Function at 0x6d2cb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x10c
mov eax, dword [0x8bb040]
xor eax, esp
mov dword [esp + 0x108], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, ecx
mov dword [esp + 0x5c], eax
push esi
push edi
mov esi, edx
mov dword [esp + 0x30], ebx
mov edi, dword [ebx + 8]
mov eax, dword [ebx]
mov dword [esp + 0x10], esi
mov dword [esp + 0x68], 1
mov dword [esp + 0xc4], 0
mov dword [esp + 0x34], eax
mov dword [esp + 0x58], edi
test edi, edi
jne 0x6d2d1e
cmp dword [ebx + 0x7c], edi
jne 0x6d2d13
test byte [eax + 0x50], 8
jne 0x6d2d13
mov byte [ebx + 0x17], 1
call fcn.0067aae0
mov edi, eax
mov dword [esp + 0x58], eax
test esi, esi
je 0x6d6082
cmp dword [ebx + 0x24], 0
jne 0x6d6082
push 0
push 0
push 0
mov edx, 0x15
mov ecx, ebx
call fcn.006a3fd0
add esp, 0xc
test eax, eax
jne 0x6d6082
mov eax, dword [esp + 0x64]
cmp byte [eax], 6
ja 0x6d2dc9
mov esi, dword [esi + 0x30]
test esi, esi
je 0x6d2db7
mov ecx, dword [ebx]
push 0
push 0xc
test ecx, ecx
je 0x6d2d6e
call fcn.00654db0
jmp 0x6d2d73
call fcn.00654640
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x6d2da1
mov eax, dword [ebx + 0x88]
mov dword [ecx], eax
mov dword [ebx + 0x88], ecx
mov dword [ecx + 4], esi
mov esi, dword [esp + 0x10]
mov dword [ecx + 8], fcn.00694840
mov dword [esi + 0x30], 0
jmp 0x6d2dbb
mov ecx, dword [ebx]
mov edx, esi
call fcn.00694800
mov esi, dword [esp + 0x10]
mov dword [esi + 0x30], 0
jmp 0x6d2dbb
mov esi, dword [esp + 0x10]
mov eax, dword [esi + 4]
and eax, 0xfffffffe
or eax, 0x400000
mov dword [esi + 4], eax
push 0
mov edx, esi
mov ecx, ebx
call fcn.006d1d40
add esp, 4
cmp dword [ebx + 0x24], 0
jne 0x6d2e20
mov esi, dword [esi + 4]
mov eax, dword [esp + 0x10]
test esi, 0x800000
je 0x6d2e5c
mov edx, dword [eax + 0x20]
lea eax, [edx + 8]
mov ecx, eax
mov dword [esp + 0x14], eax
call fcn.006d2c30
test eax, eax
je 0x6d2e4f
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0xc]
test eax, eax
jne 0x6d2e11
mov eax, dword [ecx + 0x10]
mov eax, dword [eax]
push eax
push str.target_object_alias_may_not_appear_in_FROM_clause:__s
push ebx
call fcn.00658480
add esp, 0xc
mov ecx, dword [ebx + 0xe4]
test ecx, ecx
jne 0x6d6025
xor eax, eax
mov dword [ebx + 0xe4], eax
mov eax, dword [esp + 0x68]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.0073297b
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x10]
and esi, 0xff7fffff
mov dword [eax + 4], esi
mov ecx, dword [esp + 0x64]
cmp byte [ecx], 9
jne 0x6d2e6e
mov edx, eax
mov ecx, ebx
call fcn.006cab60
mov edx, dword [esp + 0x10]
mov ecx, ebx
call fcn.006f3890
test eax, eax
jne 0x6d2e20
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov esi, dword [eax + 0x20]
mov eax, dword [eax + 0x30]
shr ecx, 3
and ecx, 1
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
xor ecx, ecx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], ecx
mov dword [esp + 0x1c], ecx
cmp dword [eax + 0x34], ecx
jne 0x6d3176
lea ecx, [ecx]
cmp ecx, dword [esi]
jge 0x6d31e1
lea eax, [ecx + ecx*8]
mov ebx, dword [esi + eax*8 + 0x18]
lea edx, [esi + eax*8]
mov eax, dword [edx + 0x1c]
mov dword [esp + 0xc], ebx
mov bl, byte [edx + 0x2c]
mov byte [esp + 0x1b], bl
test bl, 0x48
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x24], edx
mov dword [esp + 0x5c], eax
je 0x6d3003
movzx eax, byte [esp + 0x1b]
mov edx, dword [edx + 0x34]
and eax, 0x40
push eax
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x24]
call fcn.0069c070
add esp, 4
test eax, eax
je 0x6d2ff7
mov eax, dword [esp + 0x34]
test dword [eax + 0x50], 0x2000
jne 0x6d2ff7
mov ecx, dword [esp + 0x24]
mov al, byte [ecx + 0x2c]
test al, 8
je 0x6d2f71
test al, 0x10
je 0x6d2f6c
and al, 0xf7
jmp 0x6d2f6e
and al, 0xd7
mov byte [ecx + 0x2c], al
test al, 0x40
je 0x6d2fd9
mov edx, dword [esp + 0x1c]
mov eax, dword [esi]
inc edx
cmp edx, eax
jge 0x6d2fac
lea eax, [edx + edx*8]
lea ecx, [eax*8 + 0x2c]
add ecx, esi
lea esp, [esp]
mov al, byte [ecx]
test al, 0x10
je 0x6d2fa2
test al, 8
je 0x6d2f9e
and al, 0xef
jmp 0x6d2fa0
and al, 0xcf
mov byte [ecx], al
mov eax, dword [esi]
inc edx
add ecx, 0x48
cmp edx, eax
jl 0x6d2f90
lea edx, [eax - 1]
cmp edx, dword [esp + 0x1c]
jl 0x6d2fd9
mov ebx, dword [esp + 0x1c]
lea eax, [edx + edx*8]
lea ecx, [eax*8 + 0x2c]
add ecx, esi
and byte [ecx], 0xbf
test byte [ecx], 0x10
jne 0x6d2fd5
dec edx
sub ecx, 0x48
cmp edx, ebx
jge 0x6d2fc5
mov ebx, dword [esp + 0x30]
movzx eax, byte [esi + 0x2c]
mov edx, dword [esp + 0x24]
and eax, 0x40
push eax
mov eax, dword [esp + 0x14]
mov edx, dword [edx + 0x34]
mov ecx, dword [eax + 0x24]
call fcn.006c79f0
add esp, 4
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x6d3163
mov eax, dword [eax + 0x1c]
mov edi, dword [esp + 0xc]
mov ebx, dword [eax]
movsx eax, word [edi + 0x22]
mov edi, dword [esp + 0x58]
cmp eax, ebx
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x30]
jne 0x6d31c3
test dword [edx + 0x30], 0x100
je 0x6d3042
mov eax, dword [edx + 0x4c]
cmp byte [eax + 0x12], 0
je 0x6d3163
mov edx, dword [esp + 0x5c]
test byte [edx + 4], 8
jne 0x6d3163
mov eax, dword [edx + 0x30]
mov dword [esp + 0xc], eax
test eax, eax
je 0x6d310b
mov eax, dword [esp + 0x10]
cmp dword [eax + 0x30], 0
jne 0x6d3072
cmp dword [esi], 1
jle 0x6d30f3
cmp dword [edx + 0x3c], 0
jne 0x6d30f3
test dword [edx + 4], 0x8000000
jne 0x6d30f3
test dword [eax + 4], 0x8000000
jne 0x6d30f3
mov edx, dword [esp + 0x34]
test dword [edx + 0x50], 0x40000
jne 0x6d30f3
mov ecx, dword [ebx]
push 0
push 0xc
test ecx, ecx
je 0x6d30a8
call fcn.00654db0
jmp 0x6d30ad
call fcn.00654640
mov edx, dword [esp + 0x14]
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x6d30df
mov eax, dword [ebx + 0x88]
mov dword [ecx], eax
mov eax, dword [esp + 0x5c]
mov dword [ebx + 0x88], ecx
mov dword [ecx + 4], edx
mov dword [ecx + 8], fcn.00694840
mov dword [eax + 0x30], 0
jmp 0x6d310b
mov ecx, dword [ebx]
call fcn.00694800
mov eax, dword [esp + 0x5c]
mov dword [eax + 0x30], 0
jmp 0x6d310b
test ecx, ecx
jne 0x6d310b
test dword [eax + 4], 0x40000
je 0x6d310b
cmp dword [esi], 1
je 0x6d3167
test byte [esi + 0x74], 0x22
jne 0x6d3167
push dword [esp + 0x3c]
mov edx, dword [esp + 0x14]
mov ecx, ebx
push dword [esp + 0x20]
call fcn.006cf460
add esp, 8
test eax, eax
je 0x6d3137
cmp dword [ebx + 0x24], 0
jne 0x6d2e20
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x10]
cmp byte [eax + 0x57], 0
mov esi, dword [ecx + 0x20]
jne 0x6d2e20
mov eax, dword [esp + 0x64]
cmp byte [eax], 8
jbe 0x6d315f
mov eax, dword [ecx + 0x30]
mov dword [esp + 0x9c], eax
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
inc ecx
cmp dword [eax + 0x34], 0
mov dword [esp + 0x1c], ecx
je 0x6d2ef0
push dword [esp + 0x64]
mov edi, dword [esp + 0x14]
mov ecx, ebx
mov edx, edi
call fcn.006cc3a0
add esp, 4
mov esi, eax
cmp dword [edi + 0x38], 0
jne 0x6d600e
mov ecx, dword [ebx + 0xe4]
test ecx, ecx
jne 0x6d5fcc
xor eax, eax
mov dword [ebx + 0xe4], eax
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.0073297b
mov esp, ebp
pop ebp
ret
push dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push dword [ecx]
push eax
push str.expected__d_columns_for__s_but_got__d
push ebx
call fcn.00658480
add esp, 0x14
jmp 0x6d2e20
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x2c], esi
mov eax, dword [ecx + 0x24]
test eax, eax
je 0x6d332d
cmp byte [eax], 0x2c
mov eax, dword [esp + 0x34]
mov dword [esp + 0x2c], esi
jne 0x6d3329
test dword [eax + 0x50], 0x8000
mov dword [esp + 0x2c], esi
jne 0x6d3329
mov eax, dword [ebx]
add eax, 0x57
mov dword [esp + 0x2c], esi
mov dword [esp + 0x80], ebx
mov esi, ecx
mov dword [esp + 0x84], eax
nop
mov eax, dword [esi + 0x20]
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x90], 0
test eax, eax
je 0x6d3279
cmp dword [eax], 0
jle 0x6d3279
test byte [eax + 0x2c], 0x40
mov dword [esp + 0x94], 3
jne 0x6d3284
mov dword [esp + 0x94], 1
mov edx, dword [esi + 0x24]
lea ecx, [esp + 0x80]
call fcn.006cff40
cmp dword [esp + 0x88], 0
je 0x6d3319
mov edx, dword [esi + 0x24]
lea eax, [esp + 0x80]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], 0x6d0100
mov dword [esp + 0xd0], fcn.00485db0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xe0], eax
test edx, edx
je 0x6d3300
lea ecx, [esp + 0xc8]
call fcn.0068e3e0
mov edx, dword [esp + 0x98]
test edx, edx
je 0x6d3319
mov ecx, dword [esp + 0x80]
mov ecx, dword [ecx]
call fcn.00654910
cmp dword [esp + 0x8c], 0
jne 0x6d3230
jmp 0x6d332f
mov esi, ecx
jmp 0x6d3333
mov esi, ecx
mov eax, dword [esp + 0x34]
test dword [eax + 0x50], 0x201
jne 0x6d3360
mov edx, esi
mov ecx, ebx
call fcn.006d2920
test eax, eax
je 0x6d3360
mov eax, dword [esp + 0x34]
cmp byte [eax + 0x57], 0
jne 0x6d2e20
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x2c], ecx
jmp 0x6d3364
mov ecx, dword [esp + 0x2c]
xor eax, eax
mov dword [esp + 0x1c], eax
cmp dword [ecx], eax
jle 0x6d3c59
lea eax, [eax + eax*8]
lea eax, [eax + 1]
lea esi, [ecx + eax*8]
mov eax, dword [esi + 0x38]
or eax, dword [esi + 0x3c]
jne 0x6d33a6
mov eax, dword [esi + 8]
test eax, eax
je 0x6d33a6
push dword [esi + 4]
mov edx, 0x14
mov ecx, ebx
push 0x775914
push eax
call fcn.006a3fd0
mov ecx, dword [esp + 0x38]
add esp, 0xc
mov eax, dword [esi + 0x14]
mov dword [esp + 0x40], eax
test eax, eax
je 0x6d3c48
mov ecx, dword [esp + 0x10]
call fcn.00692900
mov ecx, dword [esp + 0x34]
add dword [ebx + 0xe0], eax
test dword [ecx + 0x50], 0x1000
jne 0x6d3409
test dword [esi + 0x28], 0x100
je 0x6d33e8
mov eax, dword [esi + 0x44]
cmp byte [eax + 0x12], 0
je 0x6d3409
cmp dword [eax], 2
jge 0x6d3409
push dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, ebx
push dword [esp + 0x30]
mov edx, dword [esp + 0x48]
push dword [eax + 0x24]
call fcn.006d0170
mov ecx, dword [esp + 0x40]
add esp, 0xc
test dword [ecx + 0x50], 0x4000000
jne 0x6d355e
test dword [esi + 0x28], 0x108
jne 0x6d355e
mov edx, dword [esi + 0x14]
mov dword [esp + 0x28], edx
test byte [edx + 4], 9
jne 0x6d355e
mov eax, edx
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x6d3446
cmp byte [eax], 0x87
jne 0x6d355e
cmp dword [eax + 0x44], 0
jne 0x6d355e
mov eax, ecx
test eax, eax
jne 0x6d3436
mov eax, dword [esi + 0x38]
mov dword [esp + 0x60], eax
mov eax, dword [esi + 0x3c]
mov dword [esp + 0x38], eax
mov eax, dword [edx + 0x30]
test eax, eax
je 0x6d34c4
mov ecx, dword [eax]
mov dword [esp + 0xc], ecx
test ecx, ecx
jle 0x6d34c4
lea ebx, [eax + 0x18]
movzx eax, word [ebx]
test ax, ax
je 0x6d34b4
add eax, 0xffff
mov edx, 0x3f
cmp ax, 0x40
jae 0x6d3493
movzx edx, ax
xor eax, eax
xor ecx, ecx
bts eax, edx
cmp edx, 0x20
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
cmovae ecx, eax
or dword [esp + 0x60], eax
or dword [esp + 0x38], ecx
mov ecx, dword [esp + 0xc]
add ebx, 0x14
sub ecx, 1
mov dword [esp + 0xc], ecx
jne 0x6d3478
mov ebx, dword [esp + 0x30]
mov eax, dword [esi + 0x10]
movsx eax, word [eax + 0x22]
mov dword [esp + 0xc], eax
test eax, eax
jle 0x6d355e
mov edi, dword [esp + 0x28]
xor eax, eax
mov dword [esp + 0x20], eax
mov ebx, eax
xor ecx, ecx
cmp ebx, 0x3f
jae 0x6d3505
mov eax, ebx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
mov eax, dword [esp + 0x20]
cmovae edx, ecx
jmp 0x6d350a
mov edx, closesocket
and ecx, dword [esp + 0x60]
and edx, dword [esp + 0x38]
or ecx, edx
jne 0x6d3548
mov edx, dword [esp + 0x20]
mov eax, edi
lea esp, [esp]
mov ecx, dword [eax + 0x1c]
mov ecx, dword [ecx + edx + 8]
cmp byte [ecx], 0x79
je 0x6d353d
and dword [ecx + 4], 0xfff7dfff
mov byte [ecx], 0x79
or dword [eax + 4], 0x1000000
mov eax, dword [eax + 0x34]
test eax, eax
jne 0x6d3520
mov eax, dword [esp + 0x20]
inc ebx
add eax, 0x14
mov dword [esp + 0x20], eax
cmp ebx, dword [esp + 0xc]
jl 0x6d34e3
mov edi, dword [esp + 0x58]
mov ebx, dword [esp + 0x30]
mov eax, dword [ebx + 0x100]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x20], eax
mov eax, dword [esi + 8]
mov dword [ebx + 0x100], eax
lea eax, [edx + edx*8]
lea ecx, [ecx + eax*8]
mov dword [esp + 0xc], edx
add ecx, 8
mov dword [esp + 0x14], ecx
test dword [ecx + 0x28], 0x100
je 0x6d35ab
mov eax, dword [ecx + 0x44]
mov dl, byte [eax + 0x12]
test dl, dl
je 0x6d3606
cmp dword [eax], 2
jl 0x6d35a7
cmp dl, 2
jne 0x6d3606
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x2c]
test byte [eax + 0x2c], 0x40
jne 0x6d3606
mov eax, dword [ebx]
test dword [eax + 0x50], 0x2000000
jne 0x6d3606
mov eax, dword [esp + 0x2c]
push dword [eax]
lea eax, [edx + 1]
mov edx, ecx
mov ecx, dword [esp + 0x30]
push eax
call fcn.006d2830
add esp, 8
test eax, eax
jne 0x6d3606
cmp dword [esp + 0x1c], eax
jne 0x6d3650
mov eax, dword [esp + 0x2c]
cmp dword [eax], 1
je 0x6d3685
test byte [eax + 0x74], 2
jne 0x6d3685
mov ecx, dword [esp + 0x10]
test dword [ecx + 4], 0x10000000
je 0x6d3685
test dword [esi + 0x28], 0x100
je 0x6d38ce
mov eax, dword [esi + 0x44]
mov dword [esp + 0xc], eax
mov edx, dword [eax + 4]
test edx, edx
jle 0x6d38ce
mov ecx, dword [edi + 0x6c]
mov eax, dword [eax + 8]
mov dword [esp + 0x14], eax
cmp dword [edi + 0x70], ecx
jg 0x6d3815
push 0
push edx
push eax
mov edx, 0xa
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d3848
mov ecx, dword [esp + 0x10]
test dword [ecx + 4], 0x10000000
jne 0x6d3606
mov eax, dword [esp + 0x14]
add eax, 0x24
test byte [eax], 0x22
jne 0x6d3606
mov ecx, dword [esp + 0xc]
lea ecx, [ecx]
test ecx, ecx
je 0x6d3685
sub eax, 0x48
dec ecx
cmp dword [eax - 0x10], 0
jne 0x6d3606
test byte [eax], 0x22
je 0x6d3670
jmp 0x6d3606
mov edx, dword [edi + 0x6c]
inc dword [ebx + 0x2c]
inc edx
mov eax, dword [ebx + 0x2c]
mov dword [esi + 0x1c], eax
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0xc], edx
mov dword [esp + 0x14], eax
cmp dword [edi + 0x70], ecx
jg 0x6d36bb
push edx
push 0
push eax
mov edx, 0xb
mov ecx, edi
call fcn.0067ad20
mov edx, dword [esp + 0x18]
add esp, 0xc
jmp 0x6d36ee
mov ebx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x1c]
push esi
push str.CO_ROUTINE___S
push 1
push ebx
mov dword [esi + 0x18], edx
mov byte [esp + 0x90], 0xd
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
call fcn.0067b4b0
mov edx, dword [esp + 0x50]
lea eax, [esp + 0x90]
push eax
mov ecx, ebx
call fcn.006d2cb0
mov eax, dword [esp + 0x54]
add esp, 0x14
mov ecx, dword [esi + 0x10]
mov ax, word [eax + 2]
mov word [ecx + 0x26], ax
or dword [esi + 0x28], 0x20
mov eax, dword [esp + 0x8c]
mov edx, dword [esi + 0x1c]
mov dword [esi + 0x20], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d3791
push 0
push 0
push edx
mov edx, 0x44
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d37c0
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x44
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0xc]
mov byte [eax + 0x13], 0
mov eax, dword [edi + 0xc]
mov dword [eax + 0x1c], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x6d37f3
mov eax, 0x96e3e8
mov dword [eax], edx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
jmp 0x6d3c1d
mov eax, dword [esp + 0xc]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
add eax, 0xfffffff4
mov dword [eax], edx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
jmp 0x6d3c1d
mov ebx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0xc]
mov esi, dword [esi + 0x2c]
mov eax, dword [edx + 0xc]
mov dword [esp + 0x14], eax
cmp esi, eax
je 0x6d38bd
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d388a
push 0
push eax
push esi
mov edx, 0x73
mov ecx, edi
call fcn.0067ad20
mov edx, dword [esp + 0x18]
add esp, 0xc
mov ecx, dword [esp + 0x40]
mov ax, word [edx + 0x10]
mov word [ecx + 2], ax
jmp 0x6d3c1d
mov ebx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
mov ax, word [edx + 0x10]
mov word [ecx + 2], ax
jmp 0x6d3c1d
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x30]
mov edx, esi
push 0
call fcn.006d2830
mov edx, eax
add esp, 8
mov dword [esp + 0x28], edx
test edx, edx
je 0x6d39e1
mov eax, dword [edx + 0x18]
mov dword [esp + 0x14], eax
test eax, eax
je 0x6d395d
mov ecx, dword [edx + 0x1c]
mov dword [esp + 0xc], ecx
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d3926
push 0
push eax
push dword [esp + 0x14]
mov edx, 0xa
mov ecx, edi
call fcn.0067ad20
mov edx, dword [esp + 0x34]
add esp, 0xc
jmp 0x6d395d
mov ebx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x14]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x30]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov eax, dword [edx + 0x2c]
mov esi, dword [esi + 0x2c]
mov dword [esp + 0x14], eax
cmp dword [edi + 0x70], ecx
jg 0x6d399a
push 0
push eax
push esi
mov edx, 0x73
mov ecx, edi
call fcn.0067ad20
mov edx, dword [esp + 0x34]
add esp, 0xc
mov ecx, dword [esp + 0x40]
mov eax, dword [edx + 0x14]
mov ax, word [eax + 2]
mov word [ecx + 2], ax
jmp 0x6d3c1d
mov ebx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edx + 0x14]
mov ecx, dword [esp + 0x40]
mov ax, word [eax + 2]
mov word [ecx + 2], ax
jmp 0x6d3c1d
inc dword [ebx + 0x2c]
xor eax, eax
mov dword [esp + 0x60], eax
mov eax, dword [ebx + 0x2c]
mov dword [esi + 0x1c], eax
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x38], edx
cmp dword [edi + 0x70], edx
jg 0x6d3a19
push 0
push 0
push 0
mov edx, 9
mov ecx, edi
call fcn.0067ad20
mov edx, eax
add esp, 0xc
mov dword [esp + 0x38], edx
jmp 0x6d3a50
mov ebx, dword [esp + 0x30]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea eax, [edx + 1]
mov dword [esi + 0x18], eax
mov eax, dword [esi + 0x28]
or eax, 0x10
mov dword [esi + 0x28], eax
test al, 8
jne 0x6d3abd
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x60], edx
cmp dword [edi + 0x70], edx
jg 0x6d3a8a
push 0
push 0
push 0
mov edx, 0xf
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
mov dword [esp + 0x60], eax
jmp 0x6d3abd
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xf
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x2c]
push esi
push str.MATERIALIZE___S
push 1
push ebx
mov byte [esp + 0x90], 0xc
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
call fcn.0067b4b0
mov edx, dword [esp + 0x50]
lea eax, [esp + 0x90]
push eax
mov ecx, ebx
call fcn.006d2cb0
mov eax, dword [esp + 0x54]
add esp, 0x14
mov ecx, dword [esi + 0x10]
mov ax, word [eax + 2]
mov word [ecx + 0x26], ax
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x6d3b54
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x6d3b48
mov eax, 0x96e3e0
jmp 0x6d3b51
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x38]
mov ecx, dword [esi + 0x1c]
mov dword [esp + 0xc], ecx
mov ecx, dword [edi + 0x6c]
lea eax, [edx + 1]
cmp dword [edi + 0x70], ecx
jg 0x6d3b86
push 0
push eax
push dword [esp + 0x14]
mov edx, 0x43
mov ecx, edi
call fcn.0067ad20
mov edx, dword [esp + 0x44]
add esp, 0xc
jmp 0x6d3bbc
mov ebx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
lea ebx, [edx + 1]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0x6c]
mov dword [esp + 0x14], eax
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x6d3bd2
mov eax, 0x96e3e0
jmp 0x6d3bdb
mov eax, dword [edi + 0x68]
lea ecx, [edx + edx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x14]
mov dword [eax + 8], ecx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
mov eax, dword [esi + 0x28]
and eax, 0x108
cmp eax, 0x100
jne 0x6d3c1d
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x18]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0x1c]
mov dword [ecx + 8], eax
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x40]
mov ax, word [eax + 2]
mov word [ecx + 0x10], ax
mov eax, dword [esp + 0x34]
cmp byte [eax + 0x57], 0
jne 0x6d2e20
mov ecx, dword [esp + 0x10]
call fcn.00692900
sub dword [ebx + 0xe0], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x2c]
mov dword [ebx + 0x100], eax
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, dword [ecx]
jl 0x6d3372
mov esi, dword [esp + 0x10]
mov eax, dword [esi + 0x24]
mov edx, dword [esi + 0x1c]
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x48], eax
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x60], eax
mov al, byte [esi + 4]
and al, 1
mov dword [esp + 0x40], edx
mov byte [esp + 0x108], al
mov eax, dword [esi + 4]
and al, 9
cmp al, 1
jne 0x6d3cd4
mov ecx, dword [esp + 0x9c]
push 0xffffffffffffffff
call fcn.0069bbc0
mov edx, dword [esp + 0x44]
add esp, 4
test eax, eax
jne 0x6d3cd4
cmp dword [esi + 0x44], eax
jne 0x6d3cd4
mov ecx, dword [esp + 0x34]
and dword [esi + 4], 0xfffffffe
push eax
call fcn.00693b10
mov edx, dword [esp + 0x44]
add esp, 4
or dword [esi + 4], 8
mov dword [esp + 0x48], eax
mov dword [esi + 0x28], eax
mov byte [esp + 0x108], 2
mov ecx, dword [esp + 0x9c]
test ecx, ecx
je 0x6d3de3
push dword [edx]
mov edx, ecx
mov ecx, ebx
push 0
call fcn.006c9d50
mov edx, eax
add esp, 8
mov eax, dword [ebx + 0x28]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xc], eax
inc eax
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x9c]
mov esi, dword [edi + 0x6c]
mov dword [esp + 0x14], edx
mov ecx, dword [eax]
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
inc eax
add eax, ecx
mov dword [esp + 0x28], eax
cmp dword [edi + 0x70], esi
jg 0x6d3d47
push 0
push eax
push dword [esp + 0x14]
mov edx, 0x76
mov ecx, edi
call fcn.0067ad20
mov edx, dword [esp + 0x20]
add esp, 0xc
mov esi, eax
jmp 0x6d3d7e
mov ebx, dword [esp + 0xc]
lea eax, [esi + 1]
mov dword [edi + 0x6c], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x28]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x76
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, esi
cmp byte [ecx + 0x57], 0
je 0x6d3d9f
push edx
mov edx, 0xfffffff8
call fcn.0067ba70
add esp, 4
mov dword [esp + 0xb0], esi
jmp 0x6d3dee
test esi, esi
jns 0x6d3da7
mov eax, dword [edi + 0x6c]
dec eax
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x6d3dcf
push 0xfffffffffffffff8
push edx
mov edx, eax
mov ecx, edi
call fcn.0067bb60
add esp, 8
mov dword [esp + 0xb0], esi
jmp 0x6d3dee
test edx, edx
je 0x6d3dda
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov dword [esp + 0xb0], esi
jmp 0x6d3dee
mov dword [esp + 0xb0], 0xffffffff
mov ecx, dword [esp + 0x64]
cmp byte [ecx], 0xc
jne 0x6d3ee6
mov eax, dword [esp + 0x40]
mov esi, dword [ecx + 4]
mov ecx, dword [edi + 0x6c]
mov edx, dword [eax]
cmp dword [edi + 0x70], ecx
jg 0x6d3e21
push 0
push edx
push esi
mov edx, 0x76
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d3e50
mov ebx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x76
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x10]
test dword [edx + 4], 0x800
je 0x6d3eea
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
lea esi, [eax - 1]
test esi, esi
jle 0x6d3ec6
mov ebx, dword [esp + 0x40]
lea ecx, [esi + esi*4]
mov edi, dword [esp + 0x34]
shl ecx, 2
mov dword [esp + 0x20], ecx
test byte [ecx + ebx + 0x14], 0x40
jne 0x6d3ebe
mov edx, dword [ecx + ebx + 8]
test edx, edx
je 0x6d3e9a
mov ecx, edi
call fcn.006934d0
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx + ebx + 0xc]
test edx, edx
je 0x6d3ead
mov ecx, edi
call fcn.00654910
mov ecx, dword [esp + 0x20]
mov eax, dword [ebx]
dec esi
dec eax
sub ecx, 0x14
mov dword [ebx], eax
mov dword [esp + 0x20], ecx
test esi, esi
jg 0x6d3e80
mov edi, dword [esp + 0x58]
mov ebx, dword [esp + 0x30]
xor edx, edx
test eax, eax
jle 0x6d3ee6
mov esi, dword [esp + 0x40]
lea ecx, [esi + 8]
test byte [ecx + 0xc], 0x40
jne 0x6d3ede
mov eax, dword [ecx]
mov byte [eax], 0x79
inc edx
add ecx, 0x14
cmp edx, dword [esi]
jl 0x6d3ed3
mov edx, dword [esp + 0x10]
dec dword [ebx + 0x38]
test dword [edx + 4], 0x4000
mov eax, dword [ebx + 0x38]
mov dword [esp + 0xe4], eax
jne 0x6d3f09
mov ecx, 0x140
mov word [edx + 2], cx
cmp dword [edx + 0x3c], 0
je 0x6d3f1e
push eax
mov ecx, ebx
call fcn.006cb620
mov edx, dword [esp + 0x14]
add esp, 4
cmp dword [edx + 8], 0
jne 0x6d3f58
cmp dword [esp + 0xb0], 0
jl 0x6d3f58
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x6d3f3d
mov eax, 0x96e3e0
jmp 0x6d3f4d
mov eax, dword [esp + 0xb0]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov byte [eax], 0x77
or byte [esp + 0xbc], 1
test byte [edx + 4], 1
je 0x6d4067
mov eax, dword [ebx + 0x28]
mov ecx, ebx
mov dword [esp + 0x10c], eax
inc eax
mov dword [ebx + 0x28], eax
mov edx, dword [edx + 0x1c]
push 0
push 0
call fcn.006c9d50
mov esi, dword [edi + 0x6c]
mov edx, eax
mov eax, dword [esp + 0x114]
add esp, 8
mov dword [esp + 0x14], edx
mov dword [esp + 0xc], eax
cmp dword [edi + 0x70], esi
jg 0x6d3fb6
push 0
push 0
push eax
mov edx, 0x76
mov ecx, edi
call fcn.0067ad20
mov edx, dword [esp + 0x20]
add esp, 0xc
mov esi, eax
jmp 0x6d3fed
mov ebx, dword [esp + 0xc]
lea eax, [esi + 1]
mov dword [edi + 0x6c], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x76
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, esi
cmp byte [ecx + 0x57], 0
je 0x6d4007
push edx
mov edx, 0xfffffff8
call fcn.0067ba70
add esp, 4
jmp 0x6d403b
test esi, esi
jns 0x6d400f
mov eax, dword [edi + 0x6c]
dec eax
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x6d4030
push 0xfffffffffffffff8
push edx
mov edx, eax
mov ecx, edi
call fcn.0067bb60
add esp, 8
jmp 0x6d403b
test edx, edx
je 0x6d403b
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov dword [esp + 0x110], esi
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x6d4059
lea ecx, [eax + eax*4]
mov edx, 8
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x109], 3
jmp 0x6d406f
mov byte [esp + 0x109], 0
cmp dword [esp + 0x3c], 0
mov esi, dword [esp + 0x48]
jne 0x6d4386
test esi, esi
jne 0x6d4386
mov cx, word [edx + 4]
mov eax, 0x4000
and cx, ax
mov esi, 0x100
xor eax, eax
cmp byte [esp + 0x108], al
cmovne eax, esi
or cx, ax
mov eax, dword [edx + 0x44]
movzx esi, cx
mov dword [esp + 0xc], eax
test eax, eax
je 0x6d40bf
mov ecx, ebx
call fcn.006f44b0
mov edx, dword [esp + 0x10]
movsx eax, word [edx + 2]
mov ecx, ebx
push eax
push esi
push edx
push dword [edx + 0x1c]
mov edx, dword [esp + 0x3c]
push dword [esp + 0xac]
push dword [esp + 0x4c]
call fcn.006f0800
mov esi, eax
add esp, 0x18
mov dword [esp + 0x14], esi
test esi, esi
je 0x6d2e20
mov ecx, dword [esp + 0x10]
movzx eax, word [esi + 0x34]
cmp ax, word [ecx + 2]
jge 0x6d4102
mov word [ecx + 2], ax
cmp byte [esp + 0x108], 0
je 0x6d4126
mov cl, byte [esi + 0x2f]
movzx edx, byte [esp + 0x109]
test cl, cl
movzx eax, cl
cmovne edx, eax
mov byte [esp + 0x109], dl
mov ecx, dword [esp + 0x9c]
test ecx, ecx
je 0x6d4186
mov al, byte [esi + 0x2d]
test al, al
jns 0x6d413c
xor edx, edx
jmp 0x6d413f
movsx edx, al
mov dword [esp + 0xa0], edx
test byte [esi + 0x30], 4
jne 0x6d4151
mov eax, dword [esi + 0x1c]
jmp 0x6d4171
movzx eax, byte [esi + 0x2c]
lea eax, [eax + eax*2]
shl eax, 5
cmp dword [eax + esi + 0x2d0], 0
je 0x6d416a
mov eax, dword [esi + 0x1c]
jmp 0x6d4171
mov eax, dword [eax + esi + 0x2a8]
mov dword [esp + 0xb8], eax
xor eax, eax
cmp edx, dword [ecx]
cmove ecx, eax
mov dword [esp + 0x9c], ecx
mov eax, dword [esp + 0xb0]
test eax, eax
js 0x6d41c6
test ecx, ecx
jne 0x6d41c6
mov ecx, dword [edi]
cmp byte [ecx + 0x57], 0
jne 0x6d41c6
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + edx*4 + 0x10]
lea esi, [eax + edx*4]
movsx edx, byte [esi + 1]
call fcn.0067ba70
mov word [esi], 0xb8
add esp, 4
mov dword [esi + 0x10], 0
mov esi, dword [esp + 0x14]
cmp dword [esp + 0xc], 0
mov edx, dword [esp + 0x10]
je 0x6d4354
mov eax, dword [ebx + 0x38]
inc dword [ebx + 0x2c]
lea ecx, [eax - 1]
sub eax, 2
mov dword [esp + 0x28], eax
dec eax
push ecx
mov dword [esp + 0x10], eax
mov dword [ebx + 0x38], eax
mov eax, dword [ebx + 0x2c]
push eax
mov dword [esp + 0x1c], ecx
mov ecx, ebx
push esi
mov dword [esp + 0x48], eax
call fcn.006f7c80
mov ecx, dword [edi + 0x6c]
add esp, 0xc
mov esi, dword [esp + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x6d4227
push 0
push esi
push 0
mov edx, 9
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d4256
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x14]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d4274
push edx
mov edx, edi
call fcn.0067b700
add esp, 4
jmp 0x6d427d
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x108]
push esi
push dword [esp + 0x2c]
mov ecx, ebx
mov dword [esp + 0xc0], 0
push dword [esp + 0x6c]
push eax
lea eax, [esp + 0xac]
push eax
push 0xffffffffffffffff
call fcn.006c8d70
mov ecx, dword [edi + 0xc]
add esp, 0x18
mov edx, dword [esp + 0x28]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d42cf
push edx
mov edx, edi
call fcn.0067b700
add esp, 4
jmp 0x6d42d8
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov ecx, dword [edi + 0x6c]
mov edx, dword [esp + 0x3c]
cmp dword [edi + 0x70], ecx
jg 0x6d42fa
push 0
push 0
push edx
mov edx, 0x43
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d4329
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
not esi
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d4346
push esi
mov edx, edi
call fcn.0067b700
add esp, 4
jmp 0x6d5f2e
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + esi*4], eax
jmp 0x6d5f2e
push dword [esi + 0x20]
lea eax, [esp + 0x10c]
mov ecx, ebx
push dword [esi + 0x1c]
push dword [esp + 0x6c]
push eax
lea eax, [esp + 0xac]
push eax
push 0xffffffffffffffff
call fcn.006c8d70
add esp, 0x18
mov ecx, esi
call fcn.006f1780
jmp 0x6d5f2e
mov dword [esp + 0x24], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x3c], 0
test esi, esi
je 0x6d4498
mov ecx, dword [edx + 0x1c]
mov eax, dword [ecx]
test eax, eax
jle 0x6d43c4
add ecx, 0x1a
xor edi, edi
lea ecx, [ecx + 0x14]
dec eax
mov word [ecx - 0x14], di
test eax, eax
jg 0x6d43b2
mov edi, dword [esp + 0x58]
mov eax, dword [esi]
test eax, eax
jle 0x6d43e2
lea ecx, [esi + 0x1a]
lea ecx, [ecx]
xor edi, edi
lea ecx, [ecx + 0x14]
dec eax
mov word [ecx - 0x14], di
test eax, eax
jg 0x6d43d0
mov edi, dword [esp + 0x58]
cmp word [edx + 2], 0x42
jle 0x6d43f2
mov eax, 0x42
mov word [edx + 2], ax
mov ecx, dword [esp + 0x9c]
test ecx, ecx
je 0x6d449e
mov eax, dword [esi]
cmp eax, dword [ecx]
jne 0x6d449e
xor edx, edx
test eax, eax
jle 0x6d442e
xor ecx, ecx
mov eax, dword [esp + 0x9c]
lea ecx, [ecx + 0x14]
inc edx
mov al, byte [ecx + eax - 4]
and al, 1
mov byte [esi + ecx - 4], al
mov eax, dword [esi]
cmp edx, eax
jl 0x6d4413
mov ecx, dword [esp + 0x9c]
test ecx, ecx
je 0x6d449e
cmp eax, dword [ecx]
jne 0x6d449e
mov dword [esp + 0xc], 0
test eax, eax
jle 0x6d448e
add esi, 8
add ecx, 8
mov dword [esp + 0x28], ecx
mov al, byte [esi + 8]
cmp al, byte [ecx + 8]
jne 0x6d449e
mov edx, dword [esi]
push 0xffffffffffffffff
push dword [ecx]
xor ecx, ecx
call fcn.0069b6e0
add esp, 8
test eax, eax
jne 0x6d449e
mov edx, dword [esp + 0xc]
add esi, 0x14
mov eax, dword [esp + 0x48]
inc edx
mov ecx, dword [esp + 0x28]
add ecx, 0x14
mov dword [esp + 0xc], edx
mov dword [esp + 0x28], ecx
cmp edx, dword [eax]
jl 0x6d4453
mov dword [esp + 0x3c], 1
jmp 0x6d449e
xor eax, eax
mov word [edx + 2], ax
mov eax, dword [ebx + 0x38]
mov ecx, dword [esp + 0x34]
dec eax
push 0
push 0x2c
mov dword [esp + 0x74], eax
mov dword [ebx + 0x38], eax
call fcn.00654db0
mov esi, eax
add esp, 8
mov dword [esp + 0x50], esi
test esi, esi
je 0x6d453e
push 0x2c
push 0
push esi
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebx]
add esp, 0xc
push 0
push 0xc
test ecx, ecx
je 0x6d44e5
call fcn.00654db0
jmp 0x6d44ea
call fcn.00654640
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x6d450d
mov eax, dword [ebx + 0x88]
mov dword [ecx], eax
mov dword [ebx + 0x88], ecx
mov dword [ecx + 4], esi
mov dword [ecx + 8], 0x6d28e0
jmp 0x6d453e
mov edx, dword [esi + 0x14]
mov eax, dword [ebx]
mov dword [esp + 0xc], eax
test edx, edx
je 0x6d4525
mov ecx, eax
call fcn.00654910
mov eax, dword [esp + 0xc]
mov edx, dword [esi + 0x20]
test edx, edx
je 0x6d4533
mov ecx, eax
call fcn.00654910
mov ecx, dword [esp + 0xc]
mov edx, esi
call fcn.00654910
mov eax, dword [esp + 0x34]
cmp byte [eax + 0x57], 0
jne 0x6d2e20
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x48]
mov eax, dword [eax + 0x10]
mov dword [esi + 0x28], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], esi
test ecx, ecx
je 0x6d45b2
mov eax, dword [ecx]
jmp 0x6d45b4
xor eax, eax
mov edx, dword [esp + 0x40]
mov dword [esi + 0x10], ecx
lea ecx, [esp + 0xe8]
mov word [esi + 2], ax
call fcn.0069c880
mov edx, dword [esp + 0x9c]
lea ecx, [esp + 0xe8]
call fcn.0069c880
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x6d46af
cmp dword [esp + 0x48], 0
je 0x6d465c
mov eax, dword [esp + 0x10]
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov edx, dword [eax + 0x2c]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], 0x6d26c0
mov dword [esp + 0xe0], eax
test edx, edx
je 0x6d4655
lea ecx, [esp + 0xc8]
call fcn.0068e3e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x60]
mov eax, dword [eax + 0x24]
mov dword [esp + 0x38], eax
lea eax, [esp + 0xe8]
mov dword [esp + 0xcc], 0x69c5f0
mov edx, ecx
mov dword [esp + 0xd0], 0x68e6a0
lea ecx, [esp + 0xc8]
mov dword [esp + 0xd4], 0x68e6b0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xe0], eax
mov dword [esp + 0xc8], 0
call fcn.0068e3e0
mov eax, dword [esi + 0x18]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x10]
cmp dword [eax + 0x28], 0
jne 0x6d4793
cmp dword [eax + 0x2c], 0
jne 0x6d4793
cmp dword [esi + 0x24], 1
jne 0x6d4793
mov eax, dword [esi + 0x20]
mov ecx, dword [eax]
mov dword [esp + 0xc], ecx
mov eax, dword [ecx + 0x14]
test eax, eax
je 0x6d4793
cmp dword [eax], 1
jne 0x6d4793
test dword [ecx + 4], 0x1000000
jne 0x6d4793
mov eax, dword [esp + 0x34]
test dword [eax + 0x50], 0x10000
jne 0x6d4793
mov eax, dword [ecx + 8]
mov edx, 0x889a60
mov ecx, eax
mov dword [esp + 0x14], eax
call fcn.00658620
test eax, eax
jne 0x6d474c
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x14]
mov ecx, dword [ecx + 8]
call fcn.00694d60
neg eax
mov byte [esp + 0x1b], 1
sbb al, al
and eax, 0xffffff02
mov dword [esp + 0x28], eax
jmp 0x6d4768
mov ecx, dword [esp + 0x14]
mov edx, 0x889a5c
call fcn.00658620
test eax, eax
jne 0x6d4793
mov byte [esp + 0x28], 1
mov byte [esp + 0x1b], 2
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x34]
push 0
mov edx, dword [edx + 0x14]
call fcn.00693b10
mov ecx, eax
add esp, 4
mov dword [esp + 0xc4], ecx
test ecx, ecx
je 0x6d4798
mov eax, dword [esp + 0x28]
mov byte [ecx + 0x10], al
jmp 0x6d4798
mov byte [esp + 0x1b], 0
lea edx, [esp + 0xe8]
mov ecx, esi
call fcn.006d1e20
mov ecx, dword [esp + 0x34]
cmp byte [ecx + 0x57], 0
jne 0x6d5fb1
cmp dword [esp + 0x48], 0
je 0x6d591f
cmp dword [esi + 0x24], 1
mov dword [esp + 0x70], 0
mov dword [esp + 0xc], 0
jne 0x6d48bb
mov eax, dword [esi + 0x20]
cmp dword [eax + 8], 0
jl 0x6d48bb
mov eax, dword [eax]
test eax, eax
je 0x6d48bb
test dword [eax + 4], 0x1000
jne 0x6d48bb
mov edx, dword [eax + 0x14]
test edx, edx
je 0x6d48bb
mov edx, dword [edx + 8]
test edx, edx
je 0x6d4825
push 0
push 0
call fcn.006936b0
mov ecx, dword [esp + 0x3c]
add esp, 8
mov dword [esp + 0x20], eax
jmp 0x6d482d
mov dword [esp + 0x20], 0
mov edx, dword [esp + 0x48]
push 0
call fcn.00693b10
mov ecx, eax
add esp, 4
mov dword [esp + 0x70], ecx
test ecx, ecx
jne 0x6d4856
mov edx, dword [esp + 0x20]
mov ecx, dword [ebx]
call fcn.00694270
mov dword [esp + 0x70], eax
jmp 0x6d48ae
mov eax, dword [ecx]
lea edx, [eax + 1]
cmp dword [ecx + 4], edx
jge 0x6d4877
mov eax, dword [esp + 0x20]
mov edx, ecx
mov ecx, dword [ebx]
push eax
call fcn.006942e0
add esp, 4
mov dword [esp + 0x70], eax
jmp 0x6d48ae
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*4]
mov eax, dword [esp + 0x70]
mov dword [eax], edx
mov eax, dword [0x7fbb30]
mov dword [ecx + 0xc], eax
mov eax, dword [0x7fbb34]
mov dword [ecx + 0x10], eax
mov eax, dword [0x7fbb38]
mov dword [ecx + 0x14], eax
mov eax, dword [0x7fbb3c]
mov dword [ecx + 0x18], eax
mov eax, dword [esp + 0x20]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x70]
neg eax
sbb eax, eax
and eax, 0x500
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x28]
mov ecx, ebx
mov edx, dword [esp + 0x48]
mov dword [esi + 4], eax
inc dword [ebx + 0x28]
push dword [esi + 0x18]
push 0
call fcn.006c9d50
mov ecx, dword [edi + 0x6c]
add esp, 8
movzx edx, word [esi + 2]
mov dword [esp + 0x74], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x28], ecx
cmp dword [edi + 0x70], ecx
jg 0x6d490d
push 0
push edx
push eax
mov edx, 0x77
mov ecx, edi
call fcn.0067ad20
mov edx, eax
add esp, 0xc
mov dword [esp + 0x28], edx
jmp 0x6d4944
mov esi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x50]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x77
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, edx
cmp byte [ecx + 0x57], 0
je 0x6d4962
mov edx, dword [esp + 0x74]
push edx
mov edx, 0xfffffff8
call fcn.0067ba70
add esp, 4
jmp 0x6d499a
test edx, edx
jns 0x6d496a
mov eax, dword [edi + 0x6c]
dec eax
mov edx, dword [esp + 0x74]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x6d498f
push 0xfffffffffffffff8
push edx
mov edx, eax
mov ecx, edi
call fcn.0067bb60
add esp, 8
jmp 0x6d499a
test edx, edx
je 0x6d499a
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov eax, dword [ebx + 0x2c]
mov edx, dword [esp + 0x48]
inc eax
mov dword [esp + 0x5c], eax
inc eax
mov dword [esp + 0x4c], eax
lea ecx, [eax + 2]
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x2c], ecx
mov dword [esp + 0x7c], eax
dec eax
mov dword [ebx + 0x38], eax
mov dword [esp + 0x1c], ecx
add ecx, dword [edx]
mov dword [esp + 0x20], eax
mov dword [ebx + 0x2c], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x78], eax
mov eax, dword [edx]
add eax, ecx
mov dword [ebx + 0x2c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d49fd
push 0
push dword [esp + 0x50]
mov edx, 0x47
mov ecx, edi
push 0
call fcn.0067ad20
mov edx, dword [esp + 0x54]
add esp, 0xc
jmp 0x6d4a34
mov esi, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x50]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edx]
mov edx, dword [esp + 0x1c]
mov ecx, dword [edi + 0x6c]
add edx, eax
cmp dword [edi + 0x70], ecx
jg 0x6d4a5e
mov eax, dword [esp + 0x1c]
mov ecx, edi
push edx
inc eax
mov edx, 0x4b
push eax
push 0
call fcn.0067ad20
add esp, 0xc
jmp 0x6d4a96
mov esi, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0x30]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc esi
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x50]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d4ab9
push 0
push dword [esp + 0x24]
mov edx, 0xa
mov ecx, edi
push dword [esp + 0x24]
call fcn.0067ad20
add esp, 0xc
jmp 0x6d4aec
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x3c]
mov edx, 0x80
neg ecx
mov eax, 0x40
push 0
sbb ecx, ecx
and ecx, 0x200
cmp byte [esp + 0x10c], 2
cmove eax, edx
mov edx, dword [esp + 0x30]
or cx, ax
or cx, word [esp + 0x10]
movzx eax, cx
mov ecx, ebx
push eax
push dword [esp + 0x18]
mov eax, dword [esp + 0x7c]
push eax
push dword [esp + 0x58]
push dword [esp + 0x4c]
call fcn.006f0800
mov ecx, eax
add esp, 0x18
mov dword [esp + 0x38], ecx
test ecx, ecx
jne 0x6d4b62
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x34]
test eax, eax
je 0x6d5fb1
mov edx, eax
call fcn.00694800
jmp 0x6d5fad
cmp dword [ebx + 0x48], 0
je 0x6d4bbf
cmp word [esi + 2], 0
mov edx, dword [esi + 0x1c]
mov dword [esi + 0x18], edx
jbe 0x6d4bad
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
dec ecx
test edx, edx
jle 0x6d4ba6
mov edx, dword [esi + 0x14]
mov ebx, dword [esi + 0x1c]
add edx, 0xe
lea esp, [esp]
movsx eax, word [edx]
lea edx, [edx + 0x10]
cmp eax, ecx
cmovle eax, ecx
mov ecx, eax
sub ebx, 1
jne 0x6d4b90
mov ebx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov word [esi + 2], ax
lea edx, [esp + 0xe8]
mov ecx, esi
call fcn.006d1e20
mov ecx, dword [esp + 0x38]
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [ebx + 0x2c]
add eax, dword [esi + 0x24]
add eax, dword [esi + 0x18]
mov dword [ebx + 0x2c], eax
movzx eax, byte [ecx + 0x2f]
mov dword [esp + 0x14], eax
mov al, byte [ecx + 0x2d]
xor ecx, ecx
test al, al
movsx edx, al
mov eax, dword [esp + 0x48]
cmovns ecx, edx
cmp ecx, dword [eax]
jne 0x6d4bfc
mov dword [esp + 0x68], 0
jmp 0x6d4f60
cmp byte [esp + 0x108], 0
je 0x6d4c15
mov eax, dword [esp + 0x10]
test byte [eax + 4], 1
mov eax, str.DISTINCT
je 0x6d4c1a
mov eax, str.GROUP_BY
push eax
push str.USE_TEMP_B_TREE_FOR__s
push 0
push ebx
call fcn.0067b4b0
mov eax, dword [esp + 0x58]
add esp, 0x10
mov dword [esp + 0x68], 1
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x44], eax
mov edx, eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x24], eax
test eax, eax
jle 0x6d4c91
mov edi, dword [esi + 0x14]
mov ebx, eax
add edi, 0xe
mov esi, edx
lea ebx, [ebx]
movsx ecx, word [edi]
lea eax, [esi + 1]
cmp ecx, edx
lea edi, [edi + 0x10]
cmovl eax, esi
mov esi, eax
lea eax, [edx + 1]
cmovl eax, edx
mov edx, eax
sub ebx, 1
jne 0x6d4c60
mov edi, dword [esp + 0x58]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x54], esi
mov esi, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
cmp ecx, 1
jne 0x6d4cbc
mov al, byte [ebx + 0x13]
test al, al
jne 0x6d4ca7
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [esp + 0x2c], eax
jmp 0x6d4cdf
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0xa0]
mov dword [esp + 0x2c], eax
jmp 0x6d4ce2
mov edx, dword [ebx + 0x20]
mov dword [esp + 0x2c], edx
cmp ecx, dword [ebx + 0x1c]
jg 0x6d4cd3
sub dword [ebx + 0x1c], ecx
lea eax, [ecx + edx]
mov dword [ebx + 0x20], eax
jmp 0x6d4ce2
mov eax, dword [ebx + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [esp + 0x2c], edx
mov dword [ebx + 0x2c], eax
mov edx, dword [esp + 0x48]
mov ecx, ebx
push 0
push 0
push dword [esp + 0x34]
call fcn.0069a940
xor ecx, ecx
mov byte [esi], 1
add esp, 0xc
mov dword [esp + 0x24], ecx
cmp dword [esi + 0x18], ecx
jle 0x6d4d4e
xor edi, edi
jmp 0x6d4d10
mov edx, dword [esi + 0x14]
movsx eax, word [edx + edi + 0xe]
cmp eax, dword [esp + 0x44]
jl 0x6d4d3d
mov eax, dword [esp + 0x44]
mov ecx, ebx
add eax, dword [esp + 0x2c]
mov edx, dword [edx + edi + 4]
push eax
call fcn.0069a8d0
mov ecx, dword [esp + 0x28]
add esp, 4
inc dword [esp + 0x44]
inc ecx
add edi, 0x10
mov dword [esp + 0x24], ecx
cmp ecx, dword [esi + 0x18]
jl 0x6d4d10
mov edi, dword [esp + 0x58]
mov byte [esi], 0
mov al, byte [ebx + 0x13]
test al, al
jne 0x6d4d61
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebx + 0x2c], eax
jmp 0x6d4d70
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0xa0]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x44], eax
cmp dword [edi + 0x70], ecx
jg 0x6d4d9b
mov edx, dword [esp + 0x54]
mov ecx, edi
push eax
push edx
push dword [esp + 0x34]
mov edx, 0x61
call fcn.0067ad20
mov edx, dword [esp + 0x50]
add esp, 0xc
jmp 0x6d4dce
mov edx, dword [esp + 0x2c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov eax, dword [esi + 4]
mov dword [esp + 0x24], eax
cmp dword [edi + 0x70], ecx
jg 0x6d4df6
push 0
push edx
push eax
mov edx, 0x8b
mov ecx, edi
call fcn.0067ad20
mov edx, dword [esp + 0x50]
add esp, 0xc
jmp 0x6d4e29
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x24]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x58]
mov dword [eax + ecx*4], 0x8b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test edx, edx
je 0x6d4e41
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x6d4e41
movzx eax, al
mov dword [ebx + eax*4 + 0xa0], edx
inc byte [ebx + 0x13]
mov eax, dword [esp + 0x54]
cmp eax, 1
jne 0x6d4e68
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x6d4e77
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x6d4e77
movzx eax, al
mov dword [ebx + eax*4 + 0xa0], ecx
inc byte [ebx + 0x13]
jmp 0x6d4e77
cmp eax, dword [ebx + 0x1c]
jle 0x6d4e77
mov dword [ebx + 0x1c], eax
mov eax, dword [esp + 0x2c]
mov dword [ebx + 0x20], eax
mov ecx, dword [esp + 0x38]
call fcn.006f1780
mov edx, dword [ebx + 0x28]
mov dword [esi + 8], edx
mov al, byte [ebx + 0x13]
inc dword [ebx + 0x28]
mov dword [esp + 0x24], edx
test al, al
jne 0x6d4e9d
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebx + 0x2c], eax
jmp 0x6d4eac
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0xa0]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x44], eax
cmp dword [edi + 0x70], ecx
jg 0x6d4ed3
mov edx, dword [esp + 0x54]
mov ecx, edi
push edx
push eax
push dword [esp + 0x2c]
mov edx, 0x79
call fcn.0067ad20
add esp, 0xc
jmp 0x6d4f06
mov ebx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 4]
cmp dword [edi + 0x70], ecx
jg 0x6d4f29
push 0
push dword [esp + 0x70]
mov ecx, edi
push edx
mov edx, 0x22
call fcn.0067ad20
add esp, 0xc
jmp 0x6d4f5c
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x58]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x6c]
mov dword [eax + ecx*4], 0x22
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 1], 1
cmp dword [ebx + 0x48], 0
je 0x6d4fdb
xor eax, eax
mov dword [esp + 0x84], 0x6d1ec0
mov dword [esp + 0x80], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
cmp dword [esi + 0x24], eax
jle 0x6d4fdb
xor ecx, ecx
xor ebx, ebx
mov dword [esp + 0x54], ecx
lea ebx, [ebx]
mov eax, dword [esi + 0x20]
mov edx, dword [ecx + eax]
test edx, edx
je 0x6d4fca
lea ecx, [esp + 0x80]
call fcn.0068e3e0
mov ecx, dword [esp + 0x54]
inc ebx
add ecx, 0x10
mov dword [esp + 0x54], ecx
cmp ebx, dword [esi + 0x24]
jl 0x6d4fb0
mov ebx, dword [esp + 0x30]
cmp dword [esp + 0x3c], 0
je 0x6d5040
mov eax, dword [esp + 0x34]
test byte [eax + 0x50], 4
jne 0x6d5040
cmp dword [esp + 0x68], 0
jne 0x6d4ffd
mov eax, dword [esp + 0x38]
test byte [eax + 0x30], 8
je 0x6d5040
mov dword [esp + 0x9c], 0
mov ecx, dword [edi]
cmp byte [ecx + 0x57], 0
jne 0x6d5040
mov eax, dword [esp + 0xb0]
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + edx*4 + 0x10]
lea esi, [eax + edx*4]
movsx edx, byte [esi + 1]
call fcn.0067ba70
mov word [esi], 0xb8
add esp, 4
mov dword [esi + 0x10], 0
mov esi, dword [esp + 0x50]
cmp dword [esp + 0x68], 0
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x54], ecx
je 0x6d50a3
mov edx, dword [esi + 4]
cmp dword [edi + 0x70], ecx
jg 0x6d5070
push dword [esp + 0x24]
mov ecx, edi
push dword [esp + 0x48]
push edx
mov edx, 0x85
call fcn.0067ad20
add esp, 0xc
jmp 0x6d50a3
mov ebx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x24]
mov dword [eax + ecx*4], 0x85
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x48]
xor eax, eax
mov dword [esp + 0x3c], eax
cmp dword [ecx], eax
jle 0x6d5157
add ecx, 8
mov dword [esp + 0x44], ecx
lea esp, [esp]
mov edx, dword [esp + 0x78]
add edx, eax
cmp dword [esp + 0x68], 0
mov dword [esp + 0x58], edx
je 0x6d5125
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d50f0
push edx
push eax
push dword [esp + 0x2c]
mov edx, 0x5e
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5135
mov edx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x58]
mov dword [eax + ecx*4], 0x5e
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x6d5135
mov byte [esi], 1
push edx
mov edx, dword [ecx]
mov ecx, ebx
call fcn.0069a8d0
add esp, 4
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x48]
inc eax
mov ecx, dword [esp + 0x44]
add ecx, 0x14
mov dword [esp + 0x3c], eax
mov dword [esp + 0x44], ecx
cmp eax, dword [edx]
jl 0x6d50c0
mov ecx, edx
mov eax, dword [esp + 0x74]
test eax, eax
je 0x6d5161
inc dword [eax]
mov edx, dword [edi + 0x6c]
mov eax, dword [ecx]
mov dword [esp + 0x3c], eax
cmp dword [edi + 0x70], edx
jg 0x6d518d
push eax
mov eax, dword [esp + 0x20]
mov edx, 0x5a
push dword [esp + 0x7c]
inc eax
mov ecx, edi
push eax
call fcn.0067ad20
add esp, 0xc
mov edx, eax
jmp 0x6d51c9
mov esi, dword [esp + 0x1c]
lea eax, [edx + 1]
mov ebx, dword [esp + 0x30]
lea ecx, [edx + edx*4]
mov dword [edi + 0x6c], eax
inc esi
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x78]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x3c]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x50]
mov dword [eax + ecx*4], 0x5a
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
cmp byte [ecx + 0x57], 0
je 0x6d51e5
mov edx, dword [esp + 0x74]
push edx
mov edx, 0xfffffff8
call fcn.0067ba70
add esp, 4
jmp 0x6d521d
test edx, edx
jns 0x6d51ed
mov edx, dword [edi + 0x6c]
dec edx
mov eax, dword [edi + 0x68]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov edx, dword [esp + 0x74]
je 0x6d5212
push 0xfffffffffffffff8
push edx
mov edx, eax
mov ecx, edi
call fcn.0067bb60
add esp, 8
jmp 0x6d521d
test edx, edx
je 0x6d521d
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov eax, dword [edi + 0x6c]
mov dword [esp + 0x24], eax
lea edx, [eax + 1]
cmp dword [edi + 0x70], eax
jg 0x6d5241
push edx
push 0
push edx
mov edx, 0xe
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d526d
mov esi, dword [esp + 0x50]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
mov dword [edi + 0x6c], edx
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebx + 8]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x3c], ecx
mov edx, dword [ecx + 0x6c]
mov eax, dword [eax]
mov dword [esp + 0x44], eax
cmp dword [ecx + 0x70], edx
jg 0x6d52a3
push eax
mov eax, dword [esp + 0x20]
mov edx, 0x4f
inc eax
push eax
push dword [esp + 0x80]
call fcn.0067ad20
add esp, 0xc
jmp 0x6d52df
mov ebx, dword [esp + 0x30]
lea eax, [edx + 1]
mov dword [ecx + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x78]
mov eax, dword [eax + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x1c]
inc edx
mov dword [eax + ecx*4], 0x4f
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d5307
mov eax, dword [esp + 0x4c]
mov edx, 0xa
push 0
push dword [esp + 0x80]
inc eax
mov ecx, edi
push eax
call fcn.0067ad20
add esp, 0xc
jmp 0x6d533f
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x50]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d5362
push 0
push dword [esp + 0x70]
mov edx, 0x3b
mov ecx, edi
push dword [esp + 0x54]
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5395
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x6c]
mov dword [eax + ecx*4], 0x3b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d53b8
push 0
push dword [esp + 0x24]
mov edx, 0xa
mov ecx, edi
push dword [esp + 0x24]
call fcn.0067ad20
add esp, 0xc
jmp 0x6d53eb
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x6d53fd
mov eax, 0x96e3e0
jmp 0x6d540a
mov eax, dword [esp + 0x24]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
push dword [esp + 0x14]
mov dword [eax + 8], edx
mov ecx, ebx
mov edx, dword [esp + 0x60]
push esi
call fcn.006d21c0
mov ecx, dword [edi + 0x6c]
add esp, 8
cmp dword [edi + 0x70], ecx
jg 0x6d5441
push 0
push dword [esp + 0x60]
mov edx, 0x47
mov ecx, edi
push 1
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5474
mov edx, dword [esp + 0x5c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x68], 0
je 0x6d54d3
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 4]
cmp dword [edi + 0x70], ecx
jg 0x6d549e
push 0
push dword [esp + 0x58]
mov ecx, edi
push edx
mov edx, 0x25
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5511
mov ebx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4], 0x25
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x6d5511
mov ecx, dword [esp + 0x38]
call fcn.006f1780
mov ecx, dword [edi]
cmp byte [ecx + 0x57], 0
jne 0x6d5511
mov eax, dword [esp + 0x28]
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + edx*4 + 0x10]
lea esi, [eax + edx*4]
movsx edx, byte [esi + 1]
call fcn.0067ba70
mov word [esi], 0xb8
add esp, 4
mov dword [esi + 0x10], 0
mov esi, dword [esp + 0x50]
mov eax, dword [esp + 0x70]
test eax, eax
je 0x6d5524
mov ecx, dword [esp + 0x34]
mov edx, eax
call fcn.00694800
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d554c
mov eax, dword [esp + 0x4c]
mov edx, 0xa
push 0
push dword [esp + 0x80]
inc eax
mov ecx, edi
push eax
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5584
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0x30]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d55a5
push 0
push dword [esp + 0x70]
mov edx, 9
mov ecx, edi
push 0
call fcn.0067ad20
add esp, 0xc
jmp 0x6d55d8
mov edx, dword [esp + 0x6c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x38], ecx
cmp dword [edi + 0x70], ecx
jg 0x6d5601
push 0
push dword [esp + 0x50]
mov edx, 0x47
mov ecx, edi
push 1
call fcn.0067ad20
mov edx, dword [esp + 0x58]
add esp, 0xc
jmp 0x6d5634
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d5655
push 0
lea eax, [edx + 1]
mov ecx, edi
push 0
push eax
mov edx, 0x43
call fcn.0067ad20
add esp, 0xc
jmp 0x6d568d
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x50]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x7c]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d56ab
push edx
mov edx, edi
call fcn.0067b700
add esp, 4
jmp 0x6d56b4
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [edi + 0x6c]
lea ecx, [eax + 2]
lea edx, [eax + 1]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x28], edx
cmp dword [edi + 0x70], eax
jg 0x6d56e2
push 0
push ecx
push dword [esp + 0x64]
mov edx, 0x3b
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d571a
mov ebx, dword [esp + 0x5c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
mov dword [edi + 0x6c], edx
mov dword [esp + 0x28], edx
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x3c]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x3b
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d573d
mov eax, dword [esp + 0x4c]
mov edx, 0x43
push 0
inc eax
mov ecx, edi
push 0
push eax
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5775
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x50]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, esi
mov ecx, ebx
call fcn.006d20e0
push 0x10
push dword [esp + 0x2c]
push dword [esp + 0x68]
push ebx
call fcn.0069b1e0
push dword [esp + 0x48]
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x11c]
push dword [esp + 0x3c]
mov ecx, ebx
push dword [esp + 0x7c]
push eax
lea eax, [esp + 0xbc]
push eax
push 0xffffffffffffffff
call fcn.006c8d70
mov ecx, dword [edi + 0x6c]
add esp, 0x28
cmp dword [edi + 0x70], ecx
jg 0x6d57dd
mov eax, dword [esp + 0x4c]
mov edx, 0x43
push 0
inc eax
mov ecx, edi
push 0
push eax
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5815
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x50]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x20]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d5833
push edx
mov edx, edi
call fcn.0067b700
add esp, 4
jmp 0x6d583c
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov edx, esi
mov ecx, ebx
call fcn.006d1f10
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d5866
push 0
push dword [esp + 0x60]
mov edx, 0x47
mov ecx, edi
push 0
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5899
mov edx, dword [esp + 0x5c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d58ba
push 0
push 0
push dword [esp + 0x24]
mov edx, 0x43
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d58ed
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp word [esp + 0xc], 0
je 0x6d5eff
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x6d5eff
mov eax, dword [esi + 0x20]
mov edx, ecx
mov ecx, ebx
push dword [eax + 0xc]
push dword [eax + 8]
call fcn.006c8ca0
add esp, 8
jmp 0x6d5eff
mov eax, dword [esp + 0x10]
cmp dword [eax + 0x24], 0
jne 0x6d5c9c
mov edx, dword [eax + 0x1c]
cmp dword [edx], 1
jne 0x6d5c9c
mov ecx, dword [eax + 0x20]
cmp dword [ecx], 1
jne 0x6d5c9c
cmp dword [ecx + 0x1c], 0
jne 0x6d5c9c
cmp dword [esi + 0x24], 1
jne 0x6d5c9c
cmp dword [eax + 0x2c], 0
jne 0x6d5c9c
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x20], ecx
cmp byte [ecx + 0x2b], 0
jne 0x6d5c9c
mov edx, dword [edx + 8]
cmp byte [edx], 0xa8
jne 0x6d5c9c
cmp dword [edx + 0x28], esi
jne 0x6d5c9c
mov eax, dword [esi + 0x20]
mov eax, dword [eax + 4]
test dword [eax + 4], 0x100
je 0x6d5c9c
test dword [edx + 4], 0x1000004
jne 0x6d5c9c
mov esi, dword [ecx + 0x3c]
mov edx, 0xffff8000
mov dword [esp + 0x38], edx
test esi, esi
je 0x6d59dc
mov eax, dword [ebx]
xor edx, edx
mov dword [esp + 0x38], edx
mov eax, dword [eax + 0x10]
add eax, 0xc
cmp dword [eax], esi
je 0x6d59dc
jmp 0x6d59d0
lea eax, [eax + 0x10]
inc edx
cmp dword [eax], esi
jne 0x6d59d0
mov dword [esp + 0x38], edx
mov eax, dword [ebx + 0x28]
xor esi, esi
mov dword [esp + 0x24], eax
inc eax
mov dword [ebx + 0x28], eax
xor eax, eax
mov dword [esp + 0x28], eax
mov eax, dword [ecx + 0x14]
mov ecx, ebx
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x7c]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x3c], ecx
mov eax, dword [ecx + 0x58]
mov ecx, edx
mov dword [esp + 0x14], eax
mov eax, 1
shl eax, cl
test dword [esp + 0x14], eax
jne 0x6d5a34
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x14]
bts eax, edx
mov dword [ecx + 0x58], eax
cmp edx, 1
jne 0x6d5a39
call fcn.006ad110
jmp 0x6d5a61
cmp edx, 1
je 0x6d5a61
mov eax, dword [ebx]
mov ecx, edx
add ecx, ecx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx*8 + 4]
cmp byte [eax + 9], 0
je 0x6d5a61
mov ecx, dword [esp + 0x20]
push dword [ecx]
push 0
push dword [ecx + 0x14]
mov ecx, ebx
call fcn.006a4060
add esp, 0xc
mov edx, dword [esp + 0x20]
test byte [edx + 0x1c], 0x80
je 0x6d5a82
mov esi, dword [edx + 8]
test esi, esi
je 0x6d5a82
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x6d5a82
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x6d5a72
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x20]
test byte [eax + 0x30], 1
jne 0x6d5abf
mov eax, dword [edx + 8]
test eax, eax
je 0x6d5abf
test byte [eax + 0x38], 4
jne 0x6d5ab8
movzx ecx, word [eax + 0x30]
cmp cx, word [edx + 0x28]
jge 0x6d5ab8
cmp dword [eax + 0x24], 0
jne 0x6d5ab8
test esi, esi
je 0x6d5ab6
cmp cx, word [esi + 0x30]
jge 0x6d5ab8
mov esi, eax
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x6d5a96
test esi, esi
je 0x6d5ad7
mov eax, dword [esi + 0x2c]
mov edx, esi
mov ecx, ebx
mov dword [esp + 0xc], eax
call fcn.006ada20
mov dword [esp + 0x28], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d5b00
mov edx, dword [esp + 0x38]
mov ecx, edi
push 1
push edx
mov edx, dword [esp + 0x14]
push edx
push dword [esp + 0x30]
mov edx, 0x70
call fcn.0067ad60
add esp, 0x10
jmp 0x6d5b33
mov edx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0xc]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x38]
mov dword [eax + ecx*4], 0xfd70
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 1
mov edx, dword [esp + 0x28]
test edx, edx
je 0x6d5b7f
mov ecx, dword [edi]
cmp byte [ecx + 0x57], 0
je 0x6d5b53
push edx
mov edx, 0xfffffff8
call fcn.0067ba70
add esp, 4
jmp 0x6d5b7f
mov eax, dword [edi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 - 0x13], 0
lea eax, [eax + ecx*4]
je 0x6d5b78
push 0xfffffffffffffff8
push edx
lea edx, [eax - 0x14]
mov ecx, edi
call fcn.0067bb60
add esp, 8
jmp 0x6d5b7f
mov dword [eax - 4], edx
mov byte [eax - 0x13], 0xf8
mov ecx, dword [esp + 0x50]
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ecx + 0xc], eax
mov eax, dword [ecx + 0x24]
add eax, dword [ecx + 0x18]
add dword [ebx + 0x2c], eax
mov edx, dword [ecx + 0x18]
add edx, dword [ecx + 0xc]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d5bb9
push 0
push edx
push dword [esp + 0x2c]
mov edx, 0x62
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5bec
mov ebx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x62
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d5c0d
push 0
push 0
push dword [esp + 0x2c]
mov edx, 0x7a
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5c40
mov edx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x7a
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [ebx + 0xd7], 2
jne 0x6d5ec9
mov ecx, dword [esp + 0x20]
test esi, esi
je 0x6d5c6d
test byte [ecx + 0x1c], 0x80
je 0x6d5c64
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x6d5c6d
mov eax, dword [esi]
mov edx, 1
jmp 0x6d5c74
xor edx, edx
mov eax, 0x775914
push eax
test edx, edx
mov eax, str._USING_COVERING_INDEX
mov esi, 0x775914
cmove eax, esi
push eax
push dword [ecx]
push str.SCAN__s_s_s
push 0
push ebx
call fcn.0067b4b0
add esp, 0x18
jmp 0x6d5ec9
cmp dword [esi + 0x1c], 0
mov eax, dword [esi + 0x24]
mov dword [esp + 0xc], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x14], 0
je 0x6d5d61
xor edx, edx
test eax, eax
jle 0x6d5cfc
mov ecx, dword [esi + 0x20]
mov esi, eax
lea esp, [esp]
mov eax, dword [ecx]
test dword [eax + 4], 0x1000000
jne 0x6d5ce8
mov eax, dword [ecx + 4]
mov dword [esp + 0x3c], esi
test byte [eax + 4], 0x20
jne 0x6d5cf4
inc edx
add ecx, 0x10
mov eax, esi
cmp edx, esi
jl 0x6d5cd0
jmp 0x6d5cf8
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x50]
cmp edx, eax
jne 0x6d5d85
inc dword [ebx + 0x2c]
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebx + 0x2c]
mov dword [esp + 0xc], edx
cmp dword [edi + 0x70], ecx
jg 0x6d5d2c
push 0
push edx
push 0
mov edx, 0x47
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5d85
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x58]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x6d5d85
cmp eax, 1
jne 0x6d5d85
mov eax, dword [esi + 0x20]
cmp dword [eax + 8], 0
jl 0x6d5d85
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x28], eax
neg eax
sbb eax, eax
and eax, 0x500
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x2c]
mov edx, esi
inc eax
mov ecx, ebx
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x24]
add eax, dword [esi + 0x18]
add dword [ebx + 0x2c], eax
call fcn.006d1f10
movzx eax, byte [esp + 0x1b]
mov ecx, ebx
or ax, word [esp + 0x14]
mov edx, dword [esp + 0x2c]
push 0
movzx eax, ax
push eax
push dword [esp + 0x18]
push dword [esp + 0x34]
push dword [esp + 0xd4]
push dword [esp + 0x4c]
call fcn.006f0800
add esp, 0x18
mov dword [esp + 0x20], eax
test eax, eax
je 0x6d5fad
movzx eax, byte [eax + 0x2f]
mov ecx, ebx
mov edx, dword [esp + 0xc]
push eax
push esi
mov dword [esp + 0x1c], eax
call fcn.006d21c0
mov edx, dword [esp + 0x1c]
add esp, 8
test edx, edx
je 0x6d5e12
mov eax, dword [esi + 0x20]
test eax, eax
je 0x6d5e12
push dword [eax + 0xc]
mov ecx, ebx
push dword [eax + 8]
call fcn.006c8ca0
add esp, 8
mov edx, dword [esp + 0xc]
test edx, edx
je 0x6d5e6b
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x6d5e38
push 0
push edx
push 1
mov edx, 0x47
mov ecx, edi
call fcn.0067ad20
add esp, 0xc
jmp 0x6d5e6b
mov esi, dword [esp + 0x50]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0x1b], 0
mov eax, dword [esp + 0x20]
je 0x6d5eb9
test byte [eax + 0x30], 4
je 0x6d5eb9
cmp byte [eax + 0x2d], 0
je 0x6d5eb9
movzx ecx, byte [eax + 0x2c]
sub ecx, 1
js 0x6d5eab
lea edx, [ecx + ecx*2]
shl edx, 5
add edx, eax
mov eax, dword [edx + 0x348]
test byte [eax + 0x2c], 4
jne 0x6d5f1d
sub edx, 0x60
sub ecx, 1
jns 0x6d5e93
mov eax, dword [esp + 0x20]
mov edx, dword [eax + 0x20]
mov ecx, edi
call fcn.0067aed0
mov eax, dword [esp + 0x20]
mov ecx, eax
call fcn.006f1780
mov edx, esi
mov ecx, ebx
call fcn.006d20e0
mov esi, dword [esp + 0x6c]
push 0x10
push esi
push dword [esp + 0x68]
mov dword [esp + 0xa8], 0
push ebx
call fcn.0069b1e0
mov edx, dword [esp + 0x20]
mov ecx, ebx
push esi
push esi
push dword [esp + 0x7c]
push 0
push 0
push 0xffffffffffffffff
call fcn.006c8d70
add esp, 0x28
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x6c]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d5f25
push edx
mov edx, edi
call fcn.0067b700
add esp, 4
jmp 0x6d5f2e
mov edx, dword [edx + 0x308]
jmp 0x6d5eae
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
cmp byte [esp + 0x109], 3
jne 0x6d5f4d
push str.DISTINCT
push str.USE_TEMP_B_TREE_FOR__s
push 0
push ebx
call fcn.0067b4b0
add esp, 0x10
cmp dword [esp + 0x9c], 0
je 0x6d5f77
mov eax, dword [esp + 0x40]
mov ecx, ebx
push dword [esp + 0x64]
mov edx, dword [esp + 0x14]
push dword [eax]
lea eax, [esp + 0xa4]
push eax
call fcn.006c9e50
add esp, 0xc
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0xe4]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x6d5f98
push edx
mov edx, edi
call fcn.0067b700
add esp, 4
jmp 0x6d5fa1
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
xor eax, eax
cmp dword [ebx + 0x24], eax
setg al
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0xc4]
test eax, eax
je 0x6d2e20
mov edx, eax
call fcn.00694800
jmp 0x6d2e20
mov edx, dword [ebx + 8]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x6d5ffc
mov eax, 0x96e3e0
mov eax, dword [eax + 8]
mov dword [ebx + 0xe4], eax
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.0073297b
mov esp, ebp
pop ebp
ret
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xe4], eax
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.0073297b
mov esp, ebp
pop ebp
ret
mov esi, dword [ebx + 8]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x6d6057
mov eax, 0x96e3e0
mov eax, dword [eax + 8]
mov dword [ebx + 0xe4], eax
mov eax, dword [esp + 0x68]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.0073297b
mov esp, ebp
pop ebp
ret
lea edx, [ecx + ecx*4]
mov ecx, dword [esi + 0x68]
lea eax, [ecx + edx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xe4], eax
mov eax, dword [esp + 0x68]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.0073297b
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x114]
mov eax, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0073297b
mov esp, ebp
pop ebp
ret