Function at 0x4735b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [eax + 8]
mov ecx, dword [eax]
push esi
mov esi, dword [ebx + 0x18]
push edi
mov edi, dword [esi + 0x74]
mov dword [ebp - 0x30], 0
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea eax, [edi - 1]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x28], ebx
test edi, eax
jne 0x473602
push 0
lea eax, [edi*8 + 4]
push eax
push dword [esi + 0x78]
push dword [esi]
call fcn.00487ad0
add esp, 0x10
mov dword [esi + 0x78], eax
mov eax, dword [esi + 0x78]
test eax, eax
je 0x473610
mov dword [eax + edi*4], 0xffffffff
mov esi, dword [ebx + 0x18]
or ecx, 0xffffffff
mov eax, ecx
sub eax, edi
mov edi, dword [esi + 0x74]
mov dword [ebp - 0x10], eax
lea eax, [edi + 1]
mov dword [esi + 0x74], eax
lea eax, [edi - 1]
test edi, eax
jne 0x47364a
push 0
lea eax, [edi*8 + 4]
push eax
push dword [esi + 0x78]
push dword [esi]
call fcn.00487ad0
add esp, 0x10
mov dword [esi + 0x78], eax
or ecx, 0xffffffff
mov eax, dword [esi + 0x78]
test eax, eax
je 0x473658
mov dword [eax + edi*4], 0xffffffff
sub ecx, edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x20], ecx
movzx eax, byte [edi + 4]
mov ecx, dword [edi + 0x30]
mov esi, dword [edi + 0x2c]
mov dword [ebp - 0x14], ecx
mov ecx, dword [esi]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x40], esi
mov dword [ebp - 0xc], ecx
cmp eax, 0x74
je 0x473761
mov eax, dword [ebp - 0x18]
mov edi, 1
cmp byte [eax + 0x45], 0
jne 0x47375e
lea eax, [ecx + ecx*2]
shl eax, 3
mov dword [ebp - 0x3c], eax
lea esp, [esp]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
cmp edi, dword [eax]
jg 0x47375e
mov eax, dword [ebp - 0xc]
mov edx, dword [esi + 4]
xor ecx, ecx
test eax, eax
jle 0x4736d5
add edx, 0x14
mov esi, eax
mov edi, edi
movzx eax, word [edx]
cmp eax, edi
je 0x4736cf
inc ecx
add edx, 0x18
cmp ecx, esi
jl 0x4736c0
mov esi, dword [ebp - 0x40]
mov eax, dword [ebp - 0xc]
cmp ecx, eax
jne 0x47374d
push 0
push 0x31
push dword [ebp - 0x18]
call fcn.004878a0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4737bb
push 0x30
push 0
push esi
call fcn.0041f040
push esi
push dword [ebp - 0x40]
or eax, 0xffffffff
push dword [ebp + 8]
mov byte [esi], 0x84
mov word [esi + 0x22], ax
mov byte [esi + 0x30], 0
or dword [esi + 4], 0x400
mov dword [esi + 0x18], 1
mov dword [esi + 8], edi
call fcn.0048c990
mov ecx, dword [ebp - 0xc]
mov esi, eax
add esp, 0x18
mov dword [ebp - 0x40], esi
test esi, esi
je 0x473750
mov edx, dword [ebp - 0x3c]
mov eax, dword [esi + 4]
inc ecx
mov word [eax + edx + 0x14], di
add edx, 0x18
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x3c], edx
jmp 0x473750
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
inc edi
cmp byte [eax + 0x45], 0
je 0x4736a0
mov edi, dword [ebp + 0xc]
lea eax, [ecx*4 + 4]
push 0
push eax
push dword [ebp - 0x18]
call fcn.004878a0
add esp, 0xc
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x4737c7
mov edi, dword [ebp - 0xc]
mov ecx, 1
mov dword [eax], edi
mov edx, dword [esi + 4]
cmp edi, ecx
jl 0x4737a5
add edx, 0x14
mov ebx, eax
movzx eax, word [edx]
dec eax
mov dword [ebx + ecx*4], eax
inc ecx
lea edx, [edx + 0x18]
cmp ecx, edi
jle 0x473793
mov ebx, dword [ebp - 0x28]
mov edi, dword [ebp + 0xc]
push 1
push edi
push dword [ebp + 8]
call fcn.00474760
add esp, 0xc
mov dword [ebp - 0x40], eax
jmp 0x4737ce
pop edi
pop esi
mov eax, 7
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x40], 0
mov eax, dword [ebp + 8]
push 0
mov dword [edi + 0x2c], esi
push esi
push dword [eax]
call fcn.0048cb00
mov ecx, dword [ebp - 0x14]
add esp, 0xc
cmp dword [ebp - 0x1c], 0x74
mov dword [ecx + 0x2c], eax
jne 0x4737f7
xor esi, esi
mov dword [ebp - 0x34], esi
jmp 0x4738e3
mov eax, dword [edi]
mov ecx, dword [ebp + 8]
mov edi, dword [eax]
mov eax, dword [ecx + 0x4c]
mov dword [ebp - 0x44], edi
lea esi, [eax + 1]
inc eax
add eax, edi
mov dword [ecx + 0x4c], eax
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
mov dword [ebp - 0x34], esi
cmp dword [eax + 0x58], ecx
jg 0x47382d
push 0
push esi
push 0
push 0x4a
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x473860
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0x4a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
push 1
push edi
push dword [ebp - 0x18]
call fcn.00493aa0
add esp, 0xc
mov dword [ebp - 0x24], eax
test eax, eax
je 0x4738e0
xor esi, esi
test edi, edi
jle 0x4738e0
mov ebx, dword [ebp - 0x44]
xor edi, edi
add eax, 0x14
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x30]
test eax, eax
je 0x4738a3
push esi
push eax
push dword [ebp + 8]
call fcn.00473560
add esp, 0xc
test eax, eax
jne 0x4738bf
jmp 0x4738a5
xor eax, eax
mov ecx, dword [ebp + 0xc]
mov ecx, dword [ecx]
cmp esi, dword [ecx]
jge 0x4738bf
mov eax, dword [ecx + 4]
push dword [eax + edi]
push dword [ebp + 8]
call fcn.0048bd40
add esp, 8
mov ecx, dword [ebp - 0x38]
inc esi
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
add ecx, 4
mov eax, dword [eax + 0x10]
add edi, 0x18
mov byte [esi + eax - 1], 0
mov dword [ebp - 0x38], ecx
cmp esi, ebx
jl 0x473886
mov ebx, dword [ebp - 0x28]
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp + 8]
push str.ORDER
mov dword [edi + 0x30], 0
mov dword [eax + 0x34], 0
push dword [edi + 0x2c]
push edi
push esi
call fcn.0049be30
mov eax, dword [ebp - 0x14]
add esp, 0x10
cmp dword [eax + 0x30], 0
jne 0x473924
push str.ORDER
push dword [eax + 0x2c]
push eax
push esi
call fcn.0049be30
add esp, 0x10
push dword [ebp - 0x10]
push edi
push esi
call fcn.004661c0
add esp, 0xc
cmp dword [edi + 0xc], 0
je 0x473a03
cmp dword [ebp - 0x1c], 0x74
jne 0x473a03
mov esi, dword [esi + 0x4c]
mov eax, dword [ebp + 8]
inc esi
lea edi, [esi + 1]
mov dword [eax + 0x4c], edi
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x38], edi
mov edx, dword [eax + 0x10]
test edx, edx
je 0x473962
inc edx
jmp 0x473965
mov edx, dword [eax + 0xc]
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x473981
push 0
push esi
push edx
push 0x52
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x4739b0
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0x52
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x4739cf
push 0
push edi
push esi
push 0x52
push ebx
call fcn.00470460
mov edi, dword [ebp + 0xc]
add esp, 0x14
jmp 0x473a0c
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [ebp + 0xc]
mov word [eax + ecx*4], 0x52
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x473a0c
mov dword [ebp - 0x38], 0
xor esi, esi
mov eax, dword [edi + 0x38]
test eax, eax
je 0x473a1f
push eax
push dword [ebp - 0x18]
call fcn.0048c060
add esp, 8
mov eax, dword [edi + 0x3c]
mov dword [edi + 0x38], 0
test eax, eax
je 0x473a39
push eax
push dword [ebp - 0x18]
call fcn.0048c060
add esp, 8
mov eax, dword [ebp + 8]
mov dword [edi + 0x3c], 0
inc dword [eax + 0x4c]
mov edx, dword [eax + 0x4c]
mov dword [ebp - 0x70], edx
lea edi, [edx + 1]
mov word [ebp - 0x74], 0xd
lea ecx, [edi + 2]
mov dword [eax + 0x4c], ecx
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
mov word [ebp - 0x60], 0xd
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov eax, dword [ebx + 0x18]
mov dword [ebp - 4], edi
mov edi, dword [ebx + 0x20]
mov dword [ebp - 8], edx
mov dword [ebp - 0x2c], ecx
lea edx, [edi + 1]
cmp dword [eax + 0x58], edi
jg 0x473aac
push edx
push 0
push dword [ebp - 8]
push 0xf
push ebx
call fcn.00470460
add esp, 0x14
mov edi, eax
jmp 0x473ade
mov eax, dword [ebx + 4]
mov dword [ebx + 0x20], edx
mov ebx, dword [ebp - 8]
lea ecx, [edi + edi*4]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp - 0x28]
mov word [eax + ecx*4], 0xf
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp + 8]
mov dword [edx + 0xc], esi
mov ecx, dword [eax + 0x1d8]
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x74]
push ecx
push edx
push eax
call fcn.0049d650
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
add esp, 0xc
cmp dword [eax + 0x58], ecx
jg 0x473b1d
push 0
push 0
push dword [ebp - 8]
push 0x47
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x473b53
mov edx, dword [ebp - 8]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0x47
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov byte [eax + 0x13], 0
mov eax, dword [ebx + 0x18]
mov dword [eax + 0x3c], 0
mov ecx, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
dec ecx
mov dword [eax + 0x60], ecx
mov edx, dword [ebx + 0x20]
test edi, edi
jns 0x473b78
lea edi, [edx - 1]
mov eax, dword [ebx]
cmp byte [eax + 0x45], 0
je 0x473b87
mov eax, 0x53464c
jmp 0x473b90
mov eax, dword [ebx + 4]
lea ecx, [edi + edi*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x44], ecx
lea edx, [ecx + 1]
cmp dword [eax + 0x58], ecx
jg 0x473bba
push edx
push 0
push dword [ebp - 4]
push 0xf
push ebx
call fcn.00470460
add esp, 0x14
mov dword [ebp - 0x44], eax
jmp 0x473be9
mov eax, dword [ebx + 4]
mov esi, dword [ebp - 4]
lea ecx, [ecx + ecx*4]
mov dword [ebx + 0x20], edx
mov word [eax + ecx*4], 0xf
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x38]
mov edi, dword [ecx + 0xc]
mov esi, dword [ecx + 0x10]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp + 8]
mov dword [ecx + 0x10], 0
mov edx, dword [eax + 0x1d8]
mov dword [ebp - 0x48], edx
lea edx, [ebp - 0x60]
push edx
push ecx
push eax
call fcn.0049d650
mov eax, dword [ebp + 0xc]
add esp, 0xc
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], esi
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x473c41
push 0
push 0
push dword [ebp - 4]
push 0x47
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x473c77
mov edx, dword [ebp - 4]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0x47
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
push dword [ebp - 0x10]
mov edi, dword [ebp - 0x34]
push dword [ebp - 0x24]
mov esi, dword [ebp + 0xc]
mov byte [eax + 0x13], 0
mov eax, dword [ebx + 0x18]
push edi
mov dword [eax + 0x3c], 0
mov eax, dword [ebp - 4]
inc eax
push eax
push dword [ebp + 0x10]
lea eax, [ebp - 0x74]
push eax
push esi
push dword [ebp + 8]
call fcn.0046ec50
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
add esp, 0x20
cmp eax, 0x74
je 0x473cbd
cmp eax, 0x73
jne 0x473cdd
push dword [ebp - 0x10]
lea eax, [ebp - 0x60]
push dword [ebp - 0x24]
push edi
push dword [ebp - 0x2c]
push dword [ebp + 0x10]
push eax
push esi
push dword [ebp + 8]
call fcn.0046ec50
add esp, 0x20
mov dword [ebp - 0x30], eax
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x473d3d
dec dword [edi]
jne 0x473d3d
cmp dword [0x531b70], 0
je 0x473d33
mov eax, dword [0x534328]
test eax, eax
je 0x473d04
push eax
call dword [0x531bc8]
add esp, 4
push edi
call dword [0x531ba4]
sub dword [0x534170], eax
dec dword [0x534194]
push edi
call dword [0x531b9c]
mov eax, dword [0x534328]
add esp, 8
test eax, eax
je 0x473d3d
push eax
call dword [0x531bd0]
jmp 0x473d3a
push edi
call dword [0x531b9c]
add esp, 4
mov eax, dword [ebp - 0x1c]
cmp eax, 0x75
je 0x473f05
cmp eax, 0x76
je 0x473f05
mov eax, dword [ebx + 0x18]
mov edi, dword [ebx + 0x20]
cmp dword [eax + 0x58], edi
jg 0x473d74
push 0
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
push 0xe
push ebx
call fcn.00470460
add esp, 0x14
mov edi, eax
jmp 0x473da9
mov edx, dword [ebp - 0x2c]
lea ecx, [edi + edi*4]
lea eax, [edi + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x30]
mov word [eax + ecx*4], 0xe
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x38], edx
cmp dword [eax + 0x58], edx
jg 0x473dcf
push 0
push dword [ebp - 0x10]
push dword [ebp - 4]
push 0x10
push ebx
call fcn.00470460
add esp, 0x14
mov dword [ebp - 0x38], eax
jmp 0x473e04
lea ecx, [edx + edx*4]
lea eax, [edx + 1]
mov edx, dword [ebp - 4]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x10]
mov word [eax + ecx*4], 0x10
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x473e21
push 0
push edi
push 0
push 0xd
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x473e54
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0xd
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp - 0x14]
movzx edx, word [esi + 6]
movzx ecx, word [eax + 6]
cmp dx, cx
jl 0x473eb6
movsx esi, cx
movsx ecx, dx
lea eax, [esi + 0x31]
cmp ecx, eax
jle 0x473e82
mov ecx, dword [ebp + 0xc]
mov eax, edx
mov word [ecx + 6], ax
mov eax, dword [ebp - 0x1c]
jmp 0x473f0f
lea eax, [esi + 0x1f]
cmp ecx, eax
jle 0x473e9b
mov ecx, dword [ebp + 0xc]
lea eax, [edx + 1]
movzx eax, ax
mov word [ecx + 6], ax
mov eax, dword [ebp - 0x1c]
jmp 0x473f0f
sub ecx, esi
movzx eax, byte [ecx + str._n_n_t_t_b_b_a_a_a]
mov ecx, dword [ebp + 0xc]
add ax, dx
movzx eax, ax
mov word [ecx + 6], ax
mov eax, dword [ebp - 0x1c]
jmp 0x473f0f
movsx esi, dx
movsx edx, cx
lea eax, [esi + 0x31]
cmp edx, eax
jle 0x473ed1
mov eax, ecx
mov ecx, dword [ebp + 0xc]
mov word [ecx + 6], ax
mov eax, dword [ebp - 0x1c]
jmp 0x473f0f
lea eax, [esi + 0x1f]
cmp edx, eax
jle 0x473eea
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
movzx eax, ax
mov word [ecx + 6], ax
mov eax, dword [ebp - 0x1c]
jmp 0x473f0f
sub edx, esi
movzx eax, byte [edx + str._n_n_t_t_b_b_a_a_a]
add ax, cx
mov ecx, dword [ebp + 0xc]
movzx eax, ax
mov word [ecx + 6], ax
mov eax, dword [ebp - 0x1c]
jmp 0x473f0f
mov ecx, dword [ebp - 0x10]
mov edi, ecx
mov dword [ebp - 0x38], ecx
mov ecx, esi
cmp eax, 0x76
jne 0x473f30
mov eax, dword [ebp - 0x14]
mov esi, edi
movzx eax, word [eax + 6]
cmp word [ecx + 6], ax
jle 0x474032
mov word [ecx + 6], ax
jmp 0x474032
mov eax, dword [ebx + 0x18]
mov esi, dword [ebx + 0x20]
cmp dword [eax + 0x58], esi
jg 0x473f54
mov eax, dword [ebp - 4]
push 0
push dword [ebp - 0x34]
inc eax
push eax
push 0xe
push ebx
call fcn.00470460
add esp, 0x14
mov esi, eax
jmp 0x473f8d
mov edx, dword [ebp - 4]
lea ecx, [esi + esi*4]
lea eax, [esi + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
mov ebx, dword [ebp - 0x28]
inc edx
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x34]
mov word [eax + ecx*4], 0xe
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x473fad
push 0
push dword [ebp - 0x10]
push dword [ebp - 8]
push 0x10
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x473fe2
mov edx, dword [ebp - 8]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x10]
mov word [eax + ecx*4], 0x10
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x473fff
push 0
push esi
push 0
push 0xd
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x474032
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0xd
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x24], edx
cmp dword [eax + 0x58], edx
jg 0x47405a
mov eax, dword [ebp - 4]
push 0
push dword [ebp - 0x34]
inc eax
push eax
push 0xe
push ebx
call fcn.00470460
add esp, 0x14
mov dword [ebp - 0x24], eax
jmp 0x474093
lea ecx, [edx + edx*4]
lea eax, [edx + 1]
mov edx, dword [ebp - 4]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
mov ebx, dword [ebp - 0x28]
inc edx
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x34]
mov word [eax + ecx*4], 0xe
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x4740b1
push 0
push edi
push dword [ebp - 8]
push 0x10
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x4740e3
mov edx, dword [ebp - 8]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0x10
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x474102
push 0
push dword [ebp - 0x20]
push 0
push 0xd
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x474138
mov edx, dword [ebp - 0x20]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0xd
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp - 0x1c]
cmp eax, 0x74
jne 0x47414b
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
jmp 0x47420a
cmp eax, 0x76
jne 0x47415f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
inc eax
mov dword [ebp - 0x24], eax
jmp 0x47420a
mov edx, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x28], edx
cmp dword [eax + 0x58], edx
jg 0x474183
push 0
push edi
push dword [ebp - 8]
push 0x10
push ebx
call fcn.00470460
add esp, 0x14
mov dword [ebp - 0x28], eax
jmp 0x4741b5
lea ecx, [edx + edx*4]
lea eax, [edx + 1]
mov edx, dword [ebp - 8]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
mov word [eax + ecx*4], 0x10
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x4741d4
push 0
push dword [ebp - 0x20]
push 0
push 0xd
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x47420a
mov edx, dword [ebp - 0x20]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0xd
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0x20]
mov dword [ebp - 0x34], ecx
cmp eax, 0x74
je 0x47421d
cmp eax, 0x73
jne 0x47426f
mov eax, dword [ebx + 0x18]
cmp dword [eax + 0x58], ecx
jg 0x47423a
push 0
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
push 0xe
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x47426f
mov edx, dword [ebp - 0x2c]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x30]
mov word [eax + ecx*4], 0xe
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
mov edi, dword [ebp - 4]
cmp dword [eax + 0x58], ecx
jg 0x47428e
push 0
push esi
push edi
push 0x10
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x4742bd
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0x10
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x4742dc
push 0
push dword [ebp - 0x20]
push 0
push 0xd
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x474312
mov edx, dword [ebp - 0x20]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0xd
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebx + 0x20]
mov eax, dword [ebx + 0x18]
dec ecx
mov dword [eax + 0x60], ecx
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebx + 0x20]
test ecx, ecx
jns 0x474329
lea ecx, [edx - 1]
mov eax, dword [ebx]
cmp byte [eax + 0x45], 0
je 0x474338
mov eax, 0x53464c
jmp 0x474341
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x474365
mov edx, dword [ebp - 0x38]
push 0
push edx
push dword [ebp - 8]
push 0x10
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x47439a
mov edx, dword [ebp - 8]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x38]
mov word [eax + ecx*4], 0x10
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x4743b6
push 0
push esi
push edi
push 0x10
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x4743e5
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov word [eax + ecx*4], 0x10
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebx + 0x18]
mov ecx, dword [edx + 0x78]
test ecx, ecx
je 0x474400
mov eax, dword [ebp - 0x20]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [ebx + 0x20]
mov dword [ecx], eax
mov eax, dword [ebx + 0x20]
dec eax
mov dword [edx + 0x60], eax
mov eax, dword [ebx + 0x18]
mov edx, dword [ebx + 0x20]
cmp dword [eax + 0x58], edx
jg 0x474427
push 0
push 0
push 0
push 0x5c
push ebx
call fcn.00470460
add esp, 0x14
mov edx, eax
jmp 0x47445e
lea ecx, [edx + edx*4]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
mov word [eax + ecx*4], 0x5c
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx]
cmp byte [eax + 0x45], 0
je 0x474476
push dword [ebp - 0x3c]
push 0xfffffffffffffff1
push eax
call fcn.0046e1f0
add esp, 0xc
jmp 0x4744ad
test edx, edx
jns 0x47447e
mov edx, dword [ebx + 0x20]
dec edx
mov eax, dword [ebx + 4]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x47449f
push 0xfffffffffffffff1
push dword [ebp - 0x3c]
push eax
push ebx
call fcn.004b7760
add esp, 0x10
jmp 0x4744ad
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x4744ad
mov dword [eax + 0x10], ecx
mov byte [eax + 1], 0xf1
mov eax, dword [ebx + 0x18]
mov edx, dword [ebx + 0x20]
mov esi, dword [ebp - 0x58]
mov edi, dword [ebp - 0x6c]
cmp dword [eax + 0x58], edx
jg 0x4744d2
push dword [ebp - 0xc]
push esi
push edi
push 0x5d
push ebx
call fcn.00470460
add esp, 0x14
mov edx, eax
jmp 0x474500
lea ecx, [edx + edx*4]
lea eax, [edx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [ebp - 0xc]
mov word [eax + ecx*4], 0x5d
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebx]
cmp byte [eax + 0x45], 0
je 0x474519
mov ecx, dword [ebp - 0x40]
push ecx
push 0xfffffffffffffffa
push eax
call fcn.0046e1f0
add esp, 0xc
jmp 0x47454e
test edx, edx
jns 0x474521
mov edx, dword [ebx + 0x20]
dec edx
mov eax, dword [ebx + 4]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov ecx, dword [ebp - 0x40]
je 0x474543
push 0xfffffffffffffffa
push ecx
push eax
push ebx
call fcn.004b7760
add esp, 0x10
jmp 0x47454e
test ecx, ecx
je 0x47454e
mov dword [eax + 0x10], ecx
mov byte [eax + 1], 0xfa
mov eax, dword [ebx]
cmp byte [eax + 0x45], 0
jne 0x474564
mov eax, dword [ebx + 0x20]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 4]
mov byte [eax + ecx*4 - 0x11], 1
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x20]
cmp dword [eax + 0x58], ecx
jg 0x474587
mov edx, dword [ebp - 0x34]
push edx
mov edx, dword [ebp - 0x28]
push edx
push dword [ebp - 0x24]
push 0x12
push ebx
call fcn.00470460
add esp, 0x14
jmp 0x4745bb
mov edx, dword [ebp - 0x24]
lea eax, [ecx + 1]
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
lea ecx, [ecx + ecx*4]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x28]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [ebp - 0x34]
mov word [eax + ecx*4], 0x12
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebx + 0x18]
mov ecx, dword [edx + 0x78]
test ecx, ecx
je 0x4745d6
mov eax, dword [ebp - 0x10]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [ebx + 0x20]
mov dword [ecx], eax
mov eax, dword [ebx + 0x20]
mov esi, dword [ebp - 0x14]
dec eax
mov dword [edx + 0x60], eax
mov eax, dword [ebp + 0x10]
cmp byte [eax], 9
jne 0x47460a
mov eax, dword [esi + 0x30]
mov ecx, esi
test eax, eax
je 0x4745fa
mov ecx, eax
mov eax, dword [ecx + 0x30]
test eax, eax
jne 0x4745f1
push dword [ecx]
push dword [ecx + 0x1c]
push dword [ebp + 8]
call fcn.0046e9c0
add esp, 0xc
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx + 0x30]
test eax, eax
je 0x474622
push 1
push eax
push dword [ebp - 0x18]
call fcn.004644d0
add esp, 0xc
mov eax, dword [ebp + 8]
mov dword [ebx + 0x30], esi
mov dword [esi + 0x34], ebx
cmp byte [eax + 0x1c5], 2
jne 0x474747
mov esi, dword [eax + 8]
movzx eax, byte [ebx + 4]
sub eax, 0x74
je 0x47465f
dec eax
je 0x474658
dec eax
je 0x474651
mov eax, str.UNION
jmp 0x474664
mov eax, str.INTERSECT
jmp 0x474664
mov eax, str.EXCEPT
jmp 0x474664
mov eax, str.UNION_ALL
mov ebx, dword [ebp + 8]
push eax
push 0x52743d
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push str.COMPOUND_SUBQUERIES__d_AND__d__s__s_
push dword [ebx]
call fcn.00494c80
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x20]
mov ebx, dword [ebx + 0x1d4]
add esp, 0x18
mov edi, eax
cmp dword [ecx + 0x58], edx
jg 0x4746ac
push 0
push 0
push ebx
push 0xa0
push esi
call fcn.00470460
add esp, 0x14
mov edx, eax
jmp 0x4746df
lea ecx, [edx + edx*4]
lea eax, [edx + 1]
mov dword [esi + 0x20], eax
mov eax, dword [esi + 4]
mov word [eax + ecx*4], 0xa0
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
cmp byte [eax + 0x45], 0
je 0x474705
push edi
push 0xffffffffffffffff
push eax
call fcn.0046e1f0
mov ecx, dword [ebp + 8]
add esp, 0xc
xor eax, eax
cmp dword [ecx + 0x44], eax
pop edi
pop esi
setne al
pop ebx
mov esp, ebp
pop ebp
ret
test edx, edx
jns 0x47470d
mov edx, dword [esi + 0x20]
dec edx
mov eax, dword [esi + 4]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x47473c
push 0xffffffffffffffff
push edi
push eax
push esi
call fcn.004b7760
mov ecx, dword [ebp + 8]
add esp, 0x10
xor eax, eax
cmp dword [ecx + 0x44], eax
pop edi
pop esi
setne al
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x474747
mov dword [eax + 0x10], edi
mov byte [eax + 1], 0xff
mov ecx, dword [ebp + 8]
xor eax, eax
cmp dword [ecx + 0x44], eax
pop edi
pop esi
setne al
pop ebx
mov esp, ebp
pop ebp
ret