Function at 0x516da0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe0
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x18]
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x44], 0
mov edx, dword [edi + 0x1ec]
lea eax, [edi + 0x50]
mov dword [ebp - 0x60], eax
mov eax, dword [ebx]
mov dword [ebp - 0x5c], eax
mov eax, dword [esi + 0x48]
mov dword [ebp - 8], eax
movzx eax, byte [esi + 0x34]
lea ecx, [eax + eax*8]
mov eax, dword [edi + 4]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [ebp - 0x64], eax
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x1c], eax
xor eax, eax
test edx, edx
jle 0x516e0e
lea ecx, [edi + 0x1f0]
mov ebx, dword [ebp - 0x1c]
cmp dword [ecx], ebx
mov ebx, dword [ebp + 8]
je 0x516ee6
inc eax
add ecx, 4
cmp eax, edx
jl 0x516df8
xorps xmm0, xmm0
movlpd qword [ebp - 0x74], xmm0
mov edx, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x74]
not ecx
not edx
and ecx, dword [ebp + 0x1c]
and edx, dword [ebp + 0x20]
mov dword [esi + 0x50], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esi + 0x54], edx
mov eax, dword [edi + 0x48]
mov edx, dword [edi + 0x4c]
call fcn.005338d0
mov edi, dword [ebp + 0xc]
and eax, 1
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x38], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x38], eax
cmp byte [esi + 0x34], 0
mov dword [ebp - 0x68], eax
mov dword [esi + 0x18], eax
jbe 0x516e86
mov eax, dword [ebp - 0x64]
test byte [eax + 0x24], 8
je 0x516e86
mov eax, dword [ebx + 0x2c]
inc eax
push eax
push 0
push 0x45
mov dword [ebx + 0x2c], eax
push edi
mov dword [esi], eax
call fcn.00508f30
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov ecx, eax
mov edx, dword [ebp + 0x10]
test eax, eax
jle 0x516ead
imul eax, eax, 0x58
add eax, 0x2f0
add eax, edx
nop dword [eax]
cmp dword [eax], 0
jne 0x516ead
dec ecx
sub eax, 0x58
test ecx, ecx
jg 0x516ea0
imul eax, ecx, 0x58
mov eax, dword [eax + edx + 0x2fc]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x64]
test byte [eax + 0x28], 0x10
je 0x516f8c
mov ecx, dword [edi + 0x6c]
mov ebx, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x516f00
push edx
push 0
push ebx
push 0xd
push edi
call fcn.004d0d80
add esp, 0x14
jmp 0x516f2b
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x516e1c
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [edi + 0x6c]
cmp dword [edi + 0x70], edx
jg 0x516f52
push 0
push dword [ebp - 0x3c]
push ebx
push 0xe
push edi
call fcn.004d0d80
mov edx, eax
mov byte [esi + 0x35], 0xb
add esp, 0x14
mov dword [esi + 0x3c], edx
jmp 0x51882b
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [esi + 0x3c], edx
mov byte [esi + 0x35], 0xb
jmp 0x51882b
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x24]
test edx, 0x400
je 0x5173c0
mov edx, eax
movzx eax, word [edx + 0x28]
mov dword [ebp + 0x14], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x516fd5
mov al, byte [ebx + 0x13]
test al, al
jne 0x516fc1
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 0xc], eax
jmp 0x516fff
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x94]
mov dword [ebp - 0xc], eax
jmp 0x516fff
mov edx, dword [ebx + 0x1c]
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0xc], eax
cmp ecx, edx
jg 0x516fee
add eax, ecx
sub edx, ecx
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], edx
jmp 0x516ffc
mov eax, dword [ebx + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [ebp - 0xc], edx
mov dword [ebx + 0x2c], eax
mov edx, dword [ebp - 8]
mov eax, dword [esi + 0xc]
xor esi, esi
mov dword [ebp - 4], eax
cmp dword [ebp + 0x14], esi
jbe 0x51705d
mov edi, dword [ebp + 0x18]
nop
mov eax, dword [edx + 0x30]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x517054
mov ecx, dword [ebp - 0xc]
add ecx, 2
add ecx, esi
test byte [eax + 0xc], 1
je 0x517040
push ecx
push dword [ebp - 0x2c]
push esi
push edi
push eax
push ebx
call fcn.004c4c40
mov eax, dword [edi + 0x10]
add esp, 0x18
mov dword [ebp - 4], eax
jmp 0x517051
mov eax, dword [eax]
push 1
push ecx
push dword [eax + 0x10]
push ebx
call fcn.004c51d0
add esp, 0x10
mov edx, dword [ebp - 8]
inc esi
cmp esi, dword [ebp + 0x14]
jl 0x517010
mov edi, dword [ebp + 0xc]
mov ecx, dword [edi + 0x6c]
mov edx, dword [edx + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x51707b
push 0
push dword [ebp - 0xc]
push edx
push 0x45
push edi
call fcn.004d0d80
add esp, 0x14
jmp 0x5170a9
mov esi, dword [ebp - 0xc]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov esi, dword [ebp - 0xc]
mov ecx, dword [edi + 0x6c]
inc esi
cmp dword [edi + 0x70], ecx
jg 0x5170c8
push 0
push esi
push dword [ebp + 0x14]
push 0x45
push edi
call fcn.004d0d80
add esp, 0x14
jmp 0x5170f6
mov edx, dword [ebp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 8]
or eax, 0xffffffff
mov edx, 0xfffffff9
cmp byte [ecx + 0x1c], 0
cmovne eax, edx
mov edx, dword [edi + 0x6c]
mov dword [ebp - 0x18], eax
mov eax, dword [ecx + 0x20]
mov dword [ebp - 0x40], eax
cmp dword [edi + 0x70], edx
jg 0x517132
push dword [ebp - 0xc]
mov esi, dword [ebp - 4]
push esi
push dword [ebp - 0x1c]
push 9
push edi
call fcn.004d0d80
add esp, 0x14
mov edx, eax
jmp 0x517162
mov esi, dword [ebp - 0x1c]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 4]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [ebp - 0xc]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
push dword [ebp - 0x18]
push dword [ebp - 0x40]
push edx
push edi
call fcn.00509410
mov esi, dword [ebp + 0x18]
add esp, 0x10
mov edx, dword [ebp - 8]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x1c]
mov byte [edx + 0x1c], 0
mov dword [esi + 0x38], eax
mov eax, 0x3d
cmp byte [ecx + 0x2e], 0
mov ecx, 0xad
cmovne eax, ecx
mov ecx, dword [ebp + 0x14]
mov byte [esi + 0x35], al
sub ecx, 1
mov eax, dword [edi + 0x6c]
mov dword [esi + 0x3c], eax
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], ecx
js 0x51882b
mov eax, dword [edx + 0x30]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 4], eax
mov dx, word [eax + 0xc]
mov eax, dword [ebp - 0x14]
and dx, 1
lea eax, [eax - 1]
cmove eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
cmp ecx, 0x10
jge 0x5171fa
mov eax, dword [ebp - 8]
mov ax, word [eax + 0x1e]
shr ax, cl
test al, 1
je 0x5171f7
mov eax, dword [ebp - 4]
push eax
push esi
call fcn.004c8ac0
add esp, 8
jmp 0x5173a9
mov ecx, dword [ebp - 0x24]
test dx, dx
je 0x5173ac
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov al, byte [ecx]
cmp al, 0xad
jne 0x517214
mov al, byte [ecx + 2]
cmp al, 0xae
jne 0x51721d
mov eax, dword [ecx + 0x14]
jmp 0x517227
cmp al, 0x88
jne 0x517230
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jne 0x5173a9
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x51], 0
jne 0x5172cf
mov eax, dword [ebp - 0x14]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x44]
mov ecx, dword [eax + ecx*4 + 4]
test ecx, ecx
jns 0x517252
mov ecx, dword [edi + 0x6c]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x517261
mov eax, 0x5bad84
jmp 0x51726a
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov al, byte [eax]
mov dword [ebp - 0x18], ecx
mov ecx, dword [edi + 0x6c]
mov byte [ebp + 0x17], al
cmp dword [edi + 0x70], ecx
jg 0x517297
push edx
push esi
push dword [ebp - 0x18]
movzx eax, al
push eax
push edi
call fcn.004d0d80
add esp, 0x14
jmp 0x5172cf
mov bl, byte [ebp + 0x17]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], bl
xor ebx, ebx
mov word [eax + ecx*4 + 2], bx
mov ebx, dword [ebp - 0x18]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp + 8]
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0
push 0x34
push dword [ebx]
call fcn.004e9f60
mov esi, eax
add esp, 0xc
test esi, esi
je 0x5173a6
push 0x34
push 0
push esi
call sub.msvcrt.dll_memset
or eax, 0xffffffff
mov byte [esi], 0x35
push esi
mov word [esi + 0x22], ax
call fcn.004cbfc0
mov eax, dword [ebx]
add esp, 0x10
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x51731d
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ebx
call fcn.004ebbf0
add esp, 0xc
mov eax, dword [ebp - 4]
push 0
push 0x35
push dword [ebp - 0x5c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esi + 0xc], eax
call fcn.004e9f60
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x517364
push 0x34
push 0
push ebx
call sub.msvcrt.dll_memset
add esp, 0xc
mov byte [ebx], 0xad
or eax, 0xffffffff
mov word [ebx + 0x22], ax
lea eax, [ebx + 0x34]
mov dword [ebx + 8], eax
mov byte [eax], 0
mov dword [ebx + 0x18], 1
mov dword [esi + 0x10], ebx
test ebx, ebx
je 0x517390
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
add ecx, 2
add eax, ecx
mov dword [ebx + 0x1c], eax
mov eax, dword [ebp + 0x18]
mov ebx, dword [ebp + 8]
push 0
push dword [eax + 0x18]
push esi
push ebx
call fcn.004ef1b0
add esp, 0x10
jmp 0x517393
mov ebx, dword [ebp + 8]
push esi
push dword [ebp - 0x5c]
mov dword [esi + 0xc], 0
call fcn.004eeea0
add esp, 8
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 0x24], ecx
jns 0x5171b4
jmp 0x51882b
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x51748a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
inc dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x2c]
push ecx
push dword [ebp - 0x2c]
mov dword [ebp - 4], eax
push 0
push esi
push eax
push ebx
mov dword [ebp + 0x14], ecx
call fcn.004c4c40
mov ecx, dword [ebp + 0x14]
mov edx, eax
add esp, 0x18
cmp edx, ecx
je 0x51741b
test ecx, ecx
je 0x51741b
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x51741b
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
mov ecx, dword [edi + 0x6c]
mov ebx, dword [esi + 0x10]
cmp dword [edi + 0x70], ecx
jg 0x517438
push edx
push ebx
push dword [ebp - 0x1c]
push 0x1f
push edi
call fcn.004d0d80
add esp, 0x14
jmp 0x517465
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0x1c]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp + 0xc]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 4]
mov byte [esi + 0x35], 0xad
mov ecx, dword [edx + 0x28]
mov eax, dword [edx + 0x2c]
and ecx, dword [esi + 0x50]
and eax, dword [esi + 0x54]
or ecx, eax
jne 0x51882b
or word [edx + 0xa], 4
jmp 0x51882b
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x5176be
xor ecx, ecx
mov dword [ebp - 0x10], 0xad
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 4], ecx
test dl, 0x20
je 0x5174cc
mov eax, dword [ebp - 8]
mov dword [ebp + 0x14], 4
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
xor eax, eax
mov dword [ebp - 4], ecx
jmp 0x5174cf
mov dword [ebp + 0x14], eax
test dl, 0x10
je 0x5174e0
mov eax, dword [ebp - 8]
mov edx, dword [ebp + 0x14]
mov eax, dword [eax + 0x30]
mov eax, dword [edx + eax]
mov edx, dword [ebp - 0x2c]
test edx, edx
cmove ecx, eax
cmove eax, dword [ebp - 4]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
test eax, eax
je 0x5175bf
mov edx, dword [eax]
mov dword [ebp + 0x14], 0x18161719
mov dword [ebp - 4], edx
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0x50], eax
call fcn.004efb80
add esp, 4
test eax, eax
je 0x51755f
mov al, byte [ebx + 0x13]
test al, al
jne 0x517528
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
jmp 0x517537
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x94]
push 1
push eax
push dword [edx + 0x10]
mov dword [ebp - 0x14], eax
push ebx
call fcn.004c51d0
mov eax, dword [ebp - 4]
add esp, 0x10
mov ecx, dword [ebp - 0x14]
movzx eax, byte [eax]
inc eax
and eax, 2
or eax, 1
mov dl, byte [ebp + eax + 0x14]
jmp 0x51758e
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x50]
push ebx
call fcn.004ee8f0
push dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
push esi
call fcn.004c8ac0
mov eax, dword [ebp - 4]
add esp, 0x14
mov ecx, dword [ebp - 0x50]
movzx eax, byte [eax]
mov dl, byte [ebp + eax - 0x22]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
push ecx
push dword [ebp - 0x3c]
movzx eax, dl
push dword [ebp - 0x1c]
push eax
push edi
call fcn.00508f90
mov ecx, dword [ebp - 0x14]
add esp, 0x14
test ecx, ecx
je 0x5175db
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x5175db
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x5175db
push dword [ebp - 0x50]
mov eax, edx
push dword [ebp - 0x1c]
xor eax, 1
lea eax, [eax*4 + 0x21]
push eax
push edi
call fcn.00508f30
add esp, 0x10
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x517656
mov eax, dword [eax]
inc dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x2c]
push 1
push ecx
push dword [eax + 0x10]
mov dword [ebp + 0x14], eax
push ebx
mov dword [ebp - 0x40], ecx
call fcn.004c51d0
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp + 0x14], eax
call fcn.004efb80
add esp, 0x14
test eax, eax
jne 0x51762e
mov al, byte [edx]
cmp al, 0x38
je 0x51761c
cmp al, 0x36
jne 0x51762e
mov eax, dword [ebp - 0x2c]
xor eax, 1
lea edx, [eax*2 + 0x37]
mov dword [ebp - 0x10], edx
jmp 0x51763b
mov eax, dword [ebp - 0x2c]
lea eax, [eax*2 + 0x36]
mov dword [ebp - 0x10], eax
push dword [ebp + 0x14]
call fcn.004efb80
add esp, 4
test eax, eax
jne 0x517656
push dword [ebp - 0x18]
push esi
call fcn.004c8ac0
add esp, 8
cmp dword [ebp - 0x2c], 0
mov ecx, dword [edi + 0x6c]
sete al
mov dword [esi + 0x3c], ecx
add al, 4
cmp dword [ebp - 0x10], 0xad
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x1c]
mov dword [esi + 0x38], eax
je 0x51882b
inc dword [ebx + 0x2c]
mov esi, dword [ebx + 0x2c]
push esi
push eax
push 0x7f
push edi
call fcn.00508f30
push esi
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x10]
push edi
call fcn.00508f90
mov eax, dword [edi + 0x6c]
add esp, 0x24
test eax, eax
jle 0x51882b
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x51882b
test edx, 0x200
je 0x518058
mov eax, dword [ebp - 8]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
movzx ecx, word [eax + 0x18]
movzx eax, word [eax + 0x1a]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x50], ecx
movzx ecx, cx
mov dword [ebp - 0x28], ecx
movzx eax, word [eax + 0x1c]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov byte [ebp + 0x17], al
mov byte [ebp - 0x55], al
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x34], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x30], eax
test dl, 0x20
je 0x517744
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x4c], eax
lea eax, [ecx + 1]
mov dword [ebp - 4], eax
movzx eax, word [ebx + 0x1a]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x20], eax
test dl, 0x10
je 0x517818
mov eax, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edi*4]
mov edi, dword [ebp - 8]
mov dword [ebp - 0x24], eax
movzx eax, word [edi + 0x1c]
mov edi, eax
mov eax, edx
cmp dword [ebp - 0x20], edi
mov edx, dword [ebp - 0x24]
cmova edi, dword [ebp - 0x20]
mov dword [ebp - 0x10], edi
mov edi, 0x100
test word [edx + 0xa], di
mov edi, dword [ebp + 0xc]
je 0x5177c9
mov eax, dword [ebx + 0x2c]
inc eax
push eax
push 1
push 0x45
mov dword [ebx + 0x2c], eax
push edi
mov dword [esi + 0x2c], eax
call fcn.00508f30
mov eax, dword [edi + 0x6c]
xor ecx, ecx
shl dword [esi + 0x2c], 1
add esp, 0x10
mov edx, dword [ebp - 0x28]
mov dword [esi + 0x30], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1c]
cmp byte [edx + eax], 1
mov eax, dword [ebp - 8]
sete cl
xor ecx, dword [ebp - 0x2c]
or dword [esi + 0x2c], ecx
mov ecx, edx
mov eax, dword [eax + 0x24]
mov dword [ebp - 4], eax
cmp dword [ebp - 0x4c], 0
mov edx, eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
jne 0x517818
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 4]
movsx ecx, word [eax + ecx*2]
mov dword [ebp - 0x44], ecx
test ecx, ecx
js 0x5177fb
mov eax, dword [edx + 0xc]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + 4]
cmp byte [eax + ecx*4 + 0xc], 0
je 0x51780b
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp ecx, 0xfffffffe
jne 0x517818
jmp 0x51780e
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov byte [ebp + 0x17], 1
mov dword [ebp - 0x20], eax
test dl, 0x30
jne 0x517845
test edx, 0x80000
je 0x517845
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [esi + 0x24], eax
dec dword [ebx + 0x38]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x20], 1
mov byte [ebp + 0x17], 1
mov dword [esi + 0x28], eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x50]
movzx ecx, word [eax + 0x32]
mov dword [ebp - 0x44], ecx
cmp dx, cx
jae 0x517874
mov eax, dword [eax + 0x1c]
xor ecx, ecx
mov edx, dword [ebp - 0x28]
cmp byte [edx + eax], cl
mov eax, dword [ebp - 0x2c]
sete cl
cmp eax, ecx
je 0x517880
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x50]
jmp 0x517877
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x5178ab
cmp cx, dx
jne 0x5178ab
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x4c], eax
mov al, byte [ebp + 0x17]
mov byte [ebp - 0x55], al
mov eax, dword [ebp - 0x3c]
movzx eax, al
mov dword [ebp - 0x24], ecx
movzx ecx, dx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2c]
mov byte [ebp + 0x17], 0
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x40]
push ecx
push dword [ebp - 0x20]
push eax
push esi
push ebx
call fcn.004c4350
mov ecx, dword [ebp - 0x40]
add esp, 0x14
mov edx, eax
mov dword [ebp - 0x20], edx
test ecx, ecx
je 0x5178e7
cmp word [ebp - 0x38], 0
je 0x5178e7
mov eax, dword [ebp - 0x28]
add eax, ecx
push eax
push dword [ebp - 0x5c]
call fcn.004ea230
mov edx, dword [ebp - 0x20]
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x48], 0
je 0x5178f5
mov ecx, dword [esi + 0x28]
mov dword [ebp - 0x10], ecx
jmp 0x5178fb
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x51790f
test byte [eax + 0xc], 0x28
mov dword [ebp - 0x14], 0
je 0x517916
mov dword [ebp - 0x14], 1
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x51792a
test byte [ecx + 0xc], 0x28
mov dword [ebp - 4], 0
je 0x517931
mov dword [ebp - 4], 1
test eax, eax
jne 0x51795c
cmp word [ebp - 0x50], ax
ja 0x51795c
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x50], eax
cmp byte [ebp + 0x17], 0
mov eax, ecx
mov dword [ebp - 0xc], eax
je 0x517a13
mov dword [ebp - 0x14], 0
jmp 0x517a19
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x517941
mov edx, dword [ebp - 0x3c]
mov eax, dword [eax]
add ecx, dword [ebp - 0x20]
movzx edx, dx
push edx
mov eax, dword [eax + 0x10]
push ecx
push eax
push ebx
mov dword [ebp + 0x14], eax
mov dword [ebp - 0x44], ecx
call fcn.004c51d0
push dword [ebp - 0x4c]
mov edi, dword [ebp + 0xc]
push esi
push edi
call fcn.00525d90
push dword [ebp + 0x14]
call fcn.004ec400
add esp, 0x20
test eax, eax
je 0x5179b7
push dword [ebp - 0x10]
push dword [ebp - 0x44]
push 0x32
push edi
call fcn.00508f30
add esp, 0x10
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x5179d6
mov eax, dword [ebp - 0x28]
add eax, ecx
mov ecx, dword [ebp - 0x3c]
push eax
movzx eax, cx
push eax
push dword [ebp + 0x14]
call fcn.0051ec60
add esp, 0xc
mov ecx, dword [ebp - 0x3c]
push dword [ebp + 0x14]
movzx eax, cx
add dword [ebp - 0xc], eax
call fcn.004efb80
add esp, 4
test eax, eax
jne 0x517a03
push dword [ebp - 0x4c]
push esi
call fcn.004c8ac0
mov eax, dword [ebp - 0xc]
add esp, 8
mov byte [ebp + 0x17], 0
jmp 0x517a38
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], 1
mov byte [ebp + 0x17], 0
jmp 0x517a38
cmp dword [ebp - 0x48], 0
je 0x517a38
lea eax, [edx + ecx]
push eax
push 0
push 0x48
push edi
call fcn.00508f30
mov eax, dword [ebp - 0xc]
add esp, 0x10
inc eax
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xc], eax
movzx ecx, byte [ebp + 0x17]
push dword [ebp - 0x40]
sub eax, ecx
mov dword [ebp - 0x44], ecx
push eax
push dword [ebp - 0x20]
push ebx
call fcn.004c4730
mov ecx, dword [ebp - 8]
add esp, 0x10
movzx eax, word [ecx + 0x2a]
test ax, ax
je 0x517a66
cmp dword [ebp - 0xc], eax
je 0x517b06
test dword [ecx + 0x24], 0x40000
je 0x517a7d
push dword [ebp - 0x30]
push 0x76
push edi
call fcn.00508ed0
add esp, 0xc
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x517a92
push eax
push 1
push 0x45
push edi
call fcn.00508f30
add esp, 0x10
push dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
push dword [ebp - 0x20]
push dword [ebp - 0x10]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0x2c]
push dword [ebp - 0x30]
movzx eax, byte [ecx + eax*2 + 0x58499c]
push eax
push edi
call fcn.00509060
mov eax, dword [ebp - 0x48]
add esp, 0x18
test eax, eax
je 0x517b09
mov eax, dword [edi + 0x6c]
add eax, 2
push eax
push 0
push 0xb
push edi
call fcn.00508f30
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
mov eax, 1
cmp eax, dword [ebp - 0xc]
push dword [ebp - 0x10]
sbb eax, eax
push dword [ebp - 0x30]
and eax, 4
movzx eax, byte [eax + ecx + 0x58499e]
push eax
push edi
call fcn.00509060
add esp, 0x28
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x517bbb
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x38]
movzx ecx, ax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
push ecx
push eax
push edx
push ebx
mov dword [ebp + 0x14], edx
mov dword [ebp - 0x50], eax
call fcn.004c51d0
push dword [ebp - 0x24]
push esi
push edi
call fcn.00525d90
push dword [ebp + 0x14]
call fcn.004ec400
add esp, 0x20
test eax, eax
je 0x517b5e
push dword [ebp - 0x10]
push dword [ebp - 0x50]
push 0x32
push edi
call fcn.00508f30
add esp, 0x10
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x517b8c
mov edx, dword [ebp - 0x38]
push eax
movzx eax, dx
push eax
push dword [ebp + 0x14]
call fcn.0051ec60
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
push eax
movzx eax, cx
push eax
push dword [ebp - 0x50]
push ebx
call fcn.004c4730
add esp, 0x1c
mov ecx, dword [ebp - 0x38]
push dword [ebp + 0x14]
movzx eax, cx
add dword [ebp - 0x28], eax
call fcn.004efb80
add esp, 4
test eax, eax
jne 0x517bb2
push dword [ebp - 0x24]
push esi
call fcn.004c8ac0
add esp, 8
jmp 0x517be3
mov dword [ebp - 4], 1
jmp 0x517be3
cmp byte [ebp - 0x55], 0
je 0x517be3
test eax, eax
jne 0x517be0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
push eax
push 0
push 0x48
push edi
call fcn.00508f30
add esp, 0x10
mov dword [ebp - 4], 0
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x517bf6
push eax
push dword [ebp - 0x5c]
call fcn.004e9ef0
add esp, 8
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x517c09
push eax
push dword [ebp - 0x5c]
call fcn.004e9ef0
add esp, 8
mov eax, dword [edi + 0x6c]
mov dword [esi + 0x3c], eax
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x517c55
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x517c33
mov eax, dword [edi + 0x6c]
add eax, 3
push eax
push ecx
push 0x14
push edi
call fcn.00508f30
mov eax, dword [ebp - 0x28]
add esp, 0x10
mov ecx, dword [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
mov eax, dword [ebp - 4]
push dword [ebp - 0x10]
push dword [ebp - 0x30]
movzx eax, byte [eax + ecx*2 + 0x5849a4]
push eax
push edi
call fcn.00509060
add esp, 0x18
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x517c93
mov eax, dword [edi + 0x6c]
add eax, 2
push eax
push ecx
push 0x12
push edi
call fcn.00508f30
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
add eax, ecx
push eax
push dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x10]
push dword [ebp - 0x30]
movzx eax, byte [ecx + eax*2 + 0x5849a4]
push eax
push edi
call fcn.00509060
add esp, 0x28
mov ecx, dword [ebp - 8]
mov eax, dword [ecx + 0x24]
test eax, 0x40000
je 0x517cb6
push 1
push dword [ebp - 0x30]
push 0x76
push edi
call fcn.00508f30
mov ecx, dword [ebp - 8]
add esp, 0x10
mov eax, dword [ecx + 0x24]
test al, 0x40
je 0x517cd2
mov eax, dword [ebp + 0x10]
test byte [eax + 0x28], 0x20
jne 0x517cd2
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], 1
jmp 0x517e58
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], 0
mov eax, dword [edx + 0xc]
test byte [eax + 0x24], 0x80
jne 0x517d5b
mov eax, dword [ebp + 0x10]
movzx eax, word [eax + 0x28]
test eax, 0x400
jne 0x517d26
test eax, 0x1000
mov eax, dword [ebp + 0x10]
je 0x517d0a
cmp byte [eax + 0x2e], 1
je 0x517d26
cmp word [ecx + 0x28], 0
je 0x517d26
mov ebx, dword [ebp - 0x30]
push ebx
push dword [ebp - 0x1c]
push edx
push eax
call fcn.004c49e0
mov edx, dword [ebp - 0x34]
add esp, 0x10
mov eax, dword [ebp + 0x10]
jmp 0x517e5b
inc dword [ebx + 0x2c]
mov esi, dword [ebx + 0x2c]
mov ebx, dword [ebp - 0x30]
push esi
push ebx
push 0x86
push edi
call fcn.00508f30
push esi
push 0
push dword [ebp - 0x1c]
push 0x20
push edi
call fcn.00508f90
mov esi, dword [ebp + 0x18]
add esp, 0x24
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp + 0x10]
jmp 0x517e5b
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x30]
je 0x517e55
push eax
call fcn.004ff820
mov dword [ebp - 4], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
call fcn.004f5570
mov ebx, dword [ebp - 4]
mov edx, eax
add esp, 0xc
mov dword [ebp + 0x14], 0
mov dword [ebp - 0x44], edx
movzx eax, word [ebx + 0x32]
mov ecx, eax
cmp word [ebp + 0x14], ax
jae 0x517e3c
mov dword [ebp + 0x14], edx
xor esi, esi
mov eax, dword [ebp - 0x34]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x517dcd
mov eax, dword [ebx + 4]
movzx ebx, word [eax + esi*2]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
nop dword [eax]
cmp bx, word [eax]
je 0x517df0
inc ecx
add eax, 2
cmp ecx, edx
jl 0x517dc0
or eax, 0xffffffff
mov ecx, dword [edi + 0x6c]
movsx edx, ax
cmp dword [edi + 0x70], ecx
jg 0x517df5
mov ebx, dword [ebp + 0x14]
push ebx
push edx
push dword [ebp - 0x30]
push 0x59
push edi
call fcn.004d0d80
add esp, 0x14
jmp 0x517e22
movzx eax, cx
jmp 0x517dd0
mov ebx, dword [ebp - 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp + 0x14]
mov dword [eax + ecx*4], 0x59
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
inc ebx
inc esi
mov dword [ebp + 0x14], ebx
mov ebx, dword [ebp - 4]
movzx ecx, word [ebx + 0x32]
cmp esi, ecx
jl 0x517da2
mov esi, dword [ebp + 0x18]
mov edx, dword [ebp - 0x44]
movzx eax, cx
push eax
push edx
push dword [ebp - 0x68]
push dword [ebp - 0x1c]
push 0x1d
push edi
call fcn.00509060
mov edx, dword [ebp - 0x34]
add esp, 0x18
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x30]
cmp dword [esi], 0
jne 0x51800f
test byte [eax + 0x28], 0x20
jne 0x517ff5
mov ecx, dword [edx + 0x28]
test ecx, ecx
jne 0x517e82
test dword [edx + 0x38], 0x400
je 0x517ff5
mov eax, dword [edx + 0xc]
xorps xmm0, xmm0
mov dword [ebp + 0x14], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x88], ebx
xor ebx, ebx
movlpd qword [ebp - 0xac], xmm0
mov eax, dword [eax]
movlpd qword [ebp - 0xa4], xmm0
movlpd qword [ebp - 0x9c], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
xor eax, eax
cmp ax, word [edx + 0x34]
jae 0x517ff5
mov esi, dword [ebp - 0x34]
lea edi, [ecx + 4]
nop
mov eax, dword [esi + 4]
movzx eax, word [eax + ebx*2]
cmp ax, 0xfffe
jne 0x517f51
mov eax, dword [edi]
mov ecx, 1
mov dword [ebp - 0x90], eax
mov word [ebp - 0xb4], cx
mov dword [ebp - 0xc4], fcn.004cbc40
mov dword [ebp - 0xc0], 0x504920
mov dword [ebp - 0xb0], 0
test eax, eax
je 0x517fdf
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.005252e0
add esp, 8
cmp word [ebp - 0xb4], 0
jne 0x517fdf
mov dword [ebp - 0xa8], 0x5258a0
jmp 0x517f98
test ax, ax
js 0x517fdf
cwde
mov dword [ebp - 0x44], eax
lea ecx, [eax + eax*4]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 4]
test byte [eax + ecx*4 + 0x10], 0x20
je 0x517fdf
mov eax, dword [eax + ecx*4 + 8]
test eax, eax
je 0x517f88
push 0x583f30
push eax
call fcn.00505c60
add esp, 8
test eax, eax
jne 0x517fdf
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0xa8], 0x525830
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x84], ebx
mov eax, dword [eax + 0x10]
test eax, eax
je 0x517fb8
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.005252e0
add esp, 8
mov eax, dword [ebp + 0x10]
push dword [eax + 8]
lea eax, [ebp - 0xac]
push eax
call fcn.00516110
mov eax, dword [ebp + 0x10]
push dword [eax + 0xc]
lea eax, [ebp - 0xac]
push eax
call fcn.00516110
add esp, 0x10
movzx eax, word [esi + 0x34]
inc ebx
add edi, 0x14
cmp ebx, eax
jl 0x517ee0
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx + 0x24]
test eax, eax
je 0x518012
mov ecx, dword [ebp - 0x60]
push ecx
push dword [ebp - 0x1c]
push eax
call fcn.00525440
add esp, 0xc
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 8]
test dword [edx + 0x24], 0x1000
je 0x518024
mov byte [esi + 0x35], 0xad
jmp 0x518030
cmp dword [ebp - 0x2c], 0
sete al
add al, 4
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x30]
mov dword [esi + 0x38], eax
mov al, byte [edx + 0x26]
and al, 1
mov byte [esi + 0x36], al
test byte [edx + 0x24], 0xf
jne 0x518048
mov byte [esi + 0x37], 1
xor eax, eax
cmp dword [ebp - 0x18], eax
cmove eax, ecx
mov dword [ebp - 0x44], eax
jmp 0x51882d
test edx, 0x2000
je 0x5187ed
mov eax, dword [ebx + 0x28]
dec dword [ebx + 0x38]
inc dword [ebx + 0x2c]
mov dword [ebp - 0x2c], eax
inc eax
mov dword [ebx + 0x28], eax
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x2c]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x14], 0
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x3c], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [eax + 0x1c]
mov dword [esi + 0x38], edx
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x40], eax
mov byte [esi + 0x35], 0x41
mov al, byte [edx + 0x2c]
cmp al, 1
jbe 0x5181dd
mov ecx, dword [ebp - 0x5c]
movzx eax, al
sub eax, dword [ebp + 0x14]
dec eax
mov dword [ebp + 0x14], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x5180fe
push ecx
call fcn.004e9f60
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0x20], ecx
jmp 0x51810b
call fcn.004f9810
add esp, 8
mov dword [ebp - 0x20], eax
mov ecx, eax
test ecx, ecx
jne 0x51811c
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x14]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
mov eax, dword [ebp + 0x10]
movq qword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
cmp edx, 1
jl 0x5181b2
add ecx, 0x50
mov edi, eax
add esi, 0x8c
nop
movzx eax, byte [esi]
lea esi, [esi + 0x58]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [edi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [edi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x518170
mov edi, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp + 0x10]
test byte [eax + 0x28], 0x10
jne 0x51821a
test byte [ecx + 0x24], 0x80
jne 0x5181e5
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
push eax
push 0
push 0x48
push edi
mov dword [ebp - 0x14], eax
call fcn.00508f30
add esp, 0x10
jmp 0x518211
mov eax, dword [edx + 4]
mov dword [ebp - 0x20], eax
jmp 0x5181b5
push ecx
call fcn.004ff820
mov esi, eax
mov eax, dword [ebx + 0x28]
mov dword [ebp - 0x14], eax
lea ecx, [eax + 1]
mov dword [ebx + 0x28], ecx
movzx ecx, word [esi + 0x32]
push ecx
push eax
push 0x64
push edi
call fcn.00508f30
push esi
push ebx
call fcn.00513e00
add esp, 0x1c
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 0x38], eax
mov esi, dword [edi + 0x6c]
mov dword [ebp - 0x28], esi
cmp dword [edi + 0x70], esi
jg 0x51823c
push 0
push dword [ebp - 0x18]
push 0
push 0x45
push edi
call fcn.004d0d80
add esp, 0x14
mov dword [ebp - 0x28], eax
jmp 0x51826e
mov edx, dword [ebp - 0x18]
lea eax, [esi + 1]
mov dword [edi + 0x6c], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0x60]
mov eax, dword [ecx + 0xc]
cmp eax, 1
jle 0x51830e
xor ecx, ecx
mov dword [ebp + 0x14], ecx
test eax, eax
jle 0x51830e
mov edx, dword [ebp - 0x30]
xor esi, esi
mov eax, dword [ebp - 0x60]
xor edi, edi
mov eax, dword [eax + 0x14]
add eax, esi
cmp eax, edx
je 0x5182de
test byte [eax + 0xa], 6
jne 0x5182de
mov ebx, 0x1fff
test word [eax + 0xc], bx
mov ebx, dword [ebp + 8]
je 0x5182de
mov eax, dword [eax]
test eax, eax
je 0x5182c9
push 0
push 0
push eax
push dword [ebp - 0x5c]
call fcn.004cb270
add esp, 0x10
jmp 0x5182cb
xor eax, eax
push eax
push edi
push ebx
call fcn.004ec080
mov ecx, dword [ebp + 0x14]
add esp, 0xc
mov edx, dword [ebp - 0x30]
mov edi, eax
mov eax, dword [ebp - 0x60]
inc ecx
add esi, 0x30
mov dword [ebp + 0x14], ecx
cmp ecx, dword [eax + 0xc]
jl 0x518294
mov dword [ebp - 0x24], edi
test edi, edi
mov edi, dword [ebp + 0xc]
je 0x51830e
mov eax, dword [ebp - 0x24]
push eax
push 0
push 0x1002c
push ebx
call fcn.004fa600
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0x10]
mov esi, 0x400
push str.MULTI_INDEX_OR
push 1
push ebx
mov ax, word [eax + 0x28]
and ax, si
or ax, 0x20
movzx eax, ax
mov dword [ebp - 8], eax
call fcn.00510b50
mov ecx, dword [ebp - 0x40]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x4c], eax
cmp dword [ecx + 0xc], eax
jle 0x51866c
mov edx, dword [ebp - 0x1c]
nop dword [eax + eax]
lea eax, [eax + eax*2]
shl eax, 4
add eax, dword [ecx + 0x14]
cmp dword [eax + 0x14], edx
je 0x518368
test word [eax + 0xc], si
je 0x51865c
mov esi, dword [eax]
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x51837b
mov dword [eax + 0xc], esi
mov esi, eax
mov eax, dword [ebp - 0x4c]
inc eax
push eax
push str.INDEX__d
push 1
push ebx
call fcn.00510b50
push dword [ebp - 0x2c]
push dword [ebp - 8]
push 0
push 0
push esi
mov esi, dword [ebp - 0x20]
push esi
push ebx
call fcn.00516300
add esp, 0x2c
mov dword [ebp - 0x70], eax
test eax, eax
je 0x518651
push 0
lea ecx, [eax + 0x2f0]
push ecx
push esi
push ebx
call fcn.005196a0
mov eax, dword [ebp + 0x10]
add esp, 0x10
test byte [eax + 0x28], 0x10
jne 0x51853d
mov eax, dword [ebp - 0x40]
mov esi, dword [ebp - 0x4c]
mov eax, dword [eax + 0xc]
dec eax
cmp esi, eax
mov eax, 0xffffffff
cmove esi, eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x48], esi
test byte [eax + 0x24], 0x80
jne 0x51841a
mov edx, dword [ebp - 0x38]
push edx
push dword [ebp - 0x1c]
push 0x7f
push edi
call fcn.00508f30
push esi
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x14]
push 0x2d
push edi
call fcn.00509060
add esp, 0x28
mov esi, eax
jmp 0x518540
push eax
call fcn.004ff820
mov dword [ebp - 0x6c], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
mov dword [ebp - 4], eax
call fcn.004f5570
xor esi, esi
mov dword [ebp + 0x14], eax
add esp, 0xc
cmp dword [ebp - 4], esi
jbe 0x51846a
mov ebx, dword [ebp - 4]
lea ecx, [esi + eax]
mov eax, dword [ebp - 0x6c]
push ecx
mov eax, dword [eax + 4]
movsx eax, word [eax + esi*2]
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x3c]
push edi
call fcn.004ec990
mov eax, dword [ebp + 0x14]
inc esi
add esp, 0x14
cmp esi, ebx
jl 0x518441
mov ebx, dword [ebp + 8]
cmp dword [ebp - 0x48], 0
mov esi, dword [ebp - 4]
je 0x51848e
push esi
push eax
push 0
push dword [ebp - 0x14]
push 0x1e
push edi
call fcn.00509060
add esp, 0x18
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x48], 0
jl 0x51850a
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 0x14]
cmp dword [edi + 0x70], ecx
jg 0x5184ab
push dword [ebp - 0x38]
push esi
push edx
push 0x5b
push edi
call fcn.004d0d80
add esp, 0x14
jmp 0x5184d5
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x38]
mov dword [eax + ecx*4], 0x5b
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push esi
push dword [ebp + 0x14]
push dword [ebp - 0x38]
push dword [ebp - 0x14]
push 0x83
push edi
call fcn.00509060
add esp, 0x18
cmp dword [ebp - 0x48], 0
je 0x51850a
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x51850a
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
cmp esi, 1
jne 0x51852f
mov ecx, dword [ebp + 0x14]
test ecx, ecx
je 0x51853d
mov al, byte [ebx + 0x13]
mov esi, dword [ebp - 0x10]
cmp al, 8
jae 0x518540
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x518540
cmp esi, dword [ebx + 0x1c]
jle 0x51853d
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], eax
mov esi, dword [ebp - 0x10]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x51855d
push 0
push dword [ebp - 0xc]
push dword [ebp - 0x18]
push 0xc
push edi
call fcn.004d0d80
add esp, 0x14
jmp 0x51858e
mov edx, dword [ebp - 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xc]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test esi, esi
je 0x5185b8
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x5185a4
mov eax, 0x5bad84
jmp 0x5185b5
test esi, esi
lea eax, [edx - 1]
cmovns eax, esi
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x70]
mov ecx, 1
mov eax, dword [ebp - 0x34]
test byte [edx + 0x30], 2
cmovne eax, ecx
mov ecx, dword [edx + 0x338]
mov dword [ebp - 0x34], eax
test dword [ecx + 0x24], 0x200
je 0x518607
cmp dword [ebp - 0x4c], 0
je 0x5185ea
mov eax, dword [ebp - 0x50]
cmp dword [ecx + 0x20], eax
jne 0x518607
mov eax, dword [ebp - 0x3c]
test byte [eax + 0x24], 0x80
je 0x5185ff
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
je 0x518607
mov esi, dword [ecx + 0x20]
mov dword [ebp - 0x50], esi
jmp 0x51860e
mov dword [ebp - 0x50], 0
push edx
call fcn.00518bc0
mov ecx, dword [ebx + 0xd4]
add esp, 4
test ecx, ecx
jne 0x518625
xor eax, eax
jmp 0x51864b
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x518630
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x51863f
mov eax, 0x5bad84
jmp 0x518648
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xd4], eax
mov edx, dword [ebp - 0x1c]
mov esi, 0x400
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp eax, dword [ecx + 0xc]
jl 0x518350
mov ecx, dword [ebx + 0xd4]
test ecx, ecx
jne 0x51867a
xor eax, eax
jmp 0x5186a0
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x518685
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x518694
mov eax, 0x5bad84
jmp 0x51869d
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov esi, dword [ebp + 0x18]
mov dword [ebx + 0xd4], eax
mov eax, dword [ebp - 0x50]
mov dword [esi + 0x40], eax
test eax, eax
je 0x5186b9
mov eax, dword [ebp - 0x2c]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x5c]
test eax, eax
je 0x5186d4
push eax
push ebx
mov dword [eax + 0xc], 0
call fcn.004eeea0
add esp, 8
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x5186e6
mov eax, 0x5bad84
jmp 0x5186fa
mov ecx, dword [ebp - 0x28]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x51871a
push 0
push edx
push 0
push 0xb
push edi
call fcn.004d0d80
add esp, 0x14
jmp 0x518749
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [ebp - 0xc]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x518766
push edx
push edi
push ecx
call fcn.004dd010
add esp, 0xc
jmp 0x51876f
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp + 0x10]
cmp byte [eax + 0x2c], 1
jbe 0x5187d9
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x5187d9
test ebx, ebx
je 0x5187d0
cmp dword [ebx + 0x1f8], 0
je 0x518798
push ecx
push ebx
call fcn.004d3b20
add esp, 8
jmp 0x5187d9
cmp ecx, dword [ebx + 0x14c]
jae 0x5187d0
cmp ecx, dword [ebx + 0x144]
jb 0x5187b8
mov eax, dword [ebx + 0x140]
mov dword [ecx], eax
mov dword [ebx + 0x140], ecx
jmp 0x5187d9
cmp ecx, dword [ebx + 0x148]
jb 0x5187d0
mov eax, dword [ebx + 0x138]
mov dword [ecx], eax
mov dword [ebx + 0x138], ecx
jmp 0x5187d9
push ecx
call fcn.004af550
add esp, 4
cmp dword [ebp - 0x34], 0
jne 0x51882b
push dword [ebp - 0x30]
push esi
call fcn.004c8ac0
add esp, 8
jmp 0x51882b
mov eax, dword [ebp - 0x64]
test byte [eax + 0x28], 0x20
je 0x5187fc
mov byte [esi + 0x35], 0xad
jmp 0x51882b
mov ecx, dword [ebp - 0x2c]
push dword [ebp - 0x50]
mov al, byte [ecx + 0x5849a8]
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x1c]
push eax
mov dword [esi + 0x38], eax
movzx eax, byte [ecx + 0x5849ac]
push eax
push edi
call fcn.00508f30
add esp, 0x10
mov byte [esi + 0x37], 1
inc eax
mov dword [esi + 0x3c], eax
xor eax, eax
mov edx, dword [ebp - 0x60]
mov ecx, eax
neg ecx
sbb ecx, ecx
add ecx, 2
mov dword [ebp - 0x18], ecx
nop dword [eax]
mov ebx, dword [edx + 0xc]
xor eax, eax
mov esi, dword [edx + 0x14]
mov dword [ebp + 0x14], eax
mov dword [ebp - 4], ebx
test ebx, ebx
jle 0x518a0d
movzx edx, word [esi + 0xa]
xor ebx, ebx
test dl, 6
jne 0x5189f2
mov eax, dword [ebp + 0x18]
mov edi, dword [ebp + 0x18]
mov ecx, dword [esi + 0x28]
and ecx, dword [eax + 0x50]
mov eax, dword [esi + 0x2c]
and eax, dword [edi + 0x54]
or ecx, eax
mov edi, dword [ebp + 0xc]
je 0x51888a
mov eax, dword [ebp + 0x10]
or dword [eax + 0x30], 2
jmp 0x5189ef
mov eax, dword [ebp - 0x64]
mov ecx, dword [esi]
mov dword [ebp - 0x40], ecx
test byte [eax + 0x24], 8
je 0x5188a2
test byte [ecx + 4], 1
je 0x5189ef
mov eax, dword [ebp - 0x18]
cmp eax, 1
jne 0x518906
mov eax, dword [ebp + 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x90], ebx
movlpd qword [ebp - 0x88], xmm0
movlpd qword [ebp - 0x80], xmm0
mov eax, dword [eax + 4]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x8c], 0x4cb660
mov dword [ebp - 0x78], eax
test ecx, ecx
je 0x5188f3
push ecx
lea eax, [ebp - 0x90]
push eax
call fcn.005252e0
add esp, 8
cmp word [ebp - 0x7c], bx
je 0x51890b
mov eax, 2
mov dword [ebp + 0x14], eax
jmp 0x5189f2
cmp eax, 3
jge 0x51892f
movzx edx, word [esi + 0xa]
test edx, 0x1000
je 0x51892f
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x5189f2
mov eax, 3
mov dword [ebp + 0x14], eax
jmp 0x5189f2
test edx, 0x200
je 0x5189ad
mov eax, dword [ebp + 0x18]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x5189ad
mov ebx, dword [edi + 0x6c]
mov edx, eax
and eax, 1
shr edx, 1
mov dword [ebp - 0x6c], edx
lea eax, [eax*2 + 0x12]
mov dword [ebp - 0x70], eax
cmp dword [edi + 0x70], ebx
jg 0x518970
push 0
push 0
push edx
push eax
push edi
call fcn.004d0d80
add esp, 0x14
mov ebx, eax
jmp 0x5189ad
mov edx, dword [ebp - 0x70]
lea eax, [ebx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov edx, dword [ebp - 0x6c]
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0x10
push dword [ebp - 0x68]
push dword [ebp - 0x40]
push dword [ebp + 8]
call fcn.004ef1b0
add esp, 0x10
test ebx, ebx
je 0x5189ea
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x5189d6
mov eax, 0x5bad84
jmp 0x5189e7
test ebx, ebx
lea eax, [edx - 1]
cmovns eax, ebx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [esi + 0xa], 4
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp - 4]
add esi, 0x30
dec edx
mov dword [ebp - 4], edx
test edx, edx
jg 0x518856
mov edx, dword [ebp - 0x60]
mov esi, dword [edx + 0x14]
mov ebx, dword [edx + 0xc]
mov dword [ebp - 0x18], eax
test eax, eax
jg 0x518840
test ebx, ebx
jle 0x518b0b
add esi, 0xc
test byte [esi - 2], 6
jne 0x518af9
movzx eax, word [esi]
mov edi, 0xb
test al, 0x82
setne cl
bt ax, di
mov edi, dword [ebp + 8]
setb al
test al, cl
je 0x518af9
mov ecx, dword [ebp - 0x1c]
cmp dword [esi + 8], ecx
jne 0x518af9
mov eax, dword [ebp - 0x64]
test byte [eax + 0x24], 8
jne 0x518af9
mov eax, dword [esi - 0xc]
push 0
push 0x83
push dword [ebp + 0x20]
mov dword [ebp + 0x10], eax
push dword [ebp + 0x1c]
push dword [esi + 0x10]
push ecx
push edx
call fcn.00519b20
mov ecx, eax
add esp, 0x1c
test ecx, ecx
je 0x518af9
test byte [ecx + 0xa], 4
jne 0x518af9
test byte [ecx + 0xc], 1
je 0x518aad
mov eax, dword [ecx]
test dword [eax + 4], 0x800
je 0x518aad
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x518af9
mov eax, dword [ecx]
push 0x10
push dword [ebp - 0x68]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe0], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0xd0], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ebp - 0xc0], xmm0
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xe0]
push eax
push edi
call fcn.004ef1b0
add esp, 0x10
mov edx, dword [ebp - 0x60]
dec ebx
add esi, 0x30
test ebx, ebx
jg 0x518a23
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x18]
mov edx, dword [ebx]
test edx, edx
je 0x518bad
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x1c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x518b38
push 0
push edx
push 1
push 0x45
push edi
call fcn.004d0d80
add esp, 0x14
jmp 0x518b67
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0x60]
xor edi, edi
mov esi, dword [edx + 0x14]
cmp dword [edx + 0xc], edi
jle 0x518bad
test byte [esi + 0xa], 6
jne 0x518ba4
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [ebx + 0x50]
and eax, dword [ebx + 0x54]
or ecx, eax
jne 0x518ba4
push 0x10
push dword [ebp - 0x68]
push dword [esi]
push dword [ebp + 8]
call fcn.004ef1b0
mov edx, dword [ebp - 0x60]
add esp, 0x10
or word [esi + 0xa], 4
inc edi
add esi, 0x30
cmp edi, dword [edx + 0xc]
jl 0x518b74
mov eax, dword [ebx + 0x50]
mov edx, dword [ebx + 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret