Function at 0x518230
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe0
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x18]
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x44], 0
mov edx, dword [edi + 0x1ec]
lea eax, [edi + 0x50]
mov dword [ebp - 0x60], eax
mov eax, dword [ebx]
mov dword [ebp - 0x5c], eax
mov eax, dword [esi + 0x48]
mov dword [ebp - 8], eax
movzx eax, byte [esi + 0x34]
lea ecx, [eax + eax*8]
mov eax, dword [edi + 4]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [ebp - 0x64], eax
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x1c], eax
xor eax, eax
test edx, edx
jle 0x51829e
lea ecx, [edi + 0x1f0]
mov ebx, dword [ebp - 0x1c]
cmp dword [ecx], ebx
mov ebx, dword [ebp + 8]
je 0x518376
inc eax
add ecx, 4
cmp eax, edx
jl 0x518288
xorps xmm0, xmm0
movlpd qword [ebp - 0x74], xmm0
mov edx, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x74]
not ecx
not edx
and ecx, dword [ebp + 0x1c]
and edx, dword [ebp + 0x20]
mov dword [esi + 0x50], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esi + 0x54], edx
mov eax, dword [edi + 0x48]
mov edx, dword [edi + 0x4c]
call fcn.00534d50
mov edi, dword [ebp + 0xc]
and eax, 1
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x38], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x38], eax
cmp byte [esi + 0x34], 0
mov dword [ebp - 0x68], eax
mov dword [esi + 0x18], eax
jbe 0x518316
mov eax, dword [ebp - 0x64]
test byte [eax + 0x24], 8
je 0x518316
mov eax, dword [ebx + 0x2c]
inc eax
push eax
push 0
push 0x45
mov dword [ebx + 0x2c], eax
push edi
mov dword [esi], eax
call fcn.0050a3d0
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov ecx, eax
mov edx, dword [ebp + 0x10]
test eax, eax
jle 0x51833d
imul eax, eax, 0x58
add eax, 0x2f0
add eax, edx
nop dword [eax]
cmp dword [eax], 0
jne 0x51833d
dec ecx
sub eax, 0x58
test ecx, ecx
jg 0x518330
imul eax, ecx, 0x58
mov eax, dword [eax + edx + 0x2fc]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x64]
test byte [eax + 0x28], 0x10
je 0x51841c
mov ecx, dword [edi + 0x6c]
mov ebx, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x518390
push edx
push 0
push ebx
push 0xd
push edi
call fcn.004d2220
add esp, 0x14
jmp 0x5183bb
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x5182ac
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [edi + 0x6c]
cmp dword [edi + 0x70], edx
jg 0x5183e2
push 0
push dword [ebp - 0x3c]
push ebx
push 0xe
push edi
call fcn.004d2220
mov edx, eax
mov byte [esi + 0x35], 0xb
add esp, 0x14
mov dword [esi + 0x3c], edx
jmp 0x519cbb
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [esi + 0x3c], edx
mov byte [esi + 0x35], 0xb
jmp 0x519cbb
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x24]
test edx, 0x400
je 0x518850
mov edx, eax
movzx eax, word [edx + 0x28]
mov dword [ebp + 0x14], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x518465
mov al, byte [ebx + 0x13]
test al, al
jne 0x518451
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 0xc], eax
jmp 0x51848f
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x94]
mov dword [ebp - 0xc], eax
jmp 0x51848f
mov edx, dword [ebx + 0x1c]
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0xc], eax
cmp ecx, edx
jg 0x51847e
add eax, ecx
sub edx, ecx
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], edx
jmp 0x51848c
mov eax, dword [ebx + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [ebp - 0xc], edx
mov dword [ebx + 0x2c], eax
mov edx, dword [ebp - 8]
mov eax, dword [esi + 0xc]
xor esi, esi
mov dword [ebp - 4], eax
cmp dword [ebp + 0x14], esi
jbe 0x5184ed
mov edi, dword [ebp + 0x18]
nop
mov eax, dword [edx + 0x30]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x5184e4
mov ecx, dword [ebp - 0xc]
add ecx, 2
add ecx, esi
test byte [eax + 0xc], 1
je 0x5184d0
push ecx
push dword [ebp - 0x2c]
push esi
push edi
push eax
push ebx
call fcn.004c60e0
mov eax, dword [edi + 0x10]
add esp, 0x18
mov dword [ebp - 4], eax
jmp 0x5184e1
mov eax, dword [eax]
push 1
push ecx
push dword [eax + 0x10]
push ebx
call fcn.004c6670
add esp, 0x10
mov edx, dword [ebp - 8]
inc esi
cmp esi, dword [ebp + 0x14]
jl 0x5184a0
mov edi, dword [ebp + 0xc]
mov ecx, dword [edi + 0x6c]
mov edx, dword [edx + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x51850b
push 0
push dword [ebp - 0xc]
push edx
push 0x45
push edi
call fcn.004d2220
add esp, 0x14
jmp 0x518539
mov esi, dword [ebp - 0xc]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov esi, dword [ebp - 0xc]
mov ecx, dword [edi + 0x6c]
inc esi
cmp dword [edi + 0x70], ecx
jg 0x518558
push 0
push esi
push dword [ebp + 0x14]
push 0x45
push edi
call fcn.004d2220
add esp, 0x14
jmp 0x518586
mov edx, dword [ebp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 8]
or eax, 0xffffffff
mov edx, 0xfffffff9
cmp byte [ecx + 0x1c], 0
cmovne eax, edx
mov edx, dword [edi + 0x6c]
mov dword [ebp - 0x18], eax
mov eax, dword [ecx + 0x20]
mov dword [ebp - 0x40], eax
cmp dword [edi + 0x70], edx
jg 0x5185c2
push dword [ebp - 0xc]
mov esi, dword [ebp - 4]
push esi
push dword [ebp - 0x1c]
push 9
push edi
call fcn.004d2220
add esp, 0x14
mov edx, eax
jmp 0x5185f2
mov esi, dword [ebp - 0x1c]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 4]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [ebp - 0xc]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
push dword [ebp - 0x18]
push dword [ebp - 0x40]
push edx
push edi
call fcn.0050a8b0
mov esi, dword [ebp + 0x18]
add esp, 0x10
mov edx, dword [ebp - 8]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x1c]
mov byte [edx + 0x1c], 0
mov dword [esi + 0x38], eax
mov eax, 0x3d
cmp byte [ecx + 0x2e], 0
mov ecx, 0xad
cmovne eax, ecx
mov ecx, dword [ebp + 0x14]
mov byte [esi + 0x35], al
sub ecx, 1
mov eax, dword [edi + 0x6c]
mov dword [esi + 0x3c], eax
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], ecx
js 0x519cbb
mov eax, dword [edx + 0x30]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 4], eax
mov dx, word [eax + 0xc]
mov eax, dword [ebp - 0x14]
and dx, 1
lea eax, [eax - 1]
cmove eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
cmp ecx, 0x10
jge 0x51868a
mov eax, dword [ebp - 8]
mov ax, word [eax + 0x1e]
shr ax, cl
test al, 1
je 0x518687
mov eax, dword [ebp - 4]
push eax
push esi
call fcn.004c9f60
add esp, 8
jmp 0x518839
mov ecx, dword [ebp - 0x24]
test dx, dx
je 0x51883c
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov al, byte [ecx]
cmp al, 0xad
jne 0x5186a4
mov al, byte [ecx + 2]
cmp al, 0xae
jne 0x5186ad
mov eax, dword [ecx + 0x14]
jmp 0x5186b7
cmp al, 0x88
jne 0x5186c0
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jne 0x518839
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x51], 0
jne 0x51875f
mov eax, dword [ebp - 0x14]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x44]
mov ecx, dword [eax + ecx*4 + 4]
test ecx, ecx
jns 0x5186e2
mov ecx, dword [edi + 0x6c]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x5186f1
mov eax, 0x5bbdd4
jmp 0x5186fa
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov al, byte [eax]
mov dword [ebp - 0x18], ecx
mov ecx, dword [edi + 0x6c]
mov byte [ebp + 0x17], al
cmp dword [edi + 0x70], ecx
jg 0x518727
push edx
push esi
push dword [ebp - 0x18]
movzx eax, al
push eax
push edi
call fcn.004d2220
add esp, 0x14
jmp 0x51875f
mov bl, byte [ebp + 0x17]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], bl
xor ebx, ebx
mov word [eax + ecx*4 + 2], bx
mov ebx, dword [ebp - 0x18]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp + 8]
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0
push 0x34
push dword [ebx]
call fcn.004eb400
mov esi, eax
add esp, 0xc
test esi, esi
je 0x518836
push 0x34
push 0
push esi
call sub.msvcrt.dll_memset
or eax, 0xffffffff
mov byte [esi], 0x35
push esi
mov word [esi + 0x22], ax
call fcn.004cd460
mov eax, dword [ebx]
add esp, 0x10
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x5187ad
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ebx
call fcn.004ed090
add esp, 0xc
mov eax, dword [ebp - 4]
push 0
push 0x35
push dword [ebp - 0x5c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esi + 0xc], eax
call fcn.004eb400
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x5187f4
push 0x34
push 0
push ebx
call sub.msvcrt.dll_memset
add esp, 0xc
mov byte [ebx], 0xad
or eax, 0xffffffff
mov word [ebx + 0x22], ax
lea eax, [ebx + 0x34]
mov dword [ebx + 8], eax
mov byte [eax], 0
mov dword [ebx + 0x18], 1
mov dword [esi + 0x10], ebx
test ebx, ebx
je 0x518820
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
add ecx, 2
add eax, ecx
mov dword [ebx + 0x1c], eax
mov eax, dword [ebp + 0x18]
mov ebx, dword [ebp + 8]
push 0
push dword [eax + 0x18]
push esi
push ebx
call fcn.004f0650
add esp, 0x10
jmp 0x518823
mov ebx, dword [ebp + 8]
push esi
push dword [ebp - 0x5c]
mov dword [esi + 0xc], 0
call fcn.004f0340
add esp, 8
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 0x24], ecx
jns 0x518644
jmp 0x519cbb
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x51891a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
inc dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x2c]
push ecx
push dword [ebp - 0x2c]
mov dword [ebp - 4], eax
push 0
push esi
push eax
push ebx
mov dword [ebp + 0x14], ecx
call fcn.004c60e0
mov ecx, dword [ebp + 0x14]
mov edx, eax
add esp, 0x18
cmp edx, ecx
je 0x5188ab
test ecx, ecx
je 0x5188ab
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x5188ab
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
mov ecx, dword [edi + 0x6c]
mov ebx, dword [esi + 0x10]
cmp dword [edi + 0x70], ecx
jg 0x5188c8
push edx
push ebx
push dword [ebp - 0x1c]
push 0x1f
push edi
call fcn.004d2220
add esp, 0x14
jmp 0x5188f5
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0x1c]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp + 0xc]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 4]
mov byte [esi + 0x35], 0xad
mov ecx, dword [edx + 0x28]
mov eax, dword [edx + 0x2c]
and ecx, dword [esi + 0x50]
and eax, dword [esi + 0x54]
or ecx, eax
jne 0x519cbb
or word [edx + 0xa], 4
jmp 0x519cbb
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x518b4e
xor ecx, ecx
mov dword [ebp - 0x10], 0xad
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 4], ecx
test dl, 0x20
je 0x51895c
mov eax, dword [ebp - 8]
mov dword [ebp + 0x14], 4
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
xor eax, eax
mov dword [ebp - 4], ecx
jmp 0x51895f
mov dword [ebp + 0x14], eax
test dl, 0x10
je 0x518970
mov eax, dword [ebp - 8]
mov edx, dword [ebp + 0x14]
mov eax, dword [eax + 0x30]
mov eax, dword [edx + eax]
mov edx, dword [ebp - 0x2c]
test edx, edx
cmove ecx, eax
cmove eax, dword [ebp - 4]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
test eax, eax
je 0x518a4f
mov edx, dword [eax]
mov dword [ebp + 0x14], 0x18161719
mov dword [ebp - 4], edx
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0x50], eax
call fcn.004f1020
add esp, 4
test eax, eax
je 0x5189ef
mov al, byte [ebx + 0x13]
test al, al
jne 0x5189b8
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
jmp 0x5189c7
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x94]
push 1
push eax
push dword [edx + 0x10]
mov dword [ebp - 0x14], eax
push ebx
call fcn.004c6670
mov eax, dword [ebp - 4]
add esp, 0x10
mov ecx, dword [ebp - 0x14]
movzx eax, byte [eax]
inc eax
and eax, 2
or eax, 1
mov dl, byte [ebp + eax + 0x14]
jmp 0x518a1e
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x50]
push ebx
call fcn.004efd90
push dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
push esi
call fcn.004c9f60
mov eax, dword [ebp - 4]
add esp, 0x14
mov ecx, dword [ebp - 0x50]
movzx eax, byte [eax]
mov dl, byte [ebp + eax - 0x22]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
push ecx
push dword [ebp - 0x3c]
movzx eax, dl
push dword [ebp - 0x1c]
push eax
push edi
call fcn.0050a430
mov ecx, dword [ebp - 0x14]
add esp, 0x14
test ecx, ecx
je 0x518a6b
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x518a6b
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x518a6b
push dword [ebp - 0x50]
mov eax, edx
push dword [ebp - 0x1c]
xor eax, 1
lea eax, [eax*4 + 0x21]
push eax
push edi
call fcn.0050a3d0
add esp, 0x10
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x518ae6
mov eax, dword [eax]
inc dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x2c]
push 1
push ecx
push dword [eax + 0x10]
mov dword [ebp + 0x14], eax
push ebx
mov dword [ebp - 0x40], ecx
call fcn.004c6670
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp + 0x14], eax
call fcn.004f1020
add esp, 0x14
test eax, eax
jne 0x518abe
mov al, byte [edx]
cmp al, 0x38
je 0x518aac
cmp al, 0x36
jne 0x518abe
mov eax, dword [ebp - 0x2c]
xor eax, 1
lea edx, [eax*2 + 0x37]
mov dword [ebp - 0x10], edx
jmp 0x518acb
mov eax, dword [ebp - 0x2c]
lea eax, [eax*2 + 0x36]
mov dword [ebp - 0x10], eax
push dword [ebp + 0x14]
call fcn.004f1020
add esp, 4
test eax, eax
jne 0x518ae6
push dword [ebp - 0x18]
push esi
call fcn.004c9f60
add esp, 8
cmp dword [ebp - 0x2c], 0
mov ecx, dword [edi + 0x6c]
sete al
mov dword [esi + 0x3c], ecx
add al, 4
cmp dword [ebp - 0x10], 0xad
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x1c]
mov dword [esi + 0x38], eax
je 0x519cbb
inc dword [ebx + 0x2c]
mov esi, dword [ebx + 0x2c]
push esi
push eax
push 0x7f
push edi
call fcn.0050a3d0
push esi
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x10]
push edi
call fcn.0050a430
mov eax, dword [edi + 0x6c]
add esp, 0x24
test eax, eax
jle 0x519cbb
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x519cbb
test edx, 0x200
je 0x5194e8
mov eax, dword [ebp - 8]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
movzx ecx, word [eax + 0x18]
movzx eax, word [eax + 0x1a]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x50], ecx
movzx ecx, cx
mov dword [ebp - 0x28], ecx
movzx eax, word [eax + 0x1c]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov byte [ebp + 0x17], al
mov byte [ebp - 0x55], al
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x34], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x30], eax
test dl, 0x20
je 0x518bd4
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x4c], eax
lea eax, [ecx + 1]
mov dword [ebp - 4], eax
movzx eax, word [ebx + 0x1a]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x20], eax
test dl, 0x10
je 0x518ca8
mov eax, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edi*4]
mov edi, dword [ebp - 8]
mov dword [ebp - 0x24], eax
movzx eax, word [edi + 0x1c]
mov edi, eax
mov eax, edx
cmp dword [ebp - 0x20], edi
mov edx, dword [ebp - 0x24]
cmova edi, dword [ebp - 0x20]
mov dword [ebp - 0x10], edi
mov edi, 0x100
test word [edx + 0xa], di
mov edi, dword [ebp + 0xc]
je 0x518c59
mov eax, dword [ebx + 0x2c]
inc eax
push eax
push 1
push 0x45
mov dword [ebx + 0x2c], eax
push edi
mov dword [esi + 0x2c], eax
call fcn.0050a3d0
mov eax, dword [edi + 0x6c]
xor ecx, ecx
shl dword [esi + 0x2c], 1
add esp, 0x10
mov edx, dword [ebp - 0x28]
mov dword [esi + 0x30], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1c]
cmp byte [edx + eax], 1
mov eax, dword [ebp - 8]
sete cl
xor ecx, dword [ebp - 0x2c]
or dword [esi + 0x2c], ecx
mov ecx, edx
mov eax, dword [eax + 0x24]
mov dword [ebp - 4], eax
cmp dword [ebp - 0x4c], 0
mov edx, eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
jne 0x518ca8
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 4]
movsx ecx, word [eax + ecx*2]
mov dword [ebp - 0x44], ecx
test ecx, ecx
js 0x518c8b
mov eax, dword [edx + 0xc]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + 4]
cmp byte [eax + ecx*4 + 0xc], 0
je 0x518c9b
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp ecx, 0xfffffffe
jne 0x518ca8
jmp 0x518c9e
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov byte [ebp + 0x17], 1
mov dword [ebp - 0x20], eax
test dl, 0x30
jne 0x518cd5
test edx, 0x80000
je 0x518cd5
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [esi + 0x24], eax
dec dword [ebx + 0x38]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x20], 1
mov byte [ebp + 0x17], 1
mov dword [esi + 0x28], eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x50]
movzx ecx, word [eax + 0x32]
mov dword [ebp - 0x44], ecx
cmp dx, cx
jae 0x518d04
mov eax, dword [eax + 0x1c]
xor ecx, ecx
mov edx, dword [ebp - 0x28]
cmp byte [edx + eax], cl
mov eax, dword [ebp - 0x2c]
sete cl
cmp eax, ecx
je 0x518d10
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x50]
jmp 0x518d07
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x518d3b
cmp cx, dx
jne 0x518d3b
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x4c], eax
mov al, byte [ebp + 0x17]
mov byte [ebp - 0x55], al
mov eax, dword [ebp - 0x3c]
movzx eax, al
mov dword [ebp - 0x24], ecx
movzx ecx, dx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2c]
mov byte [ebp + 0x17], 0
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x40]
push ecx
push dword [ebp - 0x20]
push eax
push esi
push ebx
call fcn.004c57f0
mov ecx, dword [ebp - 0x40]
add esp, 0x14
mov edx, eax
mov dword [ebp - 0x20], edx
test ecx, ecx
je 0x518d77
cmp word [ebp - 0x38], 0
je 0x518d77
mov eax, dword [ebp - 0x28]
add eax, ecx
push eax
push dword [ebp - 0x5c]
call fcn.004eb6d0
mov edx, dword [ebp - 0x20]
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x48], 0
je 0x518d85
mov ecx, dword [esi + 0x28]
mov dword [ebp - 0x10], ecx
jmp 0x518d8b
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x518d9f
test byte [eax + 0xc], 0x28
mov dword [ebp - 0x14], 0
je 0x518da6
mov dword [ebp - 0x14], 1
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x518dba
test byte [ecx + 0xc], 0x28
mov dword [ebp - 4], 0
je 0x518dc1
mov dword [ebp - 4], 1
test eax, eax
jne 0x518dec
cmp word [ebp - 0x50], ax
ja 0x518dec
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x50], eax
cmp byte [ebp + 0x17], 0
mov eax, ecx
mov dword [ebp - 0xc], eax
je 0x518ea3
mov dword [ebp - 0x14], 0
jmp 0x518ea9
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x518dd1
mov edx, dword [ebp - 0x3c]
mov eax, dword [eax]
add ecx, dword [ebp - 0x20]
movzx edx, dx
push edx
mov eax, dword [eax + 0x10]
push ecx
push eax
push ebx
mov dword [ebp + 0x14], eax
mov dword [ebp - 0x44], ecx
call fcn.004c6670
push dword [ebp - 0x4c]
mov edi, dword [ebp + 0xc]
push esi
push edi
call fcn.00527220
push dword [ebp + 0x14]
call fcn.004ed8a0
add esp, 0x20
test eax, eax
je 0x518e47
push dword [ebp - 0x10]
push dword [ebp - 0x44]
push 0x32
push edi
call fcn.0050a3d0
add esp, 0x10
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x518e66
mov eax, dword [ebp - 0x28]
add eax, ecx
mov ecx, dword [ebp - 0x3c]
push eax
movzx eax, cx
push eax
push dword [ebp + 0x14]
call fcn.005200f0
add esp, 0xc
mov ecx, dword [ebp - 0x3c]
push dword [ebp + 0x14]
movzx eax, cx
add dword [ebp - 0xc], eax
call fcn.004f1020
add esp, 4
test eax, eax
jne 0x518e93
push dword [ebp - 0x4c]
push esi
call fcn.004c9f60
mov eax, dword [ebp - 0xc]
add esp, 8
mov byte [ebp + 0x17], 0
jmp 0x518ec8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], 1
mov byte [ebp + 0x17], 0
jmp 0x518ec8
cmp dword [ebp - 0x48], 0
je 0x518ec8
lea eax, [edx + ecx]
push eax
push 0
push 0x48
push edi
call fcn.0050a3d0
mov eax, dword [ebp - 0xc]
add esp, 0x10
inc eax
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xc], eax
movzx ecx, byte [ebp + 0x17]
push dword [ebp - 0x40]
sub eax, ecx
mov dword [ebp - 0x44], ecx
push eax
push dword [ebp - 0x20]
push ebx
call fcn.004c5bd0
mov ecx, dword [ebp - 8]
add esp, 0x10
movzx eax, word [ecx + 0x2a]
test ax, ax
je 0x518ef6
cmp dword [ebp - 0xc], eax
je 0x518f96
test dword [ecx + 0x24], 0x40000
je 0x518f0d
push dword [ebp - 0x30]
push 0x76
push edi
call fcn.0050a370
add esp, 0xc
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x518f22
push eax
push 1
push 0x45
push edi
call fcn.0050a3d0
add esp, 0x10
push dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
push dword [ebp - 0x20]
push dword [ebp - 0x10]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0x2c]
push dword [ebp - 0x30]
movzx eax, byte [ecx + eax*2 + 0x585c4c]
push eax
push edi
call fcn.0050a500
mov eax, dword [ebp - 0x48]
add esp, 0x18
test eax, eax
je 0x518f99
mov eax, dword [edi + 0x6c]
add eax, 2
push eax
push 0
push 0xb
push edi
call fcn.0050a3d0
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
mov eax, 1
cmp eax, dword [ebp - 0xc]
push dword [ebp - 0x10]
sbb eax, eax
push dword [ebp - 0x30]
and eax, 4
movzx eax, byte [eax + ecx + 0x585c4e]
push eax
push edi
call fcn.0050a500
add esp, 0x28
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x51904b
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x38]
movzx ecx, ax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
push ecx
push eax
push edx
push ebx
mov dword [ebp + 0x14], edx
mov dword [ebp - 0x50], eax
call fcn.004c6670
push dword [ebp - 0x24]
push esi
push edi
call fcn.00527220
push dword [ebp + 0x14]
call fcn.004ed8a0
add esp, 0x20
test eax, eax
je 0x518fee
push dword [ebp - 0x10]
push dword [ebp - 0x50]
push 0x32
push edi
call fcn.0050a3d0
add esp, 0x10
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x51901c
mov edx, dword [ebp - 0x38]
push eax
movzx eax, dx
push eax
push dword [ebp + 0x14]
call fcn.005200f0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
push eax
movzx eax, cx
push eax
push dword [ebp - 0x50]
push ebx
call fcn.004c5bd0
add esp, 0x1c
mov ecx, dword [ebp - 0x38]
push dword [ebp + 0x14]
movzx eax, cx
add dword [ebp - 0x28], eax
call fcn.004f1020
add esp, 4
test eax, eax
jne 0x519042
push dword [ebp - 0x24]
push esi
call fcn.004c9f60
add esp, 8
jmp 0x519073
mov dword [ebp - 4], 1
jmp 0x519073
cmp byte [ebp - 0x55], 0
je 0x519073
test eax, eax
jne 0x519070
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
push eax
push 0
push 0x48
push edi
call fcn.0050a3d0
add esp, 0x10
mov dword [ebp - 4], 0
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x519086
push eax
push dword [ebp - 0x5c]
call fcn.004eb390
add esp, 8
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x519099
push eax
push dword [ebp - 0x5c]
call fcn.004eb390
add esp, 8
mov eax, dword [edi + 0x6c]
mov dword [esi + 0x3c], eax
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x5190e5
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x5190c3
mov eax, dword [edi + 0x6c]
add eax, 3
push eax
push ecx
push 0x14
push edi
call fcn.0050a3d0
mov eax, dword [ebp - 0x28]
add esp, 0x10
mov ecx, dword [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
mov eax, dword [ebp - 4]
push dword [ebp - 0x10]
push dword [ebp - 0x30]
movzx eax, byte [eax + ecx*2 + 0x585c54]
push eax
push edi
call fcn.0050a500
add esp, 0x18
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x519123
mov eax, dword [edi + 0x6c]
add eax, 2
push eax
push ecx
push 0x12
push edi
call fcn.0050a3d0
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
add eax, ecx
push eax
push dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x10]
push dword [ebp - 0x30]
movzx eax, byte [ecx + eax*2 + 0x585c54]
push eax
push edi
call fcn.0050a500
add esp, 0x28
mov ecx, dword [ebp - 8]
mov eax, dword [ecx + 0x24]
test eax, 0x40000
je 0x519146
push 1
push dword [ebp - 0x30]
push 0x76
push edi
call fcn.0050a3d0
mov ecx, dword [ebp - 8]
add esp, 0x10
mov eax, dword [ecx + 0x24]
test al, 0x40
je 0x519162
mov eax, dword [ebp + 0x10]
test byte [eax + 0x28], 0x20
jne 0x519162
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], 1
jmp 0x5192e8
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], 0
mov eax, dword [edx + 0xc]
test byte [eax + 0x24], 0x80
jne 0x5191eb
mov eax, dword [ebp + 0x10]
movzx eax, word [eax + 0x28]
test eax, 0x400
jne 0x5191b6
test eax, 0x1000
mov eax, dword [ebp + 0x10]
je 0x51919a
cmp byte [eax + 0x2e], 1
je 0x5191b6
cmp word [ecx + 0x28], 0
je 0x5191b6
mov ebx, dword [ebp - 0x30]
push ebx
push dword [ebp - 0x1c]
push edx
push eax
call fcn.004c5e80
mov edx, dword [ebp - 0x34]
add esp, 0x10
mov eax, dword [ebp + 0x10]
jmp 0x5192eb
inc dword [ebx + 0x2c]
mov esi, dword [ebx + 0x2c]
mov ebx, dword [ebp - 0x30]
push esi
push ebx
push 0x86
push edi
call fcn.0050a3d0
push esi
push 0
push dword [ebp - 0x1c]
push 0x20
push edi
call fcn.0050a430
mov esi, dword [ebp + 0x18]
add esp, 0x24
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp + 0x10]
jmp 0x5192eb
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x30]
je 0x5192e5
push eax
call fcn.00500cb0
mov dword [ebp - 4], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
call fcn.004f6a10
mov ebx, dword [ebp - 4]
mov edx, eax
add esp, 0xc
mov dword [ebp + 0x14], 0
mov dword [ebp - 0x44], edx
movzx eax, word [ebx + 0x32]
mov ecx, eax
cmp word [ebp + 0x14], ax
jae 0x5192cc
mov dword [ebp + 0x14], edx
xor esi, esi
mov eax, dword [ebp - 0x34]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x51925d
mov eax, dword [ebx + 4]
movzx ebx, word [eax + esi*2]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
nop dword [eax]
cmp bx, word [eax]
je 0x519280
inc ecx
add eax, 2
cmp ecx, edx
jl 0x519250
or eax, 0xffffffff
mov ecx, dword [edi + 0x6c]
movsx edx, ax
cmp dword [edi + 0x70], ecx
jg 0x519285
mov ebx, dword [ebp + 0x14]
push ebx
push edx
push dword [ebp - 0x30]
push 0x59
push edi
call fcn.004d2220
add esp, 0x14
jmp 0x5192b2
movzx eax, cx
jmp 0x519260
mov ebx, dword [ebp - 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp + 0x14]
mov dword [eax + ecx*4], 0x59
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
inc ebx
inc esi
mov dword [ebp + 0x14], ebx
mov ebx, dword [ebp - 4]
movzx ecx, word [ebx + 0x32]
cmp esi, ecx
jl 0x519232
mov esi, dword [ebp + 0x18]
mov edx, dword [ebp - 0x44]
movzx eax, cx
push eax
push edx
push dword [ebp - 0x68]
push dword [ebp - 0x1c]
push 0x1d
push edi
call fcn.0050a500
mov edx, dword [ebp - 0x34]
add esp, 0x18
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x30]
cmp dword [esi], 0
jne 0x51949f
test byte [eax + 0x28], 0x20
jne 0x519485
mov ecx, dword [edx + 0x28]
test ecx, ecx
jne 0x519312
test dword [edx + 0x38], 0x400
je 0x519485
mov eax, dword [edx + 0xc]
xorps xmm0, xmm0
mov dword [ebp + 0x14], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x88], ebx
xor ebx, ebx
movlpd qword [ebp - 0xac], xmm0
mov eax, dword [eax]
movlpd qword [ebp - 0xa4], xmm0
movlpd qword [ebp - 0x9c], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
xor eax, eax
cmp ax, word [edx + 0x34]
jae 0x519485
mov esi, dword [ebp - 0x34]
lea edi, [ecx + 4]
nop
mov eax, dword [esi + 4]
movzx eax, word [eax + ebx*2]
cmp ax, 0xfffe
jne 0x5193e1
mov eax, dword [edi]
mov ecx, 1
mov dword [ebp - 0x90], eax
mov word [ebp - 0xb4], cx
mov dword [ebp - 0xc4], fcn.004cd0e0
mov dword [ebp - 0xc0], 0x505dc0
mov dword [ebp - 0xb0], 0
test eax, eax
je 0x51946f
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.00526770
add esp, 8
cmp word [ebp - 0xb4], 0
jne 0x51946f
mov dword [ebp - 0xa8], 0x526d30
jmp 0x519428
test ax, ax
js 0x51946f
cwde
mov dword [ebp - 0x44], eax
lea ecx, [eax + eax*4]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 4]
test byte [eax + ecx*4 + 0x10], 0x20
je 0x51946f
mov eax, dword [eax + ecx*4 + 8]
test eax, eax
je 0x519418
push 0x5851e0
push eax
call fcn.00507100
add esp, 8
test eax, eax
jne 0x51946f
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0xa8], 0x526cc0
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x84], ebx
mov eax, dword [eax + 0x10]
test eax, eax
je 0x519448
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00526770
add esp, 8
mov eax, dword [ebp + 0x10]
push dword [eax + 8]
lea eax, [ebp - 0xac]
push eax
call fcn.005175a0
mov eax, dword [ebp + 0x10]
push dword [eax + 0xc]
lea eax, [ebp - 0xac]
push eax
call fcn.005175a0
add esp, 0x10
movzx eax, word [esi + 0x34]
inc ebx
add edi, 0x14
cmp ebx, eax
jl 0x519370
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx + 0x24]
test eax, eax
je 0x5194a2
mov ecx, dword [ebp - 0x60]
push ecx
push dword [ebp - 0x1c]
push eax
call fcn.005268d0
add esp, 0xc
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 8]
test dword [edx + 0x24], 0x1000
je 0x5194b4
mov byte [esi + 0x35], 0xad
jmp 0x5194c0
cmp dword [ebp - 0x2c], 0
sete al
add al, 4
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x30]
mov dword [esi + 0x38], eax
mov al, byte [edx + 0x26]
and al, 1
mov byte [esi + 0x36], al
test byte [edx + 0x24], 0xf
jne 0x5194d8
mov byte [esi + 0x37], 1
xor eax, eax
cmp dword [ebp - 0x18], eax
cmove eax, ecx
mov dword [ebp - 0x44], eax
jmp 0x519cbd
test edx, 0x2000
je 0x519c7d
mov eax, dword [ebx + 0x28]
dec dword [ebx + 0x38]
inc dword [ebx + 0x2c]
mov dword [ebp - 0x2c], eax
inc eax
mov dword [ebx + 0x28], eax
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x2c]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x14], 0
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x3c], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [eax + 0x1c]
mov dword [esi + 0x38], edx
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x40], eax
mov byte [esi + 0x35], 0x41
mov al, byte [edx + 0x2c]
cmp al, 1
jbe 0x51966d
mov ecx, dword [ebp - 0x5c]
movzx eax, al
sub eax, dword [ebp + 0x14]
dec eax
mov dword [ebp + 0x14], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x51958e
push ecx
call fcn.004eb400
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0x20], ecx
jmp 0x51959b
call fcn.004faca0
add esp, 8
mov dword [ebp - 0x20], eax
mov ecx, eax
test ecx, ecx
jne 0x5195ac
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x14]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
mov eax, dword [ebp + 0x10]
movq qword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
cmp edx, 1
jl 0x519642
add ecx, 0x50
mov edi, eax
add esi, 0x8c
nop
movzx eax, byte [esi]
lea esi, [esi + 0x58]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [edi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [edi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x519600
mov edi, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp + 0x10]
test byte [eax + 0x28], 0x10
jne 0x5196aa
test byte [ecx + 0x24], 0x80
jne 0x519675
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
push eax
push 0
push 0x48
push edi
mov dword [ebp - 0x14], eax
call fcn.0050a3d0
add esp, 0x10
jmp 0x5196a1
mov eax, dword [edx + 4]
mov dword [ebp - 0x20], eax
jmp 0x519645
push ecx
call fcn.00500cb0
mov esi, eax
mov eax, dword [ebx + 0x28]
mov dword [ebp - 0x14], eax
lea ecx, [eax + 1]
mov dword [ebx + 0x28], ecx
movzx ecx, word [esi + 0x32]
push ecx
push eax
push 0x64
push edi
call fcn.0050a3d0
push esi
push ebx
call fcn.00515290
add esp, 0x1c
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 0x38], eax
mov esi, dword [edi + 0x6c]
mov dword [ebp - 0x28], esi
cmp dword [edi + 0x70], esi
jg 0x5196cc
push 0
push dword [ebp - 0x18]
push 0
push 0x45
push edi
call fcn.004d2220
add esp, 0x14
mov dword [ebp - 0x28], eax
jmp 0x5196fe
mov edx, dword [ebp - 0x18]
lea eax, [esi + 1]
mov dword [edi + 0x6c], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0x60]
mov eax, dword [ecx + 0xc]
cmp eax, 1
jle 0x51979e
xor ecx, ecx
mov dword [ebp + 0x14], ecx
test eax, eax
jle 0x51979e
mov edx, dword [ebp - 0x30]
xor esi, esi
mov eax, dword [ebp - 0x60]
xor edi, edi
mov eax, dword [eax + 0x14]
add eax, esi
cmp eax, edx
je 0x51976e
test byte [eax + 0xa], 6
jne 0x51976e
mov ebx, 0x1fff
test word [eax + 0xc], bx
mov ebx, dword [ebp + 8]
je 0x51976e
mov eax, dword [eax]
test eax, eax
je 0x519759
push 0
push 0
push eax
push dword [ebp - 0x5c]
call fcn.004cc710
add esp, 0x10
jmp 0x51975b
xor eax, eax
push eax
push edi
push ebx
call fcn.004ed520
mov ecx, dword [ebp + 0x14]
add esp, 0xc
mov edx, dword [ebp - 0x30]
mov edi, eax
mov eax, dword [ebp - 0x60]
inc ecx
add esi, 0x30
mov dword [ebp + 0x14], ecx
cmp ecx, dword [eax + 0xc]
jl 0x519724
mov dword [ebp - 0x24], edi
test edi, edi
mov edi, dword [ebp + 0xc]
je 0x51979e
mov eax, dword [ebp - 0x24]
push eax
push 0
push 0x1002c
push ebx
call fcn.004fba90
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0x10]
mov esi, 0x400
push str.MULTI_INDEX_OR
push 1
push ebx
mov ax, word [eax + 0x28]
and ax, si
or ax, 0x20
movzx eax, ax
mov dword [ebp - 8], eax
call fcn.00511fe0
mov ecx, dword [ebp - 0x40]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x4c], eax
cmp dword [ecx + 0xc], eax
jle 0x519afc
mov edx, dword [ebp - 0x1c]
nop dword [eax + eax]
lea eax, [eax + eax*2]
shl eax, 4
add eax, dword [ecx + 0x14]
cmp dword [eax + 0x14], edx
je 0x5197f8
test word [eax + 0xc], si
je 0x519aec
mov esi, dword [eax]
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x51980b
mov dword [eax + 0xc], esi
mov esi, eax
mov eax, dword [ebp - 0x4c]
inc eax
push eax
push str.INDEX__d
push 1
push ebx
call fcn.00511fe0
push dword [ebp - 0x2c]
push dword [ebp - 8]
push 0
push 0
push esi
mov esi, dword [ebp - 0x20]
push esi
push ebx
call fcn.00517790
add esp, 0x2c
mov dword [ebp - 0x70], eax
test eax, eax
je 0x519ae1
push 0
lea ecx, [eax + 0x2f0]
push ecx
push esi
push ebx
call fcn.0051ab30
mov eax, dword [ebp + 0x10]
add esp, 0x10
test byte [eax + 0x28], 0x10
jne 0x5199cd
mov eax, dword [ebp - 0x40]
mov esi, dword [ebp - 0x4c]
mov eax, dword [eax + 0xc]
dec eax
cmp esi, eax
mov eax, 0xffffffff
cmove esi, eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x48], esi
test byte [eax + 0x24], 0x80
jne 0x5198aa
mov edx, dword [ebp - 0x38]
push edx
push dword [ebp - 0x1c]
push 0x7f
push edi
call fcn.0050a3d0
push esi
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x14]
push 0x2d
push edi
call fcn.0050a500
add esp, 0x28
mov esi, eax
jmp 0x5199d0
push eax
call fcn.00500cb0
mov dword [ebp - 0x6c], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
mov dword [ebp - 4], eax
call fcn.004f6a10
xor esi, esi
mov dword [ebp + 0x14], eax
add esp, 0xc
cmp dword [ebp - 4], esi
jbe 0x5198fa
mov ebx, dword [ebp - 4]
lea ecx, [esi + eax]
mov eax, dword [ebp - 0x6c]
push ecx
mov eax, dword [eax + 4]
movsx eax, word [eax + esi*2]
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x3c]
push edi
call fcn.004ede30
mov eax, dword [ebp + 0x14]
inc esi
add esp, 0x14
cmp esi, ebx
jl 0x5198d1
mov ebx, dword [ebp + 8]
cmp dword [ebp - 0x48], 0
mov esi, dword [ebp - 4]
je 0x51991e
push esi
push eax
push 0
push dword [ebp - 0x14]
push 0x1e
push edi
call fcn.0050a500
add esp, 0x18
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x48], 0
jl 0x51999a
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 0x14]
cmp dword [edi + 0x70], ecx
jg 0x51993b
push dword [ebp - 0x38]
push esi
push edx
push 0x5b
push edi
call fcn.004d2220
add esp, 0x14
jmp 0x519965
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x38]
mov dword [eax + ecx*4], 0x5b
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push esi
push dword [ebp + 0x14]
push dword [ebp - 0x38]
push dword [ebp - 0x14]
push 0x83
push edi
call fcn.0050a500
add esp, 0x18
cmp dword [ebp - 0x48], 0
je 0x51999a
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x51999a
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
cmp esi, 1
jne 0x5199bf
mov ecx, dword [ebp + 0x14]
test ecx, ecx
je 0x5199cd
mov al, byte [ebx + 0x13]
mov esi, dword [ebp - 0x10]
cmp al, 8
jae 0x5199d0
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x5199d0
cmp esi, dword [ebx + 0x1c]
jle 0x5199cd
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], eax
mov esi, dword [ebp - 0x10]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x5199ed
push 0
push dword [ebp - 0xc]
push dword [ebp - 0x18]
push 0xc
push edi
call fcn.004d2220
add esp, 0x14
jmp 0x519a1e
mov edx, dword [ebp - 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xc]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test esi, esi
je 0x519a48
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x519a34
mov eax, 0x5bbdd4
jmp 0x519a45
test esi, esi
lea eax, [edx - 1]
cmovns eax, esi
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x70]
mov ecx, 1
mov eax, dword [ebp - 0x34]
test byte [edx + 0x30], 2
cmovne eax, ecx
mov ecx, dword [edx + 0x338]
mov dword [ebp - 0x34], eax
test dword [ecx + 0x24], 0x200
je 0x519a97
cmp dword [ebp - 0x4c], 0
je 0x519a7a
mov eax, dword [ebp - 0x50]
cmp dword [ecx + 0x20], eax
jne 0x519a97
mov eax, dword [ebp - 0x3c]
test byte [eax + 0x24], 0x80
je 0x519a8f
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
je 0x519a97
mov esi, dword [ecx + 0x20]
mov dword [ebp - 0x50], esi
jmp 0x519a9e
mov dword [ebp - 0x50], 0
push edx
call fcn.0051a050
mov ecx, dword [ebx + 0xd4]
add esp, 4
test ecx, ecx
jne 0x519ab5
xor eax, eax
jmp 0x519adb
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x519ac0
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x519acf
mov eax, 0x5bbdd4
jmp 0x519ad8
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xd4], eax
mov edx, dword [ebp - 0x1c]
mov esi, 0x400
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp eax, dword [ecx + 0xc]
jl 0x5197e0
mov ecx, dword [ebx + 0xd4]
test ecx, ecx
jne 0x519b0a
xor eax, eax
jmp 0x519b30
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x519b15
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x519b24
mov eax, 0x5bbdd4
jmp 0x519b2d
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov esi, dword [ebp + 0x18]
mov dword [ebx + 0xd4], eax
mov eax, dword [ebp - 0x50]
mov dword [esi + 0x40], eax
test eax, eax
je 0x519b49
mov eax, dword [ebp - 0x2c]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x5c]
test eax, eax
je 0x519b64
push eax
push ebx
mov dword [eax + 0xc], 0
call fcn.004f0340
add esp, 8
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x519b76
mov eax, 0x5bbdd4
jmp 0x519b8a
mov ecx, dword [ebp - 0x28]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x519baa
push 0
push edx
push 0
push 0xb
push edi
call fcn.004d2220
add esp, 0x14
jmp 0x519bd9
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [ebp - 0xc]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x519bf6
push edx
push edi
push ecx
call fcn.004de4b0
add esp, 0xc
jmp 0x519bff
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp + 0x10]
cmp byte [eax + 0x2c], 1
jbe 0x519c69
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x519c69
test ebx, ebx
je 0x519c60
cmp dword [ebx + 0x1f8], 0
je 0x519c28
push ecx
push ebx
call fcn.004d4fc0
add esp, 8
jmp 0x519c69
cmp ecx, dword [ebx + 0x14c]
jae 0x519c60
cmp ecx, dword [ebx + 0x144]
jb 0x519c48
mov eax, dword [ebx + 0x140]
mov dword [ecx], eax
mov dword [ebx + 0x140], ecx
jmp 0x519c69
cmp ecx, dword [ebx + 0x148]
jb 0x519c60
mov eax, dword [ebx + 0x138]
mov dword [ecx], eax
mov dword [ebx + 0x138], ecx
jmp 0x519c69
push ecx
call fcn.004b09e0
add esp, 4
cmp dword [ebp - 0x34], 0
jne 0x519cbb
push dword [ebp - 0x30]
push esi
call fcn.004c9f60
add esp, 8
jmp 0x519cbb
mov eax, dword [ebp - 0x64]
test byte [eax + 0x28], 0x20
je 0x519c8c
mov byte [esi + 0x35], 0xad
jmp 0x519cbb
mov ecx, dword [ebp - 0x2c]
push dword [ebp - 0x50]
mov al, byte [ecx + 0x585c58]
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x1c]
push eax
mov dword [esi + 0x38], eax
movzx eax, byte [ecx + 0x585c5c]
push eax
push edi
call fcn.0050a3d0
add esp, 0x10
mov byte [esi + 0x37], 1
inc eax
mov dword [esi + 0x3c], eax
xor eax, eax
mov edx, dword [ebp - 0x60]
mov ecx, eax
neg ecx
sbb ecx, ecx
add ecx, 2
mov dword [ebp - 0x18], ecx
nop dword [eax]
mov ebx, dword [edx + 0xc]
xor eax, eax
mov esi, dword [edx + 0x14]
mov dword [ebp + 0x14], eax
mov dword [ebp - 4], ebx
test ebx, ebx
jle 0x519e9d
movzx edx, word [esi + 0xa]
xor ebx, ebx
test dl, 6
jne 0x519e82
mov eax, dword [ebp + 0x18]
mov edi, dword [ebp + 0x18]
mov ecx, dword [esi + 0x28]
and ecx, dword [eax + 0x50]
mov eax, dword [esi + 0x2c]
and eax, dword [edi + 0x54]
or ecx, eax
mov edi, dword [ebp + 0xc]
je 0x519d1a
mov eax, dword [ebp + 0x10]
or dword [eax + 0x30], 2
jmp 0x519e7f
mov eax, dword [ebp - 0x64]
mov ecx, dword [esi]
mov dword [ebp - 0x40], ecx
test byte [eax + 0x24], 8
je 0x519d32
test byte [ecx + 4], 1
je 0x519e7f
mov eax, dword [ebp - 0x18]
cmp eax, 1
jne 0x519d96
mov eax, dword [ebp + 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x90], ebx
movlpd qword [ebp - 0x88], xmm0
movlpd qword [ebp - 0x80], xmm0
mov eax, dword [eax + 4]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x8c], 0x4ccb00
mov dword [ebp - 0x78], eax
test ecx, ecx
je 0x519d83
push ecx
lea eax, [ebp - 0x90]
push eax
call fcn.00526770
add esp, 8
cmp word [ebp - 0x7c], bx
je 0x519d9b
mov eax, 2
mov dword [ebp + 0x14], eax
jmp 0x519e82
cmp eax, 3
jge 0x519dbf
movzx edx, word [esi + 0xa]
test edx, 0x1000
je 0x519dbf
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x519e82
mov eax, 3
mov dword [ebp + 0x14], eax
jmp 0x519e82
test edx, 0x200
je 0x519e3d
mov eax, dword [ebp + 0x18]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x519e3d
mov ebx, dword [edi + 0x6c]
mov edx, eax
and eax, 1
shr edx, 1
mov dword [ebp - 0x6c], edx
lea eax, [eax*2 + 0x12]
mov dword [ebp - 0x70], eax
cmp dword [edi + 0x70], ebx
jg 0x519e00
push 0
push 0
push edx
push eax
push edi
call fcn.004d2220
add esp, 0x14
mov ebx, eax
jmp 0x519e3d
mov edx, dword [ebp - 0x70]
lea eax, [ebx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov edx, dword [ebp - 0x6c]
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0x10
push dword [ebp - 0x68]
push dword [ebp - 0x40]
push dword [ebp + 8]
call fcn.004f0650
add esp, 0x10
test ebx, ebx
je 0x519e7a
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x519e66
mov eax, 0x5bbdd4
jmp 0x519e77
test ebx, ebx
lea eax, [edx - 1]
cmovns eax, ebx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [esi + 0xa], 4
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp - 4]
add esi, 0x30
dec edx
mov dword [ebp - 4], edx
test edx, edx
jg 0x519ce6
mov edx, dword [ebp - 0x60]
mov esi, dword [edx + 0x14]
mov ebx, dword [edx + 0xc]
mov dword [ebp - 0x18], eax
test eax, eax
jg 0x519cd0
test ebx, ebx
jle 0x519f9b
add esi, 0xc
test byte [esi - 2], 6
jne 0x519f89
movzx eax, word [esi]
mov edi, 0xb
test al, 0x82
setne cl
bt ax, di
mov edi, dword [ebp + 8]
setb al
test al, cl
je 0x519f89
mov ecx, dword [ebp - 0x1c]
cmp dword [esi + 8], ecx
jne 0x519f89
mov eax, dword [ebp - 0x64]
test byte [eax + 0x24], 8
jne 0x519f89
mov eax, dword [esi - 0xc]
push 0
push 0x83
push dword [ebp + 0x20]
mov dword [ebp + 0x10], eax
push dword [ebp + 0x1c]
push dword [esi + 0x10]
push ecx
push edx
call fcn.0051afb0
mov ecx, eax
add esp, 0x1c
test ecx, ecx
je 0x519f89
test byte [ecx + 0xa], 4
jne 0x519f89
test byte [ecx + 0xc], 1
je 0x519f3d
mov eax, dword [ecx]
test dword [eax + 4], 0x800
je 0x519f3d
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x519f89
mov eax, dword [ecx]
push 0x10
push dword [ebp - 0x68]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe0], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0xd0], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ebp - 0xc0], xmm0
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xe0]
push eax
push edi
call fcn.004f0650
add esp, 0x10
mov edx, dword [ebp - 0x60]
dec ebx
add esi, 0x30
test ebx, ebx
jg 0x519eb3
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x18]
mov edx, dword [ebx]
test edx, edx
je 0x51a03d
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x1c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x519fc8
push 0
push edx
push 1
push 0x45
push edi
call fcn.004d2220
add esp, 0x14
jmp 0x519ff7
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0x60]
xor edi, edi
mov esi, dword [edx + 0x14]
cmp dword [edx + 0xc], edi
jle 0x51a03d
test byte [esi + 0xa], 6
jne 0x51a034
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [ebx + 0x50]
and eax, dword [ebx + 0x54]
or ecx, eax
jne 0x51a034
push 0x10
push dword [ebp - 0x68]
push dword [esi]
push dword [ebp + 8]
call fcn.004f0650
mov edx, dword [ebp - 0x60]
add esp, 0x10
or word [esi + 0xa], 4
inc edi
add esi, 0x30
cmp edi, dword [edx + 0xc]
jl 0x51a004
mov eax, dword [ebx + 0x50]
mov edx, dword [ebx + 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret