Function at 0x4cdaf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xec
push ebx
mov ebx, dword [esp + 0xf4]
push ebp
push edi
mov dword [esp + 0x60], 1
mov edi, dword [ebx + 8]
mov eax, dword [ebx]
mov dword [esp + 0xa0], 0
mov dword [esp + 0x24], eax
mov dword [esp + 0x54], edi
test edi, edi
jne 0x4cdb45
cmp dword [ebx + 0x80], edi
jne 0x4cdb36
test byte [eax + 0x50], 8
jne 0x4cdb36
mov byte [ebx + 0x17], 1
push ebx
call fcn.004d7d60
add esp, 4
mov dword [esp + 0x54], eax
mov edi, eax
mov ebp, dword [esp + 0x100]
test ebp, ebp
je 0x4d0bd7
cmp dword [ebx + 0x24], 0
jne 0x4d0bd7
push 0
push 0
push 0
push 0x15
push ebx
call fcn.004a53a0
add esp, 0x14
test eax, eax
jne 0x4d0bd7
mov eax, dword [esp + 0x104]
cmp byte [eax], 6
ja 0x4cdbae
mov eax, dword [ebp + 0x30]
test eax, eax
je 0x4cdba0
push eax
push 0x4b5c50
push ebx
call fcn.004c50a0
add esp, 0xc
mov dword [ebp + 0x30], 0
mov eax, dword [ebp + 4]
and eax, 0xfffffffe
or eax, 0x400000
mov dword [ebp + 4], eax
push esi
push 0
push ebp
push ebx
call fcn.004d1020
add esp, 0xc
cmp dword [ebx + 0x24], 0
jne 0x4cdbfb
mov esi, dword [ebp + 4]
test esi, 0x800000
je 0x4cdc30
mov eax, dword [ebp + 0x20]
push eax
lea ebp, [eax + 8]
push ebp
call fcn.0049f1a0
add esp, 8
test eax, eax
je 0x4cdc20
mov eax, dword [ebp + 0xc]
test eax, eax
jne 0x4cdbec
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
push eax
push str.target_object_alias_may_not_appear_in_FROM_clause:__s
push ebx
call fcn.004b0ca0
add esp, 0xc
mov ecx, dword [ebx + 0xe8]
test ecx, ecx
jne 0x4d0b8e
pop esi
pop edi
xor eax, eax
mov dword [ebx + 0xe8], eax
mov eax, dword [esp + 0x5c]
pop ebp
pop ebx
add esp, 0xec
ret
mov ebp, dword [esp + 0x104]
and esi, 0xff7fffff
mov dword [ebp + 4], esi
mov eax, dword [esp + 0x108]
cmp byte [eax], 9
jne 0x4cdc46
push ebp
push ebx
call fcn.004ba060
add esp, 8
push ebp
push ebx
call fcn.004ee080
add esp, 8
test eax, eax
jne 0x4cdbfb
mov eax, dword [ebp + 4]
xorps xmm0, xmm0
mov ecx, dword [ebp + 0x20]
xor esi, esi
shr eax, 3
and eax, 1
mov dword [esp + 0x10], ecx
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x30]
movups xmmword [esp + 0xd0], xmm0
mov dword [esp + 0x20], eax
movups xmmword [esp + 0xe0], xmm0
mov dword [esp + 0xd0], eax
movq qword [esp + 0xf0], xmm0
mov dword [esp + 0x54], esi
cmp dword [ebp + 0x34], esi
jne 0x4d0b5f
cmp dword [ecx], esi
jle 0x4cdf1e
nop dword [eax]
lea eax, [esi + esi*8]
mov edx, dword [ecx + eax*8 + 0x18]
lea ebp, [ecx + eax*8]
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x3c], eax
mov al, byte [ebp + 0x2c]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x44], edx
test al, 0x48
je 0x4cddcc
movzx eax, al
and eax, 0x40
push eax
mov eax, dword [esp + 0x108]
push dword [ebp + 0x34]
push dword [eax + 0x24]
call fcn.004b5540
add esp, 0xc
test eax, eax
je 0x4cddc4
mov eax, dword [esp + 0x28]
test dword [eax + 0x50], 0x2000
jne 0x4cddc4
mov al, byte [ebp + 0x2c]
test al, 8
je 0x4cdd37
test al, 0x10
je 0x4cdd1b
and al, 0xf7
mov byte [ebp + 0x2c], al
jmp 0x4cdd37
and al, 0xd7
mov byte [ebp + 0x2c], al
mov eax, dword [esp + 0x104]
push 0
push dword [ebp + 0x34]
push dword [eax + 0x24]
call fcn.004f0900
add esp, 0xc
test byte [ebp + 0x2c], 0x40
mov ecx, dword [esp + 0x10]
je 0x4cddc8
mov edx, dword [ecx]
lea ebp, [esi + 1]
cmp ebp, edx
jge 0x4cdd9e
mov edi, dword [esp + 0x104]
lea eax, [ebp*8]
add eax, ebp
lea esi, [ecx + 0x2c]
lea esi, [esi + eax*8]
mov al, byte [esi]
test al, 0x10
je 0x4cdd8c
test al, 8
je 0x4cdd74
and al, 0xef
mov byte [esi], al
jmp 0x4cdd8c
push 1
push dword [esi + 8]
and al, 0xcf
mov byte [esi], al
push dword [edi + 0x24]
call fcn.004f0900
mov ecx, dword [esp + 0x1c]
add esp, 0xc
mov edx, dword [ecx]
inc ebp
add esi, 0x48
cmp ebp, edx
jl 0x4cdd64
mov edi, dword [esp + 0x58]
mov esi, dword [esp + 0x54]
add edx, 0xffffffff
js 0x4cded3
lea eax, [edx + edx*8]
lea ecx, [ecx + eax*8]
add ecx, 0x2c
and byte [ecx], 0xbf
test byte [ecx], 0x10
jne 0x4cddc0
sub ecx, 0x48
sub edx, 1
jns 0x4cddb0
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x4cdf00
mov eax, dword [eax + 0x1c]
movsx ecx, word [edx + 0x22]
mov eax, dword [eax]
cmp ecx, eax
jne 0x4ce088
test dword [ebp + 0x30], 0x100
je 0x4cddff
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x12], 0
je 0x4cdefc
mov ebp, dword [esp + 0x3c]
mov eax, dword [ebp + 4]
test al, 8
jne 0x4cdefc
mov ecx, dword [ebp + 0x30]
test ecx, ecx
je 0x4cde7b
mov edx, dword [esp + 0x104]
cmp dword [edx + 0x30], 0
jne 0x4cde36
mov ebx, dword [esp + 0x10]
cmp dword [ebx], 1
mov ebx, dword [esp + 0x100]
jle 0x4cdedc
cmp dword [ebp + 0x3c], 0
jne 0x4cdedc
test eax, 0x8000000
jne 0x4cdedc
test dword [edx + 4], 0x8000000
jne 0x4cdedc
mov eax, dword [esp + 0x28]
test dword [eax + 0x50], 0x40000
jne 0x4cdedc
push ecx
push 0x4b5c50
push ebx
call fcn.004c50a0
add esp, 0xc
mov dword [ebp + 0x30], 0
mov ebp, dword [esp + 0x104]
push dword [esp + 0x50]
push esi
push ebp
push ebx
call fcn.00482e30
add esp, 0x10
test eax, eax
je 0x4cdea2
cmp dword [ebx + 0x24], 0
jne 0x4cdbfb
or esi, 0xffffffff
mov eax, dword [esp + 0x28]
mov ecx, dword [ebp + 0x20]
mov dword [esp + 0x10], ecx
cmp byte [eax + 0x57], 0
jne 0x4cdbfb
mov eax, dword [esp + 0x108]
cmp byte [eax], 8
jbe 0x4cdf07
mov edx, dword [ebp + 0x30]
mov dword [esp + 0x20], edx
mov dword [esp + 0xd0], edx
jmp 0x4cdf07
mov ebp, dword [esp + 0x14]
jmp 0x4cddc8
mov ebp, edx
test esi, esi
jne 0x4cde82
test dword [ebp + 4], 0x40000
je 0x4cde82
mov ecx, dword [esp + 0x10]
cmp dword [ecx], 1
je 0x4cdf07
test byte [ecx + 0x74], 0x22
jne 0x4cdf07
jmp 0x4cde82
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0x104]
inc esi
cmp dword [ebp + 0x34], 0
mov dword [esp + 0x54], esi
jne 0x4d0b5f
cmp esi, dword [ecx]
jl 0x4cdcb0
mov esi, dword [esp + 0x104]
mov eax, dword [esi + 0x24]
lea ebp, [esi + 0x24]
mov dword [esp + 0x34], ebp
test eax, eax
je 0x4ce13d
cmp byte [eax], 0x2c
mov dword [esp + 0x34], ebp
jne 0x4ce13d
mov eax, dword [esp + 0x28]
mov dword [esp + 0x34], ebp
test dword [eax + 0x50], 0x8000
jne 0x4ce13d
mov eax, dword [ebx]
add eax, 0x57
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], eax
nop dword [eax]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x90], 0
test eax, eax
je 0x4cdfb9
cmp dword [eax], 0
jle 0x4cdfb9
test byte [eax + 0x2c], 0x40
mov dword [esp + 0x94], 3
jne 0x4cdfc4
mov dword [esp + 0x94], 1
push dword [ebp]
lea eax, [esp + 0x84]
push eax
call fcn.00480350
add esp, 8
cmp dword [esp + 0x88], 0
je 0x4ce128
lea eax, [esp + 0x80]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], eax
mov eax, dword [ebp]
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], 0x499640
mov dword [esp + 0xb0], fcn.0044ef50
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
test eax, eax
je 0x4ce049
push eax
lea eax, [esp + 0xac]
push eax
call fcn.004e6260
add esp, 8
mov eax, dword [esp + 0x80]
mov esi, dword [esp + 0x98]
mov ecx, dword [eax]
test esi, esi
je 0x4ce121
test ecx, ecx
je 0x4ce0cc
cmp esi, dword [ecx + 0x164]
jae 0x4ce0b7
cmp esi, dword [ecx + 0x15c]
jb 0x4ce09f
mov eax, dword [ecx + 0x158]
mov dword [esi], eax
mov dword [ecx + 0x158], esi
jmp 0x4ce121
push eax
push dword [edx]
push ecx
push str.expected__d_columns_for__s_but_got__d
push ebx
call fcn.004b0ca0
add esp, 0x14
jmp 0x4cdbfb
cmp esi, dword [ecx + 0x160]
jb 0x4ce0b7
mov eax, dword [ecx + 0x150]
mov dword [esi], eax
mov dword [ecx + 0x150], esi
jmp 0x4ce121
cmp dword [ecx + 0x210], 0
je 0x4ce0cc
push esi
push ecx
call fcn.00490a30
add esp, 8
jmp 0x4ce121
cmp dword [0x713018], 0
je 0x4ce117
mov eax, dword [0x7181b8]
test eax, eax
je 0x4ce0e8
push eax
call dword [0x713068]
add esp, 4
push esi
call dword [0x713044]
sub dword [0x718150], eax
dec dword [0x718174]
push esi
call dword [0x71303c]
mov eax, dword [0x7181b8]
add esp, 8
test eax, eax
je 0x4ce121
push eax
call dword [0x713070]
jmp 0x4ce11e
push esi
call dword [0x71303c]
add esp, 4
mov esi, dword [esp + 0x104]
cmp dword [esp + 0x8c], 0
jne 0x4cdf70
lea eax, [esi + 0x24]
mov dword [esp + 0x34], eax
mov ebp, dword [esp + 0x28]
test dword [ebp + 0x50], 0x201
jne 0x4ce16b
push esi
push ebx
call fcn.00479ab0
add esp, 8
test eax, eax
je 0x4ce16b
cmp byte [ebp + 0x57], 0
jne 0x4cdbfb
mov ebp, dword [esi + 0x20]
mov dword [esp + 0x10], ebp
jmp 0x4ce16f
mov ebp, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x30], eax
cmp dword [ebp], eax
jle 0x4cea01
nop
lea eax, [eax + eax*8]
lea eax, [eax + 1]
lea esi, [eax*8]
mov eax, dword [esi + ebp + 0x38]
add esi, ebp
or eax, dword [esi + 0x3c]
jne 0x4ce1b3
mov eax, dword [esi + 8]
test eax, eax
je 0x4ce1b3
push dword [esi + 4]
push 0x70ce08
push eax
push 0x14
push ebx
call fcn.004a53a0
add esp, 0x14
mov eax, dword [esi + 0x14]
mov dword [esp + 0x40], eax
test eax, eax
je 0x4ce9e3
cmp dword [esi + 0x18], 0
jne 0x4ce9e3
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
push eax
push dword [esp + 0x108]
call fcn.004868b0
mov ecx, dword [esp + 0x30]
add esp, 8
mov eax, dword [esp + 0x14]
add dword [ebx + 0xe4], eax
test dword [ecx + 0x50], 0x1000
jne 0x4ce232
test dword [esi + 0x28], 0x100
je 0x4ce216
mov eax, dword [esi + 0x44]
cmp byte [eax + 0x12], 0
je 0x4ce232
cmp dword [eax], 2
jge 0x4ce232
push dword [esp + 0x30]
mov eax, dword [esp + 0x38]
push ebp
push dword [eax]
push dword [esp + 0x4c]
push ebx
call fcn.00499a50
mov ecx, dword [esp + 0x3c]
add esp, 0x14
test dword [ecx + 0x50], 0x4000000
jne 0x4ce38d
test dword [esi + 0x28], 0x108
jne 0x4ce38d
mov edx, dword [esi + 0x14]
mov eax, edx
mov dword [esp + 0x3c], edx
test edx, edx
je 0x4ce28a
nop dword [eax]
test byte [eax + 4], 9
jne 0x4ce38d
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x4ce27a
cmp byte [eax], 0x87
jne 0x4ce38d
cmp dword [eax + 0x44], 0
jne 0x4ce38d
mov eax, ecx
test eax, eax
jne 0x4ce260
mov ebp, dword [edx + 0x30]
mov eax, dword [esi + 0x38]
mov ecx, dword [esi + 0x3c]
mov dword [esp + 0x44], eax
mov dword [esp + 0x60], ecx
test ebp, ebp
je 0x4ce2fd
mov ecx, dword [ebp]
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x4ce2fd
add ebp, 0x18
nop dword [eax]
movzx eax, word [ebp]
test ax, ax
je 0x4ce2ed
add eax, 0xffff
mov edx, 0x3f
cmp ax, 0x40
jae 0x4ce2cc
movzx edx, ax
xor eax, eax
xor ecx, ecx
bts eax, edx
cmp edx, 0x20
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
cmovae ecx, eax
or dword [esp + 0x44], eax
or dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x14]
add ebp, 0x14
sub ecx, 1
mov dword [esp + 0x14], ecx
jne 0x4ce2b0
mov eax, dword [esp + 0x44]
mov ecx, dword [esi + 0x10]
movsx ecx, word [ecx + 0x22]
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x4ce38d
mov edi, dword [esp + 0x3c]
xor ebp, ebp
mov ebx, ebp
xor ecx, ecx
cmp ebx, 0x3f
jae 0x4ce33a
mov eax, ebx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
mov eax, dword [esp + 0x44]
cmovae edx, ecx
jmp 0x4ce33f
mov edx, connect
and edx, dword [esp + 0x60]
and ecx, eax
or ecx, edx
jne 0x4ce378
mov eax, edi
nop dword [eax + eax]
mov ecx, dword [eax + 0x1c]
mov ecx, dword [ecx + ebp + 8]
cmp byte [ecx], 0x79
je 0x4ce36d
and dword [ecx + 4], 0xfff7dfff
mov byte [ecx], 0x79
or dword [eax + 4], 0x1000000
mov eax, dword [eax + 0x34]
test eax, eax
jne 0x4ce350
mov eax, dword [esp + 0x44]
inc ebx
add ebp, 0x14
cmp ebx, dword [esp + 0x14]
jl 0x4ce318
mov edi, dword [esp + 0x58]
mov ebx, dword [esp + 0x100]
mov eax, dword [ebx + 0x104]
mov edx, dword [esp + 0x30]
mov ebp, edx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
mov eax, dword [esi + 8]
mov dword [ebx + 0x104], eax
lea eax, [edx + edx*8]
lea ecx, [ecx + eax*8]
add ecx, 8
mov dword [esp + 0x18], ecx
test dword [ecx + 0x28], 0x100
je 0x4ce3e0
mov eax, dword [ecx + 0x44]
mov dl, byte [eax + 0x12]
test dl, dl
je 0x4ce4a3
cmp dword [eax], 2
jl 0x4ce3dc
cmp dl, 2
jne 0x4ce4a3
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x10]
test byte [eax + 0x2c], 0x40
jne 0x4ce4a7
mov eax, dword [ebx]
test dword [eax + 0x50], 0x2000000
mov eax, dword [esp + 0x10]
jne 0x4ce4a7
push dword [eax]
lea eax, [edx + 1]
push eax
push ecx
push dword [esp + 0x1c]
call fcn.00488530
add esp, 0x10
test eax, eax
jne 0x4ce4a3
cmp dword [esp + 0x30], eax
jne 0x4ce46e
mov eax, dword [esp + 0x10]
cmp dword [eax], 1
je 0x4ce441
test byte [eax + 0x74], 2
jne 0x4ce441
mov ecx, dword [esp + 0x104]
test dword [ecx + 4], 0x10000000
jne 0x4ce4a3
mov ebp, dword [edi + 0x6c]
inc dword [ebx + 0x2c]
inc ebp
mov edx, dword [ebx + 0x2c]
mov dword [esi + 0x1c], edx
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4ce4e9
push ebp
push 0
push edx
push 0xb
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4ce51b
mov ecx, dword [esp + 0x104]
test dword [ecx + 4], 0x10000000
jne 0x4ce4a3
mov eax, dword [esp + 0x18]
add eax, 0x24
test byte [eax], 0x22
jne 0x4ce4a3
nop word [eax + eax]
test ebp, ebp
je 0x4ce441
sub eax, 0x48
dec ebp
cmp dword [eax - 0x10], 0
jne 0x4ce4a3
test byte [eax], 0x22
je 0x4ce490
mov eax, dword [esp + 0x10]
test dword [esi + 0x28], 0x100
je 0x4ce696
mov ebp, dword [esi + 0x44]
mov edx, dword [ebp + 4]
test edx, edx
jle 0x4ce696
mov ecx, dword [edi + 0x6c]
mov eax, dword [ebp + 8]
mov dword [esp + 0x18], eax
cmp dword [edi + 0x70], ecx
jg 0x4ce5eb
push 0
push edx
push eax
push 0xa
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4ce621
mov ebx, dword [esp + 0x100]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], ebp
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x1c]
push esi
push str.CO_ROUTINE___S
push 1
push ebx
mov dword [esi + 0x18], ebp
mov byte [esp + 0x90], 0xd
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
call fcn.004e0dc0
lea eax, [esp + 0x90]
push eax
push dword [esp + 0x54]
push ebx
call fcn.004cdaf0
mov eax, dword [esp + 0x5c]
mov ecx, dword [esi + 0x10]
mov ax, word [eax + 2]
mov word [ecx + 0x26], ax
push dword [esi + 0x1c]
mov eax, dword [esp + 0xac]
or dword [esi + 0x28], 0x20
push edi
mov dword [esi + 0x20], eax
call fcn.004d8300
mov eax, dword [edi]
add esp, 0x24
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4ce5c7
mov eax, 0x718390
mov dword [eax], edx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
jmp 0x4ce998
mov eax, dword [edi + 0x68]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
add eax, 0xfffffff4
mov dword [eax], edx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
jmp 0x4ce998
mov ebx, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x100]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 0xc]
mov esi, dword [esi + 0x2c]
cmp esi, edx
je 0x4ce685
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4ce653
push 0
push edx
push esi
push 0x73
push edi
call fcn.00486380
mov ecx, dword [esp + 0x54]
add esp, 0x14
mov ax, word [ebp + 0x10]
mov word [ecx + 2], ax
jmp 0x4ce998
mov ebx, dword [esp + 0x100]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x40]
mov ax, word [ebp + 0x10]
mov word [ecx + 2], ax
jmp 0x4ce998
push dword [esp + 0x30]
push 0
push esi
push eax
call fcn.00488530
mov ebp, eax
add esp, 0x10
test ebp, ebp
je 0x4ce784
mov edx, dword [ebp + 0x18]
test edx, edx
je 0x4ce70d
mov ecx, dword [edi + 0x6c]
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x18], eax
cmp dword [edi + 0x70], ecx
jg 0x4ce6d7
push 0
push edx
push eax
push 0xa
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4ce70d
mov ebx, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x100]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 0x2c]
mov esi, dword [esi + 0x2c]
cmp dword [edi + 0x70], ecx
jg 0x4ce73e
push 0
push edx
push esi
push 0x73
push edi
call fcn.00486380
mov eax, dword [ebp + 0x14]
add esp, 0x14
mov ecx, dword [esp + 0x40]
mov ax, word [eax + 2]
mov word [ecx + 2], ax
jmp 0x4ce998
mov ebx, dword [esp + 0x100]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x40]
mov ax, word [eax + 2]
mov word [ecx + 2], ax
jmp 0x4ce998
inc dword [ebx + 0x2c]
xor ebp, ebp
mov eax, dword [ebx + 0x2c]
mov dword [esi + 0x1c], eax
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x14], edx
cmp dword [edi + 0x70], edx
jg 0x4ce7b1
push ebp
push ebp
push ebp
push 9
push edi
call fcn.00486380
mov edx, eax
add esp, 0x14
mov dword [esp + 0x14], edx
jmp 0x4ce7db
mov ebx, dword [esp + 0x100]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], ebp
mov dword [eax + ecx*4 + 0x10], ebp
lea eax, [edx + 1]
mov dword [esi + 0x18], eax
mov eax, dword [esi + 0x28]
or eax, 0x10
mov dword [esi + 0x28], eax
test al, 8
jne 0x4ce844
mov ebp, dword [edi + 0x6c]
cmp dword [edi + 0x70], ebp
jg 0x4ce80b
push 0
push 0
push 0
push 0xf
push edi
call fcn.00486380
add esp, 0x14
mov ebp, eax
jmp 0x4ce844
lea eax, [ebp + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebp*4]
mov eax, dword [edi + 0x68]
add ecx, ebp
mov dword [eax + ecx*4], 0xf
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x2c]
push esi
push str.MATERIALIZE___S
push 1
push ebx
mov byte [esp + 0x90], 0xc
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
call fcn.004e0dc0
lea eax, [esp + 0x90]
push eax
push dword [esp + 0x54]
push ebx
call fcn.004cdaf0
mov eax, dword [esp + 0x5c]
add esp, 0x1c
mov ecx, dword [esi + 0x10]
mov ax, word [eax + 2]
mov word [ecx + 0x26], ax
test ebp, ebp
je 0x4ce8dc
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4ce8ca
mov eax, 0x718388
jmp 0x4ce8d9
mov eax, dword [edi + 0x68]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ebp, dword [esp + 0x14]
mov ecx, dword [edi + 0x6c]
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x18], eax
lea edx, [ebp + 1]
cmp dword [edi + 0x70], ecx
jg 0x4ce903
push 0
push edx
push eax
push 0x43
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4ce939
mov ebx, dword [esp + 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x100]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4ce94b
mov eax, 0x718388
jmp 0x4ce95a
mov eax, dword [edi + 0x68]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
mov eax, dword [esi + 0x28]
and eax, 0x108
cmp eax, 0x100
jne 0x4ce998
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x18]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0x1c]
mov dword [ecx + 8], eax
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x40]
mov ax, word [eax + 2]
mov word [ecx + 0x10], ax
mov eax, dword [esp + 0x28]
cmp byte [eax + 0x57], 0
jne 0x4cdbfb
mov esi, dword [esp + 0x104]
lea eax, [esp + 0x14]
push eax
push esi
mov dword [esp + 0x1c], 0
call fcn.004868b0
mov eax, dword [ebx + 0xe4]
add esp, 8
sub eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
mov dword [ebx + 0xe4], eax
mov eax, dword [esp + 0x3c]
mov dword [ebx + 0x104], eax
jmp 0x4ce9ea
mov esi, dword [esp + 0x104]
mov eax, dword [esp + 0x30]
inc eax
mov dword [esp + 0x30], eax
cmp eax, dword [ebp]
jl 0x4ce180
lea eax, [esi + 0x24]
jmp 0x4cea05
mov eax, dword [esp + 0x34]
mov eax, dword [eax]
mov cl, byte [esi + 4]
mov ebp, dword [esi + 0x1c]
and cl, 1
mov dword [esp + 0x4c], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x7c], eax
mov eax, dword [esi + 4]
and al, 9
mov dword [esp + 0x44], ebp
mov byte [esp + 0x27], cl
mov byte [esp + 0xc4], cl
cmp al, 1
jne 0x4cea7c
push 0xffffffffffffffff
push ebp
push dword [esp + 0x28]
call fcn.004b5bd0
add esp, 0xc
test eax, eax
jne 0x4cea7c
cmp dword [esi + 0x44], eax
jne 0x4cea7c
and dword [esi + 4], 0xfffffffe
push eax
push ebp
push dword [esp + 0x30]
call fcn.004b5c70
mov dword [esp + 0x38], eax
add esp, 0xc
or dword [esi + 4], 8
mov dword [esi + 0x28], eax
mov al, 2
mov byte [esp + 0x27], al
mov byte [esp + 0xc4], al
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4ceac9
push dword [ebp]
push 0
push eax
push ebx
call fcn.004c0820
mov edx, dword [ebx + 0x28]
mov ecx, eax
push 0xfffffffffffffff8
push ecx
push 0
lea eax, [edx + 1]
mov dword [esp + 0xf4], edx
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov eax, dword [ebp]
inc ecx
add eax, ecx
push eax
push edx
push 0x76
push edi
call fcn.004d7850
add esp, 0x2c
mov dword [esp + 0xe4], eax
jmp 0x4cead4
mov dword [esp + 0xe4], 0xffffffff
mov eax, dword [esp + 0x108]
cmp byte [eax], 0xc
jne 0x4ceb8f
push dword [ebp]
push dword [eax + 4]
push 0x76
push edi
call fcn.004d7790
add esp, 0x10
test dword [esi + 4], 0x800
je 0x4ceb8f
mov ecx, dword [esp + 0x44]
mov eax, dword [ecx]
lea esi, [eax - 1]
test esi, esi
jle 0x4ceb67
mov ebx, dword [esp + 0x28]
lea ebp, [esi + esi*4]
shl ebp, 2
nop dword [eax]
test byte [ecx + ebp + 0x14], 0x40
jne 0x4ceb60
mov eax, dword [ecx + ebp + 8]
test eax, eax
je 0x4ceb3d
push eax
push ebx
call fcn.004b4a30
mov ecx, dword [esp + 0x4c]
add esp, 8
mov eax, dword [ecx + ebp + 0xc]
test eax, eax
je 0x4ceb53
push eax
push ebx
call fcn.004aeac0
mov ecx, dword [esp + 0x4c]
add esp, 8
mov eax, dword [ecx]
dec esi
dec eax
sub ebp, 0x14
mov dword [ecx], eax
test esi, esi
jg 0x4ceb20
mov ebx, dword [esp + 0x100]
xor edx, edx
test eax, eax
jle 0x4ceb88
mov ebp, dword [esp + 0x44]
add ecx, 8
test byte [ecx + 0xc], 0x40
jne 0x4ceb7f
mov eax, dword [ecx]
mov byte [eax], 0x79
inc edx
add ecx, 0x14
cmp edx, dword [ebp]
jl 0x4ceb74
mov esi, dword [esp + 0x104]
dec dword [ebx + 0x38]
test dword [esi + 4], 0x4000
mov eax, dword [ebx + 0x38]
mov dword [esp + 0xf8], eax
jne 0x4cebae
mov ecx, 0x140
mov word [esi + 2], cx
cmp dword [esi + 0x3c], 0
je 0x4cebbf
push eax
push esi
push ebx
call fcn.00477b60
add esp, 0xc
cmp dword [esi + 8], 0
jne 0x4cebf3
mov ecx, dword [esp + 0xe4]
test ecx, ecx
js 0x4cebf3
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4cebdf
mov eax, 0x718388
jmp 0x4cebe8
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
or byte [esp + 0xf0], 1
mov byte [eax], 0x77
test byte [esi + 4], 1
je 0x4cec5c
mov esi, dword [ebx + 0x28]
push 0xfffffffffffffff8
push 0
push 0
lea eax, [esi + 1]
mov dword [esp + 0xd4], esi
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x110]
push dword [eax + 0x1c]
push ebx
call fcn.004c0820
add esp, 0x10
push eax
push 0
push 0
push esi
push 0x76
push edi
call fcn.004d7850
mov dword [esp + 0xe8], eax
add esp, 0x1c
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x4cec51
lea ecx, [eax + eax*4]
mov edx, 8
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov esi, dword [esp + 0x104]
mov al, 3
jmp 0x4cec5e
xor al, al
cmp dword [esp + 0x50], 0
mov ebp, dword [esp + 0x2c]
mov byte [esp + 0xc5], al
mov dword [esp + 0x60], eax
jne 0x4cef4d
test ebp, ebp
jne 0x4cef4d
mov cx, word [esi + 4]
mov eax, 0x4000
and cx, ax
mov edx, 0x100
xor eax, eax
cmp byte [esp + 0x27], al
cmovne eax, edx
or cx, ax
movzx esi, cx
mov ecx, dword [esp + 0x104]
mov ebp, dword [ecx + 0x44]
test ebp, ebp
je 0x4cecbf
push ecx
push ebx
call fcn.004ebfe0
mov ecx, dword [esp + 0x10c]
add esp, 8
movsx eax, word [ecx + 2]
push eax
push esi
push ecx
push dword [ecx + 0x1c]
push dword [esp + 0x30]
push dword [esp + 0x60]
push dword [esp + 0x28]
push ebx
call fcn.004e6600
mov esi, eax
add esp, 0x20
test esi, esi
je 0x4cdbfb
mov ecx, dword [esp + 0x104]
movzx eax, word [esi + 0x34]
cmp ax, word [ecx + 2]
jge 0x4cecfd
mov word [ecx + 2], ax
cmp byte [esp + 0x27], 0
je 0x4ced21
mov cl, byte [esi + 0x2f]
mov edx, dword [esp + 0x60]
test cl, cl
movzx edx, dl
movzx eax, cl
cmovne edx, eax
mov dword [esp + 0x60], edx
mov byte [esp + 0xc5], dl
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x4ced81
mov al, byte [esi + 0x2d]
xor edx, edx
test al, al
movsx ecx, al
cmovns edx, ecx
test byte [esi + 0x30], 4
mov dword [esp + 0xd4], edx
jne 0x4ced48
mov eax, dword [esi + 0x1c]
jmp 0x4ced68
movzx eax, byte [esi + 0x2c]
lea eax, [eax + eax*2]
shl eax, 5
cmp dword [eax + esi + 0x2d0], 0
je 0x4ced61
mov eax, dword [esi + 0x1c]
jmp 0x4ced68
mov eax, dword [eax + esi + 0x2a8]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xec], eax
xor eax, eax
cmp edx, dword [ecx]
cmove ecx, eax
mov dword [esp + 0xd0], ecx
mov eax, dword [esp + 0xe4]
test eax, eax
js 0x4ced9a
test ecx, ecx
jne 0x4ced9a
push eax
push edi
call fcn.004d7c90
add esp, 8
test ebp, ebp
je 0x4cef12
mov ebp, dword [ebx + 0x38]
inc dword [ebx + 0x2c]
lea ecx, [ebp - 1]
sub ebp, 2
push ecx
mov dword [esp + 0x18], ecx
lea eax, [ebp - 1]
mov dword [esp + 0x1c], eax
mov dword [ebx + 0x38], eax
mov eax, dword [ebx + 0x2c]
push eax
push esi
push dword [esp + 0x110]
mov dword [esp + 0x4c], eax
push ebx
call fcn.004ec470
mov esi, dword [esp + 0x2c]
push esi
push 0
push 9
push edi
call fcn.004d7790
mov ecx, dword [edi + 0xc]
add esp, 0x24
mov edx, dword [esp + 0x14]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4cee03
push edx
push edi
push ecx
call fcn.0049ce60
add esp, 0xc
jmp 0x4cee0c
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
push esi
push ebp
push dword [esp + 0x110]
lea eax, [esp + 0xd0]
mov dword [esp + 0xf8], 0
push eax
lea eax, [esp + 0xe0]
push eax
push 0xffffffffffffffff
push dword [esp + 0x11c]
push ebx
call fcn.004a0650
mov ecx, dword [edi + 0xc]
add esp, 0x20
not ebp
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4cee5c
push ebp
push edi
push ecx
call fcn.0049ce60
add esp, 0xc
jmp 0x4cee65
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + ebp*4], eax
push dword [esp + 0x3c]
push 0x43
push edi
call fcn.004d7730
mov ecx, dword [edi + 0xc]
add esp, 0xc
not esi
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4cee95
push esi
push edi
push ecx
call fcn.0049ce60
mov ebp, dword [esp + 0x110]
add esp, 0xc
jmp 0x4ceea5
mov ebp, dword [esp + 0x104]
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + esi*4], eax
cmp byte [esp + 0x60], 3
jne 0x4ceec1
push str.DISTINCT
push str.USE_TEMP_B_TREE_FOR__s
push 0
push ebx
call fcn.004e0dc0
add esp, 0x10
cmp dword [esp + 0xd0], 0
je 0x4ceeea
push dword [esp + 0x108]
mov eax, dword [esp + 0x48]
push dword [eax]
lea eax, [esp + 0xd8]
push eax
push ebp
push ebx
call fcn.00484770
add esp, 0x14
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0xf8]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4d0b28
push edx
push edi
push ecx
call fcn.0049ce60
add esp, 0xc
jmp 0x4d0b31
push dword [esi + 0x20]
mov ebp, dword [esp + 0x108]
lea eax, [esp + 0xc8]
push dword [esi + 0x1c]
push dword [esp + 0x110]
push eax
lea eax, [esp + 0xe0]
push eax
push 0xffffffffffffffff
push ebp
push ebx
call fcn.004a0650
push esi
call fcn.004e9c70
add esp, 0x24
jmp 0x4ceea5
mov dword [esp + 0x48], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x54], 0
test ebp, ebp
je 0x4cf051
mov ecx, dword [esi + 0x1c]
mov eax, dword [ecx]
test eax, eax
jle 0x4cef8e
add ecx, 0x1a
nop dword [eax]
xor edx, edx
lea ecx, [ecx + 0x14]
dec eax
mov word [ecx - 0x14], dx
test eax, eax
jg 0x4cef80
mov eax, dword [ebp]
test eax, eax
jle 0x4cefa6
lea ecx, [ebp + 0x1a]
xor edx, edx
lea ecx, [ecx + 0x14]
dec eax
mov word [ecx - 0x14], dx
test eax, eax
jg 0x4cef98
cmp word [esi + 2], 0x42
jle 0x4cefb6
mov eax, 0x42
mov word [esi + 2], ax
mov esi, dword [esp + 0x20]
test esi, esi
je 0x4cf057
mov eax, dword [ebp]
cmp eax, dword [esi]
jne 0x4cf057
xor edx, edx
test eax, eax
jle 0x4cefef
lea ecx, [ebp + 0x10]
sub esi, ebp
mov al, byte [ecx + esi]
lea ecx, [ecx + 0x14]
and al, 1
inc edx
mov byte [ecx - 0x14], al
mov eax, dword [ebp]
cmp edx, eax
jl 0x4cefd8
mov esi, dword [esp + 0x20]
cmp eax, dword [esi]
jne 0x4cf057
xor ebp, ebp
test eax, eax
jle 0x4cf047
mov eax, dword [esp + 0x2c]
add esi, 0x10
lea ecx, [eax + 8]
sub eax, dword [esp + 0x20]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
nop
mov al, byte [eax + esi]
cmp al, byte [esi]
jne 0x4cf057
push 0xffffffffffffffff
push dword [esi - 8]
push dword [ecx]
push 0
call fcn.004b4580
add esp, 0x10
test eax, eax
jne 0x4cf057
mov eax, dword [esp + 0x2c]
inc ebp
mov ecx, dword [esp + 0x14]
add esi, 0x14
add ecx, 0x14
mov dword [esp + 0x14], ecx
cmp ebp, dword [eax]
mov eax, dword [esp + 0x18]
jl 0x4cf010
mov dword [esp + 0x54], 1
jmp 0x4cf057
xor eax, eax
mov word [esi + 2], ax
mov eax, dword [ebx + 0x38]
push 0
dec eax
push 0x2c
push dword [esp + 0x30]
mov dword [esp + 0x4c], eax
mov dword [ebx + 0x38], eax
call fcn.004aebd0
mov ebp, eax
add esp, 0xc
test ebp, ebp
je 0x4cf0dd
push 0x2c
push 0
push ebp
call fcn.00656e20
mov eax, dword [0x713118]
add esp, 0xc
test eax, eax
je 0x4cf13b
push 0x12c
call eax
mov ecx, dword [ebx]
add esp, 4
test eax, eax
je 0x4cf13d
push ecx
call fcn.004c2710
add esp, 4
mov eax, dword [ebp + 0x14]
mov esi, dword [ebx]
test eax, eax
je 0x4cf0c2
push eax
push esi
call fcn.004aeac0
add esp, 8
mov eax, dword [ebp + 0x20]
test eax, eax
je 0x4cf0d3
push eax
push esi
call fcn.004aeac0
add esp, 8
push ebp
push esi
call fcn.004aeac0
add esp, 8
mov eax, dword [esp + 0x28]
cmp byte [eax + 0x57], 0
jne 0x4cdbfb
mov eax, dword [esp + 0x104]
xorps xmm0, xmm0
mov esi, dword [esp + 0x2c]
mov eax, dword [eax + 0x10]
mov dword [ebp + 0x28], eax
mov eax, dword [esp + 0x10]
movlpd qword [esp + 0x8c], xmm0
movlpd qword [esp + 0x94], xmm0
movlpd qword [esp + 0x9c], xmm0
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ebp
test esi, esi
je 0x4cf17f
mov eax, dword [esi]
jmp 0x4cf181
mov ecx, dword [ebx]
push 0
push 0xc
test ecx, ecx
je 0x4cf150
push ecx
call fcn.004aebd0
add esp, 0xc
jmp 0x4cf158
call fcn.004c19b0
add esp, 8
mov ecx, eax
test ecx, ecx
je 0x4cf0af
mov eax, dword [ebx + 0x8c]
mov dword [ecx], eax
mov dword [ebx + 0x8c], ecx
mov dword [ecx + 4], ebp
mov dword [ecx + 8], 0x46ccc0
jmp 0x4cf0dd
xor eax, eax
push dword [esp + 0x44]
mov word [ebp + 2], ax
lea eax, [esp + 0x84]
push eax
mov dword [ebp + 0x10], esi
call fcn.004b1510
push dword [esp + 0x28]
lea eax, [esp + 0x8c]
push eax
call fcn.004b1510
mov ecx, dword [esp + 0x8c]
add esp, 0x10
test ecx, ecx
je 0x4cf278
test esi, esi
je 0x4cf222
mov eax, dword [esp + 0x104]
xorps xmm0, xmm0
mov dword [esp + 0xc0], eax
movlpd qword [esp + 0xb0], xmm0
movlpd qword [esp + 0xb8], xmm0
mov eax, dword [eax + 0x2c]
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], 0x486730
test eax, eax
je 0x4cf214
push eax
lea eax, [esp + 0xac]
push eax
call fcn.004e6260
mov ecx, dword [esp + 0x84]
add esp, 8
mov eax, dword [esp + 0x104]
mov eax, dword [eax + 0x24]
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x80]
mov dword [esp + 0xac], 0x46deb0
mov dword [esp + 0xc0], eax
lea eax, [esp + 0xa8]
push ecx
push eax
mov dword [esp + 0xb8], 0x4e6500
mov dword [esp + 0xbc], 0x4e64f0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xb0], 0
call fcn.004e6260
add esp, 8
mov eax, dword [ebp + 0x18]
mov dword [ebp + 0x1c], eax
mov eax, dword [esp + 0x104]
cmp dword [eax + 0x28], 0
jne 0x4cf365
cmp dword [eax + 0x2c], 0
jne 0x4cf365
cmp dword [ebp + 0x24], 1
jne 0x4cf365
mov eax, dword [ebp + 0x20]
mov eax, dword [eax]
mov esi, dword [eax + 0x14]
test esi, esi
je 0x4cf35a
cmp dword [esi], 1
jne 0x4cf35a
test dword [eax + 4], 0x1000000
jne 0x4cf35a
mov ecx, dword [esp + 0x28]
test dword [ecx + 0x50], 0x10000
jne 0x4cf35a
mov eax, dword [eax + 8]
push 0x68691c
push eax
mov dword [esp + 0x20], eax
call fcn.004d2a70
add esp, 8
test eax, eax
jne 0x4cf312
push dword [esi + 8]
call fcn.004b1af0
add esp, 4
mov byte [esp + 0x1f], 1
neg eax
sbb al, al
and eax, 0xffffff02
mov dword [esp + 0x14], eax
jmp 0x4cf331
push 0x686920
push dword [esp + 0x1c]
call fcn.004d2a70
add esp, 8
test eax, eax
jne 0x4cf35a
mov byte [esp + 0x14], 1
mov byte [esp + 0x1f], 2
push 0
push esi
push dword [esp + 0x30]
call fcn.004b5c70
mov ecx, eax
add esp, 0xc
mov dword [esp + 0xa4], ecx
test ecx, ecx
je 0x4cf35f
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x2c]
mov byte [ecx + 0x10], al
jmp 0x4cf36a
mov byte [esp + 0x1f], 0
mov esi, dword [esp + 0x2c]
jmp 0x4cf36a
mov byte [esp + 0x1f], 0
lea eax, [esp + 0x80]
push eax
push ebp
call fcn.0046ddf0
mov ecx, dword [esp + 0x30]
add esp, 8
cmp byte [ecx + 0x57], 0
jne 0x4d0b41
test esi, esi
je 0x4d04a9
cmp dword [ebp + 0x24], 1
mov dword [esp + 0x5c], 0
mov dword [esp + 0x14], 0
jne 0x4cf476
mov eax, dword [ebp + 0x20]
cmp dword [eax + 8], 0
jl 0x4cf476
mov eax, dword [eax]
test eax, eax
je 0x4cf476
test dword [eax + 4], 0x1000
jne 0x4cf476
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4cf476
mov eax, dword [eax + 8]
test eax, eax
je 0x4cf3f7
push 0
push 0
push eax
push ecx
call fcn.0047df60
mov ecx, dword [esp + 0x38]
add esp, 0x10
mov esi, eax
jmp 0x4cf3f9
xor esi, esi
push 0
push dword [esp + 0x30]
push ecx
call fcn.004b5c70
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x5c], ecx
test ecx, ecx
jne 0x4cf423
push esi
push dword [ebx]
call fcn.004b5980
add esp, 8
mov dword [esp + 0x5c], eax
jmp 0x4cf465
mov eax, dword [ecx]
lea edx, [eax + 1]
cmp dword [ecx + 4], edx
jge 0x4cf43f
push esi
push ecx
push dword [ebx]
call fcn.004b58c0
add esp, 0xc
mov dword [esp + 0x5c], eax
jmp 0x4cf465
movups xmm0, xmmword [0x684670]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*4]
mov eax, dword [esp + 0x5c]
mov dword [eax], edx
mov eax, dword [0x684680]
movups xmmword [ecx + 8], xmm0
mov dword [ecx + 0x18], eax
mov eax, dword [esp + 0x5c]
mov dword [ecx + 8], esi
mov esi, dword [esp + 0x2c]
neg eax
sbb eax, eax
and eax, 0x500
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x28]
mov dword [ebp + 4], eax
inc dword [ebx + 0x28]
push dword [ebp + 0x18]
push 0
push esi
push ebx
call fcn.004c0820
mov ecx, dword [edi + 0x6c]
add esp, 0x10
movzx edx, word [ebp + 2]
mov esi, dword [ebp + 4]
mov dword [esp + 0x34], eax
mov dword [esp + 0x3c], ecx
cmp dword [edi + 0x70], ecx
jg 0x4cf4bc
push 0
push edx
push esi
push 0x77
push edi
call fcn.00486380
mov edx, eax
add esp, 0x14
mov dword [esp + 0x3c], edx
jmp 0x4cf4f2
mov ebx, dword [esp + 0x100]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0x77
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, edx
cmp byte [ecx + 0x57], 0
je 0x4cf520
cmp dword [ecx + 0x210], 0
jne 0x4cf55a
mov edx, dword [esp + 0x34]
test edx, edx
je 0x4cf55a
add dword [edx], 0xffffffff
jne 0x4cf55a
push edx
push dword [edx + 0xc]
call fcn.004aecf0
add esp, 8
jmp 0x4cf55a
test edx, edx
jns 0x4cf528
mov eax, dword [edi + 0x6c]
dec eax
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x4cf54b
mov ecx, dword [esp + 0x34]
push 0xfffffffffffffff8
push ecx
push eax
push edi
call fcn.004f3080
add esp, 0x10
jmp 0x4cf55a
mov edx, dword [esp + 0x34]
test edx, edx
je 0x4cf55a
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov eax, dword [ebx + 0x2c]
mov esi, dword [esp + 0x2c]
inc eax
mov dword [esp + 0x68], eax
lea edx, [eax + 1]
mov eax, dword [ebx + 0x38]
dec eax
mov dword [esp + 0x20], edx
mov dword [esp + 0x74], eax
lea ecx, [edx + 2]
dec eax
mov dword [ebx + 0x2c], ecx
mov dword [ebx + 0x38], eax
mov dword [esp + 0x30], ecx
add ecx, dword [esi]
mov dword [esp + 0x78], eax
mov dword [ebx + 0x2c], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x6c], eax
mov eax, dword [esi]
add eax, ecx
mov dword [ebx + 0x2c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4cf5b4
push 0
push edx
push 0
push 0x47
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cf5ea
mov ebx, dword [esp + 0x100]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x30]
add edx, dword [esi]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4cf60e
mov eax, dword [esp + 0x30]
push edx
inc eax
push eax
push 0
push 0x4b
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cf649
mov ebx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x2c]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc ebx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x100]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4cf668
push 0
push dword [esp + 0x7c]
push dword [esp + 0x38]
push 0xa
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cf69b
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x78]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x54]
mov edx, 0x80
neg ecx
mov eax, 0x40
push 0
sbb ecx, ecx
and ecx, 0x200
cmp byte [esp + 0x2b], 2
cmove eax, edx
or cx, ax
or cx, word [esp + 0x18]
movzx eax, cx
push eax
push dword [esp + 0x10c]
mov eax, dword [esp + 0x68]
push eax
push esi
push dword [esp + 0x60]
push dword [esp + 0x28]
push ebx
call fcn.004e6600
mov ecx, eax
add esp, 0x20
mov dword [esp + 0x4c], ecx
test ecx, ecx
jne 0x4cf70f
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x4d0b3d
push eax
push dword [esp + 0x2c]
call fcn.0047ea30
add esp, 8
jmp 0x4d0b3d
cmp dword [ebx + 0x48], 0
lea esi, [ebx + 0x48]
je 0x4cf77a
cmp word [ebp + 2], 0
lea eax, [ebx + 0x48]
mov esi, dword [ebp + 0x1c]
mov dword [ebp + 0x18], esi
mov dword [esp + 0x18], eax
jbe 0x4cf761
mov eax, dword [esp + 0x104]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
dec ecx
test esi, esi
jle 0x4cf755
mov edx, dword [ebp + 0x14]
add edx, 0xe
movsx eax, word [edx]
lea edx, [edx + 0x10]
cmp eax, ecx
cmovle eax, ecx
mov ecx, eax
sub esi, 1
jne 0x4cf743
lea eax, [ecx + 1]
mov word [ebp + 2], ax
lea esi, [ebx + 0x48]
jmp 0x4cf765
mov esi, dword [esp + 0x18]
lea eax, [esp + 0x80]
push eax
push ebp
call fcn.0046ddf0
mov ecx, dword [esp + 0x54]
add esp, 8
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x24]
add eax, dword [ebp + 0x18]
add dword [ebx + 0x2c], eax
movzx eax, byte [ecx + 0x2f]
mov dword [esp + 0x18], eax
mov al, byte [ecx + 0x2d]
xor ecx, ecx
test al, al
movsx edx, al
mov eax, dword [esp + 0x2c]
cmovns ecx, edx
cmp ecx, dword [eax]
jne 0x4cf7b4
mov dword [esp + 0x70], 0
jmp 0x4cfb3b
cmp byte [esp + 0x27], 0
je 0x4cf7cd
mov eax, dword [esp + 0x104]
test byte [eax + 4], 1
mov eax, str.DISTINCT
je 0x4cf7d2
mov eax, str.GROUP_BY
push eax
push str.USE_TEMP_B_TREE_FOR__s
push 0
push ebx
call fcn.004e0dc0
mov eax, dword [esp + 0x3c]
add esp, 0x10
cmp dword [ebp + 0x18], 0
mov dword [esp + 0x70], 1
mov eax, dword [eax]
mov esi, eax
mov dword [esp + 0x38], eax
mov edx, eax
mov dword [esp + 0x48], esi
jle 0x4cf840
mov esi, dword [ebp + 0x14]
mov edi, eax
mov ebx, dword [ebp + 0x18]
add esi, 0xe
nop
movsx ecx, word [esi]
lea eax, [edi + 1]
cmp ecx, edx
lea esi, [esi + 0x10]
cmovl eax, edi
mov edi, eax
lea eax, [edx + 1]
cmovl eax, edx
mov edx, eax
sub ebx, 1
jne 0x4cf810
mov ebx, dword [esp + 0x100]
mov dword [esp + 0x48], edi
mov edi, dword [esp + 0x58]
mov esi, dword [esp + 0x48]
cmp esi, 1
jne 0x4cf86b
mov al, byte [ebx + 0x13]
test al, al
jne 0x4cf856
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [esp + 0x10], eax
jmp 0x4cf892
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0xa4]
mov dword [esp + 0x10], eax
jmp 0x4cf895
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ebx + 0x20]
mov dword [esp + 0x10], edx
cmp esi, ecx
jg 0x4cf886
lea eax, [esi + edx]
sub ecx, esi
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], ecx
jmp 0x4cf895
mov eax, dword [ebx + 0x2c]
lea ecx, [eax + 1]
add eax, esi
mov dword [esp + 0x10], ecx
mov dword [ebx + 0x2c], eax
push 0
push 0
push dword [esp + 0x18]
push dword [esp + 0x38]
push ebx
call fcn.004b1cd0
xor esi, esi
mov byte [ebp], 1
add esp, 0x14
mov dword [esp + 0x64], esi
cmp dword [ebp + 0x18], esi
jle 0x4cf950
mov edi, dword [esp + 0x38]
add edi, dword [esp + 0x10]
xor edx, edx
mov dword [esp + 0x50], edx
nop dword [eax + eax]
mov ecx, dword [ebp + 0x14]
movsx eax, word [ecx + edx + 0xe]
cmp eax, dword [esp + 0x38]
jl 0x4cf93b
cmp dword [ebx + 8], 0
je 0x4cf936
mov esi, dword [ecx + edx + 4]
push edi
push esi
push ebx
call fcn.004b30f0
mov edx, eax
add esp, 0xc
cmp edx, edi
je 0x4cf92e
push esi
call fcn.004b66d0
add esp, 4
test eax, eax
je 0x4cf91b
test dword [eax + 4], 0x400000
jne 0x4cf914
cmp byte [eax], 0xb0
jne 0x4cf91b
mov eax, 0x50
jmp 0x4cf920
mov eax, 0x51
push edi
push edx
push eax
push dword [ebx + 8]
call fcn.004d7790
add esp, 0x10
mov esi, dword [esp + 0x64]
mov edx, dword [esp + 0x50]
inc dword [esp + 0x38]
inc edi
inc esi
add edx, 0x10
mov dword [esp + 0x64], esi
mov dword [esp + 0x50], edx
cmp esi, dword [ebp + 0x18]
jl 0x4cf8d0
mov edi, dword [esp + 0x58]
mov byte [ebp], 0
mov al, byte [ebx + 0x13]
test al, al
jne 0x4cf964
mov esi, dword [ebx + 0x2c]
inc esi
mov dword [ebx + 0x2c], esi
jmp 0x4cf973
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov esi, dword [ebx + eax*4 + 0xa4]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4cf992
mov edx, dword [esp + 0x48]
push esi
push edx
push dword [esp + 0x18]
push 0x61
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cf9c1
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x48]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 4]
cmp dword [edi + 0x70], ecx
jg 0x4cf9e0
push 0
push esi
push edx
push 0x8b
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cfa0f
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x58]
mov dword [eax + ecx*4], 0x8b
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test esi, esi
je 0x4cfa27
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4cfa27
movzx eax, al
mov dword [ebx + eax*4 + 0xa4], esi
inc byte [ebx + 0x13]
mov esi, dword [esp + 0x48]
cmp esi, 1
jne 0x4cfa4e
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4cfa5d
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4cfa5d
movzx eax, al
mov dword [ebx + eax*4 + 0xa4], ecx
inc byte [ebx + 0x13]
jmp 0x4cfa5d
cmp esi, dword [ebx + 0x1c]
jle 0x4cfa5d
mov eax, dword [esp + 0x10]
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], eax
push dword [esp + 0x4c]
call fcn.004e9c70
mov eax, dword [ebx + 0x28]
add esp, 4
mov dword [ebp + 8], eax
inc dword [ebx + 0x28]
mov dword [esp + 0x48], eax
mov al, byte [ebx + 0x13]
test al, al
jne 0x4cfa86
mov edx, dword [ebx + 0x2c]
inc edx
mov dword [ebx + 0x2c], edx
jmp 0x4cfa95
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov edx, dword [ebx + eax*4 + 0xa4]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x38], edx
cmp dword [edi + 0x70], ecx
jg 0x4cfab4
push esi
push edx
push dword [esp + 0x50]
push 0x79
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cfae6
mov ebx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x100]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 4]
cmp dword [edi + 0x70], ecx
jg 0x4cfb05
push 0
push dword [esp + 0x44]
push edx
push 0x22
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cfb34
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x40]
mov dword [eax + ecx*4], 0x22
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [ebp + 1], 1
lea esi, [ebx + 0x48]
cmp dword [esi], 0
je 0x4cfba3
xorps xmm0, xmm0
mov dword [esp + 0xc0], 0
xor ecx, ecx
movq qword [esp + 0xb8], xmm0
movups xmmword [esp + 0xa8], xmm0
mov dword [esp + 0xac], 0x46cdc0
mov dword [esp + 0x50], ecx
cmp dword [ebp + 0x24], ecx
jle 0x4cfba3
xor esi, esi
mov eax, dword [ebp + 0x20]
mov eax, dword [esi + eax]
test eax, eax
je 0x4cfb96
push eax
lea eax, [esp + 0xac]
push eax
call fcn.004e6260
mov ecx, dword [esp + 0x58]
add esp, 8
inc ecx
add esi, 0x18
mov dword [esp + 0x50], ecx
cmp ecx, dword [ebp + 0x24]
jl 0x4cfb77
cmp dword [esp + 0x54], 0
je 0x4cfc06
mov eax, dword [esp + 0x28]
test byte [eax + 0x50], 4
jne 0x4cfc06
cmp dword [esp + 0x70], 0
jne 0x4cfbc5
mov eax, dword [esp + 0x4c]
test byte [eax + 0x30], 8
je 0x4cfc06
mov edx, dword [edi]
mov dword [esp + 0xd0], 0
cmp byte [edx + 0x57], 0
jne 0x4cfc06
mov eax, dword [esp + 0xe4]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + ecx*4 + 0x10]
lea esi, [eax + ecx*4]
movsx eax, byte [esi + 1]
push eax
push edx
call fcn.00483760
add esp, 0xc
mov word [esi], 0xbb
mov dword [esi + 0x10], 0
cmp dword [esp + 0x70], 0
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x54], ecx
je 0x4cfc61
mov edx, dword [ebp + 4]
mov esi, dword [esp + 0x38]
cmp dword [edi + 0x70], ecx
jg 0x4cfc36
push dword [esp + 0x48]
push esi
push edx
push 0x85
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cfc61
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x48]
mov dword [eax + ecx*4], 0x85
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x2c]
xor edx, edx
mov dword [esp + 0x38], edx
cmp dword [eax], edx
jle 0x4cfd5d
mov esi, dword [esp + 0x6c]
add eax, 8
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x70], 0
je 0x4cfcdb
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4cfca7
push esi
push edx
push dword [esp + 0x50]
push 0x5e
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cfd38
mov ebx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x100]
mov dword [eax + ecx*4], 0x5e
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4cfd3c
mov byte [ebp], 1
cmp dword [ebx + 8], 0
je 0x4cfd44
mov edx, dword [esp + 0x10]
push esi
mov eax, dword [edx]
push eax
push ebx
mov dword [esp + 0x5c], eax
call fcn.004b30f0
mov edx, eax
add esp, 0xc
cmp edx, esi
je 0x4cfd38
push dword [esp + 0x50]
call fcn.004b66d0
add esp, 4
test eax, eax
je 0x4cfd25
test dword [eax + 4], 0x400000
jne 0x4cfd1e
cmp byte [eax], 0xb0
jne 0x4cfd25
mov eax, 0x50
jmp 0x4cfd2a
mov eax, 0x51
push esi
push edx
push eax
push dword [ebx + 8]
call fcn.004d7790
add esp, 0x10
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
inc edx
add eax, 0x14
inc esi
mov dword [esp + 0x38], edx
mov dword [esp + 0x10], eax
cmp edx, dword [ecx]
jl 0x4cfc82
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x4cfd67
inc dword [ecx]
mov edx, dword [edi + 0x6c]
mov esi, dword [eax]
cmp dword [edi + 0x70], edx
jg 0x4cfd8b
mov eax, dword [esp + 0x30]
push esi
push dword [esp + 0x70]
inc eax
push eax
push 0x5a
push edi
call fcn.00486380
add esp, 0x14
mov edx, eax
jmp 0x4cfdc6
mov ebx, dword [esp + 0x30]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
inc ebx
mov edi, dword [esp + 0x58]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x6c]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0x100]
mov dword [eax + ecx*4], 0x5a
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4cfdf2
cmp dword [eax + 0x210], 0
jne 0x4cfe28
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x4cfe28
add dword [ecx], 0xffffffff
jne 0x4cfe28
push ecx
push dword [ecx + 0xc]
call fcn.004aecf0
add esp, 8
jmp 0x4cfe28
test edx, edx
jns 0x4cfdfa
mov edx, dword [edi + 0x6c]
dec edx
mov eax, dword [edi + 0x68]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x34]
je 0x4cfe1d
push 0xfffffffffffffff8
push ecx
push eax
push edi
call fcn.004f3080
add esp, 0x10
jmp 0x4cfe28
test ecx, ecx
je 0x4cfe28
mov dword [eax + 0x10], ecx
mov byte [eax + 1], 0xf8
mov esi, dword [edi + 0x6c]
lea edx, [esi + 1]
cmp dword [edi + 0x70], esi
jg 0x4cfe44
push edx
push 0
push edx
push 0xe
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cfe73
mov eax, dword [edi + 0x68]
lea ecx, [esi + esi*4]
mov ebx, dword [esp + 0x100]
mov dword [edi + 0x6c], edx
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebx + 8]
mov eax, dword [esp + 0x2c]
mov ecx, dword [edx + 0x6c]
mov eax, dword [eax]
mov dword [esp + 0x50], eax
cmp dword [edx + 0x70], ecx
jg 0x4cfea0
push eax
mov eax, dword [esp + 0x34]
inc eax
push eax
push dword [esp + 0x74]
push 0x4f
push edx
call fcn.00486380
add esp, 0x14
jmp 0x4cfed8
mov edi, dword [esp + 0x58]
lea eax, [ecx + 1]
mov dword [edx + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edx + 0x68]
mov edx, dword [esp + 0x6c]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x30]
inc edx
mov dword [eax + ecx*4], 0x4f
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x50]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4cfef9
mov eax, dword [esp + 0x20]
push 0
push dword [esp + 0x78]
inc eax
push eax
push 0xa
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cff34
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0x100]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x74]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4cff53
push 0
push dword [esp + 0x44]
push dword [esp + 0x28]
push 0x3b
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cff86
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x40]
mov dword [eax + ecx*4], 0x3b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4cffa5
push 0
push dword [esp + 0x7c]
push dword [esp + 0x38]
push 0xa
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4cffd8
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x78]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4cffea
mov eax, 0x718388
jmp 0x4cfff3
mov eax, dword [edi + 0x68]
lea ecx, [esi + esi*4]
lea eax, [eax + ecx*4]
push dword [esp + 0x18]
mov esi, dword [esp + 0x6c]
push ebp
push esi
push ebx
mov dword [eax + 8], edx
call fcn.004f09b0
mov ecx, dword [edi + 0x6c]
add esp, 0x10
cmp dword [edi + 0x70], ecx
jg 0x4d0023
push 0
push esi
push 1
push 0x47
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d0052
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x70], 0
je 0x4d00a6
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 4]
mov esi, dword [esp + 0x54]
cmp dword [edi + 0x70], ecx
jg 0x4d0079
push 0
push esi
push edx
push 0x25
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d00e5
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x25
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4d00e5
push dword [esp + 0x4c]
call fcn.004e9c70
mov edx, dword [edi]
add esp, 4
cmp byte [edx + 0x57], 0
jne 0x4d00e5
mov eax, dword [esp + 0x3c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + ecx*4 + 0x10]
lea esi, [eax + ecx*4]
movsx eax, byte [esi + 1]
push eax
push edx
call fcn.00483760
add esp, 0xc
mov word [esi], 0xbb
mov dword [esi + 0x10], 0
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x4d00fa
push eax
push dword [esp + 0x2c]
call fcn.0047ea30
add esp, 8
mov esi, dword [esp + 0x20]
mov ecx, dword [edi + 0x6c]
inc esi
cmp dword [edi + 0x70], ecx
jg 0x4d011b
push 0
push dword [esp + 0x78]
push esi
push 0xa
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d014a
mov edx, dword [esp + 0x74]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d0167
push 0
push dword [esp + 0x44]
push 0
push 9
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d019a
mov edx, dword [esp + 0x40]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x3c], ecx
cmp dword [edi + 0x70], ecx
jg 0x4d01bb
push 0
push dword [esp + 0x24]
push 1
push 0x47
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d01ee
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d0208
push 0
push 0
push esi
push 0x43
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d0237
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x74]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4d0255
push edx
push edi
push ecx
call fcn.0049ce60
add esp, 0xc
jmp 0x4d025e
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [edi + 0x6c]
lea edx, [eax + 2]
lea esi, [eax + 1]
cmp dword [edi + 0x70], eax
jg 0x4d0280
push 0
push edx
push dword [esp + 0x70]
push 0x3b
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d02b3
mov ebx, dword [esp + 0x68]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
mov dword [edi + 0x6c], esi
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x100]
mov dword [eax + ecx*4], 0x3b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d02d2
mov eax, dword [esp + 0x20]
push 0
push 0
inc eax
push eax
push 0x43
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d030d
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0x100]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
push ebp
push ebx
call fcn.0047fd90
push 0x10
push esi
push dword [esp + 0x8c]
push ebx
call fcn.004b4d40
push dword [esp + 0x54]
lea eax, [esp + 0xe0]
push esi
push dword [esp + 0x128]
push eax
lea eax, [esp + 0xf8]
push eax
push 0xffffffffffffffff
push dword [esp + 0x134]
push ebx
call fcn.004a0650
mov ecx, dword [edi + 0x6c]
add esp, 0x38
cmp dword [edi + 0x70], ecx
jg 0x4d0371
mov eax, dword [esp + 0x20]
push 0
push 0
inc eax
push eax
push 0x43
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d03a5
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
inc edx
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x78]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4d03c3
push edx
push edi
push ecx
call fcn.0049ce60
add esp, 0xc
jmp 0x4d03cc
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
push ebp
push ebx
call fcn.0049cc30
mov ecx, dword [edi + 0x6c]
add esp, 8
cmp dword [edi + 0x70], ecx
jg 0x4d03f3
push 0
push dword [esp + 0x6c]
push 0
push 0x47
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d0426
mov edx, dword [esp + 0x68]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d0443
push 0
push 0
push dword [esp + 0x38]
push 0x43
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d0476
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp word [esp + 0x14], 0
je 0x4d0499
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4d0499
mov eax, dword [ebp + 0x20]
push dword [eax + 0xc]
push dword [eax + 8]
push ecx
push ebx
call fcn.004805d0
add esp, 0x10
mov ebp, dword [esp + 0x104]
mov esi, dword [esp + 0x40]
jmp 0x4d0b07
mov ecx, dword [esp + 0x104]
cmp dword [ecx + 0x24], 0
jne 0x4d0855
mov edx, dword [ecx + 0x1c]
cmp dword [edx], 1
jne 0x4d0855
mov eax, dword [ecx + 0x20]
cmp dword [eax], 1
jne 0x4d0855
cmp dword [eax + 0x1c], 0
jne 0x4d0855
cmp dword [ebp + 0x24], 1
jne 0x4d0855
cmp dword [ecx + 0x2c], 0
jne 0x4d0855
mov ecx, dword [eax + 0x18]
cmp byte [ecx + 0x2b], 0
jne 0x4d0855
mov edx, dword [edx + 8]
cmp byte [edx], 0xa8
jne 0x4d0855
cmp dword [edx + 0x28], ebp
jne 0x4d0855
mov eax, dword [ebp + 0x20]
mov eax, dword [eax + 4]
test dword [eax + 4], 0x100
je 0x4d0855
test dword [edx + 4], 0x1000004
jne 0x4d0855
test ecx, ecx
je 0x4d0855
mov esi, dword [ecx + 0x3c]
mov edx, 0xffff8000
mov dword [esp + 0x4c], edx
mov dword [esp + 0x34], ecx
test esi, esi
je 0x4d059c
mov eax, dword [ebx]
xor edx, edx
mov edi, dword [esp + 0x104]
mov dword [esp + 0x4c], edx
mov eax, dword [eax + 0x10]
mov ecx, dword [edi + 0x20]
add eax, 0xc
mov edi, dword [esp + 0x58]
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x34], ecx
cmp dword [eax], esi
je 0x4d059c
mov edi, dword [esp + 0x104]
mov ecx, dword [edi + 0x20]
mov edi, dword [esp + 0x58]
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x34], ecx
nop word [eax + eax]
lea eax, [eax + 0x10]
inc edx
cmp dword [eax], esi
jne 0x4d0590
mov dword [esp + 0x4c], edx
mov eax, dword [ebx + 0x28]
xor esi, esi
mov dword [esp + 0x38], eax
inc eax
mov dword [ebx + 0x28], eax
xor eax, eax
mov dword [esp + 0x18], eax
mov eax, dword [ecx + 0x14]
mov ecx, ebx
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x80]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x54], ecx
mov eax, dword [ecx + 0x5c]
mov ecx, edx
mov dword [esp + 0x3c], eax
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x3c]
test ecx, eax
jne 0x4d05f9
mov eax, dword [esp + 0x54]
bts ecx, edx
mov dword [eax + 0x5c], ecx
cmp edx, 1
jne 0x4d05fe
push eax
call fcn.004c2b10
add esp, 4
jmp 0x4d0626
cmp edx, 1
je 0x4d0626
mov eax, dword [ebx]
mov ecx, edx
add ecx, ecx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx*8 + 4]
cmp byte [eax + 9], 0
je 0x4d0626
mov eax, dword [esp + 0x34]
push dword [eax]
push 0
push dword [eax + 0x14]
push edx
push ebx
call fcn.0048f7a0
add esp, 0x14
mov ecx, dword [esp + 0x34]
test byte [ecx + 0x1c], 0x80
je 0x4d0647
mov esi, dword [ecx + 8]
test esi, esi
je 0x4d0647
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4d0647
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4d0637
mov eax, dword [esp + 0x104]
mov eax, dword [eax + 0x20]
test byte [eax + 0x30], 1
jne 0x4d0689
mov eax, dword [ecx + 8]
test eax, eax
je 0x4d0689
nop
test byte [eax + 0x38], 4
jne 0x4d0682
movzx edx, word [eax + 0x30]
cmp dx, word [ecx + 0x28]
jge 0x4d0682
cmp dword [eax + 0x24], 0
jne 0x4d0682
test esi, esi
je 0x4d0680
cmp dx, word [esi + 0x30]
jge 0x4d0682
mov esi, eax
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x4d0660
test esi, esi
je 0x4d06a2
mov eax, dword [esi + 0x2c]
push esi
push ebx
mov dword [esp + 0x1c], eax
call fcn.004c08b0
add esp, 8
mov dword [esp + 0x18], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d06c8
mov edx, dword [esp + 0x4c]
push 1
push edx
mov edx, dword [esp + 0x1c]
push edx
mov edx, dword [esp + 0x44]
push edx
push 0x70
push edi
call fcn.0046c970
add esp, 0x18
jmp 0x4d06fb
mov edx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + ecx*4], 0xfd70
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 1
mov edx, dword [esp + 0x18]
test edx, edx
je 0x4d0752
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4d0727
cmp dword [eax + 0x210], 0
jne 0x4d0752
add dword [edx], 0xffffffff
jne 0x4d0752
push edx
push dword [edx + 0xc]
call fcn.004aecf0
add esp, 8
jmp 0x4d0752
mov eax, dword [edi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
add eax, 0xffffffec
cmp byte [eax + 1], 0
je 0x4d074b
push 0xfffffffffffffff8
push edx
push eax
push edi
call fcn.004f3080
add esp, 0x10
jmp 0x4d0752
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x24]
add eax, dword [ebp + 0x18]
add dword [ebx + 0x2c], eax
mov edx, dword [ebp + 0x18]
add edx, dword [ebp + 0xc]
mov ecx, dword [edi + 0x6c]
mov ebp, dword [esp + 0x38]
cmp dword [edi + 0x70], ecx
jg 0x4d0785
push 0
push edx
push ebp
push 0x62
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d07b0
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x62
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d07ca
push 0
push 0
push ebp
push 0x7a
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d07f9
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x7a
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [ebx + 0xdb], 2
jne 0x4d0ac8
mov ecx, dword [esp + 0x34]
test esi, esi
je 0x4d0826
test byte [ecx + 0x1c], 0x80
je 0x4d081d
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4d0826
mov eax, dword [esi]
mov edx, 1
jmp 0x4d082d
xor edx, edx
mov eax, 0x70ce08
push eax
test edx, edx
mov eax, str._USING_COVERING_INDEX
mov esi, 0x70ce08
cmove eax, esi
push eax
push dword [ecx]
push str.SCAN__s_s_s
push 0
push ebx
call fcn.004e0dc0
add esp, 0x18
jmp 0x4d0ac8
cmp dword [ebp + 0x1c], 0
mov esi, dword [ebp + 0x24]
mov dword [esp + 0x14], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x18], 0
je 0x4d0909
xor edx, edx
test esi, esi
jle 0x4d08ac
mov ecx, dword [ebp + 0x20]
mov ebx, esi
mov eax, dword [ecx]
test dword [eax + 4], 0x1000000
jne 0x4d089b
mov eax, dword [ecx + 4]
mov esi, ebx
test byte [eax + 4], 0x20
jne 0x4d08a5
inc edx
add ecx, 0x18
mov esi, ebx
cmp edx, ebx
jl 0x4d0885
mov ebx, dword [esp + 0x100]
cmp edx, esi
jne 0x4d092d
inc dword [ebx + 0x2c]
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebx + 0x2c]
mov dword [esp + 0x14], edx
cmp dword [edi + 0x70], ecx
jg 0x4d08d8
push 0
push edx
push 0
push 0x47
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d092d
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4d092d
cmp esi, 1
jne 0x4d092d
mov eax, dword [ebp + 0x20]
cmp dword [eax + 8], 0
jl 0x4d092d
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x3c], eax
neg eax
sbb eax, eax
and eax, 0x500
mov dword [esp + 0x18], eax
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x24]
add eax, dword [ebp + 0x18]
add dword [ebx + 0x2c], eax
push ebp
push ebx
call fcn.0049cc30
movzx eax, byte [esp + 0x27]
or ax, word [esp + 0x20]
push 0
movzx eax, ax
push eax
push dword [esp + 0x114]
push dword [esp + 0x50]
push dword [esp + 0xbc]
push dword [esp + 0x68]
push dword [esp + 0x30]
push ebx
call fcn.004e6600
mov esi, eax
add esp, 0x28
test esi, esi
je 0x4d0b3d
movzx eax, byte [esi + 0x2f]
push eax
push ebp
push dword [esp + 0x1c]
mov dword [esp + 0x24], eax
push ebx
call fcn.004f09b0
mov ecx, dword [esp + 0x28]
add esp, 0x10
test ecx, ecx
je 0x4d09b7
mov eax, dword [ebp + 0x20]
test eax, eax
je 0x4d09b7
push dword [eax + 0xc]
push dword [eax + 8]
push ecx
push ebx
call fcn.004805d0
add esp, 0x10
mov edx, dword [esp + 0x14]
test edx, edx
je 0x4d0a0f
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4d09d9
push 0
push edx
push 1
push 0x47
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d0a0f
mov ebx, dword [esp + 0x100]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0x1f], 0
je 0x4d0ab8
test byte [esi + 0x30], 4
je 0x4d0ab8
cmp byte [esi + 0x2d], 0
je 0x4d0ab8
movzx edx, byte [esi + 0x2c]
sub edx, 1
js 0x4d0a54
lea ecx, [edx + edx*2]
shl ecx, 5
add ecx, esi
nop
mov eax, dword [ecx + 0x348]
test byte [eax + 0x2c], 4
jne 0x4d0a71
sub ecx, 0x60
sub edx, 1
jns 0x4d0a40
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 0x20]
cmp dword [edi + 0x70], ecx
jg 0x4d0a82
push 0
push edx
push 0
push 9
push edi
call fcn.00486380
add esp, 0x14
jmp 0x4d0ab8
push dword [ecx + 0x308]
push edi
call fcn.004e1170
add esp, 8
jmp 0x4d0ab8
mov ebx, dword [esp + 0x100]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
push esi
call fcn.004e9c70
push ebp
push ebx
call fcn.0047fd90
add esp, 0xc
mov esi, dword [esp + 0x40]
push 0x10
push esi
push dword [esp + 0x84]
mov dword [esp + 0xdc], 0
push ebx
call fcn.004b4d40
mov ebp, dword [esp + 0x114]
push esi
push esi
push dword [esp + 0x120]
push 0
push 0
push 0xffffffffffffffff
push ebp
push ebx
call fcn.004a0650
add esp, 0x30
mov ecx, dword [edi + 0xc]
not esi
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4cee9c
push esi
push edi
push ecx
call fcn.0049ce60
add esp, 0xc
jmp 0x4ceea5
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
xor eax, eax
cmp dword [ebx + 0x24], eax
setg al
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0xa4]
test eax, eax
je 0x4cdbfb
push eax
push ecx
call fcn.0047ea30
add esp, 8
jmp 0x4cdbfb
push dword [esp + 0x108]
push ebp
push ebx
call fcn.00491250
add esp, 0xc
mov esi, eax
cmp dword [ebp + 0x38], 0
jne 0x4d0b81
push ebx
call fcn.004e0e20
add esp, 4
mov eax, esi
pop esi
pop edi
pop ebp
pop ebx
add esp, 0xec
ret
mov esi, dword [ebx + 8]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4d0bb6
pop esi
mov eax, 0x718388
pop edi
pop ebp
mov eax, dword [eax + 8]
mov dword [ebx + 0xe8], eax
mov eax, dword [esp + 0x58]
pop ebx
add esp, 0xec
ret
lea edx, [ecx + ecx*4]
mov ecx, dword [esi + 0x68]
pop esi
pop edi
pop ebp
lea eax, [ecx + edx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xe8], eax
mov eax, dword [esp + 0x58]
pop ebx
add esp, 0xec
ret
pop edi
pop ebp
mov eax, 1
pop ebx
add esp, 0xec
ret