Function at 0x10067a40
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x90
mov eax, 1
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
cmp dword [edi + 8], 0
je 0x1006a8db
push edi
call fcn.10066310
add esp, 4
cmp dword [ebp + 0x10], 0
je 0x10067b74
mov eax, dword [edi + 0xc]
test eax, 0x1000
je 0x10067ab7
mov esi, dword [edi + 0x2bc]
and eax, 0xffffefff
push edi
mov ecx, esi
mov dword [edi + 0xc], eax
call dword [0x101b0250]
call esi
add esp, 4
test eax, eax
jne 0x10067ab7
push str.Error_post_encoding_before_directory_write
push str.TIFFWriteDirectorySec
push edi
call fcn.1006c5e0
add esp, 0xc
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [edi + 0x2d8]
mov ecx, esi
push edi
call dword [0x101b0250]
call esi
add esp, 4
cmp dword [edi + 0x32c], 0
jl 0x10067af9
jg 0x10067adf
cmp dword [edi + 0x328], 0
jbe 0x10067af9
test byte [edi + 0xc], 0x40
je 0x10067af9
push edi
call fcn.10086450
add esp, 4
test eax, eax
jne 0x10067af9
push str.Error_flushing_data_before_directory_write
jmp 0x10067aa0
test dword [edi + 0xc], 0x200
je 0x10067b70
mov eax, dword [edi + 0x300]
test eax, eax
je 0x10067b70
push eax
push edi
call fcn.1007fc60
add esp, 8
mov dword [edi + 0x300], 0
mov dword [edi + 0x328], 0
mov dword [edi + 0x32c], 0
mov dword [edi + 0x308], 0
mov dword [edi + 0x30c], 0
mov dword [edi + 0x310], 0
mov dword [edi + 0x314], 0
mov dword [edi + 0x318], 0
mov dword [edi + 0x31c], 0
and dword [edi + 0xc], 0xffffffaf
test byte [edi + 0x38], 0x80
je 0x10067b98
mov eax, 0x80b2
cmp word [edi + 0x68], ax
jne 0x10067b98
push str.Creating_TIFF_with_legacy_Deflate_codec_identifier__COMPRESSION_ADOBE_DEFLATE_is_more_widely_supported
push str.TIFFWriteDirectorySec
push edi
call fcn.10085cb0
add esp, 0xc
mov eax, dword [ebp + 0xc]
lea esi, [edi + 0xc]
xor ecx, ecx
xorps xmm0, xmm0
mov dword [ebp - 8], ecx
mov dword [ebp - 0x2c], ecx
movsd qword [ebp - 0x78], xmm0
nop
xor ebx, ebx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], ebx
test eax, eax
je 0x100696ae
test byte [edi + 0x38], 2
je 0x10067cc4
mov edx, dword [edi + 0x48]
test ecx, ecx
jne 0x10067be2
mov ebx, 1
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10067cc4
mov eax, dword [esi]
and eax, 0x80
cmp edx, 0xffff
ja 0x10067c14
mov word [ebp - 0x38], dx
test eax, eax
je 0x10067c08
lea eax, [ebp - 0x38]
push eax
call fcn.10085180
mov ecx, dword [ebp - 8]
add esp, 4
lea eax, [ebp - 0x38]
push eax
push 2
push 1
push 3
jmp 0x10067c34
mov dword [ebp - 0xc], edx
test eax, eax
je 0x10067c2a
lea eax, [ebp - 0xc]
push eax
call fcn.10085120
mov ecx, dword [ebp - 8]
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
push 1
push 4
push 0x100
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a651
mov eax, dword [esi]
mov ecx, dword [edi + 0x4c]
and eax, 0x80
cmp ecx, 0xffff
ja 0x10067c81
mov word [ebp - 0x3c], cx
test eax, eax
je 0x10067c75
lea eax, [ebp - 0x3c]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x3c]
push eax
push 2
push 1
push 3
jmp 0x10067c9e
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x10067c94
lea eax, [ebp - 0xc]
push eax
call fcn.10085120
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
push 1
push 4
mov esi, dword [ebp - 8]
lea eax, [ebp - 4]
push 0x101
push esi
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a651
mov ebx, dword [ebp - 4]
mov ecx, esi
mov esi, dword [ebp - 0x18]
test byte [edi + 0x38], 4
je 0x10067dbd
mov edx, dword [edi + 0x54]
test ecx, ecx
jne 0x10067ce0
add ebx, 2
mov dword [ebp - 4], ebx
jmp 0x10067dbd
mov eax, dword [esi]
and eax, 0x80
cmp edx, 0xffff
ja 0x10067d12
mov word [ebp - 0x40], dx
test eax, eax
je 0x10067d06
lea eax, [ebp - 0x40]
push eax
call fcn.10085180
mov ecx, dword [ebp - 8]
add esp, 4
lea eax, [ebp - 0x40]
push eax
push 2
push 1
push 3
jmp 0x10067d32
mov dword [ebp - 0xc], edx
test eax, eax
je 0x10067d28
lea eax, [ebp - 0xc]
push eax
call fcn.10085120
mov ecx, dword [ebp - 8]
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
push 1
push 4
push 0x142
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a651
mov eax, dword [esi]
mov ecx, dword [edi + 0x58]
and eax, 0x80
cmp ecx, 0xffff
ja 0x10067d7f
mov word [ebp - 0x44], cx
test eax, eax
je 0x10067d73
lea eax, [ebp - 0x44]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x44]
push eax
push 2
push 1
push 3
jmp 0x10067d9c
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x10067d92
lea eax, [ebp - 0xc]
push eax
call fcn.10085120
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
push 1
push 4
mov esi, dword [ebp - 8]
lea eax, [ebp - 4]
push 0x143
push esi
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a651
mov ebx, dword [ebp - 4]
test byte [edi + 0x38], 8
mov esi, dword [ebp - 8]
je 0x10067edd
movss xmm0, dword [edi + 0x84]
cvtps2pd xmm0, xmm0
test esi, esi
jne 0x10067de4
add ebx, 2
mov dword [ebp - 4], ebx
jmp 0x10067edd
movsd xmm1, qword [ebp - 0x78]
comisd xmm1, xmm0
ja 0x1006a24d
ucomisd xmm0, xmm0
lahf
test ah, 0x44
jp 0x1006a227
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x60]
push eax
sub esp, 8
movsd qword [esp], xmm0
call fcn.10066b30
mov ebx, dword [ebp - 0x18]
add esp, 0x10
test byte [ebx], 0x80
je 0x10067e36
lea eax, [ebp - 0x60]
push eax
call fcn.10085120
lea eax, [ebp - 0x5c]
push eax
call fcn.10085120
add esp, 8
lea eax, [ebp - 0x60]
push eax
push 8
push 1
push 5
push 0x11a
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
movss xmm0, dword [edi + 0x88]
movsd xmm1, qword [ebp - 0x78]
cvtps2pd xmm0, xmm0
comisd xmm1, xmm0
ja 0x1006a24d
ucomisd xmm0, xmm0
lahf
test ah, 0x44
jp 0x1006a227
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x68]
push eax
sub esp, 8
movsd qword [esp], xmm0
call fcn.10066b30
add esp, 0x10
test byte [ebx], 0x80
je 0x10067eb5
lea eax, [ebp - 0x68]
push eax
call fcn.10085120
lea eax, [ebp - 0x64]
push eax
call fcn.10085120
add esp, 8
lea eax, [ebp - 0x68]
push eax
push 8
push 1
push 5
push 0x11b
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test byte [edi + 0x38], 0x10
je 0x10067ffa
movss xmm0, dword [edi + 0x90]
cvtps2pd xmm0, xmm0
test esi, esi
jne 0x10067f01
add ebx, 2
mov dword [ebp - 4], ebx
jmp 0x10067ffa
movsd xmm1, qword [ebp - 0x78]
comisd xmm1, xmm0
ja 0x1006a24d
ucomisd xmm0, xmm0
lahf
test ah, 0x44
jp 0x1006a227
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x70]
push eax
sub esp, 8
movsd qword [esp], xmm0
call fcn.10066b30
mov ebx, dword [ebp - 0x18]
add esp, 0x10
test byte [ebx], 0x80
je 0x10067f53
lea eax, [ebp - 0x70]
push eax
call fcn.10085120
lea eax, [ebp - 0x6c]
push eax
call fcn.10085120
add esp, 8
lea eax, [ebp - 0x70]
push eax
push 8
push 1
push 5
push 0x11e
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
movss xmm0, dword [edi + 0x94]
movsd xmm1, qword [ebp - 0x78]
cvtps2pd xmm0, xmm0
comisd xmm1, xmm0
ja 0x1006a24d
ucomisd xmm0, xmm0
lahf
test ah, 0x44
jp 0x1006a227
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x80]
push eax
sub esp, 8
movsd qword [esp], xmm0
call fcn.10066b30
add esp, 0x10
test byte [ebx], 0x80
je 0x10067fd2
lea eax, [ebp - 0x80]
push eax
call fcn.10085120
lea eax, [ebp - 0x7c]
push eax
call fcn.10085120
add esp, 8
lea eax, [ebp - 0x80]
push eax
push 8
push 1
push 5
push 0x11f
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test byte [edi + 0x38], 0x20
je 0x1006804c
test esi, esi
jne 0x1006800a
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006804c
mov eax, dword [edi + 0x60]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x10068024
lea eax, [ebp - 0xc]
push eax
call fcn.10085120
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
push 1
push 4
push 0xfe
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test byte [edi + 0x38], 0x40
je 0x10068108
movzx eax, word [edi + 0x64]
mov dword [ebp - 0x1c], eax
test esi, esi
jne 0x1006806a
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068108
movzx eax, word [edi + 0x72]
cdq
shld edx, eax, 1
push edx
add eax, eax
push eax
push edi
call fcn.1007fc70
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x1006a273
movzx eax, word [edi + 0x72]
xor edx, edx
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0xc], esi
xor esi, esi
cmp si, ax
mov esi, dword [ebp - 8]
jae 0x100680b9
mov esi, dword [ebp - 0x1c]
mov word [ecx], si
lea ecx, [ecx + 2]
movzx eax, word [edi + 0x72]
inc edx
cmp dx, ax
jb 0x100680a4
mov esi, dword [ebp - 8]
jmp 0x100680bc
mov eax, dword [ebp - 0xc]
movzx ecx, ax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
test byte [eax], 0x80
je 0x100680d9
push 0
push ecx
push ebx
call fcn.10085080
mov ecx, dword [ebp - 0x1c]
add esp, 0xc
push ebx
lea eax, [ecx + ecx]
push eax
push ecx
push 3
push 0x102
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
push ebx
push edi
mov esi, eax
call fcn.1007fc60
add esp, 0x28
test esi, esi
je 0x1006a651
mov ebx, dword [ebp - 4]
test byte [edi + 0x38], 0x80
mov esi, dword [ebp - 8]
je 0x1006815f
test esi, esi
jne 0x1006811b
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006815f
mov ax, word [edi + 0x68]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x10068137
lea eax, [ebp - 0x10]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x10]
push eax
push 2
push 1
push 3
push 0x103
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x100
je 0x100681b6
test esi, esi
jne 0x10068172
inc ebx
mov dword [ebp - 4], ebx
jmp 0x100681b6
mov ax, word [edi + 0x6a]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x1006818e
lea eax, [ebp - 0x10]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x10]
push eax
push 2
push 1
push 3
push 0x106
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x200
je 0x1006820d
test esi, esi
jne 0x100681c9
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006820d
mov ax, word [edi + 0x6c]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x100681e5
lea eax, [ebp - 0x10]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x10]
push eax
push 2
push 1
push 3
push 0x107
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x400
je 0x10068264
test esi, esi
jne 0x10068220
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068264
mov ax, word [edi + 0x6e]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x1006823c
lea eax, [ebp - 0x10]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x10]
push eax
push 2
push 1
push 3
push 0x10a
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x8000
je 0x100682bb
test esi, esi
jne 0x10068277
inc ebx
mov dword [ebp - 4], ebx
jmp 0x100682bb
mov ax, word [edi + 0x70]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x10068293
lea eax, [ebp - 0x10]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x10]
push eax
push 2
push 1
push 3
push 0x112
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x10000
je 0x10068312
test esi, esi
jne 0x100682ce
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068312
mov ax, word [edi + 0x72]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x100682ea
lea eax, [ebp - 0x10]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x10]
push eax
push 2
push 1
push 3
push 0x115
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x20000
je 0x10068395
mov ecx, dword [edi + 0x74]
test esi, esi
jne 0x10068328
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068395
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
and eax, 0x80
cmp ecx, 0xffff
ja 0x1006835a
mov word [ebp - 0x48], cx
test eax, eax
je 0x1006834e
lea eax, [ebp - 0x48]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x48]
push eax
push 2
push 1
push 3
jmp 0x10068377
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x1006836d
lea eax, [ebp - 0xc]
push eax
call fcn.10085120
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
push 1
push 4
push 0x116
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x40000
je 0x10068454
movzx eax, word [edi + 0x78]
mov dword [ebp - 0x1c], eax
test esi, esi
jne 0x100683b6
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068454
movzx eax, word [edi + 0x72]
cdq
shld edx, eax, 1
push edx
add eax, eax
push eax
push edi
call fcn.1007fc70
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x1006a273
movzx eax, word [edi + 0x72]
xor edx, edx
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0xc], esi
xor esi, esi
cmp si, ax
mov esi, dword [ebp - 8]
jae 0x10068405
mov esi, dword [ebp - 0x1c]
mov word [ecx], si
lea ecx, [ecx + 2]
movzx eax, word [edi + 0x72]
inc edx
cmp dx, ax
jb 0x100683f0
mov esi, dword [ebp - 8]
jmp 0x10068408
mov eax, dword [ebp - 0xc]
movzx ecx, ax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
test byte [eax], 0x80
je 0x10068425
push 0
push ecx
push ebx
call fcn.10085080
mov ecx, dword [ebp - 0x1c]
add esp, 0xc
push ebx
lea eax, [ecx + ecx]
push eax
push ecx
push 3
push 0x118
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
push ebx
push edi
mov esi, eax
call fcn.1007fc60
add esp, 0x28
test esi, esi
je 0x1006a651
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x80000
mov esi, dword [ebp - 8]
je 0x10068519
movzx eax, word [edi + 0x7a]
mov dword [ebp - 0x1c], eax
test esi, esi
jne 0x10068478
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068519
movzx eax, word [edi + 0x72]
cdq
shld edx, eax, 1
push edx
add eax, eax
push eax
push edi
call fcn.1007fc70
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x1006a273
movzx eax, word [edi + 0x72]
xor edx, edx
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0xc], esi
xor esi, esi
cmp si, ax
mov esi, dword [ebp - 8]
jae 0x100684c7
mov esi, dword [ebp - 0x1c]
mov word [ecx], si
lea ecx, [ecx + 2]
movzx eax, word [edi + 0x72]
inc edx
cmp dx, ax
jb 0x100684b2
mov esi, dword [ebp - 8]
jmp 0x100684ca
mov eax, dword [ebp - 0xc]
movzx ecx, ax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
test byte [eax], 0x80
je 0x100684e7
push 0
push ecx
push ebx
call fcn.10085080
mov ecx, dword [ebp - 0x1c]
add esp, 0xc
push ebx
lea eax, [ecx + ecx]
push eax
push ecx
push 3
push 0x119
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
push ebx
push edi
mov esi, eax
call fcn.1007fc60
add esp, 0x28
test esi, esi
mov esi, dword [ebp - 8]
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x100000
je 0x10068573
test esi, esi
jne 0x1006852c
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068573
mov ax, word [edi + 0x8e]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x1006854b
lea eax, [ebp - 0x10]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x10]
push eax
push 2
push 1
push 3
push 0x11c
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x400000
je 0x100685cd
test esi, esi
jne 0x10068586
inc ebx
mov dword [ebp - 4], ebx
jmp 0x100685cd
mov ax, word [edi + 0x8c]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x100685a5
lea eax, [ebp - 0x10]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x10]
push eax
push 2
push 1
push 3
push 0x128
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x800000
je 0x10068626
lea eax, [edi + 0x98]
test esi, esi
jne 0x100685e6
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068626
mov ecx, dword [ebp - 0x18]
test byte [ecx], 0x80
je 0x10068601
push 0
push 2
push eax
call fcn.10085080
add esp, 0xc
lea eax, [edi + 0x98]
push eax
push 4
push 2
push 3
push 0x129
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x1000000
je 0x1006897e
mov eax, dword [ebp - 0x18]
mov ecx, dword [edi + 0xb8]
mov dword [ebp - 0x10], ecx
mov edx, dword [eax]
mov eax, dword [edi + 0xc0]
mov dword [ebp - 0x20], eax
test edx, 0x400
jne 0x100687d3
test esi, esi
jne 0x10068663
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006897e
cmp byte [edi + 0x13c], 0
je 0x1006867e
push 0
push 0
push 0
push 0
push 0x117
jmp 0x100687f6
mov ebx, dword [ebp - 0x10]
test edx, 0x80000
je 0x100686c6
cmp ebx, 1
jbe 0x100686aa
push edi
call fcn.10084c20
push 0
push 0xffffffffffffffff
push edx
push eax
push edi
call fcn.1006c230
add esp, 0x18
test eax, eax
je 0x100686cf
mov eax, dword [ebp - 0x20]
push eax
push ebx
push 0x117
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006aa90
add esp, 0x18
mov ebx, eax
jmp 0x10068973
cmp ebx, 1
jbe 0x10068761
push edi
call fcn.10084c20
push 0
push 0xffff
push edx
push eax
push edi
call fcn.1006c230
add esp, 0x18
test eax, eax
jne 0x10068761
lea eax, [ebx + ebx]
push 0
push eax
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0x14], eax
test eax, eax
je 0x1006a2f7
mov ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x20]
nop dword [eax]
cmp dword [eax + 4], 0
mov esi, dword [eax]
mov dword [ebp - 0xc], esi
mov esi, dword [ebp - 8]
ja 0x1006a299
jb 0x10068734
cmp dword [ebp - 0xc], 0xffff
mov edi, dword [ebp + 8]
ja 0x1006a299
mov ebx, dword [ebp - 0xc]
inc edx
mov word [ecx], bx
add eax, 8
mov ebx, dword [ebp - 0x10]
add ecx, 2
cmp edx, ebx
jb 0x10068710
push dword [ebp - 0x14]
lea eax, [ebp - 4]
push ebx
push 0x117
push esi
push eax
push edi
call fcn.1006ab90
jmp 0x10068960
lea eax, [ebx*4]
push 0
push eax
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0x14], eax
test eax, eax
je 0x1006a2f7
xor edx, edx
mov ecx, eax
test ebx, ebx
je 0x100687c7
mov eax, dword [ebp - 0x20]
nop word [eax + eax]
cmp dword [eax + 4], 0
mov esi, dword [eax]
mov dword [ebp - 0xc], esi
mov esi, dword [ebp - 8]
ja 0x1006a2c8
jb 0x100687b1
cmp dword [ebp - 0xc], 0xffffffff
mov edi, dword [ebp + 8]
ja 0x1006a2c8
mov ebx, dword [ebp - 0xc]
inc edx
mov dword [ecx], ebx
add eax, 8
mov ebx, dword [ebp - 0x10]
add ecx, 4
cmp edx, ebx
jb 0x10068790
mov eax, dword [ebp - 0x14]
push eax
push ebx
push 0x117
jmp 0x10068955
test esi, esi
jne 0x100687e0
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006897e
cmp byte [edi + 0x13c], 0
je 0x1006880b
push 0
push 0
push 0
push 0
push 0x145
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
mov ebx, eax
jmp 0x10068973
mov ebx, dword [ebp - 0x10]
test edx, 0x80000
je 0x10068853
cmp ebx, 1
jbe 0x10068837
push edi
call fcn.10085a40
push 0
push 0xffffffffffffffff
push edx
push eax
push edi
call fcn.1006c230
add esp, 0x18
test eax, eax
je 0x1006885c
mov eax, dword [ebp - 0x20]
push eax
push ebx
push 0x145
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006aa90
add esp, 0x18
mov ebx, eax
jmp 0x10068973
cmp ebx, 1
jbe 0x100688ee
push edi
call fcn.10085a40
push 0
push 0xffff
push edx
push eax
push edi
call fcn.1006c230
add esp, 0x18
test eax, eax
jne 0x100688ee
lea eax, [ebx + ebx]
push 0
push eax
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0x14], eax
test eax, eax
je 0x1006a2f7
mov ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x20]
nop dword [eax]
cmp dword [eax + 4], 0
mov esi, dword [eax]
mov dword [ebp - 0xc], esi
mov esi, dword [ebp - 8]
ja 0x1006a299
jb 0x100688c4
cmp dword [ebp - 0xc], 0xffff
mov edi, dword [ebp + 8]
ja 0x1006a299
mov ebx, dword [ebp - 0xc]
inc edx
mov word [ecx], bx
add eax, 8
mov ebx, dword [ebp - 0x10]
add ecx, 2
cmp edx, ebx
jb 0x100688a0
push dword [ebp - 0x14]
lea eax, [ebp - 4]
push ebx
push 0x145
push esi
push eax
push edi
call fcn.1006ab90
jmp 0x10068960
lea eax, [ebx*4]
push 0
push eax
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0x14], eax
test eax, eax
je 0x1006a2f7
xor edx, edx
mov ecx, eax
test ebx, ebx
je 0x1006894e
mov eax, dword [ebp - 0x20]
cmp dword [eax + 4], 0
mov esi, dword [eax]
mov dword [ebp - 0xc], esi
mov esi, dword [ebp - 8]
ja 0x1006a2c8
jb 0x10068938
cmp dword [ebp - 0xc], 0xffffffff
mov edi, dword [ebp + 8]
ja 0x1006a2c8
mov ebx, dword [ebp - 0xc]
inc edx
mov dword [ecx], ebx
add eax, 8
mov ebx, dword [ebp - 0x10]
add ecx, 4
cmp edx, ebx
jb 0x10068917
mov eax, dword [ebp - 0x14]
push eax
push ebx
push 0x145
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ab20
add esp, 0x18
mov ebx, eax
mov eax, edi
push dword [ebp - 0x14]
push eax
call fcn.1007fc60
add esp, 8
test ebx, ebx
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x2000000
je 0x10068b46
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
mov eax, dword [edi + 0xbc]
mov dword [ebp - 0x1c], eax
test edx, 0x400
jne 0x10068a66
test eax, eax
je 0x10068b46
mov ecx, dword [edi + 0xb8]
mov dword [ebp - 0x14], ecx
test esi, esi
jne 0x100689c3
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068b46
cmp byte [edi + 0x13c], 0
je 0x100689eb
push 0
push 0
push 0
push 0
push 0x111
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
mov ebx, eax
jmp 0x10068b38
test edx, 0x80000
je 0x100689ff
push eax
push ecx
push 0x111
jmp 0x10068ab3
lea eax, [ecx*4]
push 0
push eax
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1006a2f7
mov ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x10068a58
mov eax, dword [ebp - 0x1c]
nop dword [eax + eax]
cmp dword [eax + 4], 0
mov ebx, dword [eax]
ja 0x1006a31d
jb 0x10068a47
cmp ebx, 0xffffffff
ja 0x1006a31d
mov dword [ecx], ebx
inc edx
add eax, 8
add ecx, 4
cmp edx, dword [ebp - 0x14]
jb 0x10068a30
mov eax, dword [ebp - 0x14]
push dword [ebp - 0xc]
push eax
push 0x111
jmp 0x10068b22
mov ecx, dword [edi + 0xb8]
mov dword [ebp - 0x14], ecx
test esi, esi
jne 0x10068a7c
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068b46
cmp byte [edi + 0x13c], 0
je 0x10068aa4
push 0
push 0
push 0
push 0
push 0x144
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
mov ebx, eax
jmp 0x10068b38
test edx, 0x80000
je 0x10068ac5
push eax
push ecx
push 0x144
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006aa90
add esp, 0x18
mov ebx, eax
jmp 0x10068b3b
lea eax, [ecx*4]
push 0
push eax
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1006a2f7
mov ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x10068b19
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 4], 0
mov ebx, dword [eax]
ja 0x1006a31d
jb 0x10068b08
cmp ebx, 0xffffffff
ja 0x1006a31d
mov dword [ecx], ebx
inc edx
add eax, 8
add ecx, 4
cmp edx, dword [ebp - 0x14]
jb 0x10068af1
mov eax, dword [ebp - 0x14]
push dword [ebp - 0xc]
push eax
push 0x144
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ab20
push dword [ebp - 0xc]
mov ebx, eax
push edi
call fcn.1007fc60
add esp, 0x20
test ebx, ebx
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x38], 0x4000000
je 0x10068bf6
test esi, esi
jne 0x10068b60
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068bf6
mov cl, byte [edi + 0x64]
mov ebx, 1
shl ebx, cl
push 0
lea eax, [ebx + ebx*2]
add eax, eax
push eax
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0x14], eax
test eax, eax
je 0x1006a34c
push 0
lea esi, [ebx + ebx]
push esi
push dword [edi + 0x9c]
push eax
call fcn.10085f00
mov eax, dword [ebp - 0x14]
push 0
push esi
push dword [edi + 0xa0]
add eax, esi
push eax
call fcn.10085f00
push 0
push esi
mov esi, dword [ebp - 0x14]
push dword [edi + 0xa4]
lea eax, [esi + ebx*4]
push eax
call fcn.10085f00
push esi
mov esi, dword [ebp - 8]
lea eax, [ebx + ebx*2]
push eax
push 0x140
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ab90
add esp, 0x48
mov esi, eax
mov eax, dword [ebp - 0x14]
push eax
push edi
call fcn.1007fc60
add esp, 8
test esi, esi
je 0x1006a651
mov ebx, dword [ebp - 4]
cmp dword [edi + 0x38], 0
jge 0x10068c82
cmp word [edi + 0xac], 0
je 0x10068c82
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0x152
push edi
call fcn.100582b0
movzx ecx, word [ebp - 0x4c]
add esp, 0x10
mov esi, dword [ebp - 8]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1c], ecx
test esi, esi
jne 0x10068c40
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068c85
mov edx, dword [ebp - 0x18]
test byte [edx], 0x80
je 0x10068c5a
push 0
push ecx
push eax
call fcn.10085080
mov ecx, dword [ebp - 0x1c]
add esp, 0xc
mov eax, dword [ebp - 0xc]
push eax
lea eax, [ecx + ecx]
push eax
push ecx
push 3
push 0x152
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
jmp 0x10068c85
mov esi, dword [ebp - 8]
test byte [edi + 0x3c], 1
je 0x10068d44
movzx eax, word [edi + 0x66]
mov dword [ebp - 0x1c], eax
test esi, esi
jne 0x10068ca3
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068d44
movzx eax, word [edi + 0x72]
cdq
shld edx, eax, 1
push edx
add eax, eax
push eax
push edi
call fcn.1007fc70
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x1006a273
movzx eax, word [edi + 0x72]
xor edx, edx
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0xc], esi
xor esi, esi
cmp si, ax
mov esi, dword [ebp - 8]
jae 0x10068cf5
mov esi, dword [ebp - 0x1c]
nop dword [eax]
mov word [ecx], si
lea ecx, [ecx + 2]
movzx eax, word [edi + 0x72]
inc edx
cmp dx, ax
jb 0x10068ce0
mov esi, dword [ebp - 8]
jmp 0x10068cf8
mov eax, dword [ebp - 0xc]
movzx ecx, ax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
test byte [eax], 0x80
je 0x10068d15
push 0
push ecx
push ebx
call fcn.10085080
mov ecx, dword [ebp - 0x1c]
add esp, 0xc
push ebx
lea eax, [ecx + ecx]
push eax
push ecx
push 3
push 0x153
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
push ebx
push edi
mov esi, eax
call fcn.1007fc60
add esp, 0x28
test esi, esi
je 0x1006a651
mov ebx, dword [ebp - 4]
test byte [edi + 0x3c], 2
mov esi, dword [ebp - 8]
je 0x10068d73
push dword [edi + 0x7c]
movzx eax, word [edi + 0x72]
push eax
push 0x154
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006af50
add esp, 0x18
test eax, eax
je 0x1006a421
mov ebx, dword [ebp - 4]
test byte [edi + 0x3c], 4
je 0x10068da2
push dword [edi + 0x80]
movzx eax, word [edi + 0x72]
push eax
push 0x155
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006af50
add esp, 0x18
test eax, eax
je 0x1006a421
mov ebx, dword [ebp - 4]
test byte [edi + 0x3c], 8
je 0x10068df4
test esi, esi
jne 0x10068db2
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068df4
mov eax, dword [edi + 0x50]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x10068dcc
lea eax, [ebp - 0xc]
push eax
call fcn.10085120
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
push 1
push 4
push 0x80e5
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test byte [edi + 0x3c], 0x10
je 0x10068e46
test esi, esi
jne 0x10068e04
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068e46
mov eax, dword [edi + 0x5c]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x10068e1e
lea eax, [ebp - 0xc]
push eax
call fcn.10085120
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
push 1
push 4
push 0x80e6
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test byte [edi + 0x3c], 0x20
je 0x10068e9c
lea eax, [edi + 0xa8]
test esi, esi
jne 0x10068e5c
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068e9c
mov ecx, dword [ebp - 0x18]
test byte [ecx], 0x80
je 0x10068e77
push 0
push 2
push eax
call fcn.10085080
add esp, 0xc
lea eax, [edi + 0xa8]
push eax
push 4
push 2
push 3
push 0x141
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test byte [edi + 0x3c], 0x80
je 0x10068ef2
lea eax, [edi + 0x110]
test esi, esi
jne 0x10068eb2
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068ef2
mov ecx, dword [ebp - 0x18]
test byte [ecx], 0x80
je 0x10068ecd
push 0
push 2
push eax
call fcn.10085080
add esp, 0xc
lea eax, [edi + 0x110]
push eax
push 4
push 2
push 3
push 0x212
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x3c], 0x100
je 0x10068f4c
test esi, esi
jne 0x10068f05
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10068f4c
mov ax, word [edi + 0x114]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x10068f24
lea eax, [ebp - 0x10]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x10]
push eax
push 2
push 1
push 3
push 0x213
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x3c], 0x200
je 0x10069004
mov eax, dword [edi + 0x124]
mov dword [ebp - 0x1c], eax
test esi, esi
jne 0x10068f6f
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10069004
push 0
push 0x30
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1006a372
mov esi, dword [ebp - 0x1c]
mov ebx, eax
mov edi, 6
movss xmm0, dword [esi]
lea eax, [ebx + 4]
push eax
cvtps2pd xmm0, xmm0
push ebx
sub esp, 8
movsd qword [esp], xmm0
call fcn.10066b30
add esp, 0x10
lea esi, [esi + 4]
add ebx, 8
sub edi, 1
jne 0x10068f91
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp + 8]
mov esi, dword [ebp - 8]
mov ebx, dword [ebp - 0xc]
test byte [eax], 0x80
je 0x10068fd6
push 0
push 0xc
push ebx
call fcn.10085020
add esp, 0xc
push ebx
push 0x30
push 6
push 5
push 0x214
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
push ebx
push edi
mov esi, eax
call fcn.1007fc60
add esp, 0x28
test esi, esi
je 0x1006a651
mov ebx, dword [ebp - 4]
test dword [edi + 0x3c], 0x1000
mov esi, dword [ebp - 8]
je 0x10069166
test esi, esi
jne 0x10069021
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10069166
mov ax, word [edi + 0x72]
mov edx, 1
sub ax, word [edi + 0xac]
mov cl, byte [edi + 0x64]
shl edx, cl
movzx ebx, ax
mov dword [ebp - 0x14], edx
cmp ebx, 3
jbe 0x10069048
mov ebx, 3
jmp 0x1006904a
jne 0x10069083
mov eax, dword [edi + 0x120]
test eax, eax
je 0x10069079
add edx, edx
push 0
push edx
push eax
push dword [edi + 0x118]
mov dword [ebp - 0x1c], edx
call fcn.10085e90
add esp, 0x10
test eax, eax
jne 0x100690b4
mov eax, dword [ebp - 0x1c]
mov ebx, 2
jmp 0x1006908f
lea eax, [edx + edx]
mov ebx, 2
jmp 0x1006908f
cmp ebx, 2
jne 0x1006917f
lea eax, [edx + edx]
mov ecx, dword [edi + 0x11c]
test ecx, ecx
je 0x100690af
push 0
push eax
push ecx
push dword [edi + 0x118]
call fcn.10085e90
add esp, 0x10
test eax, eax
jne 0x100690b4
mov ebx, 1
mov edx, dword [ebp - 0x14]
movzx eax, bx
imul eax, edx
push 0
mov dword [ebp - 0x1c], eax
add eax, eax
push eax
push edi
call fcn.1007fc70
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0x20], ecx
test ecx, ecx
je 0x1006a398
mov eax, dword [ebp - 0x14]
add eax, eax
push 0
push eax
push dword [edi + 0x118]
mov dword [ebp - 0xc], eax
push ecx
call fcn.10085f00
add esp, 0x10
cmp bx, 1
jbe 0x10069115
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
push 0
push ecx
push dword [edi + 0x11c]
add eax, ecx
push eax
call fcn.10085f00
add esp, 0x10
cmp bx, 2
mov ebx, dword [ebp - 0x20]
jbe 0x10069138
mov eax, dword [ebp - 0x14]
push 0
push dword [ebp - 0xc]
push dword [edi + 0x120]
lea eax, [ebx + eax*4]
push eax
call fcn.10085f00
add esp, 0x10
push ebx
push dword [ebp - 0x1c]
lea eax, [ebp - 4]
push 0x12d
push esi
push eax
push edi
call fcn.1006ab90
push ebx
push edi
mov esi, eax
call fcn.1007fc60
add esp, 0x20
test esi, esi
mov esi, dword [ebp - 8]
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x3c], 0x4000
je 0x100691b7
mov eax, dword [edi + 0x128]
test esi, esi
jne 0x1006918f
inc ebx
mov dword [ebp - 4], ebx
jmp 0x100691b7
test bx, bx
mov eax, 1
cmove ebx, eax
jmp 0x100690b7
push dword [edi + 0x12c]
push eax
push eax
push 2
push 0x14d
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x3c], 0x40000
je 0x10069211
test esi, esi
jne 0x100691ca
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10069211
mov ax, word [edi + 0x130]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x100691e9
lea eax, [ebp - 0x10]
push eax
call fcn.10085180
add esp, 4
lea eax, [ebp - 0x10]
push eax
push 2
push 1
push 3
push 0x14e
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
test dword [edi + 0x3c], 0x20000
je 0x10069385
movzx eax, word [edi + 0x108]
test ax, ax
je 0x10069385
test esi, esi
jne 0x1006923b
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10069385
mov ecx, dword [edi + 0x278]
mov dword [ebp - 0x28], ecx
mov ecx, dword [edi + 0x27c]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x18]
test dword [ecx], 0x80000
jne 0x10069320
cdq
shld edx, eax, 2
push edx
shl eax, 2
push eax
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1006a3cd
mov ebx, dword [edi + 0x10c]
mov ecx, eax
movzx eax, word [edi + 0x108]
xor edx, edx
mov esi, eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x1c], esi
xor esi, esi
cmp si, ax
mov dword [ebp - 0x20], edx
mov esi, dword [ebp - 8]
jae 0x100692f6
test ebx, ebx
jne 0x100692c2
push 0x901
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.pa___0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [ebp - 0x14]
add esp, 0xc
mov edx, dword [ebp - 0x20]
cmp dword [ebx + 4], 0
mov eax, dword [ebx]
ja 0x1006a3be
jb 0x100692d9
cmp eax, 0xffffffff
ja 0x1006a3be
mov dword [ecx], eax
inc edx
movzx eax, word [edi + 0x108]
add ecx, 4
add ebx, 8
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x20], edx
cmp dx, ax
jb 0x100692a0
jmp 0x100692f9
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0xc]
movzx eax, ax
push eax
push 0x14a
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006aa20
push dword [ebp - 0xc]
mov ebx, eax
push edi
call fcn.1007fc60
add esp, 0x20
jmp 0x1006933c
push dword [edi + 0x10c]
push eax
push 0x14a
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006a990
add esp, 0x18
mov ebx, eax
test ebx, ebx
je 0x1006a654
mov eax, dword [ebp - 0x18]
or dword [eax], 0x2000
movzx eax, word [edi + 0x108]
mov word [edi + 0x280], ax
cmp eax, 1
jne 0x10069370
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
jmp 0x10069376
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [edi + 0x288], ecx
mov dword [edi + 0x28c], eax
mov ebx, dword [ebp - 4]
xor esi, esi
mov dword [ebp - 0x14], esi
cmp dword [edi + 0x368], esi
jbe 0x100696ab
nop word [eax + eax]
mov eax, dword [edi + 0x364]
mov esi, dword [eax + esi*4]
movzx eax, word [esi + 0x18]
cmp eax, 0x42
jb 0x10069693
mov edx, eax
mov eax, 1
mov ecx, edx
shr edx, 5
and ecx, 0x1f
shl eax, cl
test dword [edi + edx*4 + 0x38], eax
je 0x10069693
mov eax, dword [esi + 0x14]
dec eax
cmp eax, 0x27
ja case.0x100693e5.2
movzx eax, byte [eax + 0x1006a91c]
jmp dword [eax*4 + 0x1006a908]
cmp dword [esi + 8], 2
je 0x1006940a
push 0x358
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_type__TIFF_ASCII
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
cmp word [esi + 4], 0xffff
je 0x10069429
push 0x359
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_readcount__TIFF_VARIABLE
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
cmp byte [esi + 0x1b], 0
je 0x10069447
push 0x35a
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_passcount__0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
lea eax, [ebp - 0x58]
push eax
push dword [esi]
push edi
call fcn.1005a920
mov edx, dword [ebp - 0x58]
add esp, 0xc
lea ecx, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x10069460
movzx eax, word [esi]
sub edx, ecx
mov ecx, dword [ebp - 8]
test ecx, ecx
jne 0x1006947c
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10069696
push dword [ebp - 0x58]
push edx
push edx
push 2
push eax
jmp 0x1006967a
cmp dword [esi + 8], 3
je 0x100694a7
push 0x366
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_type__TIFF_SHORT
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
cmp word [esi + 4], 1
je 0x100694c6
push 0x367
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_readcount__1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
cmp byte [esi + 0x1b], 0
je 0x100694e4
push 0x368
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_passcount__0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
lea eax, [ebp - 0x50]
push eax
push dword [esi]
push edi
call fcn.1005a920
mov ecx, dword [ebp - 8]
add esp, 0xc
movzx esi, word [esi]
test ecx, ecx
jne 0x10069506
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10069696
mov ax, word [ebp - 0x50]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x10069525
lea eax, [ebp - 0x10]
push eax
call fcn.10085180
mov ecx, dword [ebp - 8]
add esp, 4
lea eax, [ebp - 0x10]
push eax
push 2
push 1
push 3
push esi
jmp 0x1006967a
cmp dword [esi + 8], 4
je 0x10069553
push 0x373
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_type__TIFF_LONG
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
cmp word [esi + 4], 1
je 0x10069572
push 0x374
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_readcount__1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
cmp byte [esi + 0x1b], 0
je 0x10069590
push 0x375
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_passcount__0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
lea eax, [ebp - 0x88]
push eax
push dword [esi]
push edi
call fcn.1005a920
mov ecx, dword [ebp - 8]
add esp, 0xc
movzx esi, word [esi]
test ecx, ecx
jne 0x100695b5
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10069696
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x100695d5
lea eax, [ebp - 0xc]
push eax
call fcn.10085120
mov ecx, dword [ebp - 8]
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
push 1
push 4
push esi
jmp 0x1006967a
cmp dword [esi + 8], 7
je 0x10069603
push 0x381
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_type__TIFF_UNDEFINED
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
cmp word [esi + 4], 0xfffd
je 0x10069622
push 0x382
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_readcount__TIFF_VARIABLE2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
cmp byte [esi + 0x1b], 1
je 0x10069640
push 0x383
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.o__field_passcount__1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x90]
push eax
push dword [esi]
push edi
call fcn.1005a920
mov ecx, dword [ebp - 8]
add esp, 0x10
movzx edx, word [esi]
test ecx, ecx
jne 0x10069669
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10069696
push dword [ebp - 0x8c]
mov eax, dword [ebp - 0x90]
push eax
push eax
push 7
push edx
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a651
mov ebx, dword [ebp - 4]
mov ecx, dword [ebp - 8]
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, dword [edi + 0x368]
jb 0x100693a0
jmp 0x100696ae
mov ecx, dword [ebp - 8]
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [edi + 0x134], eax
jbe 0x1006a0de
nop
lea edx, [eax + eax*2]
mov eax, dword [edi + 0x138]
shl edx, 2
mov dword [ebp - 0x14], edx
mov esi, dword [edx + eax]
mov dword [ebp - 0xc], esi
movzx esi, word [esi]
mov dword [ebp - 0x10], esi
mov esi, dword [edx + eax + 4]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], esi
mov eax, dword [eax + 8]
dec eax
cmp eax, 0x11
ja case.0x100696f2.14
jmp dword [eax*4 + 0x1006a944]
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
test ecx, ecx
jne 0x10069710
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
push eax
mov eax, dword [ebp - 0x10]
push esi
push esi
push 2
push eax
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a651
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
test ecx, ecx
jne 0x1006974e
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
push eax
mov eax, dword [ebp - 0x10]
push esi
push esi
push 7
push eax
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a651
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
test ecx, ecx
jne 0x1006978c
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
push eax
mov eax, dword [ebp - 0x10]
push esi
push esi
push 1
push eax
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a651
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
test ecx, ecx
jne 0x100697ca
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
push eax
mov eax, dword [ebp - 0x10]
push esi
push esi
push 6
push eax
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a651
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
test ecx, ecx
jne 0x10069808
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
push eax
mov eax, dword [ebp - 0x10]
push esi
push eax
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ab90
add esp, 0x18
test eax, eax
je 0x1006a651
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
mov dword [ebp - 0xc], eax
test ecx, ecx
jne 0x10069846
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
cmp esi, 0x80000000
jb 0x10069869
push 0x96f
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.count___0x80000000
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0xc]
add esp, 0xc
mov ecx, dword [ebp - 0x18]
test byte [ecx], 0x80
je 0x1006987d
push 0
push esi
push eax
call fcn.10085080
add esp, 0xc
push dword [ebp - 0xc]
lea eax, [esi + esi]
push eax
push esi
push 8
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 8]
push eax
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
add esp, 0x20
test eax, eax
je 0x1006a654
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
test ecx, ecx
jne 0x100698c3
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
push eax
mov eax, dword [ebp - 0x10]
push esi
push eax
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ab20
add esp, 0x18
test eax, eax
je 0x1006a651
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
test ecx, ecx
jne 0x100698fe
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
push eax
mov eax, dword [ebp - 0x10]
push esi
push eax
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006abf0
add esp, 0x18
test eax, eax
je 0x1006a651
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
mov dword [ebp - 0x28], eax
test ecx, ecx
jne 0x1006993c
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
mov edx, dword [ebp - 0x18]
test dword [edx], 0x80000
je 0x10069962
push eax
mov eax, dword [ebp - 0x10]
push esi
push eax
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006aa90
mov esi, dword [ebp - 8]
add esp, 0x18
mov ebx, eax
jmp 0x100699e0
lea eax, [esi*4]
push 0
push eax
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1006a479
xor ebx, ebx
mov edx, eax
test esi, esi
je 0x100699be
mov eax, dword [ebp - 0x28]
nop dword [eax + eax]
mov edi, dword [eax + 4]
test edi, edi
mov ecx, dword [eax]
mov dword [ebp - 0x30], edi
mov edi, dword [ebp + 8]
ja 0x1006a43c
jb 0x100699ae
cmp ecx, 0xffffffff
ja 0x1006a43c
mov dword [edx], ecx
inc ebx
add eax, 8
add edx, 4
cmp ebx, esi
jb 0x10069990
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x10]
push esi
mov esi, dword [ebp - 8]
push eax
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ab20
push dword [ebp - 0xc]
mov ebx, eax
push edi
call fcn.1007fc60
add esp, 0x20
test ebx, ebx
je 0x1006a654
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
mov dword [ebp - 0x20], eax
test ecx, ecx
jne 0x10069a0a
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
mov ecx, dword [ebp - 0x18]
test dword [ecx], 0x80000
je 0x10069a9b
cmp esi, 0x20000000
jb 0x10069a3f
push 0x9b6
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.count___0x20000000
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0x20]
add esp, 0xc
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
test ecx, 0x80000
jne 0x10069a66
push str.SLONG8_not_allowed_for_ClassicTIFF
push str.TIFFWriteDirectoryTagCheckedSlong8Array
push edi
call fcn.1006c5e0
mov esi, dword [ebp - 8]
add esp, 0xc
xor eax, eax
jmp 0x10069b36
test cl, cl
jns 0x10069a76
push 0
push esi
push eax
call fcn.10084fb0
add esp, 0xc
push dword [ebp - 0x20]
lea eax, [esi*8]
push eax
mov eax, dword [ebp - 0x10]
push esi
mov esi, dword [ebp - 8]
push 0x11
push eax
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
jmp 0x10069b30
lea eax, [esi*4]
push 0
push eax
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0x14], eax
test eax, eax
je 0x1006a502
xor ebx, ebx
mov edx, eax
test esi, esi
je 0x10069b0d
mov eax, dword [ebp - 0x20]
mov edi, dword [eax + 4]
test edi, edi
mov ecx, dword [eax]
mov dword [ebp - 0xc], edi
mov edi, dword [ebp + 8]
jg 0x1006a4c5
jl 0x10069ae5
cmp ecx, 0x7fffffff
ja 0x1006a4c5
cmp dword [eax + 4], 0xffffffff
jl 0x1006a488
jg 0x10069afd
cmp ecx, 0x80000000
jb 0x1006a488
mov dword [edx], ecx
inc ebx
add eax, 8
add edx, 4
cmp ebx, esi
jb 0x10069ac4
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push esi
mov esi, dword [ebp - 8]
push eax
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006abf0
push dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
push edi
call fcn.1007fc60
mov eax, dword [ebp - 0x28]
mov ebx, dword [ebp - 4]
add esp, 0x20
test eax, eax
je 0x1006a654
jmp 0x1006a0c8
push dword [ebp - 0xc]
call fcn.1005cc40
mov ecx, dword [ebp - 0x14]
mov edx, eax
mov eax, dword [edi + 0x138]
add esp, 4
mov dword [ebp - 0x54], edx
mov eax, dword [eax + ecx + 8]
mov ecx, dword [ebp - 8]
cmp edx, 8
jne 0x10069c2f
mov dword [ebp - 0x14], eax
test ecx, ecx
jne 0x10069b7c
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
lea eax, [esi*8]
push 0
push eax
push edi
call fcn.1007fc70
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0x1006a511
mov ebx, ecx
test esi, esi
je 0x10069bdb
sub dword [ebp - 0x14], ecx
mov edi, esi
mov esi, dword [ebp - 0x14]
nop word [eax + eax]
movsd xmm0, qword [ebx + esi]
lea eax, [ebx + 4]
push eax
push ebx
sub esp, 8
movsd qword [esp], xmm0
call fcn.10066b30
add esp, 0x10
add ebx, 8
sub edi, 1
jne 0x10069bb0
mov edi, dword [ebp + 8]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x10069bf2
lea eax, [esi + esi]
push 0
push eax
push ecx
call fcn.10085020
add esp, 0xc
mov ebx, dword [ebp - 0xc]
lea eax, [esi*8]
push ebx
push eax
mov eax, dword [ebp - 0x10]
push esi
mov esi, dword [ebp - 8]
push 5
push eax
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
push ebx
push edi
mov esi, eax
call fcn.1007fc60
add esp, 0x28
test esi, esi
je 0x1006a651
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov dword [ebp - 0x28], eax
test ecx, ecx
jne 0x10069c3f
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10069cf5
lea eax, [esi*8]
push 0
push eax
push edi
call fcn.1007fc70
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0x1006a520
mov ebx, ecx
test esi, esi
je 0x10069ca0
mov edi, dword [ebp - 0x28]
mov dword [ebp - 0x14], esi
nop dword [eax + eax]
movss xmm0, dword [edi]
lea eax, [ebx + 4]
push eax
cvtps2pd xmm0, xmm0
push ebx
sub esp, 8
movsd qword [esp], xmm0
call fcn.10066b30
add esp, 0x10
lea edi, [edi + 4]
add ebx, 8
sub esi, 1
jne 0x10069c70
mov edi, dword [ebp + 8]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x10069cb7
lea eax, [esi + esi]
push 0
push eax
push ecx
call fcn.10085020
add esp, 0xc
mov ebx, dword [ebp - 0xc]
lea eax, [esi*8]
push ebx
push eax
mov eax, dword [ebp - 0x10]
push esi
mov esi, dword [ebp - 8]
push 5
push eax
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
push ebx
push edi
mov esi, eax
call fcn.1007fc60
add esp, 0x28
test esi, esi
je 0x1006a651
mov ebx, dword [ebp - 4]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x54]
cmp edx, 4
je 0x1006a0cb
push edx
push str.Rational2Double:_.set_field_type_is_not_4_but__d
push str.TIFFLib:__TIFFWriteDirectorySec__
push edi
call fcn.1006c5e0
add esp, 0x10
jmp 0x1006a0c8
push dword [ebp - 0xc]
call fcn.1005cc40
mov ecx, dword [ebp - 0x14]
mov edx, eax
mov eax, dword [edi + 0x138]
add esp, 4
mov dword [ebp - 0x30], edx
mov eax, dword [eax + ecx + 8]
mov ecx, dword [ebp - 8]
cmp edx, 8
jne 0x10069dff
mov dword [ebp - 0xc], eax
test ecx, ecx
jne 0x10069d50
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
lea eax, [esi*8]
push 0
push eax
push edi
call fcn.1007fc70
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x1006a52f
mov ebx, ecx
test esi, esi
je 0x10069dab
sub dword [ebp - 0xc], ecx
mov edi, esi
mov esi, dword [ebp - 0xc]
nop
movsd xmm0, qword [ebx + esi]
lea eax, [ebx + 4]
push eax
push ebx
sub esp, 8
movsd qword [esp], xmm0
call fcn.10066d50
add esp, 0x10
add ebx, 8
sub edi, 1
jne 0x10069d80
mov edi, dword [ebp + 8]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x10069dc2
lea eax, [esi + esi]
push 0
push eax
push ecx
call fcn.10085020
add esp, 0xc
mov ebx, dword [ebp - 0x14]
lea eax, [esi*8]
push ebx
push eax
mov eax, dword [ebp - 0x10]
push esi
mov esi, dword [ebp - 8]
push 0xa
push eax
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
push ebx
push edi
mov esi, eax
call fcn.1007fc60
add esp, 0x28
test esi, esi
je 0x1006a651
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov dword [ebp - 0x54], eax
test ecx, ecx
jne 0x10069e0f
inc ebx
mov dword [ebp - 4], ebx
jmp 0x10069ec5
lea eax, [esi*8]
push 0
push eax
push edi
call fcn.1007fc70
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0x1006a53e
mov ebx, ecx
test esi, esi
je 0x10069e70
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x28], esi
nop dword [eax + eax]
movss xmm0, dword [edi]
lea eax, [ebx + 4]
push eax
cvtps2pd xmm0, xmm0
push ebx
sub esp, 8
movsd qword [esp], xmm0
call fcn.10066d50
add esp, 0x10
lea edi, [edi + 4]
add ebx, 8
sub esi, 1
jne 0x10069e40
mov edi, dword [ebp + 8]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
test byte [eax], 0x80
je 0x10069e87
lea eax, [esi + esi]
push 0
push eax
push ecx
call fcn.10085020
add esp, 0xc
mov ebx, dword [ebp - 0xc]
lea eax, [esi*8]
push ebx
push eax
mov eax, dword [ebp - 0x10]
push esi
mov esi, dword [ebp - 8]
push 0xa
push eax
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006ac60
push ebx
push edi
mov esi, eax
call fcn.1007fc60
add esp, 0x28
test esi, esi
je 0x1006a651
mov ebx, dword [ebp - 4]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x30]
cmp edx, 4
je 0x1006a0cb
push edx
push str.Rational2Double:_.set_field_type_is_not_4_but__d
push str.TIFFLib:__TIFFWriteDirectorySec__
push edi
call fcn.1006c5e0
add esp, 0x10
jmp 0x1006a0c8
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
mov dword [ebp - 0xc], eax
test ecx, ecx
jne 0x10069f01
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
cmp esi, 0x40000000
jb 0x10069f24
push 0xba1
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.count___0x40000000
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0xc]
add esp, 0xc
mov ecx, dword [ebp - 0x18]
test byte [ecx], 0x80
je 0x10069f38
push 0
push esi
push eax
call fcn.10085020
add esp, 0xc
push dword [ebp - 0xc]
lea eax, [esi*4]
push eax
push esi
push 0xb
jmp 0x10069887
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
mov dword [ebp - 0xc], eax
test ecx, ecx
jne 0x10069f65
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
cmp esi, 0x20000000
jb 0x10069f88
push 0xbaf
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push str.count___0x20000000
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0xc]
add esp, 0xc
mov ecx, dword [ebp - 0x18]
test byte [ecx], 0x80
je 0x10069f9c
push 0
push esi
push eax
call fcn.10084fb0
add esp, 0xc
push dword [ebp - 0xc]
lea eax, [esi*8]
push eax
push esi
push 0xc
jmp 0x10069887
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
test ecx, ecx
jne 0x10069fc6
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
push eax
mov eax, dword [ebp - 0x10]
push esi
push eax
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006aa20
add esp, 0x18
test eax, eax
je 0x1006a651
mov ebx, dword [ebp - 4]
jmp 0x1006a0c8
mov eax, dword [edi + 0x138]
mov eax, dword [edx + eax + 8]
mov dword [ebp - 0x30], eax
test ecx, ecx
jne 0x1006a004
inc ebx
mov dword [ebp - 4], ebx
jmp 0x1006a0cb
mov edx, dword [ebp - 0x18]
test dword [edx], 0x80000
je 0x1006a02f
push eax
mov eax, dword [ebp - 0x10]
push esi
push eax
push ecx
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006a990
mov esi, dword [ebp - 8]
mov ebx, eax
add esp, 0x18
test ebx, ebx
jmp 0x1006989e
lea eax, [esi*4]
push 0
push eax
push edi
call fcn.1007fc70
add esp, 0xc
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1006a57f
xor ebx, ebx
mov edx, eax
test esi, esi
je 0x1006a087
mov eax, dword [ebp - 0x30]
nop dword [eax + eax]
cmp dword [eax + 4], 0
mov ecx, dword [eax]
ja 0x1006a54d
jb 0x1006a077
cmp ecx, 0xffffffff
ja 0x1006a54d
mov dword [edx], ecx
inc ebx
add eax, 8
add edx, 4
cmp ebx, esi
jb 0x1006a060
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x10]
push esi
mov esi, dword [ebp - 8]
push eax
push esi
lea eax, [ebp - 4]
push eax
push edi
call fcn.1006aa20
push dword [ebp - 0xc]
mov ebx, eax
push edi
call fcn.1007fc60
add esp, 0x20
test ebx, ebx
jmp 0x1006989e
push 0x4a9
push str.C:coretech_sourcegreen_aide_source_aideexternallibtiff_tif_dirwrite.c
push 0x101b40bc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, dword [edi + 0x134]
jb 0x100696c0
test ecx, ecx
jne 0x1006a5be
mov eax, ebx
push ecx
shl eax, 5
push eax
push edi
call fcn.1007fc70
mov esi, eax
add esp, 0xc
mov dword [ebp - 8], esi
test esi, esi
je 0x1006a5b4
cmp dword [ebp + 0xc], 0
je 0x1006a12a
mov ecx, dword [edi + 0x10]
or ecx, dword [edi + 0x14]
jne 0x1006a122
push edi
call fcn.10066f80
add esp, 4
test eax, eax
je 0x1006a654
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x14]
jmp 0x1006a15d
mov esi, dword [edi + 0x354]
mov ecx, esi
push 2
push 0
push 0
push dword [edi + 0x348]
call dword [0x101b0250]
call esi
mov esi, dword [ebp - 8]
add esp, 0x10
mov ecx, eax
add ecx, 1
adc edx, 0
and ecx, 0xfffffffe
mov dword [edi + 0x10], ecx
mov dword [edi + 0x14], edx
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x1006a175
mov dword [eax], ecx
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x14]
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0x18]
test dword [eax], 0x80000
jne 0x1006a1a4
lea eax, [ebx + ebx*2]
lea eax, [eax*4 + 6]
add ecx, eax
mov dword [ebp - 0x2c], eax
mov eax, edx
mov dword [edi + 0x278], ecx
adc eax, 0
xor ebx, ebx
mov dword [edi + 0x27c], eax
jmp 0x1006a1bb
mov esi, dword [ebp - 8]
lea eax, [ebx + ebx*4]
lea eax, [eax*4 + 0x10]
mov ebx, edx
add ecx, eax
mov dword [ebp - 0x2c], eax
adc ebx, 0
lea eax, [edi + 0x278]
mov edi, ecx
mov dword [eax], edi
mov edi, ebx
mov dword [eax + 4], edi
mov edi, dword [ebp + 8]
cmp ebx, edx
jb 0x1006a58e
ja 0x1006a1e0
cmp ecx, dword [ebp - 0xc]
jb 0x1006a58e
test ebx, ebx
jb 0x1006a58e
ja 0x1006a1f3
cmp ecx, dword [ebp - 0x2c]
jb 0x1006a58e
mov eax, ecx
and eax, 1
or eax, 0
je 0x1006a20f
add ecx, 1
mov dword [edi + 0x278], ecx
adc ebx, 0
mov dword [edi + 0x27c], ebx
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x1006a21c
inc dword [edi + 0x260]
mov ecx, dword [ebp - 8]
mov esi, dword [ebp - 0x18]
jmp 0x10067bb0
push str.Not_a_number_value_is_illegal
push str.TIFFWriteDirectoryTagCheckedRational
push edi
call fcn.1006c5e0
add esp, 0xc
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Negative_value_is_illegal
push str.TIFFWriteDirectoryTagCheckedRational
push edi
call fcn.1006c5e0
add esp, 0xc
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Out_of_memory
push str.TIFFWriteDirectoryTagShortPerSample
push edi
call fcn.1006c5e0
add esp, 0xc
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Attempt_to_write_value_larger_than_0xFFFF_in_SHORT_array.
push str.TIFFWriteDirectoryTagLongLong8Array
push edi
call fcn.1006c5e0
push dword [ebp - 0x14]
push edi
call fcn.1007fc60
add esp, 0x14
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Attempt_to_write_value_larger_than_0xFFFFFFFF_in_LONG_array.
push str.TIFFWriteDirectoryTagLongLong8Array
push edi
call fcn.1006c5e0
push dword [ebp - 0x14]
push edi
call fcn.1007fc60
add esp, 0x14
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Out_of_memory
push str.TIFFWriteDirectoryTagLongLong8Array
push edi
call fcn.1006c5e0
add esp, 0xc
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Attempt_to_write_value_larger_than_0xFFFFFFFF_in_LONG_array.
push str.TIFFWriteDirectoryTagLongLong8Array
push edi
call fcn.1006c5e0
push dword [ebp - 0xc]
push edi
call fcn.1007fc60
add esp, 0x14
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Out_of_memory
push str.TIFFWriteDirectoryTagColormap
push edi
call fcn.1006c5e0
add esp, 0xc
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Out_of_memory
push str.TIFFWriteDirectoryTagCheckedRationalArray
push edi
call fcn.1006c5e0
add esp, 0xc
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Out_of_memory
push str.TIFFWriteDirectoryTagTransferfunction
push edi
call fcn.1006c5e0
add esp, 0xc
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Illegal_value_for_SubIFD_tag
push str.TIFFWriteDirectoryTagSubifd
jmp 0x1006a327
push str.Out_of_memory
push str.TIFFWriteDirectoryTagSubifd
push edi
call fcn.1006c5e0
add esp, 0xc
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x1c]
mov ecx, str.unknown
test eax, eax
cmovne ecx, eax
push ecx
push esi
call fcn.1005ccd0
add esp, 4
push eax
push str.Cannot_write_tag__u___s_
push str.TIFFWriteDirectorySec
push edi
call fcn.1006c5e0
mov esi, dword [ebp - 8]
add esp, 0x14
test esi, esi
je 0x10067aae
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x10]
movzx eax, ax
push eax
push dword [ebp - 0x30]
push ecx
push str.Attempt_to_write_unsigned_long_value__llu_larger_than_0xFFFFFFFF_for_tag__d_in_Classic_TIFF_file._TIFF_file_writing_aborted
push str.TIFFWriteDirectoryTagLong8Array
push edi
call fcn.1006c5e0
push dword [ebp - 0xc]
push edi
call fcn.1007fc60
mov esi, dword [ebp - 8]
add esp, 0x20
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Out_of_memory
push str.TIFFWriteDirectoryTagLong8Array
jmp 0x1006a648
mov eax, dword [ebp - 0x10]
movzx eax, ax
push eax
push dword [ebp - 0xc]
push ecx
push str.Attempt_to_write_signed_long_value__lli_smaller_than_0x80000000___2147483648__for_tag__d_in_Classic_TIFF_file._TIFF_writing_to_file_aborted
push str.TIFFWriteDirectoryTagSlong8Array
push edi
call fcn.1006c5e0
push dword [ebp - 0x14]
push edi
call fcn.1007fc60
mov esi, dword [ebp - 8]
add esp, 0x20
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x10]
movzx eax, ax
push eax
push dword [ebp - 0xc]
push ecx
push str.Attempt_to_write_signed_long_value__lli_larger_than_0x7FFFFFFF__2147483647__for_tag__d_in_Classic_TIFF_file._TIFF_writing_to_file_aborted
push str.TIFFWriteDirectoryTagSlong8Array
push edi
call fcn.1006c5e0
push dword [ebp - 0x14]
push edi
call fcn.1007fc60
mov esi, dword [ebp - 8]
add esp, 0x20
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Out_of_memory
push str.TIFFWriteDirectoryTagSlong8Array
jmp 0x1006a648
push str.Out_of_memory
push str.TIFFWriteDirectoryTagCheckedRationalDoubleArray
jmp 0x1006a648
push str.Out_of_memory
push str.TIFFWriteDirectoryTagCheckedRationalArray
jmp 0x1006a648
push str.Out_of_memory
push str.TIFFWriteDirectoryTagCheckedSrationalDoubleArray
jmp 0x1006a648
push str.Out_of_memory
push str.TIFFWriteDirectoryTagCheckedSrationalArray
jmp 0x1006a648
push str.Attempt_to_write_value_larger_than_0xFFFFFFFF_in_Classic_TIFF_file.
push str.TIFFWriteDirectoryTagIfdIfd8Array
push edi
call fcn.1006c5e0
push dword [ebp - 0xc]
push edi
call fcn.1007fc60
mov esi, dword [ebp - 8]
add esp, 0x14
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Out_of_memory
push str.TIFFWriteDirectoryTagIfdIfd8Array
jmp 0x1006a648
push str.Maximum_TIFF_file_size_exceeded
push str.TIFFWriteDirectorySec
push edi
call fcn.1006c5e0
add esp, 0xc
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Out_of_memory
jmp 0x10067aa0
cmp dword [ebp + 0xc], 0
je 0x1006a627
test dword [edi + 0x3c], 0x20000
je 0x1006a627
mov eax, dword [edi + 0x288]
or eax, dword [edi + 0x28c]
jne 0x1006a627
test ebx, ebx
je 0x1006a5f1
mov edx, 0x14a
cmp word [ecx], dx
je 0x1006a5f8
inc eax
add ecx, 0x20
cmp eax, ebx
jne 0x1006a5e4
push str.Cannot_find_SubIFD_tag
jmp 0x1006a643
mov ecx, dword [ebp - 0x24]
mov edx, dword [edi + 0x10]
mov esi, dword [edi + 0x14]
test dword [ecx], 0x80000
jne 0x1006a667
lea ecx, [eax + eax*2]
xor eax, eax
shl ecx, 2
add ecx, edx
adc eax, esi
add ecx, 0xa
adc eax, 0
mov dword [edi + 0x288], ecx
mov dword [edi + 0x28c], eax
push 0
push dword [ebp - 0x2c]
push edi
call fcn.1007fc70
mov esi, eax
add esp, 0xc
mov dword [ebp - 0x1c], esi
test esi, esi
jne 0x1006a678
push str.Out_of_memory
push str.TIFFWriteDirectorySec
push edi
call fcn.1006c5e0
add esp, 0xc
mov esi, dword [ebp - 8]
push esi
push edi
call fcn.1007fc60
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [eax + eax*4]
xor eax, eax
shl ecx, 2
add ecx, edx
adc eax, esi
add ecx, 0x14
jmp 0x1006a618
mov ecx, dword [ebp - 0x24]
test dword [ecx], 0x80000
jne 0x1006a777
mov word [esi], bx
test byte [ecx], 0x80
je 0x1006a69b
push esi
call fcn.10085180
mov ecx, dword [ebp - 0x24]
add esp, 4
lea eax, [esi + 2]
mov dword [ebp - 0xc], eax
test ebx, ebx
je 0x1006a742
mov eax, dword [ebp - 8]
mov edi, dword [ebp - 0xc]
add eax, 8
mov dword [ebp - 0x30], eax
mov esi, eax
jmp 0x1006a6c3
mov ecx, dword [ebp - 0x24]
mov ax, word [esi - 8]
mov word [edi], ax
test byte [ecx], 0x80
je 0x1006a6db
push edi
call fcn.10085180
mov ecx, dword [ebp - 0x24]
add esp, 4
mov ax, word [esi - 6]
add edi, 2
mov word [edi], ax
test byte [ecx], 0x80
je 0x1006a6f3
push edi
call fcn.10085180
add esp, 4
mov eax, dword [esi]
add edi, 2
push 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push 4
push eax
push edi
call fcn.10085f00
mov ecx, dword [ebp - 0x24]
add esp, 0x10
test byte [ecx], 0x80
je 0x1006a71d
push edi
call fcn.10085120
add esp, 4
push 0
push 4
lea eax, [esi + 8]
add edi, 4
push eax
push edi
call fcn.10085f00
add esp, 0x10
add edi, 4
add esi, 0x20
sub ebx, 1
jne 0x1006a6c0
mov dword [ebp - 0xc], edi
mov edi, dword [ebp + 8]
mov eax, dword [edi + 0x18]
mov esi, dword [ebp - 8]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x24]
test byte [eax], 0x80
je 0x1006a75f
lea eax, [ebp - 0x14]
push eax
call fcn.10085120
add esp, 4
push 0
push 4
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0xc]
call fcn.10085f00
add esp, 0x10
jmp 0x1006a852
mov dword [esi], ebx
mov dword [esi + 4], 0
test byte [ecx], 0x80
je 0x1006a791
push esi
call fcn.10085140
mov ecx, dword [ebp - 0x24]
add esp, 4
lea eax, [esi + 8]
mov dword [ebp - 0xc], eax
test ebx, ebx
je 0x1006a82a
mov eax, dword [ebp - 8]
mov edi, dword [ebp - 0xc]
add eax, 8
mov dword [ebp - 0x30], eax
mov esi, eax
jmp 0x1006a7b3
mov ecx, dword [ebp - 0x24]
mov ax, word [esi - 8]
mov word [edi], ax
test byte [ecx], 0x80
je 0x1006a7cb
push edi
call fcn.10085180
mov ecx, dword [ebp - 0x24]
add esp, 4
mov ax, word [esi - 6]
add edi, 2
mov word [edi], ax
test byte [ecx], 0x80
je 0x1006a7e3
push edi
call fcn.10085180
add esp, 4
push 0
push 8
add edi, 2
push esi
push edi
call fcn.10085f00
mov eax, dword [ebp - 0x24]
add esp, 0x10
test byte [eax], 0x80
je 0x1006a805
push edi
call fcn.10085140
add esp, 4
push 0
push 8
lea eax, [esi + 8]
add edi, 8
push eax
push edi
call fcn.10085f00
add esp, 0x10
add edi, 8
add esi, 0x20
sub ebx, 1
jne 0x1006a7b0
mov dword [ebp - 0xc], edi
mov edi, dword [ebp + 8]
mov ebx, dword [ebp - 0xc]
lea eax, [edi + 0x18]
mov esi, dword [ebp - 8]
push 0
push 8
push eax
push ebx
call fcn.10085f00
mov eax, dword [ebp - 0x24]
add esp, 0x10
test byte [eax], 0x80
je 0x1006a852
push ebx
call fcn.10085140
add esp, 4
push esi
push edi
call fcn.1007fc60
push dword [edi + 0x14]
push dword [edi + 0x10]
push edi
call fcn.10058d20
mov ebx, dword [ebp - 0x1c]
add esp, 0x14
test eax, eax
je 0x1006a8e2
mov esi, dword [edi + 0x350]
mov ecx, esi
push 0
push dword [ebp - 0x2c]
push ebx
push dword [edi + 0x348]
call dword [0x101b0250]
call esi
add esp, 0x10
cmp eax, dword [ebp - 0x2c]
jne 0x1006a8e2
test edx, edx
jne 0x1006a8e2
push ebx
push edi
call fcn.1007fc60
add esp, 8
cmp dword [ebp + 0x10], 0
je 0x1006a8d6
push edi
call fcn.1005a6e0
mov ecx, dword [ebp - 0x24]
add esp, 4
mov esi, dword [edi + 0x2e0]
and dword [ecx], 0xfffffff7
and dword [ecx], 0xffdfffff
mov ecx, esi
push edi
call dword [0x101b0250]
call esi
push edi
call fcn.1005a510
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.IO_error_writing_directory
mov eax, edi
push str.TIFFWriteDirectorySec
push eax
call fcn.1006c5e0
push ebx
push edi
call fcn.1007fc60
add esp, 0x14
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret