Function at 0x1800f4608
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x88]
sub rsp, 0x188
mov rax, qword [rcx]
xor esi, esi
mov rdi, r8
mov qword [rbp + 8], rsi
mov r13, rdx
mov qword [rsp + 0x40], rax
mov r15, rcx
lea r12d, [rsi + 1]
call fcn.1800e6f5c
mov qword [rbp - 0x10], rax
mov r14, rax
test r13, r13
je 0x1800f470f
cmp dword [r15 + 0x30], esi
jne 0x1800f470f
xor r9d, r9d
mov qword [rsp + 0x20], rsi
xor r8d, r8d
lea edx, [rsi + 0x15]
mov rcx, r15
call fcn.1800d3300
test eax, eax
jne 0x1800f470f
cmp byte [rdi], 6
ja 0x1800f46b5
mov r8, qword [r13 + 0x48]
test r8, r8
je 0x1800f46a6
lea rdx, [0x1800e1670]
mov rcx, r15
call fcn.1800ed61c
mov qword [r13 + 0x48], rsi
mov eax, dword [r13 + 4]
and eax, 0xfffffffe
bts eax, 0x16
mov dword [r13 + 4], eax
xor r8d, r8d
mov rdx, r13
mov rcx, r15
call fcn.1800f68e0
cmp dword [r15 + 0x30], esi
jne 0x1800f4707
mov r11d, dword [r13 + 4]
bt r11d, 0x17
jae 0x1800f472f
mov rdx, qword [r13 + 0x28]
lea rbx, [rdx + 8]
mov rcx, rbx
call fcn.1800ce1f8
test eax, eax
je 0x1800f4726
mov r8, qword [rbx + 0x18]
test r8, r8
jne 0x1800f46f8
mov rax, qword [rbx + 0x20]
mov r8, qword [rax]
lea rdx, str.target_object_alias_may_not_appear_in_FROM_clause:__s
mov rcx, r15
call fcn.1800dd428
mov rcx, r15
call fcn.180103a70
mov eax, r12d
add rsp, 0x188
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
btr r11d, 0x17
mov dword [r13 + 4], r11d
cmp byte [rdi], 9
jne 0x1800f473f
mov rdx, r13
mov rcx, r15
call fcn.1800e42d0
mov rdx, r13
mov rcx, r15
call fcn.18010e57c
test eax, eax
jne 0x1800f4707
mov eax, dword [r13 + 4]
lea rcx, [rbp - 0x40]
mov rbx, qword [r13 + 0x28]
xor edx, edx
shr eax, 3
and eax, r12d
mov qword [rbp - 0x68], rbx
mov dword [rsp + 0x5c], eax
lea r8d, [rdx + 0x30]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [r13 + 0x48]
xor r11d, r11d
mov qword [rbp - 0x40], rax
cmp qword [r13 + 0x50], r11
jne 0x1800f64bc
lea ecx, [r11 + 0x40]
mov r10, qword [rsp + 0x40]
mov eax, r11d
mov r9d, pe_nt_image_headers64
mov qword [rsp + 0x60], rax
cmp dword [rbx], r11d
jle 0x1800f4a35
imul rdi, rax, 0x68
test byte [rdi + rbx + 0x44], 0x48
mov rax, qword [rdi + rbx + 0x30]
mov rdx, qword [rdi + rbx + 0x28]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xe8], rdx
je 0x1800f48d3
movzx r8d, byte [rdi + rbx + 0x44]
mov edx, dword [rdi + rbx + 0x4c]
and r8d, ecx
mov rcx, qword [r13 + 0x30]
call fcn.1800e1178
mov r10, qword [rsp + 0x40]
xor r11d, r11d
test eax, eax
je 0x1800f48bf
test dword [r10 + 0x60], 0x2000
jne 0x1800f48bf
mov al, byte [rdi + rbx + 0x44]
lea ecx, [r11 + 8]
test cl, al
je 0x1800f4831
test al, 0x10
je 0x1800f481b
and al, 0xf7
mov byte [rdi + rbx + 0x44], al
jmp 0x1800f4831
mov edx, dword [rdi + rbx + 0x4c]
and al, 0xd7
mov byte [rdi + rbx + 0x44], al
xor r8d, r8d
mov rcx, qword [r13 + 0x30]
call fcn.180110b80
test byte [rdi + rbx + 0x44], 0x40
je 0x1800f48bf
mov eax, dword [rbx]
lea r10d, [rsi + 1]
cmp r10d, eax
jge 0x1800f4896
imul r9, qword [rsp + 0x60], 0x68
mov r11d, 8
add r9, 0xac
add r9, rbx
mov al, byte [r9]
test al, 0x10
je 0x1800f4885
test r11b, al
je 0x1800f4870
and al, 0xef
mov byte [r9], al
jmp 0x1800f4885
mov edx, dword [r9 + 8]
and al, 0xcf
mov byte [r9], al
mov r8d, r12d
mov rcx, qword [r13 + 0x30]
call fcn.180110b80
mov eax, dword [rbx]
add r10d, r12d
add r9, 0x68
cmp r10d, eax
jl 0x1800f485d
xor r11d, r11d
sub eax, r12d
movsxd rdx, eax
js 0x1800f48ba
imul rcx, rdx, 0x68
add rcx, 0x44
add rcx, rbx
and byte [rcx], 0xbf
test byte [rcx], 0x10
jne 0x1800f48ba
sub rcx, 0x68
sub rdx, r12
jns 0x1800f48a9
mov r10, qword [rsp + 0x40]
mov rax, qword [rbp + 0xd0]
mov r9d, pe_nt_image_headers64
mov rdx, qword [rbp + 0xe8]
test rax, rax
je 0x1800f49e5
mov rax, qword [rax + 0x20]
movsx r8d, word [rdx + 0x36]
mov ecx, dword [rax]
cmp r8d, ecx
jne 0x1800f4a1a
test dword [rdi + rbx + 0x48], r9d
je 0x1800f4906
mov rax, qword [rdi + rbx + 0x68]
cmp byte [rax + 0x12], r11b
je 0x1800f49e5
mov rdi, qword [rbp + 0xd0]
mov eax, 8
test byte [rdi + 4], al
jne 0x1800f49e5
mov r8, qword [rdi + 0x48]
test r8, r8
je 0x1800f4985
cmp qword [r13 + 0x48], r11
jne 0x1800f492f
cmp dword [rbx], r12d
jle 0x1800f4969
cmp qword [rdi + 0x60], r11
jne 0x1800f4969
test dword [rdi + 4], 0x8000000
jne 0x1800f4969
test dword [r13 + 4], 0x8000000
jne 0x1800f4969
test dword [r10 + 0x60], 0x40000
jne 0x1800f4969
lea rdx, [0x1800e1670]
mov rcx, r15
call fcn.1800ed61c
xor edx, edx
mov qword [rdi + 0x48], rdx
jmp 0x1800f4985
test esi, esi
jne 0x1800f4985
test dword [r13 + 4], 0x40000
je 0x1800f4985
cmp dword [rbx], r12d
je 0x1800f49e5
test byte [rbx + 0xac], 0x22
jne 0x1800f49e5
mov r9d, dword [rsp + 0x5c]
mov r8d, esi
mov rdx, r13
mov rcx, r15
call fcn.1800b7ebc
xor r11d, r11d
test eax, eax
je 0x1800f49b4
cmp dword [r15 + 0x30], r11d
jne 0x1800f4707
or rax, 0xffffffffffffffff
mov esi, eax
mov qword [rsp + 0x60], rax
mov r10, qword [rsp + 0x40]
mov rbx, qword [r13 + 0x28]
mov qword [rbp - 0x68], rbx
cmp byte [r10 + 0x67], r11b
jne 0x1800f4707
mov rdi, qword [rbp + 0xe0]
mov eax, 8
cmp byte [rdi], al
jbe 0x1800f49ec
mov rax, qword [r13 + 0x48]
mov qword [rbp - 0x40], rax
jmp 0x1800f49ec
mov rdi, qword [rbp + 0xe0]
mov rax, qword [rsp + 0x60]
add esi, r12d
add rax, r12
mov qword [rsp + 0x60], rax
cmp qword [r13 + 0x50], r11
jne 0x1800f64bc
cmp esi, dword [rbx]
jge 0x1800f4a35
mov ecx, 0x40
mov r9d, pe_nt_image_headers64
jmp 0x1800f47a8
mov r9, qword [rdx]
lea rdx, str.expected__d_columns_for__s_but_got__d
mov dword [rsp + 0x20], ecx
mov rcx, r15
call fcn.1800dd428
jmp 0x1800f4707
lea rdi, [r13 + 0x30]
mov rax, qword [rdi]
mov rsi, rdi
mov qword [rbp - 0x80], rdi
test rax, rax
je 0x1800f4a69
cmp byte [rax], 0x2c
jne 0x1800f4a69
test dword [r10 + 0x60], 0x8000
jne 0x1800f4a69
mov rdx, r13
mov rcx, r15
call fcn.1800c942c
xor r11d, r11d
lea rsi, [r13 + 0x30]
mov rax, qword [rsp + 0x40]
test dword [rax + 0x60], 0x201
jne 0x1800f4aab
mov rdx, r13
mov qword [rbp - 0x80], rsi
mov rcx, r15
mov rdi, rsi
call fcn.1800b0f60
xor r11d, r11d
test eax, eax
je 0x1800f4aab
mov rax, qword [rsp + 0x40]
cmp byte [rax + 0x67], r11b
jne 0x1800f4707
mov rbx, qword [r13 + 0x28]
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x80], rsi
lea rcx, [0x18012d568]
mov dword [rbp + 0xd0], r11d
cmp dword [rbx], r11d
jle 0x1800f4eda
lea rsi, [rbx + 0x10]
cmp qword [rsi + 0x48], r11
jne 0x1800f4af0
mov r8, qword [rsi + 8]
test r8, r8
je 0x1800f4af0
mov rax, qword [rsi]
mov r9, rcx
mov rcx, r15
mov qword [rsp + 0x20], rax
mov edx, 0x14
call fcn.1800d3300
xor r11d, r11d
mov rax, qword [rsi + 0x20]
mov qword [rbp - 0x60], rax
test rax, rax
je 0x1800f4eb0
lea rdx, [rbp + 0xe8]
mov dword [rbp + 0xe8], r11d
mov rcx, r13
call fcn.1800baa24
mov rcx, qword [rsp + 0x40]
mov eax, dword [rbp + 0xe8]
add dword [r15 + 0x13c], eax
test dword [rcx + 0x60], 0x1000
jne 0x1800f4b71
test dword [rsi + 0x38], 0x100
je 0x1800f4b4b
mov rax, qword [rsi + 0x58]
xor edx, edx
cmp byte [rax + 0x12], dl
je 0x1800f4b71
cmp dword [rax], 2
jge 0x1800f4b71
mov r8, qword [rdi]
mov r9, rbx
mov eax, dword [rbp + 0xd0]
mov rcx, r15
mov rdi, qword [rbp - 0x60]
mov rdx, rdi
mov dword [rsp + 0x20], eax
call fcn.1800c97e8
mov rcx, qword [rsp + 0x40]
jmp 0x1800f4b75
mov rdi, qword [rbp - 0x60]
test dword [rcx + 0x60], 0x4000000
jne 0x1800f4b87
lea rcx, [rsi - 8]
call fcn.1800b2430
mov rax, qword [r15 + 0x178]
mov rdx, rbx
mov r8d, dword [rbp + 0xd0]
mov rcx, r15
mov qword [rbp - 0x58], rax
mov rax, qword [rsi + 8]
mov qword [r15 + 0x178], rax
mov r9d, dword [r13 + 4]
call fcn.1800b8f54
xor ecx, ecx
test eax, eax
je 0x1800f4c66
mov edi, dword [r14 + 0x90]
lea edx, [rcx + 0xb]
add dword [r15 + 0x38], r12d
xor r9d, r9d
mov r8d, dword [r15 + 0x38]
mov rcx, r14
mov dword [rsi + 0x2c], r8d
lea ebx, [rdi + 1]
mov dword [rsp + 0x20], ebx
call fcn.1800fb8dc
mov eax, dword [rsi + 0x2c]
lea r9, [rsi - 8]
mov dword [rbp + 0x14], eax
lea r8, str.CO_ROUTINE___S
xor eax, eax
mov dword [rsi + 0x28], ebx
mov edx, r12d
mov qword [rbp + 0x18], rax
mov rcx, r15
mov qword [rbp + 0x28], rax
mov dword [rbp + 0x20], eax
mov byte [rbp + 0x10], 0xd
call fcn.1801039dc
mov rbx, qword [rbp - 0x60]
lea r8, [rbp + 0x10]
mov rdx, rbx
mov rcx, r15
call fcn.1800f4608
movzx eax, word [rbx + 2]
mov rcx, qword [rsi + 0x18]
mov word [rcx + 0x3a], ax
mov rcx, r14
mov eax, dword [rbp + 0x1c]
mov edx, dword [rsi + 0x2c]
or dword [rsi + 0x38], 0x20
mov dword [rsi + 0x30], eax
call fcn.1800fc3c0
mov edx, edi
mov rcx, r14
call fcn.180104354
mov rbx, qword [rbp - 0x68]
xor eax, eax
mov byte [r15 + 0x1f], al
mov dword [r15 + 0x28], eax
jmp 0x1800f4e69
test dword [rsi + 0x38], 0x100
je 0x1800f4cd3
mov rax, qword [rsi + 0x58]
mov qword [rbp + 0xe8], rax
mov r9d, dword [rax + 4]
test r9d, r9d
jle 0x1800f4cd3
mov r8d, dword [rax + 8]
mov edx, 0xa
mov dword [rsp + 0x20], ecx
mov rcx, r14
call fcn.1800fb8dc
mov rax, qword [rbp + 0xe8]
mov r8d, dword [rsi + 0x3c]
mov r9d, dword [rax + 0xc]
cmp r8d, r9d
je 0x1800f4cc6
xor edx, edx
mov rcx, r14
mov dword [rsp + 0x20], edx
mov edx, 0x73
call fcn.1800fb8dc
mov rax, qword [rbp + 0xe8]
movzx eax, word [rax + 0x10]
mov word [rdi + 2], ax
jmp 0x1800f4e69
mov r9d, dword [rbp + 0xd0]
lea rdx, [rsi - 8]
xor r8d, r8d
mov rcx, rbx
call fcn.1800bc2a8
xor ecx, ecx
mov qword [rbp + 0xe8], rax
test rax, rax
je 0x1800f4d4d
mov r9d, dword [rax + 0x30]
test r9d, r9d
je 0x1800f4d1c
mov r8d, dword [rax + 0x34]
lea edx, [rcx + 0xa]
mov dword [rsp + 0x20], ecx
mov rcx, r14
call fcn.1800fb8dc
mov rax, qword [rbp + 0xe8]
xor ecx, ecx
mov r9d, dword [rax + 0x44]
mov edx, 0x73
mov r8d, dword [rsi + 0x3c]
mov dword [rsp + 0x20], ecx
mov rcx, r14
call fcn.1800fb8dc
mov rcx, qword [rbp + 0xe8]
mov rax, qword [rcx + 0x28]
movzx ecx, word [rax + 2]
mov word [rdi + 2], cx
jmp 0x1800f4e69
add dword [r15 + 0x38], r12d
xor r9d, r9d
mov eax, dword [r15 + 0x38]
xor r8d, r8d
mov dword [rbp + 0xe8], ecx
mov dword [rsp + 0x20], ecx
mov rcx, r14
lea edx, [r9 + 9]
mov dword [rsi + 0x2c], eax
call fcn.1800fb8dc
or dword [rsi + 0x38], 0x10
mov dword [rsp + 0x50], eax
inc eax
mov dword [rsp + 0x74], eax
mov dword [rsi + 0x28], eax
mov eax, 8
test byte [rsi + 0x38], al
jne 0x1800f4dac
xor edx, edx
xor r9d, r9d
mov dword [rsp + 0x20], edx
xor r8d, r8d
lea edx, [rax + 7]
mov rcx, r14
call fcn.1800fb8dc
mov dword [rbp + 0xe8], eax
mov ecx, dword [rsi + 0x3c]
lea r9, [rsi - 8]
xor eax, eax
mov dword [rbp + 0x14], ecx
mov rcx, r15
mov byte [rbp + 0x10], 0xc
lea r8, str.MATERIALIZE___S
mov qword [rbp + 0x18], rax
mov edx, r12d
mov qword [rbp + 0x28], rax
mov dword [rbp + 0x20], eax
call fcn.1801039dc
lea r8, [rbp + 0x10]
mov rdx, rdi
mov rcx, r15
call fcn.1800f4608
movzx eax, word [rdi + 2]
xor r10d, r10d
mov rcx, qword [rsi + 0x18]
mov word [rcx + 0x3a], ax
mov eax, dword [rbp + 0xe8]
test eax, eax
je 0x1800f4e0b
mov edx, eax
mov rcx, r14
call fcn.180104354
mov r9d, dword [rsp + 0x74]
mov edx, 0x43
mov r8d, dword [rsi + 0x2c]
mov rcx, r14
mov dword [rsp + 0x20], r10d
call fcn.1800fb8dc
mov edx, dword [rsp + 0x50]
mov rcx, r14
call fcn.180104354
xor eax, eax
mov byte [r15 + 0x1f], al
mov dword [r15 + 0x28], eax
mov eax, dword [rsi + 0x38]
and eax, 0x108
cmp eax, 0x100
jne 0x1800f4e69
mov eax, dword [rsi + 0x28]
mov rcx, qword [rsi + 0x58]
mov dword [rcx + 4], eax
mov eax, dword [rsi + 0x2c]
mov dword [rcx + 8], eax
mov eax, dword [rsi + 0x3c]
mov dword [rcx + 0xc], eax
movzx eax, word [rdi + 2]
mov word [rcx + 0x10], ax
mov rax, qword [rsp + 0x40]
xor ecx, ecx
cmp byte [rax + 0x67], cl
jne 0x1800f4707
mov dword [rbp + 0xe8], ecx
lea rdx, [rbp + 0xe8]
mov rcx, r13
call fcn.1800baa24
mov edx, dword [r15 + 0x13c]
sub edx, dword [rbp + 0xe8]
mov rax, qword [rbp - 0x58]
xor r11d, r11d
mov dword [r15 + 0x13c], edx
mov qword [r15 + 0x178], rax
mov eax, dword [rbp + 0xd0]
lea rcx, [0x18012d568]
mov rdi, qword [rbp - 0x80]
add eax, r12d
add rsi, 0x68
mov dword [rbp + 0xd0], eax
cmp eax, dword [rbx]
jl 0x1800f4ac6
lea rdi, [r13 + 0x30]
mov rax, qword [rdi]
mov cl, byte [r13 + 4]
mov rbx, qword [r13 + 0x20]
and cl, r12b
mov qword [rsp + 0x78], rax
mov rax, qword [r13 + 0x38]
mov qword [rbp - 8], rax
mov rax, qword [r13 + 0x40]
mov qword [rbp - 0x80], rax
mov eax, dword [r13 + 4]
and al, 9
mov qword [rsp + 0x60], rbx
mov byte [rbp + 0xe8], cl
mov byte [rbp - 0x50], cl
cmp al, r12b
jne 0x1800f4f66
mov rcx, qword [rbp - 0x40]
or r8d, 0xffffffff
mov rdx, rbx
call fcn.1800e15d8
mov rsi, qword [rsp + 0x40]
xor edi, edi
test eax, eax
jne 0x1800f4f6d
cmp qword [r13 + 0x70], rdi
jne 0x1800f4f6d
and dword [r13 + 4], 0xfffffffe
xor r8d, r8d
mov rdx, rbx
mov rcx, rsi
call fcn.1800e1684
mov qword [rbp - 8], rax
mov qword [r13 + 0x38], rax
lea eax, [rdi + 8]
or dword [r13 + 4], eax
mov al, 2
mov byte [rbp + 0xe8], al
mov byte [rbp - 0x50], al
jmp 0x1800f4f6d
mov rsi, qword [rsp + 0x40]
xor edi, edi
mov rax, qword [rbp - 0x40]
test rax, rax
je 0x1800f4fdc
mov r9d, dword [rbx]
xor r8d, r8d
mov rdx, rax
mov rcx, r15
call fcn.1800e97e0
mov r8d, dword [r15 + 0x34]
mov rdi, rax
mov dword [rbp - 0x34], r8d
lea ecx, [r8 + 1]
mov dword [r15 + 0x34], ecx
mov rcx, qword [rbp - 0x40]
mov r9d, dword [rbx]
mov edx, dword [rcx]
mov rcx, r14
inc edx
add r9d, edx
xor edx, edx
mov dword [rsp + 0x20], edx
mov edx, 0x76
call fcn.1800fb8dc
mov r9d, 0xfffffff8
mov r8, rdi
mov edx, eax
mov rcx, r14
mov ebx, eax
call fcn.1800fbce4
mov dword [rbp - 0x28], ebx
xor edi, edi
mov rbx, qword [rsp + 0x60]
jmp 0x1800f4fe0
or dword [rbp - 0x28], 0xffffffff
mov rax, qword [rbp + 0xe0]
cmp byte [rax], 0xc
jne 0x1800f50ab
mov r9d, dword [rbx]
mov edx, 0x76
mov r8d, dword [rax + 4]
mov rcx, r14
mov dword [rsp + 0x20], edi
call fcn.1800fb8dc
xor r9d, r9d
test dword [r13 + 4], 0x800
je 0x1800f50ae
mov ecx, dword [rbx]
lea eax, [rcx - 1]
movsxd rdi, eax
test eax, eax
jle 0x1800f5087
mov r14, qword [rsp + 0x60]
mov rbx, rdi
shl rbx, 5
test byte [rbx + r14 + 0x1c], 0x40
jne 0x1800f5077
mov rdx, qword [rbx + r14 + 8]
test rdx, rdx
je 0x1800f504e
mov rcx, rsi
call fcn.1800e071c
xor r9d, r9d
mov rdx, qword [rbx + r14 + 0x10]
test rdx, rdx
je 0x1800f5063
mov rcx, rsi
call fcn.1800db19c
xor r9d, r9d
mov ecx, dword [r14]
sub rdi, r12
dec ecx
sub rbx, 0x20
mov dword [r14], ecx
test rdi, rdi
jg 0x1800f5031
mov r13, qword [rbp + 0xd8]
mov r14, qword [rbp - 0x10]
mov rbx, qword [rsp + 0x60]
mov edx, r9d
test ecx, ecx
jle 0x1800f50ae
lea rcx, [rbx + 8]
test byte [rcx + 0x14], 0x40
jne 0x1800f509e
mov rax, qword [rcx]
mov byte [rax], 0x79
add edx, r12d
add rcx, 0x20
cmp edx, dword [rbx]
jl 0x1800f5092
jmp 0x1800f50ae
xor r9d, r9d
dec dword [r15 + 0x44]
mov ecx, 0x4000
mov eax, dword [r15 + 0x44]
mov dword [rbp - 0x60], eax
test dword [r13 + 4], ecx
jne 0x1800f50cb
mov word [r13 + 2], 0x140
cmp qword [r13 + 0x60], r9
je 0x1800f50e2
mov r8d, eax
mov rdx, r13
mov rcx, r15
call fcn.1800af964
xor r9d, r9d
cmp dword [r13 + 8], r9d
jne 0x1800f511a
cmp dword [rbp - 0x28], r9d
jl 0x1800f511a
mov rax, qword [r14]
cmp byte [rax + 0x67], r9b
je 0x1800f5100
lea rax, [0x18015ed18]
jmp 0x1800f5113
movsxd rax, dword [rbp - 0x28]
lea rcx, [rax + rax*2]
mov rax, qword [r14 + 0x88]
lea rax, [rax + rcx*8]
mov byte [rax], 0x77
or byte [rbp - 0x1c], r12b
test byte [r13 + 4], r12b
je 0x1800f5197
mov ebx, dword [r15 + 0x34]
xor r9d, r9d
xor r8d, r8d
mov dword [rbp - 0x4c], ebx
mov rcx, r15
lea eax, [rbx + 1]
mov dword [r15 + 0x34], eax
mov rdx, qword [r13 + 0x20]
call fcn.1800e97e0
xor edx, edx
xor r9d, r9d
mov dword [rsp + 0x20], edx
mov r8d, ebx
mov rcx, r14
mov rdi, rax
lea edx, [r9 + 0x76]
call fcn.1800fb8dc
mov r9d, 0xfffffff8
mov r8, rdi
mov edx, eax
mov rcx, r14
mov ebx, eax
call fcn.1800fbce4
movsxd rax, dword [r14 + 0x90]
xor r9d, r9d
mov dword [rbp - 0x48], ebx
test eax, eax
jle 0x1800f5193
lea rcx, [rax + rax*2]
mov rax, qword [r14 + 0x88]
mov word [rax + rcx*8 - 0x16], 8
mov al, 3
jmp 0x1800f519a
mov al, r9b
mov rdi, qword [rbp - 8]
mov byte [rbp - 0x4f], al
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x5c], r9d
jne 0x1800f53e1
test rdi, rdi
jne 0x1800f53e1
movzx ebx, word [r13 + 4]
mov eax, 0x4000
mov sil, byte [rbp + 0xe8]
and bx, ax
mov rdi, qword [r13 + 0x70]
mov al, sil
neg al
mov eax, pe_nt_image_headers64
sbb cx, cx
and cx, ax
or bx, cx
test rdi, rdi
je 0x1800f51f4
mov rdx, r13
mov rcx, r15
call fcn.18010d2ac
movsx eax, word [r13 + 2]
mov rcx, r15
mov r9, qword [rbp - 0x40]
mov r8, qword [rsp + 0x78]
mov rdx, qword [rbp - 0x68]
mov dword [rsp + 0x38], eax
mov rax, qword [r13 + 0x20]
mov word [rsp + 0x30], bx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
call fcn.180108dcc
xor ebx, ebx
mov qword [rbp + 0xd8], rax
mov rdx, rax
test rax, rax
je 0x1800f4707
movzx eax, word [rax + 0x48]
cmp ax, word [r13 + 2]
jge 0x1800f524a
mov word [r13 + 2], ax
test sil, sil
je 0x1800f5266
movzx ecx, byte [rdx + 0x43]
mov eax, dword [rsp + 0x70]
test cl, cl
movzx eax, al
cmovne eax, ecx
mov dword [rsp + 0x70], eax
mov byte [rbp - 0x4f], al
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x1800f52b7
movsx eax, byte [rdx + 0x41]
test al, al
jns 0x1800f527f
mov r8d, ebx
mov dword [rbp - 0x38], ebx
jmp 0x1800f5285
mov r8d, eax
mov dword [rbp - 0x38], eax
test byte [rdx + 0x44], 4
je 0x1800f529d
movzx eax, byte [rdx + 0x40]
imul rax, rax, 0x70
cmp qword [rax + rdx + 0x328], rbx
je 0x1800f52a2
mov eax, dword [rdx + 0x30]
jmp 0x1800f52a9
mov eax, dword [rax + rdx + 0x300]
mov dword [rbp - 0x20], eax
cmp r8d, dword [rcx]
cmove rcx, rbx
mov qword [rbp - 0x40], rcx
mov eax, dword [rbp - 0x28]
test eax, eax
js 0x1800f52d4
test rcx, rcx
jne 0x1800f52d4
mov edx, eax
mov rcx, r14
call fcn.1800fbd6c
mov rdx, qword [rbp + 0xd8]
mov rcx, r15
test rdi, rdi
je 0x1800f539d
mov esi, dword [r15 + 0x44]
mov r8, rdx
add dword [r15 + 0x38], r12d
dec esi
mov edi, dword [r15 + 0x38]
mov ebx, esi
sub esi, r12d
mov dword [rsp + 0x20], ebx
mov r9d, edi
mov rdx, r13
lea r14d, [rsi - 1]
mov dword [r15 + 0x44], r14d
call fcn.18010d55c
mov r12, qword [rbp - 0x10]
xor edx, edx
xor r8d, r8d
mov dword [rsp + 0x20], edx
mov r9d, r14d
mov rcx, r12
lea edx, [r8 + 9]
call fcn.1800fb8dc
mov edx, ebx
mov rcx, r12
call fcn.1801066b4
mov rbx, qword [rbp + 0xe0]
lea r9, [rbp - 0x40]
xor eax, eax
mov dword [rsp + 0x38], r14d
mov dword [rbp - 0x20], eax
or r8d, 0xffffffff
lea rax, [rbp - 0x50]
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rbx
mov rdx, r13
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.1800cf2e0
mov edx, esi
mov rcx, r12
call fcn.1801066b4
xor esi, esi
xor r9d, r9d
mov r8d, edi
mov dword [rsp + 0x20], esi
mov rcx, r12
lea edx, [rsi + 0x43]
call fcn.1800fb8dc
mov edx, r14d
mov rcx, r12
mov r14, r12
call fcn.1801066b4
jmp 0x1800f625f
mov eax, dword [rdx + 0x34]
lea r9, [rbp - 0x40]
mov rbx, qword [rbp + 0xe0]
or r8d, 0xffffffff
mov dword [rsp + 0x38], eax
mov eax, dword [rdx + 0x30]
mov rdx, r13
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rax
call fcn.1800cf2e0
mov rcx, qword [rbp + 0xd8]
call fcn.18010bc7c
jmp 0x1800f625d
mov dword [rsp + 0x4c], r9d
mov dword [rsp + 0x54], r9d
mov dword [rbp - 0x78], r9d
test rdi, rdi
je 0x1800f548d
mov rcx, qword [r13 + 0x20]
mov eax, dword [rcx]
test eax, eax
jle 0x1800f5415
add rcx, 0x22
sub eax, r12d
mov word [rcx], r9w
lea rcx, [rcx + 0x20]
test eax, eax
jg 0x1800f5406
mov eax, dword [rdi]
test eax, eax
jle 0x1800f542e
lea rcx, [rdi + 0x22]
sub eax, r12d
mov word [rcx], r9w
lea rcx, [rcx + 0x20]
test eax, eax
jg 0x1800f541f
mov eax, 0x42
cmp word [r13 + 2], ax
jle 0x1800f543f
mov word [r13 + 2], ax
mov rax, qword [rbp - 0x40]
test rax, rax
je 0x1800f5492
mov ecx, dword [rdi]
cmp ecx, dword [rax]
jne 0x1800f5492
mov r8d, r9d
test ecx, ecx
jle 0x1800f5473
mov rdx, r9
mov rax, qword [rbp - 0x40]
lea rdx, [rdx + 0x20]
add r8d, r12d
mov cl, byte [rdx + rax - 8]
and cl, r12b
mov byte [rdx + rdi - 8], cl
cmp r8d, dword [rdi]
jl 0x1800f5458
mov rdx, qword [rbp - 0x40]
or r8d, 0xffffffff
mov rcx, rdi
call fcn.1800e15d8
test eax, eax
jne 0x1800f5492
mov dword [rbp - 0x78], r12d
jmp 0x1800f5492
mov word [r13 + 2], r9w
mov eax, dword [r15 + 0x44]
mov ebx, 0x38
dec eax
mov edx, ebx
mov rcx, rsi
mov dword [rsp + 0x58], eax
mov dword [r15 + 0x44], eax
call fcn.1800db330
mov rsi, rax
test rax, rax
je 0x1800f54c9
mov r8, rax
lea rdx, [0x1800a62d0]
mov rcx, r15
call fcn.1800ed61c
mov rax, qword [rsp + 0x40]
xor edx, edx
cmp byte [rax + 0x67], dl
jne 0x1800f4707
mov ecx, dword [r13 + 0x10]
mov r8, rbx
mov dword [rsi + 0x34], ecx
lea rcx, [rbp + 0x40]
call sub.VCRUNTIME140.dll_memset
mov rbx, qword [rbp - 0x68]
xor eax, eax
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], rbx
mov qword [rbp + 0x50], rsi
test rdi, rdi
je 0x1800f5505
mov eax, dword [rdi]
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp + 0x40]
mov word [rsi + 2], ax
mov qword [rsi + 0x10], rdi
call fcn.1800ddb7c
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp + 0x40]
call fcn.1800ddb7c
mov rax, qword [rbp - 0x80]
xor edx, edx
test rax, rax
je 0x1800f5585
test rdi, rdi
je 0x1800f5577
lea r8d, [rdx + 0x30]
lea rcx, [rbp + 0x10]
call sub.VCRUNTIME140.dll_memset
mov rdx, qword [r13 + 0x40]
lea rax, [0x1800ba8ec]
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x38], r13
test rdx, rdx
je 0x1800f556a
lea rcx, [rbp + 0x10]
call fcn.180108a84
mov rax, qword [r13 + 0x30]
mov qword [rsp + 0x78], rax
mov rax, qword [rbp - 0x80]
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.1800ddbd0
xor edx, edx
mov eax, dword [rsi + 0x20]
mov dword [rsi + 0x24], eax
cmp qword [r13 + 0x38], rdx
jne 0x1800f5671
cmp qword [r13 + 0x40], rdx
jne 0x1800f5671
cmp dword [rsi + 0x30], r12d
jne 0x1800f5671
mov rax, qword [rsi + 0x28]
mov rcx, qword [rax]
mov r11, qword [rcx + 0x20]
test r11, r11
je 0x1800f5671
cmp dword [r11], r12d
jne 0x1800f5671
test dword [rcx + 4], 0x1000000
jne 0x1800f5671
mov rax, qword [rsp + 0x40]
test dword [rax + 0x60], 0x10000
jne 0x1800f5671
mov rax, qword [rcx + 8]
lea rdx, [0x1801431ac]
mov rcx, rax
mov qword [rbp + 0xd0], rax
call fcn.1800f7df8
test eax, eax
jne 0x1800f561f
mov rcx, qword [r11 + 8]
call fcn.1800ddeac
neg eax
mov byte [rbp + 0xd0], r12b
sbb al, al
and al, 2
mov byte [rsp + 0x48], al
jmp 0x1800f5644
mov rcx, qword [rbp + 0xd0]
lea rdx, [0x1801431b0]
call fcn.1800f7df8
xor ecx, ecx
test eax, eax
jne 0x1800f5669
mov byte [rsp + 0x48], r12b
mov byte [rbp + 0xd0], 2
mov rcx, qword [rsp + 0x40]
xor r8d, r8d
mov rdx, r11
call fcn.1800e1684
mov qword [rbp + 8], rax
mov rcx, rax
test rax, rax
je 0x1800f5677
mov al, byte [rsp + 0x48]
mov byte [rcx + 0x18], al
jmp 0x1800f5677
mov byte [rbp + 0xd0], cl
jmp 0x1800f5677
mov byte [rbp + 0xd0], dl
lea rdx, [rbp + 0x40]
mov rcx, rsi
call fcn.1800a7228
mov r10, qword [rsp + 0x40]
xor r11d, r11d
cmp byte [r10 + 0x67], r11b
jne 0x1800f62c0
test rdi, rdi
je 0x1800f5f68
mov qword [rbp], r11
mov word [rbp + 0xd0], r11w
cmp dword [rsi + 0x30], r12d
jne 0x1800f573c
mov rax, qword [rsi + 0x28]
cmp dword [rax + 0x10], r11d
jl 0x1800f573c
mov rax, qword [rax]
test rax, rax
je 0x1800f573c
test dword [rax + 4], 0x1000
jne 0x1800f573c
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x1800f573c
mov rdx, qword [rcx + 8]
test rdx, rdx
je 0x1800f56fd
xor r9d, r9d
xor r8d, r8d
mov rcx, r10
call fcn.1800b4d94
mov r10, qword [rsp + 0x40]
mov qword [rbp + 0xd0], rax
jmp 0x1800f5704
mov qword [rbp + 0xd0], r11
xor r8d, r8d
mov rdx, rdi
mov rcx, r10
call fcn.1800e1684
mov r8, qword [rbp + 0xd0]
mov rdx, rax
mov rcx, r15
call fcn.1800e1340
mov rcx, rax
mov qword [rbp], rax
neg rcx
sbb ax, ax
and ax, 0x500
mov word [rbp + 0xd0], ax
mov ecx, dword [r15 + 0x34]
xor r8d, r8d
mov dword [rsi + 4], ecx
mov rdx, rdi
add dword [r15 + 0x34], r12d
mov rcx, r15
mov r9d, dword [rsi + 0x20]
call fcn.1800e97e0
movzx r9d, word [rsi + 2]
mov rcx, r14
mov r8d, dword [rsi + 4]
mov qword [rbp - 0x58], rax
xor eax, eax
mov dword [rsp + 0x20], eax
lea edx, [rax + 0x77]
call fcn.1800fb8dc
mov r8, qword [rbp - 0x58]
mov r9d, 0xfffffff8
mov edx, eax
mov dword [rbp - 0x68], eax
mov rcx, r14
call fcn.1800fbce4
lea rdx, [r15 + 0x38]
mov eax, dword [rdx]
inc eax
mov dword [rsp + 0x5c], eax
lea r8d, [rax + 1]
mov eax, dword [r15 + 0x44]
lea ecx, [r8 + 2]
mov dword [rsp + 0x6c], r8d
mov dword [rdx], ecx
dec eax
mov dword [rbp - 0x70], eax
mov r9d, r8d
dec eax
mov dword [rsp + 0x68], ecx
mov dword [r15 + 0x44], eax
xor r8d, r8d
add ecx, dword [rdi]
mov dword [rdx], ecx
mov dword [rbp - 0x6c], eax
lea eax, [rcx + 1]
add ecx, dword [rdi]
mov dword [rdx], ecx
mov rcx, r14
mov dword [rbp - 0x74], eax
xor eax, eax
mov dword [rsp + 0x20], eax
lea edx, [rax + 0x47]
call fcn.1800fb8dc
mov ecx, dword [rdi]
xor r8d, r8d
mov edx, dword [rsp + 0x68]
dec ecx
inc edx
add ecx, edx
mov r9d, edx
mov dword [rsp + 0x20], ecx
lea edx, [r8 + 0x4b]
mov rcx, r14
call fcn.1800fb8dc
mov r9d, dword [rbp - 0x6c]
xor eax, eax
mov r8d, dword [rsp + 0x68]
mov rcx, r14
mov dword [rsp + 0x20], eax
lea edx, [rax + 0xa]
call fcn.1800fb8dc
mov eax, dword [rbp - 0x78]
neg eax
mov eax, 0x80
sbb cx, cx
and cx, 0x200
cmp byte [rbp + 0xe8], 2
lea edx, [rax - 0x40]
cmove dx, ax
or cx, dx
or cx, word [rbp + 0xd0]
xor eax, eax
mov dword [rsp + 0x38], eax
mov word [rsp + 0x30], cx
mov rax, qword [rbp]
mov r9, rdi
mov r8, qword [rsp + 0x78]
mov rdx, rbx
mov qword [rsp + 0x28], r13
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.180108dcc
xor r11d, r11d
mov qword [rsp + 0x78], rax
mov rdx, rax
test rax, rax
jne 0x1800f58a5
mov rax, qword [rbp]
test rax, rax
je 0x1800f62bb
mov rcx, qword [rsp + 0x40]
mov rdx, rax
call fcn.1800b549c
jmp 0x1800f62bb
lea rbx, [r15 + 0x38]
cmp qword [r15 + 0x60], r11
je 0x1800f590d
mov r8d, dword [rsi + 0x24]
mov dword [rsi + 0x20], r8d
cmp word [rsi + 2], r11w
jbe 0x1800f58f9
mov rax, qword [r13 + 0x38]
mov r9d, r11d
mov ecx, dword [rax]
sub ecx, r12d
test r8d, r8d
jle 0x1800f58f1
mov rdx, qword [rsi + 0x18]
add rdx, 0x16
movsx eax, word [rdx]
lea rdx, [rdx + 0x18]
cmp eax, ecx
cmovle eax, ecx
add r9d, r12d
mov ecx, eax
cmp r9d, r8d
jl 0x1800f58d7
lea rbx, [r15 + 0x38]
add cx, r12w
mov word [rsi + 2], cx
lea rdx, [rbp + 0x40]
mov rcx, rsi
call fcn.1800a7228
mov rdx, qword [rsp + 0x78]
xor r11d, r11d
mov eax, dword [rbx]
mov ecx, r11d
add eax, r12d
mov dword [rsi + 0xc], eax
mov eax, dword [rsi + 0x30]
add eax, dword [rsi + 0x20]
add dword [rbx], eax
movzx eax, byte [rdx + 0x43]
cmp byte [rdx + 0x41], r11b
mov dword [rsp + 0x74], eax
movsx eax, byte [rdx + 0x41]
cmovge ecx, eax
cmp ecx, dword [rdi]
jne 0x1800f5943
mov dword [rbp + 0xe8], r11d
jmp 0x1800f5b50
cmp byte [rbp + 0xe8], r11b
je 0x1800f5959
lea r9, str.DISTINCT
test byte [r13 + 4], r12b
je 0x1800f5960
lea r9, str.GROUP_BY
lea r8, str.USE_TEMP_B_TREE_FOR__s
xor edx, edx
mov rcx, r15
call fcn.1801039dc
mov eax, dword [rdi]
xor r10d, r10d
mov ebx, eax
mov dword [rbp + 0xe8], r12d
mov r8d, eax
mov dword [rsp + 0x50], eax
cmp dword [rsi + 0x20], r10d
jle 0x1800f59ba
mov rdx, qword [rsi + 0x18]
mov r9d, dword [rsi + 0x20]
add rdx, 0x16
movsx ecx, word [rdx]
lea eax, [rbx + 1]
cmp ecx, r8d
lea rdx, [rdx + 0x18]
cmovl eax, ebx
mov ebx, eax
lea eax, [r8 + 1]
cmovl eax, r8d
mov r8d, eax
sub r9, r12
jne 0x1800f5998
mov edx, ebx
mov rcx, r15
call fcn.1800e6574
xor r9d, r9d
mov dword [rsp + 0x54], eax
mov r8d, eax
mov byte [rsp + 0x20], r10b
mov rcx, r15
mov rdx, rdi
call fcn.1800de0a8
xor edx, edx
mov byte [rsi], r12b
mov ecx, edx
mov dword [rsp + 0x4c], edx
cmp dword [rsi + 0x20], edx
jle 0x1800f5a41
mov r14d, dword [rsp + 0x50]
mov edi, edx
mov r13d, dword [rsp + 0x54]
mov rdx, qword [rsi + 0x18]
movsx eax, word [rdi + rdx + 0x16]
cmp eax, r14d
jl 0x1800f5a20
mov rdx, qword [rdi + rdx + 8]
lea r8d, [r14 + r13]
mov rcx, r15
call fcn.1800ddfc4
mov ecx, dword [rsp + 0x4c]
add r14d, r12d
add ecx, r12d
add rdi, 0x18
mov dword [rsp + 0x4c], ecx
cmp ecx, dword [rsi + 0x20]
jl 0x1800f59fa
mov r13, qword [rbp + 0xd8]
xor edx, edx
mov r14, qword [rbp - 0x10]
mov rdi, qword [rbp - 8]
mov byte [rsi], dl
mov al, byte [r15 + 0x1f]
test al, al
jne 0x1800f5a57
mov eax, dword [r15 + 0x38]
inc eax
mov dword [r15 + 0x38], eax
jmp 0x1800f5a69
sub al, r12b
movzx eax, al
mov byte [r15 + 0x1f], al
mov eax, dword [r15 + rax*4 + 0xe8]
mov r8d, dword [rsp + 0x54]
mov r9d, ebx
mov edx, 0x61
mov dword [rsp + 0x4c], eax
mov rcx, r14
mov dword [rsp + 0x20], eax
call fcn.1800fb8dc
mov r9d, dword [rsp + 0x4c]
xor eax, eax
mov r8d, dword [rsi + 4]
mov edx, 0x8b
mov rcx, r14
mov dword [rsp + 0x20], eax
call fcn.1800fb8dc
mov ecx, dword [rsp + 0x4c]
test ecx, ecx
je 0x1800f5ac6
mov eax, 8
cmp byte [r15 + 0x1f], al
jae 0x1800f5ac6
movzx eax, byte [r15 + 0x1f]
mov dword [r15 + rax*4 + 0xe8], ecx
add byte [r15 + 0x1f], r12b
mov edx, dword [rsp + 0x54]
mov r8d, ebx
mov rcx, r15
call fcn.1800f2e9c
mov rcx, qword [rsp + 0x78]
call fcn.18010bc7c
mov ecx, dword [r15 + 0x34]
mov dword [rsi + 8], ecx
add dword [r15 + 0x34], r12d
mov al, byte [r15 + 0x1f]
mov dword [rsp + 0x4c], ecx
test al, al
jne 0x1800f5b02
mov eax, dword [r15 + 0x38]
inc eax
mov dword [r15 + 0x38], eax
jmp 0x1800f5b14
sub al, r12b
movzx eax, al
mov byte [r15 + 0x1f], al
mov eax, dword [r15 + rax*4 + 0xe8]
mov r8d, ecx
mov dword [rsp + 0x54], eax
mov rcx, r14
mov dword [rsp + 0x20], ebx
mov r9d, eax
mov edx, 0x79
call fcn.1800fb8dc
mov r9d, dword [rsp + 0x58]
xor eax, eax
mov r8d, dword [rsi + 4]
mov rcx, r14
mov dword [rsp + 0x20], eax
lea edx, [rax + 0x22]
call fcn.1800fb8dc
xor r11d, r11d
mov byte [rsi + 1], r12b
cmp qword [r15 + 0x60], r11
je 0x1800f5bb0
xor edx, edx
lea rcx, [rbp + 0x10]
lea r8d, [rdx + 0x30]
call sub.VCRUNTIME140.dll_memset
xor r11d, r11d
lea rax, [0x1800a63d4]
mov ecx, r11d
mov qword [rbp + 0x18], rax
mov dword [rsp + 0x50], ecx
cmp dword [rsi + 0x30], r11d
jle 0x1800f5bb0
mov ebx, r11d
mov rax, qword [rsi + 0x28]
mov rdx, qword [rbx + rax]
test rdx, rdx
je 0x1800f5ba0
lea rcx, [rbp + 0x10]
call fcn.180108a84
mov ecx, dword [rsp + 0x50]
xor r11d, r11d
add ecx, r12d
add rbx, 0x20
mov dword [rsp + 0x50], ecx
cmp ecx, dword [rsi + 0x30]
jl 0x1800f5b83
cmp dword [rbp - 0x78], r11d
je 0x1800f5bea
mov rax, qword [rsp + 0x40]
test byte [rax + 0x60], 4
mov eax, dword [rbp + 0xe8]
jne 0x1800f5bf0
test eax, eax
jne 0x1800f5bd8
mov rcx, qword [rsp + 0x78]
lea edx, [rax + 8]
test byte [rcx + 0x44], dl
je 0x1800f5bf0
mov edx, dword [rbp - 0x28]
mov rcx, r14
mov qword [rbp - 0x40], r11
call fcn.1800fbd6c
xor r11d, r11d
mov eax, dword [rbp + 0xe8]
mov ecx, dword [r14 + 0x90]
mov dword [rsp + 0x50], ecx
test eax, eax
je 0x1800f5c26
mov eax, dword [rsp + 0x4c]
mov edx, 0x85
mov r9d, dword [rsp + 0x54]
mov rcx, r14
mov r8d, dword [rsi + 4]
mov dword [rsp + 0x20], eax
call fcn.1800fb8dc
mov eax, dword [rbp + 0xe8]
xor r11d, r11d
mov ebx, r11d
cmp dword [rdi], r11d
jle 0x1800f5c80
lea r13, [rdi + 8]
mov r8d, dword [rbp - 0x74]
add r8d, ebx
test eax, eax
je 0x1800f5c59
mov dword [rsp + 0x20], r8d
mov r9d, ebx
mov r8d, dword [rsp + 0x4c]
mov edx, 0x5e
mov rcx, r14
call fcn.1800fb8dc
jmp 0x1800f5c68
mov byte [rsi], r12b
mov rcx, r15
mov rdx, qword [r13]
call fcn.1800ddfc4
mov eax, dword [rbp + 0xe8]
add ebx, r12d
add r13, 0x20
cmp ebx, dword [rdi]
jl 0x1800f5c32
mov r13, qword [rbp + 0xd8]
mov rbx, qword [rbp - 0x58]
test rbx, rbx
je 0x1800f5c8c
add dword [rbx], r12d
mov r8d, dword [rsp + 0x68]
mov edx, 0x5a
mov eax, dword [rdi]
inc r8d
mov r9d, dword [rbp - 0x74]
mov rcx, r14
mov dword [rsp + 0x20], eax
call fcn.1800fb8dc
mov r9d, 0xfffffff8
mov r8, rbx
mov edx, eax
mov rcx, r14
call fcn.1800fbce4
mov ebx, dword [r14 + 0x90]
xor r9d, r9d
mov rcx, r14
lea r8d, [rbx + 1]
lea edx, [r9 + 0xe]
mov dword [rsp + 0x20], r8d
call fcn.1800fb8dc
mov r9d, dword [rsp + 0x68]
mov edx, 0x4f
mov eax, dword [rdi]
inc r9d
mov r8d, dword [rbp - 0x74]
mov rcx, qword [r15 + 0x10]
mov dword [rsp + 0x20], eax
call fcn.1800fb8dc
mov edi, dword [rsp + 0x6c]
xor eax, eax
mov r9d, dword [rbp - 0x70]
mov rcx, r14
mov dword [rsp + 0x20], eax
lea edx, [rax + 0xa]
lea r8d, [rdi + 1]
call fcn.1800fb8dc
mov r9d, dword [rsp + 0x58]
xor eax, eax
mov r8d, edi
mov dword [rsp + 0x20], eax
mov rcx, r14
lea edx, [rax + 0x3b]
call fcn.1800fb8dc
mov r9d, dword [rbp - 0x6c]
lea r8d, [rdi + 2]
xor eax, eax
mov rcx, r14
mov dword [rsp + 0x20], eax
lea edx, [rax + 0xa]
call fcn.1800fb8dc
mov edx, ebx
mov rcx, r14
call fcn.180104354
mov r9d, dword [rsp + 0x74]
mov r8, rsi
mov edx, dword [rsp + 0x5c]
mov rcx, r15
call fcn.180110c58
mov r9d, dword [rsp + 0x5c]
xor eax, eax
mov r8d, r12d
mov dword [rsp + 0x20], eax
mov rcx, r14
lea ebx, [rax + 0x47]
mov edx, ebx
call fcn.1800fb8dc
xor eax, eax
cmp dword [rbp + 0xe8], eax
je 0x1800f5da9
mov r9d, dword [rsp + 0x50]
lea edx, [rbx - 0x22]
mov r8d, dword [rsi + 4]
mov rcx, r14
mov dword [rsp + 0x20], eax
call fcn.1800fb8dc
jmp 0x1800f5dbe
mov rcx, qword [rsp + 0x78]
call fcn.18010bc7c
mov edx, dword [rbp - 0x68]
mov rcx, r14
call fcn.1800fbd6c
mov rax, qword [rbp]
test rax, rax
je 0x1800f5dd4
mov rcx, qword [rsp + 0x40]
mov rdx, rax
call fcn.1800b549c
mov r9d, dword [rbp - 0x70]
lea r8d, [rdi + 1]
xor eax, eax
mov rcx, r14
mov dword [rsp + 0x20], eax
lea edx, [rax + 0xa]
call fcn.1800fb8dc
mov r9d, dword [rsp + 0x58]
xor eax, eax
xor r8d, r8d
mov dword [rsp + 0x20], eax
mov rcx, r14
lea edx, [rax + 9]
call fcn.1800fb8dc
mov r9d, dword [rsp + 0x6c]
xor eax, eax
mov edi, dword [r14 + 0x90]
mov r8d, r12d
mov edx, ebx
mov dword [rsp + 0x20], eax
mov rcx, r14
call fcn.1800fb8dc
mov r12d, dword [rsp + 0x6c]
xor eax, eax
inc r12d
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, r12d
mov rcx, r14
lea edx, [rax + 0x43]
call fcn.1800fb8dc
mov edx, dword [rbp - 0x70]
mov rcx, r14
call fcn.1801066b4
mov ebx, dword [r14 + 0x90]
xor eax, eax
mov r8d, dword [rsp + 0x5c]
mov rcx, r14
mov dword [rsp + 0x20], eax
lea edx, [rax + 0x3b]
lea r9d, [rbx + 2]
call fcn.1800fb8dc
xor eax, eax
xor r9d, r9d
mov r8d, r12d
mov dword [rsp + 0x20], eax
mov rcx, r14
lea edx, [rax + 0x43]
call fcn.1800fb8dc
mov rdx, rsi
mov rcx, r15
call fcn.1800b6380
mov rdx, qword [rbp - 0x80]
inc ebx
mov r8d, ebx
mov r9d, 0x10
mov rcx, r15
call fcn.1800e0984
mov dword [rsp + 0x38], edi
lea rax, [rbp - 0x50]
mov dword [rsp + 0x30], ebx
lea r9, [rbp - 0x40]
mov rbx, qword [rbp + 0xe0]
or r8d, 0xffffffff
mov qword [rsp + 0x28], rbx
mov rdx, r13
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.1800cf2e0
xor edi, edi
xor r9d, r9d
mov r8d, r12d
mov dword [rsp + 0x20], edi
mov rcx, r14
lea edx, [rdi + 0x43]
call fcn.1800fb8dc
mov edx, dword [rbp - 0x6c]
mov rcx, r14
call fcn.1801066b4
mov rdx, rsi
mov rcx, r15
call fcn.1800cc260
mov r9d, dword [rsp + 0x5c]
lea edx, [rdi + 0x47]
xor r8d, r8d
mov dword [rsp + 0x20], edi
mov rcx, r14
call fcn.1800fb8dc
xor r9d, r9d
mov dword [rsp + 0x20], edi
lea r8d, [r12 + 1]
mov rcx, r14
lea edx, [rdi + 0x43]
call fcn.1800fb8dc
cmp word [rbp + 0xd0], di
je 0x1800f6251
mov eax, dword [rsp + 0x74]
test eax, eax
je 0x1800f6251
mov r8, qword [rsi + 0x28]
mov edx, eax
mov rcx, r15
mov r9d, dword [r8 + 0x14]
mov r8d, dword [r8 + 0x10]
call fcn.1800b6ab8
jmp 0x1800f6251
cmp qword [r13 + 0x30], r11
jne 0x1800f62dd
mov r8, qword [r13 + 0x20]
cmp dword [r8], r12d
jne 0x1800f62dd
mov rdx, qword [r13 + 0x28]
cmp dword [rdx], r12d
jne 0x1800f62dd
cmp qword [rdx + 0x30], r11
jne 0x1800f62dd
cmp dword [rsi + 0x30], r12d
jne 0x1800f62dd
cmp qword [r13 + 0x40], r11
jne 0x1800f62dd
mov rdx, qword [rdx + 0x28]
cmp byte [rdx + 0x3f], r11b
jne 0x1800f62dd
mov r8, qword [r8 + 8]
cmp byte [r8], 0xa8
jne 0x1800f62dd
cmp qword [r8 + 0x38], rsi
jne 0x1800f62dd
mov rax, qword [rsi + 0x28]
mov rcx, qword [rax + 8]
mov eax, pe_nt_image_headers64
test dword [rcx + 4], eax
je 0x1800f62dd
test dword [r8 + 4], 0x1000004
jne 0x1800f62dd
test rdx, rdx
je 0x1800f62dd
mov r9, qword [rdx + 0x60]
mov r8d, 0xffff8000
mov dword [rbp + 0xd8], r8d
mov rdi, rdx
test r9, r9
je 0x1800f6043
mov rax, qword [r15]
mov r8d, r11d
mov dword [rbp + 0xd8], r11d
mov rcx, qword [rax + 0x20]
add rcx, 0x18
cmp qword [rcx], r9
je 0x1800f6043
add r8d, r12d
lea rcx, [rcx + 0x20]
cmp qword [rcx], r9
jne 0x1800f6030
mov dword [rbp + 0xd8], r8d
mov eax, dword [r15 + 0x34]
mov edx, r8d
mov dword [rbp + 0xe8], eax
mov rcx, r15
inc eax
mov qword [rbp - 0x58], r11
mov dword [r15 + 0x34], eax
mov rbx, r11
mov eax, dword [rdi + 0x28]
mov dword [rbp + 0xd0], eax
call fcn.1800d8990
mov rax, qword [rdi]
xor r9d, r9d
mov r8d, dword [rdi + 0x28]
mov rcx, r15
mov edx, dword [rbp + 0xd8]
mov qword [rsp + 0x20], rax
call fcn.1800f837c
xor edx, edx
test byte [rdi + 0x30], 0x80
je 0x1800f60ab
mov rbx, qword [rdi + 0x10]
jmp 0x1800f60a6
mov eax, dword [rbx + 0x64]
and al, 3
cmp al, 2
je 0x1800f60ab
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x1800f6099
mov rax, qword [r13 + 0x28]
test byte [rax + 0x48], r12b
jne 0x1800f60e8
mov rax, qword [rdi + 0x10]
jmp 0x1800f60e3
test byte [rax + 0x64], 4
jne 0x1800f60df
movzx ecx, word [rax + 0x5c]
cmp cx, word [rdi + 0x3c]
jge 0x1800f60df
cmp qword [rax + 0x48], rdx
jne 0x1800f60df
test rbx, rbx
je 0x1800f60dc
cmp cx, word [rbx + 0x5c]
jge 0x1800f60df
mov rbx, rax
mov rax, qword [rax + 0x28]
test rax, rax
jne 0x1800f60bb
test rbx, rbx
je 0x1800f6105
mov eax, dword [rbx + 0x58]
mov rdx, rbx
mov rcx, r15
mov dword [rbp + 0xd0], eax
call fcn.1800e9898
mov qword [rbp - 0x58], rax
mov eax, dword [rbp + 0xd8]
mov edx, 0x70
mov r9d, dword [rbp + 0xd0]
mov rcx, r14
mov r8d, dword [rbp + 0xe8]
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], eax
call fcn.1800fb9f0
mov rax, qword [rbp - 0x58]
test rax, rax
je 0x1800f614c
mov r9d, 0xfffffff8
mov r8, rax
or edx, 0xffffffff
mov rcx, r14
call fcn.1800fbce4
mov eax, dword [r15 + 0x38]
mov rcx, r14
mov r8d, dword [rbp + 0xe8]
add eax, r12d
mov dword [rsi + 0xc], eax
mov eax, dword [rsi + 0x30]
add eax, dword [rsi + 0x20]
add dword [r15 + 0x38], eax
xor eax, eax
mov r9d, dword [rsi + 0x20]
add r9d, dword [rsi + 0xc]
mov dword [rsp + 0x20], eax
lea edx, [rax + 0x62]
call fcn.1800fb8dc
mov r8d, dword [rbp + 0xe8]
xor eax, eax
xor r9d, r9d
mov dword [rsp + 0x20], eax
mov rcx, r14
lea edx, [rax + 0x7a]
call fcn.1800fb8dc
cmp byte [r15 + 0x133], 2
jne 0x1800f6205
xor r8d, r8d
test rbx, rbx
je 0x1800f61cc
mov eax, 0x80
test byte [rdi + 0x30], al
je 0x1800f61c0
mov eax, dword [rbx + 0x64]
and al, 3
cmp al, 2
je 0x1800f61cc
mov rax, qword [rbx]
lea rcx, [0x18012d568]
jmp 0x1800f61d9
lea rcx, [0x18012d568]
mov r12d, r8d
mov rax, rcx
mov r9, qword [rdi]
lea rdx, str._USING_COVERING_INDEX
test r12d, r12d
mov qword [rsp + 0x28], rax
lea r8, str.SCAN__s_s_s
cmovne rcx, rdx
xor edx, edx
mov qword [rsp + 0x20], rcx
mov rcx, r15
call fcn.1801039dc
xor edi, edi
mov r8d, dword [rsp + 0x58]
mov r9d, 0x10
mov rdx, qword [rbp - 0x80]
mov rcx, r15
mov qword [rbp - 0x40], rdi
call fcn.1800e0984
mov eax, dword [rsp + 0x58]
xor r9d, r9d
mov rbx, qword [rbp + 0xe0]
or r8d, 0xffffffff
mov dword [rsp + 0x38], eax
mov rdx, r13
mov dword [rsp + 0x30], eax
mov rcx, r15
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.1800cf2e0
mov edx, dword [rsp + 0x58]
mov rcx, r14
call fcn.1801066b4
xor esi, esi
cmp byte [rsp + 0x70], 3
jne 0x1800f627e
lea r9, str.DISTINCT
xor edx, edx
lea r8, str.USE_TEMP_B_TREE_FOR__s
mov rcx, r15
call fcn.1801039dc
cmp qword [rbp - 0x40], rsi
je 0x1800f62a0
mov rax, qword [rsp + 0x60]
lea r8, [rbp - 0x40]
mov rdx, r13
mov qword [rsp + 0x20], rbx
mov rcx, r15
mov r9d, dword [rax]
call fcn.1800b9444
mov edx, dword [rbp - 0x60]
mov rcx, r14
call fcn.1801066b4
xor r11d, r11d
cmp dword [r15 + 0x30], r11d
mov eax, r11d
setg al
mov r12d, eax
mov r10, qword [rsp + 0x40]
mov rax, qword [rbp + 8]
test rax, rax
je 0x1800f4707
mov rdx, rax
mov rcx, r10
call fcn.1800b549c
jmp 0x1800f4707
mov edi, r11d
mov ecx, dword [rsi + 0x30]
mov qword [rbp + 0xe8], r11
mov word [rbp + 0xd8], r11w
cmp dword [rsi + 0x24], r11d
je 0x1800f6354
mov r8d, r11d
test ecx, ecx
jle 0x1800f632e
mov rdx, qword [rsi + 0x28]
mov r9d, ecx
mov rax, qword [rdx]
test dword [rax + 4], 0x1000000
jne 0x1800f631f
mov rax, qword [rdx + 8]
mov ecx, r9d
test byte [rax + 4], 0x20
jne 0x1800f632e
add r8d, r12d
add rdx, 0x20
mov ecx, r9d
cmp r8d, r9d
jl 0x1800f6306
cmp r8d, ecx
jne 0x1800f6382
add dword [r15 + 0x38], r12d
xor r8d, r8d
mov edi, dword [r15 + 0x38]
mov rcx, r14
mov r9d, edi
mov dword [rsp + 0x20], r11d
lea edx, [r8 + 0x47]
call fcn.1800fb8dc
jmp 0x1800f6382
cmp ecx, r12d
jne 0x1800f6382
mov rax, qword [rsi + 0x28]
cmp dword [rax + 0x10], r11d
jl 0x1800f6382
mov rax, qword [rax]
mov rax, qword [rax + 0x20]
mov qword [rbp + 0xe8], rax
neg rax
sbb ax, ax
and ax, 0x500
mov word [rbp + 0xd8], ax
mov eax, dword [r15 + 0x38]
mov rdx, rsi
add eax, r12d
mov rcx, r15
mov dword [rsi + 0xc], eax
mov eax, dword [rsi + 0x30]
add eax, dword [rsi + 0x20]
add dword [r15 + 0x38], eax
call fcn.1800cc260
movzx eax, byte [rbp + 0xd0]
xor edx, edx
or ax, word [rbp + 0xd8]
mov rcx, r15
mov r9, qword [rbp + 8]
mov r8, qword [rsp + 0x78]
mov dword [rsp + 0x38], edx
mov rdx, rbx
mov word [rsp + 0x30], ax
mov rax, qword [rbp + 0xe8]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
call fcn.180108dcc
mov rbx, rax
test rax, rax
je 0x1800f62bb
movzx eax, byte [rax + 0x43]
mov r8, rsi
mov r9d, eax
mov dword [rbp + 0xd8], eax
mov edx, edi
mov rcx, r15
call fcn.180110c58
mov edx, dword [rbp + 0xd8]
xor eax, eax
test edx, edx
je 0x1800f642c
mov r8, qword [rsi + 0x28]
test r8, r8
je 0x1800f642c
mov r9d, dword [r8 + 0x14]
mov rcx, r15
mov r8d, dword [r8 + 0x10]
call fcn.1800b6ab8
xor eax, eax
test edi, edi
je 0x1800f6447
mov r9d, edi
mov dword [rsp + 0x20], eax
mov r8d, r12d
mov edx, 0x47
mov rcx, r14
call fcn.1800fb8dc
xor edi, edi
cmp byte [rbp + 0xd0], dil
je 0x1800f649b
test byte [rbx + 0x44], 4
je 0x1800f649b
cmp byte [rbx + 0x41], dil
je 0x1800f649b
movzx ecx, byte [rbx + 0x40]
sub rcx, r12
js 0x1800f6484
imul r9, rcx, 0x70
add r9, rbx
mov rax, qword [r9 + 0x3c0]
test byte [rax + 0x38], 4
jne 0x1800f64b3
sub r9, 0x70
sub rcx, r12
jns 0x1800f646e
mov r9d, dword [rbx + 0x34]
xor r8d, r8d
mov dword [rsp + 0x20], edi
mov rcx, r14
lea edx, [r8 + 9]
call fcn.1800fb8dc
mov rcx, rbx
call fcn.18010bc7c
mov rdx, rsi
mov rcx, r15
call fcn.1800b6380
jmp 0x1800f6207
mov r9d, dword [r9 + 0x370]
jmp 0x1800f6488
mov r8, rdi
mov rdx, r13
mov rcx, r15
call fcn.1800c2f6c
mov r10d, eax
xor eax, eax
cmp qword [r13 + 0x58], rax
jne 0x1800f64dd
mov rcx, r15
call fcn.180103a70
mov eax, r10d
jmp 0x1800f4712