Function at 0x4f9d70
Capabilities:
Authenticate hmac
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x12c
mov eax, dword [0x5d1e24]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 8]
lea eax, [edx + 0x50]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x9c], edx
push edi
mov eax, dword [esi]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebx + 0x40]
mov dword [ebp - 0x7c], eax
movzx eax, byte [ebx + 0x2c]
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0x90], ebx
lea ecx, [eax + eax*8]
mov dword [ebp - 0xc4], 0
mov eax, dword [edx + 4]
mov edx, dword [edx + 0x1ec]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [ebp - 0xdc], eax
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x8c], eax
xor eax, eax
test edx, edx
jle 0x4f9e1e
mov ecx, dword [ebp - 0x9c]
add ecx, 0x1f0
mov edi, dword [ebp - 0x8c]
cmp dword [ecx], edi
mov edi, dword [ebp - 0xc8]
je 0x4f9f24
inc eax
add ecx, 4
cmp eax, edx
jl 0x4f9e02
xorps xmm0, xmm0
movlpd qword [ebp - 0xf0], xmm0
mov edx, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xf0]
not ecx
not edx
and ecx, dword [ebp + 0x1c]
and edx, dword [ebp + 0x20]
mov dword [ebx + 0x48], ecx
mov ecx, dword [ebp - 0x9c]
mov dword [ebx + 0x4c], edx
mov eax, dword [ecx + 0x40]
mov edx, dword [ecx + 0x44]
mov ecx, dword [ebp + 0x14]
call fcn.005814b0
and eax, 1
mov dword [ebp - 0xa4], eax
mov eax, dword [esi + 0x38]
dec eax
mov dword [esi + 0x38], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0xc], eax
mov dword [ebp - 0x94], eax
mov eax, dword [esi + 0x38]
dec eax
mov dword [esi + 0x38], eax
cmp byte [ebx + 0x2c], 0
mov dword [ebp - 0xe0], eax
mov dword [ebx + 0x18], eax
jbe 0x4f9eae
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x24], 8
je 0x4f9eae
mov eax, dword [esi + 0x2c]
inc eax
push eax
push 0
push 0x46
mov dword [esi + 0x2c], eax
push edi
mov dword [ebx], eax
call fcn.004ec510
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov ecx, eax
test eax, eax
jle 0x4f9edd
mov edx, dword [ebp - 0x9c]
lea eax, [eax + eax*4]
shl eax, 4
add edx, 0x2f0
add eax, edx
nop dword [eax + eax]
cmp dword [eax], 0
jne 0x4f9edd
dec ecx
sub eax, 0x50
test ecx, ecx
jg 0x4f9ed0
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x9c]
add eax, eax
mov eax, dword [ecx + eax*8 + 0x2fc]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x28], 0x10
je 0x4f9fd6
mov ecx, dword [edi + 0x6c]
mov esi, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x4f9f3e
push edx
push 0
push esi
push 0xd
push edi
call fcn.004ab170
add esp, 0x14
jmp 0x4f9f69
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x4f9e35
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [edi + 0x6c]
cmp dword [edi + 0x70], edx
jg 0x4f9f93
push 0
push dword [ebp - 0x94]
push esi
push 0xe
push edi
call fcn.004ab170
mov edx, eax
mov byte [ebx + 0x2d], 0xb
add esp, 0x14
mov dword [ebx + 0x34], edx
jmp 0x4fbaac
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [ebx + 0x34], edx
mov byte [ebx + 0x2d], 0xb
jmp 0x4fbaac
mov eax, dword [ebp - 0x7c]
mov edx, dword [eax + 0x24]
test edx, 0x400
je 0x4fa41b
mov edx, eax
movzx eax, word [edx + 0x28]
mov dword [ebp - 0x78], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x4fa01f
mov al, byte [esi + 0x13]
test al, al
jne 0x4fa00b
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0x74], eax
jmp 0x4fa049
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x94]
mov dword [ebp - 0x74], eax
jmp 0x4fa049
mov edx, dword [esi + 0x1c]
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x74], eax
cmp ecx, edx
jg 0x4fa038
add eax, ecx
sub edx, ecx
mov dword [esi + 0x20], eax
mov dword [esi + 0x1c], edx
jmp 0x4fa046
mov eax, dword [esi + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [ebp - 0x74], edx
mov dword [esi + 0x2c], eax
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebx + 0xc]
xor esi, esi
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x78], esi
jbe 0x4fa0b3
mov edi, dword [ebp - 0xb4]
nop dword [eax]
mov eax, dword [edx + 0x30]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x4fa0a7
mov ecx, dword [ebp - 0x74]
add ecx, 2
add ecx, esi
test byte [eax + 0xc], 1
je 0x4fa093
push ecx
push dword [ebp - 0xa4]
push esi
push ebx
push eax
push edi
call fcn.00490240
mov eax, dword [ebx + 0x10]
add esp, 0x18
mov dword [ebp - 0x70], eax
jmp 0x4fa0a4
mov eax, dword [eax]
push 1
push ecx
push dword [eax + 0x10]
push edi
call fcn.00490830
add esp, 0x10
mov edx, dword [ebp - 0x7c]
inc esi
cmp esi, dword [ebp - 0x78]
jl 0x4fa060
mov edi, dword [ebp - 0xc8]
mov ecx, dword [edi + 0x6c]
mov edx, dword [edx + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x4fa0d1
push 0
push dword [ebp - 0x74]
push edx
push 0x46
push edi
call fcn.004ab170
add esp, 0x14
jmp 0x4fa0ff
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x74]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0x74]
mov ecx, dword [edi + 0x6c]
inc edx
mov esi, dword [ebp - 0x78]
cmp dword [edi + 0x70], ecx
jg 0x4fa11f
push 0
push edx
push esi
push 0x46
push edi
call fcn.004ab170
add esp, 0x14
jmp 0x4fa14a
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0x7c]
or eax, 0xffffffff
mov edx, 0xfffffff9
cmp byte [ecx + 0x1c], 0
cmovne eax, edx
mov edx, dword [edi + 0x6c]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + 0x20]
mov dword [ebp - 0xac], eax
cmp dword [edi + 0x70], edx
jg 0x4fa18b
push dword [ebp - 0x74]
push dword [ebp - 0x70]
push dword [ebp - 0x8c]
push 9
push edi
call fcn.004ab170
add esp, 0x14
mov edx, eax
jmp 0x4fa1c4
mov ebx, dword [ebp - 0x8c]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [ebp - 0x74]
mov dword [eax + ecx*4 + 0xc], ebx
mov ebx, dword [ebp - 0x90]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 0x10], 0
push dword [ebp - 0x68]
push dword [ebp - 0xac]
push edx
push edi
call fcn.004ec9f0
mov edx, dword [ebp - 0x7c]
add esp, 0x10
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x8c]
mov byte [edx + 0x1c], 0
mov dword [ebx + 0x30], eax
mov eax, 0x3c
cmp byte [ecx + 0x31], 0
mov ecx, 0xaa
cmovne eax, ecx
lea ecx, [esi - 1]
mov byte [ebx + 0x2d], al
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x34], eax
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x6c], ecx
test ecx, ecx
js 0x4fbaac
lea esi, [eax + eax*4]
shl esi, 2
mov dword [ebp - 0x70], esi
mov eax, dword [edx + 0x30]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0xac], edx
cmp ecx, 0x10
jge 0x4fa252
mov eax, dword [ebp - 0x7c]
mov ax, word [eax + 0x1e]
shr ax, cl
test al, 1
je 0x4fa24f
push edx
push ebx
call fcn.00494370
add esp, 8
jmp 0x4fa404
mov ecx, dword [ebp - 0x6c]
test byte [edx + 0xc], 1
je 0x4fa407
mov eax, dword [ebp - 0xd4]
cmp byte [eax + 0x51], 0
jne 0x4fa30d
mov eax, dword [ebx + 0x3c]
sub esi, 0x14
mov dword [ebp - 0x70], esi
mov ecx, dword [eax + esi + 4]
test ecx, ecx
jns 0x4fa281
mov ecx, dword [edi + 0x6c]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x4fa290
mov eax, 0x5de0e4
jmp 0x4fa299
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov al, byte [eax]
mov dword [ebp - 0x68], ecx
mov ecx, dword [edi + 0x6c]
mov byte [ebp - 0x95], al
cmp dword [edi + 0x70], ecx
jg 0x4fa2c9
push edx
push esi
push dword [ebp - 0x68]
movzx eax, al
push eax
push edi
call fcn.004ab170
add esp, 0x14
jmp 0x4fa30d
mov bl, byte [ebp - 0x95]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
xor edi, edi
mov word [eax + ecx*4 + 2], di
mov edi, dword [ebp - 0x68]
mov byte [eax + ecx*4], bl
mov ebx, dword [ebp - 0x90]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
mov eax, dword [ebp - 0xb4]
push 0
push 0x34
push dword [eax]
call fcn.004c9310
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4fa401
push 0x34
push 0
push esi
call fcn.0054f9f0
or eax, 0xffffffff
mov byte [esi], 0x35
push esi
mov word [esi + 0x22], ax
call fcn.00497290
mov ecx, dword [ebp - 0xb4]
add esp, 0x10
mov eax, dword [ecx]
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x4fa367
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.004caf50
add esp, 0xc
mov eax, dword [ebp - 0xac]
push 0
push 0x35
push dword [ebp - 0xd4]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esi + 0xc], eax
call fcn.004c9310
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x4fa3b4
push 0x34
push 0
push ebx
call fcn.0054f9f0
add esp, 0xc
mov byte [ebx], 0xa8
or eax, 0xffffffff
mov word [ebx + 0x22], ax
lea eax, [ebx + 0x34]
mov dword [ebx + 8], eax
mov byte [eax], 0
mov dword [ebx + 0x18], 1
mov dword [esi + 0x10], ebx
test ebx, ebx
je 0x4fa3e5
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x6c]
add ecx, 2
add eax, ecx
mov dword [ebx + 0x1c], eax
mov ebx, dword [ebp - 0x90]
push 0
push dword [ebx + 0x18]
push esi
push dword [ebp - 0xb4]
call fcn.004ce260
add esp, 0x10
jmp 0x4fa3eb
mov ebx, dword [ebp - 0x90]
push esi
push dword [ebp - 0xd4]
mov dword [esi + 0xc], 0
call fcn.004cdf80
add esp, 8
mov esi, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x7c]
sub ecx, 1
mov dword [ebp - 0x6c], ecx
jns 0x4fa221
jmp 0x4fbaac
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x4fa4f7
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
push ecx
push dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
push 0
push ebx
push eax
push esi
mov dword [ebp - 0x68], ecx
call fcn.00490240
mov ecx, dword [ebp - 0x68]
mov edx, eax
add esp, 0x18
cmp edx, ecx
je 0x4fa47c
test ecx, ecx
je 0x4fa47c
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x4fa47c
movzx eax, al
mov dword [esi + eax*4 + 0x94], ecx
inc byte [esi + 0x13]
mov ecx, dword [edi + 0x6c]
mov esi, dword [ebx + 0x10]
cmp dword [edi + 0x70], ecx
jg 0x4fa49c
push edx
push esi
push dword [ebp - 0x8c]
push 0x1e
push edi
call fcn.004ab170
add esp, 0x14
jmp 0x4fa4cf
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0x8c]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0x1e
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0xac]
mov byte [ebx + 0x2d], 0xaa
mov ecx, dword [edx + 0x28]
mov eax, dword [edx + 0x2c]
and ecx, dword [ebx + 0x48]
and eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x4fbaac
or word [edx + 0xa], 4
jmp 0x4fbaac
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x4fa786
xor ecx, ecx
mov dword [ebp - 0x70], 0xaa
xor eax, eax
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xac], ecx
test dl, 0x20
je 0x4fa542
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x68], 4
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
xor eax, eax
mov dword [ebp - 0xac], ecx
jmp 0x4fa545
mov dword [ebp - 0x68], eax
test dl, 0x10
je 0x4fa556
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x68]
mov eax, dword [eax + 0x30]
mov eax, dword [edx + eax]
mov edx, dword [ebp - 0xa4]
test edx, edx
cmove ecx, eax
cmove eax, dword [ebp - 0xac]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xd0], eax
test eax, eax
je 0x4fa65f
mov edx, dword [eax]
mov dword [ebp - 0x6c], 0x18161719
mov dword [ebp - 0x68], edx
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0xac], eax
call fcn.004cebe0
add esp, 4
test eax, eax
je 0x4fa5e4
mov al, byte [esi + 0x13]
test al, al
jne 0x4fa5ad
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x4fa5bc
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x94]
push 1
push eax
push dword [edx + 0x10]
mov dword [ebp - 0x78], eax
push esi
call fcn.00490830
mov eax, dword [ebp - 0x68]
add esp, 0x10
mov ecx, dword [ebp - 0x78]
movzx eax, byte [eax]
inc eax
and eax, 2
or eax, 1
mov dl, byte [ebp + eax - 0x6c]
jmp 0x4fa628
lea eax, [ebp - 0xbc]
push eax
push dword [ebp - 0xac]
push esi
call fcn.004cd9a0
push dword [ebp - 0xd0]
mov dword [ebp - 0xac], eax
push ebx
call fcn.00494370
mov eax, dword [ebp - 0x68]
add esp, 0x14
mov ecx, dword [ebp - 0xac]
movzx eax, byte [eax]
mov dl, byte [ebp + eax - 0xa2]
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x78], eax
push ecx
push dword [ebp - 0x94]
movzx eax, dl
push dword [ebp - 0x8c]
push eax
push edi
call fcn.004ec570
mov ecx, dword [ebp - 0x78]
add esp, 0x14
test ecx, ecx
je 0x4fa681
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x4fa681
movzx eax, al
mov dword [esi + eax*4 + 0x94], ecx
inc byte [esi + 0x13]
jmp 0x4fa681
push dword [ebp - 0xbc]
mov eax, edx
push dword [ebp - 0x8c]
xor eax, 1
lea eax, [eax*4 + 0x20]
push eax
push edi
call fcn.004ec510
add esp, 0x10
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4fa70f
mov eax, dword [eax]
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
push 1
push ecx
push dword [eax + 0x10]
mov dword [ebp - 0x68], eax
push esi
mov dword [ebp - 0xcc], ecx
call fcn.00490830
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0x68], eax
call fcn.004cebe0
add esp, 0x14
test eax, eax
jne 0x4fa6e1
mov al, byte [edx]
cmp al, 0x38
je 0x4fa6cc
cmp al, 0x36
jne 0x4fa6e1
mov eax, dword [ebp - 0xa4]
xor eax, 1
lea edx, [eax*2 + 0x37]
mov dword [ebp - 0x70], edx
jmp 0x4fa6f1
mov eax, dword [ebp - 0xa4]
lea eax, [eax*2 + 0x36]
mov dword [ebp - 0x70], eax
push dword [ebp - 0x68]
call fcn.004cebe0
add esp, 4
test eax, eax
jne 0x4fa70f
push dword [ebp - 0xc0]
push ebx
call fcn.00494370
add esp, 8
cmp dword [ebp - 0xa4], 0
mov ecx, dword [edi + 0x6c]
sete al
mov dword [ebx + 0x34], ecx
add al, 4
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0x8c]
mov dword [ebx + 0x30], eax
mov ebx, dword [ebp - 0x70]
cmp ebx, 0xaa
je 0x4fbaac
inc dword [esi + 0x2c]
mov esi, dword [esi + 0x2c]
push esi
push eax
push 0x80
push edi
call fcn.004ec510
push esi
push dword [ebp - 0x94]
push dword [ebp - 0xcc]
push ebx
push edi
call fcn.004ec570
mov eax, dword [edi + 0x6c]
add esp, 0x24
test eax, eax
jle 0x4fbaac
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x4fbaac
test edx, 0x200
je 0x4fb143
mov eax, dword [ebp - 0x7c]
mov esi, dword [ebx + 8]
mov dword [ebp - 0xa8], esi
mov esi, dword [ebp - 0x9c]
movzx ecx, word [eax + 0x18]
movzx eax, word [eax + 0x1a]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x7c]
test byte [esi + 0x2c], 1
mov esi, dword [ebp - 0xb4]
mov dword [ebp - 0xac], ecx
movzx eax, word [eax + 0x1c]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov eax, dword [eax + 0x20]
mov dword [ebp - 0xcc], 0
mov byte [ebp - 0x7d], 0
mov byte [ebp - 0x95], 0
mov dword [ebp - 0x74], eax
je 0x4fa830
mov ebx, dword [ebp - 0x9c]
cmp byte [ebx + 0x2f], 0
mov ebx, dword [ebp - 0x90]
jle 0x4fa830
cmp word [eax + 0x32], cx
jbe 0x4fa830
mov byte [ebp - 0x7d], 1
mov dword [ebp - 0x84], 1
movzx ecx, cx
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x68], ecx
test dl, 0x20
je 0x4fa87c
mov eax, dword [ebp - 0x7c]
mov edi, ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edi*4]
inc edi
mov dword [ebp - 0x68], edi
mov edi, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], eax
movzx eax, word [edi + 0x1a]
mov edi, dword [ebp - 0x84]
cmp edi, eax
cmovbe edi, eax
mov eax, edi
mov dword [ebp - 0x84], edi
mov edi, dword [ebp - 0xc8]
mov dword [ebp - 0x84], eax
test dl, 0x10
je 0x4fa959
mov eax, dword [ebp - 0x7c]
mov ebx, 0x100
mov edx, dword [ebp - 0x68]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x88], eax
movzx edx, word [edx + 0x1c]
cmp dword [ebp - 0x84], edx
cmova edx, dword [ebp - 0x84]
test word [eax + 0xa], bx
mov ebx, dword [ebp - 0x90]
mov dword [ebp - 0xc4], edx
je 0x4fa909
mov eax, dword [esi + 0x2c]
inc eax
push eax
push 1
push 0x46
mov dword [esi + 0x2c], eax
push edi
mov dword [ebx + 0x24], eax
call fcn.004ec510
mov eax, dword [edi + 0x6c]
xor ecx, ecx
shl dword [ebx + 0x24], 1
add esp, 0x10
mov edx, dword [ebp - 0xa0]
mov dword [ebx + 0x28], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x1c]
cmp byte [edx + eax], 1
sete cl
xor ecx, dword [ebp - 0xa4]
or dword [ebx + 0x24], ecx
mov ecx, edx
mov edx, dword [ebp - 0xc4]
cmp dword [ebp - 0xb8], 0
mov dword [ebp - 0x84], edx
jne 0x4fa959
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
movsx ecx, word [eax + ecx*2]
mov dword [ebp - 0xc4], ecx
test ecx, ecx
js 0x4fa944
mov eax, dword [ebp - 0x74]
add ecx, ecx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 4]
cmp byte [eax + ecx*8 + 0xc], 0
je 0x4fa94f
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x84], edx
cmp ecx, 0xfffffffe
jne 0x4fa959
mov byte [ebp - 0x7d], 1
mov dword [ebp - 0x84], edx
mov ecx, dword [ebp - 0x74]
mov edx, dword [ebp - 0xac]
movzx eax, word [ecx + 0x32]
mov dword [ebp - 0xc4], eax
cmp dx, ax
jae 0x4fa996
mov eax, dword [ecx + 0x1c]
xor ecx, ecx
mov edx, dword [ebp - 0xa0]
cmp byte [edx + eax], cl
sete cl
cmp dword [ebp - 0xa4], ecx
je 0x4fa9a4
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xac]
cmp dword [ebp - 0xa4], 0
je 0x4fa9e1
cmp ax, dx
jne 0x4fa9e1
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0xb8], eax
mov al, byte [ebp - 0x7d]
mov byte [ebp - 0x95], al
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x88], ecx
movzx ecx, dx
movzx eax, al
mov byte [ebp - 0x7d], 0
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0xbc]
push eax
push dword [ebp - 0x84]
push dword [ebp - 0xa4]
push ebx
push esi
call fcn.0048f940
mov ecx, dword [ebp - 0xbc]
add esp, 0x14
mov edx, eax
mov dword [ebp - 0x6c], edx
test ecx, ecx
je 0x4faa37
cmp word [ebp - 0x94], 0
je 0x4faa37
mov eax, dword [ebp - 0xa0]
add eax, ecx
push eax
push dword [ebp - 0xd4]
call fcn.004c9520
mov edx, dword [ebp - 0x6c]
add esp, 8
mov dword [ebp - 0xcc], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x4faa5a
test byte [eax + 0xc], 0x28
mov dword [ebp - 0xd0], 0
je 0x4faa64
mov dword [ebp - 0xd0], 1
mov ecx, dword [ebp - 0x88]
test ecx, ecx
je 0x4faa7b
test byte [ecx + 0xc], 0x28
mov dword [ebp - 0x70], 0
je 0x4faa82
mov dword [ebp - 0x70], 1
test eax, eax
jne 0x4fac48
cmp word [ebp - 0xac], ax
ja 0x4fac48
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x68], eax
mov al, byte [ebp - 0x7d]
mov dword [ebp - 0x84], ecx
test al, al
je 0x4faadf
lea eax, [ecx + edx]
push eax
push 0
push 0x49
push edi
call fcn.004ec510
mov eax, dword [ebp - 0xa0]
add esp, 0x10
inc eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x84], eax
mov al, byte [ebp - 0x7d]
mov dword [ebp - 0x68], 1
push dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x84]
movzx eax, al
sub ecx, eax
push ecx
push dword [ebp - 0x6c]
push esi
call fcn.0048fd30
mov ecx, dword [ebp - 0x7c]
add esp, 0x10
movzx eax, word [ecx + 0x2a]
test ax, ax
je 0x4fab11
cmp dword [ebp - 0x84], eax
je 0x4fab64
test dword [ecx + 0x24], 0x40000
je 0x4fab2b
push dword [ebp - 0xa8]
push 0x77
push edi
call fcn.004ec4b0
add esp, 0xc
push dword [ebp - 0x84]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0xc0]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0xa4]
push dword [ebp - 0xa8]
movzx eax, byte [ecx + eax*2 + 0x59e924]
push eax
push edi
call fcn.004ec640
add esp, 0x18
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x4fad3a
mov eax, dword [eax]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x94]
movzx ecx, ax
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x6c]
push ecx
push eax
push edx
push esi
mov dword [ebp - 0x68], edx
mov dword [ebp - 0xac], eax
call fcn.00490830
push dword [ebp - 0x88]
mov ebx, dword [ebp - 0x90]
push ebx
push edi
call fcn.00509620
mov edx, dword [ebp - 0x68]
push edx
call fcn.004cb860
add esp, 0x20
test eax, eax
je 0x4fabd8
push dword [ebp - 0xc0]
push dword [ebp - 0xac]
push 0x32
push edi
call fcn.004ec510
mov edx, dword [ebp - 0x68]
add esp, 0x10
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x4fac12
mov ecx, dword [ebp - 0x94]
push eax
movzx eax, cx
push eax
push edx
call fcn.00502230
push dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x94]
movzx eax, cx
push eax
push dword [ebp - 0xac]
push esi
call fcn.0048fd30
add esp, 0x1c
mov ecx, dword [ebp - 0x94]
push dword [ebp - 0x68]
movzx eax, cx
add dword [ebp - 0xa0], eax
call fcn.004cebe0
add esp, 4
test eax, eax
jne 0x4fad31
push dword [ebp - 0x88]
push ebx
call fcn.00494370
add esp, 8
jmp 0x4fad67
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x84], ecx
test eax, eax
je 0x4faaa0
mov edx, dword [ebp - 0x78]
mov eax, dword [eax]
add ecx, dword [ebp - 0x6c]
movzx edx, dx
push edx
mov eax, dword [eax + 0x10]
push ecx
push eax
push esi
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xc4], ecx
call fcn.00490830
push dword [ebp - 0xb8]
mov edi, dword [ebp - 0xc8]
push ebx
push edi
call fcn.00509620
mov edx, dword [ebp - 0xac]
push edx
call fcn.004cb860
add esp, 0x20
test eax, eax
je 0x4facc9
push dword [ebp - 0xc0]
push dword [ebp - 0xc4]
push 0x32
push edi
call fcn.004ec510
mov edx, dword [ebp - 0xac]
add esp, 0x10
mov ecx, dword [ebp - 0xbc]
test ecx, ecx
je 0x4facec
mov eax, dword [ebp - 0xa0]
add eax, ecx
mov ecx, dword [ebp - 0x78]
push eax
movzx eax, cx
push eax
push edx
call fcn.00502230
add esp, 0xc
mov ecx, dword [ebp - 0x78]
push dword [ebp - 0xac]
movzx eax, cx
add dword [ebp - 0x84], eax
call fcn.004cebe0
add esp, 4
test eax, eax
jne 0x4fad20
push dword [ebp - 0xb8]
push ebx
call fcn.00494370
add esp, 8
xor al, al
jmp 0x4faadf
mov dword [ebp - 0xd0], 1
xor al, al
jmp 0x4faadf
mov dword [ebp - 0x70], 1
jmp 0x4fad67
cmp byte [ebp - 0x95], 0
je 0x4fad67
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x6c]
push eax
push 0
push 0x49
push edi
call fcn.004ec510
add esp, 0x10
mov dword [ebp - 0x70], 0
inc dword [ebp - 0xa0]
push dword [ebp - 0xbc]
push dword [ebp - 0xd4]
call fcn.004c9260
push dword [ebp - 0xcc]
push dword [ebp - 0xd4]
call fcn.004c9260
mov eax, dword [edi + 0x6c]
add esp, 0x10
mov dword [ebx + 0x34], eax
mov eax, dword [ebp - 0xa0]
test eax, eax
je 0x4fadc7
mov ecx, dword [ebp - 0xa4]
push eax
push dword [ebp - 0x6c]
mov eax, dword [ebp - 0x70]
push dword [ebp - 0xc0]
push dword [ebp - 0xa8]
movzx eax, byte [eax + ecx*2 + 0x59e92c]
push eax
push edi
call fcn.004ec640
add esp, 0x18
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0x24]
test eax, 0x40000
je 0x4faded
push 1
push dword [ebp - 0xa8]
push 0x77
push edi
call fcn.004ec510
mov eax, dword [ebp - 0x7c]
add esp, 0x10
mov eax, dword [eax + 0x24]
mov ecx, dword [ebp - 0x9c]
test al, 0x40
je 0x4faf48
test byte [ecx + 0x2c], 0x20
jne 0x4faf48
mov edx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x70], 1
mov esi, dword [ebp - 0x8c]
cmp dword [ebx], 0
jne 0x4faf0f
mov eax, dword [ebp - 0x9c]
test byte [eax + 0x2c], 0x20
jne 0x4faf0f
mov eax, dword [edx + 0x28]
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x4faf0f
xorps xmm0, xmm0
mov dword [ebp - 0xf4], esi
lea edi, [ebp - 0xf8]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0xfc], edi
xor esi, esi
mov edi, dword [ebp - 0xc8]
movlpd qword [ebp - 0x10c], xmm0
movlpd qword [ebp - 0x104], xmm0
mov dword [ebp - 0x110], 0x5091a0
mov dword [ebp - 0xf0], ecx
cmp dword [eax], esi
jle 0x4faf0f
mov ebx, dword [ebp - 0x9c]
lea ecx, [eax + 4]
mov dword [ebp - 0x68], ecx
mov edi, eax
mov eax, dword [edx + 4]
cmp word [eax + esi*2], 0xfffe
jne 0x4faef8
mov dword [ebp - 0xec], esi
mov eax, dword [ecx]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4faed1
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.00508c40
add esp, 8
push dword [ebx + 8]
lea eax, [ebp - 0x114]
push eax
call fcn.004f9070
push dword [ebx + 0xc]
lea eax, [ebp - 0x114]
push eax
call fcn.004f9070
mov ecx, dword [ebp - 0x68]
add esp, 0x10
mov edx, dword [ebp - 0x74]
inc esi
add ecx, 0x18
mov dword [ebp - 0x68], ecx
cmp esi, dword [edi]
jl 0x4faea2
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov eax, dword [edx + 0x24]
test eax, eax
je 0x4faf2f
mov ecx, dword [ebp - 0xd8]
push ecx
push dword [ebp - 0x8c]
push eax
call fcn.00508db0
mov edx, dword [ebp - 0x74]
add esp, 0xc
mov ecx, dword [ebp - 0x7c]
test dword [ecx + 0x24], 0x1000
je 0x4fb106
mov byte [ebx + 0x2d], 0xaa
jmp 0x4fb115
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0x70], 0
mov eax, dword [edx + 0xc]
test byte [eax + 0x24], 0x20
jne 0x4fafd3
movzx eax, word [ecx + 0x2c]
test eax, 0x400
jne 0x4faf98
test eax, 0x1000
je 0x4faf73
cmp byte [ecx + 0x31], 1
je 0x4faf98
push dword [ebp - 0xa8]
mov esi, dword [ebp - 0x8c]
push esi
push edx
push ecx
call fcn.00490010
mov edx, dword [ebp - 0x74]
add esp, 0x10
mov ecx, dword [ebp - 0xa8]
jmp 0x4fae1b
inc dword [esi + 0x2c]
mov esi, dword [esi + 0x2c]
push esi
push dword [ebp - 0xa8]
push 0x87
push edi
call fcn.004ec510
push esi
mov esi, dword [ebp - 0x8c]
push 0
push esi
push 0x1f
push edi
call fcn.004ec570
mov edx, dword [ebp - 0x74]
add esp, 0x24
mov ecx, dword [ebp - 0xa8]
jmp 0x4fae1b
mov ecx, dword [ebp - 0xa8]
cmp dword [ebp - 0x8c], ecx
je 0x4fae15
push eax
call fcn.004e30f0
mov dword [ebp - 0xac], eax
movzx eax, word [eax + 0x32]
push eax
push esi
call fcn.004d8550
mov esi, dword [ebp - 0xac]
mov edx, eax
mov dword [ebp - 0xc4], 0
add esp, 0xc
mov dword [ebp - 0xc0], edx
movzx eax, word [esi + 0x32]
mov ecx, eax
cmp word [ebp - 0xc4], ax
jae 0x4fb0db
mov dword [ebp - 0x68], edx
xor ebx, ebx
nop
mov eax, dword [ebp - 0x74]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x4fb05d
mov eax, dword [esi + 4]
movzx esi, word [eax + ebx*2]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
nop word [eax + eax]
cmp si, word [eax]
je 0x4fb083
inc ecx
add eax, 2
cmp ecx, edx
jl 0x4fb050
or eax, 0xffffffff
mov ecx, dword [edi + 0x6c]
movsx edx, ax
cmp dword [edi + 0x70], ecx
jg 0x4fb088
mov esi, dword [ebp - 0x68]
push esi
push edx
push dword [ebp - 0xa8]
push 0x5a
push edi
call fcn.004ab170
add esp, 0x14
jmp 0x4fb0b8
movzx eax, cx
jmp 0x4fb060
mov esi, dword [ebp - 0xa8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 0x68]
mov dword [eax + ecx*4], 0x5a
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
inc esi
inc ebx
mov dword [ebp - 0x68], esi
mov esi, dword [ebp - 0xac]
movzx ecx, word [esi + 0x32]
cmp ebx, ecx
jl 0x4fb030
mov ebx, dword [ebp - 0x90]
mov edx, dword [ebp - 0xc0]
mov esi, dword [ebp - 0x8c]
movzx eax, cx
push eax
push edx
push dword [ebp - 0xe0]
push esi
push 0x1c
push edi
call fcn.004ec640
mov edx, dword [ebp - 0x74]
add esp, 0x18
mov ecx, dword [ebp - 0xa8]
jmp 0x4fae1b
cmp dword [ebp - 0xa4], 0
sete al
add al, 4
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0xa8]
mov dword [ebx + 0x30], eax
mov al, byte [ecx + 0x26]
and al, 1
mov byte [ebx + 0x2e], al
test byte [ecx + 0x24], 0xf
jne 0x4fb130
mov byte [ebx + 0x2f], 1
xor ecx, ecx
cmp dword [ebp - 0x70], ecx
cmove ecx, edx
mov dword [ebp - 0xc4], ecx
jmp 0x4fbaae
test edx, 0x2000
je 0x4fba62
mov eax, dword [esi + 0x28]
dec dword [esi + 0x38]
inc dword [esi + 0x2c]
mov dword [ebp - 0xa8], eax
inc eax
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x38]
mov edx, dword [esi + 0x2c]
mov dword [ebp - 0xac], eax
xor eax, eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x78], 0
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x84], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, dword [eax + 0x1c]
mov dword [ebx + 0x30], edx
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0xcc], eax
mov byte [ebx + 0x2d], 0x42
mov al, byte [edx + 0x2e]
cmp al, 1
jbe 0x4fb313
mov ecx, dword [ebp - 0xd4]
movzx eax, al
sub eax, dword [ebp + 0x14]
dec eax
mov dword [ebp - 0x68], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x4fb210
push ecx
call fcn.004c9310
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0xd0], ecx
jmp 0x4fb220
call fcn.004dcf40
add esp, 8
mov dword [ebp - 0xd0], eax
mov ecx, eax
test ecx, ecx
jne 0x4fb23b
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046ca7d
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0x68]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [ebp - 0xdc]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
mov eax, dword [ebp - 0x9c]
movq qword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
mov dword [ebp - 0x70], eax
cmp edx, 1
jl 0x4fb2e2
mov edi, dword [ebp - 0x70]
lea eax, [ebx + 0x7c]
add ecx, 0x50
mov ebx, eax
movzx eax, byte [ebx]
lea ebx, [ebx + 0x50]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [edi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [edi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x4fb297
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x9c]
test byte [eax + 0x2c], 0x10
jne 0x4fb362
test byte [ecx + 0x24], 0x20
jne 0x4fb31e
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
push eax
push 0
push 0x49
push edi
mov dword [ebp - 0x78], eax
call fcn.004ec510
add esp, 0x10
jmp 0x4fb356
mov eax, dword [edx + 4]
mov dword [ebp - 0xd0], eax
jmp 0x4fb2e8
push ecx
call fcn.004e30f0
mov esi, eax
mov eax, dword [ebp - 0xb4]
mov edx, dword [eax + 0x28]
mov dword [ebp - 0x78], edx
lea ecx, [edx + 1]
mov dword [eax + 0x28], ecx
movzx ecx, word [esi + 0x32]
push ecx
push edx
push 0x71
push edi
call fcn.004ec510
push esi
mov esi, dword [ebp - 0xb4]
push esi
call fcn.004f6e60
add esp, 0x1c
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0xb8], eax
mov ecx, dword [edi + 0x6c]
mov dword [ebp - 0xa0], ecx
cmp dword [edi + 0x70], ecx
jg 0x4fb38d
push 0
push dword [ebp - 0xc0]
push 0
push 0x46
push edi
call fcn.004ab170
add esp, 0x14
mov dword [ebp - 0xa0], eax
jmp 0x4fb3c2
mov edx, dword [ebp - 0xc0]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ecx + 0xc]
cmp eax, 1
jle 0x4fb4f0
xor edx, edx
mov dword [ebp - 0x68], edx
test eax, eax
jle 0x4fb4f0
mov edi, dword [ebp - 0xd4]
xor ecx, ecx
mov esi, dword [ebp - 0xd8]
xor ebx, ebx
mov dword [ebp - 0x70], ecx
mov eax, dword [esi + 0x14]
add eax, ecx
cmp eax, dword [ebp - 0x7c]
je 0x4fb440
test byte [eax + 0xa], 6
jne 0x4fb440
mov esi, 0x1fff
test word [eax + 0xc], si
mov esi, dword [ebp - 0xd8]
je 0x4fb440
mov eax, dword [eax]
test eax, eax
je 0x4fb42b
push 0
push 0
push eax
push edi
call fcn.00496650
add esp, 0x10
jmp 0x4fb42d
xor eax, eax
push eax
push ebx
push edi
call fcn.004cb520
mov ecx, dword [ebp - 0x70]
add esp, 0xc
mov edx, dword [ebp - 0x68]
mov ebx, eax
inc edx
add ecx, 0x30
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x70], ecx
cmp edx, dword [esi + 0xc]
jl 0x4fb3f4
mov edi, dword [ebp - 0xc8]
test ebx, ebx
mov esi, dword [ebp - 0xb4]
mov dword [ebp - 0x88], ebx
mov ebx, dword [ebp - 0x90]
je 0x4fb4f0
push 0
push 0x34
push dword [esi]
call fcn.004c9310
add esp, 0xc
mov dword [ebp - 0x70], eax
test eax, eax
je 0x4fb4d6
push 0x34
push 0
push eax
call fcn.0054f9f0
mov ecx, dword [ebp - 0x70]
or eax, 0xffffffff
push ecx
mov word [ecx + 0x22], ax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0x10], eax
mov byte [ecx], 0x2c
mov eax, dword [eax + 4]
and eax, 0x200104
or dword [ecx + 4], eax
call fcn.00497290
mov eax, dword [esi]
add esp, 0x10
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x18], ecx
jle 0x4fb4ea
push ecx
push str.Expression_tree_is_too_large__maximum_depth__d_
push esi
call fcn.004caf50
add esp, 0xc
jmp 0x4fb4e7
mov eax, dword [ebp - 0x88]
push eax
push dword [esi]
call fcn.004cdf80
add esp, 8
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x9c]
mov ecx, 0x400
push str.MULTI_INDEX_OR
push 1
push esi
mov ax, word [eax + 0x2c]
and ax, cx
or ax, 0x20
movzx eax, ax
mov dword [ebp - 0xe4], eax
call fcn.004f3ee0
mov ecx, dword [ebp - 0xcc]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x74], eax
cmp dword [ecx + 0xc], eax
jle 0x4fb8db
mov ebx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x8c]
nop
lea eax, [eax + eax*2]
shl eax, 4
add eax, dword [ecx + 0x14]
cmp dword [eax + 0x14], edx
je 0x4fb55d
mov esi, 0x400
test word [eax + 0xc], si
je 0x4fb8bf
mov esi, dword [eax]
xor eax, eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x4fb576
mov dword [eax + 0xc], esi
mov esi, eax
mov eax, dword [ebp - 0x74]
inc eax
push eax
push str.INDEX__d
push 1
push ebx
call fcn.004f3ee0
push dword [ebp - 0xa8]
push dword [ebp - 0xe4]
push 0
push 0
push esi
mov esi, dword [ebp - 0xd0]
push esi
push ebx
call fcn.004f9260
add esp, 0x2c
mov dword [ebp - 0xec], eax
test eax, eax
je 0x4fb8b3
push 0
lea ecx, [eax + 0x2f0]
push ecx
push esi
push ebx
call fcn.004fc7e0
mov eax, dword [ebp - 0x9c]
add esp, 0x10
test byte [eax + 0x2c], 0x10
jne 0x4fb77b
mov eax, dword [ebp - 0xcc]
mov esi, dword [ebp - 0x74]
mov eax, dword [eax + 0xc]
dec eax
cmp esi, eax
mov eax, 0xffffffff
cmove esi, eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x68], esi
test byte [eax + 0x24], 0x20
jne 0x4fb636
mov edx, dword [ebp - 0xb8]
push edx
push dword [ebp - 0x8c]
push 0x80
push edi
call fcn.004ec510
push esi
push dword [ebp - 0xb8]
push 0
push dword [ebp - 0x78]
push 0x2a
push edi
call fcn.004ec640
add esp, 0x28
mov esi, eax
jmp 0x4fb781
push eax
call fcn.004e30f0
mov dword [ebp - 0xe8], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
mov dword [ebp - 0x70], eax
call fcn.004d8550
xor esi, esi
mov dword [ebp - 0x6c], eax
add esp, 0xc
cmp dword [ebp - 0x70], esi
jbe 0x4fb695
mov ebx, dword [ebp - 0x70]
lea ecx, [esi + eax]
mov eax, dword [ebp - 0xe8]
push ecx
mov eax, dword [eax + 4]
movsx eax, word [eax + esi*2]
push eax
push dword [ebp - 0x8c]
push dword [ebp - 0x84]
push edi
call fcn.004cbd00
mov eax, dword [ebp - 0x6c]
inc esi
add esp, 0x14
cmp esi, ebx
jl 0x4fb660
mov ebx, dword [ebp - 0xb4]
cmp dword [ebp - 0x68], 0
mov esi, dword [ebp - 0x70]
je 0x4fb6c0
push esi
push eax
push 0
push dword [ebp - 0x78]
push 0x1d
push edi
call fcn.004ec640
add esp, 0x18
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x68], 0
jl 0x4fb745
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp - 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4fb6e0
push dword [ebp - 0xb8]
push esi
push edx
push 0x5c
push edi
call fcn.004ab170
add esp, 0x14
jmp 0x4fb70d
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0x5c
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push esi
push dword [ebp - 0x6c]
push dword [ebp - 0xb8]
push dword [ebp - 0x78]
push 0x84
push edi
call fcn.004ec640
add esp, 0x18
cmp dword [ebp - 0x68], 0
je 0x4fb745
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x4fb745
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
cmp esi, 1
jne 0x4fb76d
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x4fb77b
mov al, byte [ebx + 0x13]
mov esi, dword [ebp - 0x94]
cmp al, 8
jae 0x4fb781
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x4fb781
cmp esi, dword [ebx + 0x1c]
jle 0x4fb77b
mov eax, dword [ebp - 0x6c]
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], eax
mov esi, dword [ebp - 0x94]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4fb7a4
push 0
push dword [ebp - 0xac]
push dword [ebp - 0xc0]
push 0xc
push edi
call fcn.004ab170
add esp, 0x14
jmp 0x4fb7db
mov edx, dword [ebp - 0xc0]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xac]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test esi, esi
je 0x4fb805
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x4fb7f1
mov eax, 0x5de0e4
jmp 0x4fb802
test esi, esi
lea eax, [edx - 1]
cmovns eax, esi
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0xec]
mov ecx, 1
mov eax, dword [ebp - 0xa4]
cmp byte [edx + 0x32], 0
cmovne eax, ecx
mov ecx, dword [edx + 0x330]
mov dword [ebp - 0xa4], eax
test dword [ecx + 0x24], 0x200
je 0x4fb866
cmp dword [ebp - 0x74], 0
je 0x4fb843
mov eax, dword [ebp - 0xbc]
cmp dword [ecx + 0x20], eax
jne 0x4fb866
mov eax, dword [ebp - 0x84]
test byte [eax + 0x24], 0x20
je 0x4fb85b
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
je 0x4fb866
mov esi, dword [ecx + 0x20]
mov dword [ebp - 0xbc], esi
jmp 0x4fb870
mov dword [ebp - 0xbc], 0
push edx
call fcn.004fbf50
mov ecx, dword [ebx + 0xd4]
add esp, 4
test ecx, ecx
jne 0x4fb887
xor eax, eax
jmp 0x4fb8ad
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x4fb892
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x4fb8a1
mov eax, 0x5de0e4
jmp 0x4fb8aa
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xd4], eax
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp eax, dword [ecx + 0xc]
jl 0x4fb540
mov ebx, dword [ebp - 0x90]
mov esi, dword [ebp - 0xb4]
mov ecx, dword [esi + 0xd4]
test ecx, ecx
jne 0x4fb8e9
xor eax, eax
jmp 0x4fb90f
mov edx, dword [esi + 8]
test ecx, ecx
jns 0x4fb8f4
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x4fb903
mov eax, 0x5de0e4
jmp 0x4fb90c
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [esi + 0xd4], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebx + 0x38], eax
test eax, eax
je 0x4fb92b
mov eax, dword [ebp - 0xa8]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x88]
mov esi, dword [ebp - 0xd4]
test eax, eax
je 0x4fb94c
push eax
push esi
mov dword [eax + 0xc], 0
call fcn.004cdf80
add esp, 8
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x4fb95e
mov eax, 0x5de0e4
jmp 0x4fb975
mov ecx, dword [ebp - 0xa0]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebx + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x4fb995
push 0
push edx
push 0
push 0xb
push edi
call fcn.004ab170
add esp, 0x14
jmp 0x4fb9ca
mov ebx, dword [ebp - 0x90]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [ebp - 0xac]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x4fb9ea
push edx
push edi
push ecx
call fcn.004b9130
add esp, 0xc
jmp 0x4fb9f3
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x9c]
cmp byte [eax + 0x2e], 1
jbe 0x4fba4b
mov ecx, dword [ebp - 0xd0]
test ecx, ecx
je 0x4fba4b
test esi, esi
je 0x4fba42
cmp dword [esi + 0x1e8], 0
je 0x4fba22
push ecx
push esi
call fcn.004ae310
add esp, 8
jmp 0x4fba4b
cmp ecx, dword [esi + 0x138]
jb 0x4fba42
cmp ecx, dword [esi + 0x13c]
jae 0x4fba42
mov eax, dword [esi + 0x134]
mov dword [ecx], eax
mov dword [esi + 0x134], ecx
jmp 0x4fba4b
push ecx
call fcn.00478470
add esp, 4
cmp dword [ebp - 0xa4], 0
jne 0x4fbaac
push dword [ebp - 0x7c]
push ebx
call fcn.00494370
add esp, 8
jmp 0x4fbaac
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x28], 0x20
je 0x4fba74
mov byte [ebx + 0x2d], 0xaa
jmp 0x4fbaac
mov ecx, dword [ebp - 0xa4]
push dword [ebp - 0xbc]
mov al, byte [ecx + 0x59e930]
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0x8c]
push eax
mov dword [ebx + 0x30], eax
movzx eax, byte [ecx + 0x59e934]
push eax
push edi
call fcn.004ec510
add esp, 0x10
mov byte [ebx + 0x2f], 1
inc eax
mov dword [ebx + 0x34], eax
xor ecx, ecx
mov ebx, dword [ebp - 0xd8]
neg ecx
sbb ecx, ecx
add ecx, 2
mov dword [ebp - 0x68], ecx
nop
mov edx, dword [ebx + 0xc]
xor eax, eax
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x88], edx
test edx, edx
jle 0x4fbcef
nop dword [eax]
movzx edx, word [esi + 0xa]
xor ebx, ebx
test dl, 6
jne 0x4fbcc5
mov eax, dword [ebp - 0x90]
mov edi, dword [ebp - 0x90]
mov ecx, dword [esi + 0x28]
and ecx, dword [eax + 0x48]
mov eax, dword [esi + 0x2c]
and eax, dword [edi + 0x4c]
or ecx, eax
mov edi, dword [ebp - 0xc8]
je 0x4fbb20
mov eax, dword [ebp - 0x9c]
mov byte [eax + 0x32], 1
jmp 0x4fbcc2
mov eax, dword [ebp - 0xdc]
mov ecx, dword [esi]
mov dword [ebp - 0xe4], ecx
test byte [eax + 0x24], 8
je 0x4fbb3e
test byte [ecx + 4], 1
je 0x4fbcc2
mov eax, dword [ebp - 0x68]
cmp eax, 1
jne 0x4fbbb9
mov eax, dword [ebp - 0x90]
xorps xmm0, xmm0
mov dword [ebp - 0x114], ebx
movlpd qword [ebp - 0x10c], xmm0
movlpd qword [ebp - 0x104], xmm0
mov eax, dword [eax + 4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x110], 0x496a50
mov dword [ebp - 0xfc], eax
test ecx, ecx
je 0x4fbba4
push ecx
lea eax, [ebp - 0x114]
push eax
call fcn.00508c40
add esp, 8
cmp byte [ebp - 0x100], bl
je 0x4fbbbe
mov eax, 2
mov dword [ebp - 0x6c], eax
jmp 0x4fbcc5
cmp eax, 3
jge 0x4fbbe2
movzx edx, word [esi + 0xa]
test edx, 0x1000
je 0x4fbbe2
mov eax, dword [ebp - 0x6c]
test eax, eax
jne 0x4fbcc5
mov eax, 3
mov dword [ebp - 0x6c], eax
jmp 0x4fbcc5
test edx, 0x200
je 0x4fbc77
mov eax, dword [ebp - 0x90]
mov eax, dword [eax + 0x24]
test eax, eax
je 0x4fbc77
mov ebx, dword [edi + 0x6c]
mov edx, eax
and eax, 1
shr edx, 1
mov dword [ebp - 0xe8], edx
lea eax, [eax*2 + 0x12]
mov dword [ebp - 0xec], eax
cmp dword [edi + 0x70], ebx
jg 0x4fbc34
push 0
push 0
push edx
push eax
push edi
call fcn.004ab170
add esp, 0x14
mov ebx, eax
jmp 0x4fbc77
mov edx, dword [ebp - 0xec]
lea eax, [ebx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov edx, dword [ebp - 0xe8]
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0x10
push dword [ebp - 0xe0]
push dword [ebp - 0xe4]
push dword [ebp - 0xb4]
call fcn.004ce260
add esp, 0x10
test ebx, ebx
je 0x4fbcbd
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x4fbca9
mov eax, 0x5de0e4
jmp 0x4fbcba
test ebx, ebx
lea eax, [edx - 1]
cmovns eax, ebx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [esi + 0xa], 4
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x88]
add esi, 0x30
dec edx
mov dword [ebp - 0x88], edx
test edx, edx
jg 0x4fbae0
mov ebx, dword [ebp - 0xd8]
mov edx, dword [ebx + 0xc]
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x68], eax
test eax, eax
jg 0x4fbac0
test edx, edx
jle 0x4fbe7f
mov edi, dword [ebp - 0x90]
lea ebx, [esi + 0xc]
mov dword [ebp - 0x78], ebx
mov esi, 0xb
test byte [ebx - 2], 6
jne 0x4fbe64
movzx eax, word [ebx]
test al, 0x82
setne cl
bt ax, si
setb al
test al, cl
je 0x4fbe64
mov ecx, dword [ebp - 0x8c]
cmp dword [ebx + 8], ecx
jne 0x4fbe64
cmp dword [edi], 0
jne 0x4fbe64
mov eax, dword [ebx - 0xc]
xor esi, esi
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0xec], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x58], esi
mov word [ebp - 0x54], 0x100
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x50], 0x83
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], ecx
mov byte [ebp - 0x52], 1
cmp eax, 0xfffffffe
je 0x4fbdd4
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x64]
push eax
call fcn.0050d160
mov edx, eax
add esp, 4
test edx, edx
je 0x4fbdd4
nop
mov ebx, dword [edx + 0x20]
mov ecx, ebx
mov eax, dword [edx + 0x24]
and ecx, dword [ebp + 0x1c]
and eax, dword [ebp + 0x20]
or ecx, eax
jne 0x4fbdc2
or ebx, dword [edx + 0x24]
jne 0x4fbdbd
test byte [edx + 0xc], 0x82
jne 0x4fbdd6
test esi, esi
cmove esi, edx
lea eax, [ebp - 0x64]
push eax
call fcn.0050d160
mov edx, eax
add esp, 4
test edx, edx
jne 0x4fbda0
mov edx, esi
test edx, edx
je 0x4fbe56
test byte [edx + 0xa], 4
jne 0x4fbe56
test byte [edx + 0xc], 1
je 0x4fbdff
mov eax, dword [edx]
test dword [eax + 4], 0x800
je 0x4fbdff
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
cmp dword [eax], 1
jg 0x4fbe56
mov eax, dword [edx]
push 0x10
push dword [ebp - 0xe0]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x12c], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0x11c], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ebp - 0x10c], xmm0
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xec]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0xb4]
call fcn.004ce260
add esp, 0x10
mov ebx, dword [ebp - 0x78]
mov esi, 0xb
mov edx, dword [ebp - 0x88]
dec edx
add ebx, 0x30
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x78], ebx
test edx, edx
jg 0x4fbd13
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov edx, dword [ebx]
test edx, edx
je 0x4fbf32
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x1c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x4fbeaf
push 0
push edx
push 1
push 0x46
push edi
call fcn.004ab170
add esp, 0x14
jmp 0x4fbede
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0xd8]
xor edi, edi
mov esi, dword [edx + 0x14]
cmp dword [edx + 0xc], edi
jle 0x4fbf32
nop
test byte [esi + 0xa], 6
jne 0x4fbf29
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [ebx + 0x48]
and eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x4fbf29
push 0x10
push dword [ebp - 0xe0]
push dword [esi]
push dword [ebp - 0xb4]
call fcn.004ce260
mov edx, dword [ebp - 0xd8]
add esp, 0x10
or word [esi + 0xa], 4
inc edi
add esi, 0x30
cmp edi, dword [edx + 0xc]
jl 0x4fbef0
mov ecx, dword [ebp - 4]
mov eax, dword [ebx + 0x48]
xor ecx, ebp
mov edx, dword [ebx + 0x4c]
pop edi
pop esi
pop ebx
call fcn.0046ca7d
mov esp, ebp
pop ebp
ret