Function at 0x465e40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x138
push esi
push edi
mov edi, ecx
mov esi, edx
mov eax, dword [edi + 0x1d0]
mov dword [esp + 0xfc], eax
mov eax, dword [edi + 0x1d4]
mov dword [edi + 0x1d0], eax
inc eax
mov dword [edi + 0x1d4], eax
mov eax, dword [edi]
mov dword [esp + 0x28], esi
mov dword [esp + 0x30], edi
mov dword [esp + 0x74], 1
mov dword [esp + 0x34], eax
test esi, esi
je 0x46827b
cmp byte [eax + 0x40], 0
jne 0x46827b
cmp dword [edi + 0x40], 0
jne 0x46827b
push 0
push 0
push 0
mov edx, 0x15
call fcn.00442c30
add esp, 0xc
test eax, eax
jne 0x46827b
push 0x30
push eax
lea eax, [esp + 0xd4]
push eax
call fcn.004a9520
mov eax, dword [ebp + 8]
add esp, 0xc
cmp byte [eax], 8
ja 0x465ef6
mov edx, dword [esi + 0x30]
mov ecx, dword [esp + 0x34]
call fcn.0043b1e0
mov eax, 0xfffe
and word [esi + 6], ax
mov dword [esi + 0x30], 0
push 0
mov edx, esi
mov ecx, edi
call fcn.004653f0
mov eax, dword [esi + 0x30]
mov edx, dword [esi]
xorps xmm0, xmm0
movdqa xmmword [esp + 0xa4], xmm0
mov dword [esp + 0x44], eax
mov dword [esp + 0xa4], eax
mov eax, dword [esi + 0x20]
add esp, 4
cmp dword [edi + 0x40], 0
movq qword [esp + 0xb0], xmm0
mov dword [esp + 0xb8], 0
mov dword [esp + 0x3c], eax
mov dword [esp + 0x58], edx
jne 0x46818a
mov eax, dword [esp + 0x34]
cmp byte [eax + 0x40], 0
jne 0x468193
movzx eax, word [esi + 6]
shr eax, 2
and eax, 1
mov ecx, edi
mov dword [esp + 0x70], eax
call fcn.0045fbc0
mov esi, eax
mov dword [esp + 0x94], esi
test esi, esi
je 0x465fa8
mov ecx, dword [esp + 0x58]
mov edx, dword [ebp + 8]
cmp dword [ecx], 1
movzx eax, byte [edx]
jle 0x466025
cmp eax, 0xa
je 0x465f9a
cmp eax, 0xb
jne 0x466025
push str.only_a_single_result_allowed_for_a_SELECT_that_is_part_of_an_expression
push edi
call fcn.0040ccf0
add esp, 8
mov esi, dword [esp + 0x34]
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x3c]
cmp dword [esp + 0x74], 0
mov ecx, dword [esp + 0xfc]
mov dword [edi + 0x1d0], ecx
jne 0x465fdd
mov ecx, dword [ebp + 8]
cmp byte [ecx], 9
jne 0x465fdd
push edx
mov edx, eax
mov ecx, edi
call fcn.0045f380
add esp, 4
mov ecx, dword [esp + 0xe8]
test ecx, ecx
je 0x4681dd
cmp dword [esi + 0x200], 0
je 0x4681ae
cmp ecx, dword [esi + 0x10c]
jb 0x46819a
cmp ecx, dword [esi + 0x110]
jae 0x46819a
movzx eax, word [esi + 0xf0]
mov ecx, dword [esi + 0x200]
add dword [ecx], eax
jmp 0x4681dd
mov eax, dword [esp + 0x28]
xor ecx, ecx
mov dword [esp + 0x5c], ecx
cmp dword [eax + 0x34], ecx
jne 0x46609c
mov edx, dword [esp + 0x3c]
cmp ecx, dword [edx]
jge 0x466099
lea eax, [ecx + ecx*4]
add edx, 8
shl eax, 4
add eax, edx
mov dword [esp + 0x24], eax
mov edx, dword [eax + 0x14]
mov dword [esp + 0x60], edx
test edx, edx
je 0x466388
mov edx, dword [eax + 0x18]
test edx, edx
je 0x4660f5
test byte [eax + 0x28], 4
jne 0x466388
push edx
push dword [eax + 0x1c]
mov edx, 0x11
mov ecx, esi
call fcn.00427e40
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x44]
add esp, 8
mov ecx, dword [esp + 0x5c]
inc ecx
cmp dword [eax + 0x34], 0
mov dword [esp + 0x5c], ecx
je 0x466038
mov edx, dword [ebp + 8]
mov ecx, dword [eax]
mov dword [esp + 0x58], ecx
mov ecx, dword [eax + 0x24]
mov dword [esp + 0x7c], ecx
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 0x2c]
mov dword [esp + 0x88], ecx
mov cl, byte [eax + 6]
and cl, 1
cmp dword [eax + 0x34], 0
mov byte [esp + 0x17], cl
mov byte [esp + 0x100], cl
je 0x466395
push edx
mov edx, eax
mov ecx, edi
call fcn.004608d0
mov ecx, dword [esp + 0x100]
add esp, 4
mov dword [edi + 0x1d0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x28]
call fcn.00439e10
add dword [edi + 0x1cc], eax
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x28]
movzx eax, word [eax + 6]
shr eax, 2
and eax, 1
push eax
push dword [esp + 0x74]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x64]
push eax
mov ecx, edi
call fcn.00463880
add esp, 0xc
test eax, eax
je 0x466156
cmp dword [esp + 0x18], 0
je 0x46614a
mov eax, dword [esp + 0x28]
mov dword [esp + 0x70], 1
or word [eax + 6], 4
or eax, 0xffffffff
mov dword [esp + 0x5c], eax
jmp 0x466341
mov eax, dword [esp + 0x3c]
cmp dword [eax], 1
jne 0x46623e
mov eax, dword [esp + 0x34]
mov ecx, 0x100
test word [eax + 0x3c], cx
jne 0x46623e
mov ecx, dword [esp + 0x30]
mov edi, dword [esi + 0x20]
mov eax, dword [ecx + 0x48]
inc eax
mov dword [ecx + 0x48], eax
mov ecx, dword [esp + 0x24]
inc edi
push edi
mov dword [ecx + 0x1c], eax
push 0
push eax
mov edx, 0x14
mov ecx, esi
call fcn.00427d20
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x3c]
mov eax, dword [edx + 0x1c]
mov dword [edx + 0x18], edi
mov dword [esp + 0x11c], eax
mov al, byte [ecx + 0x1d4]
mov word [esp + 0x118], 0xd
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0
mov byte [edx + 0x2c], al
mov edx, dword [esp + 0x6c]
add esp, 0xc
lea eax, [esp + 0x10c]
push eax
call fcn.00465e40
mov eax, dword [esp + 0x64]
add esp, 4
push dword [eax + 0x1c]
push dword [eax + 0x18]
call fcn.0040dfa0
mov edx, dword [esp + 0x2c]
mov ecx, dword [edx + 0x10]
mov word [ecx + 0x1c], ax
or dword [edx + 0x28], 4
mov eax, dword [esp + 0x11c]
push dword [edx + 0x1c]
mov dword [edx + 0x20], eax
mov edx, 0x15
mov ecx, esi
call fcn.00427de0
add esp, 0xc
lea edx, [edi - 1]
mov ecx, esi
call fcn.004283d0
mov edi, dword [esp + 0x30]
jmp 0x466336
mov ecx, dword [esp + 0x24]
xor eax, eax
mov dword [esp + 0x88], eax
mov eax, dword [edi + 0x48]
inc eax
mov dword [edi + 0x48], eax
push eax
mov dword [ecx + 0x1c], eax
push 0
mov edx, 0x19
mov ecx, esi
call fcn.00427e40
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x20], eax
inc eax
add esp, 8
test byte [edx + 0x28], 2
mov dword [edx + 0x18], eax
jne 0x46628b
mov ecx, edi
call fcn.0043b580
mov edx, dword [esp + 0x24]
mov dword [esp + 0x88], eax
mov ecx, dword [edx + 0x30]
mov dword [esp + 0x110], ecx
mov cl, byte [edi + 0x1d4]
mov word [esp + 0x10c], 0xc
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov byte [edx + 0x2c], cl
mov edx, dword [esp + 0x60]
lea eax, [esp + 0x10c]
push eax
mov ecx, edi
call fcn.00465e40
mov eax, dword [esp + 0x64]
add esp, 4
push dword [eax + 0x1c]
push dword [eax + 0x18]
call fcn.0040dfa0
mov ecx, dword [esp + 0x2c]
add esp, 8
mov ecx, dword [ecx + 0x10]
mov word [ecx + 0x1c], ax
mov eax, dword [esp + 0x88]
test eax, eax
je 0x466305
mov edx, eax
mov ecx, esi
call fcn.004283d0
mov eax, dword [esp + 0x24]
mov edx, 0x12
push dword [eax + 0x1c]
mov ecx, esi
call fcn.00427de0
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x1c]
add esp, 4
cmp dword [esi + 0x20], eax
jbe 0x466336
mov ecx, dword [esi + 4]
lea edx, [eax + eax*4]
mov eax, dword [esp + 0x20]
mov dword [ecx + edx*4 + 4], eax
mov dword [edi + 0x38], 0
mov byte [edi + 0x13], 0
mov eax, dword [esp + 0x34]
cmp byte [eax + 0x40], 0
jne 0x468183
mov ecx, dword [esp + 0x28]
call fcn.00439e10
sub dword [edi + 0x1cc], eax
mov eax, dword [esp + 0x28]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x20]
cmp byte [ecx], 8
mov dword [esp + 0x3c], edx
jbe 0x46608a
mov ecx, dword [eax + 0x30]
mov dword [esp + 0x40], ecx
mov dword [esp + 0xa0], ecx
jmp 0x46608a
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x3c]
jmp 0x46608e
mov al, byte [eax + 6]
and al, 5
cmp al, 1
jne 0x4664e6
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x40]
push 0xffffffffffffffff
call fcn.0043efc0
add esp, 4
test eax, eax
jne 0x4664e6
mov eax, dword [esp + 0x28]
mov ecx, 0xfffe
and word [eax + 6], cx
mov edx, dword [eax]
mov ecx, dword [esp + 0x34]
push 0
call fcn.0043a9e0
mov edx, eax
mov eax, dword [esp + 0x2c]
add esp, 4
mov dword [eax + 0x28], edx
xor eax, eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x40], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xb4], 0xffffffff
mov eax, dword [ebp + 8]
cmp byte [eax], 0xc
jne 0x46641e
mov ecx, dword [esp + 0x58]
mov edx, 0x37
push dword [ecx]
mov ecx, esi
push dword [eax + 4]
call fcn.00427e40
add esp, 8
mov ecx, esi
call fcn.004280d0
mov ecx, eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x9c], ecx
push ecx
mov edx, eax
mov ecx, edi
mov dword [eax + 0x18], 0xffffffff
mov dword [eax + 0x1c], SysReAllocString
call fcn.0045fc10
mov edx, dword [esp + 0x2c]
add esp, 4
cmp dword [edx + 8], 0
jne 0x46647a
mov eax, dword [esp + 0xb4]
test eax, eax
js 0x46647a
mov edx, eax
mov ecx, esi
call fcn.00428670
or byte [esp + 0xb8], 1
mov edx, dword [esp + 0x28]
mov byte [eax], 0x38
test byte [edx + 6], 1
je 0x46653a
mov edi, dword [edi + 0x44]
mov ecx, dword [esp + 0x30]
push 0xfffffffffffffffa
push ecx
lea eax, [edi + 1]
mov dword [ecx + 0x44], eax
mov edx, dword [edx]
push 0
push 0
mov dword [esp + 0x114], edi
call fcn.0045e510
add esp, 0xc
mov edx, 0x37
push eax
push 0
push 0
push edi
mov ecx, esi
call fcn.00427eb0
mov ecx, dword [esi + 4]
add esp, 0x14
mov dword [esp + 0x108], eax
test ecx, ecx
je 0x4664d7
mov eax, dword [esi + 0x20]
lea eax, [eax + eax*4]
mov byte [ecx + eax*4 - 0x11], 8
mov edi, dword [esp + 0x30]
mov edx, dword [esp + 0x28]
mov eax, 3
jmp 0x46653c
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4663f3
push 0
push 0
mov edx, eax
mov ecx, edi
call fcn.0045e510
mov edx, dword [edi + 0x44]
push 0xfffffffffffffffa
push eax
mov eax, dword [esp + 0x50]
lea ecx, [edx + 1]
mov dword [edi + 0x44], ecx
mov eax, dword [eax]
push 0
add eax, 2
push eax
mov dword [esp + 0xc0], edx
push edx
mov edx, 0x37
mov ecx, esi
call fcn.00427eb0
add esp, 0x1c
mov dword [esp + 0xb4], eax
jmp 0x4663fe
xor al, al
cmp dword [esp + 0x70], 0
mov byte [esp + 0x101], al
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x24]
jne 0x46665f
test eax, eax
jne 0x46665f
cmp byte [esp + 0x17], al
push eax
mov ecx, 0x400
cmovne eax, ecx
movzx eax, ax
push eax
push dword [edx]
mov edx, dword [esp + 0x48]
push dword [esp + 0x4c]
mov ecx, edi
push dword [esp + 0x8c]
call fcn.00479d20
add esp, 0x14
mov dword [esp + 0x54], eax
test eax, eax
je 0x465fa8
mov cx, word [eax + 0x20]
call fcn.0040e050
mov ecx, eax
mov eax, dword [esp + 0x28]
cmp edx, dword [eax + 0x1c]
ja 0x4665b7
jb 0x4665b1
cmp ecx, dword [eax + 0x18]
jae 0x4665b7
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], edx
cmp byte [esp + 0x17], 0
mov edx, dword [esp + 0x54]
je 0x4665e7
mov eax, dword [esp + 0x60]
mov cl, byte [edx + 0x28]
movzx eax, al
mov dword [esp + 0x60], eax
movzx eax, cl
test cl, cl
mov ecx, dword [esp + 0x60]
cmovne ecx, eax
mov dword [esp + 0x60], ecx
mov byte [esp + 0x101], cl
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x466608
movsx eax, byte [edx + 0x24]
xor edx, edx
cmp eax, dword [ecx]
mov dword [esp + 0xa4], eax
cmove ecx, edx
mov dword [esp + 0xa0], ecx
mov eax, dword [esp + 0xb4]
test eax, eax
js 0x466620
test ecx, ecx
jne 0x466620
mov edx, eax
mov ecx, esi
call fcn.004284e0
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x28]
push dword [eax + 0x34]
mov ecx, edi
push dword [eax + 0x30]
lea eax, [esp + 0x108]
push dword [ebp + 8]
push eax
lea eax, [esp + 0xb0]
push eax
push 0xffffffffffffffff
push dword [esp + 0x70]
call fcn.0045d700
mov ecx, dword [esp + 0x70]
add esp, 0x1c
call fcn.0047a740
jmp 0x4680e8
mov dword [esp + 0x6c], 0
mov dword [esp + 0x2c], 0
test eax, eax
je 0x466764
mov eax, dword [edx]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test ecx, ecx
jle 0x466699
add eax, 0x16
xor esi, esi
dec ecx
mov word [eax], si
lea eax, [eax + 0x18]
test ecx, ecx
jg 0x466685
mov esi, dword [esp + 0x94]
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
test eax, eax
jle 0x4666c1
add ecx, 0x16
lea esp, [esp]
xor edi, edi
dec eax
mov word [ecx], di
lea ecx, [ecx + 0x18]
test eax, eax
jg 0x4666b0
mov edi, dword [esp + 0x30]
cmp dword [edx + 0x1c], 0
ja 0x4666cd
cmp dword [edx + 0x18], 0x64
jbe 0x4666db
mov dword [edx + 0x18], 0x64
mov dword [edx + 0x1c], 0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x40]
push 0xffffffffffffffff
mov ecx, eax
call fcn.0043efc0
add esp, 4
test eax, eax
mov ecx, 1
mov eax, 0
cmove eax, ecx
mov ecx, esi
mov dword [esp + 0x20], eax
call fcn.004280d0
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x3c]
xorps xmm0, xmm0
movdqa xmmword [esp + 0x120], xmm0
mov dword [esp + 0x124], eax
lea eax, [esp + 0xcc]
mov dword [esp + 0x12c], eax
mov eax, dword [edi + 0x48]
inc eax
movdqa xmmword [esp + 0x130], xmm0
mov dword [esp + 0x120], edi
mov dword [esp + 0xdc], eax
test ecx, ecx
je 0x466777
mov eax, dword [ecx]
inc eax
mov dword [esp + 0xd8], eax
jmp 0x466782
mov dword [edx + 0x18], 1
mov dword [edx + 0x1c], 0
jmp 0x4666df
mov dword [esp + 0xd8], 0
mov edx, dword [esp + 0x58]
mov dword [esp + 0xe4], ecx
lea ecx, [esp + 0x120]
call fcn.0043f510
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0x120]
call fcn.0043f510
mov eax, dword [esp + 0x88]
test eax, eax
je 0x4667c2
mov edx, eax
lea ecx, [esp + 0x120]
call fcn.0043f4d0
cmp dword [esp + 0xf8], 0
mov eax, dword [esp + 0xec]
mov dword [esp + 0xf0], eax
jle 0x46683a
mov al, byte [esp + 0x13c]
xor edi, edi
xor esi, esi
jmp 0x4667f0
or al, 8
mov byte [esp + 0x13c], al
mov eax, dword [esp + 0xf4]
lea ecx, [esp + 0x120]
mov edx, dword [edi + eax]
mov edx, dword [edx + 0x14]
call fcn.0043f510
mov al, byte [esp + 0x13c]
and al, 0xf7
inc esi
mov byte [esp + 0x13c], al
lea edi, [edi + 0x10]
cmp esi, dword [esp + 0xf8]
jl 0x4667f0
mov esi, dword [esp + 0x94]
mov edi, dword [esp + 0x30]
mov eax, dword [edi + 0x48]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x34]
cmp byte [eax + 0x40], 0
jne 0x468183
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x467d25
mov eax, dword [edi + 0x44]
mov dword [esp + 0xd0], eax
inc eax
push 0
mov edx, ecx
push 0
mov ecx, edi
mov dword [edi + 0x44], eax
call fcn.0045e510
mov edx, eax
push 0xfffffffffffffffa
push edx
push 0
push dword [esp + 0xec]
mov dword [esp + 0x98], edx
push dword [esp + 0xe8]
mov edx, 0x38
mov ecx, esi
call fcn.00427eb0
inc dword [edi + 0x48]
mov dword [esp + 0x34], eax
mov eax, dword [edi + 0x48]
mov dword [esp + 0xac], eax
add eax, 2
add esp, 0x1c
mov ecx, esi
mov dword [esp + 0x54], eax
mov dword [edi + 0x48], eax
call fcn.004280d0
inc dword [edi + 0x48]
mov dword [esp + 0x84], eax
mov eax, dword [edi + 0x48]
mov ecx, esi
mov dword [esp + 0x64], eax
call fcn.004280d0
mov edx, dword [edi + 0x48]
mov dword [esp + 0x68], eax
lea eax, [edx + 1]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x24]
add edx, dword [eax]
mov dword [edi + 0x48], edx
lea ecx, [edx + 1]
mov dword [esp + 0x70], ecx
mov ecx, dword [eax]
add ecx, edx
mov dword [edi + 0x48], ecx
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x18]
mov dword [esp + 0x38], ecx
cmp dword [eax + 0x54], ecx
jg 0x466924
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x466960
mov ecx, dword [esp + 0x38]
inc dword [esi + 0x20]
mov eax, dword [esi + 4]
mov edx, dword [esp + 0x90]
mov edi, dword [esp + 0x30]
lea ecx, [ecx + ecx*4]
inc edx
mov word [eax + ecx*4], 0x19
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x18]
mov dword [esp + 0x38], ecx
cmp dword [eax + 0x54], ecx
jg 0x46697e
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x4669b5
mov ecx, dword [esp + 0x38]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x90]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0x19
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x98]
mov eax, dword [eax]
dec ecx
add eax, ecx
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x78], eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0x38], ecx
cmp dword [eax + 0x54], ecx
jg 0x4669e7
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x466a1e
mov ecx, dword [esp + 0x38]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x98]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x78]
mov word [eax + ecx*4], 0x1c
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x18]
mov dword [esp + 0x38], ecx
cmp dword [eax + 0x54], ecx
jg 0x466a3c
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x466a70
mov ecx, dword [esp + 0x38]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x64]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x68]
mov word [eax + ecx*4], 0x11
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x3c]
neg eax
sbb eax, eax
and eax, 0x800
mov ecx, 0x100
or ax, cx
push 0
movzx eax, ax
push eax
push 0
push dword [esp + 0x30]
mov ecx, edi
push dword [esp + 0x8c]
call fcn.00479d20
mov edx, eax
add esp, 0x14
mov dword [esp + 0x7c], edx
test edx, edx
je 0x465fa8
movsx ecx, byte [edx + 0x24]
mov eax, dword [esp + 0x24]
cmp ecx, dword [eax]
jne 0x466acb
xor ecx, ecx
mov dword [esp + 0x78], ecx
jmp 0x466f11
cmp byte [esp + 0x17], 0
je 0x466ae1
mov eax, dword [esp + 0x28]
mov edx, str.DISTINCT
test byte [eax + 6], 1
je 0x466ae6
mov edx, str.GROUP_BY
mov ecx, edi
call fcn.0045e630
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0xec]
mov eax, dword [eax]
mov dword [esp + 0x6c], eax
inc eax
mov dword [esp + 0x78], 1
mov dword [esp + 0x74], eax
mov dword [esp + 0x5c], eax
mov ecx, eax
test edx, edx
jle 0x466b2f
mov eax, dword [esp + 0xe8]
add eax, 0xc
nop
cmp dword [eax], ecx
jl 0x466b29
inc dword [esp + 0x5c]
inc ecx
add eax, 0x18
dec edx
jne 0x466b20
mov ecx, dword [edi + 0x38]
mov edx, dword [esp + 0x5c]
mov eax, dword [edi + 0x3c]
mov dword [esp + 0x40], eax
cmp edx, ecx
jg 0x466b4d
add eax, edx
sub ecx, edx
mov dword [edi + 0x3c], eax
mov dword [edi + 0x38], ecx
jmp 0x466b5c
mov eax, dword [edi + 0x48]
lea ecx, [eax + 1]
add eax, edx
mov dword [esp + 0x40], ecx
mov dword [edi + 0x48], eax
mov ecx, edi
call fcn.0043ce00
mov edx, dword [esp + 0x40]
push 0
push edx
mov edx, dword [esp + 0x2c]
call fcn.0043e3d0
mov eax, dword [esp + 0xd8]
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x34], eax
mov eax, dword [esi + 0x18]
add esp, 8
mov dword [esp + 0x38], ecx
cmp dword [eax + 0x54], ecx
jg 0x466b9f
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x466bd8
mov ecx, dword [esp + 0x38]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x40]
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x2c]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x6c]
add eax, edx
mov word [ecx], 0x44
mov byte [ecx + 3], 0
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
jmp 0x466bdc
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0xec]
mov dword [esp + 0x38], 0
test ecx, ecx
jle 0x466cd8
add edx, dword [esp + 0x74]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x6c], edx
jmp 0x466c10
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0xe8]
mov esi, dword [esp + 0x74]
cmp dword [edi + eax + 0xc], esi
mov esi, dword [esp + 0x94]
mov edi, dword [esp + 0x30]
jl 0x466cc2
mov ecx, dword [esp + 0x2c]
push 0
push edx
push dword [ecx + eax + 4]
mov edx, dword [ecx + eax]
push dword [ecx + eax + 8]
mov ecx, edi
call fcn.0043cd50
mov edx, dword [esp + 0x7c]
add esp, 0x10
mov dword [esp + 0x10], eax
cmp edx, eax
je 0x466cb2
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x1c], eax
cmp dword [ecx + 0x54], eax
jg 0x466c7e
mov ecx, esi
call fcn.00427ca0
mov edx, dword [esp + 0x6c]
test eax, eax
jne 0x466cb2
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
mov edi, dword [esp + 0x10]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x30]
mov word [eax + ecx*4], 0x22
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
inc dword [esp + 0x74]
mov ecx, dword [esp + 0xec]
inc edx
mov dword [esp + 0x6c], edx
mov eax, dword [esp + 0x38]
add dword [esp + 0x2c], 0x18
inc eax
mov dword [esp + 0x38], eax
cmp eax, ecx
jl 0x466c10
mov al, byte [edi + 0x13]
test al, al
jne 0x466ceb
inc dword [edi + 0x48]
mov ecx, dword [edi + 0x48]
mov dword [esp + 0x2c], ecx
jmp 0x466cfb
dec al
mov byte [edi + 0x13], al
movzx eax, al
mov eax, dword [edi + eax*4 + 0x18]
mov dword [esp + 0x2c], eax
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x54], ecx
jg 0x466d19
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x466d4d
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x40]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x5c]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x2c]
mov word [eax + ecx*4], 0x30
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x54], ecx
jg 0x466d76
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x466dac
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x1c]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x2c]
mov word [eax + ecx*4], 0x6a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x466db0
mov edx, dword [esp + 0x2c]
test edx, edx
je 0x466de4
mov al, byte [edi + 0x13]
mov byte [esp + 0x17], al
cmp al, 8
jae 0x466de4
xor ecx, ecx
lea eax, [edi + 0x74]
cmp dword [eax + 0xc], edx
je 0x466de0
inc ecx
add eax, 0x14
cmp ecx, 0xa
jl 0x466dc4
movzx eax, byte [esp + 0x17]
mov dword [edi + eax*4 + 0x18], edx
inc byte [edi + 0x13]
jmp 0x466de4
mov byte [eax + 6], 1
push dword [esp + 0x5c]
mov edx, dword [esp + 0x44]
mov ecx, edi
call fcn.0043cab0
mov eax, dword [esp + 0x60]
add esp, 4
cmp eax, dword [edi + 0x38]
jle 0x466e09
mov dword [edi + 0x38], eax
mov eax, dword [esp + 0x40]
mov dword [edi + 0x3c], eax
mov ecx, dword [esp + 0x7c]
call fcn.0047a740
mov eax, dword [edi + 0x44]
mov dword [esp + 0x6c], eax
mov dword [esp + 0xd4], eax
inc eax
mov dword [edi + 0x44], eax
mov al, byte [edi + 0x13]
test al, al
jne 0x466e37
inc dword [edi + 0x48]
mov edx, dword [edi + 0x48]
mov dword [esp + 0x2c], edx
jmp 0x466e47
dec al
mov byte [edi + 0x13], al
movzx eax, al
mov eax, dword [edi + eax*4 + 0x18]
mov dword [esp + 0x2c], eax
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x54], ecx
jg 0x466e65
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x466e99
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x6c]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x5c]
mov word [eax + ecx*4], 0x39
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x54], ecx
jg 0x466ec2
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x466ef9
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x1c]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x8c]
mov word [eax + ecx*4], 0x67
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, edi
mov byte [esp + 0xcd], 1
call fcn.0043ce00
mov edx, dword [esp + 0x7c]
mov ecx, 1
cmp dword [esp + 0x20], 0
je 0x466f44
mov eax, dword [esp + 0x34]
test byte [eax + 0x3c], 4
jne 0x466f44
test ecx, ecx
jne 0x466f2b
cmp byte [edx + 0x25], cl
je 0x466f44
mov edx, dword [esp + 0xb4]
mov ecx, esi
mov dword [esp + 0xa0], 0
call fcn.004284e0
mov eax, dword [esi + 0x20]
mov ecx, edi
mov dword [esp + 0x94], eax
call fcn.0043ce00
mov eax, dword [esp + 0x78]
test eax, eax
je 0x466fbe
mov eax, dword [esp + 0xd0]
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x54], ecx
jg 0x466f86
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x466fba
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x1c]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x2c]
mov word [eax + ecx*4], 0x5f
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x24]
xor edx, edx
mov dword [esp + 0x2c], edx
cmp dword [ecx], edx
jle 0x467078
test eax, eax
je 0x46703d
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x54], ecx
jg 0x466ff6
mov ecx, esi
call fcn.00427ca0
mov edx, dword [esp + 0x2c]
test eax, eax
jne 0x467025
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x6c]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x70]
add eax, edx
mov word [ecx], 0x2e
mov byte [ecx + 3], 0
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], 0
test edx, edx
jne 0x467063
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x467063
mov eax, dword [esi + 0x20]
lea eax, [eax + eax*4]
mov byte [ecx + eax*4 - 0x11], 0x20
jmp 0x467063
mov eax, dword [esp + 0x70]
add eax, edx
mov byte [esp + 0xcc], 1
push eax
lea eax, [edx + edx*2]
mov edx, dword [ecx + 4]
mov ecx, edi
mov edx, dword [edx + eax*8]
call fcn.0043e270
mov edx, dword [esp + 0x30]
add esp, 4
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x78]
inc edx
mov dword [esp + 0x2c], edx
cmp edx, dword [ecx]
jl 0x466fd0
mov eax, dword [esp + 0x80]
test eax, eax
je 0x467085
inc dword [eax]
mov eax, dword [ecx]
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x20]
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
cmp dword [ecx + 0x54], edx
jg 0x467115
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x4670a9
add eax, eax
jmp 0x4670ae
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x4671a6
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x4670ed
cmp eax, dword [ecx + 0x110]
jae 0x4670ed
movzx ecx, word [ecx + 0xf0]
jmp 0x4670f9
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x20]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
mov dword [esi + 4], eax
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edi, dword [esp + 0x98]
lea ecx, [edx + edx*4]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x70]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [esp + 0x38]
mov dword [eax + ecx*4 + 0xc], edi
mov edi, dword [esp + 0x30]
mov word [eax + ecx*4], 0x29
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 4]
mov ecx, dword [esi]
test eax, eax
je 0x4671b6
cmp byte [ecx + 0x40], 0
jne 0x4671b6
test edx, edx
jns 0x467167
mov edx, dword [esi + 0x20]
dec edx
lea eax, [edx + edx*4]
mov edx, dword [esi + 4]
lea edx, [edx + eax*4]
mov dword [esp + 0x10], edx
mov edx, dword [esi + 4]
push dword [edx + eax*4 + 0x10]
movsx edx, byte [edx + eax*4 + 1]
call fcn.004283f0
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x84]
add esp, 4
mov dword [eax + 0x10], 0
test edx, edx
jne 0x4671ad
mov dword [eax + 0x10], edx
mov byte [eax + 1], dl
jmp 0x4671cb
mov edx, 1
jmp 0x467150
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xfa
jmp 0x4671cb
mov edx, dword [esp + 0x80]
push edx
mov edx, 0xfffffffa
call fcn.004283f0
add esp, 4
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x20]
mov dword [esp + 0x38], edx
mov dword [esp + 0x20], ecx
cmp dword [ecx + 0x54], edx
jg 0x467251
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x4671e9
add eax, eax
jmp 0x4671ee
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x46727d
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x467229
cmp eax, dword [ecx + 0x110]
jae 0x467229
movzx ecx, word [ecx + 0xf0]
jmp 0x467235
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x20]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x38]
mov dword [esi + 4], eax
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
lea ecx, [edx + edx*4]
lea ecx, [eax + ecx*4]
lea eax, [edx + 1]
mov word [ecx], 0x2a
mov byte [ecx + 3], 0
mov dword [ecx + 4], eax
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], 0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x70]
push dword [eax]
mov ecx, edi
push dword [esp + 0x9c]
call fcn.0043d010
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x20]
add esp, 8
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
cmp dword [ecx + 0x54], eax
jg 0x46731e
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x4672b6
add eax, eax
jmp 0x4672bb
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x467355
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x4672f6
cmp eax, dword [ecx + 0x110]
jae 0x4672f6
movzx ecx, word [ecx + 0xf0]
jmp 0x467302
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x20]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x54]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x84]
mov word [eax + ecx*4], 0x11
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
cmp dword [ecx + 0x54], eax
jg 0x4673df
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x467373
add eax, eax
jmp 0x467378
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x46741e
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x4673b7
cmp eax, dword [ecx + 0x110]
jae 0x4673b7
movzx ecx, word [ecx + 0xf0]
jmp 0x4673c3
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x20]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x90]
mov edi, dword [esp + 0x30]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
inc edx
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x8c]
mov word [eax + ecx*4], 0x86
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
cmp dword [ecx + 0x54], eax
jg 0x4674a4
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x46743c
add eax, eax
jmp 0x467441
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x4674d8
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x46747c
cmp eax, dword [ecx + 0x110]
jae 0x46747c
movzx ecx, word [ecx + 0xf0]
jmp 0x467488
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x20]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x64]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x68]
mov word [eax + ecx*4], 0x11
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi + 0x20]
mov eax, dword [esp + 0x38]
cmp edx, eax
jbe 0x4674ed
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
mov dword [eax + ecx*4 + 8], edx
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x18]
dec ecx
mov dword [eax + 0x58], ecx
lea edx, [esp + 0xcc]
mov ecx, edi
call fcn.004656f0
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
cmp dword [ecx + 0x54], eax
jg 0x46758b
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x467523
add eax, eax
jmp 0x467528
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x4675c2
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x467563
cmp eax, dword [ecx + 0x110]
jae 0x467563
movzx ecx, word [ecx + 0xf0]
jmp 0x46756f
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x20]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x90]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
mov word [eax + ecx*4], 0x19
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x78]
test eax, eax
je 0x467630
mov eax, dword [esp + 0xd0]
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x54], ecx
jg 0x4675f7
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x467684
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x1c]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x94]
mov word [eax + ecx*4], 5
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x467684
mov ecx, dword [esp + 0x7c]
call fcn.0047a740
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x467684
mov eax, dword [esp + 0x18]
lea eax, [eax + eax*4]
movsx edx, byte [ecx + eax*4 + 1]
push dword [ecx + eax*4 + 0x10]
lea edi, [ecx + eax*4]
mov ecx, dword [esi]
call fcn.004283f0
xorps xmm0, xmm0
movq qword [edi], xmm0
movq qword [edi + 8], xmm0
mov dword [edi + 0x10], 0
mov byte [edi], 0x9c
mov eax, dword [esi + 0x20]
mov edi, dword [esp + 0x34]
dec eax
add esp, 4
cmp dword [esp + 0x18], eax
jne 0x467684
mov dword [esi + 0x20], eax
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
cmp dword [ecx + 0x54], eax
jg 0x46770a
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x4676a2
add eax, eax
jmp 0x4676a7
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x467741
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x4676e2
cmp eax, dword [ecx + 0x110]
jae 0x4676e2
movzx ecx, word [ecx + 0xf0]
jmp 0x4676ee
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x54]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x84]
mov word [eax + ecx*4], 0x11
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
cmp dword [ecx + 0x54], eax
jg 0x4677c7
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x46775f
add eax, eax
jmp 0x467764
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x4677fe
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x46779f
cmp eax, dword [ecx + 0x110]
jae 0x46779f
movzx ecx, word [ecx + 0xf0]
jmp 0x4677ab
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x8c]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
mov word [eax + ecx*4], 0x10
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x38], eax
mov dword [esp + 0x18], ecx
cmp dword [ecx + 0x54], eax
jg 0x467888
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x46781c
add eax, eax
jmp 0x467821
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x4678c4
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x467860
cmp eax, dword [ecx + 0x110]
jae 0x467860
movzx ecx, word [ecx + 0xf0]
jmp 0x46786c
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x38]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x90]
mov edi, dword [esp + 0x30]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
inc edx
mov word [eax + ecx*4], 0x19
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
cmp dword [ecx + 0x54], eax
jg 0x46794a
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x4678e2
add eax, eax
jmp 0x4678e7
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x46797e
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x467922
cmp eax, dword [ecx + 0x110]
jae 0x467922
movzx ecx, word [ecx + 0xf0]
jmp 0x46792e
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x54]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
mov word [eax + ecx*4], 0x12
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x18]
or ecx, 0xffffffff
sub ecx, dword [esp + 0x84]
mov dword [esp + 0x10], eax
js 0x46799e
mov edx, dword [eax + 0x70]
test edx, edx
je 0x46799e
mov eax, dword [esi + 0x20]
mov dword [edx + ecx*4], eax
mov eax, dword [esi + 0x20]
mov ecx, dword [esp + 0x10]
dec eax
mov dword [ecx + 0x58], eax
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x20]
mov dword [esp + 0x20], edx
mov dword [esp + 0x18], ecx
cmp dword [ecx + 0x54], edx
jg 0x467a2f
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x4679c7
add eax, eax
jmp 0x4679cc
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x467a62
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x467a07
cmp eax, dword [ecx + 0x110]
jae 0x467a07
movzx ecx, word [ecx + 0xf0]
jmp 0x467a13
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
mov dword [esi + 4], eax
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
lea ecx, [edx + edx*4]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x90]
mov dword [ecx + 4], eax
lea eax, [edx + 2]
mov word [ecx], 0x86
mov byte [ecx + 3], 0
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
cmp dword [ecx + 0x54], eax
jg 0x467ae8
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x467a80
add eax, eax
jmp 0x467a85
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x467b1c
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x467ac0
cmp eax, dword [ecx + 0x110]
jae 0x467ac0
movzx ecx, word [ecx + 0xf0]
jmp 0x467acc
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x54]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
mov word [eax + ecx*4], 0x12
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
lea edx, [esp + 0xcc]
mov ecx, edi
call fcn.00465570
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x30]
inc edi
push 8
push edi
call fcn.0043ea70
push dword [esp + 0x40]
lea eax, [esp + 0x10c]
push edi
push dword [ebp + 8]
mov edi, dword [esp + 0x44]
push eax
lea eax, [esp + 0xb8]
push eax
mov eax, dword [esp + 0x44]
push 0xffffffffffffffff
push dword [eax]
mov edx, eax
mov ecx, edi
call fcn.0045d700
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x20]
add esp, 0x24
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
cmp dword [ecx + 0x54], eax
jg 0x467bf8
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x467b90
add eax, eax
jmp 0x467b95
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x467c2c
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x467bd0
cmp eax, dword [ecx + 0x110]
jae 0x467bd0
movzx ecx, word [ecx + 0xf0]
jmp 0x467bdc
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x54]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
mov word [eax + ecx*4], 0x12
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x18]
or ecx, 0xffffffff
sub ecx, dword [esp + 0x68]
mov dword [esp + 0x10], eax
js 0x467c49
mov edx, dword [eax + 0x70]
test edx, edx
je 0x467c49
mov eax, dword [esi + 0x20]
mov dword [edx + ecx*4], eax
mov eax, dword [esi + 0x20]
mov ecx, dword [esp + 0x10]
dec eax
mov dword [ecx + 0x58], eax
lea edx, [esp + 0xcc]
mov ecx, edi
call fcn.00465480
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
cmp dword [ecx + 0x54], eax
jg 0x467cec
mov eax, dword [ecx + 0x54]
test eax, eax
je 0x467c80
add eax, eax
jmp 0x467c85
mov eax, 0x33
mov edx, dword [esi + 4]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
shl eax, 2
push eax
call fcn.0040a980
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
je 0x4680bd
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x10c]
jb 0x467cc4
cmp eax, dword [ecx + 0x110]
jae 0x467cc4
movzx ecx, word [ecx + 0xf0]
jmp 0x467cd0
push eax
call dword [0x4e5c38]
add esp, 4
mov ecx, eax
mov eax, 0xcccccccd
mul ecx
mov eax, dword [esp + 0x18]
shr edx, 4
mov dword [eax + 0x54], edx
mov eax, dword [esp + 0x10]
mov dword [esi + 4], eax
mov eax, dword [esp + 0x1c]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x64]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 4]
mov word [eax + ecx*4], 0x12
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4680bd
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0xcc]
mov dword [esp + 0x80], 0
call fcn.00463ee0
mov dword [esp + 0x54], eax
test eax, eax
je 0x467f53
mov edx, dword [eax + 0x44]
mov ecx, dword [edi]
call fcn.0045bc70
mov edx, eax
mov eax, dword [edi + 0x44]
mov dword [esp + 0x68], eax
lea ecx, [eax + 1]
xor eax, eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x54]
mov dword [edi + 0x44], ecx
mov eax, dword [eax + 0x20]
mov ecx, edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x20], eax
call fcn.00449040
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x18]
push dword [eax]
mov ecx, edi
push 0
push dword [eax + 0x20]
call fcn.00442cc0
mov edx, dword [esp + 0x60]
add esp, 0xc
test byte [edx + 0x2c], 0x20
je 0x467dbd
mov ecx, edx
call fcn.00444160
mov ecx, eax
mov dword [esp + 0x84], ecx
jmp 0x467dbf
xor ecx, ecx
mov eax, dword [edx + 8]
test eax, eax
je 0x467e04
mov edi, dword [esp + 0x54]
lea ebx, [ebx]
test byte [eax + 0x38], 4
jne 0x467df2
movzx edx, word [eax + 0x30]
cmp dx, word [edi + 0x2a]
jge 0x467df2
cmp dword [eax + 0x24], 0
jne 0x467df2
test ecx, ecx
je 0x467df0
cmp dx, word [ecx + 0x30]
jge 0x467df2
mov ecx, eax
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x467dd0
mov edi, dword [esp + 0x30]
mov dword [esp + 0x84], ecx
test ecx, ecx
je 0x467e1c
mov eax, dword [ecx + 0x2c]
mov edx, ecx
mov ecx, edi
mov dword [esp + 0x20], eax
call fcn.00449ad0
mov dword [esp + 0x64], eax
push 1
push dword [esp + 0x1c]
mov edx, 0x34
push dword [esp + 0x28]
mov ecx, esi
push dword [esp + 0x74]
call fcn.00428020
mov eax, dword [esp + 0x74]
add esp, 0x10
test eax, eax
je 0x467e86
mov edx, dword [esi + 4]
mov ecx, dword [esi]
test edx, edx
je 0x467e78
cmp byte [ecx + 0x40], 0
jne 0x467e78
mov eax, dword [esi + 0x20]
dec eax
lea eax, [eax + eax*4]
push dword [edx + eax*4 + 0x10]
lea edi, [edx + eax*4]
movsx edx, byte [edi + 1]
call fcn.004283f0
mov eax, dword [esp + 0x68]
mov dword [edi + 0x10], eax
mov byte [edi + 1], 0xfa
mov edi, dword [esp + 0x34]
jmp 0x467e83
push eax
mov edx, 0xfffffffa
call fcn.004283f0
add esp, 4
mov eax, dword [esp + 0xf4]
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + 8]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x54], ecx
jg 0x467eb2
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x467ee6
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x68]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x1c]
mov word [eax + ecx*4], 0x31
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x20]
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], ecx
cmp dword [eax + 0x54], ecx
jg 0x467f04
mov ecx, esi
call fcn.00427ca0
test eax, eax
jne 0x467f38
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 4]
inc dword [esi + 0x20]
mov edx, dword [esp + 0x68]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0x3a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x54]
push eax
mov ecx, edi
call fcn.00465d10
add esp, 4
jmp 0x468067
xor eax, eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], eax
mov byte [esp + 0x17], al
mov eax, dword [esp + 0x28]
cmp dword [eax + 0x2c], 0
jne 0x467fd0
lea edx, [esp + 0x64]
lea ecx, [esp + 0xcc]
call fcn.00463e70
mov byte [esp + 0x17], al
test al, al
je 0x467fc8
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x34]
push 0
call fcn.0043a9e0
mov edx, eax
add esp, 4
mov dword [esp + 0x68], edx
mov dword [esp + 0x80], edx
test edx, edx
je 0x467fd0
mov eax, dword [esp + 0x34]
cmp byte [eax + 0x40], 0
jne 0x467fd0
cmp byte [esp + 0x17], 1
mov eax, dword [edx + 4]
setne cl
mov byte [eax + 0xc], cl
mov eax, dword [edx + 4]
mov eax, dword [eax]
mov byte [eax], 0x9a
jmp 0x467fd0
mov eax, dword [esp + 0x64]
mov dword [esp + 0x68], eax
lea edx, [esp + 0xcc]
mov ecx, edi
call fcn.00465480
mov al, byte [esp + 0x17]
mov edx, dword [esp + 0x3c]
push 0
movzx eax, al
push eax
push 0
push dword [esp + 0x74]
mov ecx, edi
push dword [esp + 0x8c]
call fcn.00479d20
add esp, 0x14
mov dword [esp + 0x18], eax
test eax, eax
jne 0x468022
mov esi, dword [esp + 0x34]
mov edx, dword [esp + 0x80]
mov ecx, esi
call fcn.0043b1e0
jmp 0x465fac
lea edx, [esp + 0xcc]
mov ecx, edi
call fcn.004656f0
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x24], 0
jle 0x468052
push dword [eax + 0x34]
mov edx, 0x10
push 0
mov ecx, esi
call fcn.00427e40
mov eax, dword [esp + 0x20]
add esp, 8
mov ecx, eax
call fcn.0047a740
lea edx, [esp + 0xcc]
mov ecx, edi
call fcn.00465570
mov edx, dword [esp + 0x88]
push 8
push dword [esp + 0x90]
mov ecx, edi
mov dword [esp + 0xa8], 0
call fcn.0043ea70
mov eax, dword [esp + 0x94]
push eax
push eax
push dword [ebp + 8]
mov eax, dword [esp + 0x3c]
push 0
push 0
push 0xffffffffffffffff
push dword [eax]
mov edx, eax
mov ecx, edi
call fcn.0045d700
mov edx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x58]
add esp, 0x24
call fcn.0043b1e0
mov eax, dword [esi + 0x18]
or ecx, 0xffffffff
sub ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], eax
js 0x4680dd
mov edx, dword [eax + 0x70]
test edx, edx
je 0x4680dd
mov eax, dword [esi + 0x20]
mov dword [edx + ecx*4], eax
mov eax, dword [esi + 0x20]
mov ecx, dword [esp + 0x10]
dec eax
mov dword [ecx + 0x58], eax
mov eax, dword [esp + 0x60]
cmp al, 3
jne 0x4680fc
mov edx, str.DISTINCT
mov ecx, edi
call fcn.0045e630
cmp dword [esp + 0xa0], 0
je 0x468141
cmp dword [esp + 0xa4], 0
mov eax, str.ORDER_BY
mov edx, str.RIGHT_PART_OF_ORDER_BY
cmovle edx, eax
mov ecx, edi
call fcn.0045e630
push dword [ebp + 8]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x2c]
push dword [eax]
lea eax, [esp + 0xa8]
push eax
mov ecx, edi
call fcn.0045e850
add esp, 0xc
mov edx, dword [esi + 0x18]
or eax, 0xffffffff
sub eax, dword [esp + 0x9c]
mov dword [esp + 0x9c], eax
js 0x46816f
mov ecx, dword [edx + 0x70]
test ecx, ecx
je 0x46816f
mov edi, dword [esp + 0x9c]
mov eax, dword [esi + 0x20]
mov dword [ecx + edi*4], eax
mov edi, dword [esp + 0x30]
mov eax, dword [esi + 0x20]
dec eax
mov dword [edx + 0x58], eax
mov dword [esp + 0x74], 0
jmp 0x465fa8
mov esi, eax
jmp 0x465fac
mov esi, dword [esp + 0x34]
jmp 0x465fb4
mov esi, eax
jmp 0x465fb0
push ecx
call dword [0x4e5c38]
mov ecx, dword [esi + 0x200]
add esp, 4
add dword [ecx], eax
jmp 0x4681dd
cmp ecx, dword [esi + 0x10c]
jb 0x4681d4
cmp ecx, dword [esi + 0x110]
jae 0x4681d4
mov eax, dword [esi + 0x108]
mov dword [ecx], eax
dec dword [esi + 0xf4]
mov dword [esi + 0x108], ecx
jmp 0x4681dd
push ecx
call fcn.0040a630
add esp, 4
mov ecx, dword [esp + 0xf4]
test ecx, ecx
je 0x468271
cmp dword [esi + 0x200], 0
je 0x46823a
cmp ecx, dword [esi + 0x10c]
jb 0x46821e
cmp ecx, dword [esi + 0x110]
jae 0x46821e
movzx eax, word [esi + 0xf0]
mov ecx, dword [esi + 0x200]
add dword [ecx], eax
mov eax, dword [esp + 0x74]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push ecx
call dword [0x4e5c38]
mov ecx, dword [esi + 0x200]
add esp, 4
add dword [ecx], eax
mov eax, dword [esp + 0x74]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
cmp ecx, dword [esi + 0x10c]
jb 0x468268
cmp ecx, dword [esi + 0x110]
jae 0x468268
mov eax, dword [esi + 0x108]
mov dword [ecx], eax
dec dword [esi + 0xf4]
mov eax, dword [esp + 0x74]
mov dword [esi + 0x108], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push ecx
call fcn.0040a630
add esp, 4
mov eax, dword [esp + 0x74]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
pop edi
mov eax, 1
pop esi
mov esp, ebp
pop ebp
ret