Function at 0x1800958c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0xb8]
sub rsp, 0x1b8
mov rbx, rcx
mov rcx, qword [rcx]
xor edi, edi
mov rsi, qword [rbx + 0x10]
mov rax, rdx
mov edx, 1
mov qword [rbp + 0x68], rdi
mov qword [rsp + 0x68], rcx
mov dword [rbp - 0x78], edx
mov qword [rbp - 0x38], rsi
test rsi, rsi
jne 0x180095938
cmp qword [rbx + 0xa8], rdi
jne 0x18009591d
test byte [rcx + 0x60], 8
jne 0x18009591d
mov byte [rbx + 0x23], dl
mov rcx, rbx
call fcn.180034f30
mov edx, 1
mov rsi, rax
mov qword [rbp - 0x38], rax
mov rax, qword [rbp + 0xe8]
test rax, rax
je 0x180098907
cmp dword [rbx + 0x30], edi
jne 0x180098907
xor r9d, r9d
xor r8d, r8d
mov rcx, rbx
lea edx, [r9 + 0x15]
mov qword [rsp + 0x20], rdi
call fcn.180064290
test eax, eax
je 0x180095976
mov eax, 1
add rsp, 0x1b8
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rax, qword [rbp + 0xf0]
mov rcx, qword [rbp + 0xe8]
cmp byte [rax], 6
ja 0x1800959b7
mov r8, qword [rcx + 0x48]
test r8, r8
je 0x1800959ac
lea rdx, [0x1800533f0]
mov rcx, rbx
call fcn.180087d50
mov rcx, qword [rbp + 0xe8]
mov qword [rcx + 0x48], rdi
and dword [rcx + 4], 0xfffffffe
or dword [rcx + 4], 0x400000
mov rax, qword [rbx]
cmp byte [rax + 0x67], dil
jne 0x1800959ce
mov rdx, rcx
xor r8d, r8d
mov rcx, rbx
call fcn.180094430
lea rdx, [0x180181dc0]
cmp dword [rbx + 0x30], edi
jne 0x1800988c8
mov rax, qword [rbp + 0xe8]
mov r11d, dword [rax + 4]
bt r11d, 0x17
jae 0x180095a46
mov rdx, qword [rax + 0x28]
lea rax, [rdx + 8]
mov rcx, rax
mov qword [rbp + 0xf8], rax
call fcn.1800956f0
test eax, eax
je 0x180095a36
mov rax, qword [rbp + 0xf8]
mov r8, qword [rax + 0x18]
test r8, r8
jne 0x180095a22
mov rax, qword [rax + 0x20]
mov r8, qword [rax]
lea rdx, str.target_object_alias_may_not_appear_in_FROM_clause:__s
mov rcx, rbx
call fcn.18000fdc0
jmp 0x1800988c1
mov rax, qword [rbp + 0xe8]
btr r11d, 0x17
mov dword [rax + 4], r11d
mov rcx, qword [rbp + 0xf0]
cmp byte [rcx], 9
jne 0x180095a66
cmp byte [rbx + 0x1c], dil
jne 0x180095a66
mov r8, qword [rbx]
mov rdx, rax
mov rcx, rbx
call fcn.18008c000
mov rdx, qword [rbp + 0xe8]
mov rcx, rbx
call fcn.1800b69e0
test eax, eax
jne 0x1800988c1
mov rcx, qword [rbp + 0xe8]
mov dword [rbp + 0xf8], edi
mov r11, rdi
mov eax, dword [rcx + 4]
mov r9, qword [rcx + 0x28]
mov qword [rsp + 0x58], rdi
shr eax, 3
mov qword [rsp + 0x60], r9
and eax, 1
mov dword [rbp - 0x70], eax
xor eax, eax
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], rax
mov rax, qword [rcx + 0x48]
mov qword [rbp - 0x60], rax
mov qword [rbp + 0x38], rax
cmp qword [rcx + 0x50], rdi
jne 0x180095d80
mov eax, edi
nop dword [rax]
cmp eax, dword [r9]
jge 0x180095d7a
mov r10, r11
imul r10, r10, 0x68
mov qword [rbp - 0x28], r10
movzx eax, byte [r10 + r9 + 0x44]
mov rdx, qword [r10 + r9 + 0x30]
mov r8, qword [r10 + r9 + 0x28]
mov qword [rbp - 0x80], rdx
mov qword [rsp + 0x48], r8
test al, 0x48
je 0x180095c10
mov edx, dword [r10 + r9 + 0x4c]
mov rcx, qword [rcx + 0x30]
movzx r8d, al
and r8d, 0x40
call fcn.18005b190
mov r9, qword [rsp + 0x60]
mov r10, qword [rbp - 0x28]
test eax, eax
je 0x180095bfb
mov rax, qword [rsp + 0x68]
test dword [rax + 0x60], 0x2000
jne 0x180095bfb
movzx eax, byte [r10 + r9 + 0x44]
test al, 8
je 0x180095b67
test al, 0x10
je 0x180095b60
and al, 0xf7
jmp 0x180095b62
and al, 0xd7
mov byte [r10 + r9 + 0x44], al
test byte [r10 + r9 + 0x44], 0x40
mov r11, qword [rsp + 0x58]
je 0x180095bdb
mov edx, dword [rbp + 0xf8]
lea rax, [r11 + 1]
inc edx
cmp edx, dword [r9]
jge 0x180095bae
imul rax, rax, 0x68
lea rcx, [rax + r9 + 0x44]
nop
movzx eax, byte [rcx]
test al, 0x10
je 0x180095ba3
test al, 8
je 0x180095b9f
and al, 0xef
jmp 0x180095ba1
and al, 0xcf
mov byte [rcx], al
inc edx
add rcx, 0x68
cmp edx, dword [r9]
jl 0x180095b90
mov eax, dword [r9]
dec eax
movsxd rdx, eax
cmp rdx, r11
jl 0x180095bdb
mov rax, rdx
imul rax, rax, 0x68
lea rcx, [rax + r9 + 0x44]
and byte [rcx], 0xbf
test byte [rcx], 0x10
jne 0x180095bdb
dec rdx
sub rcx, 0x68
cmp rdx, r11
jge 0x180095bc7
mov rax, qword [rbp + 0xe8]
movzx r8d, byte [r9 + 0x44]
mov edx, dword [r10 + r9 + 0x4c]
mov rcx, qword [rax + 0x30]
and r8d, 0x40
call fcn.1800891e0
jmp 0x180095c00
mov r11, qword [rsp + 0x58]
mov rdx, qword [rbp - 0x80]
mov rcx, qword [rbp + 0xe8]
mov r8, qword [rsp + 0x48]
test rdx, rdx
je 0x180095d5a
mov rax, qword [rdx + 0x20]
movsx ecx, word [r8 + 0x36]
cmp ecx, dword [rax]
jne 0x180095db9
test dword [r10 + r9 + 0x48], 0x100
je 0x180095c44
mov rax, qword [r10 + r9 + 0x68]
cmp byte [rax + 0x12], dil
je 0x180095d53
mov eax, dword [rdx + 4]
mov rcx, qword [rbp + 0xe8]
test al, 8
jne 0x180095d5a
mov r8, qword [rdx + 0x48]
test r8, r8
je 0x180095cb1
cmp qword [rcx + 0x48], rdi
jne 0x180095c6b
cmp dword [r9], 1
jle 0x180095cb1
cmp qword [rdx + 0x60], rdi
jne 0x180095cb1
bt eax, 0x1b
jb 0x180095cb1
test dword [rcx + 4], 0x8000000
jne 0x180095cb1
mov rax, qword [rsp + 0x68]
test dword [rax + 0x60], 0x40000
jne 0x180095cb1
lea rdx, [0x1800533f0]
mov rcx, rbx
call fcn.180087d50
mov rdx, qword [rbp - 0x80]
mov r9, qword [rsp + 0x60]
mov rcx, qword [rbp + 0xe8]
mov qword [rdx + 0x48], rdi
mov r11d, dword [rbp + 0xf8]
cmp qword [rdx + 0x48], rdi
je 0x180095cdc
test r11d, r11d
jne 0x180095cdc
test dword [rcx + 4], 0x40000
je 0x180095cdc
cmp dword [r9], 1
je 0x180095d4c
test byte [r9 + 0xac], 0x22
jne 0x180095d4c
mov r9d, dword [rbp - 0x70]
mov rdx, rcx
mov r8d, r11d
mov rcx, rbx
call fcn.180090ba0
test eax, eax
je 0x180095d0e
cmp dword [rbx + 0x30], edi
jne 0x1800988c1
mov dword [rbp + 0xf8], 0xffffffff
mov qword [rsp + 0x58], 0xffffffffffffffff
mov rcx, qword [rbp + 0xe8]
mov rax, qword [rsp + 0x68]
mov r9, qword [rcx + 0x28]
mov qword [rsp + 0x60], r9
cmp byte [rax + 0x67], dil
jne 0x1800988c1
mov rax, qword [rbp + 0xf0]
mov r11, qword [rsp + 0x58]
cmp byte [rax], 8
jbe 0x180095d5a
mov rdx, qword [rcx + 0x48]
mov qword [rbp - 0x60], rdx
mov qword [rbp + 0x38], rdx
jmp 0x180095d5a
mov r11, qword [rsp + 0x58]
jmp 0x180095d5a
mov rcx, qword [rbp + 0xe8]
mov eax, dword [rbp + 0xf8]
inc r11
inc eax
mov qword [rsp + 0x58], r11
mov dword [rbp + 0xf8], eax
cmp qword [rcx + 0x50], rdi
je 0x180095ae0
cmp qword [rcx + 0x50], rdi
je 0x180095de0
mov r8, qword [rbp + 0xf0]
mov rdx, rcx
mov rcx, rbx
call fcn.18008dae0
mov r11d, eax
mov rax, qword [rbp + 0xe8]
cmp qword [rax + 0x58], rdi
jne 0x180095daa
mov rcx, rbx
call fcn.180035c80
mov eax, r11d
add rsp, 0x1b8
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov eax, dword [rax]
mov r9, qword [rsp + 0x48]
movsx r8d, word [r8 + 0x36]
mov r9, qword [r9]
lea rdx, str.expected__d_columns_for__s_but_got__d
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.18000fdc0
jmp 0x1800988c1
mov rax, qword [rcx + 0x30]
test rax, rax
je 0x180095e0e
cmp byte [rax], 0x2c
mov rax, qword [rsp + 0x68]
jne 0x180095e13
test dword [rax + 0x60], 0x8000
jne 0x180095e13
mov rdx, rcx
mov rcx, rbx
call fcn.180091710
mov rcx, qword [rbp + 0xe8]
mov rax, qword [rsp + 0x68]
test dword [rax + 0x60], 0x201
jne 0x180095e4c
mov rdx, rcx
mov rcx, rbx
call fcn.180095360
test eax, eax
je 0x180095e4c
mov rax, qword [rsp + 0x68]
cmp byte [rax + 0x67], dil
jne 0x1800988c1
mov rax, qword [rbp + 0xe8]
mov r11, qword [rax + 0x28]
mov qword [rsp + 0x60], r11
jmp 0x180095e51
mov r11, qword [rsp + 0x60]
mov dword [rbp + 0xf8], edi
lea rcx, [0x180144af4]
cmp dword [r11], edi
jle 0x1800962c0
lea rbx, [r11 + 0x18]
nop dword [rax + rax]
cmp qword [rbx + 0x40], rdi
jne 0x180095ea0
mov r8, qword [rbx]
test r8, r8
je 0x180095ea0
mov rax, qword [rbx - 8]
mov r9, rcx
mov rcx, qword [rbp + 0xe0]
mov edx, 0x14
mov qword [rsp + 0x20], rax
call fcn.180064290
mov r11, qword [rsp + 0x60]
mov rax, qword [rbx + 0x18]
mov qword [rsp + 0x58], rax
test rax, rax
je 0x180096297
mov rcx, qword [rbp + 0xe8]
call fcn.1800511b0
mov rcx, qword [rbp + 0xe0]
add dword [rcx + 0x134], eax
mov rax, qword [rsp + 0x68]
test dword [rax + 0x60], 0x1000
jne 0x180095f15
test dword [rbx + 0x30], 0x100
je 0x180095ef1
mov rax, qword [rbx + 0x50]
cmp byte [rax + 0x12], dil
je 0x180095f15
cmp dword [rax], 2
jge 0x180095f15
mov rax, qword [rbp + 0xe8]
mov r9d, dword [rbp + 0xf8]
mov rdx, qword [rsp + 0x58]
mov r8, qword [rax + 0x30]
mov dword [rsp + 0x20], r9d
mov r9, r11
call fcn.1800919a0
mov rcx, qword [rsp + 0x68]
test dword [rcx + 0x60], 0x4000000
jne 0x180095f2c
lea rcx, [rbx - 0x10]
call fcn.180091d30
mov rcx, qword [rbp + 0xe0]
mov r8d, dword [rbp + 0xf8]
mov rdx, qword [rsp + 0x60]
mov rax, qword [rcx + 0x170]
mov qword [rbp - 0x28], rax
mov rax, qword [rbx]
mov qword [rcx + 0x170], rax
mov rax, qword [rbp + 0xe8]
mov r9d, dword [rax + 4]
call fcn.1800957e0
test eax, eax
je 0x180096060
mov edx, dword [rsi + 0x90]
mov rcx, qword [rbp + 0xe0]
xor r9d, r9d
mov r8d, dword [rcx + 0x38]
inc edx
inc r8d
mov dword [rsp + 0x40], edx
mov dword [rsp + 0x20], edx
mov dword [rcx + 0x38], r8d
lea edx, [r9 + 0xb]
mov rcx, rsi
mov dword [rbx + 0x24], r8d
call fcn.180035470
mov r11d, dword [rsp + 0x40]
mov eax, dword [rbx + 0x24]
mov rcx, qword [rbp + 0xe0]
lea r9, [rbx - 0x10]
lea r8, str.CO_ROUTINE___S
mov edx, 1
mov dword [rbx + 0x20], r11d
mov dword [rbp + 0xc], eax
mov byte [rbp + 8], 0xd
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x10], rdi
mov dword [rbp + 0x18], edi
call fcn.180035b70
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rbp + 0xe0]
lea r8, [rbp + 8]
call fcn.1800958c0
mov rax, qword [rsp + 0x58]
mov r11, qword [rbx + 0x10]
movzx eax, word [rax + 2]
mov rcx, rsi
mov word [r11 + 0x3a], ax
mov eax, dword [rbp + 0x14]
mov edx, dword [rbx + 0x24]
or dword [rbx + 0x30], 0x20
mov dword [rbx + 0x28], eax
call fcn.180035e40
mov rax, qword [rsi]
mov r11d, dword [rsi + 0x90]
cmp byte [rax + 0x67], dil
je 0x180096030
lea rax, [0x180181dc0]
jmp 0x180096048
mov eax, dword [rsp + 0x40]
dec eax
movsxd rcx, eax
mov rax, qword [rsi + 0x88]
lea rdx, [rcx + rcx*2]
lea rax, [rax + rdx*8]
mov dword [rax + 8], r11d
mov r11, qword [rbp + 0xe0]
mov byte [r11 + 0x1f], dil
mov dword [r11 + 0x28], edi
jmp 0x180096265
test dword [rbx + 0x30], 0x100
je 0x1800960d1
mov rax, qword [rbx + 0x50]
mov qword [rsp + 0x70], rax
cmp dword [rax + 4], edi
jle 0x1800960d1
mov r9d, dword [rax + 4]
mov r8d, dword [rax + 8]
mov edx, 0xa
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.180035470
mov rax, qword [rsp + 0x70]
mov r8d, dword [rbx + 0x34]
mov r9d, dword [rax + 0xc]
cmp r8d, r9d
je 0x1800960b8
mov edx, 0x73
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.180035470
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x58]
movzx eax, word [rax + 0x10]
mov r11, qword [rbp + 0xe0]
mov word [rcx + 2], ax
jmp 0x180096265
mov r9d, dword [rbp + 0xf8]
mov rcx, qword [rsp + 0x60]
lea rdx, [rbx - 0x10]
xor r8d, r8d
call fcn.180095190
mov qword [rsp + 0x70], rax
test rax, rax
je 0x180096152
mov r9d, dword [rax + 0x30]
test r9d, r9d
je 0x180096116
mov r8d, dword [rax + 0x34]
mov edx, 0xa
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.180035470
mov rax, qword [rsp + 0x70]
mov r9d, dword [rax + 0x44]
mov r8d, dword [rbx + 0x34]
mov edx, 0x73
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.180035470
mov r10, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x58]
mov r11, qword [r10 + 0x28]
movzx eax, word [r11 + 2]
mov r11, qword [rbp + 0xe0]
mov word [rcx + 2], ax
jmp 0x180096265
mov rax, qword [rbp + 0xe0]
mov edx, 9
mov rcx, rsi
inc dword [rax + 0x38]
mov eax, dword [rax + 0x38]
mov dword [rsp + 0x40], edi
mov dword [rbx + 0x24], eax
call fcn.180035400
or dword [rbx + 0x30], 0x10
mov dword [rbp - 0x54], eax
inc eax
test byte [rbx + 0x30], 8
mov dword [rbp - 0x30], eax
mov dword [rbx + 0x20], eax
jne 0x180096199
mov edx, 0xf
mov rcx, rsi
call fcn.180035400
mov dword [rsp + 0x40], eax
mov ecx, dword [rbx + 0x34]
lea r9, [rbx - 0x10]
lea r8, str.MATERIALIZE___S
mov dword [rbp + 0xc], ecx
mov rcx, qword [rbp + 0xe0]
mov edx, 1
mov byte [rbp + 8], 0xc
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x10], rdi
mov dword [rbp + 0x18], edi
call fcn.180035b70
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rbp + 0xe0]
lea r8, [rbp + 8]
call fcn.1800958c0
mov rax, qword [rsp + 0x58]
mov rcx, qword [rbx + 0x10]
movzx eax, word [rax + 2]
mov word [rcx + 0x3a], ax
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x180096202
mov edx, eax
mov rcx, rsi
call fcn.1800362d0
mov r9d, dword [rbp - 0x30]
mov r8d, dword [rbx + 0x24]
mov edx, 0x43
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.180035470
mov edx, dword [rbp - 0x54]
mov rcx, rsi
call fcn.1800362d0
mov r11, qword [rbp + 0xe0]
mov byte [r11 + 0x1f], dil
mov dword [r11 + 0x28], edi
mov eax, dword [rbx + 0x30]
bt eax, 8
jae 0x180096265
test al, 8
jne 0x180096265
mov eax, dword [rbx + 0x20]
mov rcx, qword [rbx + 0x50]
mov dword [rcx + 4], eax
mov eax, dword [rbx + 0x24]
mov dword [rcx + 8], eax
mov eax, dword [rbx + 0x34]
mov dword [rcx + 0xc], eax
mov rax, qword [rsp + 0x58]
movzx eax, word [rax + 2]
mov word [rcx + 0x10], ax
mov rax, qword [rsp + 0x68]
cmp byte [rax + 0x67], dil
jne 0x1800988ba
mov rcx, qword [rbp + 0xe8]
call fcn.1800511b0
sub dword [r11 + 0x134], eax
mov rax, qword [rbp - 0x28]
mov qword [r11 + 0x170], rax
mov r11, qword [rsp + 0x60]
mov eax, dword [rbp + 0xf8]
add rbx, 0x68
lea rcx, [0x180144af4]
inc eax
mov dword [rbp + 0xf8], eax
cmp eax, dword [r11]
jl 0x180095e70
mov rbx, qword [rbp + 0xe0]
mov rcx, qword [rbp + 0xe8]
mov rax, qword [rcx + 0x30]
movzx edx, byte [rcx + 4]
mov r9, qword [rcx + 0x20]
mov qword [rbp - 0x30], rax
mov rax, qword [rcx + 0x38]
and dl, 1
mov qword [rbp - 0x80], rax
mov rax, qword [rcx + 0x40]
mov qword [rsp + 0x58], r9
mov qword [rbp - 0x28], rax
mov eax, dword [rcx + 4]
mov byte [rbp - 0x20], dl
and al, 9
cmp al, 1
jne 0x180096352
mov rcx, qword [rbp - 0x60]
or r8d, 0xffffffff
mov rdx, r9
call fcn.18005abd0
test eax, eax
jne 0x18009634d
mov rcx, qword [rbp + 0xe8]
cmp qword [rcx + 0x70], rdi
jne 0x18009634d
and dword [rcx + 4], 0xfffffffe
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x68]
xor r8d, r8d
call fcn.180052690
mov rcx, rax
mov qword [rbp - 0x80], rax
mov rax, qword [rbp + 0xe8]
or dword [rax + 4], 8
mov qword [rax + 0x38], rcx
mov al, 2
mov byte [rbp - 0x20], al
mov r9, qword [rsp + 0x58]
mov rax, qword [rbp - 0x60]
test rax, rax
je 0x180096431
mov r9d, dword [r9]
xor r8d, r8d
mov rdx, rax
mov rcx, rbx
call fcn.18008af80
mov r8d, dword [rbx + 0x34]
mov dword [rsp + 0x20], edi
lea ecx, [r8 + 1]
mov qword [rbp + 0xf8], rax
mov rax, qword [rbp - 0x60]
mov dword [rbx + 0x34], ecx
mov edx, dword [rax]
mov rax, qword [rsp + 0x58]
mov ecx, dword [rax]
mov dword [rbp + 0x44], r8d
lea r9d, [rdx + rcx + 1]
mov edx, 0x76
mov rcx, rsi
call fcn.180035470
mov rcx, qword [rsi]
mov r8d, eax
mov dword [rbp - 0x50], eax
cmp byte [rcx + 0x67], dil
je 0x1800963d3
mov r8, qword [rbp + 0xf8]
mov edx, 0xfffffff8
call fcn.180036520
mov r8d, dword [rbp - 0x50]
mov dword [rbp + 0x50], r8d
jmp 0x18009643a
test r8d, r8d
jns 0x1800963e0
mov eax, dword [rsi + 0x90]
dec eax
cdqe
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 0x88]
cmp byte [rax + rcx*8 + 1], dil
lea rdx, [rax + rcx*8]
je 0x180096417
mov r8, qword [rbp + 0xf8]
mov r9d, 0xfffffff8
mov rcx, rsi
call fcn.180036750
mov r8d, dword [rbp - 0x50]
mov dword [rbp + 0x50], r8d
jmp 0x18009643a
mov rax, qword [rbp + 0xf8]
test rax, rax
je 0x18009642b
mov qword [rdx + 0x10], rax
mov byte [rdx + 1], 0xf8
mov dword [rbp + 0x50], r8d
jmp 0x18009643a
or eax, 0xffffffff
mov dword [rbp - 0x50], eax
mov dword [rbp + 0x50], eax
mov rcx, qword [rbp + 0xf0]
cmp byte [rcx], 0xc
jne 0x180096518
mov rax, qword [rsp + 0x58]
mov r8d, dword [rcx + 4]
mov edx, 0x76
mov r9d, dword [rax]
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.180035470
mov rax, qword [rbp + 0xe8]
test dword [rax + 4], 0x800
je 0x180096518
mov r8, qword [rsp + 0x58]
mov eax, dword [r8]
dec eax
cdqe
mov qword [rbp + 0xf8], rax
test rax, rax
jle 0x1800964f6
mov rbx, rax
mov rsi, r8
shl rbx, 5
nop dword [rax]
test byte [rbx + rsi + 0x1c], 0x40
jne 0x1800964e6
mov rdx, qword [rbx + rsi + 8]
test rdx, rdx
je 0x1800964bb
mov rcx, qword [rsp + 0x68]
call fcn.180051eb0
mov rdx, qword [rbx + rsi + 0x10]
mov rcx, qword [rsp + 0x68]
call fcn.18000c110
mov rax, qword [rbp + 0xf8]
dec dword [rsi]
dec rax
sub rbx, 0x20
mov qword [rbp + 0xf8], rax
test rax, rax
jg 0x1800964a0
mov rsi, qword [rbp - 0x38]
mov rbx, qword [rbp + 0xe0]
mov r8, qword [rsp + 0x58]
mov edx, edi
cmp dword [r8], edx
jle 0x180096518
lea rcx, [r8 + 8]
test byte [rcx + 0x14], 0x40
jne 0x18009650d
mov rax, qword [rcx]
mov byte [rax], 0x79
inc edx
add rcx, 0x20
cmp edx, dword [r8]
jl 0x180096501
dec dword [rbx + 0x44]
mov r10, qword [rbp + 0xe8]
mov r8d, dword [rbx + 0x44]
mov eax, 0x4000
mov dword [rbp + 0x70], r8d
test dword [r10 + 4], eax
jne 0x18009653f
mov eax, 0x140
mov word [r10 + 2], ax
cmp qword [r10 + 0x60], rdi
je 0x180096557
mov rdx, r10
mov rcx, rbx
call fcn.18008ce40
mov r10, qword [rbp + 0xe8]
cmp dword [r10 + 8], edi
jne 0x18009658d
movsxd rcx, dword [rbp - 0x50]
test ecx, ecx
js 0x18009658d
mov rax, qword [rsi]
cmp byte [rax + 0x67], dil
je 0x180096577
lea rax, [0x180181dc0]
jmp 0x180096586
mov rax, qword [rsi + 0x88]
lea rcx, [rcx + rcx*2]
lea rax, [rax + rcx*8]
or byte [rbp + 0x5c], 1
mov byte [rax], 0x77
test byte [r10 + 4], 1
je 0x1800966be
mov eax, dword [rbx + 0x34]
xor r9d, r9d
xor r8d, r8d
mov dword [rbp - 0x1c], eax
inc eax
mov rcx, rbx
mov dword [rbx + 0x34], eax
mov rdx, qword [r10 + 0x20]
call fcn.18008af80
movsxd rdx, dword [rsi + 0x90]
mov r8d, dword [rbp - 0x1c]
mov r11, rax
mov qword [rsp + 0x70], rax
mov dword [rbp + 0xf8], edx
cmp dword [rsi + 0x94], edx
jg 0x1800965f8
xor r9d, r9d
mov rcx, rsi
mov dword [rsp + 0x20], edi
lea edx, [r9 + 0x76]
call fcn.180035350
mov r11, qword [rsp + 0x70]
mov edx, eax
mov dword [rbp + 0xf8], eax
jmp 0x180096622
lea rcx, [rdx + rdx*2]
lea eax, [rdx + 1]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], r8d
mov qword [rax + rcx*8 + 8], rdi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x76
mov rcx, qword [rsi]
mov eax, edx
cmp byte [rcx + 0x67], dil
je 0x180096642
mov r8, r11
mov edx, 0xfffffff8
call fcn.180036520
mov edx, dword [rbp + 0xf8]
jmp 0x180096690
test edx, edx
jns 0x18009664e
mov eax, dword [rsi + 0x90]
dec eax
cdqe
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 0x88]
cmp byte [rax + rcx*8 + 1], dil
lea r10, [rax + rcx*8]
je 0x180096682
mov r9d, 0xfffffff8
mov r8, r11
mov rdx, r10
mov rcx, rsi
call fcn.180036750
mov edx, dword [rbp + 0xf8]
jmp 0x180096690
test r11, r11
je 0x180096690
mov qword [r10 + 0x10], r11
mov byte [r10 + 1], 0xf8
movsxd rax, dword [rsi + 0x90]
mov dword [rbp - 0x18], edx
test eax, eax
jle 0x1800966b3
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 0x88]
mov edx, 8
mov word [rax + rcx*8 - 0x16], dx
mov r10, qword [rbp + 0xe8]
mov al, 3
jmp 0x1800966c0
xor al, al
mov r9, qword [rbp - 0x80]
mov byte [rbp - 0x1f], al
mov dword [rbp], eax
cmp dword [rbp - 0x70], edi
jne 0x180096a42
test r9, r9
jne 0x180096a42
movzx eax, byte [rbp - 0x20]
mov edx, 0x4000
neg al
movzx eax, word [r10 + 4]
sbb cx, cx
and ax, dx
and cx, 0x100
or cx, ax
mov rax, qword [r10 + 0x70]
mov word [rbp + 0xe0], cx
mov qword [rbp + 0xf8], rax
test rax, rax
je 0x18009672a
mov rdx, r10
mov rcx, rbx
call fcn.1800b7a20
movzx ecx, word [rbp + 0xe0]
mov r10, qword [rbp + 0xe8]
movsx eax, word [r10 + 2]
mov r9, qword [rbp - 0x60]
mov r8, qword [rbp - 0x30]
mov rdx, qword [rsp + 0x60]
mov dword [rsp + 0x38], eax
mov rax, qword [r10 + 0x20]
mov word [rsp + 0x30], cx
mov qword [rsp + 0x28], r10
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1800b38b0
mov rdx, rax
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x1800988c1
mov r10, qword [rbp + 0xe8]
movzx eax, word [rax + 0x48]
cmp ax, word [r10 + 2]
jge 0x180096785
mov word [r10 + 2], ax
cmp byte [rbp - 0x20], dil
je 0x1800967a0
movzx ecx, byte [rdx + 0x43]
mov eax, dword [rbp]
movzx eax, al
test cl, cl
cmovne eax, ecx
mov dword [rbp], eax
mov byte [rbp - 0x1f], al
mov r9, qword [rbp - 0x60]
test r9, r9
je 0x1800967fd
movzx eax, byte [rdx + 0x41]
test al, al
jns 0x1800967b9
mov r8d, edi
mov dword [rbp + 0x40], edi
jmp 0x1800967c1
movsx r8d, al
mov dword [rbp + 0x40], r8d
test byte [rdx + 0x44], 4
jne 0x1800967cc
mov eax, dword [rdx + 0x30]
jmp 0x1800967ef
movzx eax, byte [rdx + 0x40]
dec eax
movsxd rcx, eax
imul rcx, rcx, 0x70
cmp qword [rcx + rdx + 0x398], rdi
je 0x1800967e8
mov eax, dword [rdx + 0x30]
jmp 0x1800967ef
mov eax, dword [rcx + rdx + 0x370]
cmp r8d, dword [r9]
mov dword [rbp + 0x58], eax
cmove r9, rdi
mov qword [rbp + 0x38], r9
mov eax, dword [rbp - 0x50]
test eax, eax
js 0x180096821
test r9, r9
jne 0x180096821
mov edx, eax
mov rcx, rsi
call fcn.1800366e0
mov rdx, qword [rbp + 0xe0]
mov r10, qword [rbp + 0xe8]
cmp qword [rbp + 0xf8], rdi
je 0x1800969fb
dec dword [rbx + 0x44]
mov ecx, dword [rbx + 0x44]
inc dword [rbx + 0x38]
lea eax, [rcx - 1]
mov dword [rbp - 0x30], ecx
mov dword [rsp + 0x20], ecx
mov dword [rbp + 0xf8], eax
dec eax
mov r8, rdx
mov dword [rbp + 0xe0], eax
mov dword [rbx + 0x44], eax
mov eax, dword [rbx + 0x38]
mov rdx, r10
mov rcx, rbx
mov r9d, eax
mov dword [rsp + 0x40], eax
call fcn.1800bb2b0
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x180096895
mov r9d, dword [rbp + 0xe0]
xor r8d, r8d
mov rcx, rsi
lea edx, [r8 + 9]
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x1800968c6
mov r8d, dword [rbp + 0xe0]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 8], r8d
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov qword [rax + rcx*8], 9
mov r9, qword [rsi + 0x18]
mov ecx, dword [rbp - 0x30]
mov eax, dword [r9 + 0x48]
not ecx
add eax, dword [r9 + 0x44]
jns 0x1800968e9
mov r8d, ecx
mov rdx, rsi
mov rcx, r9
call fcn.180035ec0
jmp 0x1800968f9
mov eax, dword [rsi + 0x90]
movsxd rdx, ecx
mov rcx, qword [r9 + 0x50]
mov dword [rcx + rdx*4], eax
mov eax, dword [rbp + 0xe0]
mov rdx, qword [rbp + 0xe8]
lea r9, [rbp + 0x38]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp + 0xf8]
or r8d, 0xffffffff
mov dword [rsp + 0x30], eax
mov rax, qword [rbp + 0xf0]
mov rcx, rbx
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x20]
mov dword [rbp + 0x58], edi
mov qword [rsp + 0x20], rax
call fcn.18008a340
mov r11, qword [rsi + 0x18]
mov eax, dword [r11 + 0x48]
mov ecx, dword [rbp + 0xf8]
add eax, dword [r11 + 0x44]
not ecx
jns 0x180096962
mov r8d, ecx
mov rdx, rsi
mov rcx, r11
call fcn.180035ec0
jmp 0x180096973
mov eax, dword [rsi + 0x90]
movsxd r9, ecx
mov rcx, qword [r11 + 0x50]
mov dword [rcx + r9*4], eax
movsxd rcx, dword [rsi + 0x90]
mov r8d, dword [rsp + 0x40]
cmp dword [rsi + 0x94], ecx
jg 0x18009699c
xor r9d, r9d
mov rcx, rsi
mov dword [rsp + 0x20], edi
lea edx, [r9 + 0x43]
call fcn.180035350
jmp 0x1800969c6
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], r8d
mov qword [rax + rcx*8 + 8], rdi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x43
mov r9, qword [rsi + 0x18]
mov ecx, dword [rbp + 0xe0]
mov eax, dword [r9 + 0x48]
not ecx
add eax, dword [r9 + 0x44]
jns 0x1800969ef
mov r8d, ecx
mov rdx, rsi
mov rcx, r9
call fcn.180035ec0
jmp 0x180098818
movsxd rdx, ecx
mov rcx, qword [r9 + 0x50]
jmp 0x18009880f
mov eax, dword [rdx + 0x34]
lea r9, [rbp + 0x38]
or r8d, 0xffffffff
mov dword [rsp + 0x38], eax
mov eax, dword [rdx + 0x30]
mov rdx, r10
mov dword [rsp + 0x30], eax
mov rax, qword [rbp + 0xf0]
mov rcx, rbx
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
call fcn.18008a340
mov rcx, qword [rbp + 0xe0]
call fcn.1800b4780
jmp 0x180098818
mov dword [rsp + 0x50], edi
mov dword [rbp - 0x70], edi
mov dword [rsp + 0x40], edi
test r9, r9
je 0x180096b02
mov rcx, qword [r10 + 0x20]
mov eax, dword [rcx]
test eax, eax
jle 0x180096a7d
add rcx, 0x22
nop word [rax + rax]
dec eax
mov word [rcx], di
add rcx, 0x20
test eax, eax
jg 0x180096a70
mov eax, dword [r9]
test eax, eax
jle 0x180096a9d
lea rcx, [r9 + 0x22]
nop dword [rax + rax]
dec eax
mov word [rcx], di
add rcx, 0x20
test eax, eax
jg 0x180096a90
cmp word [r10 + 2], 0x42
jle 0x180096aaf
mov eax, 0x42
mov word [r10 + 2], ax
mov r10, qword [rbp - 0x60]
test r10, r10
je 0x180096b07
mov eax, dword [r9]
cmp eax, dword [r10]
jne 0x180096b07
mov edx, edi
test eax, eax
jle 0x180096ae5
mov r8, r10
lea rcx, [r9 + 0x18]
sub r8, r9
movzx eax, byte [r8 + rcx]
inc edx
add rcx, 0x20
and al, 1
mov byte [rcx - 0x20], al
cmp edx, dword [r9]
jl 0x180096ad0
or r8d, 0xffffffff
mov rdx, r10
mov rcx, r9
call fcn.18005abd0
test eax, eax
jne 0x180096b07
mov dword [rsp + 0x40], 1
jmp 0x180096b07
mov word [r10 + 2], di
dec dword [rbx + 0x44]
mov r8, qword [rsp + 0x68]
mov eax, dword [rbx + 0x44]
mov edx, 0x38
mov dword [rbp - 0x74], eax
cmp dx, word [r8 + 0x1bc]
jbe 0x180096b50
cmp dword [r8 + 0x1b8], edi
jne 0x180096b39
inc dword [r8 + 0x1cc]
jmp 0x180096bea
cmp byte [r8 + 0x67], dil
je 0x180096bea
mov rcx, rdi
mov qword [rsp + 0x48], rcx
jmp 0x180096c33
mov rcx, qword [r8 + 0x1f0]
mov qword [rsp + 0x48], rcx
test rcx, rcx
je 0x180096b77
mov rax, qword [rcx]
inc dword [r8 + 0x1c8]
mov qword [r8 + 0x1f0], rax
jmp 0x180096bfa
mov rcx, qword [r8 + 0x1e8]
mov qword [rsp + 0x48], rcx
test rcx, rcx
je 0x180096b9b
mov rax, qword [rcx]
inc dword [r8 + 0x1c8]
mov qword [r8 + 0x1e8], rax
jmp 0x180096bfa
mov rcx, qword [r8 + 0x1e0]
mov qword [rsp + 0x48], rcx
test rcx, rcx
je 0x180096bbf
mov rax, qword [rcx]
inc dword [r8 + 0x1c8]
mov qword [r8 + 0x1e0], rax
jmp 0x180096bfa
mov rcx, qword [r8 + 0x1d8]
mov qword [rsp + 0x48], rcx
test rcx, rcx
je 0x180096be3
mov rax, qword [rcx]
inc dword [r8 + 0x1c8]
mov qword [r8 + 0x1d8], rax
jmp 0x180096bfa
inc dword [r8 + 0x1d0]
mov rcx, r8
call fcn.18000c450
mov qword [rsp + 0x48], rax
mov rcx, rax
test rcx, rcx
je 0x180096c33
xor eax, eax
mov r8, rcx
lea rdx, [0x1800952b0]
mov qword [rcx], rax
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rax
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], rax
mov qword [rcx + 0x30], rax
mov rcx, rbx
call fcn.180087d50
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x68]
cmp byte [rax + 0x67], dil
jne 0x1800988c1
mov rax, qword [rbp + 0xe8]
mov rdx, qword [rbp - 0x80]
mov eax, dword [rax + 0x10]
mov dword [rcx + 0x34], eax
xor eax, eax
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x78], rbx
mov qword [rbp + 0x88], rcx
mov qword [rbp + 0x80], rax
test rdx, rdx
je 0x180096ca3
mov eax, dword [rdx]
jmp 0x180096ca5
mov eax, edi
mov qword [rcx + 0x10], rdx
mov rdx, qword [rsp + 0x58]
mov word [rcx + 2], ax
lea r8, [0x18004c640]
lea r9, [0x18004c650]
test rdx, rdx
je 0x180096d5c
mov ecx, edi
lea rax, [rdx + 8]
mov qword [rsp + 0x70], rax
mov dword [rbp + 0xf8], ecx
cmp dword [rdx], ecx
jle 0x180096d5c
mov rsi, rdx
lea rbx, [0x18005b8e0]
nop dword [rax + rax]
mov rdx, qword [rax]
mov qword [rbp + 0x18], r8
lea r8, [rbp + 0x78]
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x20], r9
mov dword [rbp + 0x28], edi
mov qword [rbp + 0x30], r8
mov qword [rbp + 8], rdi
test rdx, rdx
je 0x180096d2e
lea rcx, [rbp + 8]
call fcn.18004c270
mov rax, qword [rsp + 0x70]
mov ecx, dword [rbp + 0xf8]
lea r9, [0x18004c650]
inc ecx
add rax, 0x20
lea r8, [0x18004c640]
mov dword [rbp + 0xf8], ecx
mov qword [rsp + 0x70], rax
cmp ecx, dword [rsi]
jl 0x180096cf0
mov rsi, qword [rbp - 0x38]
mov rbx, qword [rbp + 0xe0]
lea r8, [0x18004c640]
mov rdx, qword [rbp - 0x60]
test rdx, rdx
je 0x180096df5
mov ecx, edi
lea rax, [rdx + 8]
mov qword [rsp + 0x70], rax
mov dword [rbp + 0xf8], ecx
cmp dword [rdx], ecx
jle 0x180096df5
mov rsi, rdx
lea rbx, [0x18005b8e0]
nop dword [rax + rax]
mov rdx, qword [rax]
mov qword [rbp + 0x18], r8
lea r8, [rbp + 0x78]
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x20], r9
mov dword [rbp + 0x28], edi
mov qword [rbp + 0x30], r8
mov qword [rbp + 8], rdi
test rdx, rdx
je 0x180096dce
lea rcx, [rbp + 8]
call fcn.18004c270
mov rax, qword [rsp + 0x70]
mov ecx, dword [rbp + 0xf8]
lea r9, [0x18004c650]
inc ecx
add rax, 0x20
lea r8, [0x18004c640]
mov dword [rbp + 0xf8], ecx
mov qword [rsp + 0x70], rax
cmp ecx, dword [rsi]
jl 0x180096d90
mov rsi, qword [rbp - 0x38]
mov rbx, qword [rbp + 0xe0]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x180096e9d
cmp qword [rbp - 0x80], rdi
je 0x180096e61
xor eax, eax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
lea rax, [0x180094f80]
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0xe8]
mov rdx, qword [rax + 0x40]
mov qword [rbp + 0x30], rax
test rdx, rdx
je 0x180096e59
lea rcx, [rbp + 8]
call fcn.18004c270
mov rax, qword [rbp + 0xe8]
mov rcx, qword [rbp - 0x28]
mov rax, qword [rax + 0x30]
mov qword [rbp - 0x30], rax
lea rax, [0x18005b8e0]
mov rdx, rcx
lea rcx, [rbp + 8]
mov qword [rbp + 0x10], rax
lea rax, [0x18004c640]
mov dword [rbp + 0x28], edi
mov qword [rbp + 0x18], rax
lea rax, [0x18004c650]
mov qword [rbp + 8], rdi
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x78]
mov qword [rbp + 0x30], rax
call fcn.18004c270
mov rcx, qword [rsp + 0x48]
mov eax, dword [rcx + 0x20]
mov dword [rcx + 0x24], eax
mov rax, qword [rbp + 0xe8]
cmp qword [rax + 0x38], rdi
jne 0x180096eec
cmp qword [rax + 0x40], rdi
jne 0x180096eec
cmp dword [rcx + 0x30], 1
jne 0x180096eec
mov rax, qword [rcx + 0x28]
mov rdx, qword [rax]
mov r9, qword [rdx + 0x20]
test r9, r9
je 0x180096eec
mov rcx, qword [rsp + 0x68]
lea r8, [rbp + 0x68]
call fcn.180091e90
mov rcx, qword [rsp + 0x48]
mov byte [rbp + 0xf8], al
jmp 0x180096ef3
mov byte [rbp + 0xf8], dil
lea rdx, [rbp + 0x78]
call fcn.180094490
mov r10, qword [rsp + 0x68]
cmp byte [r10 + 0x67], dil
jne 0x1800988a4
cmp qword [rbp - 0x80], rdi
je 0x180098136
mov rax, qword [rsp + 0x48]
mov qword [rbp - 8], rdi
mov word [rbp + 0xf8], di
cmp dword [rax + 0x30], 1
jne 0x180096fc0
mov rcx, qword [rax + 0x28]
cmp dword [rcx + 0x10], edi
jl 0x180096fc0
cmp qword [rcx], rdi
je 0x180096fc0
mov rcx, qword [rcx]
test dword [rcx + 4], 0x1000
jne 0x180096fc0
mov rcx, qword [rcx + 0x20]
test rcx, rcx
je 0x180096fc0
mov rdx, qword [rcx + 8]
test rdx, rdx
je 0x180096f7b
xor r9d, r9d
xor r8d, r8d
mov rcx, r10
call fcn.180052120
mov r10, qword [rsp + 0x68]
mov qword [rbp + 0xf8], rax
jmp 0x180096f82
mov qword [rbp + 0xf8], rdi
mov rdx, qword [rbp - 0x80]
xor r8d, r8d
mov rcx, r10
call fcn.180052690
mov r8, qword [rbp + 0xf8]
mov rcx, rbx
mov rdx, rax
call fcn.180052f80
mov rcx, rax
mov qword [rbp - 8], rax
neg rcx
sbb ax, ax
and ax, 0x500
mov word [rbp + 0xf8], ax
mov rax, qword [rsp + 0x48]
mov ecx, dword [rbx + 0x34]
mov rdx, qword [rbp - 0x80]
xor r8d, r8d
mov dword [rax + 4], ecx
inc dword [rbx + 0x34]
mov r9d, dword [rax + 0x20]
mov rcx, rbx
call fcn.18008af80
movsxd r9, dword [rsi + 0x90]
mov r10, rax
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x48]
movzx edx, word [rax + 2]
mov r8d, dword [rax + 4]
mov dword [rbp - 0x54], r9d
cmp dword [rsi + 0x94], r9d
jg 0x180097026
mov r9d, edx
mov rcx, rsi
mov edx, 0x77
mov dword [rsp + 0x20], edi
call fcn.180035350
mov r10, qword [rsp + 0x70]
mov r9d, eax
mov dword [rbp - 0x54], eax
jmp 0x180097054
lea rcx, [r9 + r9*2]
lea eax, [r9 + 1]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x77
mov rcx, qword [rsi]
mov eax, r9d
cmp byte [rcx + 0x67], dil
je 0x18009706f
mov r8, r10
mov edx, 0xfffffff8
call fcn.180036520
jmp 0x1800970b4
test r9d, r9d
jns 0x18009707c
mov eax, dword [rsi + 0x90]
dec eax
cdqe
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 0x88]
cmp byte [rax + rcx*8 + 1], dil
lea rdx, [rax + rcx*8]
je 0x1800970a7
mov r9d, 0xfffffff8
mov r8, r10
mov rcx, rsi
call fcn.180036750
jmp 0x1800970b4
test r10, r10
je 0x1800970b4
mov qword [rdx + 0x10], r10
mov byte [rdx + 1], 0xf8
inc dword [rbx + 0x38]
mov eax, dword [rbx + 0x38]
mov r9, qword [rbp - 0x80]
lea edx, [rax + 1]
mov dword [rbp - 0x68], eax
mov eax, dword [rbx + 0x44]
dec eax
lea ecx, [rdx + 2]
mov dword [rsp + 0x78], edx
mov dword [rbx + 0x38], ecx
lea r8d, [rcx + 1]
mov dword [rbp - 0x40], eax
dec eax
mov dword [rbp - 0x48], ecx
mov dword [rbp - 0x44], r8d
mov dword [rbx + 0x44], eax
mov dword [rbp - 0x60], eax
mov eax, dword [r9]
add dword [rbx + 0x38], eax
mov ecx, dword [rbx + 0x38]
lea eax, [rcx + 1]
add ecx, dword [r9]
mov dword [rbx + 0x38], ecx
movsxd rcx, dword [rsi + 0x90]
mov dword [rbp - 0x58], eax
cmp dword [rsi + 0x94], ecx
jg 0x18009712d
xor r8d, r8d
mov r9d, edx
mov rcx, rsi
lea edx, [r8 + 0x47]
mov dword [rsp + 0x20], edi
call fcn.180035350
mov r8d, dword [rbp - 0x44]
mov r9, qword [rbp - 0x80]
jmp 0x180097156
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov qword [rax + rcx*8], 0x47
mov eax, dword [r9]
movsxd rcx, dword [rsi + 0x90]
lea edx, [r8 + rax - 1]
cmp dword [rsi + 0x94], ecx
jg 0x180097185
mov r9d, r8d
xor r8d, r8d
mov dword [rsp + 0x20], edx
lea edx, [r8 + 0x4b]
mov rcx, rsi
call fcn.180035350
jmp 0x1800971af
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 8], r8d
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], rdi
mov qword [rax + rcx*8], 0x4b
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x1800971d9
mov r9d, dword [rbp - 0x60]
mov r8d, dword [rbp - 0x48]
mov edx, 0xa
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x18009720b
mov edx, dword [rbp - 0x48]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rbp - 0x60]
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0xa
mov dword [rax + rcx*8 + 8], edx
mov eax, dword [rsp + 0x40]
mov r9, qword [rbp - 0x80]
mov r8, qword [rbp - 0x30]
neg eax
mov dword [rsp + 0x38], edi
mov edx, pe_nt_image_headers64
sbb cx, cx
mov eax, 0x40
and cx, 0x200
cmp byte [rbp - 0x20], 2
cmove ax, dx
mov rdx, qword [rsp + 0x60]
or cx, ax
mov rax, qword [rbp + 0xe8]
or cx, word [rbp + 0xf8]
mov word [rsp + 0x30], cx
mov qword [rsp + 0x28], rax
mov rax, qword [rbp - 8]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1800b38b0
mov rdx, rax
mov qword [rbp - 0x10], rax
test rax, rax
jne 0x180097293
mov rax, qword [rbp - 8]
test rax, rax
je 0x18009889f
mov rcx, qword [rsp + 0x68]
mov rdx, rax
call fcn.1800532d0
jmp 0x18009889f
cmp qword [rbx + 0x60], rdi
je 0x1800972b2
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rbp + 0xe8]
lea r8, [rbp + 0x78]
call fcn.180094590
mov rdx, qword [rbp - 0x10]
mov eax, dword [rbx + 0x38]
mov rcx, qword [rsp + 0x48]
inc eax
mov dword [rcx + 0xc], eax
mov eax, dword [rcx + 0x20]
add eax, dword [rcx + 0x30]
add dword [rbx + 0x38], eax
movzx eax, byte [rdx + 0x43]
mov dword [rbp - 0x30], eax
movzx eax, byte [rdx + 0x41]
test al, al
jns 0x1800972db
mov eax, edi
jmp 0x1800972de
movsx eax, al
mov rdx, qword [rbp - 0x80]
cmp eax, dword [rdx]
jne 0x1800972ee
mov dword [rbp - 0x78], edi
jmp 0x180097684
cmp byte [rbp - 0x20], dil
je 0x180097308
mov rax, qword [rbp + 0xe8]
lea r9, str.DISTINCT
test byte [rax + 4], 1
je 0x18009730f
lea r9, str.GROUP_BY
lea r8, str.USE_TEMP_B_TREE_FOR__s
xor edx, edx
mov rcx, rbx
call fcn.180035b70
mov r10, qword [rbp - 0x80]
mov rax, qword [rsp + 0x48]
mov r8d, dword [r10]
mov dword [rbp - 0x78], 1
mov dword [rbp - 0x70], r8d
mov dword [rbp - 0x4c], r8d
cmp dword [rax + 0x20], edi
jle 0x180097368
mov rcx, qword [rax + 0x18]
mov edx, dword [rax + 0x20]
add rcx, 0x16
nop dword [rax + rax]
movsx eax, word [rcx]
cmp eax, r8d
jl 0x18009735b
inc r8d
add rcx, 0x18
dec rdx
jne 0x180097350
mov dword [rbp - 0x4c], r8d
cmp r8d, 1
jne 0x180097397
movzx eax, byte [rbx + 0x1f]
test al, al
jne 0x180097382
inc dword [rbx + 0x38]
mov eax, dword [rbx + 0x38]
mov dword [rsp + 0x50], eax
jmp 0x1800973c5
dec al
movzx eax, al
mov byte [rbx + 0x1f], al
mov eax, dword [rbx + rax*4 + 0xe0]
mov dword [rsp + 0x50], eax
jmp 0x1800973c5
mov ecx, dword [rbx + 0x28]
mov edx, dword [rbx + 0x2c]
mov dword [rsp + 0x50], edx
cmp r8d, ecx
jg 0x1800973b5
lea eax, [rdx + r8]
sub ecx, r8d
mov dword [rbx + 0x2c], eax
mov dword [rbx + 0x28], ecx
jmp 0x1800973c5
mov eax, dword [rbx + 0x38]
lea ecx, [rax + 1]
add eax, r8d
mov dword [rsp + 0x50], ecx
mov dword [rbx + 0x38], eax
mov r8d, dword [rsp + 0x50]
xor r9d, r9d
mov rdx, r10
mov rcx, rbx
mov byte [rsp + 0x20], dil
call fcn.180059a80
mov rcx, qword [rsp + 0x48]
mov r8d, edi
mov byte [rcx], 1
mov dword [rsp + 0x60], edi
cmp dword [rcx + 0x20], edi
jle 0x18009744e
mov r9d, dword [rbp - 0x70]
mov rsi, rdi
nop dword [rax + rax]
mov rdx, qword [rcx + 0x18]
movsx eax, word [rsi + rdx + 0x16]
cmp eax, r9d
jl 0x180097438
mov eax, dword [rsp + 0x50]
mov rdx, qword [rsi + rdx + 8]
mov rcx, rbx
lea r8d, [rax + r9]
call fcn.180059900
mov r9d, dword [rbp - 0x70]
mov rcx, qword [rsp + 0x48]
mov r8d, dword [rsp + 0x60]
inc r9d
mov dword [rbp - 0x70], r9d
inc r8d
add rsi, 0x18
mov dword [rsp + 0x60], r8d
cmp r8d, dword [rcx + 0x20]
jl 0x180097400
mov rsi, qword [rbp - 0x38]
mov byte [rcx], dil
movzx eax, byte [rbx + 0x1f]
test al, al
jne 0x180097461
inc dword [rbx + 0x38]
mov edx, dword [rbx + 0x38]
jmp 0x180097470
dec al
movzx eax, al
mov byte [rbx + 0x1f], al
mov edx, dword [rbx + rax*4 + 0xe0]
movsxd rcx, dword [rsi + 0x90]
mov r8d, dword [rsp + 0x50]
mov dword [rbp - 0x70], edx
cmp dword [rsi + 0x94], ecx
jg 0x1800974a1
mov r9d, dword [rbp - 0x4c]
mov dword [rsp + 0x20], edx
mov rcx, rsi
mov edx, 0x61
call fcn.180035350
mov edx, dword [rbp - 0x70]
jmp 0x1800974d3
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], r8d
mov r8d, dword [rbp - 0x4c]
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x61
mov dword [rax + rcx*8 + 8], r8d
mov rax, qword [rsp + 0x48]
movsxd rcx, dword [rsi + 0x90]
mov r8d, dword [rax + 4]
cmp dword [rsi + 0x94], ecx
jg 0x180097504
mov r9d, edx
mov rcx, rsi
mov edx, 0x8b
mov dword [rsp + 0x20], edi
call fcn.180035350
mov edx, dword [rbp - 0x70]
jmp 0x180097531
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x8b
test edx, edx
je 0x18009754a
movzx eax, byte [rbx + 0x1f]
cmp al, 8
jae 0x18009754a
movzx eax, al
mov dword [rbx + rax*4 + 0xe0], edx
inc byte [rbx + 0x1f]
mov eax, dword [rbp - 0x4c]
cmp eax, 1
jne 0x180097571
mov ecx, dword [rsp + 0x50]
test ecx, ecx
je 0x180097580
movzx eax, byte [rbx + 0x1f]
cmp al, 8
jae 0x180097580
movzx eax, al
mov dword [rbx + rax*4 + 0xe0], ecx
inc byte [rbx + 0x1f]
jmp 0x180097580
cmp eax, dword [rbx + 0x28]
jle 0x180097580
mov dword [rbx + 0x28], eax
mov eax, dword [rsp + 0x50]
mov dword [rbx + 0x2c], eax
mov rcx, qword [rbp - 0x10]
call fcn.1800b4780
mov r10d, dword [rbx + 0x34]
mov rax, qword [rsp + 0x48]
mov dword [rax + 8], r10d
movzx eax, byte [rbx + 0x1f]
inc dword [rbx + 0x34]
mov dword [rsp + 0x50], r10d
test al, al
jne 0x1800975ae
inc dword [rbx + 0x38]
mov edx, dword [rbx + 0x38]
jmp 0x1800975bd
dec al
movzx eax, al
mov byte [rbx + 0x1f], al
mov edx, dword [rbx + rax*4 + 0xe0]
movsxd rcx, dword [rsi + 0x90]
mov r8d, dword [rbp - 0x4c]
mov dword [rbp - 0x70], edx
cmp dword [rsi + 0x94], ecx
jg 0x1800975ed
mov dword [rsp + 0x20], r8d
mov r9d, edx
mov rcx, rsi
mov r8d, r10d
mov edx, 0x79
call fcn.180035350
jmp 0x18009761b
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], r10d
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], r8d
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x79
mov rax, qword [rsp + 0x48]
movsxd rcx, dword [rsi + 0x90]
mov edx, dword [rax + 4]
cmp dword [rsi + 0x94], ecx
jg 0x18009764c
mov r9d, dword [rbp - 0x74]
mov r8d, edx
mov rcx, rsi
mov edx, 0x22
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x18009767b
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rbp - 0x74]
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x22
mov dword [rax + rcx*8 + 8], edx
mov rcx, qword [rsp + 0x48]
mov byte [rcx + 1], 1
cmp qword [rbx + 0x60], rdi
je 0x1800976ff
xor eax, eax
mov r9d, edi
mov dword [rsp + 0x60], edi
mov qword [rbp + 0x10], rax
mov qword [rbp + 8], rax
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rax
lea rax, [0x1800946d0]
mov qword [rbp + 0x10], rax
cmp dword [rcx + 0x30], edi
jle 0x1800976ff
mov rdx, rdi
mov qword [rbp - 0x38], rdx
mov rax, qword [rcx + 0x28]
mov r8, qword [rdx + rax]
test r8, r8
je 0x1800976e9
lea rcx, [rbp + 8]
mov rdx, r8
call fcn.18004c270
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rbp - 0x38]
mov r9d, dword [rsp + 0x60]
inc r9d
add rdx, 0x18
mov dword [rsp + 0x60], r9d
mov qword [rbp - 0x38], rdx
cmp r9d, dword [rcx + 0x30]
jl 0x1800976c2
cmp dword [rsp + 0x40], edi
je 0x180097762
mov rax, qword [rsp + 0x68]
test byte [rax + 0x60], 4
jne 0x180097762
cmp dword [rbp - 0x78], edi
jne 0x18009771f
mov rax, qword [rbp - 0x10]
test byte [rax + 0x44], 8
je 0x180097762
mov rcx, qword [rsi]
mov qword [rbp + 0x38], rdi
cmp byte [rcx + 0x67], dil
jne 0x180097762
mov rbx, qword [rsi + 0x88]
movsxd rax, dword [rbp - 0x50]
lea rdi, [rax + rax*2]
movsx edx, byte [rbx + rdi*8 + 1]
mov r8, qword [rbx + rdi*8 + 0x10]
call fcn.180036520
mov qword [rbx + rdi*8 + 0x10], 0
mov word [rbx + rdi*8], 0xb8
mov rbx, qword [rbp + 0xe0]
xor edi, edi
cmp dword [rbp - 0x78], 0
movsxd rcx, dword [rsi + 0x90]
mov rdx, qword [rsp + 0x48]
mov dword [rsp + 0x60], ecx
je 0x1800977a6
mov r8d, dword [rdx + 4]
mov r9d, dword [rbp - 0x70]
cmp dword [rsi + 0x94], ecx
jg 0x18009780a
mov eax, dword [rsp + 0x50]
mov edx, 0x85
mov rcx, rsi
mov dword [rsp + 0x20], eax
call fcn.180035350
mov rdx, qword [rsp + 0x48]
mov r10d, dword [rsp + 0x50]
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rbp - 0x78]
mov r8d, edi
cmp dword [rax], 0
mov dword [rsp + 0x40], edi
mov qword [rbp - 0x70], rcx
jle 0x1800978c3
add rax, 8
mov qword [rbp - 0x38], rax
nop
test rcx, rcx
je 0x180097879
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x180097843
mov eax, dword [rbp - 0x58]
mov r9d, r8d
mov edx, 0x5e
add eax, r8d
mov r8d, r10d
mov rcx, rsi
mov dword [rsp + 0x20], eax
call fcn.180035350
jmp 0x18009788b
mov r10d, dword [rsp + 0x50]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], r9d
mov dword [rax + rcx*8 + 0xc], r10d
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x85
jmp 0x1800977ab
lea rdx, [rcx + rcx*2]
lea eax, [rcx + 1]
mov rcx, qword [rsi + 0x88]
mov dword [rsi + 0x90], eax
mov eax, dword [rbp - 0x58]
mov dword [rcx + rdx*8 + 4], r10d
add eax, r8d
mov dword [rcx + rdx*8 + 8], r8d
mov qword [rcx + rdx*8 + 0x10], rdi
mov dword [rcx + rdx*8 + 0xc], eax
mov dword [rcx + rdx*8], 0x5e
jmp 0x180097895
add r8d, dword [rbp - 0x58]
mov byte [rdx], 1
mov rdx, qword [rax]
mov rcx, rbx
call fcn.180059900
mov r10d, dword [rsp + 0x50]
mov r8d, dword [rsp + 0x40]
mov rax, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x48]
inc r8d
add rax, 0x20
cmp r8d, dword [rcx]
mov rcx, qword [rbp - 0x70]
mov qword [rbp - 0x38], rax
mov dword [rsp + 0x40], r8d
jl 0x1800977d0
mov rax, qword [rbp - 0x80]
mov r10, qword [rsp + 0x70]
test r10, r10
je 0x1800978d0
inc dword [r10]
movsxd rdx, dword [rsi + 0x90]
mov r8d, dword [rax]
cmp dword [rsi + 0x94], edx
jg 0x180097905
mov r9d, dword [rbp - 0x58]
mov dword [rsp + 0x20], r8d
mov r8d, dword [rbp - 0x44]
mov edx, 0x5a
mov rcx, rsi
call fcn.180035350
mov r10, qword [rsp + 0x70]
mov edx, eax
jmp 0x18009793c
mov r9d, dword [rbp - 0x44]
lea rcx, [rdx + rdx*2]
lea eax, [rdx + 1]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], r9d
mov r9d, dword [rbp - 0x58]
mov dword [rax + rcx*8 + 0xc], r8d
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x5a
mov dword [rax + rcx*8 + 8], r9d
mov rcx, qword [rsi]
cmp byte [rcx + 0x67], 0
je 0x180097954
mov r8, r10
mov edx, 0xfffffff8
call fcn.180036520
jmp 0x180097999
test edx, edx
jns 0x180097960
mov edx, dword [rsi + 0x90]
dec edx
movsxd rax, edx
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 0x88]
cmp byte [rax + rcx*8 + 1], 0
lea rdx, [rax + rcx*8]
je 0x18009798c
mov r9d, 0xfffffff8
mov r8, r10
mov rcx, rsi
call fcn.180036750
jmp 0x180097999
test r10, r10
je 0x180097999
mov qword [rdx + 0x10], r10
mov byte [rdx + 1], 0xf8
movsxd rcx, dword [rsi + 0x90]
mov dword [rsp + 0x40], ecx
lea edx, [rcx + 1]
cmp dword [rsi + 0x94], ecx
jg 0x1800979c7
xor r9d, r9d
mov dword [rsp + 0x20], edx
mov r8d, edx
lea edx, [r9 + 0xe]
mov rcx, rsi
call fcn.180035350
jmp 0x1800979f3
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], edi
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0xe
mov r10, qword [rbx + 0x10]
mov rax, qword [rbp - 0x80]
mov r8d, dword [rbp - 0x58]
movsxd rcx, dword [r10 + 0x90]
mov edx, dword [rax]
cmp dword [r10 + 0x94], ecx
jg 0x180097a28
mov r9d, dword [rbp - 0x44]
mov dword [rsp + 0x20], edx
mov rcx, r10
mov edx, 0x4f
call fcn.180035350
jmp 0x180097a5b
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [r10 + 0x90], eax
mov rax, qword [r10 + 0x88]
mov dword [rax + rcx*8 + 4], r8d
mov r8d, dword [rbp - 0x44]
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x4f
mov dword [rax + rcx*8 + 8], r8d
movsxd rcx, dword [rsi + 0x90]
mov r8d, dword [rsp + 0x78]
cmp dword [rsi + 0x94], ecx
jg 0x180097a8e
mov r9d, dword [rbp - 0x40]
inc r8d
mov edx, 0xa
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.180035350
mov r8d, dword [rsp + 0x78]
jmp 0x180097ac1
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
lea edx, [r8 + 1]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rbp - 0x40]
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0xa
mov dword [rax + rcx*8 + 8], edx
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x180097ae7
mov r9d, dword [rbp - 0x74]
mov edx, 0x3b
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x180097b17
mov edx, dword [rbp - 0x74]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x3b
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x180097b41
mov r9d, dword [rbp - 0x60]
mov r8d, dword [rbp - 0x48]
mov edx, 0xa
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x180097b73
mov edx, dword [rbp - 0x48]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rbp - 0x60]
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0xa
mov dword [rax + rcx*8 + 8], edx
mov rax, qword [rsi]
mov edx, dword [rsi + 0x90]
cmp byte [rax + 0x67], 0
je 0x180097b8b
lea rax, [0x180181dc0]
jmp 0x180097b9f
movsxd rax, dword [rsp + 0x40]
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 0x88]
lea rax, [rax + rcx*8]
mov r9d, dword [rbp - 0x30]
mov r8, qword [rsp + 0x48]
mov dword [rax + 8], edx
mov edx, dword [rbp - 0x68]
mov rcx, rbx
call fcn.180094a20
movsxd r11, dword [rsi + 0x90]
cmp dword [rsi + 0x94], r11d
jg 0x180097be1
mov r9d, dword [rbp - 0x68]
mov edx, 0x47
mov rcx, rsi
lea r8d, [rdx - 0x46]
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x180097c15
mov edx, dword [rbp - 0x68]
lea rcx, [r11 + r11*2]
lea eax, [r11 + 1]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], 1
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x47
cmp dword [rbp - 0x78], 0
je 0x180097c81
mov rax, qword [rsp + 0x48]
movsxd rcx, dword [rsi + 0x90]
mov edx, dword [rax + 4]
cmp dword [rsi + 0x94], ecx
jg 0x180097c4d
mov r9d, dword [rsp + 0x60]
mov r8d, edx
mov rcx, rsi
mov edx, 0x25
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x180097cc9
mov r8d, dword [rsp + 0x60]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], r8d
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x25
jmp 0x180097cc9
mov rcx, qword [rbp - 0x10]
call fcn.1800b4780
mov rcx, qword [rsi]
cmp byte [rcx + 0x67], 0
jne 0x180097cc9
mov rbx, qword [rsi + 0x88]
movsxd rax, dword [rbp - 0x54]
lea rdi, [rax + rax*2]
movsx edx, byte [rbx + rdi*8 + 1]
mov r8, qword [rbx + rdi*8 + 0x10]
call fcn.180036520
mov qword [rbx + rdi*8 + 0x10], 0
mov word [rbx + rdi*8], 0xb8
mov rbx, qword [rbp + 0xe0]
xor edi, edi
mov rax, qword [rbp - 8]
test rax, rax
je 0x180097cdf
mov rcx, qword [rsp + 0x68]
mov rdx, rax
call fcn.1800532d0
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x180097d0d
mov r8d, dword [rsp + 0x78]
mov r9d, dword [rbp - 0x40]
mov edx, 0xa
mov rcx, rsi
inc r8d
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x180097d42
mov edx, dword [rsp + 0x78]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
inc edx
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rbp - 0x40]
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0xa
mov dword [rax + rcx*8 + 8], edx
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x180097d6a
mov r9d, dword [rbp - 0x74]
xor r8d, r8d
mov rcx, rsi
lea edx, [r8 + 9]
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x180097d96
mov edx, dword [rbp - 0x74]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov qword [rax + rcx*8], 9
movsxd rcx, dword [rsi + 0x90]
mov dword [rsp + 0x60], ecx
cmp dword [rsi + 0x94], ecx
jg 0x180097dca
mov r9d, dword [rsp + 0x78]
mov edx, 0x47
mov rcx, rsi
lea r8d, [rdx - 0x46]
mov dword [rsp + 0x20], edi
call fcn.180035350
mov r8d, dword [rsp + 0x78]
jmp 0x180097e00
mov r8d, dword [rsp + 0x78]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], 1
mov dword [rax + rcx*8 + 8], r8d
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x47
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x180097e27
xor r9d, r9d
inc r8d
mov rcx, rsi
lea edx, [r9 + 0x43]
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x180097e58
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
lea edx, [r8 + 1]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], edx
mov qword [rax + rcx*8 + 8], 0
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x43
mov rcx, qword [rsi + 0x18]
mov edx, dword [rbp - 0x40]
mov eax, dword [rcx + 0x48]
not edx
add eax, dword [rcx + 0x44]
jns 0x180097e76
mov r8d, edx
mov rdx, rsi
call fcn.180035ec0
jmp 0x180097e87
mov rcx, qword [rcx + 0x50]
mov eax, dword [rsi + 0x90]
movsxd r8, edx
mov dword [rcx + r8*4], eax
movsxd rcx, dword [rsi + 0x90]
mov dword [rbp - 0x54], ecx
lea r8d, [rcx + 2]
cmp dword [rsi + 0x94], ecx
jg 0x180097eb7
mov r9d, r8d
mov r8d, dword [rbp - 0x68]
mov edx, 0x3b
mov rcx, rsi
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x180097ee7
mov edx, dword [rbp - 0x68]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], r8d
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x3b
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x180097f13
mov r8d, dword [rsp + 0x78]
xor r9d, r9d
mov rcx, rsi
lea edx, [r9 + 0x43]
inc r8d
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x180097f46
mov edx, dword [rsp + 0x78]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
inc edx
mov dword [rax + rcx*8 + 4], edx
mov qword [rax + rcx*8 + 8], 0
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x43
mov rdx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.180094900
mov ebx, dword [rbp - 0x54]
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp + 0xe0]
inc ebx
mov r9d, 0x10
mov r8d, ebx
call fcn.18005a2f0
mov r11d, dword [rsp + 0x60]
mov rax, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0xe8]
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], ebx
mov rbx, qword [rbp + 0xe0]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x20]
lea r9, [rbp + 0x38]
or r8d, 0xffffffff
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.18008a340
movsxd r11, dword [rsi + 0x90]
cmp dword [rsi + 0x94], r11d
jg 0x180097fdf
mov r8d, dword [rsp + 0x78]
xor r9d, r9d
mov rcx, rsi
lea edx, [r9 + 0x43]
inc r8d
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x180098013
mov edx, dword [rsp + 0x78]
lea rcx, [r11 + r11*2]
lea eax, [r11 + 1]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
inc edx
mov dword [rax + rcx*8 + 4], edx
mov qword [rax + rcx*8 + 8], 0
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x43
mov rcx, qword [rsi + 0x18]
mov edx, dword [rbp - 0x60]
mov eax, dword [rcx + 0x48]
not edx
add eax, dword [rcx + 0x44]
jns 0x180098031
mov r8d, edx
mov rdx, rsi
call fcn.180035ec0
jmp 0x180098042
mov rcx, qword [rcx + 0x50]
mov eax, dword [rsi + 0x90]
movsxd r8, edx
mov dword [rcx + r8*4], eax
mov rdx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.180094730
movsxd r11, dword [rsi + 0x90]
cmp dword [rsi + 0x94], r11d
jg 0x180098078
mov r9d, dword [rbp - 0x68]
xor r8d, r8d
mov rcx, rsi
lea edx, [r8 + 0x47]
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x1800980a5
mov edx, dword [rbp - 0x68]
lea rcx, [r11 + r11*2]
lea eax, [r11 + 1]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov qword [rax + rcx*8], 0x47
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x1800980cd
mov r8d, dword [rbp - 0x48]
xor r9d, r9d
mov rcx, rsi
lea edx, [r9 + 0x43]
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x1800980fd
mov edx, dword [rbp - 0x48]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], edx
mov qword [rax + rcx*8 + 8], 0
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x43
cmp word [rbp + 0xf8], 0
je 0x1800987ea
mov ecx, dword [rbp - 0x30]
test ecx, ecx
je 0x1800987ea
mov rax, qword [rsp + 0x48]
mov edx, ecx
mov rcx, rbx
mov rax, qword [rax + 0x28]
mov r9d, dword [rax + 0x14]
mov r8d, dword [rax + 0x10]
call fcn.18008a270
jmp 0x1800987ea
mov rax, qword [rbp + 0xe8]
mov r8, qword [rsp + 0x48]
cmp qword [rax + 0x30], rdi
jne 0x180098571
mov rdx, qword [rax + 0x20]
cmp dword [rdx], 1
jne 0x180098571
mov r11, qword [rax + 0x28]
cmp dword [r11], 1
jne 0x180098571
cmp qword [r11 + 0x30], rdi
jne 0x180098571
cmp dword [r8 + 0x30], 1
jne 0x180098571
cmp qword [rax + 0x40], rdi
jne 0x180098571
mov r11, qword [r11 + 0x28]
mov qword [rbp - 0x10], r11
cmp byte [r11 + 0x3f], dil
jne 0x180098571
mov rdx, qword [rdx + 8]
cmp byte [rdx], 0xa8
jne 0x180098571
cmp qword [rdx + 0x38], r8
jne 0x180098571
mov rax, qword [r8 + 0x28]
mov rcx, qword [rax + 8]
test dword [rcx + 4], 0x100
je 0x180098571
test dword [rdx + 4], 0x1000004
jne 0x180098571
mov rdx, qword [r11 + 0x60]
mov r10d, 0xffff8000
mov dword [rbp + 0xf8], r10d
test rdx, rdx
je 0x180098223
mov rax, qword [rbx]
mov r10d, edi
mov dword [rbp + 0xf8], edi
mov rcx, qword [rax + 0x20]
cmp qword [rcx + 0x18], rdx
je 0x180098223
mov rcx, qword [rax + 0x20]
add rcx, 0x18
nop word [rax + rax]
add rcx, 0x20
inc r10d
cmp qword [rcx], rdx
jne 0x180098210
mov dword [rbp + 0xf8], r10d
mov eax, dword [rbx + 0x34]
mov r8, rbx
mov ecx, r10d
mov dword [rbp + 0xe0], eax
inc eax
mov r9d, 1
mov dword [rbx + 0x34], eax
mov eax, dword [r11 + 0x28]
mov rdx, rdi
mov dword [rsp + 0x40], eax
mov rax, qword [rbx + 0xa8]
mov qword [rsp + 0x70], rdi
test rax, rax
mov qword [rbp - 8], rdx
cmovne r8, rax
shl r9d, cl
mov eax, dword [r8 + 0x7c]
test r9d, eax
jne 0x180098292
or eax, r9d
mov dword [r8 + 0x7c], eax
cmp r10d, 1
jne 0x180098298
mov rcx, qword [r8]
mov rax, qword [rcx + 0x20]
cmp qword [rax + 0x28], rdx
jne 0x1800982d2
mov rdx, rcx
mov rcx, r8
call fcn.18006e3a0
jmp 0x1800982cb
cmp r10d, 1
je 0x1800982d2
mov rax, qword [rbx]
movsxd rdx, r10d
mov rcx, qword [rax + 0x20]
shl rdx, 5
mov rax, qword [rdx + rcx + 8]
cmp byte [rax + 0x11], dil
je 0x1800982cf
mov rax, qword [r11]
mov r8d, dword [r11 + 0x28]
xor r9d, r9d
mov edx, r10d
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.180064350
mov r11, qword [rbp - 0x10]
mov rdx, rdi
test byte [r11 + 0x30], 0x80
je 0x1800982fc
mov rdx, qword [r11 + 0x10]
mov qword [rbp - 8], rdx
test rdx, rdx
je 0x1800982fc
mov eax, dword [rdx + 0x64]
and al, 3
cmp al, 2
je 0x1800982f8
mov rdx, qword [rdx + 0x28]
test rdx, rdx
jne 0x1800982e6
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0xe8]
mov rax, qword [rax + 0x28]
test byte [rax + 0x48], 1
jne 0x180098348
mov rax, qword [r11 + 0x10]
test rax, rax
je 0x180098348
test byte [rax + 0x64], 4
jne 0x18009833b
movzx ecx, word [rax + 0x5c]
cmp cx, word [r11 + 0x3c]
jge 0x18009833b
cmp qword [rax + 0x48], rdi
jne 0x18009833b
test rdx, rdx
je 0x180098338
cmp cx, word [rdx + 0x5c]
jge 0x18009833b
mov rdx, rax
mov rax, qword [rax + 0x28]
test rax, rax
jne 0x180098316
mov qword [rbp - 8], rdx
test rdx, rdx
je 0x180098361
mov eax, dword [rdx + 0x58]
mov rcx, rbx
mov dword [rsp + 0x40], eax
call fcn.18006ee90
mov qword [rsp + 0x70], rax
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x18009839d
mov edx, dword [rbp + 0xf8]
mov r9d, dword [rsp + 0x40]
mov r8d, dword [rbp + 0xe0]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], edx
mov rcx, rsi
mov edx, 0x70
call fcn.1800353b0
jmp 0x1800983dc
mov edx, dword [rbp + 0xe0]
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rsp + 0x40]
mov dword [rax + rcx*8 + 0x10], 1
mov dword [rax + rcx*8 + 8], edx
mov edx, dword [rbp + 0xf8]
mov dword [rax + rcx*8], 0xfd70
mov dword [rax + rcx*8 + 0xc], edx
mov r8, qword [rsp + 0x70]
test r8, r8
je 0x180098433
mov rcx, qword [rsi]
cmp byte [rcx + 0x67], dil
je 0x1800983fb
mov edx, 0xfffffff8
call fcn.180036520
jmp 0x180098433
mov eax, dword [rsi + 0x90]
dec eax
cdqe
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 0x88]
cmp byte [rax + rcx*8 + 1], dil
lea rdx, [rax + rcx*8]
je 0x18009842b
mov r9d, 0xfffffff8
mov rcx, rsi
call fcn.180036750
jmp 0x180098433
mov qword [rdx + 0x10], r8
mov byte [rdx + 1], 0xf8
mov rcx, qword [rsp + 0x48]
mov eax, dword [rbx + 0x38]
mov r8d, dword [rbp + 0xe0]
inc eax
mov dword [rcx + 0xc], eax
mov eax, dword [rcx + 0x20]
add eax, dword [rcx + 0x30]
add dword [rbx + 0x38], eax
mov edx, dword [rcx + 0x20]
add edx, dword [rcx + 0xc]
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x180098482
mov r9d, edx
mov rcx, rsi
mov edx, 0x62
mov dword [rsp + 0x20], edi
call fcn.180035350
mov r8d, dword [rbp + 0xe0]
jmp 0x1800984af
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x62
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x1800984d3
xor r9d, r9d
mov rcx, rsi
mov dword [rsp + 0x20], edi
lea edx, [r9 + 0x7a]
call fcn.180035350
jmp 0x1800984fd
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], r8d
mov qword [rax + rcx*8 + 8], rdi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x7a
cmp byte [rbx + 0x12b], 2
jne 0x18009879e
mov rcx, qword [rbp - 8]
mov r9, qword [rbp - 0x10]
test rcx, rcx
je 0x180098533
test byte [r9 + 0x30], 0x80
je 0x180098527
mov eax, dword [rcx + 0x64]
and al, 3
cmp al, 2
je 0x180098533
mov rax, qword [rcx]
lea rcx, [0x180144af4]
jmp 0x180098540
lea rcx, [0x180144af4]
mov dword [rbp - 0x78], edi
mov rax, rcx
cmp dword [rbp - 0x78], edi
mov r9, qword [r9]
lea rdx, str._USING_COVERING_INDEX
cmovne rcx, rdx
mov qword [rsp + 0x28], rax
lea r8, str.SCAN__s_s_s
mov qword [rsp + 0x20], rcx
mov rcx, rbx
xor edx, edx
call fcn.180035b70
jmp 0x18009879e
mov dword [rsp + 0x40], edi
mov qword [rsp + 0x70], rdi
mov word [rbp + 0xe0], di
cmp dword [r8 + 0x24], edi
je 0x18009862b
mov r9d, dword [r8 + 0x30]
mov edx, edi
test r9d, r9d
jle 0x1800985c1
mov rcx, qword [r8 + 0x28]
nop word [rax + rax]
mov rax, qword [rcx]
test dword [rax + 4], 0x1000000
jne 0x1800985b6
mov rax, qword [rcx + 8]
test byte [rax + 4], 0x20
jne 0x1800985c1
inc edx
add rcx, 0x18
cmp edx, r9d
jl 0x1800985a0
cmp edx, r9d
jne 0x180098658
inc dword [rbx + 0x38]
movsxd rcx, dword [rsi + 0x90]
mov edx, dword [rbx + 0x38]
mov dword [rsp + 0x40], edx
cmp dword [rsi + 0x94], ecx
jg 0x180098600
xor r8d, r8d
mov r9d, edx
mov rcx, rsi
lea edx, [r8 + 0x47]
mov dword [rsp + 0x20], edi
call fcn.180035350
mov r8, qword [rsp + 0x48]
jmp 0x180098658
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov qword [rax + rcx*8], 0x47
jmp 0x180098658
cmp dword [r8 + 0x30], 1
jne 0x180098658
mov rax, qword [r8 + 0x28]
cmp dword [rax + 0x10], edi
jl 0x180098658
mov rax, qword [rax]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x70], rax
neg rax
sbb ax, ax
and ax, 0x500
mov word [rbp + 0xe0], ax
mov eax, dword [rbx + 0x38]
mov rdx, r8
mov rcx, rbx
inc eax
mov dword [r8 + 0xc], eax
mov eax, dword [r8 + 0x20]
add eax, dword [r8 + 0x30]
add dword [rbx + 0x38], eax
call fcn.180094730
movzx r11d, byte [rbp + 0xf8]
or r11w, word [rbp + 0xe0]
mov rax, qword [rbp + 0xe8]
mov r9, qword [rbp + 0x68]
mov r8, qword [rbp - 0x30]
mov rdx, qword [rsp + 0x60]
mov dword [rsp + 0x38], edi
mov word [rsp + 0x30], r11w
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x70]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1800b38b0
mov qword [rsp + 0x70], rax
test rax, rax
je 0x18009889f
movzx eax, byte [rax + 0x43]
mov r8, qword [rsp + 0x48]
mov edx, dword [rsp + 0x40]
mov r9d, eax
mov rcx, rbx
mov dword [rbp + 0xe0], eax
call fcn.180094a20
mov edx, dword [rbp + 0xe0]
test edx, edx
je 0x180098710
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax + 0x28]
test rcx, rcx
je 0x180098710
mov r9d, dword [rcx + 0x14]
mov r8d, dword [rcx + 0x10]
mov rcx, rbx
call fcn.18008a270
mov edx, dword [rsp + 0x40]
test edx, edx
je 0x180098771
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x180098741
mov r9d, edx
mov edx, 0x47
mov rcx, rsi
lea r8d, [rdx - 0x46]
mov dword [rsp + 0x20], edi
call fcn.180035350
jmp 0x180098771
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rsi + 0x90], eax
mov rax, qword [rsi + 0x88]
mov dword [rax + rcx*8 + 4], 1
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov dword [rax + rcx*8], 0x47
cmp byte [rbp + 0xf8], dil
je 0x180098787
mov rdx, qword [rsp + 0x70]
mov rcx, rsi
call fcn.1800ab920
mov rcx, qword [rsp + 0x70]
call fcn.1800b4780
mov rdx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.180094900
mov r8d, dword [rbp - 0x74]
mov rdx, qword [rbp - 0x28]
mov r9d, 0x10
mov rcx, rbx
mov qword [rbp + 0x38], rdi
call fcn.18005a2f0
mov eax, dword [rbp - 0x74]
mov rdx, qword [rbp + 0xe8]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov rax, qword [rbp + 0xf0]
mov qword [rsp + 0x28], rax
xor r9d, r9d
or r8d, 0xffffffff
mov rcx, rbx
mov qword [rsp + 0x20], rdi
call fcn.18008a340
mov rcx, qword [rsi + 0x18]
mov edx, dword [rbp - 0x74]
mov eax, dword [rcx + 0x48]
not edx
add eax, dword [rcx + 0x44]
jns 0x180098808
mov r8d, edx
mov rdx, rsi
call fcn.180035ec0
jmp 0x180098818
mov rcx, qword [rcx + 0x50]
movsxd rdx, edx
mov eax, dword [rsi + 0x90]
mov dword [rcx + rdx*4], eax
cmp byte [rbp], 3
jne 0x180098836
lea r9, str.DISTINCT
lea r8, str.USE_TEMP_B_TREE_FOR__s
xor edx, edx
mov rcx, rbx
call fcn.180035b70
cmp qword [rbp + 0x38], 0
je 0x180098864
mov rax, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0xe8]
lea r8, [rbp + 0x38]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x58]
mov rcx, rbx
mov r9d, dword [rax]
call fcn.18008b070
mov rcx, qword [rsi + 0x18]
mov edx, dword [rbp + 0x70]
mov eax, dword [rcx + 0x48]
not edx
add eax, dword [rcx + 0x44]
jns 0x180098882
mov r8d, edx
mov rdx, rsi
call fcn.180035ec0
jmp 0x180098893
mov r8, qword [rcx + 0x50]
mov eax, dword [rsi + 0x90]
movsxd r9, edx
mov dword [r8 + r9*4], eax
cmp dword [rbx + 0x30], 0
mov eax, edi
setg al
mov dword [rbp - 0x78], eax
mov r10, qword [rsp + 0x68]
mov rax, qword [rbp + 0x68]
test rax, rax
je 0x1800988c1
mov rdx, rax
mov rcx, r10
call fcn.1800532d0
jmp 0x1800988c1
mov rbx, qword [rbp + 0xe0]
lea rdx, [0x180181dc0]
movsxd rcx, dword [rbx + 0x138]
test ecx, ecx
je 0x1800988f2
mov r8, qword [rbx + 0x10]
mov rax, qword [r8]
cmp byte [rax + 0x67], 0
jne 0x1800988ef
lea rdx, [rcx + rcx*2]
mov rcx, qword [r8 + 0x88]
lea rdx, [rcx + rdx*8]
mov edi, dword [rdx + 8]
mov dword [rbx + 0x138], edi
mov eax, dword [rbp - 0x78]
add rsp, 0x1b8
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov eax, edx
add rsp, 0x1b8
pop rdi
pop rsi
pop rbx
pop rbp
ret