Function at 0x1008ea30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xdc
push ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x1e4]
mov dword [esp + 0xb8], eax
mov eax, dword [ebx + 0x1e8]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebx]
mov dword [ebx + 0x1e4], eax
inc eax
mov dword [esp + 0x50], 1
mov dword [ebx + 0x1e8], eax
mov dword [esp + 0x38], edi
test esi, esi
je 0x10090596
cmp byte [edi + 0x40], 0
jne 0x10090596
cmp dword [ebx + 0x44], 0
jne 0x10090596
push 0
push 0
push 0
push 0x15
mov eax, ebx
call fcn.10072d30
add esp, 0x10
test eax, eax
jne 0x10090596
mov ecx, dword [ebp + 0x10]
cmp byte [ecx], 4
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
ja 0x1008eb0b
mov edx, dword [esi + 0x38]
push edx
push edi
call fcn.1006b950
mov eax, 0xfffe
add esp, 8
and word [esi + 6], ax
mov dword [esi + 0x38], 0
push 0
push esi
push ebx
call fcn.1008e180
mov ecx, dword [esi + 0x38]
mov edx, dword [esi + 0x28]
mov eax, dword [esi]
add esp, 0xc
cmp dword [ebx + 0x44], 0
mov dword [esp + 0x24], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0x60], eax
jne 0x1009053d
mov ecx, edi
cmp byte [ecx + 0x40], 0
jne 0x1009053d
mov edx, esi
movzx eax, word [edx + 6]
shr eax, 2
and eax, 1
mov edi, ebx
mov dword [esp + 0x54], eax
call fcn.1008a5b0
mov esi, eax
mov dword [esp + 0x4c], esi
test esi, esi
je 0x1009053d
mov ecx, dword [esp + 0x60]
cmp dword [ecx], 1
mov eax, dword [ebp + 0x10]
movzx eax, byte [eax]
jle 0x1008eb82
call fcn.100889a0
test eax, eax
jne 0x1009053d
mov ecx, dword [ebp + 0xc]
xor eax, eax
mov dword [esp + 0x2c], eax
cmp dword [ecx + 0x3c], eax
jne 0x1008efda
jmp 0x1008eba4
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x44]
movzx edx, byte [edi]
cmp eax, edx
jge 0x1008efda
lea eax, [eax + eax*8]
lea edi, [edi + eax*8 + 8]
mov eax, dword [edi + 0x14]
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
test eax, eax
je 0x1008efc7
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x34], ecx
test ecx, ecx
je 0x1008ec39
test byte [edi + 0x24], 4
jne 0x1008efc7
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov edx, dword [edi + 0x1c]
mov dword [esp + 0x30], edx
mov dword [esp + 0x20], eax
jg 0x1008ec0c
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008efc7
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x20]
mov edx, dword [esi + 4]
inc dword [esi + 0x1c]
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
mov edx, dword [esp + 0x30]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax], 0xf
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
jmp 0x1008efc7
mov ecx, dword [ebp + 0xc]
call fcn.1006a780
add dword [ebx + 0x1e0], eax
mov eax, dword [esp + 0x10]
movzx eax, word [eax + 6]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x2c]
shr eax, 2
and eax, 1
push eax
push ecx
push edx
mov dword [esp + 0x40], eax
mov eax, dword [ebp + 0xc]
push ebx
call fcn.1008cca0
add esp, 0x10
test eax, eax
je 0x1008ec98
cmp dword [esp + 0x34], 0
mov edi, dword [ebp + 0xc]
je 0x1008ec8b
or word [edi + 6], 4
mov dword [esp + 0x54], 1
mov dword [esp + 0x2c], 0xffffffff
jmp 0x1008ef96
mov eax, dword [esp + 0x44]
cmp byte [eax], 1
jne 0x1008ee79
mov edx, dword [ebp + 0xc]
mov ecx, 0x100
test word [edx + 6], cx
jne 0x1008ee79
mov eax, ecx
mov ecx, dword [esp + 0x38]
test word [ecx + 0x3c], ax
jne 0x1008ee79
mov ecx, 1
add dword [ebx + 0x4c], ecx
mov eax, dword [ebx + 0x4c]
mov dword [edi + 0x1c], eax
add dword [ebx + 0x4c], ecx
mov edx, dword [ebx + 0x4c]
push 0xffffffffffffffff
mov eax, ebx
mov dword [esp + 0x60], edx
call fcn.10077be0
add esp, 4
push 0xe
mov eax, esi
call fcn.1005b710
mov eax, dword [edi + 0x2c]
add esp, 4
push eax
push 0x35
mov eax, esi
call fcn.1005b760
mov dword [esp + 0x20], eax
mov eax, dword [esi + 4]
add esp, 8
test eax, eax
je 0x1008ed1d
mov ecx, dword [esi + 0x1c]
lea ecx, [ecx + ecx*4]
mov byte [eax + ecx*4 - 0x11], 1
mov edx, dword [esp + 0x18]
mov dword [edi + 0x18], edx
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0x34], eax
jg 0x1008ed43
mov edi, esi
call fcn.1005b630
mov edi, dword [esp + 0x14]
test eax, eax
jne 0x1008ed6a
mov eax, dword [esp + 0x34]
mov edx, dword [esi + 4]
xor ecx, ecx
inc dword [esi + 0x1c]
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
mov edx, dword [esp + 0x5c]
mov byte [eax], 0x15
mov byte [eax + 3], cl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x1008ed7c
mov eax, dword [esi + 0x1c]
lea eax, [eax + eax*4]
mov byte [ecx + eax*4 - 0x11], 1
mov eax, dword [edi + 0x1c]
mov cl, byte [ebx + 0x1e8]
mov dword [esp + 0xb4], eax
xor eax, eax
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0xb0]
push edx
push eax
mov byte [esp + 0xb8], 0xa
mov byte [esp + 0xb9], 0
push ebx
mov byte [edi + 0x28], cl
call fcn.1008ea30
mov edx, dword [esp + 0x1c]
mov ecx, dword [edi + 0x10]
mov eax, dword [edx + 0x20]
mov dword [ecx + 0x1c], eax
mov ecx, dword [esp + 0x24]
or dword [edi + 0x24], 4
add esp, 0xc
cmp dword [esi + 0x1c], ecx
jbe 0x1008edf2
mov eax, ecx
mov ecx, dword [esp + 0xb8]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
mov dword [eax + edx*4 + 8], ecx
mov eax, dword [esp + 0x18]
cmp dword [esi + 0x1c], eax
jbe 0x1008ee0c
mov ecx, dword [esp + 0xbc]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
mov dword [eax + edx*4 + 0xc], ecx
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0x34], eax
jg 0x1008ee2b
mov edi, esi
call fcn.1005b630
mov edi, dword [esp + 0x14]
test eax, eax
jne 0x1008ee58
mov eax, dword [esp + 0x34]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov ecx, 1
add dword [esi + 0x1c], ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax], 0x15
mov byte [eax + 3], 0
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov edx, dword [edi + 0x1c]
push edx
push 0x11
mov eax, esi
call fcn.1005b760
mov eax, dword [esp + 0x20]
add esp, 8
dec eax
mov edx, esi
call fcn.1005bc40
jmp 0x1008ef88
inc dword [ebx + 0x4c]
mov edx, dword [ebx + 0x4c]
mov dword [edi + 0x1c], edx
mov ecx, dword [esi + 0x1c]
cmp dword [esi + 0x20], ecx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x5c], edx
mov dword [esp + 0x34], ecx
jg 0x1008eeb7
mov edi, esi
call fcn.1005b630
test eax, eax
je 0x1008eeaf
mov dword [esp + 0x28], 1
jmp 0x1008eee0
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x5c]
mov edi, dword [esi + 4]
inc dword [esi + 0x1c]
lea eax, [ecx + ecx*4]
lea eax, [edi + eax*4]
xor edi, edi
mov byte [eax], 0x15
mov byte [eax + 3], 0
mov dword [eax + 4], edi
mov dword [eax + 8], edx
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov byte [eax + 1], 0
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x14]
inc ecx
test byte [edi + 0x24], 2
mov dword [edi + 0x18], ecx
jne 0x1008eefd
mov eax, ebx
call fcn.1006be50
mov dword [esp + 0x1c], eax
mov eax, dword [edi + 0x2c]
mov ecx, dword [esp + 0x10]
mov dl, byte [ebx + 0x1e8]
mov dword [esp + 0xb4], eax
xor eax, eax
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], eax
lea eax, [esp + 0xb0]
push eax
push ecx
mov byte [esp + 0xb8], 9
mov byte [esp + 0xb9], 0
push ebx
mov byte [edi + 0x28], dl
call fcn.1008ea30
mov eax, dword [esp + 0x1c]
mov edx, dword [edi + 0x10]
mov ecx, dword [eax + 0x20]
add esp, 0xc
cmp dword [esp + 0x1c], 0
mov dword [edx + 0x1c], ecx
je 0x1008ef65
mov eax, dword [esp + 0x1c]
mov edx, esi
call fcn.1005bc40
mov edx, dword [edi + 0x1c]
push edx
push 0x10
mov eax, esi
call fcn.1005b760
mov ecx, dword [esp + 0x30]
add esp, 8
cmp dword [esi + 0x1c], ecx
jbe 0x1008ef88
lea edx, [ecx + ecx*4]
mov ecx, dword [esi + 4]
mov dword [ecx + edx*4 + 4], eax
mov edi, dword [ebp + 0xc]
mov dword [ebx + 0x3c], 0
mov byte [ebx + 0x13], 0
mov edx, dword [esp + 0x38]
cmp byte [edx + 0x40], 0
jne 0x1009053d
mov ecx, edi
call fcn.1006a780
sub dword [ebx + 0x1e0], eax
mov ecx, dword [ebp + 0x10]
cmp byte [ecx], 4
mov eax, dword [edi + 0x28]
mov dword [esp + 0x44], eax
jbe 0x1008efc7
mov edx, dword [edi + 0x38]
mov dword [esp + 0x24], edx
mov eax, dword [ebp + 0xc]
inc dword [esp + 0x2c]
cmp dword [eax + 0x3c], 0
mov ecx, eax
je 0x1008eba0
mov eax, dword [ecx + 0x2c]
mov edx, dword [ecx]
mov dword [esp + 0x3c], eax
mov eax, dword [ecx + 0x34]
mov dword [esp + 0x34], eax
mov al, byte [ecx + 6]
mov dword [esp + 0x60], edx
mov edx, dword [ecx + 0x30]
and al, 1
cmp dword [ecx + 0x3c], 0
mov dword [esp + 0x14], edx
mov byte [esp + 0xa0], al
je 0x1008f06b
cmp dword [ecx + 0x44], 0
jne 0x1008f046
xor edx, edx
xor esi, esi
mov eax, ecx
mov dword [eax + 0x40], edx
mov dword [eax + 0x44], ecx
mov edx, eax
mov eax, dword [eax + 0x3c]
inc esi
test eax, eax
jne 0x1008f013
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx + 0x68]
test eax, eax
je 0x1008f046
cmp esi, eax
jle 0x1008f046
push str.too_many_terms_in_compound_SELECT
mov edi, ebx
call fcn.10041f80
add esp, 4
jmp 0x1009053d
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
push edx
push eax
push ebx
call fcn.1008a8b0
mov ecx, dword [esp + 0xcc]
add esp, 0xc
mov dword [ebx + 0x1e4], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 0x14]
push 0xffffffffffffffff
push edx
call fcn.1006f440
add esp, 8
test eax, eax
jne 0x1008f094
mov eax, dword [esp + 0x38]
test byte [eax + 0x3c], 4
jne 0x1008f094
mov dword [esp + 0x24], 0
mov edi, dword [ebp + 0xc]
mov cl, byte [edi + 6]
and cl, 5
cmp cl, 1
jne 0x1008f201
mov edx, edi
mov eax, dword [edx]
mov edi, dword [esp + 0x24]
push 0xffffffffffffffff
push eax
call fcn.1006f440
mov edi, dword [ebp + 0xc]
add esp, 8
test eax, eax
jne 0x1008f201
mov edx, dword [edi]
push eax
mov eax, dword [esp + 0x3c]
push edx
mov ecx, 0xfffe
and word [edi + 6], cx
push eax
call fcn.1006b1d0
add esp, 0xc
mov dword [edi + 0x30], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xffffffff
mov eax, dword [ebp + 0x10]
cmp byte [eax], 9
jne 0x1008f158
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0x60]
mov edx, dword [ecx]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0x58], edx
mov dword [esp + 0x20], eax
jg 0x1008f12c
mov edi, esi
call fcn.1005b630
mov edi, dword [ebp + 0xc]
test eax, eax
jne 0x1008f158
mov eax, dword [esp + 0x20]
mov edx, dword [esi + 4]
inc dword [esi + 0x1c]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x58]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax], 0x33
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov eax, esi
call fcn.1005b940
push eax
push edi
push ebx
mov dword [esp + 0xf0], eax
mov dword [edi + 0x20], 0xffffffff
mov dword [edi + 0x24], Ordinal_2
call fcn.1008a5e0
add esp, 0xc
cmp dword [edi + 8], 0
jne 0x1008f19f
cmp dword [esp + 0x28], 0
jl 0x1008f19f
mov eax, dword [esp + 0x28]
mov ecx, esi
call fcn.1005bf10
mov byte [eax], 0x34
or word [edi + 6], 0x40
test byte [edi + 6], 1
je 0x1008f24a
mov eax, dword [ebx + 0x48]
mov edi, eax
inc eax
mov dword [ebx + 0x48], eax
mov eax, dword [ebp + 0xc]
push 0xfffffffffffffff0
push ecx
mov ecx, dword [eax]
push ecx
push ebx
mov dword [esp + 0xb4], edi
call fcn.10089280
add esp, 0xc
push eax
mov edx, edi
push 0x33
xor eax, eax
xor ecx, ecx
mov edi, esi
call fcn.1005b7d0
mov dword [esp + 0xb4], eax
mov eax, dword [esi + 4]
add esp, 0xc
test eax, eax
je 0x1008f1f7
mov ecx, dword [esi + 0x1c]
lea edx, [ecx + ecx*4]
mov byte [eax + edx*4 - 0x11], 8
mov byte [esp + 0xa1], 3
jmp 0x1008f252
cmp dword [esp + 0x24], 0
je 0x1008f0ed
mov edi, dword [esp + 0x24]
push edi
push ebx
call fcn.10089280
mov ecx, dword [ebx + 0x48]
mov dword [edi + 4], ecx
inc dword [ebx + 0x48]
mov ecx, dword [edi]
mov edx, dword [edi + 4]
push 0xfffffffffffffff0
push eax
add ecx, 2
push 0x33
xor eax, eax
mov edi, esi
call fcn.1005b7d0
mov edx, dword [ebp + 0xc]
add esp, 0x14
mov dword [esp + 0x28], eax
mov dword [edx + 0x18], eax
mov edi, edx
jmp 0x1008f0f5
mov byte [esp + 0xa1], 0
xor edi, edi
cmp dword [esp + 0x54], edi
jne 0x1008f348
cmp dword [esp + 0x14], edi
jne 0x1008f348
movzx eax, byte [esp + 0xa0]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x3c]
neg eax
push edi
sbb eax, eax
and eax, 0x400
push eax
mov eax, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x50]
push eax
push ecx
push edx
push ebx
call fcn.1009c5d0
mov edi, eax
add esp, 0x1c
test edi, edi
je 0x1009053d
mov ax, word [edi + 0x20]
call fcn.100956d0
mov ecx, dword [ebp + 0xc]
cmp edx, dword [ecx + 0x24]
ja 0x1008f2c1
jb 0x1008f2bb
cmp eax, dword [ecx + 0x20]
jae 0x1008f2c1
mov dword [ecx + 0x20], eax
mov dword [ecx + 0x24], edx
cmp byte [esp + 0xa0], 0
je 0x1008f2d9
mov al, byte [edi + 0x27]
test al, al
je 0x1008f2d9
mov byte [esp + 0xa1], al
cmp dword [esp + 0x24], 0
je 0x1008f2ee
cmp byte [edi + 0x24], 0
je 0x1008f2ee
mov dword [esp + 0x24], 0
mov ecx, dword [esp + 0x28]
test ecx, ecx
jl 0x1008f30e
cmp dword [esp + 0x24], 0
jne 0x1008f30e
mov edx, esi
call fcn.1005bd80
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x18], 0xffffffff
mov eax, dword [edi + 0x34]
mov ecx, dword [edi + 0x30]
mov edx, dword [ebp + 0x10]
push eax
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x6c]
lea eax, [esp + 0xac]
push eax
mov eax, dword [ebp + 0xc]
push ecx
push 0
push 0
push edx
push eax
push ebx
call fcn.100889d0
push edi
call fcn.1009ce50
add esp, 0x2c
jmp 0x100904d4
mov dword [esp + 0x48], edi
mov dword [esp + 0x10], edi
cmp dword [esp + 0x14], edi
je 0x1008f3ae
mov edx, dword [ebp + 0xc]
mov ecx, dword [edx]
mov eax, dword [ecx]
cmp eax, edi
mov ecx, dword [ecx + 8]
jle 0x1008f377
add ecx, 0x16
xor edx, edx
mov word [ecx], dx
dec eax
add ecx, 0x18
cmp eax, edi
jg 0x1008f367
mov edx, dword [ebp + 0xc]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
cmp eax, edi
mov ecx, dword [ecx + 8]
jle 0x1008f397
add ecx, 0x16
xor edx, edx
mov word [ecx], dx
dec eax
add ecx, 0x18
cmp eax, edi
jg 0x1008f387
mov edx, dword [ebp + 0xc]
mov eax, 0x64
cmp dword [edx + 0x24], edi
ja 0x1008f3a6
cmp dword [edx + 0x20], eax
jbe 0x1008f3bb
mov dword [edx + 0x20], eax
mov dword [edx + 0x24], edi
jmp 0x1008f3bb
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x20], 1
mov dword [eax + 0x24], edi
mov eax, esi
call fcn.1005b940
mov dword [esp + 0x28], eax
xor eax, eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x74]
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xd0], ecx
cmp eax, edi
je 0x1008f431
mov edx, dword [eax]
inc edx
mov dword [esp + 0x80], edx
jmp 0x1008f438
mov dword [esp + 0x80], edi
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x60]
lea ecx, [esp + 0xc4]
push ecx
mov dword [esp + 0x88], eax
call fcn.1006f960
mov ebx, dword [esp + 0x28]
lea edx, [esp + 0xc8]
add esp, 4
push edx
call fcn.1006f960
mov ecx, dword [esp + 0x38]
xor edi, edi
add esp, 4
cmp ecx, edi
je 0x1008f485
lea eax, [esp + 0xc4]
push eax
call fcn.1006f910
add esp, 4
cmp dword [esp + 0x98], edi
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x90], ecx
mov dword [esp + 0x2c], edi
jle 0x1008f4e2
or byte [esp + 0xe0], 8
mov edx, dword [esp + 0x94]
mov eax, dword [edi + edx]
mov ebx, dword [eax + 0x10]
lea ecx, [esp + 0xc4]
push ecx
call fcn.1006f960
mov eax, dword [esp + 0x30]
and byte [esp + 0xe4], 0xf7
inc eax
add esp, 4
add edi, 0x10
cmp eax, dword [esp + 0x98]
mov dword [esp + 0x2c], eax
jl 0x1008f4a0
mov edx, dword [esp + 0x38]
cmp byte [edx + 0x40], 0
jne 0x1009053a
mov edx, dword [esp + 0x14]
xor edi, edi
cmp edx, edi
je 0x100901a3
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x48]
mov dword [esp + 0x78], eax
push edx
inc eax
push ecx
mov dword [ecx + 0x48], eax
call fcn.10089280
mov ebx, dword [esi + 0x1c]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x88]
add esp, 8
cmp dword [esi + 0x20], ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x20], ecx
jg 0x1008f551
mov edi, esi
call fcn.1005b630
test eax, eax
je 0x1008f551
mov eax, 1
mov dword [esp + 0x68], eax
jmp 0x1008f583
mov eax, dword [esi + 4]
inc dword [esi + 0x1c]
mov ecx, dword [esp + 0x20]
lea edx, [ebx + ebx*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x30]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax], 0x34
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov dword [esp + 0x68], ebx
mov eax, ebx
mov ebx, dword [esi + 4]
mov edi, dword [esi]
test ebx, ebx
je 0x1008f5ce
cmp byte [edi + 0x40], 0
jne 0x1008f5ce
test eax, eax
jge 0x1008f59a
mov eax, dword [esi + 0x1c]
dec eax
lea eax, [eax + eax*4]
mov ecx, dword [ebx + eax*4 + 0x10]
lea ebx, [ebx + eax*4]
movsx eax, byte [ebx + 1]
call fcn.1005bc70
mov eax, dword [esp + 0x9c]
xor ecx, ecx
mov dword [ebx + 0x10], ecx
cmp eax, ecx
jne 0x1008f5c5
mov dword [ebx + 0x10], ecx
mov byte [ebx + 1], cl
jmp 0x1008f5df
mov dword [ebx + 0x10], eax
mov byte [ebx + 1], 0xfa
jmp 0x1008f5df
mov ecx, dword [esp + 0x9c]
mov eax, 0xfffffff0
call fcn.1005bc70
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x4c]
inc eax
lea edi, [eax + 1]
mov dword [esp + 0x30], eax
lea eax, [edi + 1]
mov dword [esp + 0x6c], eax
mov dword [ebx + 0x4c], eax
mov eax, esi
mov dword [esp + 0x64], edi
call fcn.1005b940
inc dword [ebx + 0x4c]
mov ecx, dword [ebx + 0x4c]
mov dword [esp + 0x58], eax
mov eax, esi
mov dword [esp + 0x5c], ecx
call fcn.1005b940
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x20], eax
mov eax, dword [ebx + 0x4c]
lea edx, [eax + 1]
mov dword [esp + 0xac], edx
mov edx, dword [ecx]
add eax, edx
mov dword [ebx + 0x4c], eax
mov ecx, dword [ecx]
add ecx, eax
lea edx, [eax + 1]
mov dword [ebx + 0x4c], ecx
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0x54], edx
mov dword [esp + 0x1c], eax
jg 0x1008f660
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008f684
mov edi, dword [esp + 0x64]
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x1c]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
xor ecx, ecx
mov byte [eax], 0x15
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0x1c], eax
jg 0x1008f69f
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008f6ca
mov eax, dword [esp + 0x1c]
mov edx, dword [esi + 4]
inc dword [esi + 0x1c]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x30]
xor edi, edi
mov byte [eax], 0x15
mov byte [eax + 3], 0
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov byte [eax + 1], 0
jmp 0x1008f6cc
xor edi, edi
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0xac]
mov ecx, dword [edx]
lea edx, [ecx + eax - 1]
push edx
push eax
push edi
push 0x18
mov eax, esi
call fcn.1005b6b0
mov eax, dword [esi + 0x1c]
add esp, 0x10
cmp dword [esi + 0x20], eax
mov dword [esp + 0x1c], eax
jg 0x1008f709
mov edi, esi
call fcn.1005b630
xor edi, edi
test eax, eax
jne 0x1008f734
mov eax, dword [esp + 0x1c]
mov ecx, dword [esi + 4]
inc dword [esi + 0x1c]
mov edx, dword [esp + 0x5c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x20]
mov byte [eax], 0xf
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov byte [eax + 1], 0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x44]
push edi
push 0x100
push edi
push edx
push eax
push ecx
push ebx
call fcn.1009c5d0
add esp, 0x1c
mov dword [esp + 0x70], eax
cmp eax, edi
je 0x1009053a
cmp byte [eax + 0x24], 0
je 0x1008f772
mov dword [esp + 0x1c], 0
jmp 0x1008fb40
cmp byte [esp + 0xa0], 0
je 0x1008f78a
mov edx, dword [ebp + 0xc]
test byte [edx + 6], 1
mov eax, str.DISTINCT
je 0x1008f78f
mov eax, str.GROUP_BY
mov ecx, ebx
call fcn.10089360
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x10], eax
inc eax
mov dword [esp + 0x1c], 1
mov dword [esp + 0x2c], eax
mov dword [esp + 0x50], eax
mov ecx, eax
test edx, edx
jle 0x1008f7da
mov edi, dword [esp + 0x88]
add edi, 0xc
cmp dword [edi], ecx
jl 0x1008f7ce
inc eax
inc ecx
add edi, 0x18
sub edx, 1
jne 0x1008f7c8
mov dword [esp + 0x50], eax
mov ecx, dword [ebx + 0x3c]
cmp eax, ecx
mov edi, dword [ebx + 0x40]
mov dword [esp + 0x18], edi
jg 0x1008f7f5
lea edx, [edi + eax]
sub ecx, eax
mov dword [ebx + 0x40], edx
mov dword [ebx + 0x3c], ecx
jmp 0x1008f804
mov ecx, dword [ebx + 0x4c]
lea edi, [ecx + 1]
add ecx, eax
mov dword [esp + 0x18], edi
mov dword [ebx + 0x4c], ecx
mov edx, ebx
call fcn.1006d500
mov eax, dword [esp + 0x14]
push 0
push edi
push ebx
call fcn.1006eae0
mov eax, dword [esp + 0x84]
mov dword [esp + 0x48], eax
mov eax, dword [esi + 0x1c]
add esp, 0xc
cmp dword [esi + 0x20], eax
mov dword [esp + 0x48], eax
jg 0x1008f841
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008f873
mov eax, dword [esp + 0x48]
mov edx, dword [esi + 4]
inc dword [esi + 0x1c]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x18]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x10]
add edx, ecx
xor ecx, ecx
mov byte [eax], 0x40
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov ecx, dword [esp + 0x2c]
xor edi, edi
cmp dword [esp + 0x8c], edi
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x2c], edi
jle 0x1008f955
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x88]
add edx, ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x48], edi
cmp dword [edi + eax + 0xc], ecx
jl 0x1008f939
mov ecx, dword [esp + 0x10]
mov edx, dword [edi + eax + 4]
push 0
push ecx
mov ecx, dword [edi + eax + 8]
push edx
mov edx, dword [edi + eax]
push ecx
push edx
mov eax, ebx
call fcn.1006d450
add esp, 0x14
mov dword [esp + 0xc], eax
cmp dword [esp + 0x10], eax
je 0x1008f921
mov ecx, dword [esi + 0x1c]
cmp dword [esi + 0x20], ecx
mov dword [esp + 0x40], ecx
jg 0x1008f8f9
mov edi, esi
call fcn.1005b630
mov edi, dword [esp + 0x48]
test eax, eax
jne 0x1008f921
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0xc]
mov edx, dword [esi + 4]
inc dword [esi + 0x1c]
lea ecx, [ecx + ecx*4]
lea ecx, [edx + ecx*4]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x10]
mov dword [ecx + 8], eax
xor eax, eax
mov byte [ecx], 0x1d
mov byte [ecx + 3], 0
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov byte [ecx + 1], al
mov eax, 1
add dword [esp + 0x3c], eax
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x3c]
inc dword [esp + 0x2c]
mov edx, dword [esp + 0x8c]
add edi, 0x18
cmp dword [esp + 0x2c], edx
mov dword [esp + 0x48], edi
jl 0x1008f8a3
mov al, byte [ebx + 0x13]
test al, al
jne 0x1008f964
inc dword [ebx + 0x4c]
mov ecx, dword [ebx + 0x4c]
jmp 0x1008f970
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov ecx, dword [ebx + eax*4 + 0x1c]
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
jg 0x1008f993
mov edi, esi
call fcn.1005b630
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x1008f9c2
mov eax, dword [esp + 0xc]
inc dword [esi + 0x1c]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x18]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x50]
mov byte [eax], 0x2b
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], 0
mov byte [eax + 1], 0
mov eax, dword [esp + 0x78]
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0xc], eax
jg 0x1008f9e9
mov edi, esi
call fcn.1005b630
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x1008fa11
mov eax, dword [esp + 0xc]
inc dword [esi + 0x1c]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x40]
mov dword [eax + 4], edx
xor edx, edx
mov byte [eax], 0x66
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov byte [eax + 1], dl
mov edi, dword [esp + 0x50]
test ecx, ecx
je 0x1008fa3e
mov dl, byte [ebx + 0x13]
cmp dl, 8
jae 0x1008fa3e
xor eax, eax
lea esi, [ebx + 0x68]
cmp dword [esi + 0x10], ecx
je 0x1008fa8b
inc eax
add esi, 0x18
cmp eax, 0xa
jl 0x1008fa26
movzx eax, dl
mov dword [ebx + eax*4 + 0x1c], ecx
inc byte [ebx + 0x13]
mov ecx, dword [esp + 0x18]
push ecx
mov eax, edi
mov esi, ebx
call fcn.1006d2e0
add esp, 4
cmp edi, dword [esi + 0x3c]
jle 0x1008fa5e
mov edx, dword [esp + 0x18]
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], edx
mov eax, dword [esp + 0x70]
push eax
call fcn.1009ce50
mov ecx, dword [esi + 0x48]
mov al, byte [esi + 0x13]
add esp, 4
lea edx, [ecx + 1]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x7c], ecx
mov dword [esi + 0x48], edx
test al, al
jne 0x1008fa91
inc dword [esi + 0x4c]
mov eax, dword [esi + 0x4c]
jmp 0x1008fa9d
mov byte [esi + 8], 1
jmp 0x1008fa3e
dec al
movzx edx, al
mov byte [esi + 0x13], al
mov eax, dword [esi + edx*4 + 0x1c]
mov edi, dword [esp + 0x4c]
mov ebx, dword [edi + 0x1c]
cmp dword [edi + 0x20], ebx
mov dword [esp + 0x10], eax
jg 0x1008faba
call fcn.1005b630
test eax, eax
jne 0x1008fae9
mov ecx, dword [esp + 0x48]
mov eax, dword [edi + 4]
inc dword [edi + 0x1c]
lea edx, [ebx + ebx*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x50]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x10]
mov byte [eax], 0x35
mov byte [eax + 3], 0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], 0
mov byte [eax + 1], 0
mov ebx, dword [edi + 0x1c]
cmp dword [edi + 0x20], ebx
mov eax, dword [esp + 0x78]
mov dword [esp + 0xc], eax
jg 0x1008fb02
call fcn.1005b630
test eax, eax
jne 0x1008fb2e
mov edx, dword [edi + 4]
inc dword [edi + 0x1c]
lea ecx, [ebx + ebx*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x28]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax], 0x63
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov edx, esi
mov byte [esp + 0x75], 1
call fcn.1006d500
mov esi, dword [esp + 0x4c]
mov ebx, edx
mov eax, dword [esi + 0x1c]
mov edx, ebx
mov dword [esp + 0x3c], eax
call fcn.1006d500
cmp dword [esp + 0x1c], 0
je 0x1008fb9c
mov ebx, dword [esi + 0x1c]
cmp dword [esi + 0x20], ebx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xc], ecx
jg 0x1008fb70
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008fb9c
mov eax, dword [esi + 4]
inc dword [esi + 0x1c]
mov ecx, dword [esp + 0xc]
lea edx, [ebx + ebx*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x10]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax], 0x51
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov eax, dword [esp + 0x14]
xor ebx, ebx
cmp dword [eax], ebx
jle 0x1008fc4e
lea ebx, [ebx]
cmp dword [esp + 0x1c], 0
je 0x1008fc1c
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0xc], eax
jg 0x1008fbd2
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008fc04
mov eax, dword [esp + 0xc]
mov edx, dword [esi + 4]
inc dword [esi + 0x1c]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x54]
mov dword [eax + 4], ecx
lea ecx, [ebx + edx]
mov byte [eax], 0x29
mov byte [eax + 3], 0
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], 0
mov byte [eax + 1], 0
test ebx, ebx
jne 0x1008fc41
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x1008fc41
mov eax, dword [esi + 0x1c]
lea edx, [eax + eax*4]
mov byte [ecx + edx*4 - 0x11], 0x20
jmp 0x1008fc41
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x14]
mov byte [esp + 0x74], 1
lea esi, [ebx + eax]
mov eax, dword [edx + 8]
lea ecx, [ebx + ebx*2]
mov eax, dword [eax + ecx*8]
mov ecx, dword [ebp + 8]
call fcn.1006e7d0
mov esi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x14]
inc ebx
cmp ebx, dword [ecx]
jl 0x1008fbb0
mov edx, dword [esp + 0x14]
mov ebx, dword [esi + 0x1c]
cmp dword [esi + 0x20], ebx
mov eax, dword [edx]
mov dword [esp + 0xc], eax
jg 0x1008fc72
mov edi, esi
call fcn.1005b630
test eax, eax
je 0x1008fc72
mov ebx, 1
jmp 0x1008fca8
mov edx, dword [esi + 4]
inc dword [esi + 0x1c]
lea ecx, [ebx + ebx*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x54]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0xc]
mov byte [eax], 0x24
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], 0
mov byte [eax + 1], 0
mov edx, dword [esp + 0x9c]
push edx
push esi
mov ecx, 0xfffffffa
mov eax, ebx
call fcn.1005bdc0
mov ebx, dword [esi + 0x1c]
add esp, 8
cmp dword [esi + 0x20], ebx
mov dword [esp + 0x40], ebx
jg 0x1008fcd7
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008fcfe
mov ecx, dword [esi + 4]
inc dword [esi + 0x1c]
lea eax, [ebx + ebx*4]
lea eax, [ecx + eax*4]
xor edx, edx
lea ecx, [ebx + 1]
mov byte [eax], 0x25
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], edx
mov byte [eax + 1], dl
mov edx, dword [esp + 0x14]
mov eax, dword [edx]
mov ebx, dword [esp + 0xac]
mov esi, dword [esp + 0x54]
mov edi, dword [ebp + 8]
push eax
call fcn.1006d560
mov esi, dword [esp + 0x50]
mov ebx, dword [esi + 0x1c]
add esp, 4
cmp dword [esi + 0x20], ebx
jg 0x1008fd32
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008fd5f
mov edx, dword [esi + 4]
inc dword [esi + 0x1c]
lea ecx, [ebx + ebx*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x58]
xor ebx, ebx
mov byte [eax], 0xf
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
jmp 0x1008fd61
xor ebx, ebx
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0xc], eax
jg 0x1008fd7c
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008fda5
mov eax, dword [esp + 0xc]
mov ecx, dword [esi + 4]
inc dword [esi + 0x1c]
mov edx, dword [esp + 0x64]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x28]
mov byte [eax], 0x7e
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0xc], eax
jg 0x1008fdc0
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008fde9
mov eax, dword [esp + 0xc]
inc dword [esi + 0x1c]
mov ecx, dword [esp + 0x5c]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x20]
mov byte [eax], 0xf
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov eax, dword [esp + 0x40]
cmp eax, ebx
jl 0x1008fe02
mov ecx, dword [esi + 0x1c]
cmp ecx, eax
jbe 0x1008fe02
mov edx, dword [esi + 4]
lea eax, [eax + eax*4]
mov dword [edx + eax*4 + 8], ecx
mov ecx, dword [ebp + 8]
lea eax, [esp + 0x74]
push eax
push ecx
call fcn.1008e510
mov eax, dword [esi + 0x1c]
add esp, 8
cmp dword [esi + 0x20], eax
mov dword [esp + 0xc], eax
jg 0x1008fe2e
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008fe58
mov eax, dword [esp + 0xc]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov ecx, 1
add dword [esi + 0x1c], ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov byte [eax], 0x15
mov byte [eax + 3], bl
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
cmp dword [esp + 0x1c], ebx
je 0x1008feac
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov edx, dword [esp + 0x78]
mov dword [esp + 0x40], edx
mov dword [esp + 0xc], eax
jg 0x1008fe81
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008fef1
mov eax, dword [esp + 0xc]
mov ecx, dword [esi + 4]
inc dword [esi + 0x1c]
mov edx, dword [esp + 0x40]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x3c]
mov byte [eax], 5
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
jmp 0x1008fef1
mov edx, dword [esp + 0x70]
push edx
call fcn.1009ce50
mov eax, dword [esi + 4]
add esp, 4
cmp eax, ebx
je 0x1008fef1
mov ecx, dword [esp + 0x68]
mov edi, dword [esi]
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*4]
movsx eax, byte [ecx + 1]
mov dword [esp + 0xc], ecx
mov ecx, dword [ecx + 0x10]
call fcn.1005bc70
mov eax, dword [esp + 0xc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax], 0x95
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0xc], eax
jg 0x1008ff0c
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008ff35
mov eax, dword [esp + 0xc]
inc dword [esi + 0x1c]
mov ecx, dword [esp + 0x6c]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x58]
mov byte [eax], 0xf
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0xc], eax
jg 0x1008ff50
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008ff75
mov eax, dword [esp + 0xc]
mov ecx, dword [esi + 4]
inc dword [esi + 0x1c]
mov edx, dword [esp + 0x28]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov byte [eax], 0xe
mov byte [eax + 3], bl
mov dword [eax + 4], ebx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x40], eax
jg 0x1008ff94
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008ffbe
mov eax, dword [esp + 0x18]
mov edx, dword [esi + 4]
mov ecx, 1
add dword [esi + 0x1c], ecx
lea eax, [eax + eax*4]
lea eax, [edx + eax*4]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x64]
mov byte [eax], 0x15
mov byte [eax + 3], bl
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0xc], eax
jg 0x1008ffd9
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1008fffe
mov eax, dword [esp + 0xc]
inc dword [esi + 0x1c]
mov ecx, dword [esp + 0x6c]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov byte [eax], 0x10
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
or eax, 0xffffffff
sub eax, dword [esp + 0x58]
js 0x10090014
mov ecx, dword [esi + 0x28]
cmp ecx, ebx
je 0x10090014
mov edx, dword [esi + 0x1c]
mov dword [ecx + eax*4], edx
mov edi, dword [esi + 0x1c]
cmp dword [esi + 0x20], edi
mov dword [esp + 0x18], edi
jg 0x1009002f
mov edi, esi
call fcn.1005b630
mov edi, dword [esp + 0x18]
test eax, eax
jne 0x10090057
mov ecx, dword [esi + 4]
inc dword [esi + 0x1c]
mov edx, dword [esp + 0x30]
lea eax, [edi + edi*4]
lea eax, [ecx + eax*4]
lea ecx, [edi + 2]
mov byte [eax], 0x7e
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov dword [esp + 0xc], eax
jg 0x10090076
mov edi, esi
call fcn.1005b630
mov edi, dword [esp + 0x18]
test eax, eax
jne 0x1009009b
mov eax, dword [esp + 0xc]
inc dword [esi + 0x1c]
mov ecx, dword [esp + 0x6c]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
lea eax, [eax + edx*4]
mov byte [eax], 0x10
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov eax, dword [ebp + 8]
lea edx, [esp + 0x74]
push edx
call fcn.1008e3f0
mov eax, dword [esp + 0x38]
mov ecx, dword [ebp + 8]
add esp, 4
push 8
inc edi
push edi
push eax
push ecx
call fcn.1006efb0
mov edx, dword [esp + 0x50]
mov eax, dword [ebp + 0x10]
push edx
mov edx, dword [esp + 0x38]
push edi
push eax
mov eax, dword [ebp + 0xc]
lea ecx, [esp + 0xbc]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [ebp + 8]
push ebx
push ebx
push ecx
push eax
push edx
call fcn.100889d0
mov eax, dword [esi + 0x1c]
add esp, 0x38
cmp dword [esi + 0x20], eax
mov dword [esp + 0xc], eax
jg 0x10090104
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x10090129
mov eax, dword [esp + 0xc]
mov ecx, dword [esi + 4]
inc dword [esi + 0x1c]
mov edx, dword [esp + 0x6c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov byte [eax], 0x10
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
or eax, 0xffffffff
sub eax, dword [esp + 0x20]
js 0x1009013f
mov ecx, dword [esi + 0x28]
cmp ecx, ebx
je 0x1009013f
mov edx, dword [esi + 0x1c]
mov dword [ecx + eax*4], edx
mov ecx, dword [ebp + 8]
lea eax, [esp + 0x74]
push eax
push ecx
call fcn.1008e1f0
mov eax, dword [esi + 0x1c]
add esp, 8
cmp dword [esi + 0x20], eax
mov dword [esp + 0xc], eax
jg 0x10090171
mov edi, esi
call fcn.1005b630
mov esi, dword [esp + 0x4c]
test eax, eax
jne 0x100904be
xor ebx, ebx
inc dword [esi + 0x1c]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
lea edx, [eax + eax*4]
mov eax, dword [esi + 4]
mov esi, dword [esp + 0x4c]
lea eax, [eax + edx*4]
mov byte [eax], 0x10
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
jmp 0x100904be
mov eax, dword [ebp + 0xc]
lea ecx, [esp + 0x74]
mov dword [esp + 0x30], edi
call fcn.1008d360
mov ebx, eax
mov dword [esp + 0xc], ebx
cmp ebx, edi
je 0x10090344
mov edi, dword [ebp + 8]
mov esi, dword [ebx + 0x40]
mov ecx, dword [edi]
call fcn.100876d0
mov ecx, dword [edi + 0x48]
mov dword [esp + 0x20], ecx
inc ecx
mov dword [edi + 0x48], ecx
mov edx, dword [ebx + 0x20]
mov dword [esp + 0x58], eax
xor esi, esi
push eax
mov eax, edi
mov dword [esp + 0x20], esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x68], edx
call fcn.10077be0
mov eax, dword [ebx]
mov ecx, dword [ebx + 0x20]
mov edx, dword [esp + 0x5c]
add esp, 4
push eax
push esi
push ecx
push edx
mov eax, edi
call fcn.10072e20
mov eax, dword [ebx + 8]
add esp, 0x10
test eax, eax
je 0x1009025d
test byte [eax + 0x30], 4
jne 0x1009022d
test esi, esi
je 0x1009022b
mov cx, word [eax + 0x2c]
cmp cx, word [esi + 0x2c]
jae 0x1009022d
mov esi, eax
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x10090217
mov dword [esp + 0x68], esi
test esi, esi
je 0x1009025d
movzx edx, word [esi + 0x2c]
movsx eax, word [ebx + 0x26]
cmp edx, eax
jge 0x1009025d
mov ecx, dword [esi + 0x28]
push esi
push edi
mov dword [esp + 0x6c], ecx
call fcn.10078130
add esp, 8
mov dword [esp + 0x1c], eax
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x4c]
push edx
push eax
push ecx
push 0x30
mov eax, esi
call fcn.1005b6b0
add esp, 0x10
cmp dword [esp + 0x1c], 0
je 0x100902c8
mov ecx, dword [esi + 4]
mov edi, dword [esi]
test ecx, ecx
je 0x100902ba
cmp byte [edi + 0x40], 0
jne 0x100902ba
mov eax, dword [esi + 0x1c]
dec eax
lea edx, [eax + eax*4]
movsx eax, byte [ecx + edx*4 + 1]
lea ebx, [ecx + edx*4]
mov ecx, dword [ebx + 0x10]
call fcn.1005bc70
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x10], eax
mov byte [ebx + 1], 0xfa
mov ebx, dword [esp + 0xc]
jmp 0x100902c8
mov ecx, dword [esp + 0x1c]
mov eax, 0xfffffff0
call fcn.1005bc70
mov ecx, dword [esp + 0x94]
mov eax, dword [esi + 0x1c]
cmp dword [esi + 0x20], eax
mov edx, dword [ecx + 8]
mov dword [esp + 0x40], edx
mov dword [esp + 0xc], eax
jg 0x100902ed
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x1009031d
mov ecx, dword [esi + 4]
inc dword [esi + 0x1c]
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x20]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
xor ecx, ecx
mov byte [eax], 0x2c
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov edx, dword [esp + 0x20]
push edx
push 0x36
mov eax, esi
call fcn.1005b760
mov eax, dword [esp + 0x70]
mov ecx, dword [ebp + 8]
push ebx
call fcn.1008e930
mov esi, dword [esp + 0x58]
add esp, 0xc
jmp 0x10090474
mov eax, dword [ebp + 0xc]
xor bl, bl
cmp dword [eax + 0x34], 0
mov dword [esp + 0x20], edi
jne 0x100903a8
lea edi, [esp + 0x20]
lea eax, [esp + 0x74]
call fcn.1008d2e0
mov bl, al
test bl, bl
je 0x100903a4
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x38]
push 0
push ecx
push edx
call fcn.1006b1d0
mov edi, eax
add esp, 0xc
mov dword [esp + 0x30], edi
test edi, edi
je 0x100903a8
mov eax, dword [esp + 0x38]
cmp byte [eax + 0x40], 0
jne 0x100903a8
mov edx, dword [edi + 8]
cmp bl, 1
setne cl
mov byte [edx + 0xc], cl
mov eax, dword [edi + 8]
mov ecx, dword [eax]
mov byte [ecx], 0x98
jmp 0x100903a8
mov edi, dword [esp + 0x20]
mov eax, dword [ebp + 8]
lea edx, [esp + 0x74]
push edx
push eax
call fcn.1008e1f0
mov eax, dword [esp + 0x44]
movzx cx, bl
push 0
movzx edx, cx
mov ecx, dword [esp + 0x50]
push edx
mov edx, dword [ebp + 8]
push 0
push edi
push eax
push ecx
push edx
call fcn.1009c5d0
mov edi, eax
add esp, 0x24
mov dword [esp + 0x70], edi
test edi, edi
jne 0x100903fa
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x38]
push eax
push ecx
call fcn.1006b950
add esp, 8
jmp 0x1009053a
mov eax, dword [ebp + 8]
lea edx, [esp + 0x74]
push edx
push eax
call fcn.1008e510
add esp, 8
cmp byte [edi + 0x24], 0
je 0x10090457
mov ecx, dword [esp + 0x70]
mov ebx, dword [esi + 0x1c]
cmp dword [esi + 0x20], ebx
mov edx, dword [ecx + 0x34]
mov dword [esp + 0xc], edx
jg 0x1009042f
mov edi, esi
call fcn.1005b630
test eax, eax
jne 0x10090457
mov ecx, dword [esi + 4]
inc dword [esi + 0x1c]
mov edx, dword [esp + 0xc]
lea eax, [ebx + ebx*4]
lea eax, [ecx + eax*4]
xor ecx, ecx
mov byte [eax], 0xe
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov eax, dword [esp + 0x70]
push eax
call fcn.1009ce50
mov eax, dword [ebp + 8]
lea ecx, [esp + 0x78]
add esp, 4
push ecx
call fcn.1008e3f0
add esp, 4
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x34]
mov ebx, dword [ebp + 8]
push 8
push edi
push edx
push ebx
mov dword [esp + 0x34], 0
call fcn.1006efb0
mov eax, dword [ebp + 0x10]
push edi
push edi
push eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push 0
push 0
push 0
push 0
push ecx
push eax
push ebx
call fcn.100889d0
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x70]
push edx
push eax
call fcn.1006b950
add esp, 0x40
or eax, 0xffffffff
sub eax, dword [esp + 0x28]
js 0x100904d4
mov ecx, dword [esi + 0x28]
test ecx, ecx
je 0x100904d4
mov edx, dword [esi + 0x1c]
mov dword [ecx + eax*4], edx
cmp byte [esp + 0xa1], 3
mov edi, dword [ebp + 8]
jne 0x100904ed
mov eax, str.DISTINCT
mov ecx, edi
call fcn.10089360
cmp dword [esp + 0x24], 0
je 0x10090519
mov eax, str.ORDER_BY
mov ecx, edi
call fcn.10089360
mov eax, dword [ebp + 0x10]
mov ecx, dword [esp + 0x60]
mov edx, dword [ecx]
push eax
mov eax, dword [ebp + 0xc]
push edx
push esi
push eax
push edi
call fcn.10089570
add esp, 0x14
or eax, 0xffffffff
sub eax, dword [esp + 0xe4]
js 0x10090532
mov ecx, dword [esi + 0x28]
test ecx, ecx
je 0x10090532
mov edx, dword [esi + 0x1c]
mov dword [ecx + eax*4], edx
mov dword [esp + 0x50], 0
mov ebx, dword [ebp + 8]
mov edi, dword [esp + 0x50]
mov eax, dword [esp + 0xc0]
mov dword [ebx + 0x1e4], eax
test edi, edi
jne 0x1009056d
mov ecx, dword [ebp + 0x10]
cmp byte [ecx], 5
jne 0x1009056d
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x44]
push edx
push eax
push ebx
call fcn.10089f20
add esp, 0xc
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x88]
mov ecx, esi
call fcn.1003fe10
mov eax, dword [esp + 0x94]
mov ecx, esi
call fcn.1003fe10
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret