Function at 0x51d30f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1b8
mov eax, 0x58c539
call fcn.004a12da
mov esi, dword [ebp + 8]
xor eax, eax
mov ebx, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x18c], esi
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x188], eax
mov byte [ebp - 0x16f], al
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x78], eax
mov byte [ebp - 0x88], al
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x40]
mov eax, dword [esi]
push 5
push ecx
mov ecx, esi
call dword [eax + 0x90]
push ebx
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 1
push ecx
push esi
push edi
push eax
push dword [edi + 0xc]
push dword [edi + 4]
call fcn.0051e4b7
add esp, 0x1c
mov byte [ebp - 4], 0
mov bl, al
lea ecx, [ebp - 0x40]
neg bl
push 0
push 1
sbb bl, bl
call fcn.00406590
add bl, 1
je 0x51d3c9
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x88]
call fcn.00406a10
jmp 0x51e009
cmp dword [ebp - 0x74], 0x10
lea ecx, [ebp - 0x194]
push ecx
lea ecx, [ebp - 0x180]
push ecx
push dword [ebp - 0x78]
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push eax
call fcn.0057eb84
add esp, 0x10
test al, al
je 0x51de93
cmp dword [ebp - 0x194], 0
je 0x51de93
push dword [ebp - 0x180]
call fcn.00496c00
mov dword [ebp - 0x190], eax
test eax, eax
jne 0x51d4ce
push 0x30
lea eax, [ebp - 0x40]
push 0x5f9b38
push eax
call fcn.0051c660
add esp, 0xc
mov ecx, dword [ebp - 0x174]
push eax
mov byte [ebp - 4], 0xc
call fcn.00412e50
xor ebx, ebx
lea ecx, [ebp - 0x40]
push ebx
push 1
mov byte [ebp - 4], bl
call fcn.00406a10
push dword [edi + 0x14]
lea ecx, [ebp - 0x28]
call fcn.00405cc0
push 0x10
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xd
push 0x5f99a0
push eax
call fcn.0051c6a9
add esp, 0xc
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0xe
jb 0x51d483
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x58]
call fcn.00405cc0
push 1
push ebx
push esi
push dword [edi]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0051e045
add esp, 0x18
lea ecx, [ebp - 0x58]
xor esi, esi
inc esi
push ebx
push esi
call fcn.00406590
push ebx
push esi
lea ecx, [ebp - 0x40]
call fcn.00406590
push ebx
push esi
lea ecx, [ebp - 0x28]
call fcn.00406590
push ebx
push esi
jmp 0x51d3b9
and dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
mov eax, dword [esi]
lea ecx, [ebp - 0x40]
push 5
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x10
call dword [eax + 0x90]
push dword [ebp - 0x174]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x11
push ecx
push esi
push edi
push eax
push dword [edi + 0x10]
push dword [edi + 8]
call fcn.0051e81c
add esp, 0x1c
mov byte [ebp - 4], 0x10
mov bl, al
lea ecx, [ebp - 0x40]
neg bl
push 0
push 1
sbb bl, bl
call fcn.00406590
add bl, 1
je 0x51d54c
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0xa0]
call fcn.00406a10
jmp 0x51dfe7
cmp dword [ebp - 0x8c], 0x10
lea ecx, [ebp - 0x188]
push ecx
lea ecx, [ebp - 0x184]
push ecx
push dword [ebp - 0x90]
lea eax, [ebp - 0xa0]
cmovae eax, dword [ebp - 0xa0]
push eax
call fcn.0057eb84
add esp, 0x10
test al, al
je 0x51dd38
cmp dword [ebp - 0x188], 0
je 0x51dd38
mov esi, dword [0x58fe78]
push 1
call esi
push 0x51e157
lea ecx, [ebp - 0x1c4]
call fcn.0051d15e
push dword [ebp - 0x1c0]
mov byte [ebp - 4], 0x1c
call fcn.0056701d
pop ecx
push 0
call esi
push dword [ebp - 0x1c0]
call fcn.00524399
push 0xb
lea eax, [ebp - 0x40]
push 0x5f989c
push eax
call fcn.0051c660
add esp, 0x10
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x1d
jb 0x51d5ea
mov eax, dword [eax]
mov esi, dword [ebp - 0x190]
push eax
push esi
call fcn.00496c10
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
mov ebx, eax
call fcn.00406a10
push 0x15
lea eax, [ebp - 0x70]
push 0x5f98a8
push eax
call fcn.0051c660
add esp, 0xc
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x1e
jb 0x51d628
mov eax, dword [eax]
push eax
push esi
call fcn.00496c10
push 0
push 1
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x1c
mov esi, eax
call fcn.00406a10
test ebx, ebx
jne 0x51d712
push 0x33
lea eax, [ebp - 0x40]
push 0x5f9b6c
push eax
call fcn.0051c660
add esp, 0xc
mov ecx, dword [ebp - 0x174]
push eax
mov byte [ebp - 4], 0x1f
call fcn.00412e50
push ebx
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
call fcn.00406a10
push dword [edi + 0x14]
lea ecx, [ebp - 0x28]
call fcn.00405cc0
push 0x12
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x20
push 0x5f99b4
push eax
call fcn.0051c6a9
add esp, 0xc
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x21
jb 0x51d6a9
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x58]
call fcn.00405cc0
mov esi, dword [ebp - 0x18c]
lea eax, [ebp - 0x28]
push 1
push ebx
push esi
push dword [edi]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0051e045
add esp, 0x18
lea ecx, [ebp - 0x58]
xor esi, esi
inc esi
push ebx
push esi
call fcn.00406590
push ebx
push esi
lea ecx, [ebp - 0x40]
call fcn.00406590
push ebx
push esi
lea ecx, [ebp - 0x28]
call fcn.00406590
lea ecx, [ebp - 0x1c4]
call fcn.0051d295
push ebx
push esi
lea ecx, [ebp - 0xa0]
call fcn.00406a10
push ebx
push esi
jmp 0x51dfea
push dword [ebp - 0x1c0]
call ebx
cmp dword [0x5fb84c], 0
je 0x51d73d
test esi, esi
je 0x51d73d
cmp dword [0x5fb850], 8
mov eax, 0x5fb83c
cmovae eax, dword [0x5fb83c]
push eax
call esi
mov eax, dword [edi + 0x1c]
xor ebx, ebx
test eax, eax
je 0x51d837
cmp dword [edi + 0x20], ebx
je 0x51d837
cmp dword [edi + 0x24], ebx
je 0x51d837
mov esi, ebx
test eax, eax
je 0x51d837
mov eax, dword [edi + 0x20]
cmp dword [eax + esi*4], ebx
je 0x51d82d
mov eax, dword [edi + 0x24]
cmp dword [eax + esi*4], 0
je 0x51d82d
push dword [eax + esi*4]
lea ecx, [ebp - 0x28]
call fcn.00405cc0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x23
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041b1a0
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x24
jb 0x51d7a9
mov eax, dword [eax]
mov dword [ebp - 0x1ac], eax
lea ecx, [ebp - 0x58]
mov eax, dword [edi + 0x20]
push dword [eax + esi*4]
call fcn.00405cc0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0041b1e0
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x51d7d8
mov eax, dword [eax]
mov dword [ebp - 0x178], eax
lea ecx, [ebp - 0x1b4]
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x17c], ecx
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.0051ce70
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00406a10
push ebx
push 1
lea ecx, [ebp - 0x58]
call fcn.00406590
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.00406a10
push ebx
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call fcn.00406590
inc esi
cmp esi, dword [edi + 0x1c]
jb 0x51d766
push dword [ebp - 0x188]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 0xf
push dword [ebp - 0x184]
mov dword [ebp - 0x48], ebx
mov byte [ebp - 0x58], bl
call fcn.00406a70
cmp dword [ebp - 0x44], 0x10
lea ecx, [ebp - 0x58]
mov eax, dword [ebp - 0x48]
cmovae ecx, dword [ebp - 0x58]
push ebx
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x178], ecx
call fcn.0051e1eb
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x1c0]
call fcn.0051e2f4
xor esi, esi
mov byte [ebp - 4], 0x28
push ebx
inc esi
lea ecx, [ebp - 0x58]
push esi
call fcn.00406a10
cmp dword [ebp - 0x198], 0
je 0x51dbff
cmp dword [ebp - 0x198], esi
je 0x51dbff
cmp byte [edi + 0x28], 0
mov esi, dword [ebp - 0x18c]
je 0x51d966
push 0x11
lea eax, [ebp - 0x168]
mov dword [ebp - 0x16c], esi
push 0x5f99f4
push eax
call fcn.0051c660
add esp, 0xc
push 0x5a42a0
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x29
call fcn.00405e80
push dword [edi + 0x10]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2a
call fcn.00405cc0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.0041b1e0
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2d
call fcn.00406590
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x120]
call fcn.00405f30
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 0x2e
push eax
call fcn.0051f052
pop ecx
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x28
call fcn.0051d238
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.0051c7e8
push dword [ebp - 0x198]
mov byte [ebp - 4], 0x2f
call fcn.0051eda5
pop ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.00405f30
cmp dword [ebp - 0xbc], 0x10
lea eax, [ebp - 0xd0]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x30
cmovae eax, dword [ebp - 0xd0]
push eax
call fcn.00405e80
push 0x4e
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x31
push str.NC_9
push eax
call fcn.0051c660
push 0x5bec08
push eax
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x32
push eax
call fcn.00414e90
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x33
push ecx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0047f560
add esp, 0x24
mov ecx, dword [ebp - 0x174]
push eax
mov byte [ebp - 4], 0x34
call fcn.00412e50
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00406a10
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.00406a10
push ebx
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x31
call fcn.00406a10
cmp dword [ebp - 0x14], 0x10
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x16d]
cmovae ecx, dword [ebp - 0x28]
push edx
add eax, ecx
mov byte [ebp - 0x16d], 0x3b
cmp dword [ebp - 0x14], 0x10
lea edx, [ebp - 0x16e]
push edx
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x16e], 9
cmovae ecx, dword [ebp - 0x28]
push eax
push ecx
call fcn.0051c81c
mov byte [ebp - 0x16e], 0x3b
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x16d], 0xd
cmp dword [ebp - 0x14], 0x10
lea edx, [ebp - 0x16e]
mov eax, dword [ebp - 0x18]
cmovae ecx, dword [ebp - 0x28]
push edx
add eax, ecx
lea edx, [ebp - 0x16d]
cmp dword [ebp - 0x14], 0x10
lea ecx, [ebp - 0x28]
push edx
cmovae ecx, dword [ebp - 0x28]
push eax
push ecx
call fcn.0051c81c
cmp dword [ebp - 0x14], 0x10
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x16e]
cmovae ecx, dword [ebp - 0x28]
push edx
add eax, ecx
mov byte [ebp - 0x16e], 0x3b
cmp dword [ebp - 0x14], 0x10
lea edx, [ebp - 0x16d]
push edx
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x16d], 0xa
cmovae ecx, dword [ebp - 0x28]
push eax
push ecx
call fcn.0051c81c
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 0x11
cmovae eax, dword [ebp - 0x28]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0xf0]
push 0x5f99f4
push eax
call fcn.0051c6a9
add esp, 0x3c
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x35
jb 0x51db1c
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x40]
call fcn.00405cc0
push 0x5a42a4
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x36
call fcn.00405cc0
push dword [edi + 0x14]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x37
call fcn.00405cc0
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 0x38
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.0041b1c0
pop ecx
pop ecx
mov edx, dword [esi]
mov ecx, esi
push ebx
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
call dword [edx + 4]
xor esi, esi
lea ecx, [ebp - 0x108]
push ebx
inc esi
push esi
call fcn.00406590
push ebx
push esi
lea ecx, [ebp - 0x70]
call fcn.00406590
push ebx
push esi
lea ecx, [ebp - 0x58]
call fcn.00406590
push ebx
push esi
lea ecx, [ebp - 0x40]
call fcn.00406590
push ebx
push esi
lea ecx, [ebp - 0xf0]
call fcn.00406590
push ebx
push esi
lea ecx, [ebp - 0x28]
call fcn.00406a10
push ebx
push esi
lea ecx, [ebp - 0xb8]
call fcn.00406a10
push ebx
push esi
lea ecx, [ebp - 0xd0]
call fcn.00406a10
push dword [ebp - 0x19c]
mov dword [ebp - 0xd8], 0x5bd6d8
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a8]
call fcn.0051ec59
add esp, 0xc
jmp 0x51d6f3
lea eax, [ebp - 0x1b4]
mov dword [ebp - 0x178], str.result
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x17c], eax
call fcn.0051e43e
cmp eax, 4
jne 0x51dcc9
lea eax, [ebp - 0x1b4]
mov dword [ebp - 0x178], str.result
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0x17c]
lea eax, [ebp - 0x28]
push eax
call fcn.0051d2b7
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3a
cmovae eax, dword [ebp - 0x28]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xf0]
push eax
call fcn.0041b1c0
push eax
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x3b
push eax
call fcn.0041b1e0
add esp, 0x10
mov ecx, dword [ebp - 0x174]
push eax
mov byte [ebp - 4], 0x3c
call fcn.00412e50
push ebx
push esi
lea ecx, [ebp - 0xb8]
call fcn.00406a10
push ebx
push esi
lea ecx, [ebp - 0xf0]
call fcn.00406590
mov byte [ebp - 0x16f], 1
lea ecx, [ebp - 0x28]
jmp 0x51dd06
cmp dword [edi], 0xff01
jne 0x51dcda
mov byte [ebp - 0x16f], 1
jmp 0x51dd0e
push 0x6b
lea eax, [ebp - 0xb8]
push 0x5f9a58
push eax
call fcn.0051c660
add esp, 0xc
mov ecx, dword [ebp - 0x174]
push eax
mov byte [ebp - 4], 0x3d
call fcn.00412e50
lea ecx, [ebp - 0xb8]
push ebx
push 1
call fcn.00406a10
push dword [ebp - 0x19c]
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a8]
call fcn.0051ec59
add esp, 0xc
lea ecx, [ebp - 0x1c4]
call fcn.0051d295
jmp 0x51d539
cmp byte [edi + 0x28], 0
je 0x51dddc
push 0x12
lea eax, [ebp - 0x168]
mov dword [ebp - 0x16c], esi
push 0x5f99c8
push eax
call fcn.0051c660
add esp, 0xc
push 0x5a42a0
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x12
call fcn.00405e80
push dword [edi + 0x10]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x13
call fcn.00405cc0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.0041b1e0
pop ecx
pop ecx
xor ebx, ebx
mov byte [ebp - 4], 0x16
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00406590
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x120]
call fcn.00405f30
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 0x17
push eax
call fcn.0051f052
pop ecx
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x10
call fcn.0051d238
jmp 0x51ddde
xor ebx, ebx
push 0x18
lea eax, [ebp - 0xb8]
push 0x5f9c0c
push eax
call fcn.0051c660
add esp, 0xc
mov ecx, dword [ebp - 0x174]
push eax
mov byte [ebp - 4], 0x18
call fcn.00412e50
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x10
call fcn.00406a10
push dword [edi + 0x14]
lea ecx, [ebp - 0x70]
call fcn.00405cc0
push 0x12
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x19
push 0x5f99c8
push eax
call fcn.0051c6a9
add esp, 0xc
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x1a
jb 0x51de47
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x40]
call fcn.00405cc0
push 1
push ebx
push esi
push dword [edi]
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0051e045
add esp, 0x18
lea ecx, [ebp - 0x40]
push ebx
push 1
call fcn.00406590
push ebx
push 1
lea ecx, [ebp - 0xb8]
call fcn.00406590
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.00406590
jmp 0x51d539
cmp byte [edi + 0x28], 0
je 0x51df36
push 0x16
lea eax, [ebp - 0x168]
mov dword [ebp - 0x16c], esi
push 0x5f99dc
push eax
call fcn.0051c660
add esp, 0xc
push 0x5a429c
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 2
call fcn.00405e80
push dword [edi + 0xc]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 3
call fcn.00405cc0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.0041b1e0
pop ecx
pop ecx
xor ebx, ebx
mov byte [ebp - 4], 6
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00406590
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x120]
call fcn.00405f30
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 7
push eax
call fcn.0051f052
pop ecx
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], bl
call fcn.0051d238
jmp 0x51df38
xor ebx, ebx
push 0x1b
lea eax, [ebp - 0xb8]
push 0x5f9b1c
push eax
call fcn.0051c660
add esp, 0xc
mov ecx, dword [ebp - 0x174]
push eax
mov byte [ebp - 4], 8
call fcn.00412e50
push ebx
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], bl
call fcn.00406a10
push dword [edi + 0x14]
lea ecx, [ebp - 0x70]
call fcn.00405cc0
push 0x16
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 9
push 0x5f99dc
push eax
call fcn.0051c6a9
add esp, 0xc
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0xa
jb 0x51dfa0
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x40]
call fcn.00405cc0
push 1
push ebx
push esi
push dword [edi]
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0051e045
add esp, 0x18
lea ecx, [ebp - 0x40]
push ebx
push 1
call fcn.00406590
push ebx
push 1
lea ecx, [ebp - 0xb8]
call fcn.00406590
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.00406590
push ebx
push 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.00406a10
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x51e009
push eax
call fcn.00496c20
cmp dword [ebp - 0x180], 0
je 0x51e024
push dword [ebp - 0x180]
call fcn.004a0cd6
pop ecx
mov dword [ebp - 0x180], ebx
cmp dword [ebp - 0x184], 0
je 0x51e039
push dword [ebp - 0x184]
call fcn.004a0cd6
pop ecx
mov al, byte [ebp - 0x16f]
call fcn.004a1284
ret