Function at 0x1006671d
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x10c
push ebx
mov ebx, ecx
mov dword [esp + 0x54], 1
push esi
xor eax, eax
mov dword [esp + 0x50], ebx
push edi
mov edi, dword [ebx]
mov esi, edx
mov dword [esp + 0x44], esi
mov dword [esp + 0x74], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x20], edi
call fcn.10063338
mov dword [esp + 0x18], eax
test esi, esi
je 0x10067c61
cmp byte [edi + 0x51], 0
jne 0x10067c61
xor eax, eax
cmp dword [ebx + 0x24], eax
jne 0x10067c61
push eax
push eax
push eax
push 0x15
pop edx
mov ecx, ebx
call fcn.100517b7
add esp, 0xc
test eax, eax
jne 0x10067c61
push 0x30
push eax
lea eax, [esp + 0x88]
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp + 8]
add esp, 0xc
cmp byte [eax], 8
ja 0x100667c0
mov edx, dword [esi + 0x30]
test edx, edx
je 0x100667b7
mov ecx, edi
call fcn.1004a8e4
xor eax, eax
and dword [esi + 8], 0xfffffffe
mov dword [esi + 0x30], eax
xor eax, eax
mov edx, esi
push eax
mov ecx, ebx
call fcn.1006623b
xor eax, eax
pop ecx
cmp dword [ebx + 0x24], eax
jne 0x10066991
cmp byte [edi + 0x51], al
jne 0x10066991
mov eax, dword [ebp + 8]
cmp byte [eax], 9
jne 0x100667f2
mov edx, esi
mov ecx, ebx
call fcn.10062e30
mov edx, esi
mov ecx, ebx
call fcn.10075d36
test eax, eax
jne 0x10066991
mov eax, dword [esi + 0x20]
lea edi, [esp + 0xb0]
mov dword [esp + 0x24], eax
xor edx, edx
mov eax, dword [esi + 8]
shr eax, 3
and eax, 1
mov dword [esp + 0x38], eax
xor eax, eax
push 0xa
pop ecx
rep stosd dword es:[edi], eax
mov ecx, edx
mov eax, dword [esi + 0x30]
mov dword [esp + 0xb0], eax
mov dword [esp + 0x10], ecx
cmp dword [esi + 0x34], edx
jne 0x10066950
mov edi, dword [esp + 0x24]
cmp ecx, dword [edi]
jge 0x100669d6
imul eax, ecx, 0x48
mov dword [esp + 0x14], eax
test byte [eax + edi + 0x2c], 8
mov ebx, dword [eax + edi + 0x18]
mov edx, dword [eax + edi + 0x1c]
mov dword [esp + 0x1c], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x34], edx
je 0x100668aa
mov edx, dword [eax + edi + 0x34]
mov ecx, dword [esi + 0x24]
call fcn.1004df96
test eax, eax
je 0x100668a2
mov eax, dword [esp + 0x20]
mov ecx, 0x2000
test word [eax + 0x4c], cx
jne 0x100668a2
mov edx, dword [esp + 0x14]
and byte [edx + edi + 0x2c], 0xd7
mov edx, dword [edx + edi + 0x34]
mov ecx, dword [esi + 0x24]
call fcn.100619b4
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x34]
test edx, edx
je 0x10066940
mov eax, dword [edx]
mov ebx, dword [esp + 0x1c]
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
movsx eax, word [ebx + 0x2a]
mov ebx, dword [esp + 0x54]
cmp eax, dword [esp + 0x3c]
jne 0x10066974
test byte [edx + 8], 8
jne 0x10066940
xor eax, eax
cmp dword [edx + 0x30], eax
je 0x100668f5
test ecx, ecx
jne 0x100668f5
test dword [esi + 8], 0x40000
je 0x100668f5
cmp dword [edi], 1
je 0x10066940
test byte [edi + 0x74], 0xa
jne 0x10066940
push dword [esp + 0x38]
mov edx, esi
push ecx
mov ecx, ebx
call fcn.10064cfa
pop ecx
pop ecx
test eax, eax
je 0x10066915
xor eax, eax
cmp dword [ebx + 0x24], eax
jne 0x1006698d
or dword [esp + 0x10], 0xffffffff
mov eax, dword [esp + 0x20]
mov edi, dword [esi + 0x20]
mov dword [esp + 0x24], edi
cmp byte [eax + 0x51], 0
jne 0x10067c5a
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0x10]
cmp byte [eax], 8
jbe 0x10066940
mov eax, dword [esi + 0x30]
mov dword [esp + 0xb0], eax
inc ecx
xor edx, edx
mov dword [esp + 0x10], ecx
cmp dword [esi + 0x34], edx
je 0x10066844
push dword [ebp + 8]
mov edx, esi
mov ecx, ebx
call fcn.10063916
mov edi, eax
xor eax, eax
pop ecx
cmp dword [esi + 0x38], eax
jne 0x1006696d
mov ecx, ebx
call fcn.1003b288
mov eax, edi
jmp 0x10067c64
push dword [esp + 0x3c]
mov ecx, dword [esp + 0x20]
push dword [ecx]
push eax
push str.expected__d_columns_for__s_but_got__d
push ebx
call fcn.100261f3
add esp, 0x14
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x74]
test eax, eax
je 0x100669a2
mov edx, eax
mov ecx, edi
call fcn.1004a8e4
mov edx, dword [esp + 0x9c]
test edx, edx
je 0x100669b4
mov ecx, edi
call fcn.10023dc7
mov edx, dword [esp + 0xa8]
test edx, edx
je 0x100669c6
mov ecx, edi
call fcn.10023dc7
mov ecx, ebx
call fcn.1003b288
mov eax, dword [esp + 0x5c]
jmp 0x10067c64
cmp dword [edi], 1
jle 0x100669f0
mov eax, dword [esp + 0x20]
cmp word [eax + 0x4c], dx
jl 0x100669f0
mov edx, esi
mov ecx, ebx
call fcn.100653a6
xor edx, edx
mov eax, edx
mov dword [esp + 0x60], 0x10091798
mov dword [esp + 0x34], eax
cmp dword [edi], edx
jle 0x10066cd6
mov dword [esp + 0x24], edi
imul edx, eax, 0x48
add edx, 8
add edx, edi
mov dword [esp + 0x30], edx
mov eax, dword [edx + 0x38]
lea ecx, [edx + 8]
or eax, dword [edx + 0x3c]
mov dword [esp + 0x3c], ecx
jne 0x10066a42
push dword [edx + 4]
push 0x10091798
push dword [ecx]
mov ecx, ebx
push 0x14
pop edx
call fcn.100517b7
mov edx, dword [esp + 0x3c]
add esp, 0xc
jmp 0x10066a46
mov dword [esp + 0x3c], ecx
mov ecx, dword [edx + 0x14]
mov dword [esp + 0x10], ecx
test ecx, ecx
je 0x10066cc5
mov eax, dword [esp + 0x20]
mov edi, 0x1000
test word [eax + 0x4c], di
mov edi, dword [esp + 0x24]
jne 0x10066a89
movzx eax, byte [edx + 0x24]
shr eax, 5
and eax, 1
push eax
push dword [edx + 0x2c]
mov edx, ecx
mov ecx, ebx
push dword [esi + 0x24]
call fcn.1006543c
mov edx, dword [esp + 0x3c]
add esp, 0xc
cmp dword [esp + 0x34], 0
mov eax, dword [ebx + 0xe8]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
mov dword [ebx + 0xe8], eax
jne 0x10066b78
cmp dword [edi], 1
je 0x10066ab9
test byte [edi + 0x74], 0xa
je 0x10066b78
mov ecx, dword [esp + 0x18]
mov edi, dword [ecx + 0x6c]
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [edx + 0x1c], eax
lea esi, [edi + 1]
push esi
push 0
push eax
push 0xd
pop edx
call fcn.1003b08d
mov eax, dword [esp + 0x3c]
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xdc], 0xd
mov dword [eax + 0x18], esi
mov esi, eax
mov eax, dword [esi + 0x1c]
mov dword [esp + 0xe0], eax
xor eax, eax
mov dword [esp + 0xec], eax
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], eax
push dword [ecx + 0x14]
push str.CO_ROUTINE__u
push 1
push ebx
call fcn.1003b239
mov edx, dword [esp + 0x20]
lea eax, [esp + 0xec]
push eax
mov ecx, ebx
call fcn.1006671d
mov eax, dword [esp + 0x24]
add esp, 0x14
mov ecx, dword [esi + 0x10]
mov ax, word [eax + 6]
mov word [ecx + 0x2c], ax
mov eax, dword [esp + 0xe4]
mov edx, dword [esi + 0x1c]
mov ecx, dword [esp + 0x18]
or dword [esi + 0x28], 0x10
mov dword [esi + 0x20], eax
call fcn.1003b324
mov edx, edi
mov edi, dword [esp + 0x18]
mov ecx, edi
call fcn.1003b7e1
mov ecx, dword [edi + 0x6c]
mov dword [eax + 8], ecx
jmp 0x10066c9e
mov eax, dword [ebx + 0x2c]
xor ecx, ecx
mov edi, dword [esp + 0x18]
inc eax
push ecx
push eax
push ecx
mov dword [ebx + 0x2c], eax
mov dword [esp + 0x48], ecx
mov ecx, edi
mov dword [edx + 0x1c], eax
push 0x46
pop edx
call fcn.1003b08d
mov esi, dword [esp + 0x3c]
add esp, 0xc
mov dword [esp + 0x1c], eax
inc eax
test byte [esi + 0x28], 8
mov dword [esi + 0x18], eax
jne 0x10066bc4
xor eax, eax
mov ecx, edi
push eax
push eax
push eax
push 0x11
pop edx
call fcn.1003b08d
add esp, 0xc
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x24]
mov edx, esi
call fcn.1006668f
mov dword [esp + 0x14], eax
test eax, eax
je 0x10066c01
push 0
push dword [eax + 0x2c]
mov ecx, edi
push dword [esi + 0x2c]
push 0x6f
pop edx
call fcn.1003b08d
mov eax, dword [esp + 0x20]
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + 0x14]
mov ax, word [eax + 6]
mov word [ecx + 6], ax
jmp 0x10066c54
mov eax, dword [esi + 0x2c]
mov dword [esp + 0xe0], eax
xor eax, eax
mov dword [esp + 0xec], eax
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x10]
mov byte [esp + 0xdc], 0xc
push dword [eax + 0x14]
push str.MATERIALIZE__u
push 1
push ebx
call fcn.1003b239
mov edx, dword [esp + 0x20]
lea eax, [esp + 0xec]
push eax
mov ecx, ebx
call fcn.1006671d
add esp, 0x14
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 0x10]
mov ax, word [eax + 6]
mov word [ecx + 0x2c], ax
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x10066c7a
mov edx, eax
mov ecx, edi
call fcn.1003b7e1
mov ecx, dword [edi + 0x6c]
mov dword [eax + 8], ecx
xor eax, eax
mov ecx, edi
push eax
push eax
push dword [esi + 0x1c]
push 0x42
pop edx
call fcn.1003b08d
mov edx, dword [esp + 0x28]
add esp, 0xc
mov ecx, edi
mov esi, eax
call fcn.1003b7e1
mov dword [eax + 4], esi
mov edi, dword [esp + 0x20]
xor eax, eax
mov byte [ebx + 0x13], al
mov dword [ebx + 0x1c], eax
cmp byte [edi + 0x51], al
jne 0x10066991
mov eax, dword [esp + 0x64]
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x24]
mov dword [ebx + 0xe8], eax
mov eax, dword [esp + 0x34]
inc eax
mov dword [esp + 0x34], eax
cmp eax, dword [edi]
jl 0x10066a0a
mov eax, dword [esi + 0x24]
xor ecx, ecx
mov edi, dword [esi]
inc ecx
mov dword [esp + 0x48], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x34], eax
mov al, byte [esi + 8]
and al, cl
mov dword [esp + 0x3c], edi
mov byte [esp + 0x68], al
mov eax, dword [esi + 8]
and al, 9
cmp al, cl
jne 0x10066d33
mov ecx, dword [esp + 0xb0]
mov edx, edi
push 0xffffffffffffffff
call fcn.1004dcb2
pop ecx
test eax, eax
jne 0x10066d33
mov ecx, dword [esp + 0x20]
mov edx, edi
and dword [esi + 8], 0xfffffffe
push eax
call fcn.1004a1f9
pop ecx
mov dword [esp + 0x10], eax
mov dword [esi + 0x28], eax
mov edx, dword [esp + 0xb0]
test edx, edx
je 0x10066d8c
push dword [edi]
xor eax, eax
mov ecx, ebx
push eax
call fcn.1006289f
mov edx, dword [ebx + 0x28]
mov ecx, eax
push 0xfffffffffffffff7
push ecx
mov dword [esp + 0xc8], edx
lea eax, [edx + 1]
mov dword [ebx + 0x28], eax
xor eax, eax
push eax
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax]
mov eax, dword [edi]
inc ecx
mov edi, dword [esp + 0x2c]
add eax, ecx
push eax
push edx
push 0x71
pop edx
mov ecx, edi
call fcn.1003b1c9
add esp, 0x1c
mov dword [esp + 0xc4], eax
jmp 0x10066d98
or dword [esp + 0xc4], 0xffffffff
mov edi, dword [esp + 0x18]
mov eax, dword [ebp + 8]
cmp byte [eax], 0xc
jne 0x10066db8
mov ecx, dword [esp + 0x3c]
push 0
push dword [ecx]
mov ecx, edi
push dword [eax + 4]
push 0x71
pop edx
call fcn.1003b08d
add esp, 0xc
mov eax, dword [ebx + 0x38]
mov ecx, 0x4000
dec eax
mov dword [ebx + 0x38], eax
mov dword [esp + 0xd8], eax
test dword [esi + 8], ecx
jne 0x10066dd9
mov ecx, 0x140
mov word [esi + 6], cx
push eax
mov edx, esi
mov ecx, ebx
call fcn.10063358
pop ecx
xor ecx, ecx
cmp dword [esi + 0xc], ecx
jne 0x10066e0a
mov edx, dword [esp + 0xc4]
test edx, edx
js 0x10066e0a
mov ecx, edi
call fcn.1003b7e1
mov byte [eax], 0x72
or byte [esp + 0xd0], 1
xor ecx, ecx
test byte [esi + 8], 1
je 0x10066e6e
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x6c], eax
inc eax
push ecx
mov dword [ebx + 0x28], eax
mov edx, dword [esi]
push ecx
mov ecx, ebx
call fcn.1006289f
mov ecx, dword [esp + 0x20]
mov edi, eax
xor eax, eax
push eax
push eax
push dword [esp + 0x7c]
push 0x71
pop edx
call fcn.1003b08d
add esp, 0x14
mov esi, eax
mov edx, esi
push 0xfffffffffffffff7
push edi
mov edi, dword [esp + 0x20]
mov ecx, edi
call fcn.1003b725
pop ecx
pop ecx
push 8
pop edx
mov ecx, edi
mov dword [esp + 0x70], esi
call fcn.1003b54c
mov esi, dword [esp + 0x44]
xor ecx, ecx
mov byte [esp + 0x69], 3
jmp 0x10066e72
mov byte [esp + 0x69], cl
cmp dword [esp + 0x38], 0
mov eax, dword [esp + 0x10]
jne 0x1006707b
test eax, eax
jne 0x1006707b
movzx ecx, byte [esp + 0x68]
mov edx, 0x4000
mov ax, word [esi + 8]
neg ecx
sbb ecx, ecx
and ax, dx
and ecx, 0x100
or cx, ax
movzx eax, cx
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x44]
mov dword [esp + 0x4c], eax
test eax, eax
je 0x10066ec2
mov edx, eax
mov ecx, ebx
call fcn.100763e1
movsx eax, word [esi + 6]
mov ecx, ebx
mov edx, dword [esp + 0x24]
push eax
push dword [esp + 0x18]
push dword [esi]
push dword [esp + 0xbc]
push dword [esp + 0x58]
call fcn.10074538
mov edx, eax
add esp, 0x14
mov dword [esp + 0x38], edx
test edx, edx
je 0x1006698d
movzx eax, word [edx + 0x48]
cmp ax, word [esi + 6]
jge 0x10066f02
mov word [esi + 6], ax
cmp byte [esp + 0x68], 0
je 0x10066f14
mov al, byte [edx + 0x33]
test al, al
je 0x10066f14
mov byte [esp + 0x69], al
mov eax, dword [esp + 0xb0]
test eax, eax
je 0x10066f74
movsx ecx, byte [edx + 0x2f]
mov dword [esp + 0xb4], ecx
cmp byte [edx + 0x34], 0
jne 0x10066f3d
mov edi, dword [edx + 0x20]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x18]
jmp 0x10066f56
movzx eax, byte [edx + 0x2e]
imul eax, eax, 0x48
mov eax, dword [eax + edx + 0x2b8]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xb0]
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0xcc], ebx
sub ecx, dword [eax]
mov ebx, dword [esp + 0x54]
neg ecx
sbb ecx, ecx
and eax, ecx
mov dword [esp + 0xb0], eax
cmp dword [esp + 0xc4], 0
jl 0x10066f94
test eax, eax
jne 0x10066f94
mov edx, dword [esp + 0xc4]
mov ecx, edi
call fcn.1003b689
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], 0
je 0x10067049
mov ebx, dword [ebx + 0x38]
mov ecx, dword [esp + 0x54]
lea esi, [ebx - 1]
sub ebx, 2
inc dword [ecx + 0x2c]
mov edi, dword [ecx + 0x2c]
push esi
push edi
lea eax, [ebx - 1]
push edx
mov edx, dword [esp + 0x50]
mov dword [ecx + 0x38], eax
call fcn.10077698
add esp, 0xc
lea eax, [ebx - 1]
xor ecx, ecx
push ecx
push eax
push ecx
mov ecx, dword [esp + 0x24]
push 0xb
pop edx
call fcn.1003b08d
mov ecx, dword [esp + 0x24]
add esp, 0xc
mov edx, esi
call fcn.1003b38b
mov edx, dword [esp + 0x44]
lea esi, [ebx - 1]
mov ecx, dword [esp + 0x54]
xor eax, eax
push esi
push ebx
push dword [ebp + 8]
mov dword [esp + 0xd8], eax
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0xc0]
push eax
push 0xffffffffffffffff
call fcn.10062076
mov ecx, dword [esp + 0x30]
mov edx, ebx
call fcn.1003b38b
xor eax, eax
push eax
push eax
push edi
mov edi, dword [esp + 0x3c]
mov ecx, edi
push 0x42
pop edx
call fcn.1003b08d
add esp, 0x24
mov edx, esi
mov ecx, edi
call fcn.1003b38b
mov ebx, dword [esp + 0x54]
jmp 0x10067bd4
push dword [edx + 0x24]
lea eax, [esp + 0x6c]
mov ecx, ebx
push dword [edx + 0x20]
mov edx, esi
push dword [ebp + 8]
push eax
lea eax, [esp + 0xc0]
push eax
push 0xffffffffffffffff
call fcn.10062076
mov ecx, dword [esp + 0x50]
add esp, 0x18
call fcn.10074ee3
jmp 0x10067bd4
mov dword [esp + 0x50], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x58], ecx
test eax, eax
je 0x100670cc
mov edx, dword [esi]
mov ecx, dword [edx]
test ecx, ecx
jle 0x100670a7
add edx, 0x1a
xor edi, edi
dec ecx
mov word [edx], di
lea edx, [edx + 0x18]
test ecx, ecx
jg 0x10067096
mov edi, dword [esp + 0x18]
mov ecx, dword [eax]
test ecx, ecx
jle 0x100670c1
lea edx, [eax + 0x1a]
xor edi, edi
dec ecx
mov word [edx], di
lea edx, [edx + 0x18]
test ecx, ecx
jg 0x100670b0
mov edi, dword [esp + 0x18]
push 0x42
pop ecx
cmp word [esi + 6], cx
jle 0x100670d2
jmp 0x100670ce
xor ecx, ecx
mov word [esi + 6], cx
mov edx, dword [esp + 0xb0]
mov ecx, eax
push 0xffffffffffffffff
call fcn.1004dcb2
pop ecx
test eax, eax
jne 0x100670ef
mov dword [esp + 0x58], 1
dec dword [ebx + 0x38]
xor edx, edx
mov eax, dword [ebx + 0x38]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x80]
mov dword [esp + 0x100], eax
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0xfc], ecx
inc eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x104], edx
mov dword [esp + 0x108], edx
mov dword [esp + 0x10c], edx
mov dword [esp + 0x110], edx
mov dword [esp + 0x114], edx
mov dword [esp + 0xf8], ebx
mov dword [esp + 0x90], eax
test ecx, ecx
je 0x1006715c
mov eax, dword [ecx]
mov dword [esp + 0x8c], eax
jmp 0x10067163
mov dword [esp + 0x8c], edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x98], ecx
lea ecx, [esp + 0xf8]
call fcn.1004e32f
mov edx, dword [esp + 0xb0]
lea ecx, [esp + 0xf8]
call fcn.1004e32f
mov eax, dword [esp + 0x34]
test eax, eax
je 0x100671ff
cmp dword [esp + 0x10], 0
je 0x100671f1
mov edx, dword [esi + 0x2c]
xor eax, eax
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], eax
mov dword [esp + 0xdc], ebx
mov dword [esp + 0xe0], 0x100665dc
mov dword [esp + 0xf4], esi
test edx, edx
je 0x100671e6
lea ecx, [esp + 0xdc]
call fcn.10047242
mov eax, dword [esi + 0x24]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x34]
mov edx, eax
lea ecx, [esp + 0xf8]
call fcn.1004e2fb
mov eax, dword [esp + 0xa0]
mov edx, dword [esp + 0xac]
mov dword [esp + 0xa4], eax
xor eax, eax
cmp dword [esi + 0x28], eax
jne 0x10067254
cmp dword [esi + 0x2c], eax
jne 0x10067254
cmp edx, 1
jne 0x10067254
mov edx, dword [esp + 0xa8]
lea eax, [esp + 0x4c]
mov ecx, dword [esp + 0x20]
push eax
mov edx, dword [edx]
call fcn.1006554a
mov edx, dword [esp + 0xb0]
mov byte [esp + 0x47], al
mov eax, dword [esp + 0x50]
mov dword [esp + 0x78], eax
xor eax, eax
pop ecx
jmp 0x10067258
mov byte [esp + 0x43], al
mov dword [esp + 0x1c], eax
test edx, edx
jle 0x100672b6
mov edi, eax
mov eax, dword [esp + 0x110]
mov esi, edi
or eax, 8
lea ecx, [esp + 0xf8]
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0xa8]
mov edx, dword [eax + edi]
mov edx, dword [edx + 0x14]
call fcn.1004e32f
mov eax, dword [esp + 0x110]
lea edi, [edi + 0x10]
mov edx, dword [esp + 0xac]
and eax, 0xfffffff7
inc esi
mov dword [esp + 0x110], eax
cmp esi, edx
jl 0x1006726b
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x18]
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x20]
cmp byte [eax + 0x51], 0
jne 0x10067c5a
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x100678ab
mov eax, dword [ebx + 0x28]
mov edx, ecx
push dword [esp + 0xa0]
mov dword [esp + 0x88], eax
mov ecx, ebx
inc eax
mov dword [ebx + 0x28], eax
xor eax, eax
push eax
call fcn.1006289f
push 0xfffffffffffffff7
push eax
mov dword [esp + 0x88], eax
mov ecx, edi
xor eax, eax
push eax
push dword [esp + 0xa0]
push dword [esp + 0x9c]
push 0x72
pop edx
call fcn.1003b1c9
mov edx, dword [esp + 0x2c]
add esp, 0x1c
mov dword [esp + 0x7c], eax
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [esp + 0x1c], eax
inc eax
mov dword [esp + 0x28], eax
lea ecx, [eax + 2]
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x2c], ecx
mov dword [esp + 0x4c], eax
dec eax
mov dword [ebx + 0x38], eax
mov dword [esp + 0x2c], ecx
add ecx, dword [edx]
mov dword [esp + 0x38], eax
mov dword [ebx + 0x2c], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x64], eax
mov eax, dword [edx]
add eax, ecx
mov ecx, edi
mov dword [ebx + 0x2c], eax
xor eax, eax
push eax
push dword [esp + 0x2c]
push eax
push 0x46
pop edx
call fcn.1003b08d
mov ecx, dword [esp + 0x1c]
add esp, 0xc
mov eax, dword [ecx]
mov ecx, dword [esp + 0x2c]
dec eax
inc ecx
add eax, ecx
push eax
push ecx
xor eax, eax
mov ecx, edi
push eax
push 0x49
pop edx
call fcn.1003b08d
add esp, 0xc
xor eax, eax
mov ecx, edi
push eax
push dword [esp + 0x3c]
push dword [esp + 0x34]
push 0xc
pop edx
call fcn.1003b08d
mov eax, dword [esp + 0x64]
add esp, 0xc
xor ecx, ecx
push ecx
mov edx, dword [esp + 0x28]
neg eax
sbb eax, eax
and eax, 0x200
add eax, 0x40
push eax
push ecx
push dword [esp + 0x1c]
mov ecx, ebx
push dword [esp + 0x58]
call fcn.10074538
mov edx, eax
add esp, 0x14
mov dword [esp + 0x60], edx
test edx, edx
je 0x1006698d
mov ecx, dword [esp + 0x10]
movsx eax, byte [edx + 0x2f]
cmp eax, dword [ecx]
jne 0x10067404
xor ecx, ecx
mov esi, ecx
mov dword [esp + 0x5c], esi
jmp 0x100675a7
cmp byte [esp + 0x68], 0
je 0x10067416
test byte [esi + 8], 1
mov eax, str.DISTINCT
je 0x1006741b
mov eax, str.GROUP_BY
push eax
push str.USE_TEMP_B_TREE_FOR__s
xor eax, eax
push eax
push ebx
call fcn.1003b239
mov esi, dword [esp + 0x20]
add esp, 0x10
mov dword [esp + 0x5c], 1
mov eax, dword [esi]
mov ecx, eax
mov dword [esp + 0x14], eax
mov edx, eax
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x50], eax
test eax, eax
jle 0x10067474
mov eax, dword [esp + 0x9c]
add eax, 0xc
cmp dword [eax], edx
jl 0x10067466
inc ecx
inc edx
add eax, 0x18
sub dword [esp + 0x50], 1
jne 0x10067460
mov dword [esp + 0x48], ecx
mov edx, ecx
mov ecx, ebx
call fcn.1004e392
xor ecx, ecx
mov dword [esp + 0x24], eax
push ecx
push ecx
push eax
mov edx, esi
mov ecx, ebx
call fcn.1004d0ec
mov ecx, dword [esp + 0xac]
xor edx, edx
add esp, 0xc
mov eax, edx
mov dword [esp + 0x50], eax
test ecx, ecx
jle 0x100674f0
mov ebx, dword [esp + 0x14]
mov esi, edx
mov edx, dword [esp + 0x9c]
cmp dword [edx + esi + 0xc], ebx
jl 0x100674e0
mov eax, dword [esp + 0x24]
mov ecx, edi
add eax, ebx
push eax
push dword [edx + esi + 8]
push dword [edx + esi + 4]
mov edx, dword [edx + esi]
call fcn.1004bfa1
mov ecx, dword [esp + 0xac]
add esp, 0xc
mov eax, dword [esp + 0x50]
inc ebx
inc eax
add esi, 0x18
mov dword [esp + 0x50], eax
cmp eax, ecx
jl 0x100674ab
mov ebx, dword [esp + 0x54]
mov ecx, ebx
call fcn.1004e35a
mov esi, eax
mov ecx, edi
push esi
push dword [esp + 0x4c]
push dword [esp + 0x2c]
push 0x5c
pop edx
call fcn.1003b08d
add esp, 0xc
xor eax, eax
mov edx, 0x83
mov ecx, edi
push eax
push esi
push dword [esp + 0x8c]
call fcn.1003b08d
add esp, 0xc
mov edx, esi
mov ecx, ebx
call fcn.1004e379
mov esi, dword [esp + 0x48]
mov edx, dword [esp + 0x24]
push esi
call fcn.1004e3c8
mov ecx, dword [esp + 0x64]
add esp, 4
call fcn.10074ee3
mov edx, dword [ebx + 0x28]
mov ecx, ebx
mov dword [esp + 0x50], edx
mov dword [esp + 0x88], edx
lea eax, [edx + 1]
mov dword [ebx + 0x28], eax
call fcn.1004e35a
push esi
push eax
push edx
push 0x74
pop edx
mov ecx, edi
mov dword [esp + 0x20], eax
call fcn.1003b08d
add esp, 0xc
xor eax, eax
mov ecx, edi
push eax
push dword [esp + 0x34]
push dword [esp + 0x8c]
push 0x22
pop edx
call fcn.1003b08d
mov edx, dword [esp + 0x6c]
xor esi, esi
add esp, 0xc
mov byte [esp + 0x81], 1
inc esi
xor ecx, ecx
cmp dword [esp + 0x58], 0
je 0x100675d7
mov eax, dword [esp + 0x20]
test byte [eax + 0x4c], 4
jne 0x100675d7
test esi, esi
jne 0x100675c2
cmp byte [edx + 0x30], 0
je 0x100675d7
mov edx, dword [esp + 0xc4]
mov dword [esp + 0xb0], ecx
mov ecx, edi
call fcn.1003b689
mov eax, dword [edi + 0x6c]
mov dword [esp + 0x48], eax
test esi, esi
je 0x100675fe
push dword [esp + 0x50]
mov ecx, edi
push dword [esp + 0x18]
push dword [esp + 0x8c]
push 0x7e
pop edx
call fcn.1003b08d
add esp, 0xc
mov esi, dword [esp + 0x10]
xor ecx, ecx
mov eax, ecx
mov dword [esp + 0x14], ecx
cmp dword [esi], ecx
jle 0x10067661
lea ecx, [esi + 4]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x64]
add edx, eax
cmp dword [esp + 0x5c], 0
push edx
je 0x10067637
push eax
push dword [esp + 0x58]
mov ecx, edi
push 0x5a
pop edx
call fcn.1003b08d
add esp, 0xc
jmp 0x10067649
mov byte [esp + 0x84], 1
mov edx, dword [ecx]
mov ecx, ebx
call fcn.1004d02f
pop ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x58]
inc eax
add ecx, 0x18
mov dword [esp + 0x14], eax
mov dword [esp + 0x58], ecx
cmp eax, dword [esi]
jl 0x10067615
mov eax, dword [esp + 0x78]
test eax, eax
je 0x1006766b
inc dword [eax]
push 0xfffffffffffffff7
push eax
push dword [esi]
mov eax, dword [esp + 0x38]
mov ecx, edi
push dword [esp + 0x70]
inc eax
push eax
push 0x57
pop edx
call fcn.1003b1c9
mov esi, dword [edi + 0x6c]
add esp, 0x14
mov ecx, edi
lea eax, [esi + 1]
push eax
push 0
push eax
push 0x10
pop edx
call fcn.1003b08d
mov eax, dword [esp + 0x1c]
add esp, 0xc
mov edx, dword [esp + 0x64]
mov ecx, ebx
push dword [eax]
mov eax, dword [esp + 0x30]
inc eax
push eax
call fcn.1004c03f
xor eax, eax
mov ecx, edi
push eax
push dword [esp + 0x58]
mov eax, dword [esp + 0x38]
inc eax
push eax
push 0xc
pop edx
call fcn.1003b08d
add esp, 0x14
xor eax, eax
mov ecx, edi
push eax
push dword [esp + 0x34]
push dword [esp + 0x30]
push 0x2f
pop edx
call fcn.1003b08d
add esp, 0xc
xor eax, eax
mov ecx, edi
push eax
push dword [esp + 0x3c]
push dword [esp + 0x34]
push 0xc
pop edx
call fcn.1003b08d
add esp, 0xc
mov edx, esi
mov ecx, edi
call fcn.1003b7e1
mov ecx, dword [edi + 0x6c]
mov esi, dword [esp + 0x1c]
mov edx, esi
mov dword [eax + 8], ecx
lea eax, [esp + 0x80]
push eax
mov ecx, ebx
call fcn.100663ab
pop ecx
xor eax, eax
mov ecx, edi
push eax
push esi
push 1
push 0x46
pop edx
call fcn.1003b08d
add esp, 0xc
cmp dword [esp + 0x5c], 0
je 0x1006775b
xor eax, eax
mov ecx, edi
push eax
push dword [esp + 0x4c]
push dword [esp + 0x8c]
push 3
pop edx
call fcn.1003b08d
add esp, 0xc
jmp 0x1006776f
mov ecx, dword [esp + 0x60]
call fcn.10074ee3
mov edx, dword [esp + 0x7c]
mov ecx, edi
call fcn.1003b689
mov esi, dword [esp + 0x28]
xor eax, eax
push eax
push dword [esp + 0x50]
mov ecx, edi
lea eax, [esi + 1]
push eax
push 0xc
pop edx
call fcn.1003b08d
mov edx, dword [esp + 0x3c]
add esp, 0xc
mov ecx, edi
call fcn.1003b10a
mov edi, dword [edi + 0x6c]
xor eax, eax
push eax
push esi
mov esi, dword [esp + 0x20]
mov ecx, esi
push 1
push 0x46
pop edx
call fcn.1003b08d
add esp, 0xc
xor eax, eax
mov ecx, esi
push eax
push eax
mov eax, dword [esp + 0x30]
inc eax
push eax
push 0x42
pop eax
mov edx, eax
call fcn.1003b08d
mov edx, dword [esp + 0x58]
add esp, 0xc
mov ecx, esi
call fcn.1003b38b
mov esi, dword [esi + 0x6c]
xor eax, eax
mov ecx, dword [esp + 0x18]
push eax
lea eax, [esi + 2]
push eax
push dword [esp + 0x24]
push 0x2f
pop edx
call fcn.1003b08d
mov ecx, dword [esp + 0x24]
add esp, 0xc
xor eax, eax
push eax
push eax
mov eax, dword [esp + 0x30]
inc eax
push eax
push 0x42
pop eax
mov edx, eax
call fcn.1003b08d
add esp, 0xc
lea edx, [esp + 0x80]
mov ecx, ebx
call fcn.10066357
push 0x10
inc esi
push esi
push dword [esp + 0x3c]
push ebx
call fcn.1004d68c
mov edx, dword [esp + 0x54]
lea eax, [esp + 0x78]
push edi
push esi
push dword [ebp + 8]
push eax
lea eax, [esp + 0xd0]
push eax
push 0xffffffffffffffff
mov ecx, ebx
call fcn.10062076
mov edi, dword [esp + 0x40]
xor eax, eax
push eax
push eax
mov eax, dword [esp + 0x58]
mov ecx, edi
inc eax
push eax
push 0x42
pop esi
mov edx, esi
call fcn.1003b08d
mov edx, dword [esp + 0x6c]
add esp, 0x34
mov ecx, edi
call fcn.1003b38b
lea edx, [esp + 0x80]
mov ecx, ebx
call fcn.100662a9
xor eax, eax
mov ecx, edi
push eax
push dword [esp + 0x20]
push eax
push 0x46
pop edx
call fcn.1003b08d
add esp, 0xc
xor eax, eax
mov edx, esi
mov ecx, edi
push eax
push eax
push dword [esp + 0x34]
call fcn.1003b08d
add esp, 0xc
jmp 0x10067bc9
cmp dword [esi + 0x24], 0
jne 0x10067aa9
mov ecx, dword [esi]
xor eax, eax
inc eax
cmp dword [ecx], eax
jne 0x10067aa9
mov ecx, dword [esi + 0x20]
cmp dword [ecx], eax
jne 0x10067aa9
cmp dword [ecx + 0x1c], 0
jne 0x10067aa9
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x2c], ecx
cmp dword [ecx + 0x38], 0
jne 0x10067aa9
mov eax, dword [esi]
mov eax, dword [eax + 4]
cmp byte [eax], 0xa3
jne 0x10067aa9
test edx, edx
je 0x10067aa9
mov eax, dword [esp + 0xa8]
mov eax, dword [eax + 4]
test dword [eax + 4], 0x100
je 0x10067aa9
mov esi, dword [esi]
mov eax, dword [esi + 4]
mov esi, dword [esp + 0x44]
test byte [eax + 4], 2
jne 0x10067aa9
test ecx, ecx
je 0x10067aa9
mov edx, dword [ecx + 0x48]
mov ecx, dword [ebx]
call fcn.10061082
xor ecx, ecx
mov edx, eax
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x1c], eax
inc eax
mov dword [ebx + 0x28], eax
mov dword [esp + 0x78], edx
mov eax, dword [ecx + 0x1c]
mov ecx, ebx
mov dword [esp + 0x14], eax
call fcn.10055dd3
mov edx, dword [esp + 0x2c]
lea eax, [edx + 0x24]
test byte [eax], 0x20
mov dword [esp + 0x4c], eax
je 0x10067984
mov ecx, edx
call fcn.1005224b
mov dword [esp + 0x28], eax
jmp 0x10067988
mov eax, dword [esp + 0x28]
mov ecx, dword [edx + 8]
test ecx, ecx
je 0x100679d2
lea esi, [edx + 0x2e]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x7c], esi
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x7c]
test byte [ecx + 0x38], 4
jne 0x100679c3
movzx edx, word [ecx + 0x30]
cmp dx, word [edi]
jge 0x100679c3
cmp dword [ecx + 0x24], 0
jne 0x100679c3
test eax, eax
je 0x100679c1
cmp dx, word [eax + 0x30]
jge 0x100679c3
mov eax, ecx
mov ecx, dword [ecx + 0x14]
test ecx, ecx
jne 0x100679a2
mov edi, dword [esp + 0x18]
mov dword [esp + 0x28], eax
test eax, eax
je 0x100679ea
mov ecx, dword [eax + 0x2c]
mov edx, eax
mov dword [esp + 0x14], ecx
mov ecx, ebx
call fcn.1005628b
mov dword [esp + 0x38], eax
push 1
push dword [esp + 0x7c]
mov ecx, edi
push dword [esp + 0x1c]
push dword [esp + 0x28]
push 0x6c
pop edx
call fcn.1003b2f2
mov eax, dword [esp + 0x48]
add esp, 0x10
test eax, eax
je 0x10067a1c
push 0xfffffffffffffff7
push eax
or edx, 0xffffffff
mov ecx, edi
call fcn.1003b725
pop ecx
pop ecx
xor eax, eax
mov ecx, edi
push eax
mov eax, dword [esp + 0xac]
push dword [eax + 8]
push dword [esp + 0x24]
push 0x5d
pop edx
call fcn.1003b08d
add esp, 0xc
xor eax, eax
mov ecx, edi
push eax
push eax
push dword [esp + 0x24]
push 0x75
pop edx
call fcn.1003b08d
add esp, 0xc
cmp byte [ebx + 0xbf], 2
jne 0x10067b95
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x10067a83
mov eax, dword [esp + 0x4c]
test byte [eax], 0x20
je 0x10067a76
mov eax, dword [ecx + 0x38]
and al, 3
cmp al, 2
je 0x10067a83
mov eax, dword [ecx]
mov dword [esp + 0x60], eax
mov eax, str._USING_COVERING_INDEX
jmp 0x10067a88
mov eax, 0x10091798
push dword [esp + 0x60]
mov ecx, dword [esp + 0x30]
push eax
xor eax, eax
push dword [ecx]
push str.SCAN_TABLE__s_s_s
push eax
push ebx
call fcn.1003b239
add esp, 0x18
jmp 0x10067b95
and dword [esp + 0x1c], 0
cmp dword [esp + 0xa4], 0
je 0x10067afd
xor ecx, ecx
test edx, edx
jle 0x10067adc
mov esi, dword [esp + 0xa8]
add esi, 4
mov eax, dword [esi]
test byte [eax + 4], 0x20
jne 0x10067ad8
inc ecx
add esi, 0x10
cmp ecx, edx
jl 0x10067ac8
mov esi, dword [esp + 0x44]
cmp ecx, edx
jne 0x10067afd
mov eax, dword [ebx + 0x2c]
xor ecx, ecx
push ecx
inc eax
push eax
push ecx
push 0x46
pop edx
mov ecx, edi
mov dword [esp + 0x28], eax
mov dword [ebx + 0x2c], eax
call fcn.1003b08d
add esp, 0xc
lea edx, [esp + 0x80]
mov ecx, ebx
call fcn.100662a9
movzx eax, byte [esp + 0x43]
xor ecx, ecx
mov edx, dword [esp + 0x24]
push ecx
push eax
push ecx
push dword [esp + 0x80]
mov ecx, ebx
push dword [esp + 0x58]
call fcn.10074538
add esp, 0x14
mov dword [esp + 0x14], eax
test eax, eax
je 0x1006698d
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x80]
push eax
mov ecx, ebx
call fcn.100663ab
mov eax, dword [esp + 0x20]
pop ecx
test eax, eax
je 0x10067b68
push 0
push eax
push 1
push 0x46
pop edx
mov ecx, edi
call fcn.1003b08d
add esp, 0xc
mov eax, dword [esp + 0x14]
cmp byte [eax + 0x2f], 0
jle 0x10067b80
mov edx, dword [eax + 0x24]
mov ecx, edi
call fcn.1003b10a
mov eax, dword [esp + 0x14]
mov ecx, eax
call fcn.10074ee3
lea edx, [esp + 0x80]
mov ecx, ebx
call fcn.10066357
push 0x10
push dword [esp + 0x34]
xor eax, eax
push dword [esp + 0x3c]
mov dword [esp + 0xbc], eax
push ebx
call fcn.1004d68c
mov eax, dword [esp + 0x40]
mov edx, esi
push eax
push eax
push dword [ebp + 8]
xor eax, eax
mov ecx, ebx
push eax
push eax
push 0xffffffffffffffff
call fcn.10062076
add esp, 0x28
mov edx, dword [esp + 0x30]
mov ecx, edi
call fcn.1003b38b
xor esi, esi
cmp byte [esp + 0x69], 3
jne 0x10067bf1
push str.DISTINCT
push str.USE_TEMP_B_TREE_FOR__s
push esi
push ebx
call fcn.1003b239
add esp, 0x10
cmp dword [esp + 0xb0], 0
je 0x10067c3b
cmp dword [esp + 0xb4], 0
mov eax, str.RIGHT_PART_OF_ORDER_BY
jg 0x10067c0f
mov eax, str.ORDER_BY
push eax
push str.USE_TEMP_B_TREE_FOR__s
push esi
push ebx
call fcn.1003b239
mov eax, dword [esp + 0x4c]
mov ecx, ebx
push dword [ebp + 8]
mov edx, dword [esp + 0x58]
push dword [eax]
lea eax, [esp + 0xc8]
push eax
call fcn.10062957
add esp, 0x1c
mov edx, dword [esp + 0xd8]
mov ecx, edi
call fcn.1003b38b
xor eax, eax
cmp dword [ebx + 0x24], esi
setg al
mov dword [esp + 0x5c], eax
jmp 0x1006698d
mov edi, eax
jmp 0x10066991
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret