Function at 0x5218a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xe4
push ebx
mov ebx, dword [esp + 0xec]
push ebp
push edi
mov dword [esp + 0x64], 1
mov edi, dword [ebx + 8]
mov eax, dword [ebx]
mov dword [esp + 0x98], 0
mov dword [esp + 0x28], eax
mov dword [esp + 0x68], edi
test edi, edi
jne 0x5218f2
cmp dword [ebx + 0x7c], edi
jne 0x5218e3
test byte [eax + 0x50], 8
jne 0x5218e3
mov byte [ebx + 0x17], 1
push ebx
call fcn.0052ba20
add esp, 4
mov dword [esp + 0x68], eax
mov edi, eax
mov ebp, dword [esp + 0xf8]
test ebp, ebp
je 0x52493f
cmp dword [ebx + 0x24], 0
jne 0x52493f
push 0
push 0
push 0
push 0x15
push ebx
call fcn.004f9a50
add esp, 0x14
test eax, eax
jne 0x52493f
mov eax, dword [esp + 0xfc]
cmp byte [eax], 6
ja 0x52195b
mov eax, dword [ebp + 0x30]
test eax, eax
je 0x52194d
push eax
push 0x509db0
push ebx
call fcn.00519100
add esp, 0xc
mov dword [ebp + 0x30], 0
mov eax, dword [ebp + 4]
and eax, 0xfffffffe
or eax, 0x400000
mov dword [ebp + 4], eax
push esi
push 0
push ebp
push ebx
call fcn.00524d50
add esp, 0xc
cmp dword [ebx + 0x24], 0
jne 0x5219a8
mov esi, dword [ebp + 4]
test esi, 0x800000
je 0x5219dd
mov eax, dword [ebp + 0x20]
push eax
lea ebp, [eax + 8]
push ebp
call fcn.004f3b30
add esp, 8
test eax, eax
je 0x5219cd
mov eax, dword [ebp + 0xc]
test eax, eax
jne 0x521999
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
push eax
push str.target_object_alias_may_not_appear_in_FROM_clause:__s
push ebx
call fcn.00505000
add esp, 0xc
mov ecx, dword [ebx + 0xe4]
test ecx, ecx
jne 0x5248f6
pop esi
pop edi
xor eax, eax
mov dword [ebx + 0xe4], eax
mov eax, dword [esp + 0x60]
pop ebp
pop ebx
add esp, 0xe4
ret
mov ebp, dword [esp + 0xfc]
and esi, 0xff7fffff
mov dword [ebp + 4], esi
mov eax, dword [esp + 0x100]
cmp byte [eax], 9
jne 0x5219f3
push ebp
push ebx
call fcn.0050e360
add esp, 8
push ebp
push ebx
call fcn.00541980
add esp, 8
test eax, eax
jne 0x5219a8
mov eax, dword [ebp + 4]
xorps xmm0, xmm0
mov esi, dword [ebp + 0x20]
shr eax, 3
and eax, 1
movq qword [esp + 0xe8], xmm0
mov dword [esp + 0x44], eax
mov eax, dword [ebp + 0x30]
xor ebp, ebp
movups xmmword [esp + 0xc8], xmm0
mov dword [esp + 0x20], eax
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xfc]
movups xmmword [esp + 0xd8], xmm0
cmp dword [eax + 0x34], ebp
jne 0x521d88
nop dword [eax]
cmp ebp, dword [esi]
jge 0x521dd9
lea eax, [ebp*8]
add eax, ebp
mov edx, dword [esi + eax*8 + 0x18]
lea ecx, [esi + eax*8]
mov eax, dword [ecx + 0x1c]
mov dword [esp + 0x50], eax
mov al, byte [ecx + 0x2c]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x38], edx
test al, 0x48
je 0x521b50
movzx eax, al
and eax, 0x40
push eax
mov eax, dword [esp + 0x100]
push dword [ecx + 0x34]
push dword [eax + 0x24]
call fcn.005096c0
mov ecx, dword [esp + 0x3c]
add esp, 0xc
test eax, eax
je 0x521b4c
mov eax, dword [esp + 0x2c]
test dword [eax + 0x50], 0x2000
jne 0x521b4c
mov al, byte [ecx + 0x2c]
test al, 8
je 0x521acf
test al, 0x10
je 0x521aca
and al, 0xf7
jmp 0x521acc
and al, 0xd7
mov byte [ecx + 0x2c], al
test al, 0x40
je 0x521b27
mov eax, dword [esi]
lea edx, [ebp + 1]
cmp edx, eax
jge 0x521b04
lea eax, [edx + edx*8]
lea ecx, [eax*8 + 0x2c]
add ecx, esi
mov al, byte [ecx]
test al, 0x10
je 0x521afa
test al, 8
je 0x521af6
and al, 0xef
jmp 0x521af8
and al, 0xcf
mov byte [ecx], al
mov eax, dword [esi]
inc edx
add ecx, 0x48
cmp edx, eax
jl 0x521ae8
lea edx, [eax - 1]
cmp edx, ebp
jl 0x521b27
lea eax, [edx + edx*8]
lea ecx, [eax*8 + 0x2c]
add ecx, esi
and byte [ecx], 0xbf
test byte [ecx], 0x10
jne 0x521b27
dec edx
sub ecx, 0x48
cmp edx, ebp
jge 0x521b17
movzx eax, byte [esi + 0x2c]
and eax, 0x40
push eax
mov eax, dword [esp + 0x34]
push dword [eax + 0x34]
mov eax, dword [esp + 0x104]
push dword [eax + 0x24]
call fcn.00544130
mov ecx, dword [esp + 0x3c]
add esp, 0xc
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x50]
test eax, eax
je 0x521d76
mov eax, dword [eax + 0x1c]
movsx edx, word [edx + 0x22]
mov eax, dword [eax]
cmp edx, eax
jne 0x521dbe
test dword [ecx + 0x30], 0x100
je 0x521b83
mov eax, dword [ecx + 0x4c]
cmp byte [eax + 0x12], 0
je 0x521d76
mov edx, dword [esp + 0x50]
mov eax, dword [edx + 4]
test al, 8
jne 0x521d76
mov ecx, dword [edx + 0x30]
mov dword [esp + 0x14], ecx
test ecx, ecx
je 0x521d1b
mov ecx, dword [esp + 0xfc]
cmp dword [ecx + 0x30], 0
jne 0x521bb7
cmp dword [esi], 1
jle 0x521d03
cmp dword [edx + 0x3c], 0
jne 0x521d03
test eax, 0x8000000
jne 0x521d03
test dword [ecx + 4], 0x8000000
jne 0x521d03
mov eax, dword [esp + 0x2c]
test dword [eax + 0x50], 0x40000
jne 0x521d03
mov ecx, dword [ebx]
test ecx, ecx
je 0x521cac
mov eax, 0xc
cmp ax, word [ecx + 0x134]
jbe 0x521c2f
cmp dword [ecx + 0x130], 0
jne 0x521c22
inc dword [ecx + 0x144]
push 0
push eax
push ecx
call fcn.004d1f80
add esp, 0xc
jmp 0x521cb8
cmp byte [ecx + 0x57], 0
je 0x521c9d
xor edx, edx
jmp 0x521cba
mov edx, dword [ecx + 0x158]
test edx, edx
je 0x521c49
mov eax, dword [edx]
mov dword [ecx + 0x158], eax
inc dword [ecx + 0x140]
jmp 0x521cba
mov edx, dword [ecx + 0x154]
test edx, edx
je 0x521c63
mov eax, dword [edx]
mov dword [ecx + 0x154], eax
inc dword [ecx + 0x140]
jmp 0x521cba
mov edx, dword [ecx + 0x150]
test edx, edx
je 0x521c7d
mov eax, dword [edx]
mov dword [ecx + 0x150], eax
inc dword [ecx + 0x140]
jmp 0x521cba
mov edx, dword [ecx + 0x14c]
test edx, edx
je 0x521c97
mov eax, dword [edx]
inc dword [ecx + 0x140]
mov dword [ecx + 0x14c], eax
jmp 0x521cba
inc dword [ecx + 0x148]
push 0
push 0xc
push ecx
call fcn.004d1f80
add esp, 0xc
jmp 0x521cb8
push 0
push 0xc
call fcn.00515c10
add esp, 8
mov edx, eax
test edx, edx
je 0x521ce7
mov eax, dword [ebx + 0x88]
mov dword [edx], eax
mov eax, dword [esp + 0x14]
mov dword [ebx + 0x88], edx
mov dword [edx + 4], eax
mov eax, dword [esp + 0x50]
mov dword [edx + 8], 0x509db0
mov dword [eax + 0x30], 0
jmp 0x521d1b
mov eax, dword [esp + 0x14]
push eax
push dword [ebx]
call fcn.004d6580
mov eax, dword [esp + 0x58]
add esp, 8
mov dword [eax + 0x30], 0
jmp 0x521d1b
test ebp, ebp
jne 0x521d1b
test dword [ecx + 4], 0x40000
je 0x521d1b
cmp dword [esi], 1
je 0x521d7d
test byte [esi + 0x74], 0x22
jne 0x521d7d
push dword [esp + 0x44]
mov esi, dword [esp + 0x100]
push ebp
push esi
push ebx
call fcn.004da2a0
add esp, 0x10
test eax, eax
je 0x521d42
cmp dword [ebx + 0x24], 0
jne 0x5219a8
or ebp, 0xffffffff
mov eax, dword [esp + 0x2c]
mov esi, dword [esi + 0x20]
cmp byte [eax + 0x57], 0
jne 0x5219a8
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0xfc]
cmp byte [eax], 8
jbe 0x521d7d
mov edx, dword [ecx + 0x30]
mov dword [esp + 0x20], edx
mov dword [esp + 0xc8], edx
jmp 0x521d7d
mov ecx, dword [esp + 0xfc]
inc ebp
cmp dword [ecx + 0x34], 0
je 0x521a50
push dword [esp + 0x100]
mov ebp, dword [esp + 0x100]
push ebp
push ebx
call fcn.004e6300
add esp, 0xc
mov esi, eax
cmp dword [ebp + 0x38], 0
jne 0x521db1
push ebx
call fcn.00534f30
add esp, 4
mov eax, esi
pop esi
pop edi
pop ebp
pop ebx
add esp, 0xe4
ret
push eax
mov eax, dword [esp + 0x3c]
push dword [eax]
push edx
push str.expected__d_columns_for__s_but_got__d
push ebx
call fcn.00505000
add esp, 0x14
jmp 0x5219a8
mov ebp, dword [esp + 0xfc]
add ebp, 0x24
mov dword [esp + 0x10], esi
mov dword [esp + 0x4c], ebp
mov eax, dword [ebp]
test eax, eax
je 0x521ff2
cmp byte [eax], 0x2c
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x10], esi
jne 0x521ff2
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x10], esi
test dword [eax + 0x50], 0x8000
jne 0x521ff2
mov eax, dword [ebx]
add eax, 0x57
mov dword [esp + 0x10], esi
mov esi, dword [esp + 0xfc]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], eax
nop dword [eax + eax]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x8c], 0
test eax, eax
je 0x521e89
cmp dword [eax], 0
jle 0x521e89
test byte [eax + 0x2c], 0x40
mov dword [esp + 0x90], 3
jne 0x521e94
mov dword [esp + 0x90], 1
push dword [ebp]
lea eax, [esp + 0x80]
push eax
call fcn.004d7880
add esp, 8
cmp dword [esp + 0x84], 0
je 0x521fdb
lea eax, [esp + 0x7c]
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], eax
mov eax, dword [ebp]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], 0x4ee1a0
mov dword [esp + 0xa8], fcn.00482500
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
test eax, eax
je 0x521f16
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.00539e50
add esp, 8
mov eax, dword [esp + 0x7c]
mov esi, dword [esp + 0x94]
mov ecx, dword [eax]
test esi, esi
je 0x521fd4
test ecx, ecx
je 0x521f7f
cmp esi, dword [ecx + 0x164]
jae 0x521f6a
cmp esi, dword [ecx + 0x15c]
jb 0x521f52
mov eax, dword [ecx + 0x158]
mov dword [esi], eax
mov dword [ecx + 0x158], esi
jmp 0x521fd4
cmp esi, dword [ecx + 0x160]
jb 0x521f6a
mov eax, dword [ecx + 0x150]
mov dword [esi], eax
mov dword [ecx + 0x150], esi
jmp 0x521fd4
cmp dword [ecx + 0x210], 0
je 0x521f7f
push esi
push ecx
call fcn.004e5ae0
add esp, 8
jmp 0x521fd4
cmp dword [0x78d018], 0
je 0x521fca
mov eax, dword [0x7935d8]
test eax, eax
je 0x521f9b
push eax
call dword [0x78d068]
add esp, 4
push esi
call dword [0x78d044]
sub dword [0x793570], eax
dec dword [0x793594]
push esi
call dword [0x78d03c]
mov eax, dword [0x7935d8]
add esp, 8
test eax, eax
je 0x521fd4
push eax
call dword [0x78d070]
jmp 0x521fd1
push esi
call dword [0x78d03c]
add esp, 4
mov esi, dword [esp + 0xfc]
cmp dword [esp + 0x88], 0
jne 0x521e40
lea eax, [esi + 0x24]
mov dword [esp + 0x4c], eax
jmp 0x521ff9
mov esi, dword [esp + 0xfc]
mov ebp, dword [esp + 0x2c]
test dword [ebp + 0x50], 0x201
jne 0x522027
push esi
push ebx
call fcn.004d1690
add esp, 8
test eax, eax
je 0x522027
cmp byte [ebp + 0x57], 0
jne 0x5219a8
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x10], ecx
jmp 0x52202b
mov ecx, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x18], eax
cmp dword [ecx], eax
jle 0x5228b0
nop dword [eax]
lea eax, [eax + eax*8]
lea eax, [eax + 1]
lea esi, [ecx + eax*8]
mov eax, dword [esi + 0x38]
or eax, dword [esi + 0x3c]
jne 0x522070
mov eax, dword [esi + 8]
test eax, eax
je 0x522070
push dword [esi + 4]
push 0x774272
push eax
push 0x14
push ebx
call fcn.004f9a50
mov ecx, dword [esp + 0x24]
add esp, 0x14
mov ebp, dword [esi + 0x14]
mov dword [esp + 0x34], ebp
test ebp, ebp
je 0x522893
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
push eax
push dword [esp + 0x100]
call fcn.004ddcc0
mov ecx, dword [esp + 0x34]
add esp, 8
mov eax, dword [esp + 0x14]
add dword [ebx + 0xe0], eax
test dword [ecx + 0x50], 0x1000
jne 0x5220e6
test dword [esi + 0x28], 0x100
je 0x5220c9
mov eax, dword [esi + 0x44]
cmp byte [eax + 0x12], 0
je 0x5220e6
cmp dword [eax], 2
jge 0x5220e6
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x4c]
push ecx
push dword [esp + 0x14]
push dword [eax]
push ebp
push ebx
call fcn.004ee5b0
mov ecx, dword [esp + 0x40]
add esp, 0x14
test dword [ecx + 0x50], 0x4000000
jne 0x522230
test dword [esi + 0x28], 0x108
jne 0x522230
mov edx, dword [esi + 0x14]
mov dword [esp + 0x5c], edx
test byte [edx + 4], 9
jne 0x522230
mov eax, edx
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x522123
cmp byte [eax], 0x87
jne 0x522230
cmp dword [eax + 0x44], 0
jne 0x522230
mov eax, ecx
test eax, eax
jne 0x522113
mov ebp, dword [edx + 0x30]
mov eax, dword [esi + 0x38]
mov ecx, dword [esi + 0x3c]
mov dword [esp + 0x30], eax
mov dword [esp + 0x50], ecx
test ebp, ebp
je 0x5221a3
mov ecx, dword [ebp]
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x5221a3
add ebp, 0x18
movzx eax, word [ebp]
test ax, ax
je 0x522193
add eax, 0xffff
mov edx, 0x3f
cmp ax, 0x40
jae 0x522172
movzx edx, ax
xor eax, eax
xor ecx, ecx
bts eax, edx
cmp edx, 0x20
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
cmovae ecx, eax
or dword [esp + 0x30], eax
or dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x14]
add ebp, 0x14
sub ecx, 1
mov dword [esp + 0x14], ecx
jne 0x522156
mov eax, dword [esp + 0x30]
mov ecx, dword [esi + 0x10]
movsx ecx, word [ecx + 0x22]
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x522230
mov edi, dword [esp + 0x5c]
xor ebp, ebp
mov ebx, ebp
nop word [eax + eax]
xor ecx, ecx
cmp ebx, 0x3f
jae 0x5221e2
mov eax, ebx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
mov eax, dword [esp + 0x30]
cmovae edx, ecx
jmp 0x5221e7
mov edx, bind
and edx, dword [esp + 0x50]
and ecx, eax
or ecx, edx
jne 0x52221b
mov eax, edi
mov ecx, dword [eax + 0x1c]
mov ecx, dword [ecx + ebp + 8]
cmp byte [ecx], 0x79
je 0x522210
and dword [ecx + 4], 0xfff7dfff
mov byte [ecx], 0x79
or dword [eax + 4], 0x1000000
mov eax, dword [eax + 0x34]
test eax, eax
jne 0x5221f3
mov eax, dword [esp + 0x30]
inc ebx
add ebp, 0x14
cmp ebx, dword [esp + 0x14]
jl 0x5221c0
mov edi, dword [esp + 0x6c]
mov ebx, dword [esp + 0xf8]
mov eax, dword [ebx + 0x100]
mov edx, dword [esp + 0x18]
mov ebp, edx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 8]
mov dword [ebx + 0x100], eax
lea eax, [edx + edx*8]
lea ecx, [ecx + eax*8]
add ecx, 8
mov dword [esp + 0x24], ecx
test dword [ecx + 0x28], 0x100
je 0x522283
mov eax, dword [ecx + 0x44]
mov dl, byte [eax + 0x12]
test dl, dl
je 0x52248c
cmp dword [eax], 2
jl 0x52227f
cmp dl, 2
jne 0x52248c
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
test byte [eax + 0x2c], 0x40
jne 0x522495
mov eax, dword [ebx]
test dword [eax + 0x50], 0x2000000
mov eax, dword [esp + 0x10]
jne 0x522495
push dword [eax]
lea eax, [edx + 1]
push eax
push ecx
push dword [esp + 0x1c]
call fcn.004df850
mov ecx, dword [esp + 0x28]
add esp, 0x10
test eax, eax
jne 0x522343
test ecx, ecx
jne 0x522313
mov eax, dword [esp + 0x10]
cmp dword [eax], 1
je 0x5222e6
test byte [eax + 0x74], 2
jne 0x5222e6
mov edx, dword [esp + 0xfc]
test dword [edx + 4], 0x10000000
jne 0x522343
mov ebp, dword [edi + 0x6c]
inc dword [ebx + 0x2c]
inc ebp
mov edx, dword [ebx + 0x2c]
mov dword [esi + 0x1c], edx
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x522389
push ebp
push 0
push edx
push 0xb
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x5223bb
mov edx, dword [esp + 0xfc]
test dword [edx + 4], 0x10000000
jne 0x522343
mov eax, dword [esp + 0x24]
add eax, 0x24
test byte [eax], 0x22
jne 0x522343
nop
test ebp, ebp
je 0x5222e6
sub eax, 0x48
dec ebp
cmp dword [eax - 0x10], 0
jne 0x522343
test byte [eax], 0x22
je 0x522330
mov eax, dword [esp + 0x10]
test dword [esi + 0x28], 0x100
je 0x522549
mov ebp, dword [esi + 0x44]
mov edx, dword [ebp + 4]
test edx, edx
jle 0x522549
mov ecx, dword [edi + 0x6c]
mov eax, dword [ebp + 8]
mov dword [esp + 0x24], eax
cmp dword [edi + 0x70], ecx
jg 0x52249e
push 0
push edx
push eax
push 0xa
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x5224d4
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], ebp
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x1c]
push esi
push str.CO_ROUTINE___S
push 1
push ebx
mov dword [esi + 0x18], ebp
mov byte [esp + 0x8c], 0xd
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
call fcn.00534ed0
mov ecx, dword [esp + 0x44]
lea eax, [esp + 0x8c]
push eax
push ecx
push ebx
call fcn.005218a0
mov eax, dword [esp + 0x50]
mov ecx, dword [esi + 0x10]
mov ax, word [eax + 2]
mov word [ecx + 0x26], ax
push dword [esi + 0x1c]
mov eax, dword [esp + 0xa8]
or dword [esi + 0x28], 0x20
push edi
mov dword [esi + 0x20], eax
call fcn.0052bfb0
mov eax, dword [edi]
add esp, 0x24
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x522468
mov eax, 0x7937b0
mov dword [eax], edx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
jmp 0x522848
mov eax, dword [edi + 0x68]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
add eax, 0xfffffff4
mov dword [eax], edx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
jmp 0x522848
mov ecx, dword [esp + 0x18]
jmp 0x522343
mov ecx, dword [esp + 0x18]
jmp 0x522347
mov ebx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 0xc]
mov esi, dword [esi + 0x2c]
cmp esi, edx
je 0x522538
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x522506
push 0
push edx
push esi
push 0x73
push edi
call fcn.004dd7e0
mov ecx, dword [esp + 0x48]
add esp, 0x14
mov ax, word [ebp + 0x10]
mov word [ecx + 2], ax
jmp 0x522848
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x34]
mov ax, word [ebp + 0x10]
mov word [ecx + 2], ax
jmp 0x522848
push ecx
push 0
push esi
push eax
call fcn.004df850
mov ebp, eax
add esp, 0x10
test ebp, ebp
je 0x522634
mov edx, dword [ebp + 0x18]
test edx, edx
je 0x5225bd
mov ecx, dword [edi + 0x6c]
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x24], eax
cmp dword [edi + 0x70], ecx
jg 0x522587
push 0
push edx
push eax
push 0xa
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x5225bd
mov ebx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 0x2c]
mov esi, dword [esi + 0x2c]
cmp dword [edi + 0x70], ecx
jg 0x5225ee
push 0
push edx
push esi
push 0x73
push edi
call fcn.004dd7e0
mov eax, dword [ebp + 0x14]
add esp, 0x14
mov ecx, dword [esp + 0x34]
mov ax, word [eax + 2]
mov word [ecx + 2], ax
jmp 0x522848
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x34]
mov ax, word [eax + 2]
mov word [ecx + 2], ax
jmp 0x522848
inc dword [ebx + 0x2c]
xor ebp, ebp
mov eax, dword [ebx + 0x2c]
mov dword [esi + 0x1c], eax
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x14], edx
cmp dword [edi + 0x70], edx
jg 0x522661
push ebp
push ebp
push ebp
push 9
push edi
call fcn.004dd7e0
mov edx, eax
add esp, 0x14
mov dword [esp + 0x14], edx
jmp 0x52268b
mov ebx, dword [esp + 0xf8]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], ebp
mov dword [eax + ecx*4 + 0x10], ebp
lea eax, [edx + 1]
mov dword [esi + 0x18], eax
mov eax, dword [esi + 0x28]
or eax, 0x10
mov dword [esi + 0x28], eax
test al, 8
jne 0x5226f4
mov ebp, dword [edi + 0x6c]
cmp dword [edi + 0x70], ebp
jg 0x5226bb
push 0
push 0
push 0
push 0xf
push edi
call fcn.004dd7e0
add esp, 0x14
mov ebp, eax
jmp 0x5226f4
lea eax, [ebp + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebp*4]
mov eax, dword [edi + 0x68]
add ecx, ebp
mov dword [eax + ecx*4], 0xf
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x2c]
push esi
push str.MATERIALIZE___S
push 1
push ebx
mov byte [esp + 0x8c], 0xc
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
call fcn.00534ed0
lea eax, [esp + 0x8c]
push eax
push dword [esp + 0x48]
push ebx
call fcn.005218a0
mov eax, dword [esp + 0x50]
add esp, 0x1c
mov ecx, dword [esi + 0x10]
mov ax, word [eax + 2]
mov word [ecx + 0x26], ax
test ebp, ebp
je 0x52278c
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x52277a
mov eax, 0x7937a8
jmp 0x522789
mov eax, dword [edi + 0x68]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ebp, dword [esp + 0x14]
mov ecx, dword [edi + 0x6c]
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x24], eax
lea edx, [ebp + 1]
cmp dword [edi + 0x70], ecx
jg 0x5227b3
push 0
push edx
push eax
push 0x43
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x5227e9
mov ebx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x5227fb
mov eax, 0x7937a8
jmp 0x52280a
mov eax, dword [edi + 0x68]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
mov eax, dword [esi + 0x28]
and eax, 0x108
cmp eax, 0x100
jne 0x522848
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x18]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0x1c]
mov dword [ecx + 8], eax
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x34]
mov ax, word [eax + 2]
mov word [ecx + 0x10], ax
mov ebp, dword [esp + 0x2c]
cmp byte [ebp + 0x57], 0
jne 0x5219a8
mov esi, dword [esp + 0xfc]
lea eax, [esp + 0x14]
push eax
push esi
mov dword [esp + 0x1c], 0
call fcn.004ddcc0
mov eax, dword [ebx + 0xe0]
add esp, 8
sub eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [ebx + 0xe0], eax
mov eax, dword [esp + 0x5c]
mov dword [ebx + 0x100], eax
jmp 0x52289a
mov esi, dword [esp + 0xfc]
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
cmp eax, dword [ecx]
jl 0x522040
lea eax, [esi + 0x24]
jmp 0x5228b4
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
mov cl, byte [esi + 4]
mov ebp, dword [esi + 0x1c]
and cl, 1
mov dword [esp + 0x3c], eax
mov eax, dword [esi + 0x28]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x50], eax
mov eax, dword [esi + 4]
and al, 9
mov dword [esp + 0x30], ebp
mov byte [esp + 0x2b], cl
mov byte [esp + 0xbc], cl
cmp al, 1
jne 0x52292b
push 0xffffffffffffffff
push ebp
push dword [esp + 0x28]
call fcn.00509d30
add esp, 0xc
test eax, eax
jne 0x52292b
cmp dword [esi + 0x44], eax
jne 0x52292b
and dword [esi + 4], 0xfffffffe
push eax
push ebp
push dword [esp + 0x34]
call fcn.00509dd0
mov dword [esp + 0x24], eax
add esp, 0xc
or dword [esi + 4], 8
mov dword [esi + 0x28], eax
mov al, 2
mov byte [esp + 0x2b], al
mov byte [esp + 0xbc], al
mov eax, dword [esp + 0x20]
test eax, eax
je 0x522978
push dword [ebp]
push 0
push eax
push ebx
call fcn.00514a50
mov edx, dword [ebx + 0x28]
mov ecx, eax
push 0xfffffffffffffff8
push ecx
push 0
lea eax, [edx + 1]
mov dword [esp + 0xec], edx
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov eax, dword [ebp]
inc ecx
add eax, ecx
push eax
push edx
push 0x76
push edi
call fcn.0052b4d0
add esp, 0x2c
mov dword [esp + 0xdc], eax
jmp 0x522983
mov dword [esp + 0xdc], 0xffffffff
mov eax, dword [esp + 0x100]
cmp byte [eax], 0xc
jne 0x522a3b
push dword [ebp]
push dword [eax + 4]
push 0x76
push edi
call fcn.0052b410
add esp, 0x10
test dword [esi + 4], 0x800
je 0x522a3b
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx]
lea esi, [eax - 1]
test esi, esi
jle 0x522a0f
mov ebx, dword [esp + 0x2c]
lea ebp, [esi + esi*4]
shl ebp, 2
test byte [ecx + ebp + 0x14], 0x40
jne 0x522a08
mov eax, dword [ecx + ebp + 8]
test eax, eax
je 0x5229e5
push eax
push ebx
call fcn.00508c00
mov ecx, dword [esp + 0x38]
add esp, 8
mov eax, dword [ecx + ebp + 0xc]
test eax, eax
je 0x5229fb
push eax
push ebx
call fcn.00502f20
mov ecx, dword [esp + 0x38]
add esp, 8
mov eax, dword [ecx]
dec esi
dec eax
sub ebp, 0x14
mov dword [ecx], eax
test esi, esi
jg 0x5229c8
mov ebx, dword [esp + 0xf8]
xor edx, edx
test eax, eax
jle 0x522a34
mov ebp, dword [esp + 0x30]
add ecx, 8
nop dword [eax]
test byte [ecx + 0xc], 0x40
jne 0x522a2b
mov eax, dword [ecx]
mov byte [eax], 0x79
inc edx
add ecx, 0x14
cmp edx, dword [ebp]
jl 0x522a20
mov esi, dword [esp + 0xfc]
dec dword [ebx + 0x38]
test dword [esi + 4], 0x4000
mov eax, dword [ebx + 0x38]
mov dword [esp + 0xf0], eax
jne 0x522a5a
mov ecx, 0x140
mov word [esi + 2], cx
cmp dword [esi + 0x3c], 0
je 0x522a6b
push eax
push esi
push ebx
call fcn.004cfaa0
add esp, 0xc
cmp dword [esi + 8], 0
jne 0x522a9f
mov ecx, dword [esp + 0xdc]
test ecx, ecx
js 0x522a9f
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x522a8b
mov eax, 0x7937a8
jmp 0x522a94
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
or byte [esp + 0xe8], 1
mov byte [eax], 0x77
test byte [esi + 4], 1
je 0x522b08
mov esi, dword [ebx + 0x28]
push 0xfffffffffffffff8
push 0
push 0
lea eax, [esi + 1]
mov dword [esp + 0xcc], esi
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x108]
push dword [eax + 0x1c]
push ebx
call fcn.00514a50
add esp, 0x10
push eax
push 0
push 0
push esi
push 0x76
push edi
call fcn.0052b4d0
mov dword [esp + 0xe0], eax
add esp, 0x1c
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x522afd
lea ecx, [eax + eax*4]
mov edx, 8
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov esi, dword [esp + 0xfc]
mov al, 3
jmp 0x522b0a
xor al, al
cmp dword [esp + 0x44], 0
mov ebp, dword [esp + 0x18]
mov byte [esp + 0xbd], al
mov dword [esp + 0x4c], eax
jne 0x522da8
test ebp, ebp
jne 0x522da8
mov cx, word [esi + 4]
mov eax, 0x4000
and cx, ax
mov edx, 0x100
xor eax, eax
cmp byte [esp + 0x2b], al
cmovne eax, edx
or cx, ax
movzx esi, cx
mov ecx, dword [esp + 0xfc]
mov ebp, dword [ecx + 0x44]
test ebp, ebp
je 0x522b6b
push ecx
push ebx
call fcn.0053f8f0
mov ecx, dword [esp + 0x104]
add esp, 8
movsx eax, word [ecx + 2]
push eax
push esi
push ecx
push dword [ecx + 0x1c]
push dword [esp + 0x30]
push dword [esp + 0x50]
push dword [esp + 0x28]
push ebx
call fcn.0053a1e0
mov esi, eax
add esp, 0x20
test esi, esi
je 0x5219a8
mov edx, dword [esp + 0xfc]
movzx eax, word [esi + 0x34]
cmp ax, word [edx + 2]
jge 0x522ba9
mov word [edx + 2], ax
cmp byte [esp + 0x2b], 0
je 0x522bd5
mov eax, dword [esp + 0x4c]
mov cl, byte [esi + 0x2f]
movzx eax, al
test cl, cl
mov dword [esp + 0x4c], eax
movzx eax, cl
mov ecx, dword [esp + 0x4c]
cmovne ecx, eax
mov dword [esp + 0x4c], ecx
mov byte [esp + 0xbd], cl
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x522c3f
mov al, byte [esi + 0x2d]
test al, al
jns 0x522be8
xor ecx, ecx
jmp 0x522beb
movsx ecx, al
test byte [esi + 0x30], 4
mov dword [esp + 0xcc], ecx
jne 0x522bfd
mov eax, dword [esi + 0x1c]
jmp 0x522c1d
movzx eax, byte [esi + 0x2c]
lea eax, [eax + eax*2]
shl eax, 5
cmp dword [eax + esi + 0x2d0], 0
je 0x522c16
mov eax, dword [esi + 0x1c]
jmp 0x522c1d
mov eax, dword [eax + esi + 0x2a8]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x20]
cmp ecx, dword [eax]
mov ecx, 0
cmove eax, ecx
mov dword [esp + 0x20], eax
mov ecx, eax
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xdc]
test eax, eax
js 0x522c5f
test ecx, ecx
jne 0x522c5f
push eax
push edi
call fcn.0052b950
mov edx, dword [esp + 0x104]
add esp, 8
test ebp, ebp
je 0x522d6c
mov ebp, dword [ebx + 0x38]
inc dword [ebx + 0x2c]
lea ecx, [ebp - 1]
sub ebp, 2
push ecx
mov dword [esp + 0x18], ecx
lea eax, [ebp - 1]
mov dword [esp + 0x28], eax
mov dword [ebx + 0x38], eax
mov eax, dword [ebx + 0x2c]
push eax
push esi
push edx
push ebx
mov dword [esp + 0x58], eax
call fcn.0053fd80
mov esi, dword [esp + 0x38]
push esi
push 0
push 9
push edi
call fcn.0052b410
mov ecx, dword [edi + 0xc]
add esp, 0x24
mov edx, dword [esp + 0x14]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x522cc2
push edx
push edi
push ecx
call fcn.004f1810
add esp, 0xc
jmp 0x522ccb
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
push esi
push ebp
push dword [esp + 0x108]
lea eax, [esp + 0xc8]
mov dword [esp + 0xf0], 0
push eax
lea eax, [esp + 0xd8]
push eax
push 0xffffffffffffffff
push dword [esp + 0x114]
push ebx
call fcn.004f4e70
mov ecx, dword [edi + 0xc]
add esp, 0x20
not ebp
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x522d1b
push ebp
push edi
push ecx
call fcn.004f1810
add esp, 0xc
jmp 0x522d24
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + ebp*4], eax
push dword [esp + 0x44]
push 0x43
push edi
call fcn.0052b3b0
mov ecx, dword [edi + 0xc]
add esp, 0xc
not esi
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x522d57
push esi
push edi
push ecx
call fcn.004f1810
mov esi, dword [esp + 0x108]
add esp, 0xc
jmp 0x524857
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + esi*4], eax
mov esi, dword [esp + 0xfc]
jmp 0x524857
push dword [esi + 0x20]
mov ebp, dword [esp + 0x104]
lea eax, [esp + 0xc0]
push dword [esi + 0x1c]
push ebp
push eax
lea eax, [esp + 0xd8]
push eax
push 0xffffffffffffffff
push edx
push ebx
call fcn.004f4e70
push esi
call fcn.0053d6f0
mov esi, dword [esp + 0x120]
add esp, 0x24
jmp 0x52485e
mov dword [esp + 0x40], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x5c], 0
test ebp, ebp
je 0x522ea8
mov ecx, dword [esi + 0x1c]
mov eax, dword [ecx]
test eax, eax
jle 0x522de2
add ecx, 0x1a
xor edx, edx
lea ecx, [ecx + 0x14]
dec eax
mov word [ecx - 0x14], dx
test eax, eax
jg 0x522dd4
mov eax, dword [ebp]
test eax, eax
jle 0x522dfe
lea ecx, [ebp + 0x1a]
nop dword [eax]
xor edx, edx
lea ecx, [ecx + 0x14]
dec eax
mov word [ecx - 0x14], dx
test eax, eax
jg 0x522df0
cmp word [esi + 2], 0x42
jle 0x522e0e
mov eax, 0x42
mov word [esi + 2], ax
mov esi, dword [esp + 0x20]
test esi, esi
je 0x522eae
mov eax, dword [ebp]
cmp eax, dword [esi]
jne 0x522eae
xor edx, edx
test eax, eax
jle 0x522e47
lea ecx, [ebp + 0x10]
sub esi, ebp
mov al, byte [esi + ecx]
lea ecx, [ecx + 0x14]
and al, 1
inc edx
mov byte [ecx - 0x14], al
mov eax, dword [ebp]
cmp edx, eax
jl 0x522e30
mov esi, dword [esp + 0x20]
cmp eax, dword [esi]
jne 0x522eae
xor ebp, ebp
test eax, eax
jle 0x522e9e
mov eax, dword [esp + 0x18]
add esi, 0x10
lea ecx, [eax + 8]
sub eax, dword [esp + 0x20]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], eax
mov al, byte [eax + esi]
cmp al, byte [esi]
jne 0x522eae
push 0xffffffffffffffff
push dword [esi - 8]
push dword [ecx]
push 0
call fcn.00508710
add esp, 0x10
test eax, eax
jne 0x522eae
mov eax, dword [esp + 0x18]
inc ebp
mov ecx, dword [esp + 0x14]
add esi, 0x14
add ecx, 0x14
mov dword [esp + 0x14], ecx
cmp ebp, dword [eax]
mov eax, dword [esp + 0x24]
jl 0x522e67
mov dword [esp + 0x5c], 1
jmp 0x522eae
xor eax, eax
mov word [esi + 2], ax
mov eax, dword [ebx + 0x38]
push 0
dec eax
push 0x2c
push dword [esp + 0x34]
mov dword [esp + 0x6c], eax
mov dword [ebx + 0x38], eax
call fcn.00503030
mov ebp, eax
add esp, 0xc
test ebp, ebp
je 0x522f47
push 0x2c
push 0
push ebp
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebx]
add esp, 0xc
push 0
push 0xc
test eax, eax
je 0x522ef1
push eax
call fcn.00503030
add esp, 0xc
jmp 0x522ef9
call fcn.00515c10
add esp, 8
mov ecx, eax
test ecx, ecx
je 0x522f19
mov eax, dword [ebx + 0x88]
mov dword [ecx], eax
mov dword [ebx + 0x88], ecx
mov dword [ecx + 4], ebp
mov dword [ecx + 8], 0x4c4ff0
jmp 0x522f47
mov eax, dword [ebp + 0x14]
mov esi, dword [ebx]
test eax, eax
je 0x522f2c
push eax
push esi
call fcn.00502f20
add esp, 8
mov eax, dword [ebp + 0x20]
test eax, eax
je 0x522f3d
push eax
push esi
call fcn.00502f20
add esp, 8
push ebp
push esi
call fcn.00502f20
add esp, 8
mov eax, dword [esp + 0x2c]
cmp byte [eax + 0x57], 0
jne 0x5219a8
mov eax, dword [esp + 0xfc]
xorps xmm0, xmm0
mov esi, dword [esp + 0x18]
mov eax, dword [eax + 0x10]
mov dword [ebp + 0x28], eax
mov eax, dword [esp + 0x10]
movlpd qword [esp + 0x88], xmm0
movlpd qword [esp + 0x90], xmm0
mov dword [esp + 0x98], 0
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ebp
test esi, esi
je 0x522fa4
mov eax, dword [esi]
jmp 0x522fa6
xor eax, eax
push dword [esp + 0x30]
mov word [ebp + 2], ax
lea eax, [esp + 0x80]
push eax
mov dword [ebp + 0x10], esi
call fcn.005057e0
push dword [esp + 0x28]
lea eax, [esp + 0x88]
push eax
call fcn.005057e0
mov ecx, dword [esp + 0x60]
add esp, 0x10
test ecx, ecx
je 0x523094
test esi, esi
je 0x523041
mov eax, dword [esp + 0xfc]
xorps xmm0, xmm0
mov dword [esp + 0xb8], eax
movlpd qword [esp + 0xa8], xmm0
movlpd qword [esp + 0xb0], xmm0
mov eax, dword [eax + 0x2c]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], 0x4ddb90
test eax, eax
je 0x523033
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.00539e50
mov ecx, dword [esp + 0x58]
add esp, 8
mov eax, dword [esp + 0xfc]
mov eax, dword [eax + 0x24]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x7c]
mov dword [esp + 0xa4], 0x4c6160
mov dword [esp + 0xb8], eax
lea eax, [esp + 0xa0]
push ecx
push eax
mov dword [esp + 0xb0], 0x53a0f0
mov dword [esp + 0xb4], 0x53a0e0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xa8], 0
call fcn.00539e50
add esp, 8
mov eax, dword [ebp + 0x18]
mov dword [ebp + 0x1c], eax
mov eax, dword [esp + 0xfc]
cmp dword [eax + 0x28], 0
jne 0x52317a
cmp dword [eax + 0x2c], 0
jne 0x52317a
cmp dword [ebp + 0x24], 1
jne 0x52317a
mov eax, dword [ebp + 0x20]
mov eax, dword [eax]
mov esi, dword [eax + 0x14]
test esi, esi
je 0x523176
cmp dword [esi], 1
jne 0x523176
test dword [eax + 4], 0x1000000
jne 0x523176
mov ecx, dword [esp + 0x2c]
test dword [ecx + 0x50], 0x10000
jne 0x523176
mov eax, dword [eax + 8]
push 0x6ea7a4
push eax
mov dword [esp + 0x2c], eax
call fcn.00526840
add esp, 8
test eax, eax
jne 0x52312e
push dword [esi + 8]
call fcn.00505d40
add esp, 4
mov byte [esp + 0x1f], 1
neg eax
sbb al, al
and eax, 0xffffff02
mov dword [esp + 0x14], eax
jmp 0x52314d
push 0x6ea7a8
push dword [esp + 0x28]
call fcn.00526840
add esp, 8
test eax, eax
jne 0x523176
mov byte [esp + 0x14], 1
mov byte [esp + 0x1f], 2
push 0
push esi
push dword [esp + 0x34]
call fcn.00509dd0
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x9c], ecx
test ecx, ecx
je 0x523170
mov eax, dword [esp + 0x14]
mov byte [ecx + 0x10], al
mov esi, dword [esp + 0x18]
jmp 0x52317f
mov esi, dword [esp + 0x18]
mov byte [esp + 0x1f], 0
lea eax, [esp + 0x7c]
push eax
push ebp
call fcn.004c60c0
mov ecx, dword [esp + 0x34]
add esp, 8
cmp byte [ecx + 0x57], 0
jne 0x5248d8
test esi, esi
je 0x52420a
cmp dword [ebp + 0x24], 1
mov dword [esp + 0x34], 0
mov dword [esp + 0x14], 0
jne 0x523288
mov eax, dword [ebp + 0x20]
cmp dword [eax + 8], 0
jl 0x523288
mov eax, dword [eax]
test eax, eax
je 0x523288
test dword [eax + 4], 0x1000
jne 0x523288
mov eax, dword [eax + 0x14]
test eax, eax
je 0x523288
mov eax, dword [eax + 8]
test eax, eax
je 0x523209
push 0
push 0
push eax
push ecx
call fcn.004d5ac0
mov ecx, dword [esp + 0x3c]
add esp, 0x10
mov esi, eax
jmp 0x52320b
xor esi, esi
push 0
push dword [esp + 0x1c]
push ecx
call fcn.00509dd0
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x34], ecx
test ecx, ecx
jne 0x523235
push esi
push dword [ebx]
call fcn.00509af0
add esp, 8
mov dword [esp + 0x34], eax
jmp 0x523277
mov eax, dword [ecx]
lea edx, [eax + 1]
cmp dword [ecx + 4], edx
jge 0x523251
push esi
push ecx
push dword [ebx]
call fcn.00509a30
add esp, 0xc
mov dword [esp + 0x34], eax
jmp 0x523277
movups xmm0, xmmword [0x6e89cc]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*4]
mov eax, dword [esp + 0x34]
mov dword [eax], edx
mov eax, dword [0x6e89dc]
movups xmmword [ecx + 8], xmm0
mov dword [ecx + 0x18], eax
mov eax, dword [esp + 0x34]
mov dword [ecx + 8], esi
mov esi, dword [esp + 0x18]
neg eax
sbb eax, eax
and eax, 0x500
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x28]
mov dword [ebp + 4], eax
inc dword [ebx + 0x28]
push dword [ebp + 0x18]
push 0
push esi
push ebx
call fcn.00514a50
mov ecx, dword [edi + 0x6c]
add esp, 0x10
movzx edx, word [ebp + 2]
mov esi, dword [ebp + 4]
mov dword [esp + 0x70], eax
mov dword [esp + 0x44], ecx
cmp dword [edi + 0x70], ecx
jg 0x5232ce
push 0
push edx
push esi
push 0x77
push edi
call fcn.004dd7e0
mov edx, eax
add esp, 0x14
mov dword [esp + 0x44], edx
jmp 0x523304
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x44]
mov dword [eax + ecx*4], 0x77
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, edx
cmp byte [ecx + 0x57], 0
je 0x523332
cmp dword [ecx + 0x210], 0
jne 0x52336c
mov edx, dword [esp + 0x70]
test edx, edx
je 0x52336c
add dword [edx], 0xffffffff
jne 0x52336c
push edx
push dword [edx + 0xc]
call fcn.00503150
add esp, 8
jmp 0x52336c
test edx, edx
jns 0x52333a
mov eax, dword [edi + 0x6c]
dec eax
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x52335d
mov ecx, dword [esp + 0x70]
push 0xfffffffffffffff8
push ecx
push eax
push edi
call fcn.00546490
add esp, 0x10
jmp 0x52336c
mov edx, dword [esp + 0x70]
test edx, edx
je 0x52336c
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov eax, dword [ebx + 0x2c]
mov esi, dword [esp + 0x18]
inc eax
mov dword [esp + 0x38], eax
lea edx, [eax + 1]
mov eax, dword [ebx + 0x38]
dec eax
mov dword [esp + 0x48], edx
mov dword [esp + 0x74], eax
lea ecx, [edx + 2]
dec eax
mov dword [ebx + 0x2c], ecx
mov dword [ebx + 0x38], eax
mov dword [esp + 0x20], ecx
add ecx, dword [esi]
mov dword [esp + 0x58], eax
mov dword [ebx + 0x2c], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x78], eax
mov eax, dword [esi]
add eax, ecx
mov dword [ebx + 0x2c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x5233c6
push 0
push edx
push 0
push 0x47
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x5233fc
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esp + 0x20]
add edx, dword [esi]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x523420
mov eax, dword [esp + 0x20]
push edx
inc eax
push eax
push 0
push 0x4b
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x52345b
mov ebx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov esi, dword [esp + 0x18]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc ebx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x52347a
push 0
push dword [esp + 0x5c]
push dword [esp + 0x28]
push 0xa
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x5234ad
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x58]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x5c]
mov edx, 0x80
neg ecx
mov eax, 0x40
push 0
sbb ecx, ecx
and ecx, 0x200
cmp byte [esp + 0x2f], 2
cmove eax, edx
or cx, ax
or cx, word [esp + 0x18]
movzx eax, cx
push eax
push dword [esp + 0x104]
mov eax, dword [esp + 0x40]
push eax
push esi
push dword [esp + 0x50]
push dword [esp + 0x28]
push ebx
call fcn.0053a1e0
mov ecx, eax
add esp, 0x20
mov dword [esp + 0x3c], ecx
test ecx, ecx
jne 0x523521
mov eax, dword [esp + 0x34]
test eax, eax
je 0x5248d4
push eax
push dword [esp + 0x30]
call fcn.004d6580
add esp, 8
jmp 0x5248d4
cmp dword [ebx + 0x48], 0
lea esi, [ebx + 0x48]
je 0x523589
cmp word [ebp + 2], 0
lea eax, [ebx + 0x48]
mov esi, dword [ebp + 0x1c]
mov dword [ebp + 0x18], esi
mov dword [esp + 0x24], eax
jbe 0x523573
mov eax, dword [esp + 0xfc]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
dec ecx
test esi, esi
jle 0x523567
mov edx, dword [ebp + 0x14]
add edx, 0xe
movsx eax, word [edx]
lea edx, [edx + 0x10]
cmp eax, ecx
cmovle eax, ecx
mov ecx, eax
sub esi, 1
jne 0x523555
lea eax, [ecx + 1]
mov word [ebp + 2], ax
lea esi, [ebx + 0x48]
jmp 0x523577
mov esi, dword [esp + 0x24]
lea eax, [esp + 0x7c]
push eax
push ebp
call fcn.004c60c0
mov ecx, dword [esp + 0x44]
add esp, 8
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x24]
add eax, dword [ebp + 0x18]
add dword [ebx + 0x2c], eax
movzx eax, byte [ecx + 0x2f]
mov dword [esp + 0x24], eax
mov al, byte [ecx + 0x2d]
xor ecx, ecx
test al, al
movsx edx, al
mov eax, dword [esp + 0x18]
cmovns ecx, edx
cmp ecx, dword [eax]
jne 0x5235c3
mov dword [esp + 0x68], 0
jmp 0x5238fe
cmp byte [esp + 0x2b], 0
je 0x5235dc
mov eax, dword [esp + 0xfc]
test byte [eax + 4], 1
mov eax, str.DISTINCT
je 0x5235e1
mov eax, str.GROUP_BY
push eax
push str.USE_TEMP_B_TREE_FOR__s
push 0
push ebx
call fcn.00534ed0
mov eax, dword [esp + 0x28]
add esp, 0x10
cmp dword [ebp + 0x18], 0
mov dword [esp + 0x68], 1
mov edx, dword [eax]
mov esi, edx
mov dword [esp + 0x54], edx
mov dword [esp + 0x64], esi
jle 0x52364c
mov edi, dword [ebp + 0x14]
mov ebx, dword [ebp + 0x18]
add edi, 0xe
nop dword [eax]
movsx ecx, word [edi]
lea eax, [esi + 1]
cmp ecx, edx
lea edi, [edi + 0x10]
cmovl eax, esi
mov esi, eax
lea eax, [edx + 1]
cmovl eax, edx
mov edx, eax
sub ebx, 1
jne 0x523620
mov edi, dword [esp + 0x6c]
mov ebx, dword [esp + 0xf8]
mov dword [esp + 0x64], esi
cmp esi, 1
jne 0x523677
mov al, byte [ebx + 0x13]
test al, al
jne 0x523662
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [esp + 0x10], eax
jmp 0x52369e
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0xa0]
mov dword [esp + 0x10], eax
jmp 0x5236a1
mov edx, dword [ebx + 0x1c]
mov ecx, dword [ebx + 0x20]
mov dword [esp + 0x10], ecx
cmp esi, edx
jg 0x523692
lea eax, [esi + ecx]
sub edx, esi
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], edx
jmp 0x5236a1
mov eax, dword [ebx + 0x2c]
lea ecx, [eax + 1]
add eax, esi
mov dword [esp + 0x10], ecx
mov dword [ebx + 0x2c], eax
push 0
push 0
push dword [esp + 0x18]
push dword [esp + 0x24]
push ebx
call fcn.00505f20
xor edx, edx
mov byte [ebp], 1
add esp, 0x14
mov dword [esp + 0x40], edx
cmp dword [ebp + 0x18], edx
jle 0x52370a
mov esi, dword [esp + 0x54]
xor edi, edi
nop dword [eax + eax]
mov ecx, dword [ebp + 0x14]
movsx eax, word [ecx + edi + 0xe]
cmp eax, esi
jl 0x5236f5
mov eax, dword [esp + 0x10]
add eax, esi
push eax
push dword [ecx + edi + 4]
push ebx
call fcn.00505eb0
mov edx, dword [esp + 0x4c]
add esp, 0xc
inc esi
inc edx
add edi, 0x10
mov dword [esp + 0x40], edx
cmp edx, dword [ebp + 0x18]
jl 0x5236d0
mov edi, dword [esp + 0x6c]
mov esi, dword [esp + 0x64]
mov byte [ebp], 0
mov al, byte [ebx + 0x13]
test al, al
jne 0x52371e
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebx + 0x2c], eax
jmp 0x52372d
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0xa0]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x40], eax
cmp dword [edi + 0x70], ecx
jg 0x523750
push eax
push esi
push dword [esp + 0x18]
push 0x61
push edi
call fcn.004dd7e0
mov edx, dword [esp + 0x54]
add esp, 0x14
jmp 0x52377f
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x40]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov eax, dword [ebp + 4]
mov dword [esp + 0x54], eax
cmp dword [edi + 0x70], ecx
jg 0x5237a6
push 0
push edx
push eax
push 0x8b
push edi
call fcn.004dd7e0
mov edx, dword [esp + 0x54]
add esp, 0x14
jmp 0x5237d9
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x6c]
mov dword [eax + ecx*4], 0x8b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test edx, edx
je 0x5237f1
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x5237f1
movzx eax, al
mov dword [ebx + eax*4 + 0xa0], edx
inc byte [ebx + 0x13]
cmp esi, 1
jne 0x523814
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x523823
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x523823
movzx eax, al
mov dword [ebx + eax*4 + 0xa0], ecx
inc byte [ebx + 0x13]
jmp 0x523823
cmp esi, dword [ebx + 0x1c]
jle 0x523823
mov eax, dword [esp + 0x10]
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], eax
push dword [esp + 0x3c]
call fcn.0053d6f0
mov edx, dword [ebx + 0x28]
add esp, 4
mov dword [ebp + 8], edx
mov al, byte [ebx + 0x13]
inc dword [ebx + 0x28]
mov dword [esp + 0x40], edx
test al, al
jne 0x52384c
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebx + 0x2c], eax
jmp 0x52385b
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0xa0]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x64], eax
cmp dword [edi + 0x70], ecx
jg 0x523877
push esi
push eax
push edx
push 0x79
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x5238a9
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x64]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 4]
cmp dword [edi + 0x70], ecx
jg 0x5238c8
push 0
push dword [esp + 0x64]
push edx
push 0x22
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x5238f7
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x60]
mov dword [eax + ecx*4], 0x22
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [ebp + 1], 1
lea esi, [ebx + 0x48]
cmp dword [esi], 0
je 0x52396c
xorps xmm0, xmm0
mov dword [esp + 0xb8], 0
xor ecx, ecx
movq qword [esp + 0xb0], xmm0
movups xmmword [esp + 0xa0], xmm0
mov dword [esp + 0xa4], 0x4c50d0
mov dword [esp + 0x10], ecx
cmp dword [ebp + 0x24], ecx
jle 0x52396c
xor esi, esi
nop word [eax + eax]
mov eax, dword [ebp + 0x20]
mov eax, dword [esi + eax]
test eax, eax
je 0x52395f
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.00539e50
mov ecx, dword [esp + 0x18]
add esp, 8
inc ecx
add esi, 0x10
mov dword [esp + 0x10], ecx
cmp ecx, dword [ebp + 0x24]
jl 0x523940
cmp dword [esp + 0x5c], 0
je 0x5239cf
mov eax, dword [esp + 0x2c]
test byte [eax + 0x50], 4
jne 0x5239cf
cmp dword [esp + 0x68], 0
jne 0x52398e
mov eax, dword [esp + 0x3c]
test byte [eax + 0x30], 8
je 0x5239cf
mov edx, dword [edi]
mov dword [esp + 0xc8], 0
cmp byte [edx + 0x57], 0
jne 0x5239cf
mov eax, dword [esp + 0xdc]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + ecx*4 + 0x10]
lea esi, [eax + ecx*4]
movsx eax, byte [esi + 1]
push eax
push edx
call fcn.004dac00
add esp, 0xc
mov word [esi], 0xb8
mov dword [esi + 0x10], 0
cmp dword [esp + 0x68], 0
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x10], ecx
je 0x523a2d
mov edx, dword [ebp + 4]
cmp dword [edi + 0x70], ecx
jg 0x5239fe
push dword [esp + 0x40]
push dword [esp + 0x68]
push edx
push 0x85
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523a2d
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x64]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x40]
mov dword [eax + ecx*4], 0x85
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x18]
xor esi, esi
cmp dword [eax], esi
jle 0x523ac4
add eax, 8
mov dword [esp + 0x5c], eax
mov edx, dword [esp + 0x78]
add edx, esi
cmp dword [esp + 0x68], 0
je 0x523a9e
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x523a6a
push edx
push esi
push dword [esp + 0x48]
push 0x5e
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523aae
mov ebx, dword [esp + 0x40]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0x5e
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x523aae
push edx
mov byte [ebp], 1
push dword [eax]
push ebx
call fcn.00505eb0
add esp, 0xc
mov ecx, dword [esp + 0x18]
inc esi
mov eax, dword [esp + 0x5c]
add eax, 0x14
mov dword [esp + 0x5c], eax
cmp esi, dword [ecx]
jl 0x523a42
mov eax, ecx
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x523ace
inc dword [ecx]
mov edx, dword [edi + 0x6c]
mov esi, dword [eax]
cmp dword [edi + 0x70], edx
jg 0x523af2
mov eax, dword [esp + 0x20]
push esi
push dword [esp + 0x7c]
inc eax
push eax
push 0x5a
push edi
call fcn.004dd7e0
add esp, 0x14
mov edx, eax
jmp 0x523b2d
mov ebx, dword [esp + 0x20]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
inc ebx
mov edi, dword [esp + 0x6c]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x78]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0x5a
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x523b59
cmp dword [eax + 0x210], 0
jne 0x523b8f
mov eax, dword [esp + 0x70]
test eax, eax
je 0x523b8f
add dword [eax], 0xffffffff
jne 0x523b8f
push eax
push dword [eax + 0xc]
call fcn.00503150
add esp, 8
jmp 0x523b8f
test edx, edx
jns 0x523b61
mov edx, dword [edi + 0x6c]
dec edx
mov eax, dword [edi + 0x68]
lea ecx, [edx + edx*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x70]
je 0x523b84
push 0xfffffffffffffff8
push ecx
push eax
push edi
call fcn.00546490
add esp, 0x10
jmp 0x523b8f
test ecx, ecx
je 0x523b8f
mov dword [eax + 0x10], ecx
mov byte [eax + 1], 0xf8
mov esi, dword [edi + 0x6c]
lea edx, [esi + 1]
cmp dword [edi + 0x70], esi
jg 0x523bab
push edx
push 0
push edx
push 0xe
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523bda
mov eax, dword [edi + 0x68]
lea ecx, [esi + esi*4]
mov ebx, dword [esp + 0xf8]
mov dword [edi + 0x6c], edx
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebx + 8]
mov eax, dword [esp + 0x18]
mov ecx, dword [edx + 0x6c]
mov eax, dword [eax]
mov dword [esp + 0x54], eax
cmp dword [edx + 0x70], ecx
jg 0x523c0a
push eax
mov eax, dword [esp + 0x24]
inc eax
push eax
push dword [esp + 0x80]
push 0x4f
push edx
call fcn.004dd7e0
add esp, 0x14
jmp 0x523c42
mov edi, dword [esp + 0x6c]
lea eax, [ecx + 1]
mov dword [edx + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edx + 0x68]
mov edx, dword [esp + 0x78]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x20]
inc edx
mov dword [eax + ecx*4], 0x4f
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x54]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x523c63
mov eax, dword [esp + 0x48]
push 0
push dword [esp + 0x78]
inc eax
push eax
push 0xa
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523c9e
mov edx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0xf8]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x74]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x523cbd
push 0
push dword [esp + 0x64]
push dword [esp + 0x50]
push 0x3b
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523cf0
mov edx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x60]
mov dword [eax + ecx*4], 0x3b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x523d0f
push 0
push dword [esp + 0x5c]
push dword [esp + 0x28]
push 0xa
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523d42
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x58]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x523d54
mov eax, 0x7937a8
jmp 0x523d5d
mov eax, dword [edi + 0x68]
lea ecx, [esi + esi*4]
lea eax, [eax + ecx*4]
push dword [esp + 0x24]
mov esi, dword [esp + 0x3c]
push ebp
push esi
push ebx
mov dword [eax + 8], edx
call fcn.005441e0
mov ecx, dword [edi + 0x6c]
add esp, 0x10
cmp dword [edi + 0x70], ecx
jg 0x523d8d
push 0
push esi
push 1
push 0x47
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523dbc
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x68], 0
je 0x523e10
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 4]
mov esi, dword [esp + 0x10]
cmp dword [edi + 0x70], ecx
jg 0x523de3
push 0
push esi
push edx
push 0x25
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523e4f
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x25
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x523e4f
push dword [esp + 0x3c]
call fcn.0053d6f0
mov edx, dword [edi]
add esp, 4
cmp byte [edx + 0x57], 0
jne 0x523e4f
mov eax, dword [esp + 0x44]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + ecx*4 + 0x10]
lea esi, [eax + ecx*4]
movsx eax, byte [esi + 1]
push eax
push edx
call fcn.004dac00
add esp, 0xc
mov word [esi], 0xb8
mov dword [esi + 0x10], 0
mov eax, dword [esp + 0x34]
test eax, eax
je 0x523e64
push eax
push dword [esp + 0x30]
call fcn.004d6580
add esp, 8
mov esi, dword [esp + 0x48]
mov ecx, dword [edi + 0x6c]
inc esi
cmp dword [edi + 0x70], ecx
jg 0x523e85
push 0
push dword [esp + 0x78]
push esi
push 0xa
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523eb4
mov edx, dword [esp + 0x74]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x523ed1
push 0
push dword [esp + 0x64]
push 0
push 9
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523f04
mov edx, dword [esp + 0x60]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x54], ecx
cmp dword [edi + 0x70], ecx
jg 0x523f25
push 0
push dword [esp + 0x4c]
push 1
push 0x47
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523f58
mov edx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x523f72
push 0
push 0
push esi
push 0x43
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x523fa1
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x74]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x523fbf
push edx
push edi
push ecx
call fcn.004f1810
add esp, 0xc
jmp 0x523fc8
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [edi + 0x6c]
lea edx, [eax + 2]
lea esi, [eax + 1]
cmp dword [edi + 0x70], eax
jg 0x523fea
push 0
push edx
push dword [esp + 0x40]
push 0x3b
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x52401d
mov ebx, dword [esp + 0x38]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
mov dword [edi + 0x6c], esi
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0x3b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x52403c
mov eax, dword [esp + 0x48]
push 0
push 0
inc eax
push eax
push 0x43
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x524077
mov edx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0xf8]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
push ebp
push ebx
call fcn.004d76d0
push 0x10
push esi
push dword [esp + 0x60]
push ebx
call fcn.00508ec0
push dword [esp + 0x6c]
lea eax, [esp + 0xd8]
push esi
push dword [esp + 0x120]
mov esi, dword [esp + 0x120]
push eax
lea eax, [esp + 0xf0]
push eax
push 0xffffffffffffffff
push esi
push ebx
call fcn.004f4e70
mov ecx, dword [edi + 0x6c]
add esp, 0x38
cmp dword [edi + 0x70], ecx
jg 0x5240d9
mov eax, dword [esp + 0x48]
push 0
push 0
inc eax
push eax
push 0x43
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x52410d
mov edx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
inc edx
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x58]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x52412b
push edx
push edi
push ecx
call fcn.004f1810
add esp, 0xc
jmp 0x524134
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
push ebp
push ebx
call fcn.004f1680
mov ecx, dword [edi + 0x6c]
add esp, 8
cmp dword [edi + 0x70], ecx
jg 0x52415b
push 0
push dword [esp + 0x3c]
push 0
push 0x47
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x52418e
mov edx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x5241ab
push 0
push 0
push dword [esp + 0x28]
push 0x43
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x5241de
mov edx, dword [esp + 0x20]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp word [esp + 0x14], 0
je 0x524201
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x524201
mov eax, dword [ebp + 0x20]
push dword [eax + 0xc]
push dword [eax + 8]
push ecx
push ebx
call fcn.004d7b00
add esp, 0x10
mov ebp, dword [esp + 0x60]
jmp 0x524834
mov eax, dword [esp + 0xfc]
cmp dword [eax + 0x24], 0
jne 0x524585
mov edx, dword [eax + 0x1c]
cmp dword [edx], 1
jne 0x524585
mov ecx, dword [eax + 0x20]
cmp dword [ecx], 1
jne 0x524585
cmp dword [ecx + 0x1c], 0
jne 0x524585
cmp dword [ebp + 0x24], 1
jne 0x524585
cmp dword [eax + 0x2c], 0
jne 0x524585
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x58], ecx
cmp byte [ecx + 0x2b], 0
jne 0x524585
mov edx, dword [edx + 8]
cmp byte [edx], 0xa8
jne 0x524585
cmp dword [edx + 0x28], ebp
jne 0x524585
mov eax, dword [ebp + 0x20]
mov eax, dword [eax + 4]
test dword [eax + 4], 0x100
je 0x524585
test dword [edx + 4], 0x1000004
jne 0x524585
mov esi, dword [ecx + 0x3c]
mov edx, 0xffff8000
mov dword [esp + 0x3c], edx
test esi, esi
je 0x5242cc
mov eax, dword [ebx]
xor edx, edx
mov dword [esp + 0x3c], edx
mov eax, dword [eax + 0x10]
add eax, 0xc
cmp dword [eax], esi
je 0x5242cc
nop dword [eax]
lea eax, [eax + 0x10]
inc edx
cmp dword [eax], esi
jne 0x5242c0
mov dword [esp + 0x3c], edx
mov eax, dword [ebx + 0x28]
xor esi, esi
mov dword [esp + 0x38], eax
inc eax
mov dword [ebx + 0x28], eax
xor eax, eax
mov dword [esp + 0x24], eax
mov eax, dword [ecx + 0x14]
mov ecx, ebx
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x7c]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x44], ecx
mov eax, dword [ecx + 0x58]
mov ecx, edx
mov dword [esp + 0x54], eax
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x54]
test ecx, eax
jne 0x524326
mov eax, dword [esp + 0x44]
bts ecx, edx
mov dword [eax + 0x58], ecx
cmp edx, 1
jne 0x52432b
push eax
call fcn.00516a00
add esp, 4
jmp 0x524353
cmp edx, 1
je 0x524353
mov eax, dword [ebx]
mov ecx, edx
add ecx, ecx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx*8 + 4]
cmp byte [eax + 9], 0
je 0x524353
mov ecx, dword [esp + 0x58]
push dword [ecx]
push 0
push dword [ecx + 0x14]
push edx
push ebx
call fcn.004e4960
add esp, 0x14
mov edx, dword [esp + 0x58]
test byte [edx + 0x1c], 0x80
je 0x524374
mov esi, dword [edx + 8]
test esi, esi
je 0x524374
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x524374
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x524364
mov eax, dword [esp + 0xfc]
mov eax, dword [eax + 0x20]
test byte [eax + 0x30], 1
jne 0x5243b9
mov eax, dword [edx + 8]
test eax, eax
je 0x5243b9
nop dword [eax + eax]
test byte [eax + 0x38], 4
jne 0x5243b2
movzx ecx, word [eax + 0x30]
cmp cx, word [edx + 0x28]
jge 0x5243b2
cmp dword [eax + 0x24], 0
jne 0x5243b2
test esi, esi
je 0x5243b0
cmp cx, word [esi + 0x30]
jge 0x5243b2
mov esi, eax
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x524390
test esi, esi
je 0x5243d2
mov eax, dword [esi + 0x2c]
push esi
push ebx
mov dword [esp + 0x1c], eax
call fcn.00514ae0
add esp, 8
mov dword [esp + 0x24], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x5243f8
mov edx, dword [esp + 0x3c]
push 1
push edx
mov edx, dword [esp + 0x1c]
push edx
mov edx, dword [esp + 0x44]
push edx
push 0x70
push edi
call fcn.004c4c90
add esp, 0x18
jmp 0x52442b
mov edx, dword [esp + 0x38]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*4], 0xfd70
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 1
mov edx, dword [esp + 0x24]
test edx, edx
je 0x524482
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x524457
cmp dword [eax + 0x210], 0
jne 0x524482
add dword [edx], 0xffffffff
jne 0x524482
push edx
push dword [edx + 0xc]
call fcn.00503150
add esp, 8
jmp 0x524482
mov eax, dword [edi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
add eax, 0xffffffec
cmp byte [eax + 1], 0
je 0x52447b
push 0xfffffffffffffff8
push edx
push eax
push edi
call fcn.00546490
add esp, 0x10
jmp 0x524482
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x24]
add eax, dword [ebp + 0x18]
add dword [ebx + 0x2c], eax
mov edx, dword [ebp + 0x18]
add edx, dword [ebp + 0xc]
mov ecx, dword [edi + 0x6c]
mov ebp, dword [esp + 0x38]
cmp dword [edi + 0x70], ecx
jg 0x5244b5
push 0
push edx
push ebp
push 0x62
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x5244e0
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x62
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x5244fa
push 0
push 0
push ebp
push 0x7a
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x524529
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x7a
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [ebx + 0xd7], 2
jne 0x5247f8
mov ecx, dword [esp + 0x58]
test esi, esi
je 0x524556
test byte [ecx + 0x1c], 0x80
je 0x52454d
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x524556
mov eax, dword [esi]
mov edx, 1
jmp 0x52455d
xor edx, edx
mov eax, 0x774272
push eax
test edx, edx
mov eax, str._USING_COVERING_INDEX
mov esi, 0x774272
cmove eax, esi
push eax
push dword [ecx]
push str.SCAN__s_s_s
push 0
push ebx
call fcn.00534ed0
add esp, 0x18
jmp 0x5247f8
cmp dword [ebp + 0x1c], 0
mov esi, dword [ebp + 0x24]
mov dword [esp + 0x14], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x24], 0
je 0x524635
xor edx, edx
test esi, esi
jle 0x5245dc
mov ecx, dword [ebp + 0x20]
mov ebx, esi
mov eax, dword [ecx]
test dword [eax + 4], 0x1000000
jne 0x5245cb
mov eax, dword [ecx + 4]
mov esi, ebx
test byte [eax + 4], 0x20
jne 0x5245d5
inc edx
add ecx, 0x10
mov esi, ebx
cmp edx, ebx
jl 0x5245b5
mov ebx, dword [esp + 0xf8]
cmp edx, esi
jne 0x524659
inc dword [ebx + 0x2c]
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebx + 0x2c]
mov dword [esp + 0x14], edx
cmp dword [edi + 0x70], ecx
jg 0x524604
push 0
push edx
push 0
push 0x47
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x524659
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x524659
cmp esi, 1
jne 0x524659
mov eax, dword [ebp + 0x20]
cmp dword [eax + 8], 0
jl 0x524659
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x44], eax
neg eax
sbb eax, eax
and eax, 0x500
mov dword [esp + 0x24], eax
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x24]
add eax, dword [ebp + 0x18]
add dword [ebx + 0x2c], eax
push ebp
push ebx
call fcn.004f1680
movzx eax, byte [esp + 0x27]
or ax, word [esp + 0x2c]
push 0
movzx eax, ax
push eax
push dword [esp + 0x10c]
push dword [esp + 0x58]
push dword [esp + 0xb4]
push dword [esp + 0x58]
push dword [esp + 0x30]
push ebx
call fcn.0053a1e0
mov esi, eax
add esp, 0x28
test esi, esi
je 0x5248d4
movzx eax, byte [esi + 0x2f]
push eax
push ebp
push dword [esp + 0x1c]
mov dword [esp + 0x60], eax
push ebx
call fcn.005441e0
mov ecx, dword [esp + 0x64]
add esp, 0x10
test ecx, ecx
je 0x5246e3
mov eax, dword [ebp + 0x20]
test eax, eax
je 0x5246e3
push dword [eax + 0xc]
push dword [eax + 8]
push ecx
push ebx
call fcn.004d7b00
add esp, 0x10
mov edx, dword [esp + 0x14]
test edx, edx
je 0x52473b
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x524705
push 0
push edx
push 1
push 0x47
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x52473b
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [esp + 0x1f], 0
je 0x5247e8
test byte [esi + 0x30], 4
je 0x5247e8
cmp byte [esi + 0x2d], 0
je 0x5247e8
movzx edx, byte [esi + 0x2c]
sub edx, 1
js 0x524784
lea ecx, [edx + edx*2]
shl ecx, 5
add ecx, esi
nop dword [eax + eax]
mov eax, dword [ecx + 0x348]
test byte [eax + 0x2c], 4
jne 0x5247a1
sub ecx, 0x60
sub edx, 1
jns 0x524770
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 0x20]
cmp dword [edi + 0x70], ecx
jg 0x5247b2
push 0
push edx
push 0
push 9
push edi
call fcn.004dd7e0
add esp, 0x14
jmp 0x5247e8
push dword [ecx + 0x308]
push edi
call fcn.00535260
add esp, 8
jmp 0x5247e8
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
push esi
call fcn.0053d6f0
push ebp
push ebx
call fcn.004d76d0
add esp, 0xc
mov ebp, dword [esp + 0x60]
push 0x10
push ebp
push dword [esp + 0x58]
mov dword [esp + 0xd4], 0
push ebx
call fcn.00508ec0
mov esi, dword [esp + 0x10c]
push ebp
push ebp
push dword [esp + 0x118]
push 0
push 0
push 0xffffffffffffffff
push esi
push ebx
call fcn.004f4e70
add esp, 0x30
mov ecx, dword [edi + 0xc]
not ebp
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x52484e
push ebp
push edi
push ecx
call fcn.004f1810
add esp, 0xc
jmp 0x524857
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + ebp*4], eax
mov ebp, dword [esp + 0x100]
mov eax, dword [esp + 0x4c]
cmp al, 3
jne 0x52487b
push str.DISTINCT
push str.USE_TEMP_B_TREE_FOR__s
push 0
push ebx
call fcn.00534ed0
add esp, 0x10
cmp dword [esp + 0xc8], 0
je 0x52489e
mov eax, dword [esp + 0x30]
push ebp
push dword [eax]
lea eax, [esp + 0xd0]
push eax
push esi
push ebx
call fcn.004dbbf0
add esp, 0x14
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0xf0]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x5248bf
push edx
push edi
push ecx
call fcn.004f1810
add esp, 0xc
jmp 0x5248c8
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
xor eax, eax
cmp dword [ebx + 0x24], eax
setg al
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x9c]
test eax, eax
je 0x5219a8
push eax
push ecx
call fcn.004d6580
add esp, 8
jmp 0x5219a8
mov esi, dword [ebx + 8]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x52491e
pop esi
mov eax, 0x7937a8
pop edi
pop ebp
mov eax, dword [eax + 8]
mov dword [ebx + 0xe4], eax
mov eax, dword [esp + 0x5c]
pop ebx
add esp, 0xe4
ret
lea edx, [ecx + ecx*4]
mov ecx, dword [esi + 0x68]
pop esi
pop edi
pop ebp
lea eax, [ecx + edx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xe4], eax
mov eax, dword [esp + 0x5c]
pop ebx
add esp, 0xe4
ret
pop edi
pop ebp
mov eax, 1
pop ebx
add esp, 0xe4
ret