Function at 0x4bd1c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xe4
push ebx
mov ebx, dword [esp + 0xec]
push ebp
push edi
mov dword [esp + 0x5c], 1
mov edi, dword [ebx + 8]
mov eax, dword [ebx]
mov dword [esp + 0x98], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x50], edi
test edi, edi
jne 0x4bd215
cmp dword [ebx + 0x80], edi
jne 0x4bd206
test byte [eax + 0x50], 8
jne 0x4bd206
mov byte [ebx + 0x17], 1
push ebx
call fcn.004c7580
add esp, 4
mov dword [esp + 0x50], eax
mov edi, eax
mov ebp, dword [esp + 0xf8]
test ebp, ebp
je 0x4c0388
cmp dword [ebx + 0x24], 0
jne 0x4c0388
push 0
push 0
push 0
push 0x15
push ebx
call fcn.00493a60
add esp, 0x14
test eax, eax
jne 0x4c0388
mov eax, dword [esp + 0xfc]
cmp byte [eax], 6
ja 0x4bd27e
mov eax, dword [ebp + 0x30]
test eax, eax
je 0x4bd270
push eax
push 0x4a4f70
push ebx
call fcn.004b4b40
add esp, 0xc
mov dword [ebp + 0x30], 0
mov eax, dword [ebp + 4]
and eax, 0xfffffffe
or eax, 0x400000
mov dword [ebp + 4], eax
push esi
push 0
push ebp
push ebx
call fcn.004c07a0
add esp, 0xc
cmp dword [ebx + 0x24], 0
jne 0x4bd2cb
mov esi, dword [ebp + 4]
test esi, 0x800000
je 0x4bd300
mov eax, dword [ebp + 0x20]
push eax
lea ebp, [eax + 8]
push ebp
call fcn.0048dc00
add esp, 8
test eax, eax
je 0x4bd2f0
mov eax, dword [ebp + 0xc]
test eax, eax
jne 0x4bd2bc
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
push eax
push str.target_object_alias_may_not_appear_in_FROM_clause:__s
push ebx
call fcn.0049fe60
add esp, 0xc
mov ecx, dword [ebx + 0xe8]
test ecx, ecx
jne 0x4c033f
pop esi
pop edi
xor eax, eax
mov dword [ebx + 0xe8], eax
mov eax, dword [esp + 0x58]
pop ebp
pop ebx
add esp, 0xe4
ret
mov ebp, dword [esp + 0xfc]
and esi, 0xff7fffff
mov dword [ebp + 4], esi
mov eax, dword [esp + 0x100]
cmp byte [eax], 9
jne 0x4bd316
push ebp
push ebx
call fcn.004a98f0
add esp, 8
push ebp
push ebx
call fcn.004ddb70
add esp, 8
test eax, eax
jne 0x4bd2cb
mov eax, dword [ebp + 4]
xorps xmm0, xmm0
mov esi, dword [ebp + 0x20]
xor ecx, ecx
shr eax, 3
and eax, 1
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], eax
mov eax, dword [ebp + 0x30]
movups xmmword [esp + 0xc8], xmm0
mov dword [esp + 0x1c], eax
movups xmmword [esp + 0xd8], xmm0
mov dword [esp + 0xc8], eax
movq qword [esp + 0xe8], xmm0
mov dword [esp + 0x10], ecx
cmp dword [ebp + 0x34], ecx
jne 0x4bd646
cmp ecx, dword [esi]
jge 0x4bd690
lea eax, [ecx + ecx*8]
mov edx, dword [esi + eax*8 + 0x18]
lea ebp, [esi + eax*8]
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x24], edx
mov dl, byte [ebp + 0x2c]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x38], eax
test dl, 0x48
je 0x4bd4ac
movzx eax, dl
and eax, 0x40
push eax
mov eax, dword [esp + 0x100]
push dword [ebp + 0x34]
push dword [eax + 0x24]
call fcn.004a4890
add esp, 0xc
test eax, eax
je 0x4bd4a4
mov eax, dword [esp + 0x18]
test dword [eax + 0x50], 0x2000
jne 0x4bd4a4
mov al, byte [ebp + 0x2c]
test al, 8
je 0x4bd404
test al, 0x10
je 0x4bd3e5
and al, 0xf7
mov byte [ebp + 0x2c], al
jmp 0x4bd404
and al, 0xd7
mov byte [ebp + 0x2c], al
mov eax, dword [esp + 0xfc]
push 0
push dword [ebp + 0x34]
push dword [eax + 0x24]
call fcn.004e02b0
mov al, byte [ebp + 0x2c]
add esp, 0xc
mov ecx, dword [esp + 0x10]
test al, 0x40
je 0x4bd4a8
mov edx, dword [esi]
lea ebp, [ecx + 1]
cmp ebp, edx
jge 0x4bd474
mov ebx, dword [esp + 0x44]
lea eax, [ebp*8]
mov edi, dword [esp + 0xfc]
add eax, ebp
lea esi, [esi + eax*8]
add esi, 0x2c
mov al, byte [esi]
test al, 0x10
je 0x4bd457
test al, 8
je 0x4bd443
and al, 0xef
mov byte [esi], al
jmp 0x4bd457
push 1
push dword [esi + 8]
and al, 0xcf
mov byte [esi], al
push dword [edi + 0x24]
call fcn.004e02b0
add esp, 0xc
mov edx, dword [ebx]
inc ebp
add esi, 0x48
cmp ebp, edx
jl 0x4bd433
mov edi, dword [esp + 0x54]
mov ebx, dword [esp + 0xf8]
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x10]
add edx, 0xffffffff
js 0x4bd564
lea eax, [edx + edx*8]
lea ecx, [eax*8 + 0x2c]
add ecx, esi
nop dword [eax]
and byte [ecx], 0xbf
test byte [ecx], 0x10
jne 0x4bd4a0
sub ecx, 0x48
sub edx, 1
jns 0x4bd490
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x38]
test eax, eax
je 0x4bd630
mov edx, dword [esp + 0x24]
mov eax, dword [eax + 0x1c]
movsx edx, word [edx + 0x22]
mov eax, dword [eax]
cmp edx, eax
jne 0x4bd675
test dword [ebp + 0x30], 0x100
je 0x4bd4df
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x12], 0
je 0x4bd630
mov eax, dword [esp + 0x38]
mov edx, dword [eax + 4]
test dl, 8
jne 0x4bd630
mov ebp, dword [eax + 0x30]
test ebp, ebp
je 0x4bd5ab
mov edi, dword [esp + 0xfc]
cmp dword [edi + 0x30], 0
mov edi, dword [esp + 0x54]
jne 0x4bd514
cmp dword [esi], 1
jle 0x4bd60f
cmp dword [eax + 0x3c], 0
jne 0x4bd60f
test edx, 0x8000000
jne 0x4bd60f
mov eax, dword [esp + 0xfc]
test dword [eax + 4], 0x8000000
jne 0x4bd60f
mov eax, dword [esp + 0x18]
test dword [eax + 0x50], 0x40000
jne 0x4bd60f
mov eax, dword [ebx]
push 0
push 0xc
test eax, eax
je 0x4bd56d
push eax
call fcn.0049db10
add esp, 0xc
jmp 0x4bd575
mov ebp, dword [esp + 0x14]
jmp 0x4bd4a8
call fcn.004b17f0
add esp, 8
mov ecx, eax
test ecx, ecx
je 0x4bd595
mov eax, dword [ebx + 0x8c]
mov dword [ecx], eax
mov dword [ebx + 0x8c], ecx
mov dword [ecx + 4], ebp
mov dword [ecx + 8], 0x4a4f70
jmp 0x4bd5a0
push ebp
push dword [ebx]
call fcn.0046e100
add esp, 8
mov eax, dword [esp + 0x38]
mov dword [eax + 0x30], 0
mov ebp, dword [esp + 0xfc]
push dword [esp + 0x48]
mov eax, dword [esp + 0x14]
push eax
push ebp
push ebx
call fcn.00472200
add esp, 0x10
test eax, eax
je 0x4bd5da
cmp dword [ebx + 0x24], 0
jne 0x4bd2cb
or eax, 0xffffffff
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
mov esi, dword [ebp + 0x20]
mov dword [esp + 0x44], esi
cmp byte [eax + 0x57], 0
jne 0x4bd2cb
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x10]
cmp byte [eax], 8
jbe 0x4bd637
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x1c], eax
mov dword [esp + 0xc8], eax
jmp 0x4bd637
test ecx, ecx
jne 0x4bd5ab
mov ebp, dword [esp + 0xfc]
test dword [ebp + 4], 0x40000
je 0x4bd5b2
cmp dword [esi], 1
je 0x4bd637
test byte [esi + 0x74], 0x22
jne 0x4bd637
jmp 0x4bd5b2
mov ebp, dword [esp + 0xfc]
inc ecx
cmp dword [ebp + 0x34], 0
mov dword [esp + 0x10], ecx
je 0x4bd371
push dword [esp + 0x100]
push ebp
push ebx
call fcn.00480670
add esp, 0xc
mov esi, eax
cmp dword [ebp + 0x38], 0
jne 0x4bd668
push ebx
call fcn.004d08d0
add esp, 4
mov eax, esi
pop esi
pop edi
pop ebp
pop ebx
add esp, 0xe4
ret
push eax
mov eax, dword [esp + 0x28]
push dword [eax]
push edx
push str.expected__d_columns_for__s_but_got__d
push ebx
call fcn.0049fe60
add esp, 0x14
jmp 0x4bd2cb
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x10], esi
test eax, eax
je 0x4bd871
cmp byte [eax], 0x2c
mov dword [esp + 0x10], esi
jne 0x4bd871
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], esi
test dword [eax + 0x50], 0x8000
jne 0x4bd871
mov eax, dword [ebx]
add eax, 0x57
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x10], esi
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x88], 0
test eax, eax
je 0x4bd71b
cmp dword [eax], 0
jle 0x4bd71b
test byte [eax + 0x2c], 0x40
mov dword [esp + 0x8c], 3
jne 0x4bd726
mov dword [esp + 0x8c], 1
push dword [ebp + 0x24]
lea eax, [esp + 0x7c]
push eax
call fcn.0046f770
add esp, 8
cmp dword [esp + 0x80], 0
je 0x4bd863
lea eax, [esp + 0x78]
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], 0x4883f0
mov dword [esp + 0xa8], fcn.00407f70
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
test eax, eax
je 0x4bd7a5
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.004d5e10
add esp, 8
mov eax, dword [esp + 0x78]
mov esi, dword [esp + 0x90]
mov ecx, dword [eax]
test esi, esi
je 0x4bd863
test ecx, ecx
je 0x4bd80e
cmp esi, dword [ecx + 0x164]
jae 0x4bd7f9
cmp esi, dword [ecx + 0x15c]
jb 0x4bd7e1
mov eax, dword [ecx + 0x158]
mov dword [esi], eax
mov dword [ecx + 0x158], esi
jmp 0x4bd863
cmp esi, dword [ecx + 0x160]
jb 0x4bd7f9
mov eax, dword [ecx + 0x150]
mov dword [esi], eax
mov dword [ecx + 0x150], esi
jmp 0x4bd863
cmp dword [ecx + 0x210], 0
je 0x4bd80e
push esi
push ecx
call fcn.0047fe10
add esp, 8
jmp 0x4bd863
cmp dword [0x56f0f8], 0
je 0x4bd859
mov eax, dword [0x574ff8]
test eax, eax
je 0x4bd82a
push eax
call dword [0x56f148]
add esp, 4
push esi
call dword [0x56f124]
sub dword [0x574f98], eax
dec dword [0x574fbc]
push esi
call dword [0x56f11c]
mov eax, dword [0x574ff8]
add esp, 8
test eax, eax
je 0x4bd863
push eax
call dword [0x56f150]
jmp 0x4bd860
push esi
call dword [0x56f11c]
add esp, 4
cmp dword [esp + 0x84], 0
jne 0x4bd6d2
mov esi, dword [esp + 0x18]
test dword [esi + 0x50], 0x201
jne 0x4bd89f
push ebp
push ebx
call fcn.004690d0
add esp, 8
test eax, eax
je 0x4bd89f
cmp byte [esi + 0x57], 0
jne 0x4bd2cb
mov ecx, dword [ebp + 0x20]
mov dword [esp + 0x10], ecx
jmp 0x4bd8a3
mov ecx, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x28], eax
cmp dword [ecx], eax
jle 0x4be0d8
lea eax, [eax + eax*8]
lea eax, [eax + 1]
lea esi, [ecx + eax*8]
mov eax, dword [esi + 0x38]
or eax, dword [esi + 0x3c]
jne 0x4bd8e1
mov eax, dword [esi + 8]
test eax, eax
je 0x4bd8e1
push dword [esi + 4]
push 0x5461cf
push eax
push 0x14
push ebx
call fcn.00493a60
mov ecx, dword [esp + 0x24]
add esp, 0x14
mov eax, dword [esi + 0x14]
mov dword [esp + 0x34], eax
test eax, eax
je 0x4be0c7
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
push eax
push ebp
call fcn.00475e60
mov eax, dword [esp + 0x1c]
add esp, 8
add dword [ebx + 0xe4], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x50]
mov eax, ecx
test ecx, 0x1000
jne 0x4bd957
test dword [esi + 0x28], 0x100
je 0x4bd938
mov edx, dword [esi + 0x44]
cmp byte [edx + 0x12], 0
je 0x4bd957
cmp dword [edx], 2
jge 0x4bd957
push dword [esp + 0x28]
push dword [esp + 0x14]
push dword [ebp + 0x24]
push dword [esp + 0x40]
push ebx
call fcn.004887f0
mov eax, dword [esp + 0x2c]
add esp, 0x14
mov eax, dword [eax + 0x50]
test eax, 0x4000000
jne 0x4bdaad
test dword [esi + 0x28], 0x108
jne 0x4bdaad
mov edx, dword [esi + 0x14]
mov eax, edx
mov dword [esp + 0x24], edx
test edx, edx
je 0x4bd9aa
nop dword [eax]
test byte [eax + 4], 9
jne 0x4bdaad
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x4bd99a
cmp byte [eax], 0x87
jne 0x4bdaad
cmp dword [eax + 0x44], 0
jne 0x4bdaad
mov eax, ecx
test eax, eax
jne 0x4bd980
mov ebp, dword [edx + 0x30]
mov eax, dword [esi + 0x38]
mov ecx, dword [esi + 0x3c]
mov dword [esp + 0x50], eax
mov dword [esp + 0x44], ecx
test ebp, ebp
je 0x4bda1d
mov ecx, dword [ebp]
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x4bda1d
add ebp, 0x18
nop dword [eax]
movzx eax, word [ebp]
test ax, ax
je 0x4bda0d
add eax, 0xffff
mov edx, 0x3f
cmp ax, 0x40
jae 0x4bd9ec
movzx edx, ax
xor eax, eax
xor ecx, ecx
bts eax, edx
cmp edx, 0x20
cmovae ecx, eax
xor eax, ecx
cmp edx, 0x40
cmovae ecx, eax
or dword [esp + 0x50], eax
or dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x14]
add ebp, 0x14
sub ecx, 1
mov dword [esp + 0x14], ecx
jne 0x4bd9d0
mov eax, dword [esp + 0x50]
mov ecx, dword [esi + 0x10]
movsx ecx, word [ecx + 0x22]
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x4bdaad
mov edi, dword [esp + 0x24]
xor ebp, ebp
mov ebx, ebp
xor ecx, ecx
cmp ebx, 0x3f
jae 0x4bda5a
mov eax, ebx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
mov eax, dword [esp + 0x50]
cmovae edx, ecx
jmp 0x4bda5f
mov edx, 0x80000000
and edx, dword [esp + 0x44]
and ecx, eax
or ecx, edx
jne 0x4bda98
mov eax, edi
nop dword [eax + eax]
mov ecx, dword [eax + 0x1c]
mov ecx, dword [ecx + ebp + 8]
cmp byte [ecx], 0x79
je 0x4bda8d
and dword [ecx + 4], 0xfff7dfff
mov byte [ecx], 0x79
or dword [eax + 4], 0x1000000
mov eax, dword [eax + 0x34]
test eax, eax
jne 0x4bda70
mov eax, dword [esp + 0x50]
inc ebx
add ebp, 0x14
cmp ebx, dword [esp + 0x14]
jl 0x4bda38
mov edi, dword [esp + 0x54]
mov ebx, dword [esp + 0xf8]
mov eax, dword [ebx + 0x104]
mov ecx, dword [esp + 0x28]
mov ebp, ecx
mov dword [esp + 0x44], eax
mov eax, dword [esi + 8]
mov dword [ebx + 0x104], eax
test dword [esi + 0x28], 0x100
je 0x4bdaef
mov eax, dword [esi + 0x44]
mov cl, byte [eax + 0x12]
test cl, cl
je 0x4bdba3
cmp dword [eax], 2
jl 0x4bdaeb
cmp cl, 2
jne 0x4bdba3
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x10]
test byte [edx + 0x2c], 0x40
jne 0x4bdba3
mov eax, dword [ebx]
test dword [eax + 0x50], 0x2000000
jne 0x4bdba3
push dword [edx]
lea eax, [ecx + 1]
push eax
push esi
push edx
call fcn.00477b90
add esp, 0x10
test eax, eax
jne 0x4bdba3
cmp dword [esp + 0x28], eax
jne 0x4bdb76
mov edx, dword [esp + 0x10]
cmp dword [edx], 1
je 0x4bdb49
test byte [edx + 0x74], 2
jne 0x4bdb49
mov ecx, dword [esp + 0xfc]
test dword [ecx + 4], 0x10000000
jne 0x4bdba3
mov ebp, dword [edi + 0x6c]
inc dword [ebx + 0x2c]
inc ebp
mov edx, dword [ebx + 0x2c]
mov dword [esi + 0x1c], edx
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bdbe5
push ebp
push 0
push edx
push 0xb
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bdc17
mov ecx, dword [esp + 0xfc]
test dword [ecx + 4], 0x10000000
jne 0x4bdba3
test byte [esi + 0x24], 0x22
lea eax, [esi + 0x24]
jne 0x4bdba3
nop
test ebp, ebp
je 0x4bdb49
sub eax, 0x48
dec ebp
cmp dword [eax - 0x10], 0
jne 0x4bdba3
test byte [eax], 0x22
je 0x4bdb90
test dword [esi + 0x28], 0x100
je 0x4bdd92
mov ebp, dword [esi + 0x44]
mov edx, dword [ebp + 4]
test edx, edx
jle 0x4bdd92
mov ecx, dword [edi + 0x6c]
mov eax, dword [ebp + 8]
mov dword [esp + 0x2c], eax
cmp dword [edi + 0x70], ecx
jg 0x4bdce7
push 0
push edx
push eax
push 0xa
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bdd1d
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], ebp
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x1c]
push esi
push str.CO_ROUTINE___S
push 1
push ebx
mov dword [esi + 0x18], ebp
mov byte [esp + 0x88], 0xd
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
call fcn.004d0870
lea eax, [esp + 0x88]
push eax
push dword [esp + 0x48]
push ebx
call fcn.004bd1c0
mov eax, dword [esp + 0x50]
mov ecx, dword [esi + 0x10]
mov ax, word [eax + 2]
mov word [ecx + 0x26], ax
push dword [esi + 0x1c]
mov eax, dword [esp + 0xa4]
or dword [esi + 0x28], 0x20
push edi
mov dword [esi + 0x20], eax
call fcn.004c7ad0
mov eax, dword [edi]
add esp, 0x24
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4bdcc3
mov eax, 0x5751d8
mov dword [eax], edx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
jmp 0x4be084
mov eax, dword [edi + 0x68]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
add eax, 0xfffffff4
mov dword [eax], edx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
jmp 0x4be084
mov ebx, dword [esp + 0x2c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp + 0xc]
mov esi, dword [esi + 0x2c]
cmp esi, edx
je 0x4bdd81
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bdd4f
push 0
push edx
push esi
push 0x73
push edi
call fcn.00475980
mov ecx, dword [esp + 0x48]
add esp, 0x14
mov ax, word [ebp + 0x10]
mov word [ecx + 2], ax
jmp 0x4be084
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x34]
mov ax, word [ebp + 0x10]
mov word [ecx + 2], ax
jmp 0x4be084
push dword [esp + 0x28]
push 0
push esi
push dword [esp + 0x1c]
call fcn.00477b90
mov ebp, eax
add esp, 0x10
test ebp, ebp
je 0x4bde83
mov edx, dword [ebp + 0x18]
test edx, edx
je 0x4bde0c
mov ecx, dword [edi + 0x6c]
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x2c], eax
cmp dword [edi + 0x70], ecx
jg 0x4bddd6
push 0
push edx
push eax
push 0xa
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bde0c
mov ebx, dword [esp + 0x2c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 0x2c]
mov esi, dword [esi + 0x2c]
cmp dword [edi + 0x70], ecx
jg 0x4bde3d
push 0
push edx
push esi
push 0x73
push edi
call fcn.00475980
mov eax, dword [ebp + 0x14]
add esp, 0x14
mov ecx, dword [esp + 0x34]
mov ax, word [eax + 2]
mov word [ecx + 2], ax
jmp 0x4be084
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x73
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x34]
mov ax, word [eax + 2]
mov word [ecx + 2], ax
jmp 0x4be084
inc dword [ebx + 0x2c]
xor ebp, ebp
mov eax, dword [ebx + 0x2c]
mov dword [esi + 0x1c], eax
mov edx, dword [edi + 0x6c]
mov dword [esp + 0x24], edx
cmp dword [edi + 0x70], edx
jg 0x4bdeb0
push ebp
push ebp
push ebp
push 9
push edi
call fcn.00475980
mov edx, eax
add esp, 0x14
mov dword [esp + 0x24], edx
jmp 0x4bdeda
mov ebx, dword [esp + 0xf8]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], ebp
mov dword [eax + ecx*4 + 0x10], ebp
or dword [esi + 0x28], 0x10
lea eax, [edx + 1]
test byte [esi + 0x28], 8
mov dword [esp + 0x14], eax
mov dword [esi + 0x18], eax
jne 0x4bdf44
mov ebp, dword [edi + 0x6c]
cmp dword [edi + 0x70], ebp
jg 0x4bdf0b
push 0
push 0
push 0
push 0xf
push edi
call fcn.00475980
add esp, 0x14
mov ebp, eax
jmp 0x4bdf44
lea eax, [ebp + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebp*4]
mov eax, dword [edi + 0x68]
add ecx, ebp
mov dword [eax + ecx*4], 0xf
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x2c]
push esi
push str.MATERIALIZE___S
push 1
push ebx
mov byte [esp + 0x88], 0xc
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
call fcn.004d0870
lea eax, [esp + 0x88]
push eax
push dword [esp + 0x48]
push ebx
call fcn.004bd1c0
mov eax, dword [esp + 0x50]
add esp, 0x1c
mov ecx, dword [esi + 0x10]
mov ax, word [eax + 2]
mov word [ecx + 0x26], ax
test ebp, ebp
je 0x4bdfdc
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4bdfca
mov eax, 0x5751d0
jmp 0x4bdfd9
mov eax, dword [edi + 0x68]
lea ecx, [ebp*4]
add ecx, ebp
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 0x1c]
mov ebp, dword [esp + 0x14]
cmp dword [edi + 0x70], ecx
jg 0x4bdffc
push 0
push ebp
push edx
push 0x43
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4be027
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], ebp
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4be039
mov eax, 0x5751d0
jmp 0x4be046
mov eax, dword [esp + 0x24]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov byte [ebx + 0x13], 0
mov dword [ebx + 0x1c], 0
mov eax, dword [esi + 0x28]
and eax, 0x108
cmp eax, 0x100
jne 0x4be084
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x18]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0x1c]
mov dword [ecx + 8], eax
mov eax, dword [esi + 0x2c]
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x34]
mov ax, word [eax + 2]
mov word [ecx + 0x10], ax
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x57], 0
jne 0x4bd2cb
mov ebp, dword [esp + 0xfc]
lea eax, [esp + 0x14]
push eax
push ebp
mov dword [esp + 0x1c], 0
call fcn.00475e60
mov eax, dword [esp + 0x1c]
add esp, 8
sub dword [ebx + 0xe4], eax
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x10]
mov dword [ebx + 0x104], eax
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
cmp eax, dword [ecx]
jl 0x4bd8b1
mov eax, dword [ebp + 0x24]
mov cl, byte [ebp + 4]
mov esi, dword [ebp + 0x1c]
and cl, 1
mov dword [esp + 0x40], eax
mov eax, dword [ebp + 0x28]
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x74], eax
mov eax, dword [ebp + 4]
and al, 9
mov dword [esp + 0x44], esi
mov byte [esp + 0x23], cl
mov byte [esp + 0xbc], cl
cmp al, 1
jne 0x4be153
mov ecx, dword [esp + 0x1c]
push 0xffffffffffffffff
push esi
push ecx
call fcn.004a4ef0
add esp, 0xc
test eax, eax
jne 0x4be153
cmp dword [ebp + 0x44], eax
jne 0x4be153
and dword [ebp + 4], 0xfffffffe
push eax
push esi
push dword [esp + 0x20]
call fcn.004a4f90
mov ecx, eax
add esp, 0xc
or dword [ebp + 4], 8
mov al, 2
mov dword [esp + 0x30], ecx
mov dword [ebp + 0x28], ecx
mov byte [esp + 0x23], al
mov byte [esp + 0xbc], al
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4be19e
push dword [esi]
push 0
push eax
push ebx
call fcn.004b0190
mov edx, dword [ebx + 0x28]
mov ecx, eax
push 0xfffffffffffffff8
push ecx
mov ecx, dword [esp + 0x34]
lea eax, [edx + 1]
mov dword [esp + 0xe8], edx
mov dword [ebx + 0x28], eax
mov eax, dword [esi]
mov ecx, dword [ecx]
push 0
inc ecx
add eax, ecx
push eax
push edx
push 0x76
push edi
call fcn.004c6e50
add esp, 0x2c
mov dword [esp + 0xdc], eax
jmp 0x4be1a9
mov dword [esp + 0xdc], 0xffffffff
mov eax, dword [esp + 0x100]
cmp byte [eax], 0xc
jne 0x4be25a
push dword [esi]
push dword [eax + 4]
push 0x76
push edi
call fcn.004c6d90
add esp, 0x10
test dword [ebp + 4], 0x800
je 0x4be25a
mov ecx, dword [esi]
lea ebp, [ecx - 1]
test ebp, ebp
jle 0x4be235
mov ebx, dword [esp + 0x18]
lea eax, [ebp*4]
add eax, ebp
lea esi, [esi + eax*4]
add esi, 8
test byte [esi + 0xc], 0x40
jne 0x4be22a
mov eax, dword [esi]
test eax, eax
je 0x4be208
push eax
push ebx
call fcn.004a3d70
add esp, 8
mov eax, dword [esi + 4]
test eax, eax
je 0x4be219
push eax
push ebx
call fcn.0049da00
add esp, 8
mov edx, dword [esp + 0x44]
dec ebp
sub esi, 0x14
mov ecx, dword [edx]
dec ecx
mov dword [edx], ecx
test ebp, ebp
jg 0x4be1f2
mov ebx, dword [esp + 0xf8]
mov esi, dword [esp + 0x44]
xor edx, edx
test ecx, ecx
jle 0x4be253
lea ecx, [esi + 8]
nop
test byte [ecx + 0xc], 0x40
jne 0x4be24b
mov eax, dword [ecx]
mov byte [eax], 0x79
inc edx
add ecx, 0x14
cmp edx, dword [esi]
jl 0x4be240
mov ebp, dword [esp + 0xfc]
dec dword [ebx + 0x38]
test dword [ebp + 4], 0x4000
mov eax, dword [ebx + 0x38]
mov dword [esp + 0xf0], eax
jne 0x4be279
mov ecx, 0x140
mov word [ebp + 2], cx
cmp dword [ebp + 0x3c], 0
je 0x4be28a
push eax
push ebp
push ebx
call fcn.004671c0
add esp, 0xc
cmp dword [ebp + 8], 0
jne 0x4be2be
mov ecx, dword [esp + 0xdc]
test ecx, ecx
js 0x4be2be
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4be2aa
mov eax, 0x5751d0
jmp 0x4be2b3
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
or byte [esp + 0xe8], 1
mov byte [eax], 0x77
test byte [ebp + 4], 1
je 0x4be319
mov esi, dword [ebx + 0x28]
push 0xfffffffffffffff8
push 0
push 0
lea eax, [esi + 1]
mov dword [esp + 0xcc], esi
mov dword [ebx + 0x28], eax
push dword [ebp + 0x1c]
push ebx
call fcn.004b0190
add esp, 0x10
push eax
push 0
push 0
push esi
push 0x76
push edi
call fcn.004c6e50
mov dword [esp + 0xe0], eax
add esp, 0x1c
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x4be315
lea ecx, [eax + eax*4]
mov edx, 8
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov al, 3
jmp 0x4be31b
xor al, al
cmp dword [esp + 0x48], 0
mov edx, dword [esp + 0x30]
mov byte [esp + 0xbd], al
mov dword [esp + 0x50], eax
jne 0x4be5a3
test edx, edx
jne 0x4be5a3
xor ecx, ecx
mov eax, 0x100
cmp byte [esp + 0x23], cl
mov edx, 0x4000
cmovne ecx, eax
mov ax, word [ebp + 4]
mov ebp, dword [ebp + 0x44]
and ax, dx
or cx, ax
movzx esi, cx
test ebp, ebp
je 0x4be374
push dword [esp + 0xfc]
push ebx
call fcn.004dbb10
add esp, 8
mov ecx, dword [esp + 0xfc]
movsx eax, word [ecx + 2]
push eax
push esi
push ecx
push dword [ecx + 0x1c]
push dword [esp + 0x2c]
push dword [esp + 0x54]
push dword [esp + 0x28]
push ebx
call fcn.004d61c0
mov esi, eax
add esp, 0x20
test esi, esi
je 0x4bd2cb
mov edx, dword [esp + 0xfc]
movzx eax, word [esi + 0x34]
cmp ax, word [edx + 2]
jge 0x4be3b9
mov word [edx + 2], ax
cmp byte [esp + 0x23], 0
je 0x4be3e5
mov eax, dword [esp + 0x50]
mov cl, byte [esi + 0x2f]
movzx eax, al
test cl, cl
mov dword [esp + 0x50], eax
movzx eax, cl
mov ecx, dword [esp + 0x50]
cmovne ecx, eax
mov dword [esp + 0x50], ecx
mov byte [esp + 0xbd], cl
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x4be44f
mov al, byte [esi + 0x2d]
test al, al
jns 0x4be3f8
xor ecx, ecx
jmp 0x4be3fb
movsx ecx, al
test byte [esi + 0x30], 4
mov dword [esp + 0xcc], ecx
jne 0x4be40d
mov eax, dword [esi + 0x1c]
jmp 0x4be42d
movzx eax, byte [esi + 0x2c]
lea eax, [eax + eax*2]
shl eax, 5
cmp dword [eax + esi + 0x2d0], 0
je 0x4be426
mov eax, dword [esi + 0x1c]
jmp 0x4be42d
mov eax, dword [eax + esi + 0x2a8]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x1c]
cmp ecx, dword [eax]
mov ecx, 0
cmove eax, ecx
mov dword [esp + 0x1c], eax
mov ecx, eax
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xdc]
test eax, eax
js 0x4be46f
test ecx, ecx
jne 0x4be46f
push eax
push edi
call fcn.004c72d0
mov edx, dword [esp + 0x104]
add esp, 8
test ebp, ebp
je 0x4be56e
mov ebp, dword [ebx + 0x38]
inc dword [ebx + 0x2c]
lea ecx, [ebp - 1]
sub ebp, 2
push ecx
mov dword [esp + 0x18], ecx
lea eax, [ebp - 1]
mov dword [esp + 0x30], eax
mov dword [ebx + 0x38], eax
mov eax, dword [ebx + 0x2c]
push eax
push esi
push edx
push ebx
mov dword [esp + 0x38], eax
call fcn.004dbf60
mov esi, dword [esp + 0x40]
push esi
push 0
push 9
push edi
call fcn.004c6d90
mov ecx, dword [edi + 0xc]
add esp, 0x24
mov edx, dword [esp + 0x14]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4be4d2
push edx
push edi
push ecx
call fcn.0048b850
add esp, 0xc
jmp 0x4be4db
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
push esi
push ebp
push dword [esp + 0x108]
lea eax, [esp + 0xc8]
mov dword [esp + 0xf0], 0
push eax
lea eax, [esp + 0xd8]
push eax
push 0xffffffffffffffff
push dword [esp + 0x114]
push ebx
call fcn.0048ef60
mov ecx, dword [edi + 0xc]
add esp, 0x20
not ebp
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4be52b
push ebp
push edi
push ecx
call fcn.0048b850
add esp, 0xc
jmp 0x4be534
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + ebp*4], eax
push dword [esp + 0x24]
push 0x43
push edi
call fcn.004c6d30
mov ecx, dword [edi + 0xc]
add esp, 0xc
not esi
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4be560
push esi
push edi
push ecx
call fcn.0048b850
add esp, 0xc
jmp 0x4c029a
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + esi*4], eax
jmp 0x4c029a
push dword [esi + 0x20]
mov ebp, dword [esp + 0x104]
lea eax, [esp + 0xc0]
push dword [esi + 0x1c]
push ebp
push eax
lea eax, [esp + 0xd8]
push eax
push 0xffffffffffffffff
push edx
push ebx
call fcn.0048ef60
push esi
call fcn.004d98d0
add esp, 0x24
jmp 0x4c02a1
mov dword [esp + 0x4c], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x48], 0
test edx, edx
je 0x4be6a5
mov ecx, dword [ebp + 0x1c]
mov eax, dword [ecx]
test eax, eax
jle 0x4be5de
add ecx, 0x1a
nop
xor esi, esi
lea ecx, [ecx + 0x14]
dec eax
mov word [ecx - 0x14], si
test eax, eax
jg 0x4be5d0
mov eax, dword [edx]
lea ecx, [edx + 8]
mov dword [esp + 0x3c], ecx
test eax, eax
jle 0x4be5fe
add ecx, 0x12
nop
xor edx, edx
lea ecx, [ecx + 0x14]
dec eax
mov word [ecx - 0x14], dx
test eax, eax
jg 0x4be5f0
cmp word [ebp + 2], 0x42
jle 0x4be60e
mov eax, 0x42
mov word [ebp + 2], ax
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x4be6ab
mov ebp, dword [esp + 0x30]
mov eax, dword [ebp]
cmp eax, dword [ecx]
jne 0x4be6ab
xor edx, edx
test eax, eax
jle 0x4be64f
mov esi, dword [esp + 0x1c]
lea ecx, [ebp + 0x10]
sub esi, ebp
mov al, byte [esi + ecx]
lea ecx, [ecx + 0x14]
and al, 1
inc edx
mov byte [ecx - 0x14], al
mov eax, dword [ebp]
cmp edx, eax
jl 0x4be638
mov ecx, dword [esp + 0x1c]
cmp eax, dword [ecx]
jne 0x4be6ab
xor ebp, ebp
test eax, eax
jle 0x4be69b
mov eax, dword [esp + 0x30]
lea esi, [ecx + 0x10]
sub eax, ecx
mov dword [esp + 0x2c], eax
mov al, byte [eax + esi]
cmp al, byte [esi]
jne 0x4be6ab
mov eax, dword [esp + 0x3c]
push 0xffffffffffffffff
push dword [esi - 8]
push dword [eax]
push 0
call fcn.004a3880
add esp, 0x10
test eax, eax
jne 0x4be6ab
mov eax, dword [esp + 0x30]
inc ebp
add dword [esp + 0x3c], 0x14
add esi, 0x14
cmp ebp, dword [eax]
mov eax, dword [esp + 0x2c]
jl 0x4be666
mov dword [esp + 0x48], 1
jmp 0x4be6ab
xor eax, eax
mov word [ebp + 2], ax
dec dword [ebx + 0x38]
mov eax, dword [ebx + 0x38]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x34], eax
mov eax, 0x2c
cmp ax, word [esi + 0x134]
jbe 0x4be6e8
cmp dword [esi + 0x130], 0
jne 0x4be6db
inc dword [esi + 0x144]
jmp 0x4be75a
cmp byte [esi + 0x57], 0
je 0x4be75a
xor ebp, ebp
jmp 0x4beaa0
mov ebp, dword [esi + 0x158]
test ebp, ebp
je 0x4be703
mov eax, dword [ebp]
mov dword [esi + 0x158], eax
inc dword [esi + 0x140]
jmp 0x4be773
mov ebp, dword [esi + 0x154]
test ebp, ebp
je 0x4be71e
mov eax, dword [ebp]
mov dword [esi + 0x154], eax
inc dword [esi + 0x140]
jmp 0x4be773
mov ebp, dword [esi + 0x150]
test ebp, ebp
je 0x4be739
mov eax, dword [ebp]
mov dword [esi + 0x150], eax
inc dword [esi + 0x140]
jmp 0x4be773
mov ebp, dword [esi + 0x14c]
test ebp, ebp
je 0x4be754
mov eax, dword [ebp]
inc dword [esi + 0x140]
mov dword [esi + 0x14c], eax
jmp 0x4be773
inc dword [esi + 0x148]
push 0
mov eax, esi
push 0x2c
push eax
call fcn.004699a0
mov ebp, eax
add esp, 0xc
test ebp, ebp
je 0x4beaa0
push 0x2c
push 0
push ebp
call fcn.004fd610
mov ecx, dword [ebx]
add esp, 0xc
test ecx, ecx
je 0x4be842
mov eax, 0xc
cmp ax, word [ecx + 0x134]
jbe 0x4be7c5
cmp dword [ecx + 0x130], 0
jne 0x4be7b8
inc dword [ecx + 0x144]
push 0
push eax
push ecx
call fcn.004699a0
add esp, 0xc
jmp 0x4be84e
cmp byte [ecx + 0x57], 0
je 0x4be833
xor edx, edx
jmp 0x4be850
mov edx, dword [ecx + 0x158]
test edx, edx
je 0x4be7df
mov eax, dword [edx]
mov dword [ecx + 0x158], eax
inc dword [ecx + 0x140]
jmp 0x4be850
mov edx, dword [ecx + 0x154]
test edx, edx
je 0x4be7f9
mov eax, dword [edx]
mov dword [ecx + 0x154], eax
inc dword [ecx + 0x140]
jmp 0x4be850
mov edx, dword [ecx + 0x150]
test edx, edx
je 0x4be813
mov eax, dword [edx]
mov dword [ecx + 0x150], eax
inc dword [ecx + 0x140]
jmp 0x4be850
mov edx, dword [ecx + 0x14c]
test edx, edx
je 0x4be82d
mov eax, dword [edx]
inc dword [ecx + 0x140]
mov dword [ecx + 0x14c], eax
jmp 0x4be850
inc dword [ecx + 0x148]
push 0
push 0xc
push ecx
call fcn.004699a0
add esp, 0xc
jmp 0x4be84e
push 0
push 0xc
call fcn.004b17f0
add esp, 8
mov edx, eax
test edx, edx
je 0x4be871
mov eax, dword [ebx + 0x8c]
mov dword [edx], eax
mov dword [ebx + 0x8c], edx
mov dword [edx + 4], ebp
mov dword [edx + 8], 0x45c2a0
jmp 0x4beaa0
mov ecx, dword [ebp + 0x14]
mov esi, dword [ebx]
mov dword [esp + 0x14], ecx
test ecx, ecx
je 0x4be932
test esi, esi
je 0x4be8d6
cmp ecx, dword [esi + 0x164]
jae 0x4be8c1
cmp ecx, dword [esi + 0x15c]
jb 0x4be8a9
mov eax, dword [esi + 0x158]
mov dword [ecx], eax
mov dword [esi + 0x158], ecx
jmp 0x4be932
cmp ecx, dword [esi + 0x160]
jb 0x4be8c1
mov eax, dword [esi + 0x150]
mov dword [ecx], eax
mov dword [esi + 0x150], ecx
jmp 0x4be932
cmp dword [esi + 0x210], 0
je 0x4be8d6
push ecx
push esi
call fcn.0047fe10
add esp, 8
jmp 0x4be932
cmp dword [0x56f0f8], 0
je 0x4be928
mov eax, dword [0x574ff8]
test eax, eax
je 0x4be8f6
push eax
call dword [0x56f148]
mov ecx, dword [esp + 0x18]
add esp, 4
push ecx
call dword [0x56f124]
push dword [esp + 0x18]
sub dword [0x574f98], eax
dec dword [0x574fbc]
call dword [0x56f11c]
mov eax, dword [0x574ff8]
add esp, 8
test eax, eax
je 0x4be932
push eax
call dword [0x56f150]
jmp 0x4be92f
push ecx
call dword [0x56f11c]
add esp, 4
mov ecx, dword [ebp + 0x20]
mov dword [esp + 0x14], ecx
test ecx, ecx
je 0x4be9f1
test esi, esi
je 0x4be995
cmp ecx, dword [esi + 0x164]
jae 0x4be980
cmp ecx, dword [esi + 0x15c]
jb 0x4be968
mov eax, dword [esi + 0x158]
mov dword [ecx], eax
mov dword [esi + 0x158], ecx
jmp 0x4be9f5
cmp ecx, dword [esi + 0x160]
jb 0x4be980
mov eax, dword [esi + 0x150]
mov dword [ecx], eax
mov dword [esi + 0x150], ecx
jmp 0x4be9f5
cmp dword [esi + 0x210], 0
je 0x4be995
push ecx
push esi
call fcn.0047fe10
add esp, 8
jmp 0x4be9f5
cmp dword [0x56f0f8], 0
je 0x4be9e7
mov eax, dword [0x574ff8]
test eax, eax
je 0x4be9b5
push eax
call dword [0x56f148]
mov ecx, dword [esp + 0x18]
add esp, 4
push ecx
call dword [0x56f124]
push dword [esp + 0x18]
sub dword [0x574f98], eax
dec dword [0x574fbc]
call dword [0x56f11c]
mov eax, dword [0x574ff8]
add esp, 8
test eax, eax
je 0x4be9f1
push eax
call dword [0x56f150]
jmp 0x4be9ee
push ecx
call dword [0x56f11c]
add esp, 4
test esi, esi
je 0x4bea47
cmp ebp, dword [esi + 0x164]
jae 0x4bea32
cmp ebp, dword [esi + 0x15c]
jb 0x4bea19
mov eax, dword [esi + 0x158]
mov dword [ebp], eax
mov dword [esi + 0x158], ebp
jmp 0x4bea9c
cmp ebp, dword [esi + 0x160]
jb 0x4bea32
mov eax, dword [esi + 0x150]
mov dword [ebp], eax
mov dword [esi + 0x150], ebp
jmp 0x4bea9c
cmp dword [esi + 0x210], 0
je 0x4bea47
push ebp
push esi
call fcn.0047fe10
add esp, 8
jmp 0x4bea9c
cmp dword [0x56f0f8], 0
je 0x4bea92
mov eax, dword [0x574ff8]
test eax, eax
je 0x4bea63
push eax
call dword [0x56f148]
add esp, 4
push ebp
call dword [0x56f124]
sub dword [0x574f98], eax
dec dword [0x574fbc]
push ebp
call dword [0x56f11c]
mov eax, dword [0x574ff8]
add esp, 8
test eax, eax
je 0x4bea9c
push eax
call dword [0x56f150]
jmp 0x4bea99
push ebp
call dword [0x56f11c]
add esp, 4
mov esi, dword [esp + 0x18]
cmp byte [esi + 0x57], 0
jne 0x4bd2cb
mov esi, dword [esp + 0xfc]
xorps xmm0, xmm0
mov ecx, dword [esp + 0x30]
mov eax, dword [esi + 0x10]
mov dword [ebp + 0x28], eax
mov eax, dword [esp + 0x10]
movlpd qword [esp + 0x84], xmm0
movlpd qword [esp + 0x8c], xmm0
movlpd qword [esp + 0x94], xmm0
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ebp
test ecx, ecx
je 0x4beaf4
mov eax, dword [ecx]
jmp 0x4beaf6
xor eax, eax
push dword [esp + 0x44]
mov word [ebp + 2], ax
lea eax, [esp + 0x7c]
push eax
mov dword [ebp + 0x10], ecx
call fcn.004a06f0
push dword [esp + 0x24]
lea eax, [esp + 0x84]
push eax
call fcn.004a06f0
mov ecx, dword [esp + 0x84]
add esp, 0x10
test ecx, ecx
je 0x4bebd9
cmp dword [esp + 0x30], 0
je 0x4beb86
mov eax, dword [esi + 0x2c]
xorps xmm0, xmm0
movlpd qword [esp + 0xa8], xmm0
movlpd qword [esp + 0xb0], xmm0
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], 0x475d30
mov dword [esp + 0xb8], esi
test eax, eax
je 0x4beb7f
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.004d5e10
mov ecx, dword [esp + 0x7c]
add esp, 8
mov eax, dword [esi + 0x24]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x78]
mov dword [esp + 0xa4], 0x45d410
mov dword [esp + 0xb8], eax
lea eax, [esp + 0xa0]
push ecx
push eax
mov dword [esp + 0xb0], 0x4d60d0
mov dword [esp + 0xb4], 0x4d60c0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xa8], 0
call fcn.004d5e10
add esp, 8
mov eax, dword [ebp + 0x18]
mov dword [ebp + 0x1c], eax
cmp dword [esi + 0x28], 0
jne 0x4becbe
cmp dword [esi + 0x2c], 0
jne 0x4becbe
cmp dword [ebp + 0x24], 1
jne 0x4becbe
mov eax, dword [ebp + 0x20]
mov eax, dword [eax]
mov esi, dword [eax + 0x14]
test esi, esi
je 0x4becb7
cmp dword [esi], 1
jne 0x4becb7
test dword [eax + 4], 0x1000000
jne 0x4becb7
mov ecx, dword [esp + 0x18]
test dword [ecx + 0x50], 0x10000
jne 0x4becb7
mov eax, dword [eax + 8]
push 0x5345f8
push eax
mov dword [esp + 0x34], eax
call fcn.004c1f20
add esp, 8
test eax, eax
jne 0x4bec6c
push dword [esi + 8]
call fcn.004a0b90
add esp, 4
mov byte [esp + 0x22], 1
neg eax
sbb al, al
and eax, 0xffffff02
mov dword [esp + 0x14], eax
jmp 0x4bec8b
push 0x5345fc
push dword [esp + 0x30]
call fcn.004c1f20
add esp, 8
test eax, eax
jne 0x4becb7
mov byte [esp + 0x14], 1
mov byte [esp + 0x22], 2
push 0
push esi
push dword [esp + 0x20]
call fcn.004a4f90
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x9c], ecx
test ecx, ecx
je 0x4becae
mov eax, dword [esp + 0x14]
mov byte [ecx + 0x10], al
mov esi, dword [esp + 0xfc]
jmp 0x4becc3
mov esi, dword [esp + 0xfc]
mov byte [esp + 0x22], 0
lea eax, [esp + 0x78]
push eax
push ebp
call fcn.0045d350
mov ecx, dword [esp + 0x20]
add esp, 8
cmp byte [ecx + 0x57], 0
jne 0x4c0321
cmp dword [esp + 0x30], 0
je 0x4bfd46
cmp dword [ebp + 0x24], 1
mov dword [esp + 0x38], 0
mov dword [esp + 0x14], 0
jne 0x4bedcb
mov eax, dword [ebp + 0x20]
cmp dword [eax + 8], 0
jl 0x4bedcb
mov eax, dword [eax]
test eax, eax
je 0x4bedcb
test dword [eax + 4], 0x1000
jne 0x4bedcb
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4bedcb
mov eax, dword [eax + 8]
test eax, eax
je 0x4bed50
push 0
push 0
push eax
push ecx
call fcn.0046d670
mov ecx, dword [esp + 0x28]
add esp, 0x10
mov esi, eax
jmp 0x4bed52
xor esi, esi
push 0
push dword [esp + 0x34]
push ecx
call fcn.004a4f90
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x38], ecx
test ecx, ecx
jne 0x4bed7c
push esi
push dword [ebx]
call fcn.004a4cb0
add esp, 8
mov dword [esp + 0x38], eax
jmp 0x4bedbe
mov eax, dword [ecx]
lea edx, [eax + 1]
cmp dword [ecx + 4], edx
jge 0x4bed98
push esi
push ecx
push dword [ebx]
call fcn.004a4bf0
add esp, 0xc
mov dword [esp + 0x38], eax
jmp 0x4bedbe
movups xmm0, xmmword [0x52ebd4]
lea eax, [eax + eax*4]
lea ecx, [ecx + eax*4]
mov eax, dword [esp + 0x38]
mov dword [eax], edx
mov eax, dword [0x52ebe4]
movups xmmword [ecx + 8], xmm0
mov dword [ecx + 0x18], eax
mov eax, dword [esp + 0x38]
mov dword [ecx + 8], esi
neg eax
sbb eax, eax
and eax, 0x500
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x28]
mov dword [ebp + 4], eax
inc dword [ebx + 0x28]
push dword [ebp + 0x18]
push 0
push dword [esp + 0x38]
push ebx
call fcn.004b0190
mov ecx, dword [edi + 0x6c]
add esp, 0x10
movzx edx, word [ebp + 2]
mov esi, dword [ebp + 4]
mov dword [esp + 0x64], eax
mov dword [esp + 0x24], ecx
cmp dword [edi + 0x70], ecx
jg 0x4bee14
push 0
push edx
push esi
push 0x77
push edi
call fcn.00475980
mov edx, eax
add esp, 0x14
mov dword [esp + 0x24], edx
jmp 0x4bee4a
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x24]
mov dword [eax + ecx*4], 0x77
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi]
mov eax, edx
cmp byte [ecx + 0x57], 0
je 0x4bee78
cmp dword [ecx + 0x210], 0
jne 0x4beeb2
mov edx, dword [esp + 0x64]
test edx, edx
je 0x4beeb2
sub dword [edx], 1
jne 0x4beeb2
push edx
push dword [edx + 0xc]
call fcn.0049dc30
add esp, 8
jmp 0x4beeb2
test edx, edx
jns 0x4bee80
mov eax, dword [edi + 0x6c]
dec eax
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x4beea3
mov ecx, dword [esp + 0x64]
push 0xfffffffffffffff8
push ecx
push eax
push edi
call fcn.004e2d50
add esp, 0x10
jmp 0x4beeb2
mov edx, dword [esp + 0x64]
test edx, edx
je 0x4beeb2
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov eax, dword [ebx + 0x2c]
mov esi, dword [esp + 0x30]
inc eax
mov dword [esp + 0x3c], eax
lea edx, [eax + 1]
mov eax, dword [ebx + 0x38]
dec eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x70], eax
lea ecx, [edx + 2]
dec eax
mov dword [ebx + 0x2c], ecx
mov dword [ebx + 0x38], eax
mov dword [esp + 0x28], ecx
add ecx, dword [esi]
mov dword [esp + 0x68], eax
mov dword [ebx + 0x2c], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x6c], eax
mov eax, dword [esi]
add eax, ecx
mov dword [ebx + 0x2c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bef0c
push 0
push edx
push 0
push 0x47
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bef42
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [esi]
mov esi, dword [esp + 0x28]
dec edx
mov ecx, dword [edi + 0x6c]
inc esi
add edx, esi
cmp dword [edi + 0x70], ecx
jg 0x4bef65
push edx
push esi
push 0
push 0x4b
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bef97
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4befb6
push 0
push dword [esp + 0x6c]
push dword [esp + 0x30]
push 0xa
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4befe9
mov edx, dword [esp + 0x28]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x68]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x48]
mov edx, 0x80
mov esi, dword [esp + 0xfc]
neg ecx
mov eax, 0x40
sbb ecx, ecx
and ecx, 0x200
cmp byte [esp + 0x23], 2
push 0
cmove eax, edx
or cx, ax
or cx, word [esp + 0x18]
movzx eax, cx
push eax
mov eax, dword [esp + 0x40]
push esi
push eax
push dword [esp + 0x40]
push dword [esp + 0x54]
push dword [esp + 0x28]
push ebx
call fcn.004d61c0
mov ecx, eax
add esp, 0x20
mov dword [esp + 0x40], ecx
test ecx, ecx
jne 0x4bf061
mov eax, dword [esp + 0x38]
test eax, eax
je 0x4c031d
push eax
push dword [esp + 0x1c]
call fcn.0046e100
add esp, 8
jmp 0x4c031d
cmp dword [ebx + 0x48], 0
je 0x4bf0b9
cmp word [ebp + 2], 0
mov edx, dword [ebp + 0x1c]
mov dword [ebp + 0x18], edx
jbe 0x4bf0a7
mov eax, dword [esi + 0x28]
xor esi, esi
mov ecx, dword [eax]
dec ecx
test edx, edx
jle 0x4bf099
mov edx, dword [ebp + 0x14]
add edx, 0xe
movsx eax, word [edx]
lea edx, [edx + 0x10]
cmp eax, ecx
cmovle eax, ecx
inc esi
mov ecx, eax
cmp esi, dword [ebp + 0x1c]
jl 0x4bf086
mov esi, dword [esp + 0xfc]
lea eax, [ecx + 1]
mov word [ebp + 2], ax
lea eax, [esp + 0x78]
push eax
push ebp
call fcn.0045d350
mov ecx, dword [esp + 0x48]
add esp, 8
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x24]
add eax, dword [ebp + 0x18]
add dword [ebx + 0x2c], eax
movzx eax, byte [ecx + 0x2f]
mov dword [esp + 0x2c], eax
mov al, byte [ecx + 0x2d]
xor ecx, ecx
test al, al
movsx edx, al
mov eax, dword [esp + 0x30]
cmovns ecx, edx
cmp ecx, dword [eax]
jne 0x4bf0f3
mov dword [esp + 0x60], 0
jmp 0x4bf419
cmp byte [esp + 0x23], 0
je 0x4bf105
test byte [esi + 4], 1
mov eax, str.DISTINCT
je 0x4bf10a
mov eax, str.GROUP_BY
push eax
push str.USE_TEMP_B_TREE_FOR__s
push 0
push ebx
call fcn.004d0870
mov eax, dword [esp + 0x40]
add esp, 0x10
cmp dword [ebp + 0x18], 0
mov dword [esp + 0x60], 1
mov edx, dword [eax]
mov esi, edx
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], esi
jle 0x4bf16e
mov edi, dword [ebp + 0x14]
mov ebx, dword [ebp + 0x18]
add edi, 0xe
movsx ecx, word [edi]
lea eax, [esi + 1]
cmp ecx, edx
lea edi, [edi + 0x10]
cmovl eax, esi
mov esi, eax
lea eax, [edx + 1]
cmovl eax, edx
mov edx, eax
sub ebx, 1
jne 0x4bf142
mov edi, dword [esp + 0x54]
mov ebx, dword [esp + 0xf8]
mov dword [esp + 0x5c], esi
cmp esi, 1
jne 0x4bf19b
mov al, byte [ebx + 0x13]
test al, al
jne 0x4bf186
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x10], eax
jmp 0x4bf1c5
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0xa4]
mov dword [esp + 0x10], eax
jmp 0x4bf1c5
mov edx, dword [ebx + 0x1c]
mov ecx, dword [ebx + 0x20]
mov dword [esp + 0x10], ecx
cmp esi, edx
jg 0x4bf1b6
lea eax, [ecx + esi]
sub edx, esi
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], edx
jmp 0x4bf1c5
mov eax, dword [ebx + 0x2c]
lea ecx, [eax + 1]
add eax, esi
mov dword [esp + 0x10], ecx
mov dword [ebx + 0x2c], eax
push 0
push 0
push dword [esp + 0x18]
push dword [esp + 0x3c]
push ebx
call fcn.004a0d90
xor edx, edx
mov byte [ebp], 1
add esp, 0x14
mov dword [esp + 0x4c], edx
cmp dword [ebp + 0x18], edx
jle 0x4bf22a
mov esi, dword [esp + 0x58]
xor edi, edi
nop
mov ecx, dword [ebp + 0x14]
movsx eax, word [ecx + edi + 0xe]
cmp eax, esi
jl 0x4bf215
mov eax, dword [esp + 0x10]
add eax, esi
push eax
push dword [ecx + edi + 4]
push ebx
call fcn.004a0d00
mov edx, dword [esp + 0x58]
add esp, 0xc
inc esi
inc edx
add edi, 0x10
mov dword [esp + 0x4c], edx
cmp edx, dword [ebp + 0x18]
jl 0x4bf1f0
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x5c]
mov byte [ebp], 0
mov al, byte [ebx + 0x13]
test al, al
jne 0x4bf23d
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
jmp 0x4bf24c
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0xa4]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x4c], eax
cmp dword [edi + 0x70], ecx
jg 0x4bf26f
push eax
push esi
push dword [esp + 0x18]
push 0x61
push edi
call fcn.00475980
mov edx, dword [esp + 0x60]
add esp, 0x14
jmp 0x4bf29e
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + ecx*4], 0x61
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov eax, dword [ebp + 4]
mov dword [esp + 0x58], eax
cmp dword [edi + 0x70], ecx
jg 0x4bf2c5
push 0
push edx
push eax
push 0x8b
push edi
call fcn.00475980
mov edx, dword [esp + 0x60]
add esp, 0x14
jmp 0x4bf2f8
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [esp + 0x58]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0x54]
mov dword [eax + ecx*4], 0x8b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test edx, edx
je 0x4bf310
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4bf310
movzx eax, al
mov dword [ebx + eax*4 + 0xa4], edx
inc byte [ebx + 0x13]
cmp esi, 1
jne 0x4bf333
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4bf342
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x4bf342
movzx eax, al
mov dword [ebx + eax*4 + 0xa4], ecx
inc byte [ebx + 0x13]
jmp 0x4bf342
cmp esi, dword [ebx + 0x1c]
jle 0x4bf342
mov eax, dword [esp + 0x10]
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], eax
push dword [esp + 0x40]
call fcn.004d98d0
mov edx, dword [ebx + 0x28]
add esp, 4
mov dword [ebp + 8], edx
mov al, byte [ebx + 0x13]
inc dword [ebx + 0x28]
mov dword [esp + 0x4c], edx
test al, al
jne 0x4bf36a
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
jmp 0x4bf379
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0xa4]
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x5c], eax
cmp dword [edi + 0x70], ecx
jg 0x4bf395
push esi
push eax
push edx
push 0x79
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bf3c7
mov ebx, dword [esp + 0xf8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x5c]
mov dword [eax + ecx*4], 0x79
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 4]
cmp dword [edi + 0x70], ecx
jg 0x4bf3e6
push 0
push dword [esp + 0x38]
push edx
push 0x22
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bf415
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x22
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [ebp + 1], 1
cmp dword [ebx + 0x48], 0
je 0x4bf482
xorps xmm0, xmm0
mov dword [esp + 0xb8], 0
xor ecx, ecx
movq qword [esp + 0xb0], xmm0
movups xmmword [esp + 0xa0], xmm0
mov dword [esp + 0xa4], 0x45c390
mov dword [esp + 0x10], ecx
cmp dword [ebp + 0x24], ecx
jle 0x4bf482
xor esi, esi
mov eax, dword [ebp + 0x20]
mov eax, dword [esi + eax]
test eax, eax
je 0x4bf475
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.004d5e10
mov ecx, dword [esp + 0x18]
add esp, 8
inc ecx
add esi, 0x18
mov dword [esp + 0x10], ecx
cmp ecx, dword [ebp + 0x24]
jl 0x4bf456
cmp dword [esp + 0x48], 0
je 0x4bf4e5
mov eax, dword [esp + 0x18]
test byte [eax + 0x50], 4
jne 0x4bf4e5
cmp dword [esp + 0x60], 0
jne 0x4bf4a4
mov eax, dword [esp + 0x40]
test byte [eax + 0x30], 8
je 0x4bf4e5
mov edx, dword [edi]
mov dword [esp + 0xc8], 0
cmp byte [edx + 0x57], 0
jne 0x4bf4e5
mov eax, dword [esp + 0xdc]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + ecx*4 + 0x10]
lea esi, [eax + ecx*4]
movsx eax, byte [esi + 1]
push eax
push edx
call fcn.00472cc0
add esp, 0xc
mov word [esi], 0xbb
mov dword [esi + 0x10], 0
cmp dword [esp + 0x60], 0
mov ecx, dword [edi + 0x6c]
mov dword [esp + 0x10], ecx
je 0x4bf543
mov edx, dword [ebp + 4]
cmp dword [edi + 0x70], ecx
jg 0x4bf514
push dword [esp + 0x4c]
push dword [esp + 0x60]
push edx
push 0x85
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bf543
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x5c]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + ecx*4], 0x85
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x30]
xor esi, esi
mov edx, dword [ecx]
test edx, edx
jle 0x4bf5e6
lea eax, [ecx + 8]
mov dword [esp + 0x48], eax
nop word [eax + eax]
mov edx, dword [esp + 0x6c]
add edx, esi
cmp dword [esp + 0x60], 0
je 0x4bf5bc
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bf588
push edx
push esi
push dword [esp + 0x54]
push 0x5e
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bf5cc
mov ebx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0x5e
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4bf5cc
push edx
mov byte [ebp], 1
push dword [eax]
push ebx
call fcn.004a0d00
add esp, 0xc
mov ecx, dword [esp + 0x30]
inc esi
mov eax, dword [esp + 0x48]
add eax, 0x14
mov dword [esp + 0x48], eax
mov edx, dword [ecx]
cmp esi, edx
jl 0x4bf560
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4bf5f2
inc dword [eax]
mov edx, dword [ecx]
mov esi, dword [edi + 0x6c]
cmp dword [edi + 0x70], esi
jg 0x4bf614
mov eax, dword [esp + 0x28]
push edx
push dword [esp + 0x70]
inc eax
push eax
push 0x5a
push edi
call fcn.00475980
add esp, 0x14
mov esi, eax
jmp 0x4bf64f
mov ebx, dword [esp + 0x28]
lea eax, [esi + 1]
mov dword [edi + 0x6c], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x68]
inc ebx
mov edi, dword [esp + 0x54]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0x6c]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0x5a
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4bf67b
cmp dword [eax + 0x210], 0
jne 0x4bf6b1
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x4bf6b1
sub dword [ecx], 1
jne 0x4bf6b1
push ecx
push dword [ecx + 0xc]
call fcn.0049dc30
add esp, 8
jmp 0x4bf6b1
test esi, esi
jns 0x4bf683
mov esi, dword [edi + 0x6c]
dec esi
mov eax, dword [edi + 0x68]
lea ecx, [esi + esi*4]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x64]
je 0x4bf6a6
push 0xfffffffffffffff8
push ecx
push eax
push edi
call fcn.004e2d50
add esp, 0x10
jmp 0x4bf6b1
test ecx, ecx
je 0x4bf6b1
mov dword [eax + 0x10], ecx
mov byte [eax + 1], 0xf8
mov esi, dword [edi + 0x6c]
lea edx, [esi + 1]
cmp dword [edi + 0x70], esi
jg 0x4bf6cd
push edx
push 0
push edx
push 0xe
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bf6fc
mov eax, dword [edi + 0x68]
lea ecx, [esi + esi*4]
mov ebx, dword [esp + 0xf8]
mov dword [edi + 0x6c], edx
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebx + 8]
mov eax, dword [esp + 0x30]
mov ecx, dword [edx + 0x6c]
mov eax, dword [eax]
mov dword [esp + 0x58], eax
cmp dword [edx + 0x70], ecx
jg 0x4bf729
push eax
mov eax, dword [esp + 0x2c]
inc eax
push eax
push dword [esp + 0x74]
push 0x4f
push edx
call fcn.00475980
add esp, 0x14
jmp 0x4bf761
mov edi, dword [esp + 0x54]
lea eax, [ecx + 1]
mov dword [edx + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edx + 0x68]
mov edx, dword [esp + 0x6c]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x28]
inc edx
mov dword [eax + ecx*4], 0x4f
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x58]
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bf782
mov eax, dword [esp + 0x1c]
push 0
push dword [esp + 0x74]
inc eax
push eax
push 0xa
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bf7bd
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0xf8]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x70]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bf7dc
push 0
push dword [esp + 0x38]
push dword [esp + 0x24]
push 0x3b
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bf80f
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x34]
mov dword [eax + ecx*4], 0x3b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bf82e
push 0
push dword [esp + 0x6c]
push dword [esp + 0x30]
push 0xa
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bf861
mov edx, dword [esp + 0x28]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x68]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x4bf873
mov eax, 0x5751d0
jmp 0x4bf87c
mov eax, dword [edi + 0x68]
lea ecx, [esi + esi*4]
lea eax, [eax + ecx*4]
push dword [esp + 0x2c]
mov esi, dword [esp + 0x40]
push ebp
push esi
push ebx
mov dword [eax + 8], edx
call fcn.004e0370
mov ecx, dword [edi + 0x6c]
add esp, 0x10
cmp dword [edi + 0x70], ecx
jg 0x4bf8ac
push 0
push esi
push 1
push 0x47
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bf8db
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp dword [esp + 0x60], 0
je 0x4bf92f
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 4]
mov esi, dword [esp + 0x10]
cmp dword [edi + 0x70], ecx
jg 0x4bf902
push 0
push esi
push edx
push 0x25
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bf96e
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x25
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x4bf96e
push dword [esp + 0x40]
call fcn.004d98d0
mov edx, dword [edi]
add esp, 4
cmp byte [edx + 0x57], 0
jne 0x4bf96e
mov eax, dword [esp + 0x24]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
push dword [eax + ecx*4 + 0x10]
lea esi, [eax + ecx*4]
movsx eax, byte [esi + 1]
push eax
push edx
call fcn.00472cc0
add esp, 0xc
mov word [esi], 0xbb
mov dword [esi + 0x10], 0
mov eax, dword [esp + 0x38]
test eax, eax
je 0x4bf983
push eax
push dword [esp + 0x1c]
call fcn.0046e100
add esp, 8
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bf9a4
mov eax, dword [esp + 0x1c]
push 0
push dword [esp + 0x74]
inc eax
push eax
push 0xa
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bf9d8
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
inc edx
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x70]
mov dword [eax + ecx*4], 0xa
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bf9f5
push 0
push dword [esp + 0x38]
push 0
push 9
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bfa28
mov edx, dword [esp + 0x34]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov esi, dword [edi + 0x6c]
cmp dword [edi + 0x70], esi
jg 0x4bfa49
push 0
push dword [esp + 0x20]
push 1
push 0x47
push edi
call fcn.00475980
mov edx, dword [esp + 0x30]
add esp, 0x14
jmp 0x4bfa7c
mov edx, dword [esp + 0x1c]
lea eax, [esi + 1]
mov dword [edi + 0x6c], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bfa99
push 0
push 0
lea eax, [edx + 1]
push eax
push 0x43
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bfad4
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0xf8]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x70]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4bfaf2
push edx
push edi
push ecx
call fcn.0048b850
add esp, 0xc
jmp 0x4bfafb
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [edi + 0x6c]
lea ecx, [eax + 1]
lea edx, [eax + 2]
mov dword [esp + 0x24], ecx
cmp dword [edi + 0x70], eax
jg 0x4bfb21
push 0
push edx
push dword [esp + 0x44]
push 0x3b
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bfb54
mov ebx, dword [esp + 0x3c]
mov dword [edi + 0x6c], ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0x3b
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bfb73
mov eax, dword [esp + 0x1c]
push 0
push 0
inc eax
push eax
push 0x43
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bfbae
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov ebx, dword [esp + 0xf8]
lea ecx, [ecx + ecx*4]
mov dword [edi + 0x6c], eax
inc edx
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
push ebp
push ebx
call fcn.0046f1b0
push 0x10
push dword [esp + 0x30]
push dword [esp + 0x84]
push ebx
call fcn.004a4050
push esi
push dword [esp + 0x40]
lea eax, [esp + 0xdc]
push dword [esp + 0x120]
push eax
lea eax, [esp + 0xf0]
push eax
push 0xffffffffffffffff
push dword [esp + 0x12c]
push ebx
call fcn.0048ef60
mov ecx, dword [edi + 0x6c]
add esp, 0x38
cmp dword [edi + 0x70], ecx
jg 0x4bfc15
mov eax, dword [esp + 0x1c]
push 0
push 0
inc eax
push eax
push 0x43
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bfc49
mov edx, dword [esp + 0x1c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
inc edx
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0x68]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4bfc67
push edx
push edi
push ecx
call fcn.0048b850
add esp, 0xc
jmp 0x4bfc70
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
push ebp
push ebx
call fcn.0048b620
mov ecx, dword [edi + 0x6c]
add esp, 8
cmp dword [edi + 0x70], ecx
jg 0x4bfc97
push 0
push dword [esp + 0x40]
push 0
push 0x47
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bfcca
mov edx, dword [esp + 0x3c]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x47
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bfce7
push 0
push 0
push dword [esp + 0x30]
push 0x43
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4bfd1a
mov edx, dword [esp + 0x28]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x43
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp word [esp + 0x14], 0
je 0x4bfd3d
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x4bfd3d
mov eax, dword [ebp + 0x20]
push dword [eax + 0xc]
push dword [eax + 8]
push ecx
push ebx
call fcn.0046f9d0
add esp, 0x10
mov ebp, dword [esp + 0x34]
jmp 0x4c026f
cmp dword [esi + 0x24], 0
jne 0x4c008e
mov esi, dword [esi + 0x1c]
cmp dword [esi], 1
jne 0x4c008e
mov eax, dword [esp + 0xfc]
mov edx, dword [eax + 0x20]
cmp dword [edx], 1
jne 0x4c008e
cmp dword [edx + 0x1c], 0
jne 0x4c008e
mov ecx, dword [ebp + 0x24]
cmp ecx, 1
jne 0x4c008e
cmp dword [eax + 0x2c], 0
jne 0x4c008e
mov edx, dword [edx + 0x18]
mov dword [esp + 0x3c], edx
cmp byte [edx + 0x2b], 0
jne 0x4c0091
mov esi, dword [esi + 8]
cmp byte [esi], 0xa8
jne 0x4c0091
cmp dword [esi + 0x28], ebp
jne 0x4c0091
mov eax, dword [ebp + 0x20]
mov eax, dword [eax + 4]
test dword [eax + 4], 0x100
je 0x4c0091
test dword [esi + 4], 0x1000004
jne 0x4c0091
mov ecx, dword [edx + 0x3c]
mov edx, 0xffff8000
mov dword [esp + 0x40], edx
test ecx, ecx
je 0x4bfe03
mov eax, dword [ebx]
xor edx, edx
mov dword [esp + 0x40], edx
mov eax, dword [eax + 0x10]
add eax, 0xc
cmp dword [eax], ecx
je 0x4bfe03
lea eax, [eax + 0x10]
inc edx
cmp dword [eax], ecx
jne 0x4bfdf7
mov dword [esp + 0x40], edx
mov eax, dword [ebx + 0x28]
xor esi, esi
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x24], eax
inc eax
mov dword [ebx + 0x28], eax
xor eax, eax
mov dword [esp + 0x2c], eax
mov eax, dword [ecx + 0x14]
mov ecx, ebx
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x80]
test eax, eax
cmovne ecx, eax
mov dword [esp + 0x48], ecx
mov eax, dword [ecx + 0x5c]
mov ecx, edx
mov dword [esp + 0x58], eax
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x58]
test ecx, eax
jne 0x4bfe64
mov eax, dword [esp + 0x48]
bts ecx, edx
mov dword [eax + 0x5c], ecx
cmp edx, 1
jne 0x4bfe69
push eax
call fcn.004b2630
add esp, 4
jmp 0x4bfe91
cmp edx, 1
je 0x4bfe91
mov eax, dword [ebx]
mov ecx, edx
add ecx, ecx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx*8 + 4]
cmp byte [eax + 9], 0
je 0x4bfe91
mov eax, dword [esp + 0x3c]
push dword [eax]
push 0
push dword [eax + 0x14]
push edx
push ebx
call fcn.0047ec10
add esp, 0x14
mov edx, dword [esp + 0x3c]
test byte [edx + 0x1c], 0x80
je 0x4bfeb2
mov esi, dword [edx + 8]
test esi, esi
je 0x4bfeb2
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4bfeb2
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x4bfea2
mov eax, dword [esp + 0xfc]
mov eax, dword [eax + 0x20]
test byte [eax + 0x30], 1
jne 0x4bfef9
mov eax, dword [edx + 8]
test eax, eax
je 0x4bfef9
nop dword [eax]
test byte [eax + 0x38], 4
jne 0x4bfef2
movzx ecx, word [eax + 0x30]
cmp cx, word [edx + 0x28]
jge 0x4bfef2
cmp dword [eax + 0x24], 0
jne 0x4bfef2
test esi, esi
je 0x4bfef0
cmp cx, word [esi + 0x30]
jge 0x4bfef2
mov esi, eax
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x4bfed0
test esi, esi
je 0x4bff12
mov eax, dword [esi + 0x2c]
push esi
push ebx
mov dword [esp + 0x1c], eax
call fcn.004b0220
add esp, 8
mov dword [esp + 0x2c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4bff38
mov edx, dword [esp + 0x40]
push 1
push edx
mov edx, dword [esp + 0x1c]
push edx
mov edx, dword [esp + 0x30]
push edx
push 0x70
push edi
call fcn.0045bf40
add esp, 0x18
jmp 0x4bff6b
mov edx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x40]
mov dword [eax + ecx*4], 0xfd70
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 1
mov edx, dword [esp + 0x2c]
test edx, edx
je 0x4bffc2
mov eax, dword [edi]
cmp byte [eax + 0x57], 0
je 0x4bff97
cmp dword [eax + 0x210], 0
jne 0x4bffc2
add dword [edx], 0xffffffff
jne 0x4bffc2
push edx
push dword [edx + 0xc]
call fcn.0049dc30
add esp, 8
jmp 0x4bffc2
mov eax, dword [edi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
add eax, 0xffffffec
cmp byte [eax + 1], 0
je 0x4bffbb
push 0xfffffffffffffff8
push edx
push eax
push edi
call fcn.004e2d50
add esp, 0x10
jmp 0x4bffc2
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf8
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x24]
add eax, dword [ebp + 0x18]
add dword [ebx + 0x2c], eax
mov eax, dword [ebp + 0xc]
add eax, dword [ebp + 0x18]
mov ebp, dword [esp + 0x24]
push eax
push ebp
push 0x62
push edi
call fcn.004c6d90
mov ecx, dword [edi + 0x6c]
add esp, 0x10
cmp dword [edi + 0x70], ecx
jg 0x4c0003
push 0
push 0
push ebp
push 0x7a
push edi
call fcn.00475980
add esp, 0x14
jmp 0x4c0032
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x7a
mov dword [eax + ecx*4 + 4], ebp
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp byte [ebx + 0xdb], 2
jne 0x4c0234
mov ecx, dword [esp + 0x3c]
test esi, esi
je 0x4c005f
test byte [ecx + 0x1c], 0x80
je 0x4c0056
mov eax, dword [esi + 0x38]
and al, 3
cmp al, 2
je 0x4c005f
mov eax, dword [esi]
mov edx, 1
jmp 0x4c0066
xor edx, edx
mov eax, 0x5461cf
push eax
test edx, edx
mov eax, str._USING_COVERING_INDEX
mov esi, 0x5461cf
cmove eax, esi
push eax
push dword [ecx]
push str.SCAN__s_s_s
push 0
push ebx
call fcn.004d0870
add esp, 0x18
jmp 0x4c0234
mov ecx, dword [ebp + 0x24]
cmp dword [ebp + 0x1c], 0
mov esi, ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x24], 0
je 0x4c0110
xor eax, eax
test ecx, ecx
jle 0x4c00ef
mov edx, dword [ebp + 0x20]
xor ebx, ebx
nop dword [eax]
mov eax, dword [edx]
test dword [eax + 4], 0x1000000
jne 0x4c00d6
mov eax, dword [edx + 4]
mov esi, ecx
test byte [eax + 4], 0x20
jne 0x4c00e0
inc ebx
add edx, 0x18
mov esi, ecx
cmp ebx, ecx
jl 0x4c00c0
mov dword [esp + 0x2c], ebx
mov ebx, dword [esp + 0xf8]
mov eax, dword [esp + 0x2c]
cmp eax, esi
jne 0x4c0136
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
push eax
push 0
push 0x47
push edi
mov dword [esp + 0x24], eax
call fcn.004c6d90
mov esi, dword [ebp + 0x24]
add esp, 0x10
jmp 0x4c0136
cmp ecx, 1
jne 0x4c0136
mov eax, dword [ebp + 0x20]
mov esi, ecx
cmp dword [eax + 8], 0
jl 0x4c0136
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x48], eax
neg eax
sbb eax, eax
and eax, 0x500
mov dword [esp + 0x24], eax
mov eax, dword [ebx + 0x2c]
inc eax
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x18]
add eax, esi
add dword [ebx + 0x2c], eax
push ebp
push ebx
call fcn.0048b620
movzx eax, byte [esp + 0x2a]
or ax, word [esp + 0x2c]
push 0
movzx eax, ax
push eax
push dword [esp + 0x10c]
push dword [esp + 0x5c]
push dword [esp + 0xb4]
push dword [esp + 0x5c]
push dword [esp + 0x30]
push ebx
call fcn.004d61c0
mov esi, eax
add esp, 0x28
test esi, esi
je 0x4c031d
movzx eax, byte [esi + 0x2f]
push eax
push ebp
push dword [esp + 0x1c]
mov dword [esp + 0x64], eax
push ebx
call fcn.004e0370
mov ecx, dword [esp + 0x68]
add esp, 0x10
test ecx, ecx
je 0x4c01bf
mov eax, dword [ebp + 0x20]
test eax, eax
je 0x4c01bf
push dword [eax + 0xc]
push dword [eax + 8]
push ecx
push ebx
call fcn.0046f9d0
add esp, 0x10
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4c01d5
push eax
push 1
push 0x47
push edi
call fcn.004c6d90
add esp, 0x10
cmp byte [esp + 0x22], 0
je 0x4c0224
test byte [esi + 0x30], 4
je 0x4c0224
cmp byte [esi + 0x2d], 0
je 0x4c0224
movzx edx, byte [esi + 0x2c]
sub edx, 1
js 0x4c0218
lea ecx, [edx + edx*2]
shl ecx, 5
add ecx, esi
nop dword [eax]
mov eax, dword [ecx + 0x348]
test byte [eax + 0x2c], 4
jne 0x4c0289
sub ecx, 0x60
sub edx, 1
jns 0x4c0200
push dword [esi + 0x20]
push edi
call fcn.004d0c00
add esp, 8
push esi
call fcn.004d98d0
push ebp
push ebx
call fcn.0046f1b0
add esp, 0xc
mov ebp, dword [esp + 0x34]
push 0x10
push ebp
push dword [esp + 0x7c]
mov dword [esp + 0xd4], 0
push ebx
call fcn.004a4050
push ebp
push ebp
push dword [esp + 0x118]
push 0
push 0
push 0xffffffffffffffff
push dword [esp + 0x124]
push ebx
call fcn.0048ef60
add esp, 0x30
mov ecx, dword [edi + 0xc]
not ebp
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4c0291
push ebp
push edi
push ecx
call fcn.0048b850
add esp, 0xc
jmp 0x4c029a
push dword [ecx + 0x308]
jmp 0x4c021b
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + ebp*4], eax
mov ebp, dword [esp + 0x100]
mov eax, dword [esp + 0x50]
cmp al, 3
jne 0x4c02be
push str.DISTINCT
push str.USE_TEMP_B_TREE_FOR__s
push 0
push ebx
call fcn.004d0870
add esp, 0x10
cmp dword [esp + 0xc8], 0
je 0x4c02e7
mov eax, dword [esp + 0x44]
push ebp
push dword [eax]
lea eax, [esp + 0xd0]
push eax
push dword [esp + 0x108]
push ebx
call fcn.00473ce0
add esp, 0x14
mov ecx, dword [edi + 0xc]
mov edx, dword [esp + 0xf0]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4c0308
push edx
push edi
push ecx
call fcn.0048b850
add esp, 0xc
jmp 0x4c0311
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
xor eax, eax
cmp dword [ebx + 0x24], eax
setg al
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x9c]
test eax, eax
je 0x4bd2cb
push eax
push ecx
call fcn.0046e100
add esp, 8
jmp 0x4bd2cb
mov esi, dword [ebx + 8]
mov eax, dword [esi]
cmp byte [eax + 0x57], 0
je 0x4c0367
pop esi
mov eax, 0x5751d0
pop edi
pop ebp
mov eax, dword [eax + 8]
mov dword [ebx + 0xe8], eax
mov eax, dword [esp + 0x54]
pop ebx
add esp, 0xe4
ret
lea edx, [ecx + ecx*4]
mov ecx, dword [esi + 0x68]
pop esi
pop edi
pop ebp
lea eax, [ecx + edx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xe8], eax
mov eax, dword [esp + 0x54]
pop ebx
add esp, 0xe4
ret
pop edi
pop ebp
mov eax, 1
pop ebx
add esp, 0xe4
ret