Function at 0x499810
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x128
mov eax, dword [0x6b7e64]
xor eax, esp
mov dword [esp + 0x124], eax
mov eax, dword [ebp + 8]
push esi
mov esi, ecx
mov dword [esp + 0x80], eax
push edi
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], esi
mov edi, dword [esi + 8]
mov eax, dword [esi]
mov dword [esp + 0x58], 1
mov dword [esp + 0xdc], 0
mov dword [esp + 0x3c], eax
mov dword [esp + 0x30], edi
test edi, edi
jne 0x499885
cmp dword [esi + 0x80], edi
jne 0x499876
test byte [eax + 0x50], 8
jne 0x499876
mov byte [esi + 0x17], 1
call fcn.0043b390
mov edx, dword [esp + 0x1c]
mov edi, eax
mov dword [esp + 0x30], edi
test edx, edx
je 0x49d0f8
cmp dword [esi + 0x24], 0
jne 0x49d0f8
mov eax, dword [esi]
mov ecx, dword [eax + 0x16c]
test ecx, ecx
je 0x49991e
cmp byte [eax + 0xb1], 0
jne 0x49991e
cmp byte [esi + 0xdc], 0
jne 0x49991e
push dword [esi + 0x104]
push 0
push 0
push 0
push 0x15
push dword [eax + 0x170]
call ecx
add esp, 0x18
mov dword [esp + 0x20], eax
cmp eax, 1
jne 0x4998ef
push str.not_authorized
push esi
call fcn.00415290
mov eax, dword [esp + 0x28]
mov dword [esi + 0xc], 0x17
jmp 0x49990f
test eax, eax
je 0x49991a
cmp eax, 2
je 0x499912
push str.authorizer_malfunction
push esi
call fcn.00415290
mov dword [esi + 0xc], 1
mov eax, 1
add esp, 8
test eax, eax
jne 0x49d0f8
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x84]
cmp byte [eax], 6
ja 0x499992
mov eax, dword [edx + 0x30]
mov dword [esp + 0x10], eax
test eax, eax
je 0x499984
mov ecx, dword [esi]
push 0
push 0xc
test ecx, ecx
je 0x499946
call fcn.00411a60
jmp 0x49994b
call fcn.00411300
mov edx, dword [esp + 0x18]
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x499972
mov eax, dword [esi + 0x8c]
mov dword [ecx], eax
mov dword [esi + 0x8c], ecx
mov dword [ecx + 4], edx
mov dword [ecx + 8], 0x4568e0
jmp 0x499979
mov ecx, dword [esi]
call fcn.00456880
mov edx, dword [esp + 0x1c]
mov dword [edx + 0x30], 0
mov eax, dword [edx + 4]
and eax, 0xfffffffe
or eax, 0x400000
mov dword [edx + 4], eax
push 0
mov ecx, esi
call fcn.00497db0
add esp, 4
cmp dword [esi + 0x24], 0
jne 0x4999eb
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 4]
mov dword [esp + 0x40], ecx
test ecx, 0x800000
je 0x499a2a
mov edx, dword [eax + 0x20]
lea eax, [edx + 8]
mov ecx, eax
mov dword [esp + 0x20], eax
call fcn.00499750
test eax, eax
je 0x499a19
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx + 0xc]
test eax, eax
jne 0x4999dc
mov eax, dword [ecx + 0x10]
mov eax, dword [eax]
push eax
push str.target_object_alias_may_not_appear_in_FROM_clause:__s
push esi
call fcn.00415290
add esp, 0xc
mov ecx, dword [esi + 0xe8]
test ecx, ecx
jne 0x49d09d
xor eax, eax
mov dword [esi + 0xe8], eax
mov eax, dword [esp + 0x58]
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.0061e015
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x40]
and ecx, 0xff7fffff
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x84]
cmp byte [ecx], 9
jne 0x499a3f
mov edx, eax
mov ecx, esi
call fcn.004907e0
mov edx, dword [esp + 0x1c]
mov ecx, esi
call fcn.004bbb00
test eax, eax
jne 0x4999eb
mov edx, dword [esp + 0x1c]
xorps xmm0, xmm0
movaps xmmword [esp + 0xe0], xmm0
movaps xmmword [esp + 0xf0], xmm0
movq qword [esp + 0x100], xmm0
mov eax, dword [edx + 4]
mov ecx, dword [edx + 0x20]
shr eax, 3
and eax, 1
mov dword [esp + 0x48], ecx
mov dword [esp + 0x78], eax
mov eax, dword [edx + 0x30]
mov dword [esp + 0xe0], eax
xor eax, eax
mov dword [esp + 0x4c], eax
cmp dword [edx + 0x34], eax
jne 0x499d5e
nop dword [eax + eax]
cmp eax, dword [ecx]
jge 0x499dc9
lea eax, [eax + eax*8]
mov edi, dword [ecx + eax*8 + 0x1c]
lea eax, [ecx + eax*8]
mov dword [esp + 0x70], edi
mov edi, dword [eax + 0x18]
mov dword [esp + 0x14], eax
mov al, byte [eax + 0x2c]
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0x30]
test al, 0x48
je 0x499bd8
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
movzx eax, al
and eax, 0x40
mov edx, dword [edx + 0x34]
mov ecx, dword [ecx + 0x24]
push eax
call fcn.0045e6c0
add esp, 4
test eax, eax
je 0x499bd0
mov eax, dword [esp + 0x3c]
test dword [eax + 0x50], 0x2000
jne 0x499bd0
mov eax, dword [esp + 0x14]
mov cl, byte [eax + 0x2c]
test cl, 8
je 0x499b3d
test cl, 0x10
je 0x499b1f
and cl, 0xf7
mov byte [eax + 0x2c], cl
jmp 0x499b3d
mov edx, dword [eax + 0x34]
and cl, 0xd7
mov byte [eax + 0x2c], cl
mov eax, dword [esp + 0x1c]
push 0
mov ecx, dword [eax + 0x24]
call fcn.0048d3e0
mov eax, dword [esp + 0x18]
add esp, 4
test byte [eax + 0x2c], 0x40
je 0x499bd0
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
inc ecx
mov dword [esp + 0x10], ecx
mov eax, dword [edx]
cmp ecx, eax
jge 0x499ba9
mov edi, dword [esp + 0x1c]
lea eax, [ecx + ecx*8]
lea esi, [edx + 0x2c]
lea esi, [esi + eax*8]
mov al, byte [esi]
test al, 0x10
je 0x499b93
test al, 8
je 0x499b77
and al, 0xef
mov byte [esi], al
jmp 0x499b93
mov edx, dword [esi + 8]
and al, 0xcf
mov byte [esi], al
mov ecx, dword [edi + 0x24]
push 1
call fcn.0048d3e0
mov ecx, dword [esp + 0x14]
add esp, 4
mov edx, dword [esp + 0x48]
mov eax, dword [edx]
inc ecx
add esi, 0x48
mov dword [esp + 0x10], ecx
cmp ecx, eax
jl 0x499b67
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x48]
lea edx, [eax - 1]
test edx, edx
js 0x499bd4
lea eax, [edx + edx*8]
lea ecx, [ecx + eax*8]
add ecx, 0x2c
nop dword [eax]
and byte [ecx], 0xbf
test byte [ecx], 0x10
jne 0x499bd0
sub ecx, 0x48
sub edx, 1
jns 0x499bc0
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x70]
test eax, eax
je 0x499d4b
mov eax, dword [eax + 0x1c]
mov edi, dword [esp + 0x2c]
mov esi, dword [eax]
movsx eax, word [edi + 0x22]
mov edi, dword [esp + 0x30]
cmp eax, esi
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0x18]
jne 0x499dab
mov eax, dword [esp + 0x14]
test dword [eax + 0x30], 0x100
je 0x499c1f
mov eax, dword [eax + 0x4c]
cmp byte [eax + 0x12], 0
je 0x499d4b
mov eax, dword [esp + 0x70]
test byte [eax + 4], 8
jne 0x499d4b
mov edi, dword [eax + 0x30]
test edi, edi
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x30]
je 0x499cf0
cmp dword [edx + 0x30], 0
jne 0x499c4f
cmp dword [ecx], 1
jle 0x499cd4
cmp dword [eax + 0x3c], 0
jne 0x499cd4
test dword [eax + 4], 0x8000000
jne 0x499cd4
test dword [edx + 4], 0x8000000
jne 0x499cd4
mov eax, dword [esp + 0x3c]
test dword [eax + 0x50], 0x40000
jne 0x499cd4
mov ecx, dword [esi]
push 0
push 0xc
test ecx, ecx
je 0x499c85
call fcn.00411a60
jmp 0x499c8a
call fcn.00411300
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x499cbc
mov eax, dword [esi + 0x8c]
mov dword [ecx], eax
mov eax, dword [esp + 0x10]
mov dword [esi + 0x8c], ecx
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x70]
mov dword [ecx + 8], 0x4568e0
mov dword [eax + 0x30], 0
jmp 0x499cf0
mov edx, dword [esp + 0x10]
mov ecx, dword [esi]
call fcn.00456880
mov eax, dword [esp + 0x70]
mov dword [eax + 0x30], 0
jmp 0x499cf0
mov eax, dword [esp + 0x4c]
test eax, eax
jne 0x499cf0
test dword [edx + 4], 0x40000
je 0x499cf0
cmp dword [ecx], 1
je 0x499d4f
test byte [ecx + 0x74], 0x22
jne 0x499d4f
push dword [esp + 0x78]
mov edx, dword [esp + 0x20]
mov ecx, esi
push dword [esp + 0x50]
call fcn.004953d0
add esp, 8
test eax, eax
je 0x499d1c
cmp dword [esi + 0x24], 0
jne 0x4999eb
mov dword [esp + 0x4c], 0xffffffff
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x3c]
mov ecx, dword [edx + 0x20]
cmp byte [eax + 0x57], 0
mov dword [esp + 0x48], ecx
jne 0x4999eb
mov eax, dword [esp + 0x84]
cmp byte [eax], 8
jbe 0x499d4b
mov eax, dword [edx + 0x30]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x4c]
inc eax
cmp dword [edx + 0x34], 0
mov dword [esp + 0x4c], eax
je 0x499aa0
push dword [esp + 0x84]
mov ecx, esi
call fcn.00492080
mov edi, eax
add esp, 4
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0x38], 0
jne 0x49d087
mov ecx, dword [esi + 0xe8]
test ecx, ecx
jne 0x49d046
xor eax, eax
mov dword [esi + 0xe8], eax
mov eax, edi
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.0061e015
mov esp, ebp
pop ebp
ret
push dword [esp + 0x20]
mov ecx, dword [esp + 0x30]
push dword [ecx]
push eax
push str.expected__d_columns_for__s_but_got__d
push esi
call fcn.00415290
add esp, 0x14
jmp 0x4999eb
mov eax, dword [edx + 0x24]
mov dword [esp + 0x38], ecx
test eax, eax
je 0x499f0c
cmp byte [eax], 0x2c
mov dword [esp + 0x38], ecx
jne 0x499f0c
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x38], ecx
test dword [eax + 0x50], 0x8000
jne 0x499f0c
mov eax, dword [esi]
add eax, 0x57
mov dword [esp + 0xb8], esi
mov dword [esp + 0xbc], eax
mov dword [esp + 0x38], ecx
mov eax, dword [edx + 0x20]
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xc8], 0
test eax, eax
je 0x499e5a
cmp dword [eax], 0
jle 0x499e5a
test byte [eax + 0x2c], 0x40
mov dword [esp + 0xcc], 3
jne 0x499e65
mov dword [esp + 0xcc], 1
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0xb8]
call fcn.00495ef0
cmp dword [esp + 0xc0], 0
je 0x499efa
lea eax, [esp + 0xb8]
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], 0x4960c0
mov dword [esp + 0x98], fcn.00403780
mov edx, dword [eax + 0x24]
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
test edx, edx
je 0x499ee1
lea ecx, [esp + 0x90]
call fcn.00450150
mov edx, dword [esp + 0xd0]
test edx, edx
je 0x499efa
mov ecx, dword [esp + 0xb8]
mov ecx, dword [ecx]
call fcn.004115d0
cmp dword [esp + 0xc4], 0
mov edx, dword [esp + 0x1c]
jne 0x499e11
mov ecx, dword [esp + 0x3c]
test dword [ecx + 0x50], 0x201
jne 0x499f3f
mov ecx, esi
call fcn.004993d0
test eax, eax
je 0x499f3f
mov eax, dword [esp + 0x3c]
cmp byte [eax + 0x57], 0
jne 0x4999eb
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x20]
mov dword [esp + 0x38], ecx
jmp 0x499f43
mov ecx, dword [esp + 0x38]
xor eax, eax
mov dword [esp + 0x6c], eax
cmp dword [ecx], eax
jle 0x49a877
lea eax, [eax + eax*8]
lea eax, [eax + 1]
lea esi, [ecx + eax*8]
mov eax, dword [esi + 0x38]
or eax, dword [esi + 0x3c]
mov dword [esp + 0x34], esi
jne 0x499f8b
mov eax, dword [esi + 8]
test eax, eax
je 0x499f8b
push dword [esi + 4]
mov ecx, dword [esp + 0x1c]
mov edx, 0x14
push 0x688421
push eax
call fcn.00466b50
mov ecx, dword [esp + 0x44]
add esp, 0xc
mov eax, dword [esi + 0x14]
mov dword [esp + 0x60], eax
test eax, eax
je 0x49a862
mov ecx, dword [esp + 0x1c]
call fcn.00454830
mov ecx, dword [esp + 0x18]
add dword [ecx + 0xe4], eax
mov eax, dword [esp + 0x3c]
test dword [eax + 0x50], 0x1000
jne 0x499fec
test dword [esi + 0x28], 0x100
je 0x499fd1
mov eax, dword [esi + 0x44]
cmp byte [eax + 0x12], 0
je 0x499fec
cmp dword [eax], 2
jge 0x499fec
push dword [esp + 0x6c]
mov eax, dword [esp + 0x20]
push dword [esp + 0x3c]
mov edx, dword [esp + 0x68]
push dword [eax + 0x24]
call fcn.00496130
add esp, 0xc
mov ecx, dword [esp + 0x3c]
test dword [ecx + 0x50], 0x4000000
jne 0x49a161
test dword [esi + 0x28], 0x108
jne 0x49a161
mov edx, dword [esi + 0x14]
mov eax, edx
mov dword [esp + 0x40], edx
test edx, edx
je 0x49a04a
nop word [eax + eax]
test byte [eax + 4], 9
jne 0x49a161
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x49a03a
cmp byte [eax], 0x87
jne 0x49a161
cmp dword [eax + 0x44], 0
jne 0x49a161
mov eax, ecx
test eax, eax
jne 0x49a020
mov eax, dword [esi + 0x38]
mov dword [esp + 0x70], eax
mov eax, dword [esi + 0x3c]
mov dword [esp + 0x64], eax
mov eax, dword [edx + 0x30]
test eax, eax
je 0x49a0c2
mov ecx, dword [eax]
mov dword [esp + 0x10], ecx
test ecx, ecx
jle 0x49a0c2
mov esi, dword [esp + 0x64]
lea edi, [eax + 0x18]
movzx eax, word [edi]
test ax, ax
je 0x49a0aa
add eax, 0xffff
mov edx, 0x3f
cmp ax, 0x40
jae 0x49a08b
movzx edx, ax
xor eax, eax
xor ecx, ecx
bts eax, edx
cmp edx, 0x20
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
cmovae ecx, eax
or dword [esp + 0x70], eax
or esi, ecx
mov ecx, dword [esp + 0x10]
add edi, 0x14
sub ecx, 1
mov dword [esp + 0x10], ecx
jne 0x49a070
mov edi, dword [esp + 0x30]
mov dword [esp + 0x64], esi
mov esi, dword [esp + 0x34]
mov eax, dword [esi + 0x10]
movsx eax, word [eax + 0x22]
mov dword [esp + 0x80], eax
test eax, eax
jle 0x49a161
mov esi, dword [esp + 0x40]
xor eax, eax
mov dword [esp + 0x14], eax
mov edi, eax
xor ecx, ecx
cmp edi, 0x3f
jae 0x49a106
mov eax, edi
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
mov eax, dword [esp + 0x14]
cmovae edx, ecx
jmp 0x49a10b
mov edx, SysReAllocString
and ecx, dword [esp + 0x70]
and edx, dword [esp + 0x64]
or ecx, edx
jne 0x49a148
mov edx, dword [esp + 0x14]
mov eax, esi
nop dword [eax]
mov ecx, dword [eax + 0x1c]
mov ecx, dword [ecx + edx + 8]
cmp byte [ecx], 0x79
je 0x49a13d
and dword [ecx + 4], 0xfff7dfff
mov byte [ecx], 0x79
or dword [eax + 4], 0x1000000
mov eax, dword [eax + 0x34]
test eax, eax
jne 0x49a120
mov eax, dword [esp + 0x14]
inc edi
add eax, 0x14
mov dword [esp + 0x14], eax
cmp edi, dword [esp + 0x80]
jl 0x49a0e4
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x20], edx
mov eax, dword [ecx + 0x104]
mov dword [esp + 0x80], eax
mov eax, dword [esi + 8]
mov dword [ecx + 0x104], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 4]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x28]
and eax, 0x100
mov dword [esp + 0x40], eax
je 0x49a1ba
mov eax, dword [esi + 0x44]
mov dl, byte [eax + 0x12]
mov byte [esp + 0x2b], dl
test dl, dl
mov edx, dword [esp + 0x6c]
je 0x49a21b
cmp dword [eax], 2
jl 0x49a1ba
cmp byte [esp + 0x2b], 2
jne 0x49a21b
mov eax, dword [esp + 0x38]
test byte [eax + 0x2c], 0x40
jne 0x49a210
mov eax, dword [ecx]
test dword [eax + 0x50], 0x2000000
jne 0x49a210
mov ecx, dword [esp + 0x38]
lea eax, [edx + 1]
mov edx, esi
push dword [ecx]
push eax
call fcn.004992a0
mov edx, dword [esp + 0x74]
add esp, 8
test eax, eax
jne 0x49a210
test edx, edx
jne 0x49a260
mov eax, dword [esp + 0x38]
cmp dword [eax], 1
je 0x49a28c
test byte [eax + 0x74], 2
jne 0x49a28c
test dword [esp + 0x10], 0x10000000
je 0x49a28c
cmp dword [esp + 0x40], 0
je 0x49a4d2
mov eax, dword [esi + 0x44]
mov dword [esp + 0x2c], eax
mov ecx, dword [eax + 4]
mov dword [esp + 0x10], ecx
test ecx, ecx
jle 0x49a4d2
mov ecx, dword [edi + 0x6c]
mov eax, dword [eax + 8]
mov dword [esp + 0x20], eax
cmp dword [edi + 0x70], ecx
jg 0x49a419
mov edx, dword [esp + 0x10]
mov ecx, edi
push 0
push edx
push eax
mov edx, 0xa
call fcn.0043b5e0
add esp, 0xc
jmp 0x49a44c
test dword [esp + 0x10], 0x10000000
jne 0x49a210
test byte [esi + 0x24], 0x22
lea eax, [esi + 0x24]
jne 0x49a210
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x49a28c
sub eax, 0x48
dec ecx
cmp dword [eax - 0x10], 0
jne 0x49a210
test byte [eax], 0x22
je 0x49a277
jmp 0x49a210
mov eax, dword [esp + 0x18]
mov edx, dword [edi + 0x6c]
inc edx
mov dword [esp + 0x10], edx
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esi + 0x1c], eax
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x20], eax
cmp dword [edi + 0x70], ecx
jg 0x49a2c6
push edx
push 0
push eax
mov edx, 0xb
mov ecx, edi
call fcn.0043b5e0
mov edx, dword [esp + 0x1c]
add esp, 0xc
jmp 0x49a2f9
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x20]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x1c]
push esi
push str.CO_ROUTINE___S
push 1
push dword [esp + 0x24]
mov dword [esi + 0x18], edx
mov byte [esp + 0xc8], 0xd
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
call fcn.0043bc20
mov edx, dword [esp + 0x70]
lea eax, [esp + 0xc8]
mov ecx, dword [esp + 0x28]
push eax
call fcn.00499810
mov eax, dword [esp + 0x74]
add esp, 0x14
mov ecx, dword [esi + 0x10]
mov ax, word [eax + 2]
mov word [ecx + 0x26], ax
or dword [esi + 0x28], 0x20
mov eax, dword [esp + 0xc4]
mov edx, dword [esi + 0x1c]
mov dword [esi + 0x20], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49a3a1
push 0
push 0
push edx
mov edx, 0x44
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49a3d0
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x44
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0xc]
mov byte [eax + 0x13], 0
mov eax, dword [edi + 0xc]
mov dword [eax + 0x1c], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x49a3f3
mov eax, 0x6c6388
jmp 0x49a403
mov eax, dword [esp + 0x10]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
add eax, 0xfffffff4
mov esi, dword [esp + 0x18]
mov dword [eax], edx
mov byte [esi + 0x13], 0
mov dword [esi + 0x1c], 0
jmp 0x49a832
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x2c]
mov esi, dword [esi + 0x2c]
mov eax, dword [edx + 0xc]
mov dword [esp + 0x20], eax
cmp esi, eax
je 0x49a4c1
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49a48e
push 0
push eax
push esi
mov edx, 0x73
mov ecx, edi
call fcn.0043b5e0
mov edx, dword [esp + 0x38]
add esp, 0xc
mov ecx, dword [esp + 0x60]
mov ax, word [edx + 0x10]
mov word [ecx + 2], ax
jmp 0x49a82e
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x60]
mov ax, word [edx + 0x10]
mov word [ecx + 2], ax
jmp 0x49a82e
mov ecx, dword [esp + 0x38]
push edx
push 0
mov edx, esi
call fcn.004992a0
mov edx, eax
add esp, 8
mov dword [esp + 0x2c], edx
test edx, edx
je 0x49a5e2
mov eax, dword [edx + 0x18]
mov dword [esp + 0x20], eax
test eax, eax
je 0x49a55e
mov ecx, dword [edx + 0x1c]
mov dword [esp + 0x10], ecx
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49a527
push 0
push eax
push dword [esp + 0x18]
mov edx, 0xa
mov ecx, edi
call fcn.0043b5e0
mov edx, dword [esp + 0x38]
add esp, 0xc
jmp 0x49a55e
mov esi, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x20]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov eax, dword [edx + 0x2c]
mov esi, dword [esi + 0x2c]
mov dword [esp + 0x20], eax
cmp dword [edi + 0x70], ecx
jg 0x49a59b
push 0
push eax
push esi
mov edx, 0x73
mov ecx, edi
call fcn.0043b5e0
mov edx, dword [esp + 0x38]
add esp, 0xc
mov ecx, dword [esp + 0x60]
mov eax, dword [edx + 0x14]
mov ax, word [eax + 2]
mov word [ecx + 2], ax
jmp 0x49a82e
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edx + 0x14]
mov ecx, dword [esp + 0x60]
mov ax, word [eax + 2]
mov word [ecx + 2], ax
jmp 0x49a82e
xor eax, eax
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x18]
inc dword [eax + 0x2c]
mov eax, dword [eax + 0x2c]
mov dword [esi + 0x1c], eax
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x2c], edx
cmp dword [edi + 0x70], edx
jg 0x49a61e
push 0
push 0
push 0
mov edx, 9
mov ecx, edi
call fcn.0043b5e0
mov edx, eax
add esp, 0xc
mov dword [esp + 0x2c], edx
jmp 0x49a655
mov esi, dword [esp + 0x34]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
or dword [esi + 0x28], 0x10
lea eax, [edx + 1]
test byte [esi + 0x28], 8
mov dword [esp + 0x10], eax
mov dword [esi + 0x18], eax
jne 0x49a6c3
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x70], edx
cmp dword [edi + 0x70], edx
jg 0x49a690
push 0
push 0
push 0
mov edx, 0xf
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
mov dword [esp + 0x70], eax
jmp 0x49a6c3
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xf
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x2c]
push esi
push str.MATERIALIZE___S
push 1
push dword [esp + 0x24]
mov byte [esp + 0xc8], 0xc
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
call fcn.0043bc20
mov edx, dword [esp + 0x70]
lea eax, [esp + 0xc8]
mov ecx, dword [esp + 0x28]
push eax
call fcn.00499810
mov edx, dword [esp + 0x74]
add esp, 0x14
mov ecx, dword [esi + 0x10]
mov ax, word [edx + 2]
mov word [ecx + 0x26], ax
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x49a767
mov eax, dword [edi + 0x6c]
mov dword [esp + 0x20], eax
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x49a757
mov eax, 0x6c6380
jmp 0x49a760
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x20]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0x6c]
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x20], eax
cmp dword [edi + 0x70], ecx
jg 0x49a792
push 0
push dword [esp + 0x14]
mov edx, 0x43
mov ecx, edi
push eax
call fcn.0043b5e0
mov edx, dword [esp + 0x6c]
add esp, 0xc
jmp 0x49a7c9
mov esi, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi + 0x6c]
mov dword [esp + 0x20], eax
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x49a7df
mov eax, 0x6c6380
jmp 0x49a7ec
mov eax, dword [esp + 0x2c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x20]
mov dword [eax + 8], ecx
mov eax, dword [esp + 0x18]
mov byte [eax + 0x13], 0
mov dword [eax + 0x1c], 0
mov eax, dword [esi + 0x28]
and eax, 0x108
cmp eax, 0x100
jne 0x49a82e
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x18]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0x1c]
mov dword [ecx + 8], eax
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0xc], eax
mov ax, word [edx + 2]
mov word [ecx + 0x10], ax
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x3c]
cmp byte [eax + 0x57], 0
jne 0x4999eb
mov ecx, dword [esp + 0x1c]
call fcn.00454830
sub dword [esi + 0xe4], eax
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x104], eax
jmp 0x49a866
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x6c]
inc eax
mov dword [esp + 0x6c], eax
cmp eax, dword [ecx]
jl 0x499f51
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x1c]
mov edx, dword [ecx + 4]
mov dword [esp + 0x5c], eax
mov eax, dword [ecx + 0x24]
mov dword [esp + 0x64], eax
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x44], eax
mov eax, dword [ecx + 0x2c]
mov dword [esp + 0x70], eax
mov al, byte [ecx + 4]
and al, 1
mov byte [esp + 0x120], al
mov eax, edx
and al, 9
cmp al, 1
jne 0x49a9ab
mov eax, dword [esp + 0xe0]
test eax, eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x5c]
jne 0x49a8d2
test eax, eax
jne 0x49a9af
jmp 0x49a976
test eax, eax
je 0x49a9af
mov eax, dword [esp + 0xe0]
mov esi, dword [esp + 0x5c]
mov eax, dword [eax]
cmp eax, dword [esi]
mov esi, dword [esp + 0x18]
jne 0x49a9ab
mov dword [esp + 0x10], 0
test eax, eax
jle 0x49a972
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x5c]
add ecx, 8
add edx, 8
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x2c], edx
nop word [eax + eax]
mov al, byte [ecx + 8]
cmp al, byte [edx + 8]
jne 0x49a9ab
push 0xffffffffffffffff
push dword [edx]
mov edx, dword [ecx]
xor ecx, ecx
call fcn.0045ddb0
add esp, 8
test eax, eax
jne 0x49a9ab
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x2c]
inc eax
mov ecx, dword [esp + 0x7c]
add edx, 0x14
add ecx, 0x14
mov dword [esp + 0x10], eax
cmp eax, dword [edi]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x7c], ecx
jl 0x49a920
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + 4]
mov eax, dword [esp + 0x5c]
cmp dword [ecx + 0x44], 0
jne 0x49a9ab
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, eax
mov ecx, dword [esp + 0x3c]
push 0
call fcn.00455bf0
mov ecx, eax
mov byte [esp + 0x124], 2
mov eax, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0x44], ecx
or dword [eax + 4], 8
mov dword [eax + 0x28], ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xe0]
test ecx, ecx
je 0x49aad2
push dword [eax]
mov edx, ecx
mov ecx, esi
push 0
call fcn.0048f8f0
mov dword [esp + 0x58], eax
add esp, 8
mov eax, dword [esi + 0x28]
mov dword [esp + 0xe8], eax
mov dword [esp + 0x10], eax
inc eax
mov dword [esi + 0x28], eax
mov eax, dword [esp + 0xe0]
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x14], edx
mov ecx, dword [eax]
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
inc eax
add eax, ecx
mov dword [esp + 0x20], eax
cmp dword [edi + 0x70], edx
jg 0x49aa24
push 0
push eax
push dword [esp + 0x18]
mov edx, 0x76
mov ecx, edi
call fcn.0043b5e0
mov edx, eax
add esp, 0xc
mov dword [esp + 0x14], edx
jmp 0x49aa5b
mov esi, dword [esp + 0x10]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x20]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x76
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, edx
cmp byte [ecx + 0x57], 0
je 0x49aa86
mov ecx, dword [esp + 0x50]
mov edx, 0xfffffff8
push ecx
mov ecx, dword [edi]
call fcn.0043c1e0
mov edx, dword [esp + 0x18]
add esp, 4
mov dword [esp + 0xf4], edx
jmp 0x49aadd
test edx, edx
jns 0x49aa8e
mov eax, dword [edi + 0x6c]
dec eax
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x50]
je 0x49aabe
push 0xfffffffffffffff8
push ecx
mov edx, eax
mov ecx, edi
call fcn.0043c370
mov edx, dword [esp + 0x1c]
add esp, 8
mov dword [esp + 0xf4], edx
jmp 0x49aadd
test ecx, ecx
je 0x49aac9
mov dword [eax + 0x10], ecx
mov byte [eax + 1], 0xf8
mov dword [esp + 0xf4], edx
jmp 0x49aadd
mov dword [esp + 0xf4], 0xffffffff
mov ecx, dword [esp + 0x84]
cmp byte [ecx], 0xc
jne 0x49abf7
mov eax, dword [esp + 0x5c]
mov edx, dword [eax]
mov eax, dword [ecx + 4]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x20], eax
cmp dword [edi + 0x70], ecx
jg 0x49ab17
push 0
push edx
push eax
mov edx, 0x76
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49ab4a
mov esi, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x76
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x1c]
test dword [eax + 4], 0x800
je 0x49abf7
mov ecx, dword [esp + 0x5c]
mov eax, dword [ecx]
lea edx, [eax - 1]
mov dword [esp + 0x10], edx
test edx, edx
jle 0x49abd2
mov edi, dword [esp + 0x5c]
lea ecx, [edx + edx*4]
mov esi, dword [esp + 0x3c]
shl ecx, 2
mov dword [esp + 0x14], ecx
nop
test byte [ecx + edi + 0x14], 0x40
jne 0x49abc6
mov edx, dword [ecx + edi + 8]
test edx, edx
je 0x49ab9a
mov ecx, esi
call fcn.00455530
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + edi + 0xc]
test edx, edx
je 0x49abad
mov ecx, esi
call fcn.004115d0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
sub ecx, 0x14
mov eax, dword [edi]
dec edx
dec eax
mov dword [esp + 0x10], edx
mov dword [edi], eax
mov dword [esp + 0x14], ecx
test edx, edx
jg 0x49ab80
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x5c]
xor edx, edx
test eax, eax
jle 0x49abf7
mov eax, dword [esp + 0x5c]
add ecx, 8
nop
test byte [ecx + 0xc], 0x40
jne 0x49abef
mov eax, dword [ecx]
mov byte [eax], 0x79
mov eax, dword [esp + 0x5c]
inc edx
add ecx, 0x14
cmp edx, dword [eax]
jl 0x49abe0
mov eax, dword [esi + 0x38]
mov edx, dword [esp + 0x1c]
dec eax
mov dword [esi + 0x38], eax
mov dword [esp + 0x11c], eax
test dword [edx + 4], 0x4000
jne 0x49ac1b
mov ecx, 0x140
mov word [edx + 2], cx
cmp dword [edx + 0x3c], 0
je 0x49ac30
push eax
mov ecx, esi
call fcn.004912b0
mov edx, dword [esp + 0x20]
add esp, 4
cmp dword [edx + 8], 0
jne 0x49ac6a
cmp dword [esp + 0xf4], 0
jl 0x49ac6a
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x49ac4f
mov eax, 0x6c6380
jmp 0x49ac5f
mov eax, dword [esp + 0xf4]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov byte [eax], 0x77
or byte [esp + 0x100], 1
test byte [edx + 4], 1
je 0x49ad82
mov eax, dword [esi + 0x28]
mov ecx, esi
mov dword [esp + 0x124], eax
inc eax
mov dword [esi + 0x28], eax
mov edx, dword [edx + 0x1c]
push 0
push 0
call fcn.0048f8f0
mov ecx, dword [edi + 0x6c]
add esp, 8
mov edx, dword [esp + 0x124]
mov dword [esp + 0x50], eax
mov dword [esp + 0x14], ecx
cmp dword [edi + 0x70], ecx
jg 0x49acc4
push 0
push 0
push edx
mov edx, 0x76
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
mov dword [esp + 0x14], eax
jmp 0x49acfb
mov esi, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x76
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x14]
mov ecx, dword [edi]
cmp byte [ecx + 0x57], 0
je 0x49ad17
mov edx, dword [esp + 0x50]
push edx
mov edx, 0xfffffff8
call fcn.0043c1e0
add esp, 4
jmp 0x49ad52
cmp dword [esp + 0x14], 0
jge 0x49ad22
mov eax, dword [edi + 0x6c]
dec eax
mov edx, dword [esp + 0x50]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x49ad47
push 0xfffffffffffffff8
push edx
mov edx, eax
mov ecx, edi
call fcn.0043c370
add esp, 8
jmp 0x49ad52
test edx, edx
je 0x49ad52
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov eax, dword [esp + 0x14]
mov dword [esp + 0x128], eax
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x49ad74
lea ecx, [eax + eax*4]
mov edx, 8
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x121], 3
jmp 0x49ad8a
mov byte [esp + 0x121], 0
cmp dword [esp + 0x78], 0
mov eax, dword [esp + 0x44]
jne 0x49b0e4
test eax, eax
jne 0x49b0e4
xor ecx, ecx
mov dword [esp + 0x20], 0x4000
cmp byte [esp + 0x120], cl
mov eax, 0x100
cmovne ecx, eax
mov ax, word [edx + 4]
and ax, word [esp + 0x20]
or cx, ax
movzx eax, cx
mov dword [esp + 0x20], eax
mov eax, dword [edx + 0x44]
mov dword [esp + 0x40], eax
test eax, eax
je 0x49ade3
mov ecx, esi
call fcn.004bca60
mov edx, dword [esp + 0x1c]
movsx eax, word [edx + 2]
mov ecx, esi
push eax
push dword [esp + 0x24]
push edx
push dword [edx + 0x1c]
mov edx, dword [esp + 0x48]
push dword [esp + 0xf0]
push dword [esp + 0x78]
call fcn.004b88b0
mov ecx, eax
add esp, 0x18
mov dword [esp + 0x50], ecx
test ecx, ecx
je 0x4999eb
mov eax, dword [esp + 0x1c]
movzx edx, word [ecx + 0x34]
cmp dx, word [eax + 2]
jge 0x49ae29
mov word [eax + 2], dx
cmp byte [esp + 0x120], 0
je 0x49ae51
mov cl, byte [ecx + 0x2f]
movzx edx, byte [esp + 0x121]
test cl, cl
movzx eax, cl
mov ecx, dword [esp + 0x50]
cmovne edx, eax
mov byte [esp + 0x121], dl
mov edx, dword [esp + 0xe0]
test edx, edx
je 0x49aec1
mov al, byte [ecx + 0x2d]
test al, al
jns 0x49ae70
mov dword [esp + 0xe4], 0
jmp 0x49ae7a
movsx eax, al
mov dword [esp + 0xe4], eax
test byte [ecx + 0x30], 4
jne 0x49ae85
mov eax, dword [ecx + 0x1c]
jmp 0x49aea5
movzx eax, byte [ecx + 0x2c]
lea eax, [eax + eax*2]
shl eax, 5
cmp dword [eax + ecx + 0x2d0], 0
je 0x49ae9e
mov eax, dword [ecx + 0x1c]
jmp 0x49aea5
mov eax, dword [eax + ecx + 0x2a8]
mov dword [esp + 0xfc], eax
xor ecx, ecx
mov eax, dword [esp + 0xe4]
cmp eax, dword [edx]
cmove edx, ecx
mov dword [esp + 0xe0], edx
mov eax, dword [esp + 0xf4]
test eax, eax
js 0x49af00
test edx, edx
jne 0x49af00
mov ecx, dword [edi]
cmp byte [ecx + 0x57], dl
jne 0x49af00
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + edx*4 + 0x10]
lea esi, [eax + edx*4]
movsx edx, byte [esi + 1]
call fcn.0043c1e0
mov word [esi], 0xbb
add esp, 4
mov dword [esi + 0x10], 0
mov esi, dword [esp + 0x18]
cmp dword [esp + 0x40], 0
mov edx, dword [esp + 0x1c]
je 0x49b0a2
mov eax, dword [esi + 0x38]
inc dword [esi + 0x2c]
lea ecx, [eax - 1]
sub eax, 2
mov dword [esp + 0x10], eax
dec eax
push ecx
mov dword [esp + 0x18], eax
mov dword [esi + 0x38], eax
mov eax, dword [esi + 0x2c]
push eax
push dword [esp + 0x58]
mov dword [esp + 0x64], ecx
mov ecx, esi
mov dword [esp + 0x38], eax
call fcn.004c0500
mov ecx, dword [edi + 0x6c]
add esp, 0xc
mov edx, dword [esp + 0x14]
cmp dword [edi + 0x70], ecx
jg 0x49af64
push 0
push edx
push 0
mov edx, 9
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49af93
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
lea eax, [edi + 0xc]
mov edx, dword [esp + 0x58]
mov dword [esp + 0x78], eax
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x49afb8
push edx
mov edx, edi
call fcn.0043be50
add esp, 4
jmp 0x49afc1
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
push dword [esp + 0x14]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x124]
push dword [esp + 0x14]
mov ecx, esi
mov dword [esp + 0x104], 0
push dword [esp + 0x8c]
push eax
lea eax, [esp + 0xf0]
push eax
push 0xffffffffffffffff
call fcn.0048e920
mov ecx, dword [edi + 0xc]
add esp, 0x18
mov edx, dword [esp + 0x10]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x49b019
push edx
mov edx, edi
call fcn.0043be50
add esp, 4
jmp 0x49b022
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov ecx, dword [edi + 0x6c]
mov edx, dword [esp + 0x2c]
cmp dword [edi + 0x70], ecx
jg 0x49b044
push 0
push 0
push edx
mov edx, 0x43
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49b073
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x14]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x49b094
push edx
mov edx, edi
call fcn.0043be50
add esp, 4
jmp 0x49cfa0
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
jmp 0x49cfa0
mov eax, dword [esp + 0x50]
mov ecx, esi
push dword [eax + 0x20]
push dword [eax + 0x1c]
lea eax, [esp + 0x128]
push dword [esp + 0x8c]
push eax
lea eax, [esp + 0xf0]
push eax
push 0xffffffffffffffff
call fcn.0048e920
mov ecx, dword [esp + 0x68]
add esp, 0x18
call fcn.004b9910
lea eax, [edi + 0xc]
mov dword [esp + 0x78], eax
jmp 0x49cfa0
mov dword [esp + 0x34], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x7c], 0
test eax, eax
je 0x49b225
mov ecx, dword [edx + 0x1c]
mov eax, dword [ecx]
test eax, eax
jle 0x49b122
add ecx, 0x1a
xor esi, esi
lea ecx, [ecx + 0x14]
dec eax
mov word [ecx - 0x14], si
test eax, eax
jg 0x49b110
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x44]
lea ecx, [eax + 8]
mov eax, dword [eax]
mov dword [esp + 0x14], ecx
test eax, eax
jle 0x49b148
add ecx, 0x12
xor esi, esi
lea ecx, [ecx + 0x14]
dec eax
mov word [ecx - 0x14], si
test eax, eax
jg 0x49b136
mov esi, dword [esp + 0x18]
cmp word [edx + 2], 0x42
jle 0x49b158
mov eax, 0x42
mov word [edx + 2], ax
mov ecx, dword [esp + 0xe0]
test ecx, ecx
je 0x49b22b
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x49b22b
xor edx, edx
test eax, eax
jle 0x49b1a0
mov edi, dword [esp + 0x44]
xor ecx, ecx
mov eax, dword [esp + 0xe0]
lea ecx, [ecx + 0x14]
inc edx
mov al, byte [ecx + eax - 4]
and al, 1
mov byte [edi + ecx - 4], al
mov eax, dword [edi]
cmp edx, eax
jl 0x49b181
mov edi, dword [esp + 0x30]
mov ecx, dword [esp + 0xe0]
test ecx, ecx
je 0x49b22b
cmp eax, dword [ecx]
jne 0x49b22b
mov dword [esp + 0x10], 0
test eax, eax
jle 0x49b21b
mov eax, dword [esp + 0x14]
add ecx, 8
mov dword [esp + 0x2c], ecx
nop word [eax + eax]
mov al, byte [eax + 8]
cmp al, byte [ecx + 8]
jne 0x49b22b
push 0xffffffffffffffff
push dword [ecx]
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
xor ecx, ecx
call fcn.0045ddb0
add esp, 8
test eax, eax
jne 0x49b22b
mov edi, dword [esp + 0x44]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x2c]
inc edx
mov eax, dword [esp + 0x14]
add ecx, 0x14
add eax, 0x14
mov dword [esp + 0x10], edx
cmp edx, dword [edi]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x14], eax
jl 0x49b1d0
mov dword [esp + 0x7c], 1
jmp 0x49b22b
xor eax, eax
mov word [edx + 2], ax
dec dword [esi + 0x38]
mov eax, dword [esi + 0x38]
mov ecx, dword [esp + 0x3c]
push 0
push 0x2c
mov dword [esp + 0x54], eax
call fcn.00411a60
mov ecx, eax
add esp, 8
mov dword [esp + 0x24], ecx
test ecx, ecx
je 0x49b2da
push 0x2c
push 0
push ecx
call fcn.00623f60
mov ecx, dword [esi]
add esp, 0xc
push 0
push 0xc
test ecx, ecx
je 0x49b271
call fcn.00411a60
jmp 0x49b276
call fcn.00411300
mov edx, eax
add esp, 8
test edx, edx
je 0x49b29d
mov eax, dword [esi + 0x8c]
mov ecx, dword [esp + 0x24]
mov dword [edx], eax
mov dword [esi + 0x8c], edx
mov dword [edx + 4], ecx
mov dword [edx + 8], 0x499390
jmp 0x49b2da
mov eax, dword [esp + 0x24]
mov ecx, dword [esi]
mov dword [esp + 0x10], ecx
mov edx, dword [eax + 0x14]
test edx, edx
je 0x49b2bb
call fcn.004115d0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
mov edx, dword [eax + 0x20]
test edx, edx
je 0x49b2cb
call fcn.004115d0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
mov edx, eax
call fcn.004115d0
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x3c]
cmp byte [eax + 0x57], 0
jne 0x4999eb
mov eax, dword [esp + 0x1c]
xorps xmm0, xmm0
mov edx, dword [esp + 0x44]
mov eax, dword [eax + 0x10]
mov dword [ecx + 0x28], eax
mov eax, dword [esp + 0x38]
movlpd qword [esp + 0xc4], xmm0
movlpd qword [esp + 0xcc], xmm0
movlpd qword [esp + 0xd4], xmm0
mov dword [esp + 0xb8], esi
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], ecx
test edx, edx
je 0x49b335
mov eax, dword [edx]
jmp 0x49b337
xor eax, eax
mov dword [ecx + 0x10], edx
mov edx, dword [esp + 0x5c]
mov word [ecx + 2], ax
test edx, edx
je 0x49b3d7
xor ecx, ecx
lea eax, [edx + 8]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x10], ecx
cmp dword [edx], ecx
jle 0x49b3d7
mov edi, edx
nop dword [eax]
mov edx, dword [eax]
lea esi, [esp + 0xb8]
mov dword [esp + 0x94], 0x45ecb0
mov dword [esp + 0x98], 0x450420
mov dword [esp + 0x9c], 0x450430
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa8], esi
mov dword [esp + 0x90], 0
test edx, edx
je 0x49b3bf
lea ecx, [esp + 0x90]
call fcn.00450150
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x10]
inc ecx
add eax, 0x14
mov dword [esp + 0x10], ecx
mov dword [esp + 0x2c], eax
cmp ecx, dword [edi]
jl 0x49b360
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0xe0]
test edx, edx
je 0x49b477
xor ecx, ecx
lea eax, [edx + 8]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x10], ecx
cmp dword [edx], ecx
jle 0x49b477
mov edi, edx
nop dword [eax]
mov edx, dword [eax]
lea esi, [esp + 0xb8]
mov dword [esp + 0x94], 0x45ecb0
mov dword [esp + 0x98], 0x450420
mov dword [esp + 0x9c], 0x450430
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa8], esi
mov dword [esp + 0x90], 0
test edx, edx
je 0x49b45f
lea ecx, [esp + 0x90]
call fcn.00450150
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x10]
inc ecx
add eax, 0x14
mov dword [esp + 0x10], ecx
mov dword [esp + 0x2c], eax
cmp ecx, dword [edi]
jl 0x49b400
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x49b531
cmp dword [esp + 0x44], 0
je 0x49b4de
mov eax, dword [esp + 0x1c]
xorps xmm0, xmm0
movlpd qword [esp + 0x98], xmm0
movlpd qword [esp + 0xa0], xmm0
mov dword [esp + 0x90], esi
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x94], 0x499120
mov dword [esp + 0xa8], eax
test edx, edx
je 0x49b4d7
lea ecx, [esp + 0x90]
call fcn.00450150
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x70]
mov eax, dword [eax + 0x24]
mov dword [esp + 0x64], eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x94], 0x45ecb0
mov edx, ecx
mov dword [esp + 0x98], 0x450420
lea ecx, [esp + 0x90]
mov dword [esp + 0x9c], 0x450430
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa8], eax
mov dword [esp + 0x90], 0
call fcn.00450150
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0x28], 0
jne 0x49b669
cmp dword [eax + 0x2c], 0
jne 0x49b669
cmp dword [ecx + 0x24], 1
jne 0x49b669
mov eax, dword [ecx + 0x20]
mov eax, dword [eax]
mov edx, dword [eax + 0x14]
mov dword [esp + 0x10], edx
test edx, edx
je 0x49b669
cmp dword [edx], 1
jne 0x49b669
test dword [eax + 4], 0x1000000
jne 0x49b669
mov edx, dword [esp + 0x3c]
test dword [edx + 0x50], 0x10000
jne 0x49b669
mov eax, dword [eax + 8]
mov edx, 0x690118
mov dword [esp + 0x14], eax
sub eax, edx
mov dword [esp + 0x20], eax
nop word [eax + eax]
movzx ecx, byte [eax + edx]
movzx eax, byte [edx]
cmp ecx, eax
jne 0x49b5df
test ecx, ecx
jne 0x49b5f1
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 8]
call fcn.00456e10
neg eax
mov byte [esp + 0x2b], 1
sbb al, al
and eax, 0xffffff02
mov dword [esp + 0x2c], eax
jmp 0x49b620
movzx eax, byte [eax + 0x6949d8]
movzx ecx, byte [ecx + 0x6949d8]
sub ecx, eax
jne 0x49b5f8
mov eax, dword [esp + 0x20]
inc edx
jmp 0x49b5b0
mov eax, dword [esp + 0x14]
mov edx, 0x69011c
sub eax, edx
mov dword [esp + 0x14], eax
movzx ecx, byte [eax + edx]
movzx eax, byte [edx]
cmp ecx, eax
jne 0x49b64c
test ecx, ecx
jne 0x49b65e
mov byte [esp + 0x2c], 1
mov byte [esp + 0x2b], 2
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x3c]
push 0
call fcn.00455bf0
mov ecx, eax
add esp, 4
mov dword [esp + 0xdc], ecx
test ecx, ecx
je 0x49b646
mov eax, dword [esp + 0x2c]
mov byte [ecx + 0x10], al
mov ecx, dword [esp + 0x24]
jmp 0x49b66e
movzx eax, byte [eax + 0x6949d8]
movzx ecx, byte [ecx + 0x6949d8]
sub ecx, eax
jne 0x49b665
mov eax, dword [esp + 0x14]
inc edx
jmp 0x49b607
mov ecx, dword [esp + 0x24]
mov byte [esp + 0x2b], 0
lea edx, [esp + 0xb8]
call fcn.00497e80
mov eax, dword [esp + 0x3c]
cmp byte [eax + 0x57], 0
jne 0x49d029
cmp dword [esp + 0x44], 0
je 0x49c88f
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x6c], 0
mov dword [esp + 0x10], 0
cmp dword [ecx + 0x24], 1
jne 0x49b78e
mov eax, dword [ecx + 0x20]
cmp dword [eax + 8], 0
jl 0x49b78e
mov eax, dword [eax]
test eax, eax
je 0x49b78e
test dword [eax + 4], 0x1000
jne 0x49b78e
mov edx, dword [eax + 0x14]
test edx, edx
je 0x49b78e
mov edx, dword [edx + 8]
test edx, edx
je 0x49b6fd
mov ecx, dword [esp + 0x3c]
push 0
push 0
call fcn.00455770
add esp, 8
mov dword [esp + 0x14], eax
jmp 0x49b705
mov dword [esp + 0x14], 0
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x3c]
push 0
call fcn.00455bf0
mov ecx, eax
add esp, 4
mov dword [esp + 0x6c], ecx
test ecx, ecx
jne 0x49b732
mov edx, dword [esp + 0x14]
mov ecx, dword [esi]
call fcn.00456340
mov dword [esp + 0x6c], eax
jmp 0x49b77d
mov eax, dword [ecx]
lea edx, [eax + 1]
cmp dword [ecx + 4], edx
jge 0x49b753
mov eax, dword [esp + 0x14]
mov edx, ecx
mov ecx, dword [esi]
push eax
call fcn.004563b0
add esp, 4
mov dword [esp + 0x6c], eax
jmp 0x49b77d
movups xmm0, xmmword [0x6938f0]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*4]
mov eax, dword [esp + 0x6c]
mov dword [eax], edx
mov eax, dword [0x693900]
movups xmmword [ecx + 8], xmm0
mov dword [ecx + 0x18], eax
mov eax, dword [esp + 0x14]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x24]
neg eax
sbb eax, eax
and eax, 0x500
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x28]
mov edx, dword [esp + 0x44]
mov dword [ecx + 4], eax
inc dword [esi + 0x28]
push dword [ecx + 0x18]
mov ecx, esi
push 0
call fcn.0048f8f0
mov ecx, dword [edi + 0x6c]
add esp, 8
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x2c], ecx
movzx edx, word [eax + 2]
mov eax, dword [eax + 4]
mov dword [esp + 0x20], eax
cmp dword [edi + 0x70], ecx
jg 0x49b7e7
push 0
push edx
push eax
mov edx, 0x77
mov ecx, edi
call fcn.0043b5e0
mov edx, eax
add esp, 0xc
mov dword [esp + 0x2c], edx
jmp 0x49b81e
mov esi, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + ecx*4], 0x77
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, edx
cmp byte [ecx + 0x57], 0
je 0x49b83f
mov edx, dword [esp + 0x88]
push edx
mov edx, 0xfffffff8
call fcn.0043c1e0
add esp, 4
jmp 0x49b87a
test edx, edx
jns 0x49b847
mov eax, dword [edi + 0x6c]
dec eax
mov edx, dword [esp + 0x88]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x49b86f
push 0xfffffffffffffff8
push edx
mov edx, eax
mov ecx, edi
call fcn.0043c370
add esp, 8
jmp 0x49b87a
test edx, edx
je 0x49b87a
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov eax, dword [esi + 0x2c]
inc eax
mov dword [esp + 0x54], eax
lea edx, [eax + 1]
mov eax, dword [esi + 0x38]
dec eax
mov dword [esp + 0x74], edx
mov dword [esp + 0x50], eax
lea ecx, [edx + 2]
dec eax
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x38], eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x48], ecx
add ecx, dword [eax]
mov dword [esi + 0x2c], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
add eax, ecx
mov dword [esi + 0x2c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49b8df
push 0
push edx
push 0
mov edx, 0x47
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49b912
mov esi, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov ecx, dword [edi + 0x6c]
add edx, dword [eax]
cmp dword [edi + 0x70], ecx
jg 0x49b93e
mov eax, dword [esp + 0x48]
mov ecx, edi
push edx
inc eax
mov edx, 0x4b
push eax
push 0
call fcn.0043b5e0
add esp, 0xc
jmp 0x49b976
mov esi, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
inc esi
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49b999
push 0
push dword [esp + 0x18]
mov edx, 0xa
mov ecx, edi
push dword [esp + 0x50]
call fcn.0043b5e0
add esp, 0xc
jmp 0x49b9cc
mov edx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x7c]
mov edx, 0x80
neg ecx
mov eax, 0x40
push 0
sbb ecx, ecx
and ecx, 0x200
cmp byte [esp + 0x124], 2
cmove eax, edx
mov edx, dword [esp + 0x3c]
or cx, ax
or cx, word [esp + 0x14]
movzx eax, cx
mov ecx, esi
push eax
push dword [esp + 0x24]
mov eax, dword [esp + 0x78]
push eax
push dword [esp + 0x54]
push dword [esp + 0x78]
call fcn.004b88b0
mov edx, eax
add esp, 0x18
mov dword [esp + 0x64], edx
test edx, edx
jne 0x49ba42
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x49d025
mov ecx, dword [esp + 0x3c]
mov edx, eax
call fcn.00456880
jmp 0x49d025
cmp dword [esi + 0x48], 0
je 0x49baa7
mov edx, dword [esp + 0x24]
cmp word [edx + 2], 0
mov eax, dword [edx + 0x1c]
mov dword [edx + 0x18], eax
jbe 0x49ba93
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
dec ecx
cmp dword [edx + 0x1c], 0
jle 0x49ba8c
mov edi, dword [edx + 0x14]
add edi, 0xe
xor esi, esi
movsx eax, word [edi]
lea edi, [edi + 0x10]
cmp eax, ecx
cmovle eax, ecx
inc esi
mov ecx, eax
cmp esi, dword [edx + 0x1c]
jl 0x49ba71
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x18]
lea eax, [ecx + 1]
mov word [edx + 2], ax
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0xb8]
call fcn.00497e80
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x24]
mov eax, dword [esi + 0x2c]
inc eax
mov dword [ecx + 0xc], eax
mov eax, dword [ecx + 0x24]
add eax, dword [ecx + 0x18]
xor ecx, ecx
add dword [esi + 0x2c], eax
movzx eax, byte [edx + 0x2f]
mov dword [esp + 0x20], eax
mov al, byte [edx + 0x2d]
test al, al
movsx edx, al
mov eax, dword [esp + 0x44]
cmovns ecx, edx
cmp ecx, dword [eax]
jne 0x49bae9
mov eax, dword [esp + 0x24]
mov dword [esp + 0x78], 0
jmp 0x49beaa
cmp byte [esp + 0x120], 0
je 0x49bb02
mov eax, dword [esp + 0x1c]
test byte [eax + 4], 1
mov eax, str.DISTINCT
je 0x49bb07
mov eax, str.GROUP_BY
push eax
push str.USE_TEMP_B_TREE_FOR__s
push 0
push esi
call fcn.0043bc20
mov eax, dword [esp + 0x54]
add esp, 0x10
mov dword [esp + 0x78], 1
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x34], eax
mov edx, eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x60], ecx
mov edi, dword [eax + 0x18]
test edi, edi
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x30]
jle 0x49bb81
mov edi, dword [eax + 0x14]
mov esi, edx
add edi, 0xe
nop dword [eax]
movsx ecx, word [edi]
lea eax, [esi + 1]
cmp ecx, edx
lea edi, [edi + 0x10]
cmovl eax, esi
mov esi, eax
lea eax, [edx + 1]
cmovl eax, edx
sub dword [esp + 0x68], 1
mov edx, eax
jne 0x49bb50
mov edi, dword [esp + 0x30]
mov ecx, esi
mov dword [esp + 0x60], esi
mov esi, dword [esp + 0x18]
mov dword [esp + 0x60], ecx
cmp ecx, 1
jne 0x49bbb4
mov cl, byte [esi + 0x13]
lea eax, [esi + 0x13]
mov dword [esp + 0x68], eax
test cl, cl
jne 0x49bba0
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x38], eax
jmp 0x49bbe1
dec cl
mov byte [eax], cl
movzx eax, cl
mov eax, dword [esi + eax*4 + 0xa4]
mov dword [esp + 0x38], eax
jmp 0x49bbe1
mov edx, dword [esi + 0x20]
mov dword [esp + 0x38], edx
cmp ecx, dword [esi + 0x1c]
jg 0x49bbcb
sub dword [esi + 0x1c], ecx
lea eax, [edx + ecx]
mov dword [esi + 0x20], eax
jmp 0x49bbda
mov eax, dword [esi + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [esp + 0x38], edx
mov dword [esi + 0x2c], eax
lea eax, [esi + 0x13]
mov dword [esp + 0x68], eax
mov edx, dword [esp + 0x44]
mov ecx, esi
push 0
push 0
push dword [esp + 0x40]
call fcn.0045cf60
mov ecx, dword [esp + 0x30]
add esp, 0xc
mov dword [esp + 0x80], 0
cmp dword [ecx + 0x18], 0
mov byte [ecx], 1
jle 0x49bc87
xor eax, eax
lea edi, [esi + 0x13]
mov dword [esp + 0x68], eax
nop dword [eax + eax]
mov edx, dword [ecx + 0x14]
add edx, eax
movsx eax, word [edx + 0xe]
cmp eax, dword [esp + 0x34]
jl 0x49bc53
mov eax, dword [esp + 0x34]
mov ecx, esi
add eax, dword [esp + 0x38]
mov edx, dword [edx + 4]
push eax
call fcn.0045ce90
mov ecx, dword [esp + 0x28]
add esp, 4
inc dword [esp + 0x34]
mov dword [esp + 0x40], edi
jmp 0x49bc5a
lea eax, [esi + 0x13]
mov dword [esp + 0x40], eax
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x68]
inc edx
add eax, 0x10
mov dword [esp + 0x80], edx
mov dword [esp + 0x68], eax
cmp edx, dword [ecx + 0x18]
jl 0x49bc20
mov eax, dword [esp + 0x40]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x68], eax
jmp 0x49bc8a
lea eax, [esi + 0x13]
mov byte [ecx], 0
mov cl, byte [eax]
test cl, cl
jne 0x49bc9b
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x49bca9
dec cl
mov byte [eax], cl
movzx eax, cl
mov eax, dword [esi + eax*4 + 0xa4]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x34], eax
cmp dword [edi + 0x70], ecx
jg 0x49bcd4
mov edx, dword [esp + 0x60]
mov ecx, edi
push eax
push edx
push dword [esp + 0x40]
mov edx, 0x61
call fcn.0043b5e0
mov edx, dword [esp + 0x40]
add esp, 0xc
jmp 0x49bd07
mov edx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x60]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x24]
mov ecx, dword [edi + 0x6c]
mov eax, dword [eax + 4]
mov dword [esp + 0x58], eax
cmp dword [edi + 0x70], ecx
jg 0x49bd33
push 0
push edx
push eax
mov edx, 0x8b
mov ecx, edi
call fcn.0043b5e0
mov edx, dword [esp + 0x40]
add esp, 0xc
jmp 0x49bd66
mov esi, dword [esp + 0x58]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x8b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x68]
test edx, edx
je 0x49bd80
mov al, byte [ecx]
cmp al, 8
jae 0x49bd80
movzx eax, al
mov dword [esi + eax*4 + 0xa4], edx
inc byte [ecx]
mov eax, dword [esp + 0x60]
cmp eax, 1
jne 0x49bda5
mov edx, dword [esp + 0x38]
test edx, edx
je 0x49bdb4
mov al, byte [ecx]
cmp al, 8
jae 0x49bdb4
movzx eax, al
mov dword [esi + eax*4 + 0xa4], edx
inc byte [ecx]
jmp 0x49bdb4
cmp eax, dword [esi + 0x1c]
jle 0x49bdb4
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x38]
mov dword [esi + 0x20], eax
mov ecx, dword [esp + 0x64]
call fcn.004b9910
mov eax, dword [esp + 0x24]
mov edx, dword [esi + 0x28]
mov dword [esp + 0x34], edx
mov dword [eax + 8], edx
mov eax, dword [esp + 0x68]
inc dword [esi + 0x28]
mov cl, byte [eax]
test cl, cl
jne 0x49bde0
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x49bdee
dec cl
mov byte [eax], cl
movzx eax, cl
mov eax, dword [esi + eax*4 + 0xa4]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x68], eax
cmp dword [edi + 0x70], ecx
jg 0x49be15
mov edx, dword [esp + 0x60]
mov ecx, edi
push edx
push eax
push dword [esp + 0x3c]
mov edx, 0x79
call fcn.0043b5e0
add esp, 0xc
jmp 0x49be48
mov esi, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x60]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x24]
mov ecx, dword [edi + 0x6c]
mov edx, dword [eax + 4]
cmp dword [edi + 0x70], ecx
jg 0x49be6f
push 0
push dword [esp + 0x50]
mov ecx, edi
push edx
mov edx, 0x22
call fcn.0043b5e0
add esp, 0xc
jmp 0x49bea2
mov esi, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + ecx*4], 0x22
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x24]
mov byte [eax + 1], 1
cmp dword [esi + 0x48], 0
je 0x49bf1f
cmp dword [eax + 0x24], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x90], xmm0
movq qword [esp + 0xa0], xmm0
mov dword [esp + 0xa8], 0
mov dword [esp + 0x94], 0x497ff0
jle 0x49bf1f
mov edi, dword [esp + 0x24]
xor ecx, ecx
mov dword [esp + 0x40], ecx
xor esi, esi
nop dword [eax]
mov eax, dword [edi + 0x20]
mov edx, dword [ecx + eax]
test edx, edx
je 0x49bf0a
lea ecx, [esp + 0x90]
call fcn.00450150
mov ecx, dword [esp + 0x40]
inc esi
add ecx, 0x18
mov dword [esp + 0x40], ecx
cmp esi, dword [edi + 0x24]
jl 0x49bef0
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x18]
cmp dword [esp + 0x7c], 0
je 0x49bf84
mov eax, dword [esp + 0x3c]
test byte [eax + 0x50], 4
jne 0x49bf84
cmp dword [esp + 0x78], 0
jne 0x49bf41
mov eax, dword [esp + 0x64]
test byte [eax + 0x30], 8
je 0x49bf84
mov dword [esp + 0xe0], 0
mov ecx, dword [edi]
cmp byte [ecx + 0x57], 0
jne 0x49bf84
mov eax, dword [esp + 0xf4]
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + edx*4 + 0x10]
lea esi, [eax + edx*4]
movsx edx, byte [esi + 1]
call fcn.0043c1e0
mov word [esi], 0xbb
add esp, 4
mov dword [esi + 0x10], 0
mov esi, dword [esp + 0x18]
cmp dword [esp + 0x78], 0
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x80], ecx
je 0x49bfee
mov eax, dword [esp + 0x24]
mov edx, dword [eax + 4]
cmp dword [edi + 0x70], ecx
jg 0x49bfbb
push dword [esp + 0x34]
mov ecx, edi
push dword [esp + 0x6c]
push edx
mov edx, 0x85
call fcn.0043b5e0
add esp, 0xc
jmp 0x49bfee
mov esi, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x85
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x44]
xor eax, eax
mov dword [esp + 0x7c], eax
cmp dword [ecx], eax
jle 0x49c0ae
add ecx, 8
mov dword [esp + 0x40], ecx
nop word [eax + eax]
mov edx, dword [esp + 0x8c]
add edx, eax
cmp dword [esp + 0x78], 0
mov dword [esp + 0x58], edx
je 0x49c078
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49c043
push edx
push eax
push dword [esp + 0x3c]
mov edx, 0x5e
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c08c
mov edx, dword [esp + 0x34]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x58]
mov dword [eax + ecx*4], 0x5e
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x49c08c
mov eax, dword [esp + 0x24]
push edx
mov byte [eax], 1
mov edx, dword [ecx]
mov ecx, esi
call fcn.0045ce90
add esp, 4
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x44]
inc eax
mov ecx, dword [esp + 0x40]
add ecx, 0x14
mov dword [esp + 0x7c], eax
mov dword [esp + 0x40], ecx
cmp eax, dword [edx]
jl 0x49c010
mov ecx, edx
mov eax, dword [esp + 0x88]
test eax, eax
je 0x49c0bb
inc dword [eax]
mov edx, dword [edi + 0x6c]
mov eax, dword [ecx]
mov dword [esp + 0x58], eax
cmp dword [edi + 0x70], edx
jg 0x49c0ea
push eax
mov eax, dword [esp + 0x4c]
mov edx, 0x5a
push dword [esp + 0x90]
inc eax
mov ecx, edi
push eax
call fcn.0043b5e0
add esp, 0xc
mov edx, eax
jmp 0x49c129
mov esi, dword [esp + 0x48]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
inc esi
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x8c]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x58]
mov dword [eax + ecx*4 + 0xc], esi
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x5a
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
cmp byte [ecx + 0x57], 0
je 0x49c148
mov edx, dword [esp + 0x88]
push edx
mov edx, 0xfffffff8
call fcn.0043c1e0
add esp, 4
jmp 0x49c183
test edx, edx
jns 0x49c150
mov edx, dword [edi + 0x6c]
dec edx
mov eax, dword [edi + 0x68]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov edx, dword [esp + 0x88]
je 0x49c178
push 0xfffffffffffffff8
push edx
mov edx, eax
mov ecx, edi
call fcn.0043c370
add esp, 8
jmp 0x49c183
test edx, edx
je 0x49c183
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov eax, dword [edi + 0x6c]
mov dword [esp + 0x7c], eax
lea edx, [eax + 1]
cmp dword [edi + 0x70], eax
jg 0x49c1a7
push edx
push 0
push edx
mov edx, 0xe
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c1d3
mov esi, dword [esp + 0x18]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
mov dword [edi + 0x6c], edx
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 8]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x58], ecx
mov edx, dword [ecx + 0x6c]
mov eax, dword [eax]
mov dword [esp + 0x40], eax
cmp dword [ecx + 0x70], edx
jg 0x49c209
push eax
mov eax, dword [esp + 0x4c]
mov edx, 0x4f
inc eax
push eax
push dword [esp + 0x94]
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c248
mov esi, dword [esp + 0x18]
lea eax, [edx + 1]
mov dword [ecx + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x8c]
mov eax, dword [eax + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x48]
inc edx
mov dword [eax + ecx*4], 0x4f
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x40]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49c26d
mov eax, dword [esp + 0x74]
mov edx, 0xa
push 0
push dword [esp + 0x54]
inc eax
mov ecx, edi
push eax
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c2a5
mov edx, dword [esp + 0x74]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x18]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x50]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49c2c8
push 0
push dword [esp + 0x50]
mov edx, 0x3b
mov ecx, edi
push dword [esp + 0x7c]
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c2fb
mov edx, dword [esp + 0x74]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + ecx*4], 0x3b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49c31e
push 0
push dword [esp + 0x18]
mov edx, 0xa
mov ecx, edi
push dword [esp + 0x50]
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c351
mov edx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x49c363
mov eax, 0x6c6380
jmp 0x49c370
mov eax, dword [esp + 0x7c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
push dword [esp + 0x20]
mov dword [eax + 8], edx
mov ecx, esi
push dword [esp + 0x28]
mov edx, dword [esp + 0x5c]
call fcn.00498870
mov ecx, dword [edi + 0x6c]
add esp, 8
cmp dword [edi + 0x70], ecx
jg 0x49c3aa
push 0
push dword [esp + 0x58]
mov edx, 0x47
mov ecx, edi
push 1
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c3dd
mov edx, dword [esp + 0x54]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x78], 0
je 0x49c442
mov eax, dword [esp + 0x24]
mov ecx, dword [edi + 0x6c]
mov edx, dword [eax + 4]
cmp dword [edi + 0x70], ecx
jg 0x49c40e
push 0
push dword [esp + 0x84]
mov ecx, edi
push edx
mov edx, 0x25
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c480
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x80]
mov dword [eax + ecx*4], 0x25
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x49c47c
mov ecx, dword [esp + 0x64]
call fcn.004b9910
mov ecx, dword [edi]
cmp byte [ecx + 0x57], 0
jne 0x49c480
mov eax, dword [esp + 0x2c]
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + edx*4 + 0x10]
lea esi, [eax + edx*4]
movsx edx, byte [esi + 1]
call fcn.0043c1e0
add esp, 4
mov word [esi], 0xbb
mov dword [esi + 0x10], 0
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x49c493
mov ecx, dword [esp + 0x3c]
mov edx, eax
call fcn.00456880
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49c4b8
mov eax, dword [esp + 0x74]
mov edx, 0xa
push 0
push dword [esp + 0x54]
inc eax
mov ecx, edi
push eax
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c4f0
mov edx, dword [esp + 0x74]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x18]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x50]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49c511
push 0
push dword [esp + 0x50]
mov edx, 9
mov ecx, edi
push 0
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c544
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x58], ecx
cmp dword [edi + 0x70], ecx
jg 0x49c570
push 0
push dword [esp + 0x78]
mov edx, 0x47
mov ecx, edi
push 1
call fcn.0043b5e0
mov edx, dword [esp + 0x80]
add esp, 0xc
jmp 0x49c5a3
mov edx, dword [esp + 0x74]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49c5c4
push 0
lea eax, [edx + 1]
mov ecx, edi
push 0
push eax
mov edx, 0x43
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c5fc
mov edx, dword [esp + 0x74]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x18]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
lea eax, [edi + 0xc]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x78], eax
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x49c621
push edx
mov edx, edi
call fcn.0043be50
add esp, 4
jmp 0x49c62a
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [edi + 0x6c]
lea ecx, [eax + 1]
lea edx, [eax + 2]
mov dword [esp + 0x40], ecx
cmp dword [edi + 0x70], eax
jg 0x49c654
push 0
push edx
push dword [esp + 0x5c]
mov edx, 0x3b
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c684
mov esi, dword [esp + 0x54]
mov dword [edi + 0x6c], ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x3b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49c6a7
mov eax, dword [esp + 0x74]
mov edx, 0x43
push 0
inc eax
mov ecx, edi
push 0
push eax
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c6df
mov edx, dword [esp + 0x74]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x18]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x24]
mov ecx, esi
call fcn.00498350
push 0x10
push dword [esp + 0x44]
push dword [esp + 0x78]
push esi
call fcn.0045d860
push dword [esp + 0x68]
mov edx, dword [esp + 0x30]
lea eax, [esp + 0x134]
push dword [esp + 0x54]
mov ecx, esi
push dword [esp + 0x9c]
push eax
lea eax, [esp + 0x100]
push eax
push 0xffffffffffffffff
call fcn.0048e920
mov ecx, dword [edi + 0x6c]
add esp, 0x28
cmp dword [edi + 0x70], ecx
jg 0x49c74c
mov eax, dword [esp + 0x74]
mov edx, 0x43
push 0
inc eax
mov ecx, edi
push 0
push eax
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c784
mov edx, dword [esp + 0x74]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x18]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x14]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x49c7a2
push edx
mov edx, edi
call fcn.0043be50
add esp, 4
jmp 0x49c7ab
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov edx, dword [esp + 0x24]
mov ecx, esi
call fcn.00498040
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49c7d7
push 0
push dword [esp + 0x58]
mov edx, 0x47
mov ecx, edi
push 0
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c80a
mov edx, dword [esp + 0x54]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49c82b
push 0
push 0
push dword [esp + 0x50]
mov edx, 0x43
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49c85e
mov edx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp word [esp + 0x10], 0
je 0x49c887
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x49c887
mov eax, dword [esp + 0x24]
mov edx, ecx
mov ecx, esi
mov eax, dword [eax + 0x20]
push dword [eax + 0xc]
push dword [eax + 8]
call fcn.0048e850
add esp, 8
lea edx, [edi + 0xc]
jmp 0x49cf6d
mov edx, dword [esp + 0x1c]
cmp dword [edx + 0x24], 0
jne 0x49cc7e
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x10], eax
cmp dword [eax], 1
jne 0x49cc7e
mov ecx, dword [edx + 0x20]
cmp dword [ecx], 1
jne 0x49cc7e
cmp dword [ecx + 0x1c], 0
jne 0x49cc7e
mov eax, dword [esp + 0x24]
cmp dword [eax + 0x24], 1
jne 0x49cc7e
cmp dword [edx + 0x2c], 0
jne 0x49cc7e
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x54], ecx
cmp byte [ecx + 0x2b], 0
jne 0x49cc7e
mov edx, dword [esp + 0x10]
mov edx, dword [edx + 8]
cmp byte [edx], 0xa8
jne 0x49cc7e
mov esi, dword [esp + 0x10]
mov edx, dword [esi + 8]
mov esi, dword [esp + 0x18]
cmp dword [edx + 0x28], eax
jne 0x49cc7e
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 4]
test dword [eax + 4], 0x100
je 0x49cc7e
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 8]
mov edx, dword [esp + 0x1c]
test dword [eax + 4], 0x1000004
jne 0x49cc7e
mov eax, dword [ecx + 0x3c]
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], 0xffff8000
test eax, eax
je 0x49c970
mov eax, dword [esi]
xor ecx, ecx
mov edi, dword [esp + 0x20]
mov dword [esp + 0x34], ecx
mov eax, dword [eax + 0x10]
add eax, 0xc
cmp dword [eax], edi
je 0x49c970
lea eax, [eax + 0x10]
inc ecx
cmp dword [eax], edi
jne 0x49c964
mov dword [esp + 0x34], ecx
mov eax, dword [esi + 0x28]
xor ecx, ecx
mov dword [esp + 0x14], eax
inc eax
mov dword [esi + 0x28], eax
xor eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x50], ecx
mov ecx, esi
mov eax, dword [eax + 0x14]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x80]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x58], ecx
mov eax, dword [ecx + 0x5c]
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x64], eax
mov eax, 1
shl eax, cl
test dword [esp + 0x64], eax
jne 0x49c9df
mov eax, dword [esp + 0x64]
bts eax, ecx
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x58]
mov edi, dword [esp + 0x64]
mov dword [eax + 0x5c], edi
cmp ecx, 1
jne 0x49c9e4
mov ecx, eax
call fcn.00470950
jmp 0x49ca0e
cmp ecx, 1
je 0x49ca12
mov eax, dword [esi]
add ecx, ecx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx*8 + 4]
cmp byte [eax + 9], 0
je 0x49ca12
mov eax, dword [esp + 0x54]
mov ecx, esi
mov edx, dword [esp + 0x34]
push dword [eax]
push 0
push dword [eax + 0x14]
call fcn.00466bf0
add esp, 0xc
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
test byte [eax + 0x1c], 0x80
je 0x49ca3d
mov ecx, dword [eax + 8]
mov dword [esp + 0x50], ecx
test ecx, ecx
je 0x49ca3f
mov eax, dword [ecx + 0x38]
and al, 3
cmp al, 2
je 0x49ca37
mov ecx, dword [ecx + 0x14]
test ecx, ecx
jne 0x49ca27
mov dword [esp + 0x50], ecx
jmp 0x49ca3f
xor ecx, ecx
mov eax, dword [edx + 0x20]
mov edi, dword [esp + 0x30]
test byte [eax + 0x30], 1
jne 0x49ca88
mov edx, dword [esp + 0x54]
mov eax, dword [edx + 8]
test eax, eax
je 0x49ca88
test byte [eax + 0x38], 4
jne 0x49ca79
movzx edi, word [eax + 0x30]
cmp di, word [edx + 0x28]
jge 0x49ca79
cmp dword [eax + 0x24], 0
jne 0x49ca79
test ecx, ecx
je 0x49ca77
cmp di, word [ecx + 0x30]
jge 0x49ca79
mov ecx, eax
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x49ca57
mov edi, dword [esp + 0x30]
mov dword [esp + 0x50], ecx
test ecx, ecx
je 0x49caa0
mov eax, dword [ecx + 0x2c]
mov edx, ecx
mov ecx, esi
mov dword [esp + 0x10], eax
call fcn.00471350
mov dword [esp + 0x20], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49cac9
mov edx, dword [esp + 0x10]
mov ecx, edi
push 1
push dword [esp + 0x38]
push edx
mov edx, dword [esp + 0x20]
push edx
mov edx, 0x70
call fcn.0043b620
add esp, 0x10
jmp 0x49cafc
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4], 0xfd70
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 1
mov edx, dword [esp + 0x20]
test edx, edx
je 0x49cb48
mov ecx, dword [edi]
cmp byte [ecx + 0x57], 0
je 0x49cb1c
push edx
mov edx, 0xfffffff8
call fcn.0043c1e0
add esp, 4
jmp 0x49cb48
mov eax, dword [edi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 - 0x13], 0
lea eax, [eax + ecx*4]
je 0x49cb41
push 0xfffffffffffffff8
push edx
lea edx, [eax - 0x14]
mov ecx, edi
call fcn.0043c370
add esp, 8
jmp 0x49cb48
mov dword [eax - 4], edx
mov byte [eax - 0x13], 0xf8
mov ecx, dword [esp + 0x24]
mov eax, dword [esi + 0x2c]
inc eax
mov dword [ecx + 0xc], eax
mov eax, dword [ecx + 0x24]
add eax, dword [ecx + 0x18]
add dword [esi + 0x2c], eax
mov eax, dword [ecx + 0x18]
add eax, dword [ecx + 0xc]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x58], eax
cmp dword [edi + 0x70], ecx
jg 0x49cb8a
push 0
push eax
push dword [esp + 0x1c]
mov edx, 0x62
mov ecx, edi
call fcn.0043b5e0
mov edx, dword [esp + 0x20]
add esp, 0xc
jmp 0x49cbc1
mov esi, dword [esp + 0x58]
lea eax, [ecx + 1]
mov edx, dword [esp + 0x14]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [esp + 0x18]
mov dword [eax + ecx*4], 0x62
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49cbdf
push 0
push 0
push edx
mov edx, 0x7a
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49cc12
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x7a
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esi + 0xdb], 2
jne 0x49cf2a
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
test ecx, ecx
je 0x49cc46
test byte [edx + 0x1c], 0x80
je 0x49cc3a
mov eax, dword [ecx + 0x38]
and al, 3
cmp al, 2
je 0x49cc46
mov eax, dword [ecx]
mov dword [esp + 0x20], 1
jmp 0x49cc53
mov dword [esp + 0x20], 0
mov eax, 0x688421
cmp dword [esp + 0x20], 0
mov ecx, 0x688421
push eax
mov eax, str._USING_COVERING_INDEX
cmove eax, ecx
push eax
push dword [edx]
push str.SCAN__s_s_s
push 0
push esi
call fcn.0043bc20
add esp, 0x18
jmp 0x49cf2a
mov edx, dword [esp + 0x24]
mov dword [esp + 0x10], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x40], 0
cmp dword [edx + 0x1c], 0
mov eax, dword [edx + 0x24]
mov dword [esp + 0x20], eax
je 0x49cd4b
xor edx, edx
test eax, eax
jle 0x49cce6
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x20]
nop dword [eax + eax]
mov eax, dword [ecx]
test dword [eax + 4], 0x1000000
jne 0x49ccd4
mov eax, dword [ecx + 4]
test byte [eax + 4], 0x20
jne 0x49cce2
mov eax, dword [esp + 0x20]
inc edx
add ecx, 0x18
cmp edx, eax
jl 0x49ccc0
jmp 0x49cce6
mov eax, dword [esp + 0x20]
cmp edx, eax
jne 0x49cd72
inc dword [esi + 0x2c]
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 0x2c]
mov dword [esp + 0x10], edx
cmp dword [edi + 0x70], ecx
jg 0x49cd16
push 0
push edx
push 0
mov edx, 0x47
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49cd72
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x30]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x49cd72
cmp eax, 1
jne 0x49cd72
mov eax, dword [edx + 0x20]
cmp dword [eax + 8], 0
jl 0x49cd72
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x80], eax
neg eax
sbb eax, eax
and eax, 0x500
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x24]
mov edx, ecx
mov eax, dword [esi + 0x2c]
inc eax
mov dword [ecx + 0xc], eax
mov eax, dword [ecx + 0x24]
add eax, dword [ecx + 0x18]
mov ecx, esi
add dword [esi + 0x2c], eax
call fcn.00498040
movzx eax, byte [esp + 0x2b]
mov ecx, esi
or ax, word [esp + 0x40]
mov edx, dword [esp + 0x38]
push 0
movzx eax, ax
push eax
push dword [esp + 0x24]
push dword [esp + 0x8c]
push dword [esp + 0xec]
push dword [esp + 0x78]
call fcn.004b88b0
add esp, 0x18
mov dword [esp + 0x54], eax
test eax, eax
je 0x49d025
movzx eax, byte [eax + 0x2f]
mov ecx, esi
mov edx, dword [esp + 0x10]
push eax
push dword [esp + 0x28]
mov dword [esp + 0x60], eax
call fcn.00498870
mov edx, dword [esp + 0x60]
add esp, 8
test edx, edx
je 0x49ce0d
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x20]
test eax, eax
je 0x49ce0d
push dword [eax + 0xc]
mov ecx, esi
push dword [eax + 8]
call fcn.0048e850
add esp, 8
mov edx, dword [esp + 0x10]
test edx, edx
je 0x49ce66
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49ce33
push 0
push edx
push 1
mov edx, 0x47
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49ce66
mov esi, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0x2b], 0
mov eax, dword [esp + 0x54]
je 0x49cf18
test byte [eax + 0x30], 4
je 0x49cf18
cmp byte [eax + 0x2d], 0
je 0x49cf18
movzx edx, byte [eax + 0x2c]
sub edx, 1
js 0x49ceb8
lea ecx, [edx + edx*2]
shl ecx, 5
add ecx, eax
nop word [eax + eax]
mov eax, dword [ecx + 0x348]
test byte [eax + 0x2c], 4
jne 0x49cebd
sub ecx, 0x60
sub edx, 1
jns 0x49cea0
mov eax, dword [esp + 0x54]
mov edx, dword [eax + 0x20]
jmp 0x49cec3
mov edx, dword [ecx + 0x308]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x49cee1
push 0
push edx
push 0
mov edx, 9
mov ecx, edi
call fcn.0043b5e0
add esp, 0xc
jmp 0x49cf14
mov esi, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4], 9
mov eax, dword [esp + 0x54]
mov ecx, eax
call fcn.004b9910
mov edx, dword [esp + 0x24]
mov ecx, esi
call fcn.00498350
push 0x10
push dword [esp + 0x50]
mov dword [esp + 0xe8], 0
push dword [esp + 0x78]
push esi
call fcn.0045d860
mov eax, dword [esp + 0x5c]
mov ecx, esi
mov edx, dword [esp + 0x2c]
push eax
push eax
push dword [esp + 0x9c]
push 0
push 0
push 0xffffffffffffffff
call fcn.0048e920
lea edx, [edi + 0xc]
add esp, 0x28
mov dword [esp + 0x78], edx
mov ecx, dword [edx]
not dword [esp + 0x4c]
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x49cf8b
push dword [esp + 0x4c]
mov edx, edi
call fcn.0043be50
add esp, 4
jmp 0x49cfa0
mov eax, dword [edi + 0x6c]
mov edi, dword [esp + 0x4c]
mov ecx, dword [ecx + 0x40]
mov dword [esp + 0x78], edx
mov dword [ecx + edi*4], eax
mov edi, dword [esp + 0x30]
cmp byte [esp + 0x121], 3
jne 0x49cfbf
push str.DISTINCT
push str.USE_TEMP_B_TREE_FOR__s
push 0
push esi
call fcn.0043bc20
add esp, 0x10
cmp dword [esp + 0xe0], 0
je 0x49cfec
mov eax, dword [esp + 0x5c]
mov ecx, esi
push dword [esp + 0x84]
mov edx, dword [esp + 0x20]
push dword [eax]
lea eax, [esp + 0xe8]
push eax
call fcn.0048f9e0
add esp, 0xc
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x11c]
not edx
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x49d010
push edx
mov edx, edi
call fcn.0043be50
add esp, 4
jmp 0x49d019
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
xor eax, eax
cmp dword [esi + 0x24], eax
setg al
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xdc]
test ecx, ecx
je 0x4999eb
mov edx, ecx
mov ecx, eax
call fcn.00456880
jmp 0x4999eb
mov edx, dword [esi + 8]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
je 0x49d075
mov eax, 0x6c6380
mov eax, dword [eax + 8]
mov dword [esi + 0xe8], eax
mov eax, edi
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.0061e015
mov esp, ebp
pop ebp
ret
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [esi + 0xe8], eax
mov eax, edi
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.0061e015
mov esp, ebp
pop ebp
ret
mov edi, dword [esi + 8]
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x49d0ce
mov eax, 0x6c6380
mov eax, dword [eax + 8]
mov dword [esi + 0xe8], eax
mov eax, dword [esp + 0x58]
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.0061e015
mov esp, ebp
pop ebp
ret
lea edx, [ecx + ecx*4]
mov ecx, dword [edi + 0x68]
lea eax, [ecx + edx*4]
mov eax, dword [eax + 8]
mov dword [esi + 0xe8], eax
mov eax, dword [esp + 0x58]
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.0061e015
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x12c]
mov eax, 1
pop edi
pop esi
xor ecx, esp
call fcn.0061e015
mov esp, ebp
pop ebp
ret