push edi
lea eax, [ebp + 0x20]
push eax
push dword [esi + 0x10]
jmp 0x106d974
mov ecx, esi
call fcn.01064d1c
test eax, eax
je 0x106d8df
push 1
push edi
lea eax, [ebp + 0x20]
push eax
push dword [esi + 0x10]
mov ecx, ebx
call fcn.010689e4
push 0
push edi
lea eax, [ebp + 0x20]
push eax
push dword [esi + 8]
jmp 0x106d974
mov ecx, esi
call fcn.01064d2e
test eax, eax
je 0x106d91e
push 1
push edi
lea eax, [ebp + 0x20]
push eax
push dword [esi + 0x10]
mov ecx, ebx
call fcn.010689e4
push 0
push edi
lea eax, [ebp + 0x20]
push eax
push dword [esi + 8]
mov ecx, ebx
call fcn.010689e4
mov ecx, dword [esi + 8]
push 0
lea eax, [ebp + 0x20]
push edi
push eax
mov eax, dword [esi + 0xc]
lea eax, [ecx + eax*4]
jmp 0x106d973
mov ecx, esi
call fcn.01064d40
test eax, eax
je 0x106d97b
push 1
push edi
lea eax, [ebp + 0x20]
push eax
push dword [esi + 0x10]
mov ecx, ebx
call fcn.010689e4
push 0
push edi
lea eax, [ebp + 0x20]
push eax
push dword [esi + 8]
mov ecx, ebx
call fcn.010689e4
mov ecx, dword [esi + 8]
push 0
push edi
lea eax, [ebp + 0x20]
push eax
mov eax, dword [esi + 0xc]
lea eax, [ecx + eax*4]
push eax
mov ecx, ebx
call fcn.010689e4
mov ecx, dword [esi + 8]
push 0
lea eax, [ebp + 0x20]
push edi
push eax
mov eax, dword [esi + 0xc]
lea eax, [ecx + eax*8]
push eax
mov ecx, ebx
call fcn.010689e4
xor eax, eax
lea edi, [ebp + 0x10]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov ecx, esi
stosd dword es:[edi], eax
call fcn.01064cb0
test eax, eax
je 0x106da7f
mov eax, dword [esi + 0x10]
mov eax, dword [eax]
mov ecx, dword [ebx + 0x14]
mov eax, dword [ecx + eax*4]
mov edx, dword [ebx + 0x10]
mov dword [ebp + 0x4c], eax
mov eax, dword [eax]
mov edi, dword [edx + eax*4]
mov eax, dword [edi + 4]
test al, 4
jne 0x106da7f
test byte [ebx + 0x90], 1
je 0x106d9c5
test al, 0x10
jne 0x106da7f
mov eax, dword [esi + 8]
mov edx, dword [eax]
mov edx, dword [ecx + edx*4]
mov edi, dword [ebx + 0x60]
cmp edi, dword [edx]
jne 0x106da7f
and dword [ebp + 0x74], 0
cmp dword [esi + 4], 0
jbe 0x106da7f
mov edx, dword [ebx + 0x34]
mov dword [ebp + 0x48], eax
and edx, 8
lea eax, [ebp + 0x10]
sub dword [ebp + 0x48], eax
mov dword [ebp + 0x50], edx
cmp dword [ebp + 0x50], 0
mov edx, dword [ebp + 0x74]
mov eax, dword [ebp + 0x48]
lea eax, [eax + edx*4]
mov eax, dword [ebp + eax + 0x10]
mov eax, dword [ecx + eax*4]
mov edi, dword [eax + 0x2c]
mov edx, dword [ebx + 0x18]
mov edx, dword [edx + edi*4]
je 0x106da2c
mov edi, dword [ebp + 0x4c]
mov edi, dword [edi + 0x44]
test edi, edi
je 0x106da2c
mov eax, dword [eax + 0x44]
test eax, eax
je 0x106da2c
cmp edi, eax
jne 0x106da7f
mov eax, dword [edx + 0xc]
and dword [ebp + 0x6c], 0
test eax, eax
mov dword [ebp + 0x54], eax
jbe 0x106da5d
mov edx, dword [edx + 0x10]
mov eax, dword [edx]
mov eax, dword [ecx + eax*4]
mov edi, dword [ebp + 0x5c]
cmp edi, dword [eax + 0x38]
jne 0x106da5d
cmp edi, dword [eax + 0x3c]
jne 0x106da5d
inc dword [ebp + 0x6c]
mov eax, dword [ebp + 0x6c]
add edx, 4
cmp eax, dword [ebp + 0x54]
jb 0x106da3d
mov eax, dword [ebp + 0x54]
cmp dword [ebp + 0x6c], eax
jne 0x106da70
mov eax, dword [ebp + 0x74]
mov dword [ebp + eax*4 + 0x10], 1
inc dword [ebp + 0x74]
mov eax, dword [ebp + 0x74]
cmp eax, dword [esi + 4]
jb 0x106d9f8
mov ecx, esi
call fcn.01064d1c
test eax, eax
jne 0x106daac
mov ecx, esi
call fcn.01064d2e
test eax, eax
jne 0x106daac
mov ecx, esi
call fcn.01064d40
test eax, eax
jne 0x106daac
mov dword [ebp + eax*4 - 0x20], eax
inc eax
cmp eax, 4
jb 0x106daa0
jmp 0x106dae3
and dword [ebp + 0x6c], 0
cmp dword [esi + 0xc], 0
jbe 0x106dae3
mov eax, dword [esi + 0x10]
mov ecx, dword [ebx + 0x14]
lea edx, [ebp - 0x20]
sub eax, edx
mov edx, dword [ebp + 0x6c]
shl edx, 2
inc dword [ebp + 0x6c]
lea edi, [eax + edx]
mov edi, dword [ebp + edi - 0x20]
mov edi, dword [ecx + edi*4]
mov edi, dword [edi + 0xc]
mov dword [ebp + edx - 0x20], edi
mov edx, dword [ebp + 0x6c]
cmp edx, dword [esi + 0xc]
jb 0x106dac1
and dword [ebp + 0x54], 0
lea eax, [ebp + 0x60]
push eax
push 0
jmp 0x106e0d2
xor eax, eax
lea edi, [ebp - 0x10]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor ecx, ecx
cmp dword [ebp + 0x58], ecx
stosd dword es:[edi], eax
mov dword [ebp + 0x70], ecx
mov dword [ebp + 0x4c], ecx
stosd dword es:[edi], eax
mov dword [ebp + 0x74], ecx
jbe 0x106dcdf
mov ecx, dword [ebp + 0x74]
mov eax, dword [ebp + 0x60]
mov eax, dword [eax + ecx*4]
mov ecx, dword [ebx + 0x14]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebx + 0x60]
cmp ecx, dword [eax]
mov dword [ebp + 0x68], eax
jne 0x106dcca
mov edx, dword [eax + 0x2c]
cmp edx, 0xffffffff
je 0x106dcca
cmp dword [eax + 0x40], 0
je 0x106db45
mov dword [ebp + 0x70], 1
mov eax, dword [eax + 0xc]
lea eax, [ebp + eax*4 - 0x10]
mov ecx, dword [eax]
test ecx, ecx
jne 0x106db55
inc dword [ebp + 0x4c]
inc ecx
mov dword [eax], ecx
mov eax, dword [ebx + 0x18]
mov edi, dword [eax + edx*4]
mov ecx, edi
mov dword [ebp + 0x3c], edi
call fcn.01064d1c
test eax, eax
jne 0x106dba2
mov ecx, edi
call fcn.01064d2e
test eax, eax
jne 0x106dba2
mov ecx, edi
call fcn.01064d40
test eax, eax
jne 0x106dba2
inc eax
cmp dword [edi + 0xc], eax
jbe 0x106db97
mov ecx, dword [ebp + 0x74]
mov edx, dword [ebp + 0x68]
cmp ecx, dword [edx + 0xc]
jne 0x106dcb8
mov ecx, dword [ebp + 0x68]
mov ecx, dword [ecx + 0xc]
jmp 0x106dcb2
mov edx, dword [ebp + 0x68]
cmp dword [edx + 0x40], 0
je 0x106dc9c
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + eax*4 - 0x20]
cmp ecx, dword [edx + 0xc]
mov dword [ebp + 0x34], ecx
je 0x106dc9c
mov ecx, dword [edi + 0xc]
or dword [ebp + 0x44], 0xffffffff
or dword [ebp + 0x6c], 0xffffffff
and dword [ebp + 0x64], 0
test ecx, ecx
mov dword [ebp + 0x50], ecx
jbe 0x106dc9c
mov ecx, dword [ebp + 0x60]
lea eax, [ecx + eax*4]
mov ecx, dword [edi + 0x10]
mov dword [ebp + 0x40], eax
mov eax, dword [eax]
mov dword [ebp + 0x30], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp + 0x48], ecx
mov ecx, dword [ebp + 0x48]
mov ecx, dword [ecx]
cmp dword [ebp + 0x30], ecx
jne 0x106dc03
mov edx, dword [ebp + 0x64]
mov dword [ebp + 0x44], edx
mov ecx, dword [eax + ecx*4]
mov edx, dword [ebp + 0x34]
cmp edx, dword [ecx + 0xc]
jne 0x106dc14
mov ecx, dword [ebp + 0x64]
mov dword [ebp + 0x6c], ecx
inc dword [ebp + 0x64]
mov ecx, dword [ebp + 0x64]
add dword [ebp + 0x48], 4
cmp ecx, dword [ebp + 0x50]
jb 0x106dbf3
mov edx, dword [ebp + 0x44]
cmp edx, 0xffffffff
je 0x106dc9c
mov eax, dword [ebp + 0x6c]
cmp eax, 0xffffffff
je 0x106dc9c
mov ecx, eax
mov eax, dword [edi + 8]
mov edx, dword [eax + edx*4]
shl ecx, 2
cmp edx, dword [eax + ecx]
mov dword [ebp + 0x30], ecx
jne 0x106dc9c
mov edx, dword [ebp + 0x50]
lea ecx, [edx + edx]
cmp dword [edi + 4], ecx
mov dword [ebp + 0x34], ecx
jb 0x106dc6c
mov edi, dword [ebp + 0x44]
mov ecx, dword [ebp + 0x6c]
add edi, edx
mov edi, dword [eax + edi*4]
add ecx, edx
cmp edi, dword [eax + ecx*4]
jne 0x106dc99
mov ecx, dword [ebp + 0x34]
mov edi, dword [ebp + 0x3c]
lea edx, [edx + edx*2]
cmp dword [edi + 4], edx
jb 0x106dc89
mov edi, dword [ebp + 0x44]
mov edx, dword [ebp + 0x6c]
add edi, ecx
add edx, ecx
mov ecx, dword [eax + edi*4]
cmp ecx, dword [eax + edx*4]
jne 0x106dc99
mov edi, dword [ebp + 0x3c]
mov eax, dword [edi + 0x10]
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + eax]
mov ecx, dword [ebp + 0x40]
mov dword [ecx], eax
jmp 0x106dc9c
mov edi, dword [ebp + 0x3c]
push dword [edi]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x20]
test eax, eax
je 0x106dcbb
mov eax, dword [ebp + 0x68]
mov ecx, dword [eax + 0xc]
xor eax, eax
inc eax
cmp dword [ebp + ecx*4 - 0x10], eax
jbe 0x106dcbb
mov dword [ebp + 0x70], eax
inc dword [ebp + 0x74]
mov eax, dword [ebp + 0x74]
cmp eax, dword [ebp + 0x58]
jb 0x106db0f
mov eax, dword [ebp + 0x58]
cmp dword [ebp + 0x74], eax
jae 0x106dcd9
mov dword [ebp + 0x70], 1
cmp dword [ebp + 0x70], 0
jne 0x106dd44
mov ecx, esi
call fcn.01064cb0
test eax, eax
jne 0x106dd08
mov ecx, dword [ebp + eax*4 - 0x10]
cmp ecx, dword [ebp + 0x58]
je 0x106dcfb
inc eax
cmp eax, 4
jb 0x106dcea
jmp 0x106dd02
mov dword [ebp + 0x70], 1
cmp dword [ebp + 0x70], 0
jne 0x106dd44
mov eax, dword [ebp + 0x60]
mov eax, dword [eax]
mov ecx, dword [ebx + 0x14]
mov eax, dword [ecx + eax*4]
mov eax, dword [eax + 8]
mov ecx, dword [ebp + 0x38]
mov edx, dword [ebp + 0x4c]
cmp edx, dword [ecx + eax*4]
je 0x106dd52
xor ecx, ecx
xor eax, eax
cmp dword [esi + 0xc], ecx
jbe 0x106dd52
cmp dword [ebp + eax*4 + 0x10], ecx
je 0x106dd38
inc eax
cmp eax, dword [esi + 0xc]
jb 0x106dd2a
jmp 0x106dd3f
mov dword [ebp + 0x70], 1
cmp dword [ebp + 0x70], ecx
je 0x106dd52
xor eax, eax
lea edi, [ebp + 0x10]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
jmp 0x106e0c8
xor eax, eax
cmp dword [ebp + 0x58], eax
mov dword [ebp + 0x74], eax
jbe 0x106de10
jmp 0x106dd65
mov eax, dword [ebp + 0x74]
cmp dword [ebp + eax*4 + 0x10], 0
je 0x106dd7b
mov ecx, dword [esi + 0x10]
mov ecx, dword [ecx + eax*4]
mov dword [ebp + eax*4 - 0x30], ecx
jmp 0x106de00
mov ecx, dword [ebp + 0x74]
mov eax, dword [ebp + 0x60]
mov edx, dword [ebx + 0x14]
mov eax, dword [eax + ecx*4]
mov edi, dword [edx + eax*4]
mov edx, dword [edi + 0xc]
cmp dword [ebp + edx*4 - 0x10], 1
jne 0x106dda1
mov dword [ebp + ecx*4 - 0x30], eax
mov eax, dword [ebp + ecx*4 - 0x20]
mov dword [edi + 0xc], eax
jmp 0x106de03
mov eax, dword [ebp + 0x74]
fldz
push ecx
push ecx
fstp qword [esp]
push dword [ebp + eax*4 - 0x20]
mov ecx, ebx
push dword [edi + 8]
push dword [edi]
call fcn.010646dc
cmp eax, 0xffffffff
mov ecx, dword [ebp + 0x74]
mov dword [ebp + ecx*4 - 0x30], eax
je 0x106e1a1
mov ecx, dword [ebx + 0x14]
shl eax, 2
mov ecx, dword [eax + ecx]
push edi
mov dword [ebp + 0x40], eax
call fcn.01064f09
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebp + 0x40]
mov eax, dword [ecx + eax]
mov ecx, dword [edi + 0x18]
mov dword [eax + 0x18], ecx
mov eax, dword [edi + 8]
mov ecx, dword [ebp + 0x38]
lea eax, [ecx + eax*4]
inc dword [eax]
mov eax, dword [edi + 0xc]
lea eax, [ebp + eax*4 - 0x10]
dec dword [eax]
mov ecx, dword [ebp + 0x74]
inc ecx
cmp ecx, dword [ebp + 0x58]
mov dword [ebp + 0x74], ecx
jb 0x106dd62
and dword [ebp + 0x6c], 0
cmp dword [ebp + 0x58], 0
jbe 0x106e09e
mov ecx, dword [ebp + 0x60]
mov eax, dword [ebp + 0x6c]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebx + 0x14]
mov eax, dword [ecx + eax*4]
cmp dword [eax + 0x40], 0
mov dword [ebp + 0x44], eax
jne 0x106e08f
and dword [ebp + 0x64], 0
mov edx, dword [ebp + 0x6c]
jmp 0x106de77
mov eax, dword [ebp + 0x60]
mov eax, dword [eax + edx*4]
mov ecx, dword [ebx + 0x14]
mov edi, dword [ebp + 0x44]
mov ecx, dword [ecx + eax*4]
mov edi, dword [edi + 0x2c]
cmp edi, dword [ecx + 0x2c]
jne 0x106de76
mov edi, dword [ebp + 0x64]
shl edi, 2
inc dword [ebp + 0x64]
mov dword [ebp + edi - 0x40], eax
mov eax, dword [ebp + edx*4 - 0x30]
mov dword [ebp + edi - 0x50], eax
mov dword [ecx + 0x40], 1
inc edx
cmp edx, dword [ebp + 0x58]
jb 0x106de43
mov eax, dword [ebp + 0x44]
mov ecx, dword [ebx + 0x18]
mov eax, dword [eax + 0x2c]
mov edi, dword [ecx + eax*4]
mov ecx, edi
call fcn.01064d1c
test eax, eax
jne 0x106deee
mov ecx, edi
call fcn.01064d2e
test eax, eax
jne 0x106deee
mov ecx, edi
call fcn.01064d40
test eax, eax
jne 0x106deee
and dword [ebp + 0x68], eax
cmp dword [edi + 0xc], eax
jbe 0x106e08f
mov eax, dword [edi + 0x10]
mov edx, dword [ebp + 0x68]
lea eax, [eax + edx*4]
mov dword [ebp + 0x40], eax
mov eax, dword [eax]
xor ecx, ecx
mov edx, dword [ebp + 0x60]
cmp eax, dword [edx + ecx*4]
je 0x106ded5
inc ecx
cmp ecx, dword [ebp + 0x58]
jb 0x106dec5
jmp 0x106dede
mov eax, dword [ebp + ecx*4 - 0x30]
mov ecx, dword [ebp + 0x40]
mov dword [ecx], eax
inc dword [ebp + 0x68]
mov eax, dword [ebp + 0x68]
cmp eax, dword [edi + 0xc]
jb 0x106deb5
jmp 0x106e08f
and dword [ebp + 0x74], 0
cmp dword [ebp + 0x64], 0
jbe 0x106df36
mov edx, dword [edi + 0xc]
and dword [ebp + 0x68], 0
test edx, edx
jbe 0x106df2b
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + eax*4 - 0x40]
mov eax, dword [edi + 0x10]
cmp dword [eax], ecx
je 0x106df21
inc dword [ebp + 0x68]
mov edx, dword [edi + 0xc]
add eax, 4
cmp dword [ebp + 0x68], edx
jb 0x106df0d
jmp 0x106df2b
mov eax, dword [ebp + 0x68]
mov ecx, dword [ebp + 0x74]
mov dword [ebp + ecx*4], eax
inc dword [ebp + 0x74]
mov eax, dword [ebp + 0x74]
cmp eax, dword [ebp + 0x64]
jb 0x106defb
push 0x38
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
test eax, eax
pop ecx
je 0x106df4e
mov ecx, eax
call fcn.01064916
mov dword [ebp + 0x70], eax
jmp 0x106df52
and dword [ebp + 0x70], 0
cmp dword [ebp + 0x70], 0
je 0x106e1a1
mov ecx, edi
call fcn.01064d1c
test eax, eax
je 0x106df6c
mov eax, dword [ebp + 0x64]
jmp 0x106df81
mov ecx, edi
call fcn.01064d2e
test eax, eax
mov eax, dword [ebp + 0x64]
je 0x106df7e
add eax, eax
jmp 0x106df81
lea eax, [eax + eax*2]
mov ecx, dword [ebp + 0x70]
push 0
push dword [ebp + 0x64]
push eax
mov eax, dword [edi]
xor eax, dword [ebp + 0x64]
and eax, 0xffffff
xor eax, dword [edi]
push eax
call fcn.0106496d
test eax, eax
mov dword [ebp + 0x68], eax
jl 0x106e1ad
mov ecx, dword [ebp + 0x70]
push edi
call fcn.01064c4f
test eax, eax
mov dword [ebp + 0x68], eax
jl 0x106e1ad
mov eax, dword [ebp + 0x64]
and dword [ebp + 0x74], 0
test eax, eax
jbe 0x106e069
lea ecx, [eax + eax*2]
mov dword [ebp + 0x40], ecx
lea ecx, [eax + eax]
shl ecx, 2
shl eax, 2
mov dword [ebp + 0x3c], ecx
mov dword [ebp + 0x4c], eax
mov eax, dword [ebp + 0x70]
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp + 0x74]
mov edx, dword [ebp + eax*4 - 0x50]
mov dword [ecx + eax*4], edx
mov eax, dword [ebp + eax*4]
mov ecx, dword [edi + 8]
mov eax, dword [ecx + eax*4]
mov edx, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x74]
mov edx, dword [edx + 8]
mov dword [edx + ecx*4], eax
mov eax, dword [ebp + 0x64]
mov ecx, dword [ebp + 0x70]
add eax, eax
cmp dword [ecx + 4], eax
jb 0x106e02b
mov eax, dword [edi + 0xc]
mov edx, dword [ebp + 0x74]
add eax, dword [ebp + edx*4]
mov edx, dword [edi + 8]
mov eax, dword [edx + eax*4]
mov ecx, dword [ecx + 8]
mov edx, dword [ebp + 0x4c]
mov dword [edx + ecx], eax
mov eax, dword [ebp + 0x40]
mov ecx, dword [ebp + 0x70]
cmp dword [ecx + 4], eax
jb 0x106e052
mov edx, dword [edi + 0xc]
mov eax, dword [ebp + 0x74]
mov eax, dword [ebp + eax*4]
mov ecx, dword [ecx + 8]
lea eax, [eax + edx*2]
mov edx, dword [edi + 8]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp + 0x3c]
mov dword [edx + ecx], eax
inc dword [ebp + 0x74]
mov eax, dword [ebp + 0x74]
add dword [ebp + 0x4c], 4
add dword [ebp + 0x3c], 4
cmp eax, dword [ebp + 0x64]
jb 0x106dfdf
mov eax, dword [ebp + 0x44]
mov eax, dword [eax + 0x2c]
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + eax*4]
test ecx, ecx
je 0x106e080
push 1
call fcn.01064393
mov eax, dword [ebp + 0x44]
mov eax, dword [eax + 0x2c]
mov ecx, dword [ebx + 0x18]
mov edx, dword [ebp + 0x70]
mov dword [ecx + eax*4], edx
inc dword [ebp + 0x6c]
mov eax, dword [ebp + 0x6c]
cmp eax, dword [ebp + 0x58]
jb 0x106de1e
xor eax, eax
cmp dword [ebp + 0x58], eax
jbe 0x106e0c8
mov ecx, dword [ebp + eax*4 - 0x30]
mov edx, dword [ebp + 0x60]
mov dword [edx + eax*4], ecx
mov ecx, dword [ebp + 0x60]
mov ecx, dword [ecx + eax*4]
mov edx, dword [ebx + 0x14]
mov ecx, dword [edx + ecx*4]
inc eax
cmp eax, dword [ebp + 0x58]
mov dword [ecx + 0x40], 1
jb 0x106e0a5
inc dword [ebp + 0x54]
lea eax, [ebp + 0x60]
push eax
push dword [ebp + 0x54]
mov ecx, esi
call fcn.01064c69
test eax, eax
mov dword [ebp + 0x58], eax
jne 0x106daf2
mov ecx, esi
call fcn.01064cb0
test eax, eax
je 0x106e192
xor edx, edx
xor ecx, ecx
cmp dword [esi + 0xc], edx
mov dword [ebp + 0x54], edx
jbe 0x106e174
cmp dword [ebp + edx*4 + 0x10], 0
jne 0x106e11e
mov eax, dword [esi + 0x10]
mov edx, dword [eax + edx*4]
mov dword [eax + ecx*4], edx
mov eax, dword [esi + 8]
mov edx, dword [ebp + 0x54]
mov edx, dword [eax + edx*4]
mov dword [eax + ecx*4], edx
inc ecx
jmp 0x106e168
mov edi, dword [esi + 0x10]
mov edx, dword [ebx + 0x14]
mov eax, ecx
shl eax, 2
mov edi, dword [eax + edi]
mov edi, dword [edx + edi*4]
cmp dword [edi + 0x44], 0
mov dword [ebp + 0x40], edi
jne 0x106e168
mov edi, dword [esi + 8]
mov edi, dword [eax + edi]
mov edx, dword [edx + edi*4]
mov edx, dword [edx + 0x44]
mov edi, dword [ebp + 0x40]
mov dword [edi + 0x44], edx
mov edi, dword [esi + 8]
mov edi, dword [eax + edi]
mov edx, dword [ebx + 0x14]
mov edx, dword [edx + edi*4]
mov edi, dword [esi + 0x10]
mov edi, dword [eax + edi]
mov eax, dword [ebx + 0x14]
mov eax, dword [eax + edi*4]
mov edx, dword [edx + 0x48]
mov dword [eax + 0x48], edx
mov edx, dword [ebp + 0x54]
inc edx
cmp edx, dword [esi + 0xc]
mov dword [ebp + 0x54], edx
jb 0x106e0ff
mov edx, ecx
and edx, 0xffffff
mov eax, ecx
or edx, 0x10000000
neg eax
sbb eax, eax
and eax, edx
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 0xc], ecx
cmp dword [ebp + 0x5c], 0
ja 0x106d86d
jmp 0x106d855
mov dword [ebp + 0x68], 0x8007000e
jmp 0x106d859
mov ecx, dword [ebp + 0x70]
push 1
call fcn.01064393
jmp 0x106d859