Function at 0x1006d6d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xc8
xor eax, eax
mov dword [esp + 8], edx
cmp dword [ebp + 0x18], eax
push esi
push edi
mov edi, ecx
mov dword [esp + 0xac], eax
mov dword [esp + 0xa4], eax
setne byte [esp + 0xf]
mov dword [esp + 0xa8], eax
mov dword [esp + 0x8c], eax
mov esi, dword [edi + 8]
mov dword [esp + 0x94], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x84], eax
mov eax, dword [edi]
mov dword [esp + 0x14], edi
mov dword [esp + 0x80], 0
mov dword [esp + 0x9c], 0
mov byte [esp + 0x5b], 0
mov dword [esp + 0xa0], eax
mov dword [esp + 0x78], esi
test esi, esi
jne 0x1006d76d
cmp dword [edi + 0x74], esi
jne 0x1006d75e
test byte [eax + 0x4c], 8
jne 0x1006d75e
mov byte [edi + 0x17], 1
call fcn.10039b20
mov edx, dword [esp + 0x10]
mov esi, eax
mov dword [esp + 0x78], esi
movsx eax, word [edx + 0x2a]
mov ecx, dword [edx + 0x24]
mov dword [esp + 0x18], eax
test cl, cl
js 0x1006d791
mov dword [esp + 0x4c], 0
mov dword [esp + 0x98], 1
jmp 0x1006d7c7
mov eax, dword [edx + 8]
mov dword [esp + 0x4c], eax
test eax, eax
je 0x1006d7bc
mov esi, eax
mov edi, edi
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x1006d7b0
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x1006d7a0
mov dword [esp + 0x4c], esi
mov esi, dword [esp + 0x78]
mov eax, dword [esp + 0x4c]
movzx eax, word [eax + 0x32]
mov dword [esp + 0x98], eax
test ecx, 0x800
je 0x1006dafb
xor eax, eax
xor edi, edi
mov dword [esp + 0x54], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x50], edi
mov ecx, dword [esp + 0x18]
xor edx, edx
mov dword [esp + 0x40], edx
test ecx, ecx
jle 0x1006daa8
mov eax, dword [esp + 0x18]
xor edi, edi
mov dword [esp + 0x6c], edi
nop
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 4]
add ecx, edi
mov dword [esp + 0x3c], ecx
movzx edi, byte [ecx + 0xc]
test edi, edi
je 0x1006da7e
mov eax, dword [esp + 0x10]
movsx eax, word [eax + 0x28]
cmp edx, eax
je 0x1006da7a
movzx eax, word [ecx + 0x10]
and eax, 0x60
je 0x1006d842
cmp dword [esp + 0x54], 0
jne 0x1006d842
inc dword [esp + 0x50]
jmp 0x1006da7a
cmp dword [ebp + 0x2c], 0
mov ecx, dword [esp + 0x3c]
je 0x1006d861
mov ecx, dword [ebp + 0x2c]
cmp dword [ecx + edx*4], 0
mov ecx, dword [esp + 0x3c]
jge 0x1006d861
test eax, eax
je 0x1006da7a
cmp byte [ebp + 0x20], 0xb
mov edx, dword [esp + 0x40]
je 0x1006d888
movzx edi, byte [ebp + 0x20]
cmp edi, 5
jne 0x1006d892
cmp dword [esp + 0x54], 0
jne 0x1006d881
cmp dword [ecx + 4], 0
jne 0x1006d8a1
mov edi, 2
jmp 0x1006d8a1
cmp edi, 0xb
jne 0x1006d86f
mov edi, 2
cmp dword [esp + 0x54], 0
je 0x1006d8a1
test eax, eax
je 0x1006da7a
mov ecx, dword [esp + 0x10]
call fcn.1005d340
mov edx, dword [ebp + 0x14]
cwde
inc edx
add edx, eax
lea eax, [edi - 1]
mov dword [esp + 0x20], edx
cmp eax, 4
ja case.0x1006d8c1.4
jmp dword [eax*4 + 0x1006fad8]
push edx
mov edx, 0x33
mov ecx, esi
call fcn.10039f90
mov edi, dword [esp + 0x24]
add esp, 4
mov ecx, dword [esp + 0x14]
inc dword [esp + 0x5c]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x3c]
push edi
mov eax, dword [eax + 4]
mov edx, eax
mov dword [esp + 0x64], eax
call fcn.100540b0
mov edx, eax
add esp, 4
cmp edx, edi
je 0x1006d92e
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 8]
test ecx, ecx
je 0x1006d92e
mov eax, dword [esp + 0x60]
push edi
push edx
mov eax, dword [eax + 4]
and eax, 0x200000
neg eax
sbb al, al
add al, 0x4e
movzx edx, al
call fcn.10039ff0
add esp, 8
mov ecx, dword [esp + 0x44]
mov edx, dword [esi + 0x6c]
test ecx, ecx
jns 0x1006d93c
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x1006d951
mov eax, 0x100d03e4
mov dword [eax + 8], edx
jmp 0x1006da7a
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
jmp 0x1006da7a
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x74]
test eax, eax
cmovne ecx, eax
mov byte [ecx + 0x15], 1
mov eax, dword [esp + 0x3c]
push dword [eax]
mov eax, dword [esp + 0x14]
push dword [eax]
push 0x100cb204
push dword [esp + 0xac]
call fcn.1001b6e0
mov ecx, dword [esi + 0x6c]
add esp, 0x10
mov edx, dword [esp + 0x20]
mov dword [esp + 0x44], eax
cmp dword [esi + 0x70], ecx
jg 0x1006d9bb
push edx
push edi
push 0x513
mov edx, 0x43
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006d9e6
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], 0x513
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi]
mov edx, dword [esp + 0x44]
cmp byte [ecx + 0x51], 0
je 0x1006da02
push edx
mov edx, 0xfffffff9
call fcn.1003aba0
add esp, 4
jmp 0x1006da14
mov eax, dword [esi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x68]
mov byte [eax + ecx*4 - 0x13], 0xf9
mov dword [eax + ecx*4 - 4], edx
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x1006da7a
lea ecx, [eax + eax*4]
mov edx, 1
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x1006da7a
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006da4c
push 0
push dword [ebp + 0x24]
mov ecx, esi
push edx
mov edx, 0x32
call fcn.10039e80
add esp, 0xc
jmp 0x1006da7a
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp + 0x24]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x40]
mov edi, dword [esp + 0x6c]
inc ecx
add edi, 0x14
mov dword [esp + 0x40], ecx
mov dword [esp + 0x6c], edi
mov edx, ecx
cmp ecx, eax
jl 0x1006d800
mov eax, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x5c]
test edi, edi
jne 0x1006dab4
test edx, edx
je 0x1006daf3
test eax, eax
jne 0x1006daf3
mov eax, 1
mov dword [esp + 0x54], eax
test edx, edx
jle 0x1006d7e7
mov edx, dword [esp + 0x10]
test byte [edx + 0x24], 0x60
je 0x1006d7e7
mov ecx, dword [esp + 0x14]
push edx
mov edx, dword [ebp + 0x14]
lea edx, [edx + 1]
call fcn.1006bf10
mov eax, dword [esp + 0x58]
add esp, 4
jmp 0x1006d7e3
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ecx, dword [edx + 0x18]
mov dword [esp + 0x50], ecx
test ecx, ecx
je 0x1006dd9b
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x20]
and eax, 0x200
or eax, 0
jne 0x1006dd9b
or eax, 0xffffffff
sub eax, dword [ebp + 0x14]
mov dword [edi + 0x34], eax
mov al, byte [ebp + 0x20]
cmp al, 0xb
je 0x1006db3b
movzx eax, al
mov dword [esp + 0x3c], eax
jmp 0x1006db43
mov dword [esp + 0x3c], 2
xor edx, edx
mov dword [esp + 0x40], edx
cmp dword [ecx], edx
jle 0x1006dd94
mov edi, dword [ebp + 0x2c]
lea eax, [ecx + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x5c], 0xfffd
mov ecx, dword [eax - 4]
mov dword [esp + 0x60], ecx
test edi, edi
je 0x1006dbe0
xorps xmm0, xmm0
mov dword [esp + 0xc8], 0
xor eax, eax
movdqa xmmword [esp + 0xb0], xmm0
movq qword [esp + 0xc0], xmm0
mov word [esp + 0xc4], ax
mov dword [esp + 0xb4], 0x1006d690
mov dword [esp + 0xc8], edi
test ecx, ecx
je 0x1006dbcc
mov edx, ecx
lea ecx, [esp + 0xb0]
call fcn.1004bd50
mov ax, word [esp + 0xc4]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x40]
cmp byte [ebp + 0x1c], 0
jne 0x1006dbd7
and ax, word [esp + 0x5c]
test ax, ax
je 0x1006dd74
mov eax, dword [esp + 0x14]
push 0x10
dec dword [eax + 0x38]
mov edi, dword [eax + 0x38]
push edi
push ecx
push eax
mov dword [esp + 0x7c], edi
call fcn.10055520
mov edx, dword [esp + 0x4c]
add esp, 0x10
cmp edx, 4
jne 0x1006dc5e
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006dc27
push 0
push dword [ebp + 0x24]
mov edx, 0xb
mov ecx, esi
push 0
call fcn.10039e80
add esp, 0xc
jmp 0x1006dd4a
mov edx, dword [ebp + 0x24]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x1006dd4a
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov dword [esp + 0x44], eax
test eax, eax
jne 0x1006dc76
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x14]
cmp edx, 5
mov eax, 2
cmove edx, eax
mov dword [esp + 0x3c], edx
mov edi, dword [ecx + 8]
test edi, edi
jne 0x1006dcb0
cmp dword [ecx + 0x74], edi
jne 0x1006dca1
mov eax, dword [ecx]
test byte [eax + 0x4c], 8
jne 0x1006dca1
mov byte [ecx + 0x17], 1
call fcn.10039b20
mov edx, dword [esp + 0x3c]
mov edi, eax
mov ecx, dword [esp + 0x14]
cmp edx, 2
jne 0x1006dcc1
mov eax, dword [ecx + 0x74]
test eax, eax
cmovne ecx, eax
mov byte [ecx + 0x15], 1
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x60], ecx
cmp dword [edi + 0x70], ecx
jg 0x1006dce6
push 0
push edx
push 0x113
mov edx, 0x44
mov ecx, edi
call fcn.10039e80
add esp, 0xc
jmp 0x1006dd1d
mov esi, dword [esp + 0x78]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x44
mov dword [eax + ecx*4 + 4], 0x113
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x60]
push 0
push dword [esp + 0x48]
mov edx, eax
mov ecx, edi
call fcn.1003ae40
mov eax, dword [edi + 0x6c]
add esp, 8
test eax, eax
jle 0x1006dd46
lea ecx, [eax + eax*4]
mov edx, 3
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov edi, dword [esp + 0x6c]
mov ecx, dword [esi + 0xc]
not edi
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x1006dd64
push edi
mov edx, esi
call fcn.1003a710
add esp, 4
jmp 0x1006dd6d
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x6c]
mov dword [ecx + edi*4], eax
mov edi, dword [ebp + 0x2c]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x50]
inc edx
mov eax, dword [esp + 0x20]
add eax, 0x14
mov dword [esp + 0x40], edx
mov dword [esp + 0x20], eax
cmp edx, dword [ecx]
jl 0x1006db63
mov edi, dword [esp + 0x14]
mov dword [edi + 0x34], 0
mov edx, dword [ebp + 0x30]
test edx, edx
je 0x1006de26
cmp dword [edx], 0
jne 0x1006ddb8
mov byte [ebp + 0x20], 4
mov dword [ebp + 0x30], 0
jmp 0x1006de26
mov eax, dword [edx + 0x10]
mov dword [esp + 0x9c], eax
test eax, eax
je 0x1006de26
mov edx, dword [esi + 0x6c]
mov dword [esp + 0xa4], edx
cmp dword [esi + 0x70], edx
jg 0x1006ddf3
push 0
push 0
push 0
mov edx, 0xb
mov ecx, esi
call fcn.10039e80
add esp, 0xc
mov dword [esp + 0xa4], eax
jmp 0x1006de26
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xa0]
xor edx, edx
mov ecx, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
mov dword [esp + 0x64], eax
mov eax, ecx
and eax, 0x6000
or eax, edx
jne 0x1006de51
mov dword [esp + 0x5c], eax
mov dword [esp + 0x74], edx
jmp 0x1006dfb8
and ecx, 0x2000
or ecx, 0
je 0x1006def1
mov ecx, dword [esp + 0x14]
xor edi, edi
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
and eax, 0x40000
or eax, edi
je 0x1006de7f
mov edx, dword [esp + 0x10]
call fcn.10081a10
mov edx, eax
mov ecx, edx
test edx, edx
je 0x1006de98
cmp byte [ecx + 8], 0x7e
jne 0x1006de91
movzx eax, byte [ecx + 9]
or edi, eax
mov ecx, dword [ecx + 0x20]
test ecx, ecx
jne 0x1006de85
xor eax, eax
test edi, edi
mov edi, dword [esp + 0x14]
cmovne eax, edx
mov dword [esp + 0x5c], eax
test eax, eax
jne 0x1006df4c
mov eax, dword [edi]
mov eax, dword [eax + 0x20]
and eax, 0x4000
or eax, 0
je 0x1006dee4
mov eax, dword [esp + 0x10]
push 0
mov ecx, dword [eax + 0x48]
mov edx, dword [eax]
add ecx, 0x38
call fcn.1001df00
add esp, 4
cmp dword [eax + 8], 0
jne 0x1006df4c
mov eax, dword [esp + 0x10]
cmp dword [eax + 0x10], 0
jne 0x1006df4c
mov dword [esp + 0x74], 0
jmp 0x1006dfb8
mov eax, dword [edi]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x74], edx
mov eax, dword [eax + 0x20]
and eax, 0x4000
or eax, 0
je 0x1006df48
mov eax, dword [esp + 0x10]
push 0
mov ecx, dword [eax + 0x48]
mov edx, dword [eax]
add ecx, 0x38
call fcn.1001df00
add esp, 4
cmp dword [eax + 8], 0
jne 0x1006df3f
mov ecx, dword [esp + 0x10]
cmp dword [ecx + 0x10], 0
jne 0x1006df3f
mov dword [esp + 0x74], 0
jmp 0x1006dfbc
mov edx, 1
mov dword [esp + 0x74], edx
test edx, edx
je 0x1006dfb8
inc dword [edi + 0x2c]
mov ecx, dword [esi + 0x6c]
mov edx, dword [edi + 0x2c]
mov dword [esp + 0x74], edx
cmp dword [esi + 0x70], ecx
jg 0x1006df74
push 0
push edx
push 0
mov edx, 0x45
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006dfa7
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x78]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
dec dword [edi + 0x38]
mov eax, dword [edi + 0x38]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
cmp byte [ebp + 0x1c], 0
je 0x1006e466
mov eax, dword [esp + 0x4c]
test eax, eax
jne 0x1006e466
dec dword [edi + 0x38]
cmp byte [ebp + 0x20], 0xb
mov edx, dword [edi + 0x38]
movzx eax, byte [ecx + 0x32]
mov dword [esp + 0x40], edx
je 0x1006dfec
movzx eax, byte [ebp + 0x20]
jmp 0x1006dff7
cmp eax, 0xb
mov edi, 2
cmove eax, edi
mov edi, dword [ebp + 0x30]
mov dword [esp + 0x20], eax
test edi, edi
je 0x1006e01d
cmp dword [edi + 0x10], 0
jne 0x1006e01d
xor eax, eax
cmp dword [edi + 8], eax
setne al
lea eax, [eax*2 + 4]
mov dword [esp + 0x20], eax
jmp 0x1006e08d
cmp eax, 5
jne 0x1006e08d
cmp byte [ebp + 0x20], al
je 0x1006e08d
cmp dword [ecx + 8], 0
je 0x1006e08d
mov edx, dword [esi + 0x6c]
cmp dword [esi + 0x70], edx
jg 0x1006e04c
push 0
push 0
push 0
lea edx, [eax + 6]
mov ecx, esi
call fcn.10039e80
add esp, 0xc
mov edx, eax
jmp 0x1006e07f
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [edx + 1]
mov edx, dword [esp + 0x40]
mov dword [esp + 0xa8], eax
cmp byte [esp + 0xf], 0
je 0x1006e0fc
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006e0b8
push dword [ebp + 0x18]
mov ecx, esi
push edx
push dword [ebp + 0x14]
mov edx, 0x35
call fcn.10039e80
mov edx, dword [esp + 0x4c]
add esp, 0xc
jmp 0x1006e0e5
mov edi, dword [ebp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp + 0x18]
mov dword [eax + ecx*4], 0x35
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x1006e0fc
lea ecx, [eax + eax*4]
mov edi, 0x90
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], di
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006e11f
push dword [ebp + 0x14]
mov ecx, esi
push edx
push dword [ebp + 0xc]
mov edx, 0x20
call fcn.10039e80
mov edx, dword [ebp + 0x14]
add esp, 0xc
jmp 0x1006e14c
mov edi, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [ebp + 0x14]
mov dword [eax + ecx*4], 0x20
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edi, dword [esp + 0x20]
lea eax, [edi - 1]
cmp eax, 5
ja case.default.0x1006e15c
jmp dword [eax*4 + 0x1006faec]
cmp dword [esp + 0x74], 0
je 0x1006e1cf
mov edi, dword [esp + 0x14]
mov ecx, edi
push 0xffffffffffffffff
push 1
push 5
mov eax, dword [edi + 0x74]
test eax, eax
push 0
push 1
push edx
push dword [ebp + 0x10]
mov edx, dword [esp + 0x2c]
cmovne ecx, eax
push dword [ebp + 0xc]
push dword [esp + 0x7c]
mov byte [ecx + 0x14], 1
mov ecx, edi
call fcn.10064f50
add esp, 0x24
mov edx, 0x52
mov ecx, esi
push 1
push dword [esp + 0x78]
call fcn.10039ff0
add esp, 8
mov dword [esp + 0x84], 1
mov dword [esp + 0x80], 1
jmp 0x1006e3a6
mov edx, dword [esp + 0x10]
cmp dword [edx + 8], 0
je 0x1006e1ff
mov edi, dword [esp + 0x14]
mov ecx, edi
push 0xffffffffffffffff
push 0
push dword [ebp + 0x10]
mov eax, dword [edi + 0x74]
test eax, eax
push dword [ebp + 0xc]
cmovne ecx, eax
mov byte [ecx + 0x14], 1
mov ecx, edi
call fcn.100653a0
add esp, 0x10
mov dword [esp + 0x80], 1
jmp 0x1006e3a6
push dword [ebp + 0xc]
mov edx, dword [ebp + 0x30]
mov ecx, dword [esp + 0x18]
push 0
push dword [esp + 0x18]
call fcn.10086480
add esp, 0xc
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006e24a
push 0
push dword [ebp + 0x24]
mov edx, 0xb
mov ecx, esi
push 0
call fcn.10039e80
add esp, 0xc
jmp 0x1006e3a6
mov edx, dword [ebp + 0x24]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x1006e3a6
mov edi, 2
mov edx, dword [esp + 0x10]
movzx eax, word [edx + 0x28]
test ax, ax
js 0x1006e2bc
cwde
lea ecx, [eax + eax*4]
mov eax, dword [edx + 4]
push dword [eax + ecx*4]
mov eax, dword [esp + 0x18]
push dword [edx]
push 0x100cac24
push dword [eax]
call fcn.1001b6e0
add esp, 0x10
mov dword [esp + 0x20], 0x613
jmp 0x1006e2d9
push dword [edx]
mov eax, dword [esp + 0x18]
push str._s.rowid
push dword [eax]
call fcn.1001b6e0
add esp, 0xc
mov dword [esp + 0x20], 0xa13
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x44], eax
mov edx, dword [ecx + 8]
mov dword [esp + 0x3c], edx
test edx, edx
jne 0x1006e30c
cmp dword [ecx + 0x74], edx
jne 0x1006e2fd
mov eax, dword [ecx]
test byte [eax + 0x4c], 8
jne 0x1006e2fd
mov byte [ecx + 0x17], 1
call fcn.10039b20
mov ecx, dword [esp + 0x14]
mov edx, eax
mov dword [esp + 0x3c], edx
cmp edi, 2
jne 0x1006e31d
mov eax, dword [ecx + 0x74]
test eax, eax
cmovne ecx, eax
mov byte [ecx + 0x15], 1
mov ecx, dword [edx + 0x6c]
mov dword [esp + 0x60], ecx
cmp dword [edx + 0x70], ecx
jg 0x1006e346
mov edx, dword [esp + 0x20]
push 0
push edi
mov edi, dword [esp + 0x44]
mov ecx, edi
push edx
mov edx, 0x44
call fcn.10039e80
add esp, 0xc
jmp 0x1006e37d
lea eax, [ecx + 1]
mov dword [edx + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edx + 0x68]
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0x44
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x60]
push 0xfffffffffffffff9
push dword [esp + 0x48]
mov edx, eax
mov ecx, edi
call fcn.1003ae40
mov eax, dword [edi + 0x6c]
add esp, 8
test eax, eax
jle 0x1006e3a6
lea ecx, [eax + eax*4]
mov edx, 2
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x40]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x1006e3c4
push edx
mov edx, esi
call fcn.1003a710
add esp, 4
jmp 0x1006e3cd
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x6c]
mov dword [ecx + edx*4], eax
cmp dword [esp + 0xa8], 0
je 0x1006e466
mov edi, dword [esi + 0x6c]
mov dword [esp + 0x8c], edi
cmp dword [esi + 0x70], edi
jg 0x1006e408
push 0
push 0
push 0
mov edx, 0xb
mov ecx, esi
call fcn.10039e80
add esp, 0xc
mov dword [esp + 0x8c], eax
jmp 0x1006e43b
lea eax, [edi + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0xa8]
dec ecx
mov edx, dword [esi + 0x6c]
jns 0x1006e44b
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x1006e45a
mov eax, 0x100d03e4
jmp 0x1006e463
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], 0
mov eax, dword [edi + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1006e998
mov edx, dword [ebp + 8]
xor ecx, ecx
cmp dword [edx + ecx*4], 0
je 0x1006e984
mov ecx, dword [esp + 0x9c]
cmp ecx, dword [esp + 0x1c]
jne 0x1006e557
mov eax, dword [esp + 0xa4]
mov edi, dword [esi + 0x6c]
inc eax
mov dword [esp + 0x70], eax
mov dword [esp + 0xac], edi
cmp dword [esi + 0x70], edi
jg 0x1006e4da
push 0
push 0
push 0
mov edx, 0xb
mov ecx, esi
call fcn.10039e80
add esp, 0xc
mov dword [esp + 0xac], eax
jmp 0x1006e50d
lea eax, [edi + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xa4]
mov ecx, eax
mov edx, dword [esi + 0x6c]
test eax, eax
jns 0x1006e520
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x1006e53d
mov edi, dword [esp + 0x14]
mov eax, 0x100d03e4
mov ecx, dword [esp + 0x9c]
mov dword [eax + 8], edx
jmp 0x1006e565
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
mov edi, dword [esp + 0x14]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x9c]
jmp 0x1006e565
mov edi, dword [esp + 0x14]
dec dword [edi + 0x38]
mov eax, dword [edi + 0x38]
mov dword [esp + 0x70], eax
cmp byte [esp + 0x5b], 0
jne 0x1006e58e
test ecx, ecx
je 0x1006e576
cmp ecx, dword [esp + 0x1c]
jne 0x1006e58e
mov eax, dword [ebp + 0x14]
mov ecx, esi
mov edx, dword [esp + 0x10]
inc eax
push eax
call fcn.1006bd20
add esp, 4
mov byte [esp + 0x5b], 1
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp dword [eax + 0x24], 0
je 0x1006e666
mov eax, dword [ebp + 8]
mov edx, dword [eax + ecx*4]
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006e5c4
push 0
push edx
push 0
mov edx, 0x48
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006e5f7
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x78]
mov dword [eax + ecx*4], 0x48
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
or eax, 0xffffffff
sub eax, dword [ebp + 0x14]
mov dword [edi + 0x34], eax
mov eax, dword [esp + 0x1c]
mov edx, dword [eax + 0x24]
mov eax, dword [edi]
mov dword [esp + 0x44], eax
test edx, edx
je 0x1006e627
push 0
push 0
mov ecx, eax
call fcn.1004f8d0
mov edi, eax
add esp, 8
mov eax, dword [esp + 0x44]
jmp 0x1006e629
xor edi, edi
cmp byte [eax + 0x51], 0
jne 0x1006e646
push 0x10
push dword [esp + 0x74]
push edi
push dword [esp + 0x20]
call fcn.100558d0
mov eax, dword [esp + 0x54]
add esp, 0x10
test edi, edi
je 0x1006e653
mov edx, edi
mov ecx, eax
call fcn.1004f6f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [eax + 0x34], 0
mov eax, dword [esp + 0x1c]
mov edx, dword [ebp + 8]
xor edi, edi
mov edx, dword [edx + ecx*4]
xor ecx, ecx
inc edx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x54], edx
cmp di, word [eax + 0x34]
jae 0x1006e8d8
mov edi, edx
xor edx, edx
mov dword [esp + 0x48], edi
mov dword [esp + 0x40], edx
nop
mov eax, dword [eax + 4]
movsx ecx, word [eax + ecx*2]
cmp ecx, 0xfffffffe
jne 0x1006e7a8
mov ecx, dword [esp + 0x14]
or eax, 0xffffffff
sub eax, dword [ebp + 0x14]
mov edi, dword [ecx]
mov dword [ecx + 0x34], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x20], edi
mov eax, dword [eax + 0x28]
mov edx, dword [eax + edx + 4]
test edx, edx
je 0x1006e6d2
push 0
push 0
mov ecx, edi
call fcn.1004f8d0
add esp, 8
jmp 0x1006e6d4
xor eax, eax
cmp byte [edi + 0x51], 0
mov dword [esp + 0x3c], eax
jne 0x1006e783
mov ecx, dword [esp + 0x48]
mov edx, eax
push ecx
mov ecx, dword [esp + 0x18]
call fcn.100540b0
mov edx, eax
add esp, 4
cmp edx, dword [esp + 0x48]
je 0x1006e783
mov eax, dword [esp + 0x14]
mov edi, dword [eax + 8]
test edi, edi
je 0x1006e77f
mov ecx, dword [esp + 0x3c]
mov ecx, dword [ecx + 4]
and ecx, 0x200000
neg ecx
sbb cl, cl
add cl, 0x4e
movzx eax, cl
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x60], eax
cmp dword [edi + 0x70], ecx
jg 0x1006e745
mov ecx, dword [esp + 0x48]
push 0
push ecx
push edx
mov edx, eax
mov ecx, edi
call fcn.10039e80
add esp, 0xc
jmp 0x1006e77f
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x60]
mov byte [eax + 1], 0
mov byte [eax], cl
xor ecx, ecx
mov word [eax + 2], cx
mov ecx, dword [esp + 0x48]
mov dword [eax + 8], ecx
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x1006e794
mov edx, eax
mov ecx, edi
call fcn.1004f6f0
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x48]
mov dword [eax + 0x34], 0
jmp 0x1006e8ad
cmp ecx, 0xffffffff
je 0x1006e860
mov eax, dword [esp + 0x10]
movsx eax, word [eax + 0x28]
cmp ecx, eax
je 0x1006e860
mov eax, dword [esp + 0x10]
test byte [eax + 0x24], 0x20
je 0x1006e820
test cx, cx
js 0x1006e820
movsx ecx, cx
xor edi, edi
xor edx, edx
test ecx, ecx
jle 0x1006e7f3
mov eax, dword [eax + 4]
mov edi, ecx
add eax, 0x10
test byte [eax], 0x20
jne 0x1006e7e9
inc edx
add eax, 0x14
dec ecx
jne 0x1006e7e3
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
lea ecx, [edi + edi*4]
test byte [eax + ecx*4 + 0x10], 0x20
je 0x1006e817
mov eax, dword [esp + 0x10]
mov ax, word [eax + 0x2c]
sub ax, dx
add ax, di
mov edi, dword [esp + 0x48]
movzx eax, ax
jmp 0x1006e823
mov edi, dword [esp + 0x48]
movzx eax, dx
jmp 0x1006e823
movzx eax, cx
mov edx, dword [ebp + 0x14]
mov ecx, dword [esi + 0x6c]
inc edx
cwde
add edx, eax
cmp dword [esi + 0x70], ecx
jg 0x1006e847
push 0
push edi
push edx
mov edx, 0x4e
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006e8ad
mov edi, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x4e
jmp 0x1006e895
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006e87f
push 0
push edi
push dword [ebp + 0x14]
mov edx, 0x4f
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006e8ad
mov edx, dword [ebp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x4f
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 4], edx
mov eax, dword [esp + 0x1c]
inc edi
mov ecx, dword [esp + 0x44]
add dword [esp + 0x40], 0x14
inc ecx
mov edx, dword [esp + 0x40]
movzx eax, word [eax + 0x34]
cmp ecx, eax
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x48], edi
jl 0x1006e690
mov ecx, dword [esp + 0x18]
mov edx, dword [ebp + 8]
movzx edi, word [eax + 0x34]
mov edx, dword [edx + ecx*4]
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006e905
push edx
push edi
push dword [esp + 0x5c]
mov edx, 0x5b
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006e934
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x78]
mov dword [eax + ecx*4], 0x5b
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0xf], 0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x4c]
je 0x1006e9d7
cmp edx, ecx
jne 0x1006e9d7
cmp byte [ebp + 0x1c], 0
jne 0x1006e9d7
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x70]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x1006e9cc
push edx
mov edx, esi
call fcn.1003a710
add esp, 4
mov edi, dword [esp + 0x10]
mov edx, dword [ebp + 8]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x14]
inc ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
test eax, eax
jne 0x1006e486
mov edx, dword [esp + 0xa8]
test edx, edx
je 0x1006f70f
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006f6b0
push 0
push edx
push 0
mov edx, 0xb
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006f6e3
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x6c]
mov dword [ecx + edx*4], eax
jmp 0x1006e975
movzx eax, byte [ecx + 0x36]
test eax, eax
je 0x1006e959
cmp byte [ebp + 0x20], 0xb
je 0x1006e9ef
movzx eax, byte [ebp + 0x20]
jmp 0x1006e9fa
cmp eax, 0xb
mov edi, 2
cmove eax, edi
mov dword [esp + 0x20], eax
cmp dword [esp + 0x9c], ecx
jne 0x1006ea1d
mov edi, dword [ebp + 0x30]
xor eax, eax
cmp dword [edi + 8], eax
setne al
lea eax, [eax*2 + 4]
mov dword [esp + 0x20], eax
cmp dword [esp + 0x18], 0
jne 0x1006eae5
cmp dword [ecx + 0x14], 0
jne 0x1006eae5
cmp edx, ecx
jne 0x1006eae5
cmp eax, 5
jne 0x1006eae5
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x20]
and eax, 0x2000
mov dword [esp + 0x60], eax
mov eax, 0
jne 0x1006ea61
test eax, eax
je 0x1006eaa6
mov ecx, dword [esp + 0x14]
xor edx, edx
xor edi, edi
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
and eax, 0x40000
or eax, edx
je 0x1006ea82
mov edx, dword [esp + 0x10]
call fcn.10081a10
mov edx, eax
mov ecx, edx
test edx, edx
je 0x1006ea9b
cmp byte [ecx + 8], 0x7e
jne 0x1006ea94
movzx eax, byte [ecx + 9]
or edi, eax
mov ecx, dword [ecx + 0x20]
test ecx, ecx
jne 0x1006ea88
xor eax, eax
test edi, edi
cmovne eax, edx
test eax, eax
jne 0x1006eae5
mov eax, dword [esp + 0xa0]
mov eax, dword [eax + 0x20]
and eax, 0x4000
mov dword [esp + 0x60], eax
mov eax, 0
jne 0x1006eac4
test eax, eax
je 0x1006eb24
mov edi, dword [esp + 0x10]
cmp dword [edi + 0x10], eax
jne 0x1006eae5
mov ecx, dword [edi + 0x48]
mov edx, dword [edi]
add ecx, 0x38
push 0
call fcn.1001df00
add esp, 4
cmp dword [eax + 8], 0
je 0x1006eb28
mov eax, dword [esp + 0x1c]
mov edx, dword [esi + 0x6c]
mov dword [esp + 0x40], edx
movzx edi, word [eax + 0x32]
mov dword [esp + 0x60], edi
cmp dword [esi + 0x70], edx
jg 0x1006eb57
push dword [esp + 0x54]
mov eax, dword [esp + 0x1c]
mov edx, 0x1c
push dword [esp + 0x74]
add eax, dword [ebp + 0x10]
mov ecx, esi
push eax
call fcn.10039e80
mov edx, eax
add esp, 0xc
mov dword [esp + 0x40], edx
jmp 0x1006eb99
mov edi, dword [esp + 0x10]
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x70]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x1006eb49
push edx
mov edx, esi
call fcn.1003a710
add esp, 4
jmp 0x1006e979
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x6c]
mov dword [ecx + edx*4], eax
jmp 0x1006e979
mov edi, dword [esp + 0x60]
lea eax, [edx + 1]
lea ecx, [edx + edx*4]
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x68]
mov edx, dword [esp + 0x18]
add edx, dword [ebp + 0x10]
mov esi, dword [esp + 0x78]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x70]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4 + 0xc], edx
mov edx, dword [esp + 0x40]
mov dword [eax + ecx*4], 0x1c
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
jne 0x1006ebb0
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
mov byte [eax + ecx*4 + 1], 0xfd
mov dword [eax + ecx*4 + 0x10], edi
mov ecx, dword [esp + 0x4c]
cmp dword [esp + 0x1c], ecx
jne 0x1006ebc4
mov edx, dword [esp + 0x54]
mov dword [esp + 0x48], edx
jmp 0x1006ec33
mov eax, dword [esp + 0x98]
mov edi, dword [esp + 0x14]
cmp eax, 1
jne 0x1006ebfc
mov al, byte [edi + 0x13]
test al, al
jne 0x1006ebe7
inc dword [edi + 0x2c]
mov edx, dword [edi + 0x2c]
mov dword [esp + 0x48], edx
jmp 0x1006ec33
dec al
mov byte [edi + 0x13], al
movzx eax, al
mov edx, dword [edi + eax*4 + 0x94]
mov dword [esp + 0x48], edx
jmp 0x1006ec33
mov ecx, dword [edi + 0x1c]
mov edx, dword [edi + 0x20]
mov dword [esp + 0x48], edx
cmp eax, ecx
jg 0x1006ec1b
add eax, edx
sub ecx, dword [esp + 0x98]
mov dword [edi + 0x20], eax
mov dword [edi + 0x1c], ecx
jmp 0x1006ec2f
mov eax, dword [edi + 0x2c]
lea edx, [eax + 1]
add eax, dword [esp + 0x98]
mov dword [esp + 0x48], edx
mov dword [edi + 0x2c], eax
mov ecx, dword [esp + 0x4c]
cmp byte [esp + 0xf], 0
jne 0x1006ec45
cmp dword [esp + 0x20], 5
jne 0x1006f072
mov eax, dword [esp + 0x10]
test byte [eax + 0x24], 0x80
jne 0x1006ed2f
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006ec7b
mov eax, dword [esp + 0x18]
mov ecx, esi
add eax, dword [ebp + 0x10]
push 0
push edx
push eax
mov edx, 0x86
call fcn.10039e80
mov edx, dword [esp + 0x54]
add esp, 0xc
jmp 0x1006ecb5
mov edi, dword [esp + 0x18]
lea eax, [ecx + 1]
add edi, dword [ebp + 0x10]
lea ecx, [ecx + ecx*4]
mov edx, dword [esp + 0x48]
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x78]
mov dword [eax + ecx*4], 0x86
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0xf], 0
je 0x1006f072
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006ece1
push dword [ebp + 0x18]
mov ecx, esi
push dword [esp + 0x74]
push edx
mov edx, 0x35
call fcn.10039e80
add esp, 0xc
jmp 0x1006ed0f
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x70]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [ebp + 0x18]
mov dword [eax + ecx*4], 0x35
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x1006f072
lea ecx, [eax + eax*4]
mov edx, 0x90
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x1006f072
mov eax, dword [esp + 0x1c]
cmp eax, ecx
je 0x1006ee21
xor esi, esi
xor edi, edi
cmp si, word [ecx + 0x32]
mov esi, dword [esp + 0x78]
mov dword [esp + 0x50], edi
jae 0x1006ee21
mov dword [esp + 0x3c], edx
jmp 0x1006ed64
mov eax, dword [esp + 0x1c]
movzx edx, word [eax + 0x34]
xor ecx, ecx
test edx, edx
jle 0x1006ed8d
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + 4]
movzx edi, word [eax + edi*2]
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 4]
cmp di, word [eax]
je 0x1006edbe
inc ecx
add eax, 2
cmp ecx, edx
jl 0x1006ed80
or eax, 0xffffffff
mov ecx, dword [esi + 0x6c]
movsx edx, ax
mov dword [esp + 0x60], edx
cmp dword [esi + 0x70], ecx
jg 0x1006edc3
mov edi, dword [esp + 0x3c]
mov ecx, esi
mov eax, dword [esp + 0x18]
add eax, dword [ebp + 0x10]
push edi
push edx
push eax
mov edx, 0x59
call fcn.10039e80
add esp, 0xc
jmp 0x1006edfd
movzx eax, cx
jmp 0x1006ed90
mov edi, dword [esp + 0x18]
lea eax, [ecx + 1]
add edi, dword [ebp + 0x10]
lea ecx, [ecx + ecx*4]
mov edx, dword [esp + 0x60]
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x78]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0x59
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x4c]
inc edi
mov ecx, dword [esp + 0x50]
inc ecx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x50], ecx
mov edi, ecx
movzx eax, word [eax + 0x32]
cmp ecx, eax
jl 0x1006ed60
mov ecx, dword [esp + 0x4c]
mov dl, byte [esp + 0xf]
test dl, dl
je 0x1006f076
movzx ecx, word [ecx + 0x32]
mov eax, dword [esi + 0x6c]
mov edx, dword [esp + 0x48]
add eax, ecx
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x6c], 0x34
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
cmove edx, dword [esp + 0x54]
xor edi, edi
mov dword [esp + 0x60], edx
mov dword [esp + 0x3c], edi
test ecx, ecx
jle 0x1006f072
jmp 0x1006ee70
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + 0x20]
mov edi, dword [eax + edi*4]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov dh, byte [ecx + 0x4e]
mov dl, byte [ecx + 0xa5]
mov byte [esp + 0x93], dh
mov byte [esp + 0x8b], dl
test edi, edi
je 0x1006eebf
movzx eax, dl
mov edx, edi
push eax
call fcn.10063970
mov dl, byte [esp + 0x8f]
add esp, 4
mov dh, byte [esp + 0x93]
mov ecx, eax
mov dword [esp + 0x50], eax
jmp 0x1006eec6
mov ecx, dword [ecx + 8]
mov dword [esp + 0x50], ecx
test ecx, ecx
je 0x1006eeda
movzx eax, dh
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*4]
add ecx, 0xffffffec
mov dword [esp + 0x50], ecx
test dl, dl
jne 0x1006eefc
test ecx, ecx
je 0x1006eee8
cmp dword [ecx + 0xc], 0
jne 0x1006eefc
push edi
push ecx
mov ecx, dword [esp + 0x1c]
mov dl, dh
call fcn.10063a80
add esp, 8
mov dword [esp + 0x50], eax
mov edi, dword [esp + 0x4c]
mov eax, dword [esp + 0x3c]
mov ecx, dword [edi + 4]
movsx edx, word [ecx + eax*2]
movzx ecx, word [edi + 0x32]
dec ecx
cmp eax, ecx
jne 0x1006ef24
mov eax, dword [esp + 0x70]
mov dword [esp + 0x44], eax
mov dword [esp + 0x6c], 0x35
mov eax, dword [esp + 0x10]
test byte [eax + 0x24], 0x20
je 0x1006ef7d
test dx, dx
js 0x1006ef7d
movsx ecx, dx
xor edi, edi
test ecx, ecx
jle 0x1006ef56
mov eax, dword [eax + 4]
mov edx, ecx
add eax, 0x10
test byte [eax], 0x20
jne 0x1006ef4a
inc edi
add eax, 0x14
dec ecx
jne 0x1006ef44
mov eax, dword [esp + 0x10]
jmp 0x1006ef58
xor edx, edx
mov eax, dword [eax + 4]
lea ecx, [edx + edx*4]
test byte [eax + ecx*4 + 0x10], 0x20
je 0x1006ef78
mov eax, dword [esp + 0x10]
mov ax, word [eax + 0x2c]
sub ax, di
add ax, dx
movzx eax, ax
jmp 0x1006ef80
movzx eax, di
jmp 0x1006ef80
movzx eax, dx
mov edi, dword [ebp + 0x18]
mov edx, dword [esi + 0x6c]
inc edi
cwde
add edi, eax
cmp dword [esi + 0x70], edx
jg 0x1006efb3
mov eax, dword [esp + 0x3c]
mov ecx, esi
add eax, dword [esp + 0x60]
mov edx, dword [esp + 0x6c]
push eax
push dword [esp + 0x48]
push edi
call fcn.10039e80
mov edi, dword [esp + 0x48]
add esp, 0xc
mov edx, eax
jmp 0x1006eff2
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x3c]
mov dword [eax + ecx*4 + 0x10], 0
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x6c]
mov byte [ecx + 1], 0
mov byte [ecx], al
xor eax, eax
mov word [ecx + 2], ax
mov eax, dword [esp + 0x44]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x60]
add eax, edi
mov dword [ecx + 0xc], eax
mov ecx, dword [esi]
cmp byte [ecx + 0x51], 0
je 0x1006f00e
mov edx, dword [esp + 0x50]
push edx
mov edx, 0xfffffffe
call fcn.1003aba0
add esp, 4
jmp 0x1006f046
test edx, edx
jns 0x1006f016
mov edx, dword [esi + 0x6c]
dec edx
mov eax, dword [esi + 0x68]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov edx, dword [esp + 0x50]
je 0x1006f03b
push 0xfffffffffffffffe
push edx
mov edx, eax
mov ecx, esi
call fcn.1003ad60
add esp, 8
jmp 0x1006f046
test edx, edx
je 0x1006f046
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xfe
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x1006f05d
lea ecx, [eax + eax*4]
mov edx, 0x90
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov eax, dword [esp + 0x4c]
inc edi
mov dword [esp + 0x3c], edi
movzx eax, word [eax + 0x32]
cmp edi, eax
jl 0x1006ee70
mov dl, byte [esp + 0xf]
mov edi, dword [esp + 0x20]
lea eax, [edi - 1]
cmp eax, 5
ja case.0x1006f086.5
jmp dword [eax*4 + 0x1006fb04]
push dword [esp + 0x1c]
mov edx, edi
mov edi, dword [esp + 0x18]
mov ecx, edi
call fcn.10062c60
add esp, 4
jmp 0x1006f595
mov eax, dword [esp + 0x18]
add eax, dword [ebp + 0x10]
mov edi, dword [esp + 0x14]
mov ecx, edi
mov edx, dword [ebp + 0x30]
push eax
push dword [esp + 0x20]
push dword [esp + 0x18]
call fcn.10086480
add esp, 0xc
jmp 0x1006f0cd
mov edi, dword [esp + 0x14]
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006f0f0
push 0
push dword [ebp + 0x24]
mov edx, 0xb
mov ecx, esi
push 0
call fcn.10039e80
add esp, 0xc
jmp 0x1006f595
mov edx, dword [ebp + 0x24]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x1006f595
mov edi, dword [esi + 0x6c]
sub edi, dword [esp + 0x40]
cmp dword [esp + 0x74], 0
mov dword [esp + 0x80], edi
je 0x1006f153
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x74]
test eax, eax
cmovne ecx, eax
inc dword [esp + 0x84]
mov byte [ecx + 0x14], 1
cmp dword [esp + 0x5c], 0
je 0x1006f1b0
test dl, dl
je 0x1006f1b0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006f17e
push 0
push 0
push dword [ebp + 0xc]
mov edx, 0x9f
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006f1b0
mov edx, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x9f
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 0x10]
mov eax, dword [esp + 0x18]
add eax, edx
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x50]
cmp dword [esp + 0x20], eax
sete al
movzx eax, al
push eax
push 5
push 0
push dword [esp + 0xa8]
push dword [esp + 0x5c]
push edx
push dword [ebp + 0xc]
mov edx, dword [esp + 0x30]
push dword [esp + 0x7c]
call fcn.10064f50
add esp, 0x24
cmp dword [esp + 0x5c], 0
je 0x1006f250
cmp byte [esp + 0xf], 0
je 0x1006f250
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006f21e
push 0
push 0
push dword [ebp + 0xc]
mov edx, 0xa0
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006f250
mov edx, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xa0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x74]
test edx, edx
je 0x1006f586
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006f27a
push 0
push 1
push edx
mov edx, 0x52
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006f2b0
mov edi, dword [esp + 0x80]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x52
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 1
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x6c]
mov dword [esp + 0x6c], edx
cmp dword [esi + 0x70], edx
jg 0x1006f2d7
push 0
push 0
push 0
mov edx, 0xb
mov ecx, esi
call fcn.10039e80
add esp, 0xc
mov dword [esp + 0x6c], eax
jmp 0x1006f30a
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x7c]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x1006f328
push edx
mov edx, esi
call fcn.1003a710
add esp, 4
jmp 0x1006f331
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [esp + 0x14]
dec dword [eax + 0x38]
mov edx, dword [eax + 0x38]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x7c], edx
cmp dword [eax + 0x24], 0
je 0x1006f3ae
mov edx, dword [esp + 0x54]
mov ecx, dword [esi + 0x6c]
dec edx
cmp dword [esi + 0x70], ecx
jg 0x1006f378
push 0
push dword [esp + 0x80]
mov ecx, esi
push edx
mov edx, 0x32
call fcn.10039e80
mov edx, dword [esp + 0x88]
add esp, 0xc
jmp 0x1006f3ae
mov edi, dword [esp + 0x80]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [eax + ecx*4], 0x32
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test edi, edi
jle 0x1006f540
mov eax, dword [esp + 0x40]
mov ecx, eax
test eax, eax
jns 0x1006f3c4
mov ecx, dword [esi + 0x6c]
dec ecx
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x1006f3d3
mov eax, 0x100d03e4
jmp 0x1006f3dc
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
movdqu xmm0, xmmword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x20], eax
movd eax, xmm0
movdqa xmmword [esp + 0xb0], xmm0
cmp al, 0x86
je 0x1006f521
mov edi, dword [esi + 0x6c]
movzx ecx, al
mov dword [esp + 0x60], ecx
test byte [ecx + 0x100bb250], 1
mov ecx, dword [esp + 0xb8]
cmovne ecx, edx
shr eax, 8
movsx edx, al
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x44], edx
cmp dword [esi + 0x70], edi
jg 0x1006f44f
push dword [esp + 0xbc]
mov edx, dword [esp + 0x64]
push ecx
push dword [esp + 0xbc]
mov ecx, esi
call fcn.10039e80
mov edx, dword [esp + 0x50]
add esp, 0xc
mov edi, eax
jmp 0x1006f492
lea eax, [edi + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x60]
mov byte [ecx], al
xor eax, eax
mov word [ecx + 2], ax
mov eax, dword [esp + 0xb4]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0xbc]
mov dword [ecx + 0xc], eax
mov ecx, dword [esi]
cmp byte [ecx + 0x51], 0
je 0x1006f4ae
cmp edx, 0xfffffff4
je 0x1006f507
mov eax, dword [esp + 0x20]
push eax
call fcn.1003aba0
add esp, 4
jmp 0x1006f507
test edi, edi
jns 0x1006f4b6
mov edi, dword [esi + 0x6c]
dec edi
mov eax, dword [esi + 0x68]
lea ecx, [edi + edi*4]
lea edx, [eax + ecx*4]
mov eax, dword [esp + 0x44]
test eax, eax
jns 0x1006f4f7
cmp byte [edx + 1], 0
jne 0x1006f4f7
cmp eax, 0xfffffffd
jne 0x1006f4df
mov eax, dword [esp + 0x20]
mov dword [edx + 0x10], eax
mov byte [edx + 1], 0xfd
jmp 0x1006f507
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x1006f507
mov dword [edx + 0x10], ecx
mov byte [edx + 1], al
cmp eax, 0xfffffff4
jne 0x1006f507
inc dword [ecx + 0xc]
jmp 0x1006f507
push eax
mov eax, dword [esp + 0x24]
mov ecx, esi
push eax
call fcn.1003ad60
add esp, 8
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x1006f521
mov ecx, dword [esi + 0x68]
lea edx, [eax + eax*4]
mov ax, word [esp + 0xb2]
mov word [ecx + edx*4 - 0x12], ax
mov eax, dword [esp + 0x80]
inc dword [esp + 0x40]
dec eax
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x80], eax
test eax, eax
jg 0x1006f3b6
push dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov edx, 2
mov ecx, edi
call fcn.10062c60
mov ecx, dword [esp + 0x70]
add esp, 4
mov edx, dword [esi + 0x6c]
test ecx, ecx
jns 0x1006f565
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x1006f577
mov eax, 0x100d03e4
mov dword [eax + 8], edx
jmp 0x1006f58a
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
jmp 0x1006f58a
mov edi, dword [esp + 0x14]
mov dword [esp + 0x80], 1
mov eax, dword [esp + 0x9c]
cmp eax, dword [esp + 0x1c]
jne 0x1006f633
mov edx, dword [esp + 0xa4]
mov ecx, dword [esi + 0x6c]
inc edx
cmp dword [esi + 0x70], ecx
jg 0x1006f5cc
push 0
push edx
push 0
mov edx, 0xb
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006f5ff
mov edi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xac]
mov ecx, eax
mov edx, dword [esi + 0x6c]
test eax, eax
jns 0x1006f612
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x1006f624
mov eax, 0x100d03e4
mov dword [eax + 8], edx
jmp 0x1006f65a
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 8], edx
lea eax, [eax + ecx*4]
jmp 0x1006f65a
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x70]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x1006f651
push edx
mov edx, esi
call fcn.1003a710
add esp, 4
jmp 0x1006f65a
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x6c]
mov dword [ecx + edx*4], eax
mov ecx, dword [esp + 0x48]
cmp ecx, dword [esp + 0x54]
je 0x1006e975
mov eax, dword [esp + 0x98]
cmp eax, 1
jne 0x1006f69c
test ecx, ecx
je 0x1006e975
mov al, byte [edi + 0x13]
mov edx, dword [ebp + 8]
cmp al, 8
jae 0x1006f693
movzx eax, al
mov dword [edi + eax*4 + 0x94], ecx
inc byte [edi + 0x13]
mov edi, dword [esp + 0x10]
jmp 0x1006e97c
cmp eax, dword [edi + 0x1c]
jle 0x1006e975
mov dword [edi + 0x1c], eax
mov dword [edi + 0x20], ecx
jmp 0x1006e975
mov edi, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x8c]
mov edx, dword [esi + 0x6c]
test ecx, ecx
jns 0x1006f6f4
lea ecx, [edx - 1]
mov eax, dword [esi]
cmp byte [eax + 0x51], 0
je 0x1006f703
mov eax, 0x100d03e4
jmp 0x1006f70c
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
cmp dword [esp + 0x84], 0
je 0x1006fa3f
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006f743
push 0
push dword [esp + 0x80]
mov edx, 0x14
mov ecx, esi
push dword [esp + 0x7c]
call fcn.10039e80
add esp, 0xc
jmp 0x1006f776
mov edx, dword [esp + 0x74]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [eax + ecx*4], 0x14
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x4c], 0
jne 0x1006f9be
cmp byte [esp + 0xf], 0
je 0x1006f7f9
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006f7ae
push dword [ebp + 0x18]
mov edx, 0x35
mov ecx, esi
push dword [esp + 0x98]
push dword [ebp + 0x14]
call fcn.10039e80
add esp, 0xc
jmp 0x1006f7e2
mov edx, dword [ebp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x94]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [ebp + 0x18]
mov dword [eax + ecx*4], 0x35
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x1006f7f9
lea ecx, [eax + eax*4]
mov edx, 0x90
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006f81f
push dword [ebp + 0x14]
mov edx, 0x20
mov ecx, esi
push dword [esp + 0x98]
push dword [ebp + 0xc]
call fcn.10039e80
add esp, 0xc
jmp 0x1006f853
mov edx, dword [ebp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x94]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [ebp + 0x14]
mov dword [eax + ecx*4], 0x20
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
movzx eax, word [edi + 0x28]
test ax, ax
js 0x1006f888
cwde
lea ecx, [eax + eax*4]
mov eax, dword [edi + 4]
push dword [eax + ecx*4]
mov eax, dword [esp + 0x18]
push dword [edi]
push 0x100cac24
push dword [eax]
call fcn.1001b6e0
add esp, 0x10
mov dword [esp + 0x8c], 0x613
jmp 0x1006f8a8
push dword [edi]
mov eax, dword [esp + 0x18]
push str._s.rowid
push dword [eax]
call fcn.1001b6e0
add esp, 0xc
mov dword [esp + 0x8c], 0xa13
mov edx, dword [esp + 0x14]
mov dword [esp + 0x84], eax
mov edi, dword [edx + 8]
test edi, edi
jne 0x1006f8d8
cmp dword [edx + 0x74], edi
jne 0x1006f8cb
mov eax, dword [edx]
test byte [eax + 0x4c], 8
jne 0x1006f8cb
mov byte [edx + 0x17], 1
mov ecx, edx
call fcn.10039b20
mov edx, dword [esp + 0x14]
mov edi, eax
mov ecx, dword [edx + 0x74]
test ecx, ecx
cmovne edx, ecx
mov byte [edx + 0x15], 1
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x60], edx
cmp dword [edi + 0x70], edx
jg 0x1006f90e
push 0
push 2
push dword [esp + 0x94]
mov edx, 0x44
mov ecx, edi
call fcn.10039e80
add esp, 0xc
mov edx, eax
jmp 0x1006f948
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov edx, dword [esp + 0x8c]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x60]
mov dword [eax + ecx*4], 0x44
mov dword [eax + ecx*4 + 8], 2
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
cmp byte [ecx + 0x51], 0
je 0x1006f966
push dword [esp + 0x84]
mov edx, 0xfffffff9
call fcn.1003aba0
add esp, 4
jmp 0x1006f9a5
test edx, edx
jns 0x1006f96e
mov edx, dword [edi + 0x6c]
dec edx
mov eax, dword [edi + 0x68]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea edx, [eax + ecx*4]
jne 0x1006f992
mov eax, dword [esp + 0x84]
test eax, eax
je 0x1006f9a5
mov dword [edx + 0x10], eax
mov byte [edx + 1], 0xf9
jmp 0x1006f9a5
push 0xfffffffffffffff9
push dword [esp + 0x88]
mov ecx, edi
call fcn.1003ad60
add esp, 8
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x1006fa18
lea ecx, [eax + eax*4]
mov edx, 2
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x1006fa18
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1006f9e2
push 0
push dword [esp + 0x98]
mov edx, 0xb
mov ecx, esi
push 0
call fcn.10039e80
add esp, 0xc
jmp 0x1006fa18
mov edx, dword [esp + 0x94]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x7c]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x1006fa36
push edx
mov edx, esi
call fcn.1003a710
add esp, 4
jmp 0x1006fa3f
mov ecx, dword [ecx + 0x40]
mov eax, dword [esi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [esp + 0x10]
test byte [eax + 0x24], 0x80
jne 0x1006fac5
mov ecx, dword [esp + 0x18]
mov edx, dword [ebp + 8]
mov edi, dword [edx + ecx*4]
movsx edx, word [eax + 0x2c]
mov eax, dword [ebp + 0x14]
mov ecx, dword [esi + 0x6c]
inc eax
mov dword [esp + 0x60], edi
cmp dword [esi + 0x70], ecx
jg 0x1006fa7b
push edi
push edx
push eax
mov edx, 0x5b
mov ecx, esi
call fcn.10039e80
add esp, 0xc
jmp 0x1006faae
mov edi, dword [ebp + 0x14]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
inc edi
mov esi, dword [esp + 0x78]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x60]
mov dword [eax + ecx*4], 0x5b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], edi
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0x5b], 0
jne 0x1006fac5
mov edx, dword [esp + 0x10]
mov ecx, esi
push 0
call fcn.1006bd20
add esp, 4
mov eax, dword [ebp + 0x28]
mov ecx, dword [esp + 0x80]
pop edi
pop esi
mov dword [eax], ecx
mov esp, ebp
pop ebp
ret