Function at 0x46d350
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xd0
push ebx
mov ebx, dword [esp + 0xdc]
push esi
mov esi, dword [esp + 0xdc]
mov eax, dword [esi + 0x22c]
mov dword [esp + 0x90], eax
mov eax, dword [esi + 0x230]
push edi
mov edi, dword [esi]
mov dword [esi + 0x22c], eax
inc eax
mov dword [esp + 0x24], 1
mov dword [esi + 0x230], eax
mov dword [esp + 0x2c], edi
test ebx, ebx
je 0x46d3bb
cmp byte [edi + 0x1e], 0
jne 0x46d3bb
cmp dword [esi + 0x40], 0
jne 0x46d3bb
push 0
push 0
push 0
push 0x15
mov eax, esi
call fcn.00435cb0
add esp, 0x10
test eax, eax
je 0x46d3ca
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 0xd0
ret
push 0x2c
lea ecx, [esp + 0x6c]
push 0
push ecx
call fcn.0047d730
mov edx, dword [esp + 0xf4]
add esp, 0xc
cmp byte [edx], 4
ja 0x46d403
mov eax, dword [ebx + 0x18]
push eax
call fcn.004269d0
mov ecx, 0xfffe
add esp, 4
and word [ebx + 6], cx
mov dword [ebx + 0x18], 0
push ebp
push 0
push ebx
push esi
call fcn.0046d2c0
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 8]
mov ecx, dword [ebx]
add esp, 0xc
cmp dword [esi + 0x40], 0
mov dword [esp + 0x24], edx
mov dword [esp + 0x44], eax
mov dword [esp + 0x50], ecx
jne 0x46e817
mov edx, edi
cmp byte [edx + 0x1e], 0
jne 0x46e817
movzx eax, word [ebx + 6]
shr eax, 2
and eax, 1
mov edi, esi
mov dword [esp + 0x2c], eax
call fcn.00438c10
mov ebp, eax
test ebp, ebp
je 0x46e817
mov ecx, dword [esp + 0x50]
cmp dword [ecx], 1
mov eax, dword [esp + 0xec]
movzx eax, byte [eax]
jle 0x46d488
cmp eax, 6
je 0x46d476
cmp eax, 7
jne 0x46d488
push str.only_a_single_result_allowed_for_a_SELECT_that_is_part_of_an_expression
call fcn.00433540
add esp, 4
jmp 0x46e817
xor eax, eax
mov dword [esp + 0x1c], eax
cmp dword [ebx + 0x1c], eax
jne 0x46d5f5
mov ecx, dword [esp + 0x44]
jmp 0x46d4a0
movsx edx, word [ecx]
cmp eax, edx
jge 0x46d5f5
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + edx*8 + 0x18]
lea edi, [ecx + edx*8 + 8]
mov dword [esp + 0x3c], eax
test eax, eax
je 0x46d5e2
cmp byte [edi + 0x14], 0
jne 0x46d5e2
mov ecx, ebx
call fcn.004268e0
add dword [esi + 0x220], eax
mov eax, dword [esp + 0x3c]
movzx eax, word [eax + 6]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
shr eax, 2
and eax, 1
push eax
push ecx
push edx
push ebx
push esi
mov dword [esp + 0x34], eax
call fcn.004410c0
add esp, 0x14
test eax, eax
je 0x46d52b
cmp dword [esp + 0x20], 0
je 0x46d51e
or word [ebx + 6], 4
mov dword [esp + 0x2c], 1
mov dword [esp + 0x1c], 0xffffffff
jmp 0x46d5ad
mov eax, dword [edi + 0x18]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xd4], eax
xor eax, eax
lea ecx, [esp + 0xd0]
push ecx
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov al, byte [esi + 0x230]
push edx
mov byte [esp + 0xd8], 9
mov byte [esp + 0xd9], 0
push esi
mov byte [edi + 0x17], al
call fcn.0046d350
fnstcw word [esp + 0x1c]
mov eax, dword [esp + 0x48]
mov edx, dword [edi + 0xc]
mov byte [edi + 0x14], 1
fld qword [eax + 0x48]
movzx eax, word [esp + 0x1c]
add esp, 0xc
or eax, 0xc00
mov dword [esp + 0x20], eax
fldcw word [esp + 0x20]
fistp qword [esp + 0xa4]
mov ecx, dword [esp + 0xa4]
mov dword [edx + 0x18], ecx
fldcw word [esp + 0x10]
mov eax, dword [esp + 0x30]
cmp byte [eax + 0x1e], 0
jne 0x46e817
mov ecx, ebx
call fcn.004268e0
sub dword [esi + 0x220], eax
mov edx, dword [esp + 0xec]
cmp byte [edx], 4
mov ecx, dword [ebx + 8]
mov dword [esp + 0x44], ecx
jbe 0x46d5e2
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x1c]
inc eax
cmp dword [ebx + 0x1c], 0
mov dword [esp + 0x1c], eax
je 0x46d4a0
mov eax, dword [ebx + 0x10]
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx]
mov dword [esp + 0x40], ecx
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x10], eax
movzx eax, word [ebx + 6]
mov dword [esp + 0x64], ecx
mov ecx, eax
and ecx, 1
cmp dword [ebx + 0x1c], 0
mov dword [esp + 0x50], edx
mov dword [esp + 0x14], ecx
je 0x46d68d
cmp dword [ebx + 0x24], 0
jne 0x46d663
xor ecx, ecx
xor edx, edx
mov eax, ebx
nop
mov dword [eax + 0x20], ecx
mov dword [eax + 0x24], ebx
mov ecx, eax
mov eax, dword [eax + 0x1c]
inc edx
test eax, eax
jne 0x46d630
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x58]
test eax, eax
je 0x46d663
cmp edx, eax
jle 0x46d663
push str.too_many_terms_in_compound_SELECT
mov edi, esi
call fcn.00433540
add esp, 4
jmp 0x46e817
mov ecx, dword [esp + 0xec]
push ecx
push ebx
push esi
call fcn.0044de80
mov edx, dword [esp + 0xa4]
add esp, 0xc
pop ebp
pop edi
mov dword [esi + 0x22c], edx
pop esi
pop ebx
add esp, 0xd0
ret
and al, 5
cmp al, 1
jne 0x46d6b3
mov eax, dword [esp + 0x30]
push 0
push edx
push eax
call fcn.0042f170
mov ecx, 0xfffe
add esp, 0xc
and word [ebx + 6], cx
mov dword [ebx + 0x10], eax
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x24]
mov edi, dword [ebx + 0x10]
push edx
call fcn.00426f10
add esp, 4
test eax, eax
jne 0x46d774
mov eax, dword [esp + 0x30]
test byte [eax + 0xc], 0x20
jne 0x46d774
mov dword [esp + 0x24], 0
mov dword [esp + 0x34], 0xffffffff
mov eax, dword [esp + 0xec]
cmp byte [eax], 9
jne 0x46d70c
mov edx, dword [esp + 0x50]
mov ecx, dword [edx]
mov edx, dword [eax + 4]
push ecx
push edx
push 0x29
mov eax, ebp
call fcn.0042e090
add esp, 0xc
mov eax, ebp
call fcn.0042e0f0
fld qword [0x497da0]
push eax
fstp qword [ebx + 0x48]
mov dword [esp + 0xa8], eax
push ebx
mov eax, esi
call fcn.00438c40
add esp, 8
test byte [ebx + 6], 1
je 0x46d868
mov edi, dword [esi + 0x44]
lea eax, [edi + 1]
mov dword [esi + 0x44], eax
mov ecx, dword [ebx]
push ecx
push esi
mov dword [esp + 0x44], edi
call fcn.00447bb0
mov ecx, dword [ebp + 0xc]
add esp, 8
cmp dword [ebp + 0x10], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], ecx
jg 0x46d7c0
mov edi, ebp
call fcn.0042df10
test eax, eax
je 0x46d7b8
mov ecx, 1
jmp 0x46d7e7
cmp dword [esp + 0x24], 0
je 0x46d6e1
mov edi, dword [esp + 0x24]
push edi
push esi
call fcn.00447bb0
mov ecx, dword [esi + 0x44]
mov dword [edi + 8], ecx
inc dword [esi + 0x44]
mov ecx, dword [edi]
mov edx, dword [edi + 8]
push 0xfffffffffffffff0
push eax
add ecx, 2
push 0x29
xor eax, eax
mov edi, ebp
call fcn.004344a0
add esp, 0x14
mov dword [esp + 0x34], eax
mov dword [ebx + 0x40], eax
jmp 0x46d6e9
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x20]
mov eax, dword [ebp + 0x14]
inc dword [ebp + 0xc]
lea edx, [ecx + ecx*4]
lea eax, [eax + edx*4]
xor edx, edx
mov byte [eax], 0x29
mov byte [eax + 3], 0
mov dword [eax + 4], edi
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov byte [eax + 1], dl
mov byte [ebp + 0x62], dl
mov edx, dword [ebp + 0x14]
mov edi, dword [ebp]
mov eax, ecx
test edx, edx
je 0x46d846
cmp byte [edi + 0x1e], 0
jne 0x46d846
test ecx, ecx
jge 0x46d801
mov eax, dword [ebp + 0xc]
dec eax
lea ecx, [eax + eax*4]
movsx eax, byte [edx + ecx*4 + 1]
lea ecx, [edx + ecx*4]
mov dword [esp + 0x38], ecx
mov ecx, dword [ecx + 0x10]
call fcn.0042e240
cmp dword [esp + 0x18], 0
mov edx, dword [esp + 0x38]
mov dword [edx + 0x10], 0
mov eax, edx
jne 0x46d839
mov dword [eax + 0x10], 0
mov byte [eax + 1], 0
jmp 0x46d854
mov ecx, dword [esp + 0x18]
mov dword [eax + 0x10], ecx
mov byte [eax + 1], 0xfa
jmp 0x46d854
mov ecx, dword [esp + 0x18]
mov eax, 0xfffffff0
call fcn.0042e240
mov ecx, dword [ebp + 0x14]
test ecx, ecx
je 0x46d870
mov eax, dword [ebp + 0xc]
lea edx, [eax + eax*4]
mov byte [ecx + edx*4 - 0x11], 0x10
jmp 0x46d870
mov dword [esp + 0x3c], 0xffffffff
cmp dword [esp + 0x2c], 0
mov edi, dword [esp + 0x10]
jne 0x46d914
test edi, edi
jne 0x46d918
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
push edi
lea eax, [esp + 0x28]
push eax
push ecx
push edx
push esi
call fcn.00468e70
mov edi, eax
add esp, 0x14
test edi, edi
je 0x46e817
fld qword [ebx + 0x48]
fcomp qword [edi + 0x28]
fnstsw ax
test ah, 0x41
jne 0x46d8bd
fld qword [edi + 0x28]
fstp qword [ebx + 0x48]
mov ecx, dword [esp + 0x34]
test ecx, ecx
jl 0x46d8df
cmp dword [esp + 0x24], 0
jne 0x46d8df
mov eax, 1
mov edx, ebp
call fcn.0042e330
mov dword [ebx + 0x40], 0xffffffff
mov eax, dword [edi + 0x14]
mov ecx, dword [edi + 0x10]
mov edx, dword [esp + 0xec]
push eax
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x58]
push edx
push 0xffffffffffffffff
push eax
push 0
push 0
push ecx
push ebx
push esi
call fcn.00437d00
push edi
call fcn.00431a50
add esp, 0x2c
jmp 0x46e79e
test edi, edi
je 0x46d962
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov ecx, dword [ecx + 0xc]
test eax, eax
jle 0x46d933
add ecx, 0x10
xor edx, edx
mov word [ecx], dx
dec eax
add ecx, 0x14
test eax, eax
jg 0x46d926
mov eax, dword [edi]
mov ecx, dword [edi + 0xc]
test eax, eax
jle 0x46d94d
add ecx, 0x10
nop
xor edx, edx
mov word [ecx], dx
dec eax
add ecx, 0x14
test eax, eax
jg 0x46d940
fld qword [0x4a3df8]
fcom qword [ebx + 0x48]
fnstsw ax
test ah, 5
jp 0x46d969
fstp qword [ebx + 0x48]
jmp 0x46d96b
fld1
fstp qword [ebx + 0x48]
jmp 0x46d96b
fstp st(0)
mov eax, ebp
call fcn.0042e0f0
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x38], eax
xor eax, eax
lea edx, [esp + 0x6c]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xc8], eax
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xac], esi
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xc8], edx
cmp edi, eax
je 0x46d9db
mov eax, dword [edi]
inc eax
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x50]
lea edx, [esp + 0xac]
push edx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x78], ecx
call fcn.0043d980
mov ebx, dword [esp + 0x28]
lea eax, [esp + 0xb0]
push eax
call fcn.0043d980
mov ecx, dword [esp + 0x6c]
xor edi, edi
add esp, 8
cmp ecx, edi
je 0x46da22
lea eax, [esp + 0xac]
call fcn.0043d950
cmp dword [esp + 0x90], edi
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x1c], edi
jle 0x46da72
lea ecx, [ecx]
mov edx, dword [esp + 0x8c]
mov eax, dword [edi + edx]
mov ebx, dword [eax + 0x10]
lea ecx, [esp + 0xac]
push ecx
call fcn.0043d980
mov eax, dword [esp + 0x20]
inc eax
add esp, 4
add edi, 0x10
cmp eax, dword [esp + 0x90]
mov dword [esp + 0x1c], eax
jl 0x46da40
mov edx, dword [esp + 0x30]
cmp byte [edx + 0x1e], 0
jne 0x46e817
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x46e4fc
mov eax, dword [esi + 0x44]
mov dword [esp + 0x70], eax
push ecx
inc eax
push esi
mov dword [esi + 0x44], eax
call fcn.00447bb0
mov ebx, dword [ebp + 0xc]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x80]
add esp, 8
cmp dword [ebp + 0x10], ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x20], ecx
jg 0x46dad2
mov edi, ebp
call fcn.0042df10
test eax, eax
je 0x46dad2
mov ebx, 1
jmp 0x46db01
mov eax, dword [ebp + 0x14]
inc dword [ebp + 0xc]
mov ecx, dword [esp + 0x20]
lea edx, [ebx + ebx*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x4c]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax], 0x29
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov byte [ebp + 0x62], cl
mov ecx, dword [ebp + 0x14]
mov edi, dword [ebp]
mov dword [esp + 0x54], ebx
mov eax, ebx
test ecx, ecx
je 0x46db4f
cmp byte [edi + 0x1e], 0
jne 0x46db4f
test ebx, ebx
jge 0x46db1f
mov eax, dword [ebp + 0xc]
dec eax
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*4]
movsx eax, byte [ebx + 1]
mov ecx, dword [ebx + 0x10]
call fcn.0042e240
mov eax, dword [esp + 0x58]
xor ecx, ecx
mov dword [ebx + 0x10], ecx
cmp eax, ecx
jne 0x46db46
mov dword [ebx + 0x10], ecx
mov byte [ebx + 1], cl
jmp 0x46db5d
mov dword [ebx + 0x10], eax
mov byte [ebx + 1], 0xfa
jmp 0x46db5d
mov ecx, dword [esp + 0x58]
mov eax, 0xfffffff0
call fcn.0042e240
mov eax, dword [esi + 0x48]
inc eax
lea edi, [eax + 1]
mov ebx, eax
lea eax, [edi + 1]
mov dword [esp + 0x18], eax
mov dword [esi + 0x48], eax
mov eax, ebp
mov dword [esp + 0x20], ebx
mov dword [esp + 0x4c], edi
call fcn.0042e0f0
inc dword [esi + 0x48]
mov ecx, dword [esi + 0x48]
mov dword [esp + 0x60], eax
mov eax, ebp
mov dword [esp + 0x34], ecx
call fcn.0042e0f0
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x48], eax
mov eax, dword [esi + 0x48]
lea edx, [eax + 1]
mov dword [esp + 0xa0], edx
mov edx, dword [ecx]
add eax, edx
mov dword [esi + 0x48], eax
mov ecx, dword [ecx]
push edi
lea edx, [eax + 1]
add ecx, eax
push 0
push 7
mov eax, ebp
mov dword [esp + 0x74], edx
mov dword [esi + 0x48], ecx
call fcn.0042e090
push ebx
push 0
push 7
mov eax, ebp
call fcn.0042e090
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x4c]
push edx
push eax
push 2
mov eax, ebp
call fcn.0042e090
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x68]
push 0
lea ecx, [esp + 0x38]
push ecx
push edx
push eax
push esi
call fcn.00468e70
add esp, 0x38
mov dword [esp + 0x9c], eax
test eax, eax
je 0x46e817
mov edi, dword [esp + 0x10]
test edi, edi
jne 0x46dc31
mov ecx, dword [esp + 0xe8]
mov edx, dword [ecx + 0x10]
mov dword [esp + 0x10], edx
mov dword [esp + 0x40], edi
jmp 0x46ded8
cmp dword [esp + 0x14], 0
je 0x46dc4a
mov eax, dword [esp + 0xe8]
test byte [eax + 6], 1
mov eax, str.DISTINCT
je 0x46dc4f
mov eax, str.GROUP_BY
mov ecx, esi
call fcn.004381c0
mov ebx, dword [edi]
mov edx, dword [esp + 0x80]
mov dword [esp + 0x14], ebx
inc ebx
mov dword [esp + 0x40], 1
mov eax, ebx
mov dword [esp + 0x28], ebx
mov ecx, ebx
test edx, edx
jle 0x46dc92
mov edi, dword [esp + 0x7c]
add edi, 0xc
nop
cmp dword [edi], ecx
jl 0x46dc86
inc eax
inc ecx
add edi, 0x18
sub edx, 1
jne 0x46dc80
mov dword [esp + 0x28], eax
mov ecx, dword [esi + 0x38]
cmp eax, ecx
mov edi, dword [esi + 0x3c]
mov dword [esp + 0x2c], edi
jg 0x46dcad
lea edx, [edi + eax]
sub ecx, eax
mov dword [esi + 0x3c], edx
mov dword [esi + 0x38], ecx
jmp 0x46dcbc
mov ecx, dword [esi + 0x48]
lea edi, [ecx + 1]
add ecx, eax
mov dword [esp + 0x2c], edi
mov dword [esi + 0x48], ecx
mov edx, esi
call fcn.00426ec0
mov eax, dword [esp + 0x10]
push 0
push edi
push esi
call fcn.0042f830
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x7c]
add edi, eax
push edi
push ecx
push 0x35
mov eax, ebp
call fcn.0042e090
add esp, 0x18
cmp dword [esp + 0x80], 0
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], 0
jle 0x46dd62
mov edx, dword [esp + 0x2c]
mov eax, ebx
lea ebx, [edx + eax]
mov eax, dword [esp + 0x7c]
xor edi, edi
lea ecx, [ecx]
mov ecx, dword [esp + 0x14]
cmp dword [edi + eax + 0xc], ecx
jl 0x46dd4d
mov edx, dword [edi + eax + 4]
mov ecx, dword [edi + eax + 8]
push ebx
push edx
mov edx, dword [edi + eax]
push ecx
push edx
push esi
call fcn.0044cbe0
add esp, 0x14
cmp ebx, eax
je 0x46dd44
push ebx
push eax
push 0xf
mov eax, ebp
call fcn.0042e090
add esp, 0xc
inc dword [esp + 0x14]
mov eax, dword [esp + 0x7c]
inc ebx
mov ecx, dword [esp + 0x1c]
inc ecx
add edi, 0x18
cmp ecx, dword [esp + 0x80]
mov dword [esp + 0x1c], ecx
jl 0x46dd10
mov al, byte [esi + 0x15]
test al, al
jne 0x46dd71
inc dword [esi + 0x48]
mov ebx, dword [esi + 0x48]
jmp 0x46dd7d
dec al
mov byte [esi + 0x15], al
movzx eax, al
mov ebx, dword [esi + eax*4 + 0x18]
mov eax, dword [ebp + 0xc]
cmp dword [ebp + 0x10], eax
mov dword [esp + 0x14], eax
jg 0x46dd98
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46ddcb
mov eax, dword [esp + 0x14]
mov edx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov byte [eax], 0x1e
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], 0
mov byte [eax + 1], 0
mov byte [ebp + 0x62], 0
mov eax, dword [esp + 0x70]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 0xc]
cmp dword [ebp + 0x10], eax
mov dword [esp + 0x14], eax
jg 0x46ddee
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46de19
mov eax, dword [esp + 0x14]
mov edx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax], 0x46
mov byte [eax + 3], 0
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov byte [ebp + 0x62], cl
test ebx, ebx
je 0x46de4c
mov dl, byte [esi + 0x15]
cmp dl, 8
jae 0x46de4c
xor eax, eax
lea ecx, [esi + 0x60]
lea ebx, [ebx]
cmp dword [ecx + 0x10], ebx
je 0x46df6a
inc eax
add ecx, 0x18
cmp eax, 0xa
jl 0x46de30
movzx edx, dl
mov dword [esi + edx*4 + 0x18], ebx
inc byte [esi + 0x15]
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x28]
push eax
mov eax, edi
mov ebx, esi
call fcn.00426e20
add esp, 4
cmp edi, dword [ebx + 0x38]
jle 0x46de70
mov ecx, dword [esp + 0x2c]
mov dword [ebx + 0x38], edi
mov dword [ebx + 0x3c], ecx
mov edx, dword [esp + 0x9c]
push edx
call fcn.00431a50
mov esi, dword [ebp + 0xc]
mov eax, dword [esp + 0x74]
add esp, 4
cmp dword [ebp + 0x10], esi
mov dword [esp + 0x28], eax
jg 0x46de9b
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46deca
mov edx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x38]
mov dword [eax + 4], ecx
xor ecx, ecx
mov byte [eax], 0x40
mov byte [eax + 3], 0
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov byte [eax + 1], cl
mov byte [ebp + 0x62], cl
mov edx, ebx
mov byte [esp + 0x6d], 1
call fcn.00426ec0
mov esi, edx
mov eax, dword [ebp + 0xc]
mov edx, esi
mov dword [esp + 0x5c], eax
call fcn.00426ec0
mov ecx, dword [esp + 0x10]
cmp dword [ecx], 0
mov dword [esp + 0x14], 0
jle 0x46dfda
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x28], 0
cmp dword [esp + 0x40], 0
je 0x46df73
mov eax, dword [ebp + 0xc]
cmp dword [ebp + 0x10], eax
mov edx, dword [esp + 0x70]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x2c], eax
jg 0x46df35
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46dfbf
mov eax, dword [esp + 0x2c]
mov ecx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
mov edx, dword [esp + 0x1c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x14]
mov byte [eax], 0x1c
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], 0
mov byte [eax + 1], 0
mov byte [ebp + 0x62], 0
jmp 0x46dfbf
mov byte [ecx + 8], 1
jmp 0x46de4c
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov byte [esp + 0x6c], 1
mov eax, dword [edx + 0xc]
mov eax, dword [ecx + eax]
test eax, eax
je 0x46df9b
cmp byte [eax], 0x84
jne 0x46df9b
mov edx, dword [eax + 0x18]
mov eax, dword [esi + 0xc]
push ebx
push edx
push 0xe
jmp 0x46dfb7
push ebx
push eax
push esi
call fcn.00460bb0
add esp, 0xc
cmp eax, ebx
je 0x46dfbf
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x46dfbf
push ebx
push eax
push 0xf
mov eax, ecx
call fcn.0042e090
add esp, 0xc
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
add dword [esp + 0x28], 0x14
inc eax
inc ebx
cmp eax, dword [ecx]
mov dword [esp + 0x14], eax
jl 0x46df07
mov esi, dword [ebp + 0xc]
cmp dword [ebp + 0x10], esi
mov edx, dword [esp + 0x10]
mov ebx, dword [edx]
jg 0x46dffc
mov edi, ebp
call fcn.0042df10
test eax, eax
je 0x46dffc
mov eax, 1
xor ebx, ebx
jmp 0x46e030
mov ecx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
mov edx, dword [esp + 0xa0]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x68]
mov dword [eax + 0xc], ebx
xor ebx, ebx
mov byte [eax], 0x18
mov byte [eax + 3], 0
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
mov eax, esi
mov edx, dword [esp + 0x58]
push edx
push ebp
mov ecx, 0xfffffffa
call fcn.0042e380
mov esi, dword [ebp + 0xc]
add esp, 8
cmp dword [ebp + 0x10], esi
mov dword [esp + 0x58], esi
jg 0x46e05a
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e084
mov ecx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
lea ecx, [esi + 1]
mov byte [eax], 0x19
mov byte [eax + 3], 0
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], 0
mov byte [ebp + 0x62], 0
mov edx, dword [esp + 0x10]
mov eax, dword [edx]
mov ebx, dword [esp + 0xa0]
mov esi, dword [esp + 0x68]
mov edi, dword [esp + 0xe4]
push eax
call fcn.0042f480
mov esi, dword [ebp + 0xc]
add esp, 4
cmp dword [ebp + 0x10], esi
jg 0x46e0b8
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e0e8
mov edx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x60]
xor ebx, ebx
mov byte [eax], 2
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
jmp 0x46e0ea
xor ebx, ebx
mov esi, dword [ebp + 0xc]
cmp dword [ebp + 0x10], esi
jg 0x46e0fd
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e129
mov ecx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
mov edx, dword [esp + 0x4c]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x38]
mov byte [eax], 0x71
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
mov esi, dword [ebp + 0xc]
cmp dword [ebp + 0x10], esi
jg 0x46e13c
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e168
mov eax, dword [ebp + 0x14]
inc dword [ebp + 0xc]
mov ecx, dword [esp + 0x34]
lea edx, [esi + esi*4]
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x48]
mov byte [eax], 2
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
mov eax, dword [ebp + 0xc]
mov ecx, dword [esp + 0x58]
cmp eax, ecx
jle 0x46e17d
mov edx, dword [ebp + 0x14]
lea ecx, [ecx + ecx*4]
mov dword [edx + ecx*4 + 8], eax
mov ecx, dword [esp + 0xe4]
lea eax, [esp + 0x6c]
push eax
push ecx
call fcn.004495d0
mov esi, dword [ebp + 0xc]
add esp, 8
cmp dword [ebp + 0x10], esi
jg 0x46e1a5
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e1d2
mov eax, dword [ebp + 0x14]
mov ecx, 1
add dword [ebp + 0xc], ecx
lea edx, [esi + esi*4]
lea eax, [eax + edx*4]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x20]
mov byte [eax], 7
mov byte [eax + 3], bl
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
cmp dword [esp + 0x40], ebx
je 0x46e221
mov esi, dword [ebp + 0xc]
cmp dword [ebp + 0x10], esi
mov edx, dword [esp + 0x70]
mov dword [esp + 0x54], edx
jg 0x46e1f3
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e263
mov ecx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
mov edx, dword [esp + 0x54]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x5c]
mov byte [eax], 0x43
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
jmp 0x46e263
mov edx, dword [esp + 0x9c]
push edx
call fcn.00431a50
mov esi, dword [ebp + 0x14]
add esp, 4
cmp esi, ebx
je 0x46e263
mov eax, dword [esp + 0x54]
mov edi, dword [ebp]
lea eax, [eax + eax*4]
mov ecx, dword [esi + eax*4 + 0x10]
lea esi, [esi + eax*4]
movsx eax, byte [esi + 1]
call fcn.0042e240
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov byte [esi], 0x89
mov esi, dword [ebp + 0xc]
cmp dword [ebp + 0x10], esi
jg 0x46e276
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e2a2
mov edx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x60]
mov byte [eax], 2
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
mov esi, dword [ebp + 0xc]
cmp dword [ebp + 0x10], esi
jg 0x46e2b5
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e2dd
mov ecx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
mov edx, dword [esp + 0x38]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
mov byte [eax], 1
mov byte [eax + 3], bl
mov dword [eax + 4], ebx
mov dword [eax + 8], edx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
mov esi, dword [ebp + 0xc]
cmp dword [ebp + 0x10], esi
mov dword [esp + 0x54], esi
jg 0x46e2f4
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e321
mov edx, dword [ebp + 0x14]
mov ecx, 1
add dword [ebp + 0xc], ecx
lea eax, [esi + esi*4]
lea eax, [edx + eax*4]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x4c]
mov byte [eax], 7
mov byte [eax + 3], bl
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
mov esi, dword [ebp + 0xc]
cmp dword [ebp + 0x10], esi
jg 0x46e334
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e35c
mov eax, dword [ebp + 0x14]
inc dword [ebp + 0xc]
mov ecx, dword [esp + 0x18]
lea edx, [esi + esi*4]
lea eax, [eax + edx*4]
mov byte [eax], 3
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
mov eax, dword [ebp + 0x20]
cmp eax, ebx
je 0x46e375
mov edx, dword [esp + 0x60]
lea ecx, [edx*4 + 4]
mov edx, dword [ebp + 0xc]
sub eax, ecx
mov dword [eax], edx
mov esi, dword [ebp + 0xc]
cmp dword [ebp + 0x10], esi
jg 0x46e388
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e3b3
mov ecx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
mov edx, dword [esp + 0x20]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
lea ecx, [esi + 2]
mov byte [eax], 0x71
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
mov eax, dword [ebp + 0xc]
cmp dword [ebp + 0x10], eax
mov dword [esp + 0x5c], eax
jg 0x46e3ce
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e3f6
mov eax, dword [esp + 0x5c]
inc dword [ebp + 0xc]
mov ecx, dword [esp + 0x18]
lea edx, [eax + eax*4]
mov eax, dword [ebp + 0x14]
lea eax, [eax + edx*4]
mov byte [eax], 3
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
mov eax, dword [esp + 0xe4]
lea edx, [esp + 0x6c]
push edx
call fcn.004391f0
mov eax, dword [esp + 0x68]
push 8
lea edi, [esi + 1]
mov esi, dword [esp + 0xec]
push edi
push eax
push esi
call fcn.0045e950
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x100]
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x3c]
push edi
push edx
push eax
mov eax, dword [esp + 0x10c]
mov edx, dword [eax]
push ecx
push ebx
push ebx
push edx
push eax
push esi
call fcn.00437d00
mov esi, dword [ebp + 0xc]
add esp, 0x3c
cmp dword [ebp + 0x10], esi
jg 0x46e460
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e488
mov ecx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
mov edx, dword [esp + 0x18]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*4]
mov byte [eax], 3
mov byte [eax + 3], bl
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
mov eax, dword [ebp + 0x20]
cmp eax, ebx
je 0x46e4a1
mov ecx, dword [esp + 0x48]
lea edx, [ecx*4 + 4]
mov ecx, dword [ebp + 0xc]
sub eax, edx
mov dword [eax], ecx
mov eax, dword [esp + 0xe4]
lea edx, [esp + 0x6c]
push edx
push eax
call fcn.004493c0
mov esi, dword [ebp + 0xc]
add esp, 8
cmp dword [ebp + 0x10], esi
jg 0x46e4cf
mov edi, ebp
call fcn.0042df10
test eax, eax
jne 0x46e785
xor ebx, ebx
mov edx, dword [ebp + 0x14]
inc dword [ebp + 0xc]
lea ecx, [esi + esi*4]
lea eax, [edx + ecx*4]
mov ecx, dword [esp + 0x34]
mov byte [eax], 3
mov byte [eax + 3], bl
mov dword [eax + 4], ecx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov byte [eax + 1], bl
mov byte [ebp + 0x62], bl
jmp 0x46e785
mov eax, dword [esp + 0xe8]
lea edx, [esp + 0x6c]
push edx
mov dword [esp + 0x4c], 0
call fcn.00428570
mov edi, eax
add esp, 4
test edi, edi
je 0x46e64a
mov ebx, dword [esp + 0xe4]
mov esi, dword [edi + 0x44]
mov ecx, dword [ebx]
call fcn.00427fe0
mov ecx, dword [ebx + 0x44]
mov dword [esp + 0x4c], ecx
inc ecx
mov dword [ebx + 0x44], ecx
mov ecx, dword [edi + 0x14]
mov dword [esp + 0x20], eax
mov ebx, eax
mov eax, dword [esp + 0xe4]
xor esi, esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x5c], ecx
call fcn.0045c710
mov edx, dword [edi]
mov eax, dword [edi + 0x14]
push edx
push esi
push eax
mov eax, dword [esp + 0xf0]
mov ecx, ebx
push ecx
call fcn.0042fcf0
mov eax, dword [edi + 0x10]
add esp, 0x10
test eax, eax
je 0x46e5bb
mov edi, edi
test esi, esi
je 0x46e58c
mov edx, dword [eax + 4]
cmp edx, dword [esi + 4]
jge 0x46e58e
mov esi, eax
mov eax, dword [eax + 0x20]
test eax, eax
jne 0x46e580
test esi, esi
je 0x46e5bb
mov eax, dword [esi + 4]
cmp eax, dword [edi + 8]
jge 0x46e5bb
mov ecx, dword [esp + 0xe4]
mov edi, dword [esi + 0x14]
push esi
push ecx
call fcn.00445c40
add esp, 8
mov dword [esp + 0x18], eax
jmp 0x46e5bf
mov edi, dword [esp + 0x5c]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x4c]
push edx
push edi
push eax
push 0x26
mov eax, ebp
call fcn.0042df90
add esp, 0x10
cmp dword [esp + 0x18], 0
je 0x46e61f
mov ecx, dword [ebp + 0x14]
mov edi, dword [ebp]
test ecx, ecx
je 0x46e611
cmp byte [edi + 0x1e], 0
jne 0x46e611
mov eax, dword [ebp + 0xc]
dec eax
lea edx, [eax + eax*4]
movsx eax, byte [ecx + edx*4 + 1]
lea ebx, [ecx + edx*4]
mov ecx, dword [ebx + 0x10]
call fcn.0042e240
mov eax, dword [esp + 0x18]
mov dword [ebx + 0x10], eax
mov byte [ebx + 1], 0xfa
jmp 0x46e61f
mov ecx, dword [esp + 0x18]
mov eax, 0xfffffff0
call fcn.0042e240
mov ecx, dword [esp + 0x8c]
mov edx, dword [ecx + 8]
mov esi, dword [esp + 0x4c]
push edx
push esi
push 0x1f
mov eax, ebp
call fcn.0042e090
push esi
push 0x2b
mov eax, ebp
call fcn.0042e040
add esp, 0x14
jmp 0x46e72d
mov edi, dword [esp + 0xe8]
mov eax, edi
mov dword [esp + 0x34], 0
call fcn.00428500
mov bl, al
test bl, bl
je 0x46e6a6
mov eax, dword [edi]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
mov edi, dword [esp + 0x30]
push 0
push eax
push edi
call fcn.0042f170
add esp, 0xc
mov dword [esp + 0x34], eax
mov dword [esp + 0x48], eax
test eax, eax
je 0x46e6a6
cmp byte [edi + 0x1e], 0
jne 0x46e6a6
mov edx, dword [eax + 0xc]
cmp bl, 1
setne cl
mov byte [edx + 0xc], cl
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
mov byte [ecx], 0x98
lea edx, [esp + 0x6c]
push edx
push esi
call fcn.004493c0
movzx ax, bl
movzx ecx, ax
mov eax, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0x40]
push edx
push eax
push ecx
push esi
call fcn.00468e70
mov edi, eax
add esp, 0x1c
test edi, edi
jne 0x46e6ed
mov edx, dword [esp + 0x48]
mov edi, dword [esp + 0x30]
push edx
call fcn.004269d0
add esp, 4
jmp 0x46e817
lea eax, [esp + 0x6c]
push eax
push esi
call fcn.004495d0
add esp, 8
cmp dword [esp + 0x34], 0
jne 0x46e718
test bl, bl
je 0x46e718
mov ecx, dword [edi + 0x14]
push ecx
push 0
push 1
mov eax, ebp
call fcn.0042e090
add esp, 0xc
push edi
call fcn.00431a50
lea edx, [esp + 0x70]
push edx
mov eax, esi
call fcn.004391f0
add esp, 8
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x64]
mov edi, dword [esp + 0xe4]
push 8
push esi
push eax
push edi
mov dword [esp + 0x34], 0
call fcn.0045e950
mov ecx, dword [esp + 0xfc]
mov eax, dword [esp + 0xf8]
mov edx, dword [eax]
push esi
push esi
push ecx
push 0xffffffffffffffff
push 0
push 0
push 0
push edx
push eax
push edi
call fcn.00437d00
mov eax, dword [esp + 0x80]
mov edi, dword [esp + 0x68]
push eax
call fcn.004269d0
add esp, 0x3c
mov eax, dword [ebp + 0x20]
test eax, eax
je 0x46e79e
mov ecx, dword [esp + 0x38]
lea edx, [ecx*4 + 4]
mov ecx, dword [ebp + 0xc]
sub eax, edx
mov dword [eax], ecx
cmp dword [esp + 0x3c], 0
mov esi, dword [esp + 0xe4]
jl 0x46e7b8
mov eax, str.DISTINCT
mov ecx, esi
call fcn.004381c0
cmp dword [esp + 0x24], 0
je 0x46e7ec
mov eax, str.ORDER_BY
mov ecx, esi
call fcn.004381c0
mov edx, dword [esp + 0xec]
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0xec]
push ecx
push ebp
push edx
push esi
call fcn.004383d0
add esp, 0x14
mov eax, dword [ebp + 0x20]
test eax, eax
je 0x46e808
mov ecx, dword [esp + 0xa4]
lea edx, [ecx*4 + 4]
mov ecx, dword [ebp + 0xc]
sub eax, edx
mov dword [eax], ecx
mov esi, dword [esp + 0xe4]
mov dword [esp + 0x28], 0
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x98]
mov dword [esi + 0x22c], edx
test edi, edi
jne 0x46e84b
mov eax, dword [esp + 0xec]
cmp byte [eax], 5
jne 0x46e84b
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x44]
push ecx
push edx
push esi
call fcn.00440dc0
add esp, 0xc
mov eax, dword [esp + 0x7c]
mov esi, dword [esp + 0x30]
push eax
push esi
call fcn.00420620
mov ecx, dword [esp + 0x94]
push ecx
push esi
call fcn.00420620
add esp, 0x10
pop ebp
mov eax, edi
pop edi
pop esi
pop ebx
add esp, 0xd0
ret