Function at 0x515730
Capabilities:
Authenticate hmac
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x12c
mov eax, dword [0x5c8a30]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 8]
lea eax, [edx + 0x50]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x9c], edx
push edi
mov eax, dword [esi]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebx + 0x40]
mov dword [ebp - 0x7c], eax
movzx eax, byte [ebx + 0x2c]
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0x90], ebx
lea ecx, [eax + eax*8]
mov dword [ebp - 0xc4], 0
mov eax, dword [edx + 4]
mov edx, dword [edx + 0x1ec]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [ebp - 0xdc], eax
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x8c], eax
xor eax, eax
test edx, edx
jle 0x5157de
mov ecx, dword [ebp - 0x9c]
add ecx, 0x1f0
mov edi, dword [ebp - 0x8c]
cmp dword [ecx], edi
mov edi, dword [ebp - 0xc8]
je 0x5158e4
inc eax
add ecx, 4
cmp eax, edx
jl 0x5157c2
xorps xmm0, xmm0
movlpd qword [ebp - 0xf0], xmm0
mov edx, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xf0]
not ecx
not edx
and ecx, dword [ebp + 0x1c]
and edx, dword [ebp + 0x20]
mov dword [ebx + 0x48], ecx
mov ecx, dword [ebp - 0x9c]
mov dword [ebx + 0x4c], edx
mov eax, dword [ecx + 0x40]
mov edx, dword [ecx + 0x44]
mov ecx, dword [ebp + 0x14]
call fcn.00578300
and eax, 1
mov dword [ebp - 0xa4], eax
mov eax, dword [esi + 0x38]
dec eax
mov dword [esi + 0x38], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0xc], eax
mov dword [ebp - 0x94], eax
mov eax, dword [esi + 0x38]
dec eax
mov dword [esi + 0x38], eax
cmp byte [ebx + 0x2c], 0
mov dword [ebp - 0xe0], eax
mov dword [ebx + 0x18], eax
jbe 0x51586e
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x24], 8
je 0x51586e
mov eax, dword [esi + 0x2c]
inc eax
push eax
push 0
push 0x46
mov dword [esi + 0x2c], eax
push edi
mov dword [ebx], eax
call fcn.00507ed0
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov ecx, eax
test eax, eax
jle 0x51589d
mov edx, dword [ebp - 0x9c]
lea eax, [eax + eax*4]
shl eax, 4
add edx, 0x2f0
add eax, edx
nop dword [eax + eax]
cmp dword [eax], 0
jne 0x51589d
dec ecx
sub eax, 0x50
test ecx, ecx
jg 0x515890
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x9c]
add eax, eax
mov eax, dword [ecx + eax*8 + 0x2fc]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x28], 0x10
je 0x515996
mov ecx, dword [edi + 0x6c]
mov esi, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x5158fe
push edx
push 0
push esi
push 0xd
push edi
call fcn.004c6b50
add esp, 0x14
jmp 0x515929
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x5157f5
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [edi + 0x6c]
cmp dword [edi + 0x70], edx
jg 0x515953
push 0
push dword [ebp - 0x94]
push esi
push 0xe
push edi
call fcn.004c6b50
mov edx, eax
mov byte [ebx + 0x2d], 0xb
add esp, 0x14
mov dword [ebx + 0x34], edx
jmp 0x51746c
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [ebx + 0x34], edx
mov byte [ebx + 0x2d], 0xb
jmp 0x51746c
mov eax, dword [ebp - 0x7c]
mov edx, dword [eax + 0x24]
test edx, 0x400
je 0x515ddb
mov edx, eax
movzx eax, word [edx + 0x28]
mov dword [ebp - 0x78], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x5159df
mov al, byte [esi + 0x13]
test al, al
jne 0x5159cb
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0x74], eax
jmp 0x515a09
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x94]
mov dword [ebp - 0x74], eax
jmp 0x515a09
mov edx, dword [esi + 0x1c]
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x74], eax
cmp ecx, edx
jg 0x5159f8
add eax, ecx
sub edx, ecx
mov dword [esi + 0x20], eax
mov dword [esi + 0x1c], edx
jmp 0x515a06
mov eax, dword [esi + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [ebp - 0x74], edx
mov dword [esi + 0x2c], eax
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebx + 0xc]
xor esi, esi
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x78], esi
jbe 0x515a73
mov edi, dword [ebp - 0xb4]
nop dword [eax]
mov eax, dword [edx + 0x30]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x515a67
mov ecx, dword [ebp - 0x74]
add ecx, 2
add ecx, esi
test byte [eax + 0xc], 1
je 0x515a53
push ecx
push dword [ebp - 0xa4]
push esi
push ebx
push eax
push edi
call fcn.004abc00
mov eax, dword [ebx + 0x10]
add esp, 0x18
mov dword [ebp - 0x70], eax
jmp 0x515a64
mov eax, dword [eax]
push 1
push ecx
push dword [eax + 0x10]
push edi
call fcn.004ac1f0
add esp, 0x10
mov edx, dword [ebp - 0x7c]
inc esi
cmp esi, dword [ebp - 0x78]
jl 0x515a20
mov edi, dword [ebp - 0xc8]
mov ecx, dword [edi + 0x6c]
mov edx, dword [edx + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x515a91
push 0
push dword [ebp - 0x74]
push edx
push 0x46
push edi
call fcn.004c6b50
add esp, 0x14
jmp 0x515abf
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x74]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0x74]
mov ecx, dword [edi + 0x6c]
inc edx
mov esi, dword [ebp - 0x78]
cmp dword [edi + 0x70], ecx
jg 0x515adf
push 0
push edx
push esi
push 0x46
push edi
call fcn.004c6b50
add esp, 0x14
jmp 0x515b0a
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], esi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0x7c]
or eax, 0xffffffff
mov edx, 0xfffffff9
cmp byte [ecx + 0x1c], 0
cmovne eax, edx
mov edx, dword [edi + 0x6c]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + 0x20]
mov dword [ebp - 0xac], eax
cmp dword [edi + 0x70], edx
jg 0x515b4b
push dword [ebp - 0x74]
push dword [ebp - 0x70]
push dword [ebp - 0x8c]
push 9
push edi
call fcn.004c6b50
add esp, 0x14
mov edx, eax
jmp 0x515b84
mov ebx, dword [ebp - 0x8c]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [eax + ecx*4 + 8], ebx
mov ebx, dword [ebp - 0x74]
mov dword [eax + ecx*4 + 0xc], ebx
mov ebx, dword [ebp - 0x90]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 0x10], 0
push dword [ebp - 0x68]
push dword [ebp - 0xac]
push edx
push edi
call fcn.005083b0
mov edx, dword [ebp - 0x7c]
add esp, 0x10
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x8c]
mov byte [edx + 0x1c], 0
mov dword [ebx + 0x30], eax
mov eax, 0x3c
cmp byte [ecx + 0x31], 0
mov ecx, 0xaa
cmovne eax, ecx
lea ecx, [esi - 1]
mov byte [ebx + 0x2d], al
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x34], eax
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x6c], ecx
test ecx, ecx
js 0x51746c
lea esi, [eax + eax*4]
shl esi, 2
mov dword [ebp - 0x70], esi
mov eax, dword [edx + 0x30]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0xac], edx
cmp ecx, 0x10
jge 0x515c12
mov eax, dword [ebp - 0x7c]
mov ax, word [eax + 0x1e]
shr ax, cl
test al, 1
je 0x515c0f
push edx
push ebx
call fcn.004afd30
add esp, 8
jmp 0x515dc4
mov ecx, dword [ebp - 0x6c]
test byte [edx + 0xc], 1
je 0x515dc7
mov eax, dword [ebp - 0xd4]
cmp byte [eax + 0x51], 0
jne 0x515ccd
mov eax, dword [ebx + 0x3c]
sub esi, 0x14
mov dword [ebp - 0x70], esi
mov ecx, dword [eax + esi + 4]
test ecx, ecx
jns 0x515c41
mov ecx, dword [edi + 0x6c]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x515c50
mov eax, 0x5d5314
jmp 0x515c59
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov al, byte [eax]
mov dword [ebp - 0x68], ecx
mov ecx, dword [edi + 0x6c]
mov byte [ebp - 0x95], al
cmp dword [edi + 0x70], ecx
jg 0x515c89
push edx
push esi
push dword [ebp - 0x68]
movzx eax, al
push eax
push edi
call fcn.004c6b50
add esp, 0x14
jmp 0x515ccd
mov bl, byte [ebp - 0x95]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
xor edi, edi
mov word [eax + ecx*4 + 2], di
mov edi, dword [ebp - 0x68]
mov byte [eax + ecx*4], bl
mov ebx, dword [ebp - 0x90]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
mov eax, dword [ebp - 0xb4]
push 0
push 0x34
push dword [eax]
call fcn.004e4ce0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x515dc1
push 0x34
push 0
push esi
call fcn.00546c00
or eax, 0xffffffff
mov byte [esi], 0x35
push esi
mov word [esi + 0x22], ax
call fcn.004b2c50
mov ecx, dword [ebp - 0xb4]
add esp, 0x10
mov eax, dword [ecx]
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x515d27
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ecx
call fcn.004e6910
add esp, 0xc
mov eax, dword [ebp - 0xac]
push 0
push 0x35
push dword [ebp - 0xd4]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esi + 0xc], eax
call fcn.004e4ce0
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x515d74
push 0x34
push 0
push ebx
call fcn.00546c00
add esp, 0xc
mov byte [ebx], 0xa8
or eax, 0xffffffff
mov word [ebx + 0x22], ax
lea eax, [ebx + 0x34]
mov dword [ebx + 8], eax
mov byte [eax], 0
mov dword [ebx + 0x18], 1
mov dword [esi + 0x10], ebx
test ebx, ebx
je 0x515da5
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x6c]
add ecx, 2
add eax, ecx
mov dword [ebx + 0x1c], eax
mov ebx, dword [ebp - 0x90]
push 0
push dword [ebx + 0x18]
push esi
push dword [ebp - 0xb4]
call fcn.004e9c30
add esp, 0x10
jmp 0x515dab
mov ebx, dword [ebp - 0x90]
push esi
push dword [ebp - 0xd4]
mov dword [esi + 0xc], 0
call fcn.004e9950
add esp, 8
mov esi, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x7c]
sub ecx, 1
mov dword [ebp - 0x6c], ecx
jns 0x515be1
jmp 0x51746c
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x515eb7
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
push ecx
push dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
push 0
push ebx
push eax
push esi
mov dword [ebp - 0x68], ecx
call fcn.004abc00
mov ecx, dword [ebp - 0x68]
mov edx, eax
add esp, 0x18
cmp edx, ecx
je 0x515e3c
test ecx, ecx
je 0x515e3c
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x515e3c
movzx eax, al
mov dword [esi + eax*4 + 0x94], ecx
inc byte [esi + 0x13]
mov ecx, dword [edi + 0x6c]
mov esi, dword [ebx + 0x10]
cmp dword [edi + 0x70], ecx
jg 0x515e5c
push edx
push esi
push dword [ebp - 0x8c]
push 0x1e
push edi
call fcn.004c6b50
add esp, 0x14
jmp 0x515e8f
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0x8c]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0x1e
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0xac]
mov byte [ebx + 0x2d], 0xaa
mov ecx, dword [edx + 0x28]
mov eax, dword [edx + 0x2c]
and ecx, dword [ebx + 0x48]
and eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x51746c
or word [edx + 0xa], 4
jmp 0x51746c
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x516146
xor ecx, ecx
mov dword [ebp - 0x70], 0xaa
xor eax, eax
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xac], ecx
test dl, 0x20
je 0x515f02
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x68], 4
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
xor eax, eax
mov dword [ebp - 0xac], ecx
jmp 0x515f05
mov dword [ebp - 0x68], eax
test dl, 0x10
je 0x515f16
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x68]
mov eax, dword [eax + 0x30]
mov eax, dword [edx + eax]
mov edx, dword [ebp - 0xa4]
test edx, edx
cmove ecx, eax
cmove eax, dword [ebp - 0xac]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xd0], eax
test eax, eax
je 0x51601f
mov edx, dword [eax]
mov dword [ebp - 0x6c], 0x18161719
mov dword [ebp - 0x68], edx
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0xac], eax
call fcn.004ea5b0
add esp, 4
test eax, eax
je 0x515fa4
mov al, byte [esi + 0x13]
test al, al
jne 0x515f6d
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
jmp 0x515f7c
dec al
mov byte [esi + 0x13], al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x94]
push 1
push eax
push dword [edx + 0x10]
mov dword [ebp - 0x78], eax
push esi
call fcn.004ac1f0
mov eax, dword [ebp - 0x68]
add esp, 0x10
mov ecx, dword [ebp - 0x78]
movzx eax, byte [eax]
inc eax
and eax, 2
or eax, 1
mov dl, byte [ebp + eax - 0x6c]
jmp 0x515fe8
lea eax, [ebp - 0xbc]
push eax
push dword [ebp - 0xac]
push esi
call fcn.004e9370
push dword [ebp - 0xd0]
mov dword [ebp - 0xac], eax
push ebx
call fcn.004afd30
mov eax, dword [ebp - 0x68]
add esp, 0x14
mov ecx, dword [ebp - 0xac]
movzx eax, byte [eax]
mov dl, byte [ebp + eax - 0xa2]
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x78], eax
push ecx
push dword [ebp - 0x94]
movzx eax, dl
push dword [ebp - 0x8c]
push eax
push edi
call fcn.00507f30
mov ecx, dword [ebp - 0x78]
add esp, 0x14
test ecx, ecx
je 0x516041
mov al, byte [esi + 0x13]
cmp al, 8
jae 0x516041
movzx eax, al
mov dword [esi + eax*4 + 0x94], ecx
inc byte [esi + 0x13]
jmp 0x516041
push dword [ebp - 0xbc]
mov eax, edx
push dword [ebp - 0x8c]
xor eax, 1
lea eax, [eax*4 + 0x20]
push eax
push edi
call fcn.00507ed0
add esp, 0x10
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x5160cf
mov eax, dword [eax]
inc dword [esi + 0x2c]
mov ecx, dword [esi + 0x2c]
push 1
push ecx
push dword [eax + 0x10]
mov dword [ebp - 0x68], eax
push esi
mov dword [ebp - 0xcc], ecx
call fcn.004ac1f0
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0x68], eax
call fcn.004ea5b0
add esp, 0x14
test eax, eax
jne 0x5160a1
mov al, byte [edx]
cmp al, 0x38
je 0x51608c
cmp al, 0x36
jne 0x5160a1
mov eax, dword [ebp - 0xa4]
xor eax, 1
lea edx, [eax*2 + 0x37]
mov dword [ebp - 0x70], edx
jmp 0x5160b1
mov eax, dword [ebp - 0xa4]
lea eax, [eax*2 + 0x36]
mov dword [ebp - 0x70], eax
push dword [ebp - 0x68]
call fcn.004ea5b0
add esp, 4
test eax, eax
jne 0x5160cf
push dword [ebp - 0xc0]
push ebx
call fcn.004afd30
add esp, 8
cmp dword [ebp - 0xa4], 0
mov ecx, dword [edi + 0x6c]
sete al
mov dword [ebx + 0x34], ecx
add al, 4
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0x8c]
mov dword [ebx + 0x30], eax
mov ebx, dword [ebp - 0x70]
cmp ebx, 0xaa
je 0x51746c
inc dword [esi + 0x2c]
mov esi, dword [esi + 0x2c]
push esi
push eax
push 0x80
push edi
call fcn.00507ed0
push esi
push dword [ebp - 0x94]
push dword [ebp - 0xcc]
push ebx
push edi
call fcn.00507f30
mov eax, dword [edi + 0x6c]
add esp, 0x24
test eax, eax
jle 0x51746c
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x51746c
test edx, 0x200
je 0x516b03
mov eax, dword [ebp - 0x7c]
mov esi, dword [ebx + 8]
mov dword [ebp - 0xa8], esi
mov esi, dword [ebp - 0x9c]
movzx ecx, word [eax + 0x18]
movzx eax, word [eax + 0x1a]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x7c]
test byte [esi + 0x2c], 1
mov esi, dword [ebp - 0xb4]
mov dword [ebp - 0xac], ecx
movzx eax, word [eax + 0x1c]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov eax, dword [eax + 0x20]
mov dword [ebp - 0xcc], 0
mov byte [ebp - 0x7d], 0
mov byte [ebp - 0x95], 0
mov dword [ebp - 0x74], eax
je 0x5161f0
mov ebx, dword [ebp - 0x9c]
cmp byte [ebx + 0x2f], 0
mov ebx, dword [ebp - 0x90]
jle 0x5161f0
cmp word [eax + 0x32], cx
jbe 0x5161f0
mov byte [ebp - 0x7d], 1
mov dword [ebp - 0x84], 1
movzx ecx, cx
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x68], ecx
test dl, 0x20
je 0x51623c
mov eax, dword [ebp - 0x7c]
mov edi, ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edi*4]
inc edi
mov dword [ebp - 0x68], edi
mov edi, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], eax
movzx eax, word [edi + 0x1a]
mov edi, dword [ebp - 0x84]
cmp edi, eax
cmovbe edi, eax
mov eax, edi
mov dword [ebp - 0x84], edi
mov edi, dword [ebp - 0xc8]
mov dword [ebp - 0x84], eax
test dl, 0x10
je 0x516319
mov eax, dword [ebp - 0x7c]
mov ebx, 0x100
mov edx, dword [ebp - 0x68]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x88], eax
movzx edx, word [edx + 0x1c]
cmp dword [ebp - 0x84], edx
cmova edx, dword [ebp - 0x84]
test word [eax + 0xa], bx
mov ebx, dword [ebp - 0x90]
mov dword [ebp - 0xc4], edx
je 0x5162c9
mov eax, dword [esi + 0x2c]
inc eax
push eax
push 1
push 0x46
mov dword [esi + 0x2c], eax
push edi
mov dword [ebx + 0x24], eax
call fcn.00507ed0
mov eax, dword [edi + 0x6c]
xor ecx, ecx
shl dword [ebx + 0x24], 1
add esp, 0x10
mov edx, dword [ebp - 0xa0]
mov dword [ebx + 0x28], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x1c]
cmp byte [edx + eax], 1
sete cl
xor ecx, dword [ebp - 0xa4]
or dword [ebx + 0x24], ecx
mov ecx, edx
mov edx, dword [ebp - 0xc4]
cmp dword [ebp - 0xb8], 0
mov dword [ebp - 0x84], edx
jne 0x516319
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
movsx ecx, word [eax + ecx*2]
mov dword [ebp - 0xc4], ecx
test ecx, ecx
js 0x516304
mov eax, dword [ebp - 0x74]
add ecx, ecx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 4]
cmp byte [eax + ecx*8 + 0xc], 0
je 0x51630f
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x84], edx
cmp ecx, 0xfffffffe
jne 0x516319
mov byte [ebp - 0x7d], 1
mov dword [ebp - 0x84], edx
mov ecx, dword [ebp - 0x74]
mov edx, dword [ebp - 0xac]
movzx eax, word [ecx + 0x32]
mov dword [ebp - 0xc4], eax
cmp dx, ax
jae 0x516356
mov eax, dword [ecx + 0x1c]
xor ecx, ecx
mov edx, dword [ebp - 0xa0]
cmp byte [edx + eax], cl
sete cl
cmp dword [ebp - 0xa4], ecx
je 0x516364
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xac]
cmp dword [ebp - 0xa4], 0
je 0x5163a1
cmp ax, dx
jne 0x5163a1
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0xb8], eax
mov al, byte [ebp - 0x7d]
mov byte [ebp - 0x95], al
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x88], ecx
movzx ecx, dx
movzx eax, al
mov byte [ebp - 0x7d], 0
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0xbc]
push eax
push dword [ebp - 0x84]
push dword [ebp - 0xa4]
push ebx
push esi
call fcn.004ab300
mov ecx, dword [ebp - 0xbc]
add esp, 0x14
mov edx, eax
mov dword [ebp - 0x6c], edx
test ecx, ecx
je 0x5163f7
cmp word [ebp - 0x94], 0
je 0x5163f7
mov eax, dword [ebp - 0xa0]
add eax, ecx
push eax
push dword [ebp - 0xd4]
call fcn.004e4ef0
mov edx, dword [ebp - 0x6c]
add esp, 8
mov dword [ebp - 0xcc], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x51641a
test byte [eax + 0xc], 0x28
mov dword [ebp - 0xd0], 0
je 0x516424
mov dword [ebp - 0xd0], 1
mov ecx, dword [ebp - 0x88]
test ecx, ecx
je 0x51643b
test byte [ecx + 0xc], 0x28
mov dword [ebp - 0x70], 0
je 0x516442
mov dword [ebp - 0x70], 1
test eax, eax
jne 0x516608
cmp word [ebp - 0xac], ax
ja 0x516608
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x68], eax
mov al, byte [ebp - 0x7d]
mov dword [ebp - 0x84], ecx
test al, al
je 0x51649f
lea eax, [ecx + edx]
push eax
push 0
push 0x49
push edi
call fcn.00507ed0
mov eax, dword [ebp - 0xa0]
add esp, 0x10
inc eax
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x84], eax
mov al, byte [ebp - 0x7d]
mov dword [ebp - 0x68], 1
push dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x84]
movzx eax, al
sub ecx, eax
push ecx
push dword [ebp - 0x6c]
push esi
call fcn.004ab6f0
mov ecx, dword [ebp - 0x7c]
add esp, 0x10
movzx eax, word [ecx + 0x2a]
test ax, ax
je 0x5164d1
cmp dword [ebp - 0x84], eax
je 0x516524
test dword [ecx + 0x24], 0x40000
je 0x5164eb
push dword [ebp - 0xa8]
push 0x77
push edi
call fcn.00507e70
add esp, 0xc
push dword [ebp - 0x84]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0xc0]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0xa4]
push dword [ebp - 0xa8]
movzx eax, byte [ecx + eax*2 + 0x59882c]
push eax
push edi
call fcn.00508000
add esp, 0x18
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x5166fa
mov eax, dword [eax]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x94]
movzx ecx, ax
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x6c]
push ecx
push eax
push edx
push esi
mov dword [ebp - 0x68], edx
mov dword [ebp - 0xac], eax
call fcn.004ac1f0
push dword [ebp - 0x88]
mov ebx, dword [ebp - 0x90]
push ebx
push edi
call fcn.00524fd0
mov edx, dword [ebp - 0x68]
push edx
call fcn.004e7220
add esp, 0x20
test eax, eax
je 0x516598
push dword [ebp - 0xc0]
push dword [ebp - 0xac]
push 0x32
push edi
call fcn.00507ed0
mov edx, dword [ebp - 0x68]
add esp, 0x10
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x5165d2
mov ecx, dword [ebp - 0x94]
push eax
movzx eax, cx
push eax
push edx
call fcn.0051dbf0
push dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x94]
movzx eax, cx
push eax
push dword [ebp - 0xac]
push esi
call fcn.004ab6f0
add esp, 0x1c
mov ecx, dword [ebp - 0x94]
push dword [ebp - 0x68]
movzx eax, cx
add dword [ebp - 0xa0], eax
call fcn.004ea5b0
add esp, 4
test eax, eax
jne 0x5166f1
push dword [ebp - 0x88]
push ebx
call fcn.004afd30
add esp, 8
jmp 0x516727
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x84], ecx
test eax, eax
je 0x516460
mov edx, dword [ebp - 0x78]
mov eax, dword [eax]
add ecx, dword [ebp - 0x6c]
movzx edx, dx
push edx
mov eax, dword [eax + 0x10]
push ecx
push eax
push esi
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xc4], ecx
call fcn.004ac1f0
push dword [ebp - 0xb8]
mov edi, dword [ebp - 0xc8]
push ebx
push edi
call fcn.00524fd0
mov edx, dword [ebp - 0xac]
push edx
call fcn.004e7220
add esp, 0x20
test eax, eax
je 0x516689
push dword [ebp - 0xc0]
push dword [ebp - 0xc4]
push 0x32
push edi
call fcn.00507ed0
mov edx, dword [ebp - 0xac]
add esp, 0x10
mov ecx, dword [ebp - 0xbc]
test ecx, ecx
je 0x5166ac
mov eax, dword [ebp - 0xa0]
add eax, ecx
mov ecx, dword [ebp - 0x78]
push eax
movzx eax, cx
push eax
push edx
call fcn.0051dbf0
add esp, 0xc
mov ecx, dword [ebp - 0x78]
push dword [ebp - 0xac]
movzx eax, cx
add dword [ebp - 0x84], eax
call fcn.004ea5b0
add esp, 4
test eax, eax
jne 0x5166e0
push dword [ebp - 0xb8]
push ebx
call fcn.004afd30
add esp, 8
xor al, al
jmp 0x51649f
mov dword [ebp - 0xd0], 1
xor al, al
jmp 0x51649f
mov dword [ebp - 0x70], 1
jmp 0x516727
cmp byte [ebp - 0x95], 0
je 0x516727
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x6c]
push eax
push 0
push 0x49
push edi
call fcn.00507ed0
add esp, 0x10
mov dword [ebp - 0x70], 0
inc dword [ebp - 0xa0]
push dword [ebp - 0xbc]
push dword [ebp - 0xd4]
call fcn.004e4c30
push dword [ebp - 0xcc]
push dword [ebp - 0xd4]
call fcn.004e4c30
mov eax, dword [edi + 0x6c]
add esp, 0x10
mov dword [ebx + 0x34], eax
mov eax, dword [ebp - 0xa0]
test eax, eax
je 0x516787
mov ecx, dword [ebp - 0xa4]
push eax
push dword [ebp - 0x6c]
mov eax, dword [ebp - 0x70]
push dword [ebp - 0xc0]
push dword [ebp - 0xa8]
movzx eax, byte [eax + ecx*2 + 0x598834]
push eax
push edi
call fcn.00508000
add esp, 0x18
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0x24]
test eax, 0x40000
je 0x5167ad
push 1
push dword [ebp - 0xa8]
push 0x77
push edi
call fcn.00507ed0
mov eax, dword [ebp - 0x7c]
add esp, 0x10
mov eax, dword [eax + 0x24]
mov ecx, dword [ebp - 0x9c]
test al, 0x40
je 0x516908
test byte [ecx + 0x2c], 0x20
jne 0x516908
mov edx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x70], 1
mov esi, dword [ebp - 0x8c]
cmp dword [ebx], 0
jne 0x5168cf
mov eax, dword [ebp - 0x9c]
test byte [eax + 0x2c], 0x20
jne 0x5168cf
mov eax, dword [edx + 0x28]
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x5168cf
xorps xmm0, xmm0
mov dword [ebp - 0xf4], esi
lea edi, [ebp - 0xf8]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0xfc], edi
xor esi, esi
mov edi, dword [ebp - 0xc8]
movlpd qword [ebp - 0x10c], xmm0
movlpd qword [ebp - 0x104], xmm0
mov dword [ebp - 0x110], 0x524b50
mov dword [ebp - 0xf0], ecx
cmp dword [eax], esi
jle 0x5168cf
mov ebx, dword [ebp - 0x9c]
lea ecx, [eax + 4]
mov dword [ebp - 0x68], ecx
mov edi, eax
mov eax, dword [edx + 4]
cmp word [eax + esi*2], 0xfffe
jne 0x5168b8
mov dword [ebp - 0xec], esi
mov eax, dword [ecx]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x516891
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.005245f0
add esp, 8
push dword [ebx + 8]
lea eax, [ebp - 0x114]
push eax
call fcn.00514a30
push dword [ebx + 0xc]
lea eax, [ebp - 0x114]
push eax
call fcn.00514a30
mov ecx, dword [ebp - 0x68]
add esp, 0x10
mov edx, dword [ebp - 0x74]
inc esi
add ecx, 0x18
mov dword [ebp - 0x68], ecx
cmp esi, dword [edi]
jl 0x516862
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov eax, dword [edx + 0x24]
test eax, eax
je 0x5168ef
mov ecx, dword [ebp - 0xd8]
push ecx
push dword [ebp - 0x8c]
push eax
call fcn.00524760
mov edx, dword [ebp - 0x74]
add esp, 0xc
mov ecx, dword [ebp - 0x7c]
test dword [ecx + 0x24], 0x1000
je 0x516ac6
mov byte [ebx + 0x2d], 0xaa
jmp 0x516ad5
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0x70], 0
mov eax, dword [edx + 0xc]
test byte [eax + 0x24], 0x20
jne 0x516993
movzx eax, word [ecx + 0x2c]
test eax, 0x400
jne 0x516958
test eax, 0x1000
je 0x516933
cmp byte [ecx + 0x31], 1
je 0x516958
push dword [ebp - 0xa8]
mov esi, dword [ebp - 0x8c]
push esi
push edx
push ecx
call fcn.004ab9d0
mov edx, dword [ebp - 0x74]
add esp, 0x10
mov ecx, dword [ebp - 0xa8]
jmp 0x5167db
inc dword [esi + 0x2c]
mov esi, dword [esi + 0x2c]
push esi
push dword [ebp - 0xa8]
push 0x87
push edi
call fcn.00507ed0
push esi
mov esi, dword [ebp - 0x8c]
push 0
push esi
push 0x1f
push edi
call fcn.00507f30
mov edx, dword [ebp - 0x74]
add esp, 0x24
mov ecx, dword [ebp - 0xa8]
jmp 0x5167db
mov ecx, dword [ebp - 0xa8]
cmp dword [ebp - 0x8c], ecx
je 0x5167d5
push eax
call fcn.004feab0
mov dword [ebp - 0xac], eax
movzx eax, word [eax + 0x32]
push eax
push esi
call fcn.004f3f20
mov esi, dword [ebp - 0xac]
mov edx, eax
mov dword [ebp - 0xc4], 0
add esp, 0xc
mov dword [ebp - 0xc0], edx
movzx eax, word [esi + 0x32]
mov ecx, eax
cmp word [ebp - 0xc4], ax
jae 0x516a9b
mov dword [ebp - 0x68], edx
xor ebx, ebx
nop
mov eax, dword [ebp - 0x74]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x516a1d
mov eax, dword [esi + 4]
movzx esi, word [eax + ebx*2]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 4]
nop word [eax + eax]
cmp si, word [eax]
je 0x516a43
inc ecx
add eax, 2
cmp ecx, edx
jl 0x516a10
or eax, 0xffffffff
mov ecx, dword [edi + 0x6c]
movsx edx, ax
cmp dword [edi + 0x70], ecx
jg 0x516a48
mov esi, dword [ebp - 0x68]
push esi
push edx
push dword [ebp - 0xa8]
push 0x5a
push edi
call fcn.004c6b50
add esp, 0x14
jmp 0x516a78
movzx eax, cx
jmp 0x516a20
mov esi, dword [ebp - 0xa8]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 0x68]
mov dword [eax + ecx*4], 0x5a
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
inc esi
inc ebx
mov dword [ebp - 0x68], esi
mov esi, dword [ebp - 0xac]
movzx ecx, word [esi + 0x32]
cmp ebx, ecx
jl 0x5169f0
mov ebx, dword [ebp - 0x90]
mov edx, dword [ebp - 0xc0]
mov esi, dword [ebp - 0x8c]
movzx eax, cx
push eax
push edx
push dword [ebp - 0xe0]
push esi
push 0x1c
push edi
call fcn.00508000
mov edx, dword [ebp - 0x74]
add esp, 0x18
mov ecx, dword [ebp - 0xa8]
jmp 0x5167db
cmp dword [ebp - 0xa4], 0
sete al
add al, 4
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0xa8]
mov dword [ebx + 0x30], eax
mov al, byte [ecx + 0x26]
and al, 1
mov byte [ebx + 0x2e], al
test byte [ecx + 0x24], 0xf
jne 0x516af0
mov byte [ebx + 0x2f], 1
xor ecx, ecx
cmp dword [ebp - 0x70], ecx
cmove ecx, edx
mov dword [ebp - 0xc4], ecx
jmp 0x51746e
test edx, 0x2000
je 0x517422
mov eax, dword [esi + 0x28]
dec dword [esi + 0x38]
inc dword [esi + 0x2c]
mov dword [ebp - 0xa8], eax
inc eax
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x38]
mov edx, dword [esi + 0x2c]
mov dword [ebp - 0xac], eax
xor eax, eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x78], 0
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x84], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, dword [eax + 0x1c]
mov dword [ebx + 0x30], edx
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0xcc], eax
mov byte [ebx + 0x2d], 0x42
mov al, byte [edx + 0x2e]
cmp al, 1
jbe 0x516cd3
mov ecx, dword [ebp - 0xd4]
movzx eax, al
sub eax, dword [ebp + 0x14]
dec eax
mov dword [ebp - 0x68], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x516bd0
push ecx
call fcn.004e4ce0
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0xd0], ecx
jmp 0x516be0
call fcn.004f8900
add esp, 8
mov dword [ebp - 0xd0], eax
mov ecx, eax
test ecx, ecx
jne 0x516bfb
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441ed9
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0x68]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [ebp - 0xdc]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
mov eax, dword [ebp - 0x9c]
movq qword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
mov dword [ebp - 0x70], eax
cmp edx, 1
jl 0x516ca2
mov edi, dword [ebp - 0x70]
lea eax, [ebx + 0x7c]
add ecx, 0x50
mov ebx, eax
movzx eax, byte [ebx]
lea ebx, [ebx + 0x50]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [edi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [edi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x516c57
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x9c]
test byte [eax + 0x2c], 0x10
jne 0x516d22
test byte [ecx + 0x24], 0x20
jne 0x516cde
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
push eax
push 0
push 0x49
push edi
mov dword [ebp - 0x78], eax
call fcn.00507ed0
add esp, 0x10
jmp 0x516d16
mov eax, dword [edx + 4]
mov dword [ebp - 0xd0], eax
jmp 0x516ca8
push ecx
call fcn.004feab0
mov esi, eax
mov eax, dword [ebp - 0xb4]
mov edx, dword [eax + 0x28]
mov dword [ebp - 0x78], edx
lea ecx, [edx + 1]
mov dword [eax + 0x28], ecx
movzx ecx, word [esi + 0x32]
push ecx
push edx
push 0x71
push edi
call fcn.00507ed0
push esi
mov esi, dword [ebp - 0xb4]
push esi
call fcn.00512820
add esp, 0x1c
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0xb8], eax
mov ecx, dword [edi + 0x6c]
mov dword [ebp - 0xa0], ecx
cmp dword [edi + 0x70], ecx
jg 0x516d4d
push 0
push dword [ebp - 0xc0]
push 0
push 0x46
push edi
call fcn.004c6b50
add esp, 0x14
mov dword [ebp - 0xa0], eax
jmp 0x516d82
mov edx, dword [ebp - 0xc0]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ecx + 0xc]
cmp eax, 1
jle 0x516eb0
xor edx, edx
mov dword [ebp - 0x68], edx
test eax, eax
jle 0x516eb0
mov edi, dword [ebp - 0xd4]
xor ecx, ecx
mov esi, dword [ebp - 0xd8]
xor ebx, ebx
mov dword [ebp - 0x70], ecx
mov eax, dword [esi + 0x14]
add eax, ecx
cmp eax, dword [ebp - 0x7c]
je 0x516e00
test byte [eax + 0xa], 6
jne 0x516e00
mov esi, 0x1fff
test word [eax + 0xc], si
mov esi, dword [ebp - 0xd8]
je 0x516e00
mov eax, dword [eax]
test eax, eax
je 0x516deb
push 0
push 0
push eax
push edi
call fcn.004b2010
add esp, 0x10
jmp 0x516ded
xor eax, eax
push eax
push ebx
push edi
call fcn.004e6ee0
mov ecx, dword [ebp - 0x70]
add esp, 0xc
mov edx, dword [ebp - 0x68]
mov ebx, eax
inc edx
add ecx, 0x30
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x70], ecx
cmp edx, dword [esi + 0xc]
jl 0x516db4
mov edi, dword [ebp - 0xc8]
test ebx, ebx
mov esi, dword [ebp - 0xb4]
mov dword [ebp - 0x88], ebx
mov ebx, dword [ebp - 0x90]
je 0x516eb0
push 0
push 0x34
push dword [esi]
call fcn.004e4ce0
add esp, 0xc
mov dword [ebp - 0x70], eax
test eax, eax
je 0x516e96
push 0x34
push 0
push eax
call fcn.00546c00
mov ecx, dword [ebp - 0x70]
or eax, 0xffffffff
push ecx
mov word [ecx + 0x22], ax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0x10], eax
mov byte [ecx], 0x2c
mov eax, dword [eax + 4]
and eax, 0x200104
or dword [ecx + 4], eax
call fcn.004b2c50
mov eax, dword [esi]
add esp, 0x10
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x18], ecx
jle 0x516eaa
push ecx
push str.Expression_tree_is_too_large__maximum_depth__d_
push esi
call fcn.004e6910
add esp, 0xc
jmp 0x516ea7
mov eax, dword [ebp - 0x88]
push eax
push dword [esi]
call fcn.004e9950
add esp, 8
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x9c]
mov ecx, 0x400
push str.MULTI_INDEX_OR
push 1
push esi
mov ax, word [eax + 0x2c]
and ax, cx
or ax, 0x20
movzx eax, ax
mov dword [ebp - 0xe4], eax
call fcn.0050f8a0
mov ecx, dword [ebp - 0xcc]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x74], eax
cmp dword [ecx + 0xc], eax
jle 0x51729b
mov ebx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x8c]
nop
lea eax, [eax + eax*2]
shl eax, 4
add eax, dword [ecx + 0x14]
cmp dword [eax + 0x14], edx
je 0x516f1d
mov esi, 0x400
test word [eax + 0xc], si
je 0x51727f
mov esi, dword [eax]
xor eax, eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x516f36
mov dword [eax + 0xc], esi
mov esi, eax
mov eax, dword [ebp - 0x74]
inc eax
push eax
push str.INDEX__d
push 1
push ebx
call fcn.0050f8a0
push dword [ebp - 0xa8]
push dword [ebp - 0xe4]
push 0
push 0
push esi
mov esi, dword [ebp - 0xd0]
push esi
push ebx
call fcn.00514c20
add esp, 0x2c
mov dword [ebp - 0xec], eax
test eax, eax
je 0x517273
push 0
lea ecx, [eax + 0x2f0]
push ecx
push esi
push ebx
call fcn.005181a0
mov eax, dword [ebp - 0x9c]
add esp, 0x10
test byte [eax + 0x2c], 0x10
jne 0x51713b
mov eax, dword [ebp - 0xcc]
mov esi, dword [ebp - 0x74]
mov eax, dword [eax + 0xc]
dec eax
cmp esi, eax
mov eax, 0xffffffff
cmove esi, eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x68], esi
test byte [eax + 0x24], 0x20
jne 0x516ff6
mov edx, dword [ebp - 0xb8]
push edx
push dword [ebp - 0x8c]
push 0x80
push edi
call fcn.00507ed0
push esi
push dword [ebp - 0xb8]
push 0
push dword [ebp - 0x78]
push 0x2a
push edi
call fcn.00508000
add esp, 0x28
mov esi, eax
jmp 0x517141
push eax
call fcn.004feab0
mov dword [ebp - 0xe8], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
mov dword [ebp - 0x70], eax
call fcn.004f3f20
xor esi, esi
mov dword [ebp - 0x6c], eax
add esp, 0xc
cmp dword [ebp - 0x70], esi
jbe 0x517055
mov ebx, dword [ebp - 0x70]
lea ecx, [esi + eax]
mov eax, dword [ebp - 0xe8]
push ecx
mov eax, dword [eax + 4]
movsx eax, word [eax + esi*2]
push eax
push dword [ebp - 0x8c]
push dword [ebp - 0x84]
push edi
call fcn.004e76c0
mov eax, dword [ebp - 0x6c]
inc esi
add esp, 0x14
cmp esi, ebx
jl 0x517020
mov ebx, dword [ebp - 0xb4]
cmp dword [ebp - 0x68], 0
mov esi, dword [ebp - 0x70]
je 0x517080
push esi
push eax
push 0
push dword [ebp - 0x78]
push 0x1d
push edi
call fcn.00508000
add esp, 0x18
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x68], 0
jl 0x517105
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp - 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x5170a0
push dword [ebp - 0xb8]
push esi
push edx
push 0x5c
push edi
call fcn.004c6b50
add esp, 0x14
jmp 0x5170cd
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0x5c
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push esi
push dword [ebp - 0x6c]
push dword [ebp - 0xb8]
push dword [ebp - 0x78]
push 0x84
push edi
call fcn.00508000
add esp, 0x18
cmp dword [ebp - 0x68], 0
je 0x517105
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x517105
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
cmp esi, 1
jne 0x51712d
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x51713b
mov al, byte [ebx + 0x13]
mov esi, dword [ebp - 0x94]
cmp al, 8
jae 0x517141
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x517141
cmp esi, dword [ebx + 0x1c]
jle 0x51713b
mov eax, dword [ebp - 0x6c]
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], eax
mov esi, dword [ebp - 0x94]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x517164
push 0
push dword [ebp - 0xac]
push dword [ebp - 0xc0]
push 0xc
push edi
call fcn.004c6b50
add esp, 0x14
jmp 0x51719b
mov edx, dword [ebp - 0xc0]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xac]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test esi, esi
je 0x5171c5
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x5171b1
mov eax, 0x5d5314
jmp 0x5171c2
test esi, esi
lea eax, [edx - 1]
cmovns eax, esi
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0xec]
mov ecx, 1
mov eax, dword [ebp - 0xa4]
cmp byte [edx + 0x32], 0
cmovne eax, ecx
mov ecx, dword [edx + 0x330]
mov dword [ebp - 0xa4], eax
test dword [ecx + 0x24], 0x200
je 0x517226
cmp dword [ebp - 0x74], 0
je 0x517203
mov eax, dword [ebp - 0xbc]
cmp dword [ecx + 0x20], eax
jne 0x517226
mov eax, dword [ebp - 0x84]
test byte [eax + 0x24], 0x20
je 0x51721b
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
je 0x517226
mov esi, dword [ecx + 0x20]
mov dword [ebp - 0xbc], esi
jmp 0x517230
mov dword [ebp - 0xbc], 0
push edx
call fcn.00517910
mov ecx, dword [ebx + 0xd4]
add esp, 4
test ecx, ecx
jne 0x517247
xor eax, eax
jmp 0x51726d
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x517252
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x517261
mov eax, 0x5d5314
jmp 0x51726a
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xd4], eax
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp eax, dword [ecx + 0xc]
jl 0x516f00
mov ebx, dword [ebp - 0x90]
mov esi, dword [ebp - 0xb4]
mov ecx, dword [esi + 0xd4]
test ecx, ecx
jne 0x5172a9
xor eax, eax
jmp 0x5172cf
mov edx, dword [esi + 8]
test ecx, ecx
jns 0x5172b4
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x5172c3
mov eax, 0x5d5314
jmp 0x5172cc
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [esi + 0xd4], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebx + 0x38], eax
test eax, eax
je 0x5172eb
mov eax, dword [ebp - 0xa8]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x88]
mov esi, dword [ebp - 0xd4]
test eax, eax
je 0x51730c
push eax
push esi
mov dword [eax + 0xc], 0
call fcn.004e9950
add esp, 8
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x51731e
mov eax, 0x5d5314
jmp 0x517335
mov ecx, dword [ebp - 0xa0]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebx + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x517355
push 0
push edx
push 0
push 0xb
push edi
call fcn.004c6b50
add esp, 0x14
jmp 0x51738a
mov ebx, dword [ebp - 0x90]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [ebp - 0xac]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x5173aa
push edx
push edi
push ecx
call fcn.004d4b00
add esp, 0xc
jmp 0x5173b3
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x9c]
cmp byte [eax + 0x2e], 1
jbe 0x51740b
mov ecx, dword [ebp - 0xd0]
test ecx, ecx
je 0x51740b
test esi, esi
je 0x517402
cmp dword [esi + 0x1e8], 0
je 0x5173e2
push ecx
push esi
call fcn.004c9cf0
add esp, 8
jmp 0x51740b
cmp ecx, dword [esi + 0x138]
jb 0x517402
cmp ecx, dword [esi + 0x13c]
jae 0x517402
mov eax, dword [esi + 0x134]
mov dword [ecx], eax
mov dword [esi + 0x134], ecx
jmp 0x51740b
push ecx
call fcn.00493e30
add esp, 4
cmp dword [ebp - 0xa4], 0
jne 0x51746c
push dword [ebp - 0x7c]
push ebx
call fcn.004afd30
add esp, 8
jmp 0x51746c
mov eax, dword [ebp - 0xdc]
test byte [eax + 0x28], 0x20
je 0x517434
mov byte [ebx + 0x2d], 0xaa
jmp 0x51746c
mov ecx, dword [ebp - 0xa4]
push dword [ebp - 0xbc]
mov al, byte [ecx + 0x598838]
mov byte [ebx + 0x2d], al
mov eax, dword [ebp - 0x8c]
push eax
mov dword [ebx + 0x30], eax
movzx eax, byte [ecx + 0x59883c]
push eax
push edi
call fcn.00507ed0
add esp, 0x10
mov byte [ebx + 0x2f], 1
inc eax
mov dword [ebx + 0x34], eax
xor ecx, ecx
mov ebx, dword [ebp - 0xd8]
neg ecx
sbb ecx, ecx
add ecx, 2
mov dword [ebp - 0x68], ecx
nop
mov edx, dword [ebx + 0xc]
xor eax, eax
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x88], edx
test edx, edx
jle 0x5176af
nop dword [eax]
movzx edx, word [esi + 0xa]
xor ebx, ebx
test dl, 6
jne 0x517685
mov eax, dword [ebp - 0x90]
mov edi, dword [ebp - 0x90]
mov ecx, dword [esi + 0x28]
and ecx, dword [eax + 0x48]
mov eax, dword [esi + 0x2c]
and eax, dword [edi + 0x4c]
or ecx, eax
mov edi, dword [ebp - 0xc8]
je 0x5174e0
mov eax, dword [ebp - 0x9c]
mov byte [eax + 0x32], 1
jmp 0x517682
mov eax, dword [ebp - 0xdc]
mov ecx, dword [esi]
mov dword [ebp - 0xe4], ecx
test byte [eax + 0x24], 8
je 0x5174fe
test byte [ecx + 4], 1
je 0x517682
mov eax, dword [ebp - 0x68]
cmp eax, 1
jne 0x517579
mov eax, dword [ebp - 0x90]
xorps xmm0, xmm0
mov dword [ebp - 0x114], ebx
movlpd qword [ebp - 0x10c], xmm0
movlpd qword [ebp - 0x104], xmm0
mov eax, dword [eax + 4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x110], 0x4b2410
mov dword [ebp - 0xfc], eax
test ecx, ecx
je 0x517564
push ecx
lea eax, [ebp - 0x114]
push eax
call fcn.005245f0
add esp, 8
cmp byte [ebp - 0x100], bl
je 0x51757e
mov eax, 2
mov dword [ebp - 0x6c], eax
jmp 0x517685
cmp eax, 3
jge 0x5175a2
movzx edx, word [esi + 0xa]
test edx, 0x1000
je 0x5175a2
mov eax, dword [ebp - 0x6c]
test eax, eax
jne 0x517685
mov eax, 3
mov dword [ebp - 0x6c], eax
jmp 0x517685
test edx, 0x200
je 0x517637
mov eax, dword [ebp - 0x90]
mov eax, dword [eax + 0x24]
test eax, eax
je 0x517637
mov ebx, dword [edi + 0x6c]
mov edx, eax
and eax, 1
shr edx, 1
mov dword [ebp - 0xe8], edx
lea eax, [eax*2 + 0x12]
mov dword [ebp - 0xec], eax
cmp dword [edi + 0x70], ebx
jg 0x5175f4
push 0
push 0
push edx
push eax
push edi
call fcn.004c6b50
add esp, 0x14
mov ebx, eax
jmp 0x517637
mov edx, dword [ebp - 0xec]
lea eax, [ebx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov edx, dword [ebp - 0xe8]
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0x10
push dword [ebp - 0xe0]
push dword [ebp - 0xe4]
push dword [ebp - 0xb4]
call fcn.004e9c30
add esp, 0x10
test ebx, ebx
je 0x51767d
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x517669
mov eax, 0x5d5314
jmp 0x51767a
test ebx, ebx
lea eax, [edx - 1]
cmovns eax, ebx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [esi + 0xa], 4
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x88]
add esi, 0x30
dec edx
mov dword [ebp - 0x88], edx
test edx, edx
jg 0x5174a0
mov ebx, dword [ebp - 0xd8]
mov edx, dword [ebx + 0xc]
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x68], eax
test eax, eax
jg 0x517480
test edx, edx
jle 0x51783f
mov edi, dword [ebp - 0x90]
lea ebx, [esi + 0xc]
mov dword [ebp - 0x78], ebx
mov esi, 0xb
test byte [ebx - 2], 6
jne 0x517824
movzx eax, word [ebx]
test al, 0x82
setne cl
bt ax, si
setb al
test al, cl
je 0x517824
mov ecx, dword [ebp - 0x8c]
cmp dword [ebx + 8], ecx
jne 0x517824
cmp dword [edi], 0
jne 0x517824
mov eax, dword [ebx - 0xc]
xor esi, esi
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0xec], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x58], esi
mov word [ebp - 0x54], 0x100
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x50], 0x83
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], ecx
mov byte [ebp - 0x52], 1
cmp eax, 0xfffffffe
je 0x517794
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x64]
push eax
call fcn.00528b10
mov edx, eax
add esp, 4
test edx, edx
je 0x517794
nop
mov ebx, dword [edx + 0x20]
mov ecx, ebx
mov eax, dword [edx + 0x24]
and ecx, dword [ebp + 0x1c]
and eax, dword [ebp + 0x20]
or ecx, eax
jne 0x517782
or ebx, dword [edx + 0x24]
jne 0x51777d
test byte [edx + 0xc], 0x82
jne 0x517796
test esi, esi
cmove esi, edx
lea eax, [ebp - 0x64]
push eax
call fcn.00528b10
mov edx, eax
add esp, 4
test edx, edx
jne 0x517760
mov edx, esi
test edx, edx
je 0x517816
test byte [edx + 0xa], 4
jne 0x517816
test byte [edx + 0xc], 1
je 0x5177bf
mov eax, dword [edx]
test dword [eax + 4], 0x800
je 0x5177bf
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
cmp dword [eax], 1
jg 0x517816
mov eax, dword [edx]
push 0x10
push dword [ebp - 0xe0]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x12c], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0x11c], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ebp - 0x10c], xmm0
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xec]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0xb4]
call fcn.004e9c30
add esp, 0x10
mov ebx, dword [ebp - 0x78]
mov esi, 0xb
mov edx, dword [ebp - 0x88]
dec edx
add ebx, 0x30
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x78], ebx
test edx, edx
jg 0x5176d3
mov edi, dword [ebp - 0xc8]
mov ebx, dword [ebp - 0x90]
mov edx, dword [ebx]
test edx, edx
je 0x5178f2
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x1c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x51786f
push 0
push edx
push 1
push 0x46
push edi
call fcn.004c6b50
add esp, 0x14
jmp 0x51789e
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0xd8]
xor edi, edi
mov esi, dword [edx + 0x14]
cmp dword [edx + 0xc], edi
jle 0x5178f2
nop
test byte [esi + 0xa], 6
jne 0x5178e9
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [ebx + 0x48]
and eax, dword [ebx + 0x4c]
or ecx, eax
jne 0x5178e9
push 0x10
push dword [ebp - 0xe0]
push dword [esi]
push dword [ebp - 0xb4]
call fcn.004e9c30
mov edx, dword [ebp - 0xd8]
add esp, 0x10
or word [esi + 0xa], 4
inc edi
add esi, 0x30
cmp edi, dword [edx + 0xc]
jl 0x5178b0
mov ecx, dword [ebp - 4]
mov eax, dword [ebx + 0x48]
xor ecx, ebp
mov edx, dword [ebx + 0x4c]
pop edi
pop esi
pop ebx
call fcn.00441ed9
mov esp, ebp
pop ebp
ret