Function at 0x511c50
Capabilities:
Authenticate hmac
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x12c
mov eax, dword [0x5c9440]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 8]
lea eax, [edx + 0x50]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x9c], edx
push edi
mov eax, dword [esi]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebx + 0x40]
mov dword [ebp - 0x7c], eax
movzx eax, byte [ebx + 0x2c]
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0x90], ebx
lea ecx, [eax + eax*8]
mov dword [ebp - 0xc4], 0
mov eax, dword [edx + 4]
mov edx, dword [edx + 0x1ec]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [ebp - 0xdc], eax
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x8c], eax
xor eax, eax
test edx, edx
jle 0x511cfe
mov ecx, dword [ebp - 0x9c]
add ecx, 0x1f0
mov edi, dword [ebp - 0x8c]
cmp dword [ecx], edi
mov edi, dword [ebp - 0xc8]
je 0x511e04
inc eax
add ecx, 4
cmp eax, edx
jl 0x511ce2
xorps xmm0, xmm0
movlpd qword [ebp - 0xf0], xmm0
mov edx, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xf0]
not ecx
not edx
and ecx, dword [ebp + 0x1c]
and edx, dword [ebp + 0x20]
mov dword [ebx + 0x48], ecx
mov ecx, dword [ebp - 0x9c]
mov dword [ebx + 0x4c], edx
mov eax, dword [ecx + 0x40]
mov edx, dword [ecx + 0x44]
mov ecx, dword [ebp + 0x14]
call fcn.0057bb40
and eax, 1
mov dword [ebp - 0xa4], eax
mov eax, dword [esi + 0x38]
dec eax
mov dword [esi + 0x38], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0xc], eax
mov dword [ebp - 0x94], eax
mov eax, dword [esi + 0x38]
dec eax
mov dword [esi + 0x38], eax
cmp byte [ebx + 0x2c], 0
mov dword [ebp - 0xe0], eax
mov dword [ebx + 0x18], eax
jbe 0x511d8e
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x24], 8
je 0x511d8e
mov eax, dword [esi + 0x2c]
inc eax
push eax
push 0
push 0x46
mov dword [esi + 0x2c], eax
push edi
mov dword [ebx], eax
call fcn.005043f0
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov ecx, eax
test eax, eax
jle 0x511dbd
mov edx, dword [ebp - 0x9c]
lea eax, [eax + eax*4]
shl eax, 4
add edx, 0x2f0
add eax, edx
nop dword [eax + eax]
cmp dword [eax], 0
jne 0x511dbd
dec ecx
sub eax, 0x50
test ecx, ecx
jg 0x511db0
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x9c]
add eax, eax
mov eax, dword [ecx + eax*8 + 0x2fc]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x28], 0x10
je 0x511eb6
mov ecx, dword [edi + 0x6c]
mov esi, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x511e1e
push edx
push 0
push esi
push 0xd
push edi
call fcn.004c3070
add esp, 0x14
jmp 0x511e49
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x511d15
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [edi + 0x6c]
cmp dword [edi + 0x70], edx
jg 0x511e73
push 0
push dword [ebp - 0x94]
push esi
push 0xe
push edi
call fcn.004c3070
mov edx, eax
mov byte [ebx + 0x2d], 0xb
add esp, 0x14
mov dword [ebx + 0x34], edx
jmp 0x51398c
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [ebx + 0x34], edx
mov byte [ebx + 0x2d], 0xb
jmp 0x51398c
mov eax, dword [ebp - 0x7c]
mov edx, dword [eax + 0x24]
test edx, 0x400
je 0x5122fb
mov edx, eax
movzx eax, word [edx + 0x28]
mov dword [ebp - 0x78], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x511eff
mov al, byte [esi + 0x13]
test al, al
jne 0x511eeb
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0x74], eax
jmp 0x511f29
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x94]
mov dword [ebp - 0x74], eax
jmp 0x511f29
mov edx, dword [esi + 0x1c]
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x74], eax
cmp ecx, edx
jg 0x511f18
add eax, ecx
sub edx, ecx
mov dword [esi + 0x20], eax
mov dword [esi + 0x1c], edx
jmp 0x511f26
mov eax, dword [esi + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [ebp - 0x74], edx
mov dword [esi + 0x2c], eax
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebx + 0xc]
xor esi, esi
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x78], esi
jbe 0x511f93
mov edi, dword [ebp - 0xb4]
nop dword [eax]
mov eax, dword [edx + 0x30]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x511f87
mov ecx, dword [ebp - 0x74]
add ecx, 2
add ecx, esi
test byte [eax + 0xc], 1
je 0x511f73
push ecx
push dword [ebp - 0xa4]
push esi
push ebx
push eax
push edi
call fcn.004a8140
mov eax, dword [ebx + 0x10]
add esp, 0x18
mov dword [ebp - 0x70], eax
jmp 0x511f84
mov eax, dword [eax]
push 1
push ecx
push dword [eax + 0x10]
push edi
call fcn.004a8730
add esp, 0x10
mov edx, dword [ebp - 0x7c]
inc esi
cmp esi, dword [ebp - 0x78]
jl 0x511f40
mov edi, dword [ebp - 0xc8]
mov ecx, dword [edi + 0x6c]
mov edx, dword [edx + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x511fb1
push 0
push dword [ebp - 0x74]
push edx
push 0x46
push edi
call fcn.004c3070
add esp, 0x14
jmp 0x511fdf
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x74]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0x74]
mov ecx, dword [edi + 0x6c]
inc edx
mov esi, dword [ebp - 0x78]
cmp dword [edi + 0x70], ecx
jg 0x511fff
push 0
push edx
push esi
push 0x46
push edi
call fcn.004c3070
add esp, 0x14
jmp 0x51202a
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0x7c]
or eax, 0xffffffff
mov edx, 0xfffffff9
cmp byte [ecx + 0x1c], 0
cmovne eax, edx
mov edx, dword [edi + 0x6c]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + 0x20]
mov dword [ebp - 0xac], eax
cmp dword [edi + 0x70], edx
jg 0x51206b
push dword [ebp - 0x74]
push dword [ebp - 0x70]
push dword [ebp - 0x8c]
push 9
push edi
call fcn.004c3070
add esp, 0x14
mov edx, eax
jmp 0x5120a4
mov ebx, dword [ebp - 0x8c]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [ebp - 0x74]
mov dword [eax + ecx*4 + 0xc], ebx
mov ebx, dword [ebp - 0x90]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 0x10], 0
push dword [ebp - 0x68]
push dword [ebp - 0xac]
push edx
push edi
call fcn.005048d0
mov edx, dword [ebp - 0x7c]
add esp, 0x10
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x8c]
mov byte [edx + 0x1c], 0
mov dword [ebx + 0x30], eax
mov eax, 0x3c
cmp byte [ecx + 0x31], 0
mov ecx, 0xaa
cmovne eax, ecx
lea ecx, [esi - 1]
mov byte [ebx + 0x2d], al
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x34], eax
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x6c], ecx
test ecx, ecx
js 0x51398c
lea esi, [eax + eax*4]
shl esi, 2
mov dword [ebp - 0x70], esi
mov eax, dword [edx + 0x30]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0xac], edx
cmp ecx, 0x10
jge 0x512132
mov eax, dword [ebp - 0x7c]
mov ax, word [eax + 0x1e]
shr ax, cl
test al, 1
je 0x51212f
push edx
push ebx
call fcn.004ac270
add esp, 8
jmp 0x5122e4
mov ecx, dword [ebp - 0x6c]
test byte [edx + 0xc], 1
je 0x5122e7
mov eax, dword [ebp - 0xd4]
cmp byte [eax + 0x51], 0
jne 0x5121ed
mov eax, dword [ebx + 0x3c]
sub esi, 0x14
mov dword [ebp - 0x70], esi
mov ecx, dword [eax + esi + 4]
test ecx, ecx
jns 0x512161
mov ecx, dword [edi + 0x6c]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x512170
mov eax, 0x5d6054
jmp 0x512179
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov al, byte [eax]
mov dword [ebp - 0x68], ecx
mov ecx, dword [edi + 0x6c]
mov byte [ebp - 0x95], al
cmp dword [edi + 0x70], ecx
jg 0x5121a9
push edx
push esi
push dword [ebp - 0x68]
movzx eax, al
push eax
push edi
call fcn.004c3070
add esp, 0x14
jmp 0x5121ed
mov bl, byte [ebp - 0x95]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
xor edi, edi
mov word [eax + ecx*4 + 2], di
mov edi, dword [ebp - 0x68]
mov byte [eax + ecx*4], bl
mov ebx, dword [ebp - 0x90]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
mov eax, dword [ebp - 0xb4]
push 0
push 0x34
push dword [eax]
call fcn.004e1200
mov esi, eax
add esp, 0xc
test esi, esi
je 0x5122e1
push 0x34
push 0
push esi
call fcn.005497a0
or eax, 0xffffffff
mov byte [esi], 0x35
push esi
mov word [esi + 0x22], ax
call fcn.004af190
mov ecx, dword [ebp - 0xb4]
add esp, 0x10
mov eax, dword [ecx]
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x512247
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.004e2e30
add esp, 0xc
mov eax, dword [ebp - 0xac]
push 0
push 0x35
push dword [ebp - 0xd4]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esi + 0xc], eax
call fcn.004e1200
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x512294
push 0x34
push 0
push ebx
call fcn.005497a0
add esp, 0xc
mov byte [ebx], 0xa8
or eax, 0xffffffff
mov word [ebx + 0x22], ax
lea eax, [ebx + 0x34]
mov dword [ebx + 8], eax
mov byte [eax], 0
mov dword [ebx + 0x18], 1
mov dword [esi + 0x10], ebx
test ebx, ebx
je 0x5122c5
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x6c]
add ecx, 2
add eax, ecx
mov dword [ebx + 0x1c], eax
mov ebx, dword [ebp - 0x90]
push 0
push dword [ebx + 0x18]
push esi
push dword [ebp - 0xb4]
call fcn.004e6140
add esp, 0x10
jmp 0x5122cb
mov ebx, dword [ebp - 0x90]
push esi
push dword [ebp - 0xd4]
mov dword [esi + 0xc], 0
call fcn.004e5e60
add esp, 8
mov esi, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x7c]
sub ecx, 1
mov dword [ebp - 0x6c], ecx
jns 0x512101
jmp 0x51398c
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x5123d7
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
push ecx
push dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
push 0
push ebx
push eax
push esi
mov dword [ebp - 0x68], ecx
call fcn.004a8140
mov ecx, dword [ebp - 0x68]
mov edx, eax
add esp, 0x18
cmp edx, ecx
je 0x51235c
test ecx, ecx
je 0x51235c
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x51235c
movzx eax, al
mov dword [esi + eax*4 + 0x94], ecx
inc byte [esi + 0x13]
mov ecx, dword [edi + 0x6c]
mov esi, dword [ebx + 0x10]
cmp dword [edi + 0x70], ecx
jg 0x51237c
push edx
push esi
push dword [ebp - 0x8c]
push 0x1e
push edi
call fcn.004c3070
add esp, 0x14
jmp 0x5123af
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0x8c]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0x1e
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0xac]
mov byte [ebx + 0x2d], 0xaa
mov ecx, dword [edx + 0x28]
mov eax, dword [edx + 0x2c]
and ecx, dword [ebx + 0x48]
and eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x51398c
or word [edx + 0xa], 4
jmp 0x51398c
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x512666
xor ecx, ecx
mov dword [ebp - 0x70], 0xaa
xor eax, eax
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xac], ecx
test dl, 0x20
je 0x512422
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x68], 4
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
xor eax, eax
mov dword [ebp - 0xac], ecx
jmp 0x512425
mov dword [ebp - 0x68], eax
test dl, 0x10
je 0x512436
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x68]
mov eax, dword [eax + 0x30]
mov eax, dword [edx + eax]
mov edx, dword [ebp - 0xa4]
test edx, edx
cmove ecx, eax
cmove eax, dword [ebp - 0xac]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xd0], eax
test eax, eax
je 0x51253f
mov edx, dword [eax]
mov dword [ebp - 0x6c], 0x18161719
mov dword [ebp - 0x68], edx
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0xac], eax
call fcn.004e6ac0
add esp, 4
test eax, eax
je 0x5124c4
mov al, byte [esi + 0x13]
test al, al
jne 0x51248d
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x51249c
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x94]
push 1
push eax
push dword [edx + 0x10]
mov dword [ebp - 0x78], eax
push esi
call fcn.004a8730
mov eax, dword [ebp - 0x68]
add esp, 0x10
mov ecx, dword [ebp - 0x78]
movzx eax, byte [eax]
inc eax
and eax, 2
or eax, 1
mov dl, byte [ebp + eax - 0x6c]
jmp 0x512508
lea eax, [ebp - 0xbc]
push eax
push dword [ebp - 0xac]
push esi
call fcn.004e5880
push dword [ebp - 0xd0]
mov dword [ebp - 0xac], eax
push ebx
call fcn.004ac270
mov eax, dword [ebp - 0x68]
add esp, 0x14
mov ecx, dword [ebp - 0xac]
movzx eax, byte [eax]
mov dl, byte [ebp + eax - 0xa2]
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x78], eax
push ecx
push dword [ebp - 0x94]
movzx eax, dl
push dword [ebp - 0x8c]
push eax
push edi
call fcn.00504450
mov ecx, dword [ebp - 0x78]
add esp, 0x14
test ecx, ecx
je 0x512561
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x512561
movzx eax, al
mov dword [esi + eax*4 + 0x94], ecx
inc byte [esi + 0x13]
jmp 0x512561
push dword [ebp - 0xbc]
mov eax, edx
push dword [ebp - 0x8c]
xor eax, 1
lea eax, [eax*4 + 0x20]
push eax
push edi
call fcn.005043f0
add esp, 0x10
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x5125ef
mov eax, dword [eax]
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
push 1
push ecx
push dword [eax + 0x10]
mov dword [ebp - 0x68], eax
push esi
mov dword [ebp - 0xcc], ecx
call fcn.004a8730
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0x68], eax
call fcn.004e6ac0
add esp, 0x14
test eax, eax
jne 0x5125c1
mov al, byte [edx]
cmp al, 0x38
je 0x5125ac
cmp al, 0x36
jne 0x5125c1
mov eax, dword [ebp - 0xa4]
xor eax, 1
lea edx, [eax*2 + 0x37]
mov dword [ebp - 0x70], edx
jmp 0x5125d1
mov eax, dword [ebp - 0xa4]
lea eax, [eax*2 + 0x36]
mov dword [ebp - 0x70], eax
push dword [ebp - 0x68]
call fcn.004e6ac0
add esp, 4
test eax, eax
jne 0x5125ef
push dword [ebp - 0xc0]
push ebx
call fcn.004ac270
add esp, 8
cmp dword [ebp - 0xa4], 0
mov ecx, dword [edi + 0x6c]
sete al
mov dword [ebx + 0x34], ecx
add al, 4
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0x8c]
mov dword [ebx + 0x30], eax
mov ebx, dword [ebp - 0x70]
cmp ebx, 0xaa
je 0x51398c
inc dword [esi + 0x2c]
mov esi, dword [esi + 0x2c]
push esi
push eax
push 0x80
push edi
call fcn.005043f0
push esi
push dword [ebp - 0x94]
push dword [ebp - 0xcc]
push ebx
push edi
call fcn.00504450
mov eax, dword [edi + 0x6c]
add esp, 0x24
test eax, eax
jle 0x51398c
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x51398c
test edx, 0x200
je 0x513023
mov eax, dword [ebp - 0x7c]
mov esi, dword [ebx + 8]
mov dword [ebp - 0xa8], esi
mov esi, dword [ebp - 0x9c]
movzx ecx, word [eax + 0x18]
movzx eax, word [eax + 0x1a]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x7c]
test byte [esi + 0x2c], 1
mov esi, dword [ebp - 0xb4]
mov dword [ebp - 0xac], ecx
movzx eax, word [eax + 0x1c]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov eax, dword [eax + 0x20]
mov dword [ebp - 0xcc], 0
mov byte [ebp - 0x7d], 0
mov byte [ebp - 0x95], 0
mov dword [ebp - 0x74], eax
je 0x512710
mov ebx, dword [ebp - 0x9c]
cmp byte [ebx + 0x2f], 0
mov ebx, dword [ebp - 0x90]
jle 0x512710
cmp word [eax + 0x32], cx
jbe 0x512710
mov byte [ebp - 0x7d], 1
mov dword [ebp - 0x84], 1
movzx ecx, cx
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x68], ecx
test dl, 0x20
je 0x51275c
mov eax, dword [ebp - 0x7c]
mov edi, ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edi*4]
inc edi
mov dword [ebp - 0x68], edi
mov edi, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], eax
movzx eax, word [edi + 0x1a]
mov edi, dword [ebp - 0x84]
cmp edi, eax
cmovbe edi, eax
mov eax, edi
mov dword [ebp - 0x84], edi
mov edi, dword [ebp - 0xc8]
mov dword [ebp - 0x84], eax
test dl, 0x10
je 0x512839
mov eax, dword [ebp - 0x7c]
mov ebx, 0x100
mov edx, dword [ebp - 0x68]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x88], eax
movzx edx, word [edx + 0x1c]
cmp dword [ebp - 0x84], edx
cmova edx, dword [ebp - 0x84]
test word [eax + 0xa], bx
mov ebx, dword [ebp - 0x90]
mov dword [ebp - 0xc4], edx
je 0x5127e9
mov eax, dword [esi + 0x2c]
inc eax
push eax
push 1
push 0x46
mov dword [esi + 0x2c], eax
push edi
mov dword [ebx + 0x24], eax
call fcn.005043f0
mov eax, dword [edi + 0x6c]
xor ecx, ecx
shl dword [ebx + 0x24], 1
add esp, 0x10
mov edx, dword [ebp - 0xa0]
mov dword [ebx + 0x28], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x1c]
cmp byte [edx + eax], 1
sete cl
xor ecx, dword [ebp - 0xa4]
or dword [ebx + 0x24], ecx
mov ecx, edx
mov edx, dword [ebp - 0xc4]
cmp dword [ebp - 0xb8], 0
mov dword [ebp - 0x84], edx
jne 0x512839
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
movsx ecx, word [eax + ecx*2]
mov dword [ebp - 0xc4], ecx
test ecx, ecx
js 0x512824
mov eax, dword [ebp - 0x74]
add ecx, ecx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 4]
cmp byte [eax + ecx*8 + 0xc], 0
je 0x51282f
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x84], edx
cmp ecx, 0xfffffffe
jne 0x512839
mov byte [ebp - 0x7d], 1
mov dword [ebp - 0x84], edx
mov ecx, dword [ebp - 0x74]
mov edx, dword [ebp - 0xac]
movzx eax, word [ecx + 0x32]
mov dword [ebp - 0xc4], eax
cmp dx, ax
jae 0x512876
mov eax, dword [ecx + 0x1c]
xor ecx, ecx
mov edx, dword [ebp - 0xa0]
cmp byte [edx + eax], cl
sete cl
cmp dword [ebp - 0xa4], ecx
je 0x512884
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xac]
cmp dword [ebp - 0xa4], 0
je 0x5128c1
cmp ax, dx
jne 0x5128c1
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0xb8], eax
mov al, byte [ebp - 0x7d]
mov byte [ebp - 0x95], al
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x88], ecx
movzx ecx, dx
movzx eax, al
mov byte [ebp - 0x7d], 0
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0xbc]
push eax
push dword [ebp - 0x84]
push dword [ebp - 0xa4]
push ebx
push esi
call fcn.004a7840
mov ecx, dword [ebp - 0xbc]
add esp, 0x14
mov edx, eax
mov dword [ebp - 0x6c], edx
test ecx, ecx
je 0x512917
cmp word [ebp - 0x94], 0
je 0x512917
mov eax, dword [ebp - 0xa0]
add eax, ecx
push eax
push dword [ebp - 0xd4]
call fcn.004e1410
mov edx, dword [ebp - 0x6c]
add esp, 8
mov dword [ebp - 0xcc], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x51293a
test byte [eax + 0xc], 0x28
mov dword [ebp - 0xd0], 0
je 0x512944
mov dword [ebp - 0xd0], 1
mov ecx, dword [ebp - 0x88]
test ecx, ecx
je 0x51295b
test byte [ecx + 0xc], 0x28
mov dword [ebp - 0x70], 0
je 0x512962
mov dword [ebp - 0x70], 1
test eax, eax
jne 0x512b28
cmp word [ebp - 0xac], ax
ja 0x512b28
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x68], eax
mov al, byte [ebp - 0x7d]
mov dword [ebp - 0x84], ecx
test al, al
je 0x5129bf
lea eax, [ecx + edx]
push eax
push 0
push 0x49
push edi
call fcn.005043f0
mov eax, dword [ebp - 0xa0]
add esp, 0x10
inc eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x84], eax
mov al, byte [ebp - 0x7d]
mov dword [ebp - 0x68], 1
push dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x84]
movzx eax, al
sub ecx, eax
push ecx
push dword [ebp - 0x6c]
push esi
call fcn.004a7c30
mov ecx, dword [ebp - 0x7c]
add esp, 0x10
movzx eax, word [ecx + 0x2a]
test ax, ax
je 0x5129f1
cmp dword [ebp - 0x84], eax
je 0x512a44
test dword [ecx + 0x24], 0x40000
je 0x512a0b
push dword [ebp - 0xa8]
push 0x77
push edi
call fcn.00504390
add esp, 0xc
push dword [ebp - 0x84]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0xc0]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0xa4]
push dword [ebp - 0xa8]
movzx eax, byte [ecx + eax*2 + 0x59a874]
push eax
push edi
call fcn.00504520
add esp, 0x18
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x512c1a
mov eax, dword [eax]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x94]
movzx ecx, ax
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x6c]
push ecx
push eax
push edx
push esi
mov dword [ebp - 0x68], edx
mov dword [ebp - 0xac], eax
call fcn.004a8730
push dword [ebp - 0x88]
mov ebx, dword [ebp - 0x90]
push ebx
push edi
call fcn.005214f0
mov edx, dword [ebp - 0x68]
push edx
call fcn.004e3740
add esp, 0x20
test eax, eax
je 0x512ab8
push dword [ebp - 0xc0]
push dword [ebp - 0xac]
push 0x32
push edi
call fcn.005043f0
mov edx, dword [ebp - 0x68]
add esp, 0x10
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x512af2
mov ecx, dword [ebp - 0x94]
push eax
movzx eax, cx
push eax
push edx
call fcn.0051a110
push dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x94]
movzx eax, cx
push eax
push dword [ebp - 0xac]
push esi
call fcn.004a7c30
add esp, 0x1c
mov ecx, dword [ebp - 0x94]
push dword [ebp - 0x68]
movzx eax, cx
add dword [ebp - 0xa0], eax
call fcn.004e6ac0
add esp, 4
test eax, eax
jne 0x512c11
push dword [ebp - 0x88]
push ebx
call fcn.004ac270
add esp, 8
jmp 0x512c47
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x84], ecx
test eax, eax
je 0x512980
mov edx, dword [ebp - 0x78]
mov eax, dword [eax]
add ecx, dword [ebp - 0x6c]
movzx edx, dx
push edx
mov eax, dword [eax + 0x10]
push ecx
push eax
push esi
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xc4], ecx
call fcn.004a8730
push dword [ebp - 0xb8]
mov edi, dword [ebp - 0xc8]
push ebx
push edi
call fcn.005214f0
mov edx, dword [ebp - 0xac]
push edx
call fcn.004e3740
add esp, 0x20
test eax, eax
je 0x512ba9
push dword [ebp - 0xc0]
push dword [ebp - 0xc4]
push 0x32
push edi
call fcn.005043f0
mov edx, dword [ebp - 0xac]
add esp, 0x10
mov ecx, dword [ebp - 0xbc]
test ecx, ecx
je 0x512bcc
mov eax, dword [ebp - 0xa0]
add eax, ecx
mov ecx, dword [ebp - 0x78]
push eax
movzx eax, cx
push eax
push edx
call fcn.0051a110
add esp, 0xc
mov ecx, dword [ebp - 0x78]
push dword [ebp - 0xac]
movzx eax, cx
add dword [ebp - 0x84], eax
call fcn.004e6ac0
add esp, 4
test eax, eax
jne 0x512c00
push dword [ebp - 0xb8]
push ebx
call fcn.004ac270
add esp, 8
xor al, al
jmp 0x5129bf
mov dword [ebp - 0xd0], 1
xor al, al
jmp 0x5129bf
mov dword [ebp - 0x70], 1
jmp 0x512c47
cmp byte [ebp - 0x95], 0
je 0x512c47
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x6c]
push eax
push 0
push 0x49
push edi
call fcn.005043f0
add esp, 0x10
mov dword [ebp - 0x70], 0
inc dword [ebp - 0xa0]
push dword [ebp - 0xbc]
push dword [ebp - 0xd4]
call fcn.004e1150
push dword [ebp - 0xcc]
push dword [ebp - 0xd4]
call fcn.004e1150
mov eax, dword [edi + 0x6c]
add esp, 0x10
mov dword [ebx + 0x34], eax
mov eax, dword [ebp - 0xa0]
test eax, eax
je 0x512ca7
mov ecx, dword [ebp - 0xa4]
push eax
push dword [ebp - 0x6c]
mov eax, dword [ebp - 0x70]
push dword [ebp - 0xc0]
push dword [ebp - 0xa8]
movzx eax, byte [eax + ecx*2 + 0x59a87c]
push eax
push edi
call fcn.00504520
add esp, 0x18
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0x24]
test eax, 0x40000
je 0x512ccd
push 1
push dword [ebp - 0xa8]
push 0x77
push edi
call fcn.005043f0
mov eax, dword [ebp - 0x7c]
add esp, 0x10
mov eax, dword [eax + 0x24]
mov ecx, dword [ebp - 0x9c]
test al, 0x40
je 0x512e28
test byte [ecx + 0x2c], 0x20
jne 0x512e28
mov edx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x70], 1
mov esi, dword [ebp - 0x8c]
cmp dword [ebx], 0
jne 0x512def
mov eax, dword [ebp - 0x9c]
test byte [eax + 0x2c], 0x20
jne 0x512def
mov eax, dword [edx + 0x28]
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x512def
xorps xmm0, xmm0
mov dword [ebp - 0xf4], esi
lea edi, [ebp - 0xf8]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0xfc], edi
xor esi, esi
mov edi, dword [ebp - 0xc8]
movlpd qword [ebp - 0x10c], xmm0
movlpd qword [ebp - 0x104], xmm0
mov dword [ebp - 0x110], 0x521070
mov dword [ebp - 0xf0], ecx
cmp dword [eax], esi
jle 0x512def
mov ebx, dword [ebp - 0x9c]
lea ecx, [eax + 4]
mov dword [ebp - 0x68], ecx
mov edi, eax
mov eax, dword [edx + 4]
cmp word [eax + esi*2], 0xfffe
jne 0x512dd8
mov dword [ebp - 0xec], esi
mov eax, dword [ecx]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x512db1
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.00520b10
add esp, 8
push dword [ebx + 8]
lea eax, [ebp - 0x114]
push eax
call fcn.00510f50
push dword [ebx + 0xc]
lea eax, [ebp - 0x114]
push eax
call fcn.00510f50
mov ecx, dword [ebp - 0x68]
add esp, 0x10
mov edx, dword [ebp - 0x74]
inc esi
add ecx, 0x18
mov dword [ebp - 0x68], ecx
cmp esi, dword [edi]
jl 0x512d82
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov eax, dword [edx + 0x24]
test eax, eax
je 0x512e0f
mov ecx, dword [ebp - 0xd8]
push ecx
push dword [ebp - 0x8c]
push eax
call fcn.00520c80
mov edx, dword [ebp - 0x74]
add esp, 0xc
mov ecx, dword [ebp - 0x7c]
test dword [ecx + 0x24], 0x1000
je 0x512fe6
mov byte [ebx + 0x2d], 0xaa
jmp 0x512ff5
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0x70], 0
mov eax, dword [edx + 0xc]
test byte [eax + 0x24], 0x20
jne 0x512eb3
movzx eax, word [ecx + 0x2c]
test eax, 0x400
jne 0x512e78
test eax, 0x1000
je 0x512e53
cmp byte [ecx + 0x31], 1
je 0x512e78
push dword [ebp - 0xa8]
mov esi, dword [ebp - 0x8c]
push esi
push edx
push ecx
call fcn.004a7f10
mov edx, dword [ebp - 0x74]
add esp, 0x10
mov ecx, dword [ebp - 0xa8]
jmp 0x512cfb
inc dword [esi + 0x2c]
mov esi, dword [esi + 0x2c]
push esi
push dword [ebp - 0xa8]
push 0x87
push edi
call fcn.005043f0
push esi
mov esi, dword [ebp - 0x8c]
push 0
push esi
push 0x1f
push edi
call fcn.00504450
mov edx, dword [ebp - 0x74]
add esp, 0x24
mov ecx, dword [ebp - 0xa8]
jmp 0x512cfb
mov ecx, dword [ebp - 0xa8]
cmp dword [ebp - 0x8c], ecx
je 0x512cf5
push eax
call fcn.004fafc0
mov dword [ebp - 0xac], eax
movzx eax, word [eax + 0x32]
push eax
push esi
call fcn.004f0430
mov esi, dword [ebp - 0xac]
mov edx, eax
mov dword [ebp - 0xc4], 0
add esp, 0xc
mov dword [ebp - 0xc0], edx
movzx eax, word [esi + 0x32]
mov ecx, eax
cmp word [ebp - 0xc4], ax
jae 0x512fbb
mov dword [ebp - 0x68], edx
xor ebx, ebx
nop
mov eax, dword [ebp - 0x74]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x512f3d
mov eax, dword [esi + 4]
movzx esi, word [eax + ebx*2]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
nop word [eax + eax]
cmp si, word [eax]
je 0x512f63
inc ecx
add eax, 2
cmp ecx, edx
jl 0x512f30
or eax, 0xffffffff
mov ecx, dword [edi + 0x6c]
movsx edx, ax
cmp dword [edi + 0x70], ecx
jg 0x512f68
mov esi, dword [ebp - 0x68]
push esi
push edx
push dword [ebp - 0xa8]
push 0x5a
push edi
call fcn.004c3070
add esp, 0x14
jmp 0x512f98
movzx eax, cx
jmp 0x512f40
mov esi, dword [ebp - 0xa8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 0x68]
mov dword [eax + ecx*4], 0x5a
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
inc esi
inc ebx
mov dword [ebp - 0x68], esi
mov esi, dword [ebp - 0xac]
movzx ecx, word [esi + 0x32]
cmp ebx, ecx
jl 0x512f10
mov ebx, dword [ebp - 0x90]
mov edx, dword [ebp - 0xc0]
mov esi, dword [ebp - 0x8c]
movzx eax, cx
push eax
push edx
push dword [ebp - 0xe0]
push esi
push 0x1c
push edi
call fcn.00504520
mov edx, dword [ebp - 0x74]
add esp, 0x18
mov ecx, dword [ebp - 0xa8]
jmp 0x512cfb
cmp dword [ebp - 0xa4], 0
sete al
add al, 4
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0xa8]
mov dword [ebx + 0x30], eax
mov al, byte [ecx + 0x26]
and al, 1
mov byte [ebx + 0x2e], al
test byte [ecx + 0x24], 0xf
jne 0x513010
mov byte [ebx + 0x2f], 1
xor ecx, ecx
cmp dword [ebp - 0x70], ecx
cmove ecx, edx
mov dword [ebp - 0xc4], ecx
jmp 0x51398e
test edx, 0x2000
je 0x513942
mov eax, dword [esi + 0x28]
dec dword [esi + 0x38]
inc dword [esi + 0x2c]
mov dword [ebp - 0xa8], eax
inc eax
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x38]
mov edx, dword [esi + 0x2c]
mov dword [ebp - 0xac], eax
xor eax, eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x78], 0
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x84], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, dword [eax + 0x1c]
mov dword [ebx + 0x30], edx
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0xcc], eax
mov byte [ebx + 0x2d], 0x42
mov al, byte [edx + 0x2e]
cmp al, 1
jbe 0x5131f3
mov ecx, dword [ebp - 0xd4]
movzx eax, al
sub eax, dword [ebp + 0x14]
dec eax
mov dword [ebp - 0x68], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x5130f0
push ecx
call fcn.004e1200
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0xd0], ecx
jmp 0x513100
call fcn.004f4e10
add esp, 8
mov dword [ebp - 0xd0], eax
mov ecx, eax
test ecx, ecx
jne 0x51311b
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045db8e
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0x68]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [ebp - 0xdc]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
mov eax, dword [ebp - 0x9c]
movq qword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
mov dword [ebp - 0x70], eax
cmp edx, 1
jl 0x5131c2
mov edi, dword [ebp - 0x70]
lea eax, [ebx + 0x7c]
add ecx, 0x50
mov ebx, eax
movzx eax, byte [ebx]
lea ebx, [ebx + 0x50]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [edi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [edi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x513177
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x9c]
test byte [eax + 0x2c], 0x10
jne 0x513242
test byte [ecx + 0x24], 0x20
jne 0x5131fe
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
push eax
push 0
push 0x49
push edi
mov dword [ebp - 0x78], eax
call fcn.005043f0
add esp, 0x10
jmp 0x513236
mov eax, dword [edx + 4]
mov dword [ebp - 0xd0], eax
jmp 0x5131c8
push ecx
call fcn.004fafc0
mov esi, eax
mov eax, dword [ebp - 0xb4]
mov edx, dword [eax + 0x28]
mov dword [ebp - 0x78], edx
lea ecx, [edx + 1]
mov dword [eax + 0x28], ecx
movzx ecx, word [esi + 0x32]
push ecx
push edx
push 0x71
push edi
call fcn.005043f0
push esi
mov esi, dword [ebp - 0xb4]
push esi
call fcn.0050ed40
add esp, 0x1c
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0xb8], eax
mov ecx, dword [edi + 0x6c]
mov dword [ebp - 0xa0], ecx
cmp dword [edi + 0x70], ecx
jg 0x51326d
push 0
push dword [ebp - 0xc0]
push 0
push 0x46
push edi
call fcn.004c3070
add esp, 0x14
mov dword [ebp - 0xa0], eax
jmp 0x5132a2
mov edx, dword [ebp - 0xc0]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ecx + 0xc]
cmp eax, 1
jle 0x5133d0
xor edx, edx
mov dword [ebp - 0x68], edx
test eax, eax
jle 0x5133d0
mov edi, dword [ebp - 0xd4]
xor ecx, ecx
mov esi, dword [ebp - 0xd8]
xor ebx, ebx
mov dword [ebp - 0x70], ecx
mov eax, dword [esi + 0x14]
add eax, ecx
cmp eax, dword [ebp - 0x7c]
je 0x513320
test byte [eax + 0xa], 6
jne 0x513320
mov esi, 0x1fff
test word [eax + 0xc], si
mov esi, dword [ebp - 0xd8]
je 0x513320
mov eax, dword [eax]
test eax, eax
je 0x51330b
push 0
push 0
push eax
push edi
call fcn.004ae550
add esp, 0x10
jmp 0x51330d
xor eax, eax
push eax
push ebx
push edi
call fcn.004e3400
mov ecx, dword [ebp - 0x70]
add esp, 0xc
mov edx, dword [ebp - 0x68]
mov ebx, eax
inc edx
add ecx, 0x30
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x70], ecx
cmp edx, dword [esi + 0xc]
jl 0x5132d4
mov edi, dword [ebp - 0xc8]
test ebx, ebx
mov esi, dword [ebp - 0xb4]
mov dword [ebp - 0x88], ebx
mov ebx, dword [ebp - 0x90]
je 0x5133d0
push 0
push 0x34
push dword [esi]
call fcn.004e1200
add esp, 0xc
mov dword [ebp - 0x70], eax
test eax, eax
je 0x5133b6
push 0x34
push 0
push eax
call fcn.005497a0
mov ecx, dword [ebp - 0x70]
or eax, 0xffffffff
push ecx
mov word [ecx + 0x22], ax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0x10], eax
mov byte [ecx], 0x2c
mov eax, dword [eax + 4]
and eax, 0x200104
or dword [ecx + 4], eax
call fcn.004af190
mov eax, dword [esi]
add esp, 0x10
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x18], ecx
jle 0x5133ca
push ecx
push str.Expression_tree_is_too_large__maximum_depth__d_
push esi
call fcn.004e2e30
add esp, 0xc
jmp 0x5133c7
mov eax, dword [ebp - 0x88]
push eax
push dword [esi]
call fcn.004e5e60
add esp, 8
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x9c]
mov ecx, 0x400
push str.MULTI_INDEX_OR
push 1
push esi
mov ax, word [eax + 0x2c]
and ax, cx
or ax, 0x20
movzx eax, ax
mov dword [ebp - 0xe4], eax
call fcn.0050bdc0
mov ecx, dword [ebp - 0xcc]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x74], eax
cmp dword [ecx + 0xc], eax
jle 0x5137bb
mov ebx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x8c]
nop
lea eax, [eax + eax*2]
shl eax, 4
add eax, dword [ecx + 0x14]
cmp dword [eax + 0x14], edx
je 0x51343d
mov esi, 0x400
test word [eax + 0xc], si
je 0x51379f
mov esi, dword [eax]
xor eax, eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x513456
mov dword [eax + 0xc], esi
mov esi, eax
mov eax, dword [ebp - 0x74]
inc eax
push eax
push str.INDEX__d
push 1
push ebx
call fcn.0050bdc0
push dword [ebp - 0xa8]
push dword [ebp - 0xe4]
push 0
push 0
push esi
mov esi, dword [ebp - 0xd0]
push esi
push ebx
call fcn.00511140
add esp, 0x2c
mov dword [ebp - 0xec], eax
test eax, eax
je 0x513793
push 0
lea ecx, [eax + 0x2f0]
push ecx
push esi
push ebx
call fcn.005146c0
mov eax, dword [ebp - 0x9c]
add esp, 0x10
test byte [eax + 0x2c], 0x10
jne 0x51365b
mov eax, dword [ebp - 0xcc]
mov esi, dword [ebp - 0x74]
mov eax, dword [eax + 0xc]
dec eax
cmp esi, eax
mov eax, 0xffffffff
cmove esi, eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x68], esi
test byte [eax + 0x24], 0x20
jne 0x513516
mov edx, dword [ebp - 0xb8]
push edx
push dword [ebp - 0x8c]
push 0x80
push edi
call fcn.005043f0
push esi
push dword [ebp - 0xb8]
push 0
push dword [ebp - 0x78]
push 0x2a
push edi
call fcn.00504520
add esp, 0x28
mov esi, eax
jmp 0x513661
push eax
call fcn.004fafc0
mov dword [ebp - 0xe8], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
mov dword [ebp - 0x70], eax
call fcn.004f0430
xor esi, esi
mov dword [ebp - 0x6c], eax
add esp, 0xc
cmp dword [ebp - 0x70], esi
jbe 0x513575
mov ebx, dword [ebp - 0x70]
lea ecx, [esi + eax]
mov eax, dword [ebp - 0xe8]
push ecx
mov eax, dword [eax + 4]
movsx eax, word [eax + esi*2]
push eax
push dword [ebp - 0x8c]
push dword [ebp - 0x84]
push edi
call fcn.004e3be0
mov eax, dword [ebp - 0x6c]
inc esi
add esp, 0x14
cmp esi, ebx
jl 0x513540
mov ebx, dword [ebp - 0xb4]
cmp dword [ebp - 0x68], 0
mov esi, dword [ebp - 0x70]
je 0x5135a0
push esi
push eax
push 0
push dword [ebp - 0x78]
push 0x1d
push edi
call fcn.00504520
add esp, 0x18
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x68], 0
jl 0x513625
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp - 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x5135c0
push dword [ebp - 0xb8]
push esi
push edx
push 0x5c
push edi
call fcn.004c3070
add esp, 0x14
jmp 0x5135ed
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0x5c
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push esi
push dword [ebp - 0x6c]
push dword [ebp - 0xb8]
push dword [ebp - 0x78]
push 0x84
push edi
call fcn.00504520
add esp, 0x18
cmp dword [ebp - 0x68], 0
je 0x513625
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x513625
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
cmp esi, 1
jne 0x51364d
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x51365b
mov al, byte [ebx + 0x13]
mov esi, dword [ebp - 0x94]
cmp al, 8
jae 0x513661
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x513661
cmp esi, dword [ebx + 0x1c]
jle 0x51365b
mov eax, dword [ebp - 0x6c]
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], eax
mov esi, dword [ebp - 0x94]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x513684
push 0
push dword [ebp - 0xac]
push dword [ebp - 0xc0]
push 0xc
push edi
call fcn.004c3070
add esp, 0x14
jmp 0x5136bb
mov edx, dword [ebp - 0xc0]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xac]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test esi, esi
je 0x5136e5
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x5136d1
mov eax, 0x5d6054
jmp 0x5136e2
test esi, esi
lea eax, [edx - 1]
cmovns eax, esi
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0xec]
mov ecx, 1
mov eax, dword [ebp - 0xa4]
cmp byte [edx + 0x32], 0
cmovne eax, ecx
mov ecx, dword [edx + 0x330]
mov dword [ebp - 0xa4], eax
test dword [ecx + 0x24], 0x200
je 0x513746
cmp dword [ebp - 0x74], 0
je 0x513723
mov eax, dword [ebp - 0xbc]
cmp dword [ecx + 0x20], eax
jne 0x513746
mov eax, dword [ebp - 0x84]
test byte [eax + 0x24], 0x20
je 0x51373b
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
je 0x513746
mov esi, dword [ecx + 0x20]
mov dword [ebp - 0xbc], esi
jmp 0x513750
mov dword [ebp - 0xbc], 0
push edx
call fcn.00513e30
mov ecx, dword [ebx + 0xd4]
add esp, 4
test ecx, ecx
jne 0x513767
xor eax, eax
jmp 0x51378d
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x513772
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x513781
mov eax, 0x5d6054
jmp 0x51378a
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xd4], eax
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp eax, dword [ecx + 0xc]
jl 0x513420
mov ebx, dword [ebp - 0x90]
mov esi, dword [ebp - 0xb4]
mov ecx, dword [esi + 0xd4]
test ecx, ecx
jne 0x5137c9
xor eax, eax
jmp 0x5137ef
mov edx, dword [esi + 8]
test ecx, ecx
jns 0x5137d4
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x5137e3
mov eax, 0x5d6054
jmp 0x5137ec
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [esi + 0xd4], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebx + 0x38], eax
test eax, eax
je 0x51380b
mov eax, dword [ebp - 0xa8]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x88]
mov esi, dword [ebp - 0xd4]
test eax, eax
je 0x51382c
push eax
push esi
mov dword [eax + 0xc], 0
call fcn.004e5e60
add esp, 8
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x51383e
mov eax, 0x5d6054
jmp 0x513855
mov ecx, dword [ebp - 0xa0]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebx + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x513875
push 0
push edx
push 0
push 0xb
push edi
call fcn.004c3070
add esp, 0x14
jmp 0x5138aa
mov ebx, dword [ebp - 0x90]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [ebp - 0xac]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x5138ca
push edx
push edi
push ecx
call fcn.004d1020
add esp, 0xc
jmp 0x5138d3
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x9c]
cmp byte [eax + 0x2e], 1
jbe 0x51392b
mov ecx, dword [ebp - 0xd0]
test ecx, ecx
je 0x51392b
test esi, esi
je 0x513922
cmp dword [esi + 0x1e8], 0
je 0x513902
push ecx
push esi
call fcn.004c6210
add esp, 8
jmp 0x51392b
cmp ecx, dword [esi + 0x138]
jb 0x513922
cmp ecx, dword [esi + 0x13c]
jae 0x513922
mov eax, dword [esi + 0x134]
mov dword [ecx], eax
mov dword [esi + 0x134], ecx
jmp 0x51392b
push ecx
call fcn.00490350
add esp, 4
cmp dword [ebp - 0xa4], 0
jne 0x51398c
push dword [ebp - 0x7c]
push ebx
call fcn.004ac270
add esp, 8
jmp 0x51398c
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x28], 0x20
je 0x513954
mov byte [ebx + 0x2d], 0xaa
jmp 0x51398c
mov ecx, dword [ebp - 0xa4]
push dword [ebp - 0xbc]
mov al, byte [ecx + 0x59a880]
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0x8c]
push eax
mov dword [ebx + 0x30], eax
movzx eax, byte [ecx + 0x59a884]
push eax
push edi
call fcn.005043f0
add esp, 0x10
mov byte [ebx + 0x2f], 1
inc eax
mov dword [ebx + 0x34], eax
xor ecx, ecx
mov ebx, dword [ebp - 0xd8]
neg ecx
sbb ecx, ecx
add ecx, 2
mov dword [ebp - 0x68], ecx
nop
mov edx, dword [ebx + 0xc]
xor eax, eax
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x88], edx
test edx, edx
jle 0x513bcf
nop dword [eax]
movzx edx, word [esi + 0xa]
xor ebx, ebx
test dl, 6
jne 0x513ba5
mov eax, dword [ebp - 0x90]
mov edi, dword [ebp - 0x90]
mov ecx, dword [esi + 0x28]
and ecx, dword [eax + 0x48]
mov eax, dword [esi + 0x2c]
and eax, dword [edi + 0x4c]
or ecx, eax
mov edi, dword [ebp - 0xc8]
je 0x513a00
mov eax, dword [ebp - 0x9c]
mov byte [eax + 0x32], 1
jmp 0x513ba2
mov eax, dword [ebp - 0xdc]
mov ecx, dword [esi]
mov dword [ebp - 0xe4], ecx
test byte [eax + 0x24], 8
je 0x513a1e
test byte [ecx + 4], 1
je 0x513ba2
mov eax, dword [ebp - 0x68]
cmp eax, 1
jne 0x513a99
mov eax, dword [ebp - 0x90]
xorps xmm0, xmm0
mov dword [ebp - 0x114], ebx
movlpd qword [ebp - 0x10c], xmm0
movlpd qword [ebp - 0x104], xmm0
mov eax, dword [eax + 4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x110], 0x4ae950
mov dword [ebp - 0xfc], eax
test ecx, ecx
je 0x513a84
push ecx
lea eax, [ebp - 0x114]
push eax
call fcn.00520b10
add esp, 8
cmp byte [ebp - 0x100], bl
je 0x513a9e
mov eax, 2
mov dword [ebp - 0x6c], eax
jmp 0x513ba5
cmp eax, 3
jge 0x513ac2
movzx edx, word [esi + 0xa]
test edx, 0x1000
je 0x513ac2
mov eax, dword [ebp - 0x6c]
test eax, eax
jne 0x513ba5
mov eax, 3
mov dword [ebp - 0x6c], eax
jmp 0x513ba5
test edx, 0x200
je 0x513b57
mov eax, dword [ebp - 0x90]
mov eax, dword [eax + 0x24]
test eax, eax
je 0x513b57
mov ebx, dword [edi + 0x6c]
mov edx, eax
and eax, 1
shr edx, 1
mov dword [ebp - 0xe8], edx
lea eax, [eax*2 + 0x12]
mov dword [ebp - 0xec], eax
cmp dword [edi + 0x70], ebx
jg 0x513b14
push 0
push 0
push edx
push eax
push edi
call fcn.004c3070
add esp, 0x14
mov ebx, eax
jmp 0x513b57
mov edx, dword [ebp - 0xec]
lea eax, [ebx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov edx, dword [ebp - 0xe8]
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0x10
push dword [ebp - 0xe0]
push dword [ebp - 0xe4]
push dword [ebp - 0xb4]
call fcn.004e6140
add esp, 0x10
test ebx, ebx
je 0x513b9d
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x513b89
mov eax, 0x5d6054
jmp 0x513b9a
test ebx, ebx
lea eax, [edx - 1]
cmovns eax, ebx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [esi + 0xa], 4
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x88]
add esi, 0x30
dec edx
mov dword [ebp - 0x88], edx
test edx, edx
jg 0x5139c0
mov ebx, dword [ebp - 0xd8]
mov edx, dword [ebx + 0xc]
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x68], eax
test eax, eax
jg 0x5139a0
test edx, edx
jle 0x513d5f
mov edi, dword [ebp - 0x90]
lea ebx, [esi + 0xc]
mov dword [ebp - 0x78], ebx
mov esi, 0xb
test byte [ebx - 2], 6
jne 0x513d44
movzx eax, word [ebx]
test al, 0x82
setne cl
bt ax, si
setb al
test al, cl
je 0x513d44
mov ecx, dword [ebp - 0x8c]
cmp dword [ebx + 8], ecx
jne 0x513d44
cmp dword [edi], 0
jne 0x513d44
mov eax, dword [ebx - 0xc]
xor esi, esi
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0xec], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x58], esi
mov word [ebp - 0x54], 0x100
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x50], 0x83
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], ecx
mov byte [ebp - 0x52], 1
cmp eax, 0xfffffffe
je 0x513cb4
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x64]
push eax
call fcn.00525030
mov edx, eax
add esp, 4
test edx, edx
je 0x513cb4
nop
mov ebx, dword [edx + 0x20]
mov ecx, ebx
mov eax, dword [edx + 0x24]
and ecx, dword [ebp + 0x1c]
and eax, dword [ebp + 0x20]
or ecx, eax
jne 0x513ca2
or ebx, dword [edx + 0x24]
jne 0x513c9d
test byte [edx + 0xc], 0x82
jne 0x513cb6
test esi, esi
cmove esi, edx
lea eax, [ebp - 0x64]
push eax
call fcn.00525030
mov edx, eax
add esp, 4
test edx, edx
jne 0x513c80
mov edx, esi
test edx, edx
je 0x513d36
test byte [edx + 0xa], 4
jne 0x513d36
test byte [edx + 0xc], 1
je 0x513cdf
mov eax, dword [edx]
test dword [eax + 4], 0x800
je 0x513cdf
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
cmp dword [eax], 1
jg 0x513d36
mov eax, dword [edx]
push 0x10
push dword [ebp - 0xe0]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x12c], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0x11c], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ebp - 0x10c], xmm0
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xec]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0xb4]
call fcn.004e6140
add esp, 0x10
mov ebx, dword [ebp - 0x78]
mov esi, 0xb
mov edx, dword [ebp - 0x88]
dec edx
add ebx, 0x30
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x78], ebx
test edx, edx
jg 0x513bf3
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov edx, dword [ebx]
test edx, edx
je 0x513e12
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x1c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x513d8f
push 0
push edx
push 1
push 0x46
push edi
call fcn.004c3070
add esp, 0x14
jmp 0x513dbe
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0xd8]
xor edi, edi
mov esi, dword [edx + 0x14]
cmp dword [edx + 0xc], edi
jle 0x513e12
nop
test byte [esi + 0xa], 6
jne 0x513e09
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [ebx + 0x48]
and eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x513e09
push 0x10
push dword [ebp - 0xe0]
push dword [esi]
push dword [ebp - 0xb4]
call fcn.004e6140
mov edx, dword [ebp - 0xd8]
add esp, 0x10
or word [esi + 0xa], 4
inc edi
add esi, 0x30
cmp edi, dword [edx + 0xc]
jl 0x513dd0
mov ecx, dword [ebp - 4]
mov eax, dword [ebx + 0x48]
xor ecx, ebp
mov edx, dword [ebx + 0x4c]
pop edi
pop esi
pop ebx
call fcn.0045db8e
mov esp, ebp
pop ebp
ret