Function at 0x518810
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe0
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x18]
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x44], 0
mov edx, dword [edi + 0x1ec]
lea eax, [edi + 0x50]
mov dword [ebp - 0x60], eax
mov eax, dword [ebx]
mov dword [ebp - 0x5c], eax
mov eax, dword [esi + 0x48]
mov dword [ebp - 8], eax
movzx eax, byte [esi + 0x34]
lea ecx, [eax + eax*8]
mov eax, dword [edi + 4]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [ebp - 0x64], eax
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x1c], eax
xor eax, eax
test edx, edx
jle 0x51887e
lea ecx, [edi + 0x1f0]
mov ebx, dword [ebp - 0x1c]
cmp dword [ecx], ebx
mov ebx, dword [ebp + 8]
je 0x518956
inc eax
add ecx, 4
cmp eax, edx
jl 0x518868
xorps xmm0, xmm0
movlpd qword [ebp - 0x74], xmm0
mov edx, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x74]
not ecx
not edx
and ecx, dword [ebp + 0x1c]
and edx, dword [ebp + 0x20]
mov dword [esi + 0x50], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esi + 0x54], edx
mov eax, dword [edi + 0x48]
mov edx, dword [edi + 0x4c]
call fcn.00535350
mov edi, dword [ebp + 0xc]
and eax, 1
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x38], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x38], eax
cmp byte [esi + 0x34], 0
mov dword [ebp - 0x68], eax
mov dword [esi + 0x18], eax
jbe 0x5188f6
mov eax, dword [ebp - 0x64]
test byte [eax + 0x24], 8
je 0x5188f6
mov eax, dword [ebx + 0x2c]
inc eax
push eax
push 0
push 0x45
mov dword [ebx + 0x2c], eax
push edi
mov dword [esi], eax
call fcn.0050a9a0
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov ecx, eax
mov edx, dword [ebp + 0x10]
test eax, eax
jle 0x51891d
imul eax, eax, 0x58
add eax, 0x2f0
add eax, edx
nop dword [eax]
cmp dword [eax], 0
jne 0x51891d
dec ecx
sub eax, 0x58
test ecx, ecx
jg 0x518910
imul eax, ecx, 0x58
mov eax, dword [eax + edx + 0x2fc]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x64]
test byte [eax + 0x28], 0x10
je 0x5189fc
mov ecx, dword [edi + 0x6c]
mov ebx, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x518970
push edx
push 0
push ebx
push 0xd
push edi
call fcn.004d27d0
add esp, 0x14
jmp 0x51899b
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x51888c
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [edi + 0x6c]
cmp dword [edi + 0x70], edx
jg 0x5189c2
push 0
push dword [ebp - 0x3c]
push ebx
push 0xe
push edi
call fcn.004d27d0
mov edx, eax
mov byte [esi + 0x35], 0xb
add esp, 0x14
mov dword [esi + 0x3c], edx
jmp 0x51a29b
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [esi + 0x3c], edx
mov byte [esi + 0x35], 0xb
jmp 0x51a29b
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x24]
test edx, 0x400
je 0x518e30
mov edx, eax
movzx eax, word [edx + 0x28]
mov dword [ebp + 0x14], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x518a45
mov al, byte [ebx + 0x13]
test al, al
jne 0x518a31
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 0xc], eax
jmp 0x518a6f
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x94]
mov dword [ebp - 0xc], eax
jmp 0x518a6f
mov edx, dword [ebx + 0x1c]
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0xc], eax
cmp ecx, edx
jg 0x518a5e
add eax, ecx
sub edx, ecx
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], edx
jmp 0x518a6c
mov eax, dword [ebx + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [ebp - 0xc], edx
mov dword [ebx + 0x2c], eax
mov edx, dword [ebp - 8]
mov eax, dword [esi + 0xc]
xor esi, esi
mov dword [ebp - 4], eax
cmp dword [ebp + 0x14], esi
jbe 0x518acd
mov edi, dword [ebp + 0x18]
nop
mov eax, dword [edx + 0x30]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x518ac4
mov ecx, dword [ebp - 0xc]
add ecx, 2
add ecx, esi
test byte [eax + 0xc], 1
je 0x518ab0
push ecx
push dword [ebp - 0x2c]
push esi
push edi
push eax
push ebx
call fcn.004c6690
mov eax, dword [edi + 0x10]
add esp, 0x18
mov dword [ebp - 4], eax
jmp 0x518ac1
mov eax, dword [eax]
push 1
push ecx
push dword [eax + 0x10]
push ebx
call fcn.004c6c20
add esp, 0x10
mov edx, dword [ebp - 8]
inc esi
cmp esi, dword [ebp + 0x14]
jl 0x518a80
mov edi, dword [ebp + 0xc]
mov ecx, dword [edi + 0x6c]
mov edx, dword [edx + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x518aeb
push 0
push dword [ebp - 0xc]
push edx
push 0x45
push edi
call fcn.004d27d0
add esp, 0x14
jmp 0x518b19
mov esi, dword [ebp - 0xc]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov esi, dword [ebp - 0xc]
mov ecx, dword [edi + 0x6c]
inc esi
cmp dword [edi + 0x70], ecx
jg 0x518b38
push 0
push esi
push dword [ebp + 0x14]
push 0x45
push edi
call fcn.004d27d0
add esp, 0x14
jmp 0x518b66
mov edx, dword [ebp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 8]
or eax, 0xffffffff
mov edx, 0xfffffff9
cmp byte [ecx + 0x1c], 0
cmovne eax, edx
mov edx, dword [edi + 0x6c]
mov dword [ebp - 0x18], eax
mov eax, dword [ecx + 0x20]
mov dword [ebp - 0x40], eax
cmp dword [edi + 0x70], edx
jg 0x518ba2
push dword [ebp - 0xc]
mov esi, dword [ebp - 4]
push esi
push dword [ebp - 0x1c]
push 9
push edi
call fcn.004d27d0
add esp, 0x14
mov edx, eax
jmp 0x518bd2
mov esi, dword [ebp - 0x1c]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 4]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [ebp - 0xc]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
push dword [ebp - 0x18]
push dword [ebp - 0x40]
push edx
push edi
call fcn.0050ae80
mov esi, dword [ebp + 0x18]
add esp, 0x10
mov edx, dword [ebp - 8]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x1c]
mov byte [edx + 0x1c], 0
mov dword [esi + 0x38], eax
mov eax, 0x3d
cmp byte [ecx + 0x2e], 0
mov ecx, 0xad
cmovne eax, ecx
mov ecx, dword [ebp + 0x14]
mov byte [esi + 0x35], al
sub ecx, 1
mov eax, dword [edi + 0x6c]
mov dword [esi + 0x3c], eax
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], ecx
js 0x51a29b
mov eax, dword [edx + 0x30]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 4], eax
mov dx, word [eax + 0xc]
mov eax, dword [ebp - 0x14]
and dx, 1
lea eax, [eax - 1]
cmove eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
cmp ecx, 0x10
jge 0x518c6a
mov eax, dword [ebp - 8]
mov ax, word [eax + 0x1e]
shr ax, cl
test al, 1
je 0x518c67
mov eax, dword [ebp - 4]
push eax
push esi
call fcn.004ca510
add esp, 8
jmp 0x518e19
mov ecx, dword [ebp - 0x24]
test dx, dx
je 0x518e1c
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov al, byte [ecx]
cmp al, 0xad
jne 0x518c84
mov al, byte [ecx + 2]
cmp al, 0xae
jne 0x518c8d
mov eax, dword [ecx + 0x14]
jmp 0x518c97
cmp al, 0x88
jne 0x518ca0
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jne 0x518e19
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x51], 0
jne 0x518d3f
mov eax, dword [ebp - 0x14]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x44]
mov ecx, dword [eax + ecx*4 + 4]
test ecx, ecx
jns 0x518cc2
mov ecx, dword [edi + 0x6c]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x518cd1
mov eax, 0x5bcde4
jmp 0x518cda
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov al, byte [eax]
mov dword [ebp - 0x18], ecx
mov ecx, dword [edi + 0x6c]
mov byte [ebp + 0x17], al
cmp dword [edi + 0x70], ecx
jg 0x518d07
push edx
push esi
push dword [ebp - 0x18]
movzx eax, al
push eax
push edi
call fcn.004d27d0
add esp, 0x14
jmp 0x518d3f
mov bl, byte [ebp + 0x17]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], bl
xor ebx, ebx
mov word [eax + ecx*4 + 2], bx
mov ebx, dword [ebp - 0x18]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp + 8]
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0
push 0x34
push dword [ebx]
call fcn.004eb9e0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x518e16
push 0x34
push 0
push esi
call sub.msvcrt.dll_memset
or eax, 0xffffffff
mov byte [esi], 0x35
push esi
mov word [esi + 0x22], ax
call fcn.004cda10
mov eax, dword [ebx]
add esp, 0x10
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x518d8d
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ebx
call fcn.004ed670
add esp, 0xc
mov eax, dword [ebp - 4]
push 0
push 0x35
push dword [ebp - 0x5c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esi + 0xc], eax
call fcn.004eb9e0
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x518dd4
push 0x34
push 0
push ebx
call sub.msvcrt.dll_memset
add esp, 0xc
mov byte [ebx], 0xad
or eax, 0xffffffff
mov word [ebx + 0x22], ax
lea eax, [ebx + 0x34]
mov dword [ebx + 8], eax
mov byte [eax], 0
mov dword [ebx + 0x18], 1
mov dword [esi + 0x10], ebx
test ebx, ebx
je 0x518e00
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
add ecx, 2
add eax, ecx
mov dword [ebx + 0x1c], eax
mov eax, dword [ebp + 0x18]
mov ebx, dword [ebp + 8]
push 0
push dword [eax + 0x18]
push esi
push ebx
call fcn.004f0c30
add esp, 0x10
jmp 0x518e03
mov ebx, dword [ebp + 8]
push esi
push dword [ebp - 0x5c]
mov dword [esi + 0xc], 0
call fcn.004f0920
add esp, 8
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 0x24], ecx
jns 0x518c24
jmp 0x51a29b
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x518efa
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
inc dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x2c]
push ecx
push dword [ebp - 0x2c]
mov dword [ebp - 4], eax
push 0
push esi
push eax
push ebx
mov dword [ebp + 0x14], ecx
call fcn.004c6690
mov ecx, dword [ebp + 0x14]
mov edx, eax
add esp, 0x18
cmp edx, ecx
je 0x518e8b
test ecx, ecx
je 0x518e8b
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x518e8b
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
mov ecx, dword [edi + 0x6c]
mov ebx, dword [esi + 0x10]
cmp dword [edi + 0x70], ecx
jg 0x518ea8
push edx
push ebx
push dword [ebp - 0x1c]
push 0x1f
push edi
call fcn.004d27d0
add esp, 0x14
jmp 0x518ed5
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0x1c]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp + 0xc]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 4]
mov byte [esi + 0x35], 0xad
mov ecx, dword [edx + 0x28]
mov eax, dword [edx + 0x2c]
and ecx, dword [esi + 0x50]
and eax, dword [esi + 0x54]
or ecx, eax
jne 0x51a29b
or word [edx + 0xa], 4
jmp 0x51a29b
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x51912e
xor ecx, ecx
mov dword [ebp - 0x10], 0xad
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 4], ecx
test dl, 0x20
je 0x518f3c
mov eax, dword [ebp - 8]
mov dword [ebp + 0x14], 4
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
xor eax, eax
mov dword [ebp - 4], ecx
jmp 0x518f3f
mov dword [ebp + 0x14], eax
test dl, 0x10
je 0x518f50
mov eax, dword [ebp - 8]
mov edx, dword [ebp + 0x14]
mov eax, dword [eax + 0x30]
mov eax, dword [edx + eax]
mov edx, dword [ebp - 0x2c]
test edx, edx
cmove ecx, eax
cmove eax, dword [ebp - 4]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
test eax, eax
je 0x51902f
mov edx, dword [eax]
mov dword [ebp + 0x14], 0x18161719
mov dword [ebp - 4], edx
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0x50], eax
call fcn.004f1600
add esp, 4
test eax, eax
je 0x518fcf
mov al, byte [ebx + 0x13]
test al, al
jne 0x518f98
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
jmp 0x518fa7
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x94]
push 1
push eax
push dword [edx + 0x10]
mov dword [ebp - 0x14], eax
push ebx
call fcn.004c6c20
mov eax, dword [ebp - 4]
add esp, 0x10
mov ecx, dword [ebp - 0x14]
movzx eax, byte [eax]
inc eax
and eax, 2
or eax, 1
mov dl, byte [ebp + eax + 0x14]
jmp 0x518ffe
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x50]
push ebx
call fcn.004f0370
push dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
push esi
call fcn.004ca510
mov eax, dword [ebp - 4]
add esp, 0x14
mov ecx, dword [ebp - 0x50]
movzx eax, byte [eax]
mov dl, byte [ebp + eax - 0x22]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
push ecx
push dword [ebp - 0x3c]
movzx eax, dl
push dword [ebp - 0x1c]
push eax
push edi
call fcn.0050aa00
mov ecx, dword [ebp - 0x14]
add esp, 0x14
test ecx, ecx
je 0x51904b
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x51904b
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x51904b
push dword [ebp - 0x50]
mov eax, edx
push dword [ebp - 0x1c]
xor eax, 1
lea eax, [eax*4 + 0x21]
push eax
push edi
call fcn.0050a9a0
add esp, 0x10
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x5190c6
mov eax, dword [eax]
inc dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x2c]
push 1
push ecx
push dword [eax + 0x10]
mov dword [ebp + 0x14], eax
push ebx
mov dword [ebp - 0x40], ecx
call fcn.004c6c20
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp + 0x14], eax
call fcn.004f1600
add esp, 0x14
test eax, eax
jne 0x51909e
mov al, byte [edx]
cmp al, 0x38
je 0x51908c
cmp al, 0x36
jne 0x51909e
mov eax, dword [ebp - 0x2c]
xor eax, 1
lea edx, [eax*2 + 0x37]
mov dword [ebp - 0x10], edx
jmp 0x5190ab
mov eax, dword [ebp - 0x2c]
lea eax, [eax*2 + 0x36]
mov dword [ebp - 0x10], eax
push dword [ebp + 0x14]
call fcn.004f1600
add esp, 4
test eax, eax
jne 0x5190c6
push dword [ebp - 0x18]
push esi
call fcn.004ca510
add esp, 8
cmp dword [ebp - 0x2c], 0
mov ecx, dword [edi + 0x6c]
sete al
mov dword [esi + 0x3c], ecx
add al, 4
cmp dword [ebp - 0x10], 0xad
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x1c]
mov dword [esi + 0x38], eax
je 0x51a29b
inc dword [ebx + 0x2c]
mov esi, dword [ebx + 0x2c]
push esi
push eax
push 0x7f
push edi
call fcn.0050a9a0
push esi
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x10]
push edi
call fcn.0050aa00
mov eax, dword [edi + 0x6c]
add esp, 0x24
test eax, eax
jle 0x51a29b
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x51a29b
test edx, 0x200
je 0x519ac8
mov eax, dword [ebp - 8]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
movzx ecx, word [eax + 0x18]
movzx eax, word [eax + 0x1a]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x50], ecx
movzx ecx, cx
mov dword [ebp - 0x28], ecx
movzx eax, word [eax + 0x1c]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov byte [ebp + 0x17], al
mov byte [ebp - 0x55], al
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x34], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x30], eax
test dl, 0x20
je 0x5191b4
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x4c], eax
lea eax, [ecx + 1]
mov dword [ebp - 4], eax
movzx eax, word [ebx + 0x1a]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x20], eax
test dl, 0x10
je 0x519288
mov eax, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edi*4]
mov edi, dword [ebp - 8]
mov dword [ebp - 0x24], eax
movzx eax, word [edi + 0x1c]
mov edi, eax
mov eax, edx
cmp dword [ebp - 0x20], edi
mov edx, dword [ebp - 0x24]
cmova edi, dword [ebp - 0x20]
mov dword [ebp - 0x10], edi
mov edi, 0x100
test word [edx + 0xa], di
mov edi, dword [ebp + 0xc]
je 0x519239
mov eax, dword [ebx + 0x2c]
inc eax
push eax
push 1
push 0x45
mov dword [ebx + 0x2c], eax
push edi
mov dword [esi + 0x2c], eax
call fcn.0050a9a0
mov eax, dword [edi + 0x6c]
xor ecx, ecx
shl dword [esi + 0x2c], 1
add esp, 0x10
mov edx, dword [ebp - 0x28]
mov dword [esi + 0x30], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1c]
cmp byte [edx + eax], 1
mov eax, dword [ebp - 8]
sete cl
xor ecx, dword [ebp - 0x2c]
or dword [esi + 0x2c], ecx
mov ecx, edx
mov eax, dword [eax + 0x24]
mov dword [ebp - 4], eax
cmp dword [ebp - 0x4c], 0
mov edx, eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
jne 0x519288
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 4]
movsx ecx, word [eax + ecx*2]
mov dword [ebp - 0x44], ecx
test ecx, ecx
js 0x51926b
mov eax, dword [edx + 0xc]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + 4]
cmp byte [eax + ecx*4 + 0xc], 0
je 0x51927b
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp ecx, 0xfffffffe
jne 0x519288
jmp 0x51927e
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov byte [ebp + 0x17], 1
mov dword [ebp - 0x20], eax
test dl, 0x30
jne 0x5192b5
test edx, 0x80000
je 0x5192b5
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [esi + 0x24], eax
dec dword [ebx + 0x38]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x20], 1
mov byte [ebp + 0x17], 1
mov dword [esi + 0x28], eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x50]
movzx ecx, word [eax + 0x32]
mov dword [ebp - 0x44], ecx
cmp dx, cx
jae 0x5192e4
mov eax, dword [eax + 0x1c]
xor ecx, ecx
mov edx, dword [ebp - 0x28]
cmp byte [edx + eax], cl
mov eax, dword [ebp - 0x2c]
sete cl
cmp eax, ecx
je 0x5192f0
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x50]
jmp 0x5192e7
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x51931b
cmp cx, dx
jne 0x51931b
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x4c], eax
mov al, byte [ebp + 0x17]
mov byte [ebp - 0x55], al
mov eax, dword [ebp - 0x3c]
movzx eax, al
mov dword [ebp - 0x24], ecx
movzx ecx, dx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2c]
mov byte [ebp + 0x17], 0
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x40]
push ecx
push dword [ebp - 0x20]
push eax
push esi
push ebx
call fcn.004c5da0
mov ecx, dword [ebp - 0x40]
add esp, 0x14
mov edx, eax
mov dword [ebp - 0x20], edx
test ecx, ecx
je 0x519357
cmp word [ebp - 0x38], 0
je 0x519357
mov eax, dword [ebp - 0x28]
add eax, ecx
push eax
push dword [ebp - 0x5c]
call fcn.004ebcb0
mov edx, dword [ebp - 0x20]
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x48], 0
je 0x519365
mov ecx, dword [esi + 0x28]
mov dword [ebp - 0x10], ecx
jmp 0x51936b
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x51937f
test byte [eax + 0xc], 0x28
mov dword [ebp - 0x14], 0
je 0x519386
mov dword [ebp - 0x14], 1
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x51939a
test byte [ecx + 0xc], 0x28
mov dword [ebp - 4], 0
je 0x5193a1
mov dword [ebp - 4], 1
test eax, eax
jne 0x5193cc
cmp word [ebp - 0x50], ax
ja 0x5193cc
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x50], eax
cmp byte [ebp + 0x17], 0
mov eax, ecx
mov dword [ebp - 0xc], eax
je 0x519483
mov dword [ebp - 0x14], 0
jmp 0x519489
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x5193b1
mov edx, dword [ebp - 0x3c]
mov eax, dword [eax]
add ecx, dword [ebp - 0x20]
movzx edx, dx
push edx
mov eax, dword [eax + 0x10]
push ecx
push eax
push ebx
mov dword [ebp + 0x14], eax
mov dword [ebp - 0x44], ecx
call fcn.004c6c20
push dword [ebp - 0x4c]
mov edi, dword [ebp + 0xc]
push esi
push edi
call fcn.00527800
push dword [ebp + 0x14]
call fcn.004ede80
add esp, 0x20
test eax, eax
je 0x519427
push dword [ebp - 0x10]
push dword [ebp - 0x44]
push 0x32
push edi
call fcn.0050a9a0
add esp, 0x10
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x519446
mov eax, dword [ebp - 0x28]
add eax, ecx
mov ecx, dword [ebp - 0x3c]
push eax
movzx eax, cx
push eax
push dword [ebp + 0x14]
call fcn.005206d0
add esp, 0xc
mov ecx, dword [ebp - 0x3c]
push dword [ebp + 0x14]
movzx eax, cx
add dword [ebp - 0xc], eax
call fcn.004f1600
add esp, 4
test eax, eax
jne 0x519473
push dword [ebp - 0x4c]
push esi
call fcn.004ca510
mov eax, dword [ebp - 0xc]
add esp, 8
mov byte [ebp + 0x17], 0
jmp 0x5194a8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], 1
mov byte [ebp + 0x17], 0
jmp 0x5194a8
cmp dword [ebp - 0x48], 0
je 0x5194a8
lea eax, [edx + ecx]
push eax
push 0
push 0x48
push edi
call fcn.0050a9a0
mov eax, dword [ebp - 0xc]
add esp, 0x10
inc eax
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xc], eax
movzx ecx, byte [ebp + 0x17]
push dword [ebp - 0x40]
sub eax, ecx
mov dword [ebp - 0x44], ecx
push eax
push dword [ebp - 0x20]
push ebx
call fcn.004c6180
mov ecx, dword [ebp - 8]
add esp, 0x10
movzx eax, word [ecx + 0x2a]
test ax, ax
je 0x5194d6
cmp dword [ebp - 0xc], eax
je 0x519576
test dword [ecx + 0x24], 0x40000
je 0x5194ed
push dword [ebp - 0x30]
push 0x76
push edi
call fcn.0050a940
add esp, 0xc
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x519502
push eax
push 1
push 0x45
push edi
call fcn.0050a9a0
add esp, 0x10
push dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
push dword [ebp - 0x20]
push dword [ebp - 0x10]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0x2c]
push dword [ebp - 0x30]
movzx eax, byte [ecx + eax*2 + 0x586cbc]
push eax
push edi
call fcn.0050aad0
mov eax, dword [ebp - 0x48]
add esp, 0x18
test eax, eax
je 0x519579
mov eax, dword [edi + 0x6c]
add eax, 2
push eax
push 0
push 0xb
push edi
call fcn.0050a9a0
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
mov eax, 1
cmp eax, dword [ebp - 0xc]
push dword [ebp - 0x10]
sbb eax, eax
push dword [ebp - 0x30]
and eax, 4
movzx eax, byte [eax + ecx + 0x586cbe]
push eax
push edi
call fcn.0050aad0
add esp, 0x28
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x51962b
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x38]
movzx ecx, ax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
push ecx
push eax
push edx
push ebx
mov dword [ebp + 0x14], edx
mov dword [ebp - 0x50], eax
call fcn.004c6c20
push dword [ebp - 0x24]
push esi
push edi
call fcn.00527800
push dword [ebp + 0x14]
call fcn.004ede80
add esp, 0x20
test eax, eax
je 0x5195ce
push dword [ebp - 0x10]
push dword [ebp - 0x50]
push 0x32
push edi
call fcn.0050a9a0
add esp, 0x10
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x5195fc
mov edx, dword [ebp - 0x38]
push eax
movzx eax, dx
push eax
push dword [ebp + 0x14]
call fcn.005206d0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
push eax
movzx eax, cx
push eax
push dword [ebp - 0x50]
push ebx
call fcn.004c6180
add esp, 0x1c
mov ecx, dword [ebp - 0x38]
push dword [ebp + 0x14]
movzx eax, cx
add dword [ebp - 0x28], eax
call fcn.004f1600
add esp, 4
test eax, eax
jne 0x519622
push dword [ebp - 0x24]
push esi
call fcn.004ca510
add esp, 8
jmp 0x519653
mov dword [ebp - 4], 1
jmp 0x519653
cmp byte [ebp - 0x55], 0
je 0x519653
test eax, eax
jne 0x519650
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
push eax
push 0
push 0x48
push edi
call fcn.0050a9a0
add esp, 0x10
mov dword [ebp - 4], 0
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x519666
push eax
push dword [ebp - 0x5c]
call fcn.004eb970
add esp, 8
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x519679
push eax
push dword [ebp - 0x5c]
call fcn.004eb970
add esp, 8
mov eax, dword [edi + 0x6c]
mov dword [esi + 0x3c], eax
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x5196c5
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x5196a3
mov eax, dword [edi + 0x6c]
add eax, 3
push eax
push ecx
push 0x14
push edi
call fcn.0050a9a0
mov eax, dword [ebp - 0x28]
add esp, 0x10
mov ecx, dword [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
mov eax, dword [ebp - 4]
push dword [ebp - 0x10]
push dword [ebp - 0x30]
movzx eax, byte [eax + ecx*2 + 0x586cc4]
push eax
push edi
call fcn.0050aad0
add esp, 0x18
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x519703
mov eax, dword [edi + 0x6c]
add eax, 2
push eax
push ecx
push 0x12
push edi
call fcn.0050a9a0
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
add eax, ecx
push eax
push dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x10]
push dword [ebp - 0x30]
movzx eax, byte [ecx + eax*2 + 0x586cc4]
push eax
push edi
call fcn.0050aad0
add esp, 0x28
mov ecx, dword [ebp - 8]
mov eax, dword [ecx + 0x24]
test eax, 0x40000
je 0x519726
push 1
push dword [ebp - 0x30]
push 0x76
push edi
call fcn.0050a9a0
mov ecx, dword [ebp - 8]
add esp, 0x10
mov eax, dword [ecx + 0x24]
test al, 0x40
je 0x519742
mov eax, dword [ebp + 0x10]
test byte [eax + 0x28], 0x20
jne 0x519742
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], 1
jmp 0x5198c8
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], 0
mov eax, dword [edx + 0xc]
test byte [eax + 0x24], 0x80
jne 0x5197cb
mov eax, dword [ebp + 0x10]
movzx eax, word [eax + 0x28]
test eax, 0x400
jne 0x519796
test eax, 0x1000
mov eax, dword [ebp + 0x10]
je 0x51977a
cmp byte [eax + 0x2e], 1
je 0x519796
cmp word [ecx + 0x28], 0
je 0x519796
mov ebx, dword [ebp - 0x30]
push ebx
push dword [ebp - 0x1c]
push edx
push eax
call fcn.004c6430
mov edx, dword [ebp - 0x34]
add esp, 0x10
mov eax, dword [ebp + 0x10]
jmp 0x5198cb
inc dword [ebx + 0x2c]
mov esi, dword [ebx + 0x2c]
mov ebx, dword [ebp - 0x30]
push esi
push ebx
push 0x86
push edi
call fcn.0050a9a0
push esi
push 0
push dword [ebp - 0x1c]
push 0x20
push edi
call fcn.0050aa00
mov esi, dword [ebp + 0x18]
add esp, 0x24
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp + 0x10]
jmp 0x5198cb
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x30]
je 0x5198c5
push eax
call fcn.00501290
mov dword [ebp - 4], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
call fcn.004f6ff0
mov ebx, dword [ebp - 4]
mov edx, eax
add esp, 0xc
mov dword [ebp + 0x14], 0
mov dword [ebp - 0x44], edx
movzx eax, word [ebx + 0x32]
mov ecx, eax
cmp word [ebp + 0x14], ax
jae 0x5198ac
mov dword [ebp + 0x14], edx
xor esi, esi
mov eax, dword [ebp - 0x34]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x51983d
mov eax, dword [ebx + 4]
movzx ebx, word [eax + esi*2]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
nop dword [eax]
cmp bx, word [eax]
je 0x519860
inc ecx
add eax, 2
cmp ecx, edx
jl 0x519830
or eax, 0xffffffff
mov ecx, dword [edi + 0x6c]
movsx edx, ax
cmp dword [edi + 0x70], ecx
jg 0x519865
mov ebx, dword [ebp + 0x14]
push ebx
push edx
push dword [ebp - 0x30]
push 0x59
push edi
call fcn.004d27d0
add esp, 0x14
jmp 0x519892
movzx eax, cx
jmp 0x519840
mov ebx, dword [ebp - 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp + 0x14]
mov dword [eax + ecx*4], 0x59
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
inc ebx
inc esi
mov dword [ebp + 0x14], ebx
mov ebx, dword [ebp - 4]
movzx ecx, word [ebx + 0x32]
cmp esi, ecx
jl 0x519812
mov esi, dword [ebp + 0x18]
mov edx, dword [ebp - 0x44]
movzx eax, cx
push eax
push edx
push dword [ebp - 0x68]
push dword [ebp - 0x1c]
push 0x1d
push edi
call fcn.0050aad0
mov edx, dword [ebp - 0x34]
add esp, 0x18
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x30]
cmp dword [esi], 0
jne 0x519a7f
test byte [eax + 0x28], 0x20
jne 0x519a65
mov ecx, dword [edx + 0x28]
test ecx, ecx
jne 0x5198f2
test dword [edx + 0x38], 0x400
je 0x519a65
mov eax, dword [edx + 0xc]
xorps xmm0, xmm0
mov dword [ebp + 0x14], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x88], ebx
xor ebx, ebx
movlpd qword [ebp - 0xac], xmm0
mov eax, dword [eax]
movlpd qword [ebp - 0xa4], xmm0
movlpd qword [ebp - 0x9c], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
xor eax, eax
cmp ax, word [edx + 0x34]
jae 0x519a65
mov esi, dword [ebp - 0x34]
lea edi, [ecx + 4]
nop
mov eax, dword [esi + 4]
movzx eax, word [eax + ebx*2]
cmp ax, 0xfffe
jne 0x5199c1
mov eax, dword [edi]
mov ecx, 1
mov dword [ebp - 0x90], eax
mov word [ebp - 0xb4], cx
mov dword [ebp - 0xc4], fcn.004cd690
mov dword [ebp - 0xc0], 0x506390
mov dword [ebp - 0xb0], 0
test eax, eax
je 0x519a4f
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.00526d50
add esp, 8
cmp word [ebp - 0xb4], 0
jne 0x519a4f
mov dword [ebp - 0xa8], 0x527310
jmp 0x519a08
test ax, ax
js 0x519a4f
cwde
mov dword [ebp - 0x44], eax
lea ecx, [eax + eax*4]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 4]
test byte [eax + ecx*4 + 0x10], 0x20
je 0x519a4f
mov eax, dword [eax + ecx*4 + 8]
test eax, eax
je 0x5199f8
push 0x586250
push eax
call fcn.005076d0
add esp, 8
test eax, eax
jne 0x519a4f
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0xa8], 0x5272a0
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x84], ebx
mov eax, dword [eax + 0x10]
test eax, eax
je 0x519a28
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00526d50
add esp, 8
mov eax, dword [ebp + 0x10]
push dword [eax + 8]
lea eax, [ebp - 0xac]
push eax
call fcn.00517b70
mov eax, dword [ebp + 0x10]
push dword [eax + 0xc]
lea eax, [ebp - 0xac]
push eax
call fcn.00517b70
add esp, 0x10
movzx eax, word [esi + 0x34]
inc ebx
add edi, 0x14
cmp ebx, eax
jl 0x519950
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx + 0x24]
test eax, eax
je 0x519a82
mov ecx, dword [ebp - 0x60]
push ecx
push dword [ebp - 0x1c]
push eax
call fcn.00526eb0
add esp, 0xc
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 8]
test dword [edx + 0x24], 0x1000
je 0x519a94
mov byte [esi + 0x35], 0xad
jmp 0x519aa0
cmp dword [ebp - 0x2c], 0
sete al
add al, 4
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x30]
mov dword [esi + 0x38], eax
mov al, byte [edx + 0x26]
and al, 1
mov byte [esi + 0x36], al
test byte [edx + 0x24], 0xf
jne 0x519ab8
mov byte [esi + 0x37], 1
xor eax, eax
cmp dword [ebp - 0x18], eax
cmove eax, ecx
mov dword [ebp - 0x44], eax
jmp 0x51a29d
test edx, 0x2000
je 0x51a25d
mov eax, dword [ebx + 0x28]
dec dword [ebx + 0x38]
inc dword [ebx + 0x2c]
mov dword [ebp - 0x2c], eax
inc eax
mov dword [ebx + 0x28], eax
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x2c]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x14], 0
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x3c], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [eax + 0x1c]
mov dword [esi + 0x38], edx
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x40], eax
mov byte [esi + 0x35], 0x41
mov al, byte [edx + 0x2c]
cmp al, 1
jbe 0x519c4d
mov ecx, dword [ebp - 0x5c]
movzx eax, al
sub eax, dword [ebp + 0x14]
dec eax
mov dword [ebp + 0x14], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x519b6e
push ecx
call fcn.004eb9e0
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0x20], ecx
jmp 0x519b7b
call fcn.004fb280
add esp, 8
mov dword [ebp - 0x20], eax
mov ecx, eax
test ecx, ecx
jne 0x519b8c
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x14]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
mov eax, dword [ebp + 0x10]
movq qword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
cmp edx, 1
jl 0x519c22
add ecx, 0x50
mov edi, eax
add esi, 0x8c
nop
movzx eax, byte [esi]
lea esi, [esi + 0x58]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [edi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [edi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x519be0
mov edi, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp + 0x10]
test byte [eax + 0x28], 0x10
jne 0x519c8a
test byte [ecx + 0x24], 0x80
jne 0x519c55
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
push eax
push 0
push 0x48
push edi
mov dword [ebp - 0x14], eax
call fcn.0050a9a0
add esp, 0x10
jmp 0x519c81
mov eax, dword [edx + 4]
mov dword [ebp - 0x20], eax
jmp 0x519c25
push ecx
call fcn.00501290
mov esi, eax
mov eax, dword [ebx + 0x28]
mov dword [ebp - 0x14], eax
lea ecx, [eax + 1]
mov dword [ebx + 0x28], ecx
movzx ecx, word [esi + 0x32]
push ecx
push eax
push 0x64
push edi
call fcn.0050a9a0
push esi
push ebx
call fcn.00515860
add esp, 0x1c
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 0x38], eax
mov esi, dword [edi + 0x6c]
mov dword [ebp - 0x28], esi
cmp dword [edi + 0x70], esi
jg 0x519cac
push 0
push dword [ebp - 0x18]
push 0
push 0x45
push edi
call fcn.004d27d0
add esp, 0x14
mov dword [ebp - 0x28], eax
jmp 0x519cde
mov edx, dword [ebp - 0x18]
lea eax, [esi + 1]
mov dword [edi + 0x6c], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0x60]
mov eax, dword [ecx + 0xc]
cmp eax, 1
jle 0x519d7e
xor ecx, ecx
mov dword [ebp + 0x14], ecx
test eax, eax
jle 0x519d7e
mov edx, dword [ebp - 0x30]
xor esi, esi
mov eax, dword [ebp - 0x60]
xor edi, edi
mov eax, dword [eax + 0x14]
add eax, esi
cmp eax, edx
je 0x519d4e
test byte [eax + 0xa], 6
jne 0x519d4e
mov ebx, 0x1fff
test word [eax + 0xc], bx
mov ebx, dword [ebp + 8]
je 0x519d4e
mov eax, dword [eax]
test eax, eax
je 0x519d39
push 0
push 0
push eax
push dword [ebp - 0x5c]
call fcn.004cccc0
add esp, 0x10
jmp 0x519d3b
xor eax, eax
push eax
push edi
push ebx
call fcn.004edb00
mov ecx, dword [ebp + 0x14]
add esp, 0xc
mov edx, dword [ebp - 0x30]
mov edi, eax
mov eax, dword [ebp - 0x60]
inc ecx
add esi, 0x30
mov dword [ebp + 0x14], ecx
cmp ecx, dword [eax + 0xc]
jl 0x519d04
mov dword [ebp - 0x24], edi
test edi, edi
mov edi, dword [ebp + 0xc]
je 0x519d7e
mov eax, dword [ebp - 0x24]
push eax
push 0
push 0x1002c
push ebx
call fcn.004fc070
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0x10]
mov esi, 0x400
push str.MULTI_INDEX_OR
push 1
push ebx
mov ax, word [eax + 0x28]
and ax, si
or ax, 0x20
movzx eax, ax
mov dword [ebp - 8], eax
call fcn.005125b0
mov ecx, dword [ebp - 0x40]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x4c], eax
cmp dword [ecx + 0xc], eax
jle 0x51a0dc
mov edx, dword [ebp - 0x1c]
nop dword [eax + eax]
lea eax, [eax + eax*2]
shl eax, 4
add eax, dword [ecx + 0x14]
cmp dword [eax + 0x14], edx
je 0x519dd8
test word [eax + 0xc], si
je 0x51a0cc
mov esi, dword [eax]
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x519deb
mov dword [eax + 0xc], esi
mov esi, eax
mov eax, dword [ebp - 0x4c]
inc eax
push eax
push str.INDEX__d
push 1
push ebx
call fcn.005125b0
push dword [ebp - 0x2c]
push dword [ebp - 8]
push 0
push 0
push esi
mov esi, dword [ebp - 0x20]
push esi
push ebx
call fcn.00517d60
add esp, 0x2c
mov dword [ebp - 0x70], eax
test eax, eax
je 0x51a0c1
push 0
lea ecx, [eax + 0x2f0]
push ecx
push esi
push ebx
call fcn.0051b110
mov eax, dword [ebp + 0x10]
add esp, 0x10
test byte [eax + 0x28], 0x10
jne 0x519fad
mov eax, dword [ebp - 0x40]
mov esi, dword [ebp - 0x4c]
mov eax, dword [eax + 0xc]
dec eax
cmp esi, eax
mov eax, 0xffffffff
cmove esi, eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x48], esi
test byte [eax + 0x24], 0x80
jne 0x519e8a
mov edx, dword [ebp - 0x38]
push edx
push dword [ebp - 0x1c]
push 0x7f
push edi
call fcn.0050a9a0
push esi
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x14]
push 0x2d
push edi
call fcn.0050aad0
add esp, 0x28
mov esi, eax
jmp 0x519fb0
push eax
call fcn.00501290
mov dword [ebp - 0x6c], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
mov dword [ebp - 4], eax
call fcn.004f6ff0
xor esi, esi
mov dword [ebp + 0x14], eax
add esp, 0xc
cmp dword [ebp - 4], esi
jbe 0x519eda
mov ebx, dword [ebp - 4]
lea ecx, [esi + eax]
mov eax, dword [ebp - 0x6c]
push ecx
mov eax, dword [eax + 4]
movsx eax, word [eax + esi*2]
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x3c]
push edi
call fcn.004ee410
mov eax, dword [ebp + 0x14]
inc esi
add esp, 0x14
cmp esi, ebx
jl 0x519eb1
mov ebx, dword [ebp + 8]
cmp dword [ebp - 0x48], 0
mov esi, dword [ebp - 4]
je 0x519efe
push esi
push eax
push 0
push dword [ebp - 0x14]
push 0x1e
push edi
call fcn.0050aad0
add esp, 0x18
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x48], 0
jl 0x519f7a
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 0x14]
cmp dword [edi + 0x70], ecx
jg 0x519f1b
push dword [ebp - 0x38]
push esi
push edx
push 0x5b
push edi
call fcn.004d27d0
add esp, 0x14
jmp 0x519f45
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x38]
mov dword [eax + ecx*4], 0x5b
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push esi
push dword [ebp + 0x14]
push dword [ebp - 0x38]
push dword [ebp - 0x14]
push 0x83
push edi
call fcn.0050aad0
add esp, 0x18
cmp dword [ebp - 0x48], 0
je 0x519f7a
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x519f7a
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
cmp esi, 1
jne 0x519f9f
mov ecx, dword [ebp + 0x14]
test ecx, ecx
je 0x519fad
mov al, byte [ebx + 0x13]
mov esi, dword [ebp - 0x10]
cmp al, 8
jae 0x519fb0
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x519fb0
cmp esi, dword [ebx + 0x1c]
jle 0x519fad
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], eax
mov esi, dword [ebp - 0x10]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x519fcd
push 0
push dword [ebp - 0xc]
push dword [ebp - 0x18]
push 0xc
push edi
call fcn.004d27d0
add esp, 0x14
jmp 0x519ffe
mov edx, dword [ebp - 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xc]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test esi, esi
je 0x51a028
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x51a014
mov eax, 0x5bcde4
jmp 0x51a025
test esi, esi
lea eax, [edx - 1]
cmovns eax, esi
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x70]
mov ecx, 1
mov eax, dword [ebp - 0x34]
test byte [edx + 0x30], 2
cmovne eax, ecx
mov ecx, dword [edx + 0x338]
mov dword [ebp - 0x34], eax
test dword [ecx + 0x24], 0x200
je 0x51a077
cmp dword [ebp - 0x4c], 0
je 0x51a05a
mov eax, dword [ebp - 0x50]
cmp dword [ecx + 0x20], eax
jne 0x51a077
mov eax, dword [ebp - 0x3c]
test byte [eax + 0x24], 0x80
je 0x51a06f
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
je 0x51a077
mov esi, dword [ecx + 0x20]
mov dword [ebp - 0x50], esi
jmp 0x51a07e
mov dword [ebp - 0x50], 0
push edx
call fcn.0051a630
mov ecx, dword [ebx + 0xd4]
add esp, 4
test ecx, ecx
jne 0x51a095
xor eax, eax
jmp 0x51a0bb
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x51a0a0
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x51a0af
mov eax, 0x5bcde4
jmp 0x51a0b8
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xd4], eax
mov edx, dword [ebp - 0x1c]
mov esi, 0x400
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp eax, dword [ecx + 0xc]
jl 0x519dc0
mov ecx, dword [ebx + 0xd4]
test ecx, ecx
jne 0x51a0ea
xor eax, eax
jmp 0x51a110
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x51a0f5
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x51a104
mov eax, 0x5bcde4
jmp 0x51a10d
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov esi, dword [ebp + 0x18]
mov dword [ebx + 0xd4], eax
mov eax, dword [ebp - 0x50]
mov dword [esi + 0x40], eax
test eax, eax
je 0x51a129
mov eax, dword [ebp - 0x2c]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x5c]
test eax, eax
je 0x51a144
push eax
push ebx
mov dword [eax + 0xc], 0
call fcn.004f0920
add esp, 8
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x51a156
mov eax, 0x5bcde4
jmp 0x51a16a
mov ecx, dword [ebp - 0x28]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x51a18a
push 0
push edx
push 0
push 0xb
push edi
call fcn.004d27d0
add esp, 0x14
jmp 0x51a1b9
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [ebp - 0xc]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x51a1d6
push edx
push edi
push ecx
call fcn.004dea90
add esp, 0xc
jmp 0x51a1df
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp + 0x10]
cmp byte [eax + 0x2c], 1
jbe 0x51a249
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x51a249
test ebx, ebx
je 0x51a240
cmp dword [ebx + 0x1f8], 0
je 0x51a208
push ecx
push ebx
call fcn.004d5570
add esp, 8
jmp 0x51a249
cmp ecx, dword [ebx + 0x14c]
jae 0x51a240
cmp ecx, dword [ebx + 0x144]
jb 0x51a228
mov eax, dword [ebx + 0x140]
mov dword [ecx], eax
mov dword [ebx + 0x140], ecx
jmp 0x51a249
cmp ecx, dword [ebx + 0x148]
jb 0x51a240
mov eax, dword [ebx + 0x138]
mov dword [ecx], eax
mov dword [ebx + 0x138], ecx
jmp 0x51a249
push ecx
call fcn.004b0fa0
add esp, 4
cmp dword [ebp - 0x34], 0
jne 0x51a29b
push dword [ebp - 0x30]
push esi
call fcn.004ca510
add esp, 8
jmp 0x51a29b
mov eax, dword [ebp - 0x64]
test byte [eax + 0x28], 0x20
je 0x51a26c
mov byte [esi + 0x35], 0xad
jmp 0x51a29b
mov ecx, dword [ebp - 0x2c]
push dword [ebp - 0x50]
mov al, byte [ecx + 0x586cc8]
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x1c]
push eax
mov dword [esi + 0x38], eax
movzx eax, byte [ecx + 0x586ccc]
push eax
push edi
call fcn.0050a9a0
add esp, 0x10
mov byte [esi + 0x37], 1
inc eax
mov dword [esi + 0x3c], eax
xor eax, eax
mov edx, dword [ebp - 0x60]
mov ecx, eax
neg ecx
sbb ecx, ecx
add ecx, 2
mov dword [ebp - 0x18], ecx
nop dword [eax]
mov ebx, dword [edx + 0xc]
xor eax, eax
mov esi, dword [edx + 0x14]
mov dword [ebp + 0x14], eax
mov dword [ebp - 4], ebx
test ebx, ebx
jle 0x51a47d
movzx edx, word [esi + 0xa]
xor ebx, ebx
test dl, 6
jne 0x51a462
mov eax, dword [ebp + 0x18]
mov edi, dword [ebp + 0x18]
mov ecx, dword [esi + 0x28]
and ecx, dword [eax + 0x50]
mov eax, dword [esi + 0x2c]
and eax, dword [edi + 0x54]
or ecx, eax
mov edi, dword [ebp + 0xc]
je 0x51a2fa
mov eax, dword [ebp + 0x10]
or dword [eax + 0x30], 2
jmp 0x51a45f
mov eax, dword [ebp - 0x64]
mov ecx, dword [esi]
mov dword [ebp - 0x40], ecx
test byte [eax + 0x24], 8
je 0x51a312
test byte [ecx + 4], 1
je 0x51a45f
mov eax, dword [ebp - 0x18]
cmp eax, 1
jne 0x51a376
mov eax, dword [ebp + 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x90], ebx
movlpd qword [ebp - 0x88], xmm0
movlpd qword [ebp - 0x80], xmm0
mov eax, dword [eax + 4]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x8c], 0x4cd0b0
mov dword [ebp - 0x78], eax
test ecx, ecx
je 0x51a363
push ecx
lea eax, [ebp - 0x90]
push eax
call fcn.00526d50
add esp, 8
cmp word [ebp - 0x7c], bx
je 0x51a37b
mov eax, 2
mov dword [ebp + 0x14], eax
jmp 0x51a462
cmp eax, 3
jge 0x51a39f
movzx edx, word [esi + 0xa]
test edx, 0x1000
je 0x51a39f
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x51a462
mov eax, 3
mov dword [ebp + 0x14], eax
jmp 0x51a462
test edx, 0x200
je 0x51a41d
mov eax, dword [ebp + 0x18]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x51a41d
mov ebx, dword [edi + 0x6c]
mov edx, eax
and eax, 1
shr edx, 1
mov dword [ebp - 0x6c], edx
lea eax, [eax*2 + 0x12]
mov dword [ebp - 0x70], eax
cmp dword [edi + 0x70], ebx
jg 0x51a3e0
push 0
push 0
push edx
push eax
push edi
call fcn.004d27d0
add esp, 0x14
mov ebx, eax
jmp 0x51a41d
mov edx, dword [ebp - 0x70]
lea eax, [ebx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov edx, dword [ebp - 0x6c]
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0x10
push dword [ebp - 0x68]
push dword [ebp - 0x40]
push dword [ebp + 8]
call fcn.004f0c30
add esp, 0x10
test ebx, ebx
je 0x51a45a
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x51a446
mov eax, 0x5bcde4
jmp 0x51a457
test ebx, ebx
lea eax, [edx - 1]
cmovns eax, ebx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [esi + 0xa], 4
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp - 4]
add esi, 0x30
dec edx
mov dword [ebp - 4], edx
test edx, edx
jg 0x51a2c6
mov edx, dword [ebp - 0x60]
mov esi, dword [edx + 0x14]
mov ebx, dword [edx + 0xc]
mov dword [ebp - 0x18], eax
test eax, eax
jg 0x51a2b0
test ebx, ebx
jle 0x51a57b
add esi, 0xc
test byte [esi - 2], 6
jne 0x51a569
movzx eax, word [esi]
mov edi, 0xb
test al, 0x82
setne cl
bt ax, di
mov edi, dword [ebp + 8]
setb al
test al, cl
je 0x51a569
mov ecx, dword [ebp - 0x1c]
cmp dword [esi + 8], ecx
jne 0x51a569
mov eax, dword [ebp - 0x64]
test byte [eax + 0x24], 8
jne 0x51a569
mov eax, dword [esi - 0xc]
push 0
push 0x83
push dword [ebp + 0x20]
mov dword [ebp + 0x10], eax
push dword [ebp + 0x1c]
push dword [esi + 0x10]
push ecx
push edx
call fcn.0051b590
mov ecx, eax
add esp, 0x1c
test ecx, ecx
je 0x51a569
test byte [ecx + 0xa], 4
jne 0x51a569
test byte [ecx + 0xc], 1
je 0x51a51d
mov eax, dword [ecx]
test dword [eax + 4], 0x800
je 0x51a51d
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x51a569
mov eax, dword [ecx]
push 0x10
push dword [ebp - 0x68]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe0], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0xd0], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ebp - 0xc0], xmm0
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xe0]
push eax
push edi
call fcn.004f0c30
add esp, 0x10
mov edx, dword [ebp - 0x60]
dec ebx
add esi, 0x30
test ebx, ebx
jg 0x51a493
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x18]
mov edx, dword [ebx]
test edx, edx
je 0x51a61d
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x1c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x51a5a8
push 0
push edx
push 1
push 0x45
push edi
call fcn.004d27d0
add esp, 0x14
jmp 0x51a5d7
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0x60]
xor edi, edi
mov esi, dword [edx + 0x14]
cmp dword [edx + 0xc], edi
jle 0x51a61d
test byte [esi + 0xa], 6
jne 0x51a614
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [ebx + 0x50]
and eax, dword [ebx + 0x54]
or ecx, eax
jne 0x51a614
push 0x10
push dword [ebp - 0x68]
push dword [esi]
push dword [ebp + 8]
call fcn.004f0c30
mov edx, dword [ebp - 0x60]
add esp, 0x10
or word [esi + 0xa], 4
inc edi
add esi, 0x30
cmp edi, dword [edx + 0xc]
jl 0x51a5e4
mov eax, dword [ebx + 0x50]
mov edx, dword [ebx + 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret