Function at 0x515480
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe0
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x18]
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x44], 0
mov edx, dword [edi + 0x1ec]
lea eax, [edi + 0x50]
mov dword [ebp - 0x60], eax
mov eax, dword [ebx]
mov dword [ebp - 0x5c], eax
mov eax, dword [esi + 0x48]
mov dword [ebp - 8], eax
movzx eax, byte [esi + 0x34]
lea ecx, [eax + eax*8]
mov eax, dword [edi + 4]
lea eax, [eax + ecx*8]
add eax, 8
mov dword [ebp - 0x64], eax
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x1c], eax
xor eax, eax
test edx, edx
jle 0x5154ee
lea ecx, [edi + 0x1f0]
mov ebx, dword [ebp - 0x1c]
cmp dword [ecx], ebx
mov ebx, dword [ebp + 8]
je 0x5155c6
inc eax
add ecx, 4
cmp eax, edx
jl 0x5154d8
xorps xmm0, xmm0
movlpd qword [ebp - 0x74], xmm0
mov edx, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x74]
not ecx
not edx
and ecx, dword [ebp + 0x1c]
and edx, dword [ebp + 0x20]
mov dword [esi + 0x50], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esi + 0x54], edx
mov eax, dword [edi + 0x48]
mov edx, dword [edi + 0x4c]
call fcn.00531de0
mov edi, dword [ebp + 0xc]
and eax, 1
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x38], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx + 0x38]
dec eax
mov dword [ebx + 0x38], eax
cmp byte [esi + 0x34], 0
mov dword [ebp - 0x68], eax
mov dword [esi + 0x18], eax
jbe 0x515566
mov eax, dword [ebp - 0x64]
test byte [eax + 0x24], 8
je 0x515566
mov eax, dword [ebx + 0x2c]
inc eax
push eax
push 0
push 0x45
mov dword [ebx + 0x2c], eax
push edi
mov dword [esi], eax
call fcn.00507610
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov ecx, eax
mov edx, dword [ebp + 0x10]
test eax, eax
jle 0x51558d
imul eax, eax, 0x58
add eax, 0x2f0
add eax, edx
nop dword [eax]
cmp dword [eax], 0
jne 0x51558d
dec ecx
sub eax, 0x58
test ecx, ecx
jg 0x515580
imul eax, ecx, 0x58
mov eax, dword [eax + edx + 0x2fc]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x64]
test byte [eax + 0x28], 0x10
je 0x51566c
mov ecx, dword [edi + 0x6c]
mov ebx, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x5155e0
push edx
push 0
push ebx
push 0xd
push edi
call fcn.004cf440
add esp, 0x14
jmp 0x51560b
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0x5154fc
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [edi + 0x6c]
cmp dword [edi + 0x70], edx
jg 0x515632
push 0
push dword [ebp - 0x3c]
push ebx
push 0xe
push edi
call fcn.004cf440
mov edx, eax
mov byte [esi + 0x35], 0xb
add esp, 0x14
mov dword [esi + 0x3c], edx
jmp 0x516f0b
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [eax + ecx*4], 0xe
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov dword [esi + 0x3c], edx
mov byte [esi + 0x35], 0xb
jmp 0x516f0b
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x24]
test edx, 0x400
je 0x515aa0
mov edx, eax
movzx eax, word [edx + 0x28]
mov dword [ebp + 0x14], eax
lea ecx, [eax + 2]
cmp ecx, 1
jne 0x5156b5
mov al, byte [ebx + 0x13]
test al, al
jne 0x5156a1
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 0xc], eax
jmp 0x5156df
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x94]
mov dword [ebp - 0xc], eax
jmp 0x5156df
mov edx, dword [ebx + 0x1c]
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0xc], eax
cmp ecx, edx
jg 0x5156ce
add eax, ecx
sub edx, ecx
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], edx
jmp 0x5156dc
mov eax, dword [ebx + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov dword [ebp - 0xc], edx
mov dword [ebx + 0x2c], eax
mov edx, dword [ebp - 8]
mov eax, dword [esi + 0xc]
xor esi, esi
mov dword [ebp - 4], eax
cmp dword [ebp + 0x14], esi
jbe 0x51573d
mov edi, dword [ebp + 0x18]
nop
mov eax, dword [edx + 0x30]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x515734
mov ecx, dword [ebp - 0xc]
add ecx, 2
add ecx, esi
test byte [eax + 0xc], 1
je 0x515720
push ecx
push dword [ebp - 0x2c]
push esi
push edi
push eax
push ebx
call fcn.004c3300
mov eax, dword [edi + 0x10]
add esp, 0x18
mov dword [ebp - 4], eax
jmp 0x515731
mov eax, dword [eax]
push 1
push ecx
push dword [eax + 0x10]
push ebx
call fcn.004c3890
add esp, 0x10
mov edx, dword [ebp - 8]
inc esi
cmp esi, dword [ebp + 0x14]
jl 0x5156f0
mov edi, dword [ebp + 0xc]
mov ecx, dword [edi + 0x6c]
mov edx, dword [edx + 0x18]
cmp dword [edi + 0x70], ecx
jg 0x51575b
push 0
push dword [ebp - 0xc]
push edx
push 0x45
push edi
call fcn.004cf440
add esp, 0x14
jmp 0x515789
mov esi, dword [ebp - 0xc]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov esi, dword [ebp - 0xc]
mov ecx, dword [edi + 0x6c]
inc esi
cmp dword [edi + 0x70], ecx
jg 0x5157a8
push 0
push esi
push dword [ebp + 0x14]
push 0x45
push edi
call fcn.004cf440
add esp, 0x14
jmp 0x5157d6
mov edx, dword [ebp + 0x14]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 8]
or eax, 0xffffffff
mov edx, 0xfffffff9
cmp byte [ecx + 0x1c], 0
cmovne eax, edx
mov edx, dword [edi + 0x6c]
mov dword [ebp - 0x18], eax
mov eax, dword [ecx + 0x20]
mov dword [ebp - 0x40], eax
cmp dword [edi + 0x70], edx
jg 0x515812
push dword [ebp - 0xc]
mov esi, dword [ebp - 4]
push esi
push dword [ebp - 0x1c]
push 9
push edi
call fcn.004cf440
add esp, 0x14
mov edx, eax
jmp 0x515842
mov esi, dword [ebp - 0x1c]
lea eax, [edx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [ebp - 4]
mov dword [eax + ecx*4 + 8], esi
mov esi, dword [ebp - 0xc]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 0xc], esi
mov dword [eax + ecx*4 + 0x10], 0
push dword [ebp - 0x18]
push dword [ebp - 0x40]
push edx
push edi
call fcn.00507af0
mov esi, dword [ebp + 0x18]
add esp, 0x10
mov edx, dword [ebp - 8]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x1c]
mov byte [edx + 0x1c], 0
mov dword [esi + 0x38], eax
mov eax, 0x3d
cmp byte [ecx + 0x2e], 0
mov ecx, 0xad
cmovne eax, ecx
mov ecx, dword [ebp + 0x14]
mov byte [esi + 0x35], al
sub ecx, 1
mov eax, dword [edi + 0x6c]
mov dword [esi + 0x3c], eax
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], ecx
js 0x516f0b
mov eax, dword [edx + 0x30]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 4], eax
mov dx, word [eax + 0xc]
mov eax, dword [ebp - 0x14]
and dx, 1
lea eax, [eax - 1]
cmove eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
cmp ecx, 0x10
jge 0x5158da
mov eax, dword [ebp - 8]
mov ax, word [eax + 0x1e]
shr ax, cl
test al, 1
je 0x5158d7
mov eax, dword [ebp - 4]
push eax
push esi
call fcn.004c7180
add esp, 8
jmp 0x515a89
mov ecx, dword [ebp - 0x24]
test dx, dx
je 0x515a8c
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov al, byte [ecx]
cmp al, 0xad
jne 0x5158f4
mov al, byte [ecx + 2]
cmp al, 0xae
jne 0x5158fd
mov eax, dword [ecx + 0x14]
jmp 0x515907
cmp al, 0x88
jne 0x515910
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jne 0x515a89
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x51], 0
jne 0x5159af
mov eax, dword [ebp - 0x14]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x44]
mov ecx, dword [eax + ecx*4 + 4]
test ecx, ecx
jns 0x515932
mov ecx, dword [edi + 0x6c]
dec ecx
mov eax, dword [edi]
cmp byte [eax + 0x51], 0
je 0x515941
mov eax, 0x5b8cd4
jmp 0x51594a
mov eax, dword [edi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov al, byte [eax]
mov dword [ebp - 0x18], ecx
mov ecx, dword [edi + 0x6c]
mov byte [ebp + 0x17], al
cmp dword [edi + 0x70], ecx
jg 0x515977
push edx
push esi
push dword [ebp - 0x18]
movzx eax, al
push eax
push edi
call fcn.004cf440
add esp, 0x14
jmp 0x5159af
mov bl, byte [ebp + 0x17]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], bl
xor ebx, ebx
mov word [eax + ecx*4 + 2], bx
mov ebx, dword [ebp - 0x18]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp + 8]
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0
push 0x34
push dword [ebx]
call fcn.004e8630
mov esi, eax
add esp, 0xc
test esi, esi
je 0x515a86
push 0x34
push 0
push esi
call sub.msvcrt.dll_memset
or eax, 0xffffffff
mov byte [esi], 0x35
push esi
mov word [esi + 0x22], ax
call fcn.004ca680
mov eax, dword [ebx]
add esp, 0x10
mov eax, dword [eax + 0x78]
cmp dword [esi + 0x18], eax
jle 0x5159fd
push eax
push str.Expression_tree_is_too_large__maximum_depth__d_
push ebx
call fcn.004ea2c0
add esp, 0xc
mov eax, dword [ebp - 4]
push 0
push 0x35
push dword [ebp - 0x5c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [esi + 0xc], eax
call fcn.004e8630
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x515a44
push 0x34
push 0
push ebx
call sub.msvcrt.dll_memset
add esp, 0xc
mov byte [ebx], 0xad
or eax, 0xffffffff
mov word [ebx + 0x22], ax
lea eax, [ebx + 0x34]
mov dword [ebx + 8], eax
mov byte [eax], 0
mov dword [ebx + 0x18], 1
mov dword [esi + 0x10], ebx
test ebx, ebx
je 0x515a70
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
add ecx, 2
add eax, ecx
mov dword [ebx + 0x1c], eax
mov eax, dword [ebp + 0x18]
mov ebx, dword [ebp + 8]
push 0
push dword [eax + 0x18]
push esi
push ebx
call fcn.004ed880
add esp, 0x10
jmp 0x515a73
mov ebx, dword [ebp + 8]
push esi
push dword [ebp - 0x5c]
mov dword [esi + 0xc], 0
call fcn.004ed570
add esp, 8
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 0x24], ecx
jns 0x515894
jmp 0x516f0b
test dl, 5
setne cl
bt edx, 8
setb al
test al, cl
je 0x515b6a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
inc dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x2c]
push ecx
push dword [ebp - 0x2c]
mov dword [ebp - 4], eax
push 0
push esi
push eax
push ebx
mov dword [ebp + 0x14], ecx
call fcn.004c3300
mov ecx, dword [ebp + 0x14]
mov edx, eax
add esp, 0x18
cmp edx, ecx
je 0x515afb
test ecx, ecx
je 0x515afb
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x515afb
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
mov ecx, dword [edi + 0x6c]
mov ebx, dword [esi + 0x10]
cmp dword [edi + 0x70], ecx
jg 0x515b18
push edx
push ebx
push dword [ebp - 0x1c]
push 0x1f
push edi
call fcn.004cf440
add esp, 0x14
jmp 0x515b45
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov edi, dword [ebp - 0x1c]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [ebp + 0xc]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 8], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 4]
mov byte [esi + 0x35], 0xad
mov ecx, dword [edx + 0x28]
mov eax, dword [edx + 0x2c]
and ecx, dword [esi + 0x50]
and eax, dword [esi + 0x54]
or ecx, eax
jne 0x516f0b
or word [edx + 0xa], 4
jmp 0x516f0b
mov eax, edx
and eax, 0x102
cmp eax, 0x102
jne 0x515d9e
xor ecx, ecx
mov dword [ebp - 0x10], 0xad
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 4], ecx
test dl, 0x20
je 0x515bac
mov eax, dword [ebp - 8]
mov dword [ebp + 0x14], 4
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
xor eax, eax
mov dword [ebp - 4], ecx
jmp 0x515baf
mov dword [ebp + 0x14], eax
test dl, 0x10
je 0x515bc0
mov eax, dword [ebp - 8]
mov edx, dword [ebp + 0x14]
mov eax, dword [eax + 0x30]
mov eax, dword [edx + eax]
mov edx, dword [ebp - 0x2c]
test edx, edx
cmove ecx, eax
cmove eax, dword [ebp - 4]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
test eax, eax
je 0x515c9f
mov edx, dword [eax]
mov dword [ebp + 0x14], 0x18161719
mov dword [ebp - 4], edx
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp - 0x50], eax
call fcn.004ee250
add esp, 4
test eax, eax
je 0x515c3f
mov al, byte [ebx + 0x13]
test al, al
jne 0x515c08
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
jmp 0x515c17
dec al
mov byte [ebx + 0x13], al
movzx eax, al
mov eax, dword [ebx + eax*4 + 0x94]
push 1
push eax
push dword [edx + 0x10]
mov dword [ebp - 0x14], eax
push ebx
call fcn.004c3890
mov eax, dword [ebp - 4]
add esp, 0x10
mov ecx, dword [ebp - 0x14]
movzx eax, byte [eax]
inc eax
and eax, 2
or eax, 1
mov dl, byte [ebp + eax + 0x14]
jmp 0x515c6e
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x50]
push ebx
call fcn.004ecfc0
push dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
push esi
call fcn.004c7180
mov eax, dword [ebp - 4]
add esp, 0x14
mov ecx, dword [ebp - 0x50]
movzx eax, byte [eax]
mov dl, byte [ebp + eax - 0x22]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
push ecx
push dword [ebp - 0x3c]
movzx eax, dl
push dword [ebp - 0x1c]
push eax
push edi
call fcn.00507670
mov ecx, dword [ebp - 0x14]
add esp, 0x14
test ecx, ecx
je 0x515cbb
mov al, byte [ebx + 0x13]
cmp al, 8
jae 0x515cbb
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x515cbb
push dword [ebp - 0x50]
mov eax, edx
push dword [ebp - 0x1c]
xor eax, 1
lea eax, [eax*4 + 0x21]
push eax
push edi
call fcn.00507610
add esp, 0x10
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x515d36
mov eax, dword [eax]
inc dword [ebx + 0x2c]
mov ecx, dword [ebx + 0x2c]
push 1
push ecx
push dword [eax + 0x10]
mov dword [ebp + 0x14], eax
push ebx
mov dword [ebp - 0x40], ecx
call fcn.004c3890
mov edx, dword [ebp + 0x14]
mov eax, dword [edx + 0x10]
push eax
mov dword [ebp + 0x14], eax
call fcn.004ee250
add esp, 0x14
test eax, eax
jne 0x515d0e
mov al, byte [edx]
cmp al, 0x38
je 0x515cfc
cmp al, 0x36
jne 0x515d0e
mov eax, dword [ebp - 0x2c]
xor eax, 1
lea edx, [eax*2 + 0x37]
mov dword [ebp - 0x10], edx
jmp 0x515d1b
mov eax, dword [ebp - 0x2c]
lea eax, [eax*2 + 0x36]
mov dword [ebp - 0x10], eax
push dword [ebp + 0x14]
call fcn.004ee250
add esp, 4
test eax, eax
jne 0x515d36
push dword [ebp - 0x18]
push esi
call fcn.004c7180
add esp, 8
cmp dword [ebp - 0x2c], 0
mov ecx, dword [edi + 0x6c]
sete al
mov dword [esi + 0x3c], ecx
add al, 4
cmp dword [ebp - 0x10], 0xad
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x1c]
mov dword [esi + 0x38], eax
je 0x516f0b
inc dword [ebx + 0x2c]
mov esi, dword [ebx + 0x2c]
push esi
push eax
push 0x7f
push edi
call fcn.00507610
push esi
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x10]
push edi
call fcn.00507670
mov eax, dword [edi + 0x6c]
add esp, 0x24
test eax, eax
jle 0x516f0b
lea ecx, [eax + eax*4]
mov edx, 0x53
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
jmp 0x516f0b
test edx, 0x200
je 0x516738
mov eax, dword [ebp - 8]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
movzx ecx, word [eax + 0x18]
movzx eax, word [eax + 0x1a]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x50], ecx
movzx ecx, cx
mov dword [ebp - 0x28], ecx
movzx eax, word [eax + 0x1c]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov byte [ebp + 0x17], al
mov byte [ebp - 0x55], al
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x34], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x30], eax
test dl, 0x20
je 0x515e24
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x4c], eax
lea eax, [ecx + 1]
mov dword [ebp - 4], eax
movzx eax, word [ebx + 0x1a]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x20], eax
test dl, 0x10
je 0x515ef8
mov eax, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + edi*4]
mov edi, dword [ebp - 8]
mov dword [ebp - 0x24], eax
movzx eax, word [edi + 0x1c]
mov edi, eax
mov eax, edx
cmp dword [ebp - 0x20], edi
mov edx, dword [ebp - 0x24]
cmova edi, dword [ebp - 0x20]
mov dword [ebp - 0x10], edi
mov edi, 0x100
test word [edx + 0xa], di
mov edi, dword [ebp + 0xc]
je 0x515ea9
mov eax, dword [ebx + 0x2c]
inc eax
push eax
push 1
push 0x45
mov dword [ebx + 0x2c], eax
push edi
mov dword [esi + 0x2c], eax
call fcn.00507610
mov eax, dword [edi + 0x6c]
xor ecx, ecx
shl dword [esi + 0x2c], 1
add esp, 0x10
mov edx, dword [ebp - 0x28]
mov dword [esi + 0x30], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x1c]
cmp byte [edx + eax], 1
mov eax, dword [ebp - 8]
sete cl
xor ecx, dword [ebp - 0x2c]
or dword [esi + 0x2c], ecx
mov ecx, edx
mov eax, dword [eax + 0x24]
mov dword [ebp - 4], eax
cmp dword [ebp - 0x4c], 0
mov edx, eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
jne 0x515ef8
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 4]
movsx ecx, word [eax + ecx*2]
mov dword [ebp - 0x44], ecx
test ecx, ecx
js 0x515edb
mov eax, dword [edx + 0xc]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + 4]
cmp byte [eax + ecx*4 + 0xc], 0
je 0x515eeb
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp ecx, 0xfffffffe
jne 0x515ef8
jmp 0x515eee
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov byte [ebp + 0x17], 1
mov dword [ebp - 0x20], eax
test dl, 0x30
jne 0x515f25
test edx, 0x80000
je 0x515f25
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [esi + 0x24], eax
dec dword [ebx + 0x38]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x20], 1
mov byte [ebp + 0x17], 1
mov dword [esi + 0x28], eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x50]
movzx ecx, word [eax + 0x32]
mov dword [ebp - 0x44], ecx
cmp dx, cx
jae 0x515f54
mov eax, dword [eax + 0x1c]
xor ecx, ecx
mov edx, dword [ebp - 0x28]
cmp byte [edx + eax], cl
mov eax, dword [ebp - 0x2c]
sete cl
cmp eax, ecx
je 0x515f60
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x50]
jmp 0x515f57
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x515f8b
cmp cx, dx
jne 0x515f8b
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x4c], eax
mov al, byte [ebp + 0x17]
mov byte [ebp - 0x55], al
mov eax, dword [ebp - 0x3c]
movzx eax, al
mov dword [ebp - 0x24], ecx
movzx ecx, dx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2c]
mov byte [ebp + 0x17], 0
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x40]
push ecx
push dword [ebp - 0x20]
push eax
push esi
push ebx
call fcn.004c2a10
mov ecx, dword [ebp - 0x40]
add esp, 0x14
mov edx, eax
mov dword [ebp - 0x20], edx
test ecx, ecx
je 0x515fc7
cmp word [ebp - 0x38], 0
je 0x515fc7
mov eax, dword [ebp - 0x28]
add eax, ecx
push eax
push dword [ebp - 0x5c]
call fcn.004e8900
mov edx, dword [ebp - 0x20]
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x48], 0
je 0x515fd5
mov ecx, dword [esi + 0x28]
mov dword [ebp - 0x10], ecx
jmp 0x515fdb
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x515fef
test byte [eax + 0xc], 0x28
mov dword [ebp - 0x14], 0
je 0x515ff6
mov dword [ebp - 0x14], 1
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x51600a
test byte [ecx + 0xc], 0x28
mov dword [ebp - 4], 0
je 0x516011
mov dword [ebp - 4], 1
test eax, eax
jne 0x51603c
cmp word [ebp - 0x50], ax
ja 0x51603c
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x50], eax
cmp byte [ebp + 0x17], 0
mov eax, ecx
mov dword [ebp - 0xc], eax
je 0x5160f3
mov dword [ebp - 0x14], 0
jmp 0x5160f9
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x516021
mov edx, dword [ebp - 0x3c]
mov eax, dword [eax]
add ecx, dword [ebp - 0x20]
movzx edx, dx
push edx
mov eax, dword [eax + 0x10]
push ecx
push eax
push ebx
mov dword [ebp + 0x14], eax
mov dword [ebp - 0x44], ecx
call fcn.004c3890
push dword [ebp - 0x4c]
mov edi, dword [ebp + 0xc]
push esi
push edi
call fcn.00524470
push dword [ebp + 0x14]
call fcn.004eaad0
add esp, 0x20
test eax, eax
je 0x516097
push dword [ebp - 0x10]
push dword [ebp - 0x44]
push 0x32
push edi
call fcn.00507610
add esp, 0x10
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x5160b6
mov eax, dword [ebp - 0x28]
add eax, ecx
mov ecx, dword [ebp - 0x3c]
push eax
movzx eax, cx
push eax
push dword [ebp + 0x14]
call fcn.0051d340
add esp, 0xc
mov ecx, dword [ebp - 0x3c]
push dword [ebp + 0x14]
movzx eax, cx
add dword [ebp - 0xc], eax
call fcn.004ee250
add esp, 4
test eax, eax
jne 0x5160e3
push dword [ebp - 0x4c]
push esi
call fcn.004c7180
mov eax, dword [ebp - 0xc]
add esp, 8
mov byte [ebp + 0x17], 0
jmp 0x516118
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], 1
mov byte [ebp + 0x17], 0
jmp 0x516118
cmp dword [ebp - 0x48], 0
je 0x516118
lea eax, [edx + ecx]
push eax
push 0
push 0x48
push edi
call fcn.00507610
mov eax, dword [ebp - 0xc]
add esp, 0x10
inc eax
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xc], eax
movzx ecx, byte [ebp + 0x17]
push dword [ebp - 0x40]
sub eax, ecx
mov dword [ebp - 0x44], ecx
push eax
push dword [ebp - 0x20]
push ebx
call fcn.004c2df0
mov ecx, dword [ebp - 8]
add esp, 0x10
movzx eax, word [ecx + 0x2a]
test ax, ax
je 0x516146
cmp dword [ebp - 0xc], eax
je 0x5161e6
test dword [ecx + 0x24], 0x40000
je 0x51615d
push dword [ebp - 0x30]
push 0x76
push edi
call fcn.005075b0
add esp, 0xc
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x516172
push eax
push 1
push 0x45
push edi
call fcn.00507610
add esp, 0x10
push dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
push dword [ebp - 0x20]
push dword [ebp - 0x10]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0x2c]
push dword [ebp - 0x30]
movzx eax, byte [ecx + eax*2 + 0x5825cc]
push eax
push edi
call fcn.00507740
mov eax, dword [ebp - 0x48]
add esp, 0x18
test eax, eax
je 0x5161e9
mov eax, dword [edi + 0x6c]
add eax, 2
push eax
push 0
push 0xb
push edi
call fcn.00507610
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
mov eax, 1
cmp eax, dword [ebp - 0xc]
push dword [ebp - 0x10]
sbb eax, eax
push dword [ebp - 0x30]
and eax, 4
movzx eax, byte [eax + ecx + 0x5825ce]
push eax
push edi
call fcn.00507740
add esp, 0x28
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x51629b
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x38]
movzx ecx, ax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
push ecx
push eax
push edx
push ebx
mov dword [ebp + 0x14], edx
mov dword [ebp - 0x50], eax
call fcn.004c3890
push dword [ebp - 0x24]
push esi
push edi
call fcn.00524470
push dword [ebp + 0x14]
call fcn.004eaad0
add esp, 0x20
test eax, eax
je 0x51623e
push dword [ebp - 0x10]
push dword [ebp - 0x50]
push 0x32
push edi
call fcn.00507610
add esp, 0x10
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x51626c
mov edx, dword [ebp - 0x38]
push eax
movzx eax, dx
push eax
push dword [ebp + 0x14]
call fcn.0051d340
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
push eax
movzx eax, cx
push eax
push dword [ebp - 0x50]
push ebx
call fcn.004c2df0
add esp, 0x1c
mov ecx, dword [ebp - 0x38]
push dword [ebp + 0x14]
movzx eax, cx
add dword [ebp - 0x28], eax
call fcn.004ee250
add esp, 4
test eax, eax
jne 0x516292
push dword [ebp - 0x24]
push esi
call fcn.004c7180
add esp, 8
jmp 0x5162c3
mov dword [ebp - 4], 1
jmp 0x5162c3
cmp byte [ebp - 0x55], 0
je 0x5162c3
test eax, eax
jne 0x5162c0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
push eax
push 0
push 0x48
push edi
call fcn.00507610
add esp, 0x10
mov dword [ebp - 4], 0
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x5162d6
push eax
push dword [ebp - 0x5c]
call fcn.004e85c0
add esp, 8
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x5162e9
push eax
push dword [ebp - 0x5c]
call fcn.004e85c0
add esp, 8
mov eax, dword [edi + 0x6c]
mov dword [esi + 0x3c], eax
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x516335
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x516313
mov eax, dword [edi + 0x6c]
add eax, 3
push eax
push ecx
push 0x14
push edi
call fcn.00507610
mov eax, dword [ebp - 0x28]
add esp, 0x10
mov ecx, dword [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
mov eax, dword [ebp - 4]
push dword [ebp - 0x10]
push dword [ebp - 0x30]
movzx eax, byte [eax + ecx*2 + 0x5825d4]
push eax
push edi
call fcn.00507740
add esp, 0x18
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x516373
mov eax, dword [edi + 0x6c]
add eax, 2
push eax
push ecx
push 0x12
push edi
call fcn.00507610
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
add eax, ecx
push eax
push dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x10]
push dword [ebp - 0x30]
movzx eax, byte [ecx + eax*2 + 0x5825d4]
push eax
push edi
call fcn.00507740
add esp, 0x28
mov ecx, dword [ebp - 8]
mov eax, dword [ecx + 0x24]
test eax, 0x40000
je 0x516396
push 1
push dword [ebp - 0x30]
push 0x76
push edi
call fcn.00507610
mov ecx, dword [ebp - 8]
add esp, 0x10
mov eax, dword [ecx + 0x24]
test al, 0x40
je 0x5163b2
mov eax, dword [ebp + 0x10]
test byte [eax + 0x28], 0x20
jne 0x5163b2
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], 1
jmp 0x516538
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], 0
mov eax, dword [edx + 0xc]
test byte [eax + 0x24], 0x80
jne 0x51643b
mov eax, dword [ebp + 0x10]
movzx eax, word [eax + 0x28]
test eax, 0x400
jne 0x516406
test eax, 0x1000
mov eax, dword [ebp + 0x10]
je 0x5163ea
cmp byte [eax + 0x2e], 1
je 0x516406
cmp word [ecx + 0x28], 0
je 0x516406
mov ebx, dword [ebp - 0x30]
push ebx
push dword [ebp - 0x1c]
push edx
push eax
call fcn.004c30a0
mov edx, dword [ebp - 0x34]
add esp, 0x10
mov eax, dword [ebp + 0x10]
jmp 0x51653b
inc dword [ebx + 0x2c]
mov esi, dword [ebx + 0x2c]
mov ebx, dword [ebp - 0x30]
push esi
push ebx
push 0x86
push edi
call fcn.00507610
push esi
push 0
push dword [ebp - 0x1c]
push 0x20
push edi
call fcn.00507670
mov esi, dword [ebp + 0x18]
add esp, 0x24
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp + 0x10]
jmp 0x51653b
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x30]
je 0x516535
push eax
call fcn.004fdef0
mov dword [ebp - 4], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
call fcn.004f3c40
mov ebx, dword [ebp - 4]
mov edx, eax
add esp, 0xc
mov dword [ebp + 0x14], 0
mov dword [ebp - 0x44], edx
movzx eax, word [ebx + 0x32]
mov ecx, eax
cmp word [ebp + 0x14], ax
jae 0x51651c
mov dword [ebp + 0x14], edx
xor esi, esi
mov eax, dword [ebp - 0x34]
xor ecx, ecx
movzx edx, word [eax + 0x34]
test edx, edx
je 0x5164ad
mov eax, dword [ebx + 4]
movzx ebx, word [eax + esi*2]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
nop dword [eax]
cmp bx, word [eax]
je 0x5164d0
inc ecx
add eax, 2
cmp ecx, edx
jl 0x5164a0
or eax, 0xffffffff
mov ecx, dword [edi + 0x6c]
movsx edx, ax
cmp dword [edi + 0x70], ecx
jg 0x5164d5
mov ebx, dword [ebp + 0x14]
push ebx
push edx
push dword [ebp - 0x30]
push 0x59
push edi
call fcn.004cf440
add esp, 0x14
jmp 0x516502
movzx eax, cx
jmp 0x5164b0
mov ebx, dword [ebp - 0x30]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], ebx
mov ebx, dword [ebp + 0x14]
mov dword [eax + ecx*4], 0x59
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], ebx
mov dword [eax + ecx*4 + 0x10], 0
inc ebx
inc esi
mov dword [ebp + 0x14], ebx
mov ebx, dword [ebp - 4]
movzx ecx, word [ebx + 0x32]
cmp esi, ecx
jl 0x516482
mov esi, dword [ebp + 0x18]
mov edx, dword [ebp - 0x44]
movzx eax, cx
push eax
push edx
push dword [ebp - 0x68]
push dword [ebp - 0x1c]
push 0x1d
push edi
call fcn.00507740
mov edx, dword [ebp - 0x34]
add esp, 0x18
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x30]
cmp dword [esi], 0
jne 0x5166ef
test byte [eax + 0x28], 0x20
jne 0x5166d5
mov ecx, dword [edx + 0x28]
test ecx, ecx
jne 0x516562
test dword [edx + 0x38], 0x400
je 0x5166d5
mov eax, dword [edx + 0xc]
xorps xmm0, xmm0
mov dword [ebp + 0x14], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x88], ebx
xor ebx, ebx
movlpd qword [ebp - 0xac], xmm0
mov eax, dword [eax]
movlpd qword [ebp - 0xa4], xmm0
movlpd qword [ebp - 0x9c], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
xor eax, eax
cmp ax, word [edx + 0x34]
jae 0x5166d5
mov esi, dword [ebp - 0x34]
lea edi, [ecx + 4]
nop
mov eax, dword [esi + 4]
movzx eax, word [eax + ebx*2]
cmp ax, 0xfffe
jne 0x516631
mov eax, dword [edi]
mov ecx, 1
mov dword [ebp - 0x90], eax
mov word [ebp - 0xb4], cx
mov dword [ebp - 0xc4], fcn.004ca300
mov dword [ebp - 0xc0], 0x502ff0
mov dword [ebp - 0xb0], 0
test eax, eax
je 0x5166bf
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.005239c0
add esp, 8
cmp word [ebp - 0xb4], 0
jne 0x5166bf
mov dword [ebp - 0xa8], 0x523f80
jmp 0x516678
test ax, ax
js 0x5166bf
cwde
mov dword [ebp - 0x44], eax
lea ecx, [eax + eax*4]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 4]
test byte [eax + ecx*4 + 0x10], 0x20
je 0x5166bf
mov eax, dword [eax + ecx*4 + 8]
test eax, eax
je 0x516668
push 0x581b60
push eax
call fcn.00504330
add esp, 8
test eax, eax
jne 0x5166bf
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0xa8], 0x523f10
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x84], ebx
mov eax, dword [eax + 0x10]
test eax, eax
je 0x516698
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.005239c0
add esp, 8
mov eax, dword [ebp + 0x10]
push dword [eax + 8]
lea eax, [ebp - 0xac]
push eax
call fcn.005147f0
mov eax, dword [ebp + 0x10]
push dword [eax + 0xc]
lea eax, [ebp - 0xac]
push eax
call fcn.005147f0
add esp, 0x10
movzx eax, word [esi + 0x34]
inc ebx
add edi, 0x14
cmp ebx, eax
jl 0x5165c0
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx + 0x24]
test eax, eax
je 0x5166f2
mov ecx, dword [ebp - 0x60]
push ecx
push dword [ebp - 0x1c]
push eax
call fcn.00523b20
add esp, 0xc
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 8]
test dword [edx + 0x24], 0x1000
je 0x516704
mov byte [esi + 0x35], 0xad
jmp 0x516710
cmp dword [ebp - 0x2c], 0
sete al
add al, 4
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x30]
mov dword [esi + 0x38], eax
mov al, byte [edx + 0x26]
and al, 1
mov byte [esi + 0x36], al
test byte [edx + 0x24], 0xf
jne 0x516728
mov byte [esi + 0x37], 1
xor eax, eax
cmp dword [ebp - 0x18], eax
cmove eax, ecx
mov dword [ebp - 0x44], eax
jmp 0x516f0d
test edx, 0x2000
je 0x516ecd
mov eax, dword [ebx + 0x28]
dec dword [ebx + 0x38]
inc dword [ebx + 0x2c]
mov dword [ebp - 0x2c], eax
inc eax
mov dword [ebx + 0x28], eax
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x2c]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x14], 0
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x3c], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [eax + 0x1c]
mov dword [esi + 0x38], edx
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x40], eax
mov byte [esi + 0x35], 0x41
mov al, byte [edx + 0x2c]
cmp al, 1
jbe 0x5168bd
mov ecx, dword [ebp - 0x5c]
movzx eax, al
sub eax, dword [ebp + 0x14]
dec eax
mov dword [ebp + 0x14], eax
push 0
lea eax, [eax + eax*8]
lea eax, [eax*8 + 0x50]
push eax
test ecx, ecx
je 0x5167de
push ecx
call fcn.004e8630
mov ecx, eax
add esp, 0xc
mov dword [ebp - 0x20], ecx
jmp 0x5167eb
call fcn.004f7ed0
add esp, 8
mov dword [ebp - 0x20], eax
mov ecx, eax
test ecx, ecx
jne 0x5167fc
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x14]
lea eax, [edx + 1]
movzx eax, al
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
movups xmm0, xmmword [eax]
movups xmmword [ecx + 8], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ecx + 0x18], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ecx + 0x28], xmm0
movups xmm0, xmmword [eax + 0x30]
movups xmmword [ecx + 0x38], xmm0
movq xmm0, qword [eax + 0x40]
mov eax, dword [ebp + 0x10]
movq qword [ecx + 0x48], xmm0
mov eax, dword [eax + 4]
add eax, 8
cmp edx, 1
jl 0x516892
add ecx, 0x50
mov edi, eax
add esi, 0x8c
nop
movzx eax, byte [esi]
lea esi, [esi + 0x58]
lea ecx, [ecx + 0x48]
lea eax, [eax + eax*8]
movups xmm0, xmmword [edi + eax*8]
movups xmmword [ecx - 0x48], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x10]
movups xmmword [ecx - 0x38], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x20]
movups xmmword [ecx - 0x28], xmm0
movups xmm0, xmmword [edi + eax*8 + 0x30]
movups xmmword [ecx - 0x18], xmm0
movq xmm0, qword [edi + eax*8 + 0x40]
movq qword [ecx - 8], xmm0
sub edx, 1
jne 0x516850
mov edi, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp + 0x10]
test byte [eax + 0x28], 0x10
jne 0x5168fa
test byte [ecx + 0x24], 0x80
jne 0x5168c5
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
push eax
push 0
push 0x48
push edi
mov dword [ebp - 0x14], eax
call fcn.00507610
add esp, 0x10
jmp 0x5168f1
mov eax, dword [edx + 4]
mov dword [ebp - 0x20], eax
jmp 0x516895
push ecx
call fcn.004fdef0
mov esi, eax
mov eax, dword [ebx + 0x28]
mov dword [ebp - 0x14], eax
lea ecx, [eax + 1]
mov dword [ebx + 0x28], ecx
movzx ecx, word [esi + 0x32]
push ecx
push eax
push 0x64
push edi
call fcn.00507610
push esi
push ebx
call fcn.005124d0
add esp, 0x1c
inc dword [ebx + 0x2c]
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 0x38], eax
mov esi, dword [edi + 0x6c]
mov dword [ebp - 0x28], esi
cmp dword [edi + 0x70], esi
jg 0x51691c
push 0
push dword [ebp - 0x18]
push 0
push 0x45
push edi
call fcn.004cf440
add esp, 0x14
mov dword [ebp - 0x28], eax
jmp 0x51694e
mov edx, dword [ebp - 0x18]
lea eax, [esi + 1]
mov dword [edi + 0x6c], eax
lea ecx, [esi + esi*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [ebp - 0x60]
mov eax, dword [ecx + 0xc]
cmp eax, 1
jle 0x5169ee
xor ecx, ecx
mov dword [ebp + 0x14], ecx
test eax, eax
jle 0x5169ee
mov edx, dword [ebp - 0x30]
xor esi, esi
mov eax, dword [ebp - 0x60]
xor edi, edi
mov eax, dword [eax + 0x14]
add eax, esi
cmp eax, edx
je 0x5169be
test byte [eax + 0xa], 6
jne 0x5169be
mov ebx, 0x1fff
test word [eax + 0xc], bx
mov ebx, dword [ebp + 8]
je 0x5169be
mov eax, dword [eax]
test eax, eax
je 0x5169a9
push 0
push 0
push eax
push dword [ebp - 0x5c]
call fcn.004c9930
add esp, 0x10
jmp 0x5169ab
xor eax, eax
push eax
push edi
push ebx
call fcn.004ea750
mov ecx, dword [ebp + 0x14]
add esp, 0xc
mov edx, dword [ebp - 0x30]
mov edi, eax
mov eax, dword [ebp - 0x60]
inc ecx
add esi, 0x30
mov dword [ebp + 0x14], ecx
cmp ecx, dword [eax + 0xc]
jl 0x516974
mov dword [ebp - 0x24], edi
test edi, edi
mov edi, dword [ebp + 0xc]
je 0x5169ee
mov eax, dword [ebp - 0x24]
push eax
push 0
push 0x1002c
push ebx
call fcn.004f8cc0
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0x10]
mov esi, 0x400
push str.MULTI_INDEX_OR
push 1
push ebx
mov ax, word [eax + 0x28]
and ax, si
or ax, 0x20
movzx eax, ax
mov dword [ebp - 8], eax
call fcn.0050f220
mov ecx, dword [ebp - 0x40]
xor eax, eax
add esp, 0xc
mov dword [ebp - 0x4c], eax
cmp dword [ecx + 0xc], eax
jle 0x516d4c
mov edx, dword [ebp - 0x1c]
nop dword [eax + eax]
lea eax, [eax + eax*2]
shl eax, 4
add eax, dword [ecx + 0x14]
cmp dword [eax + 0x14], edx
je 0x516a48
test word [eax + 0xc], si
je 0x516d3c
mov esi, dword [eax]
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x516a5b
mov dword [eax + 0xc], esi
mov esi, eax
mov eax, dword [ebp - 0x4c]
inc eax
push eax
push str.INDEX__d
push 1
push ebx
call fcn.0050f220
push dword [ebp - 0x2c]
push dword [ebp - 8]
push 0
push 0
push esi
mov esi, dword [ebp - 0x20]
push esi
push ebx
call fcn.005149e0
add esp, 0x2c
mov dword [ebp - 0x70], eax
test eax, eax
je 0x516d31
push 0
lea ecx, [eax + 0x2f0]
push ecx
push esi
push ebx
call fcn.00517d80
mov eax, dword [ebp + 0x10]
add esp, 0x10
test byte [eax + 0x28], 0x10
jne 0x516c1d
mov eax, dword [ebp - 0x40]
mov esi, dword [ebp - 0x4c]
mov eax, dword [eax + 0xc]
dec eax
cmp esi, eax
mov eax, 0xffffffff
cmove esi, eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x48], esi
test byte [eax + 0x24], 0x80
jne 0x516afa
mov edx, dword [ebp - 0x38]
push edx
push dword [ebp - 0x1c]
push 0x7f
push edi
call fcn.00507610
push esi
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x14]
push 0x2d
push edi
call fcn.00507740
add esp, 0x28
mov esi, eax
jmp 0x516c20
push eax
call fcn.004fdef0
mov dword [ebp - 0x6c], eax
movzx eax, word [eax + 0x32]
push eax
push ebx
mov dword [ebp - 4], eax
call fcn.004f3c40
xor esi, esi
mov dword [ebp + 0x14], eax
add esp, 0xc
cmp dword [ebp - 4], esi
jbe 0x516b4a
mov ebx, dword [ebp - 4]
lea ecx, [esi + eax]
mov eax, dword [ebp - 0x6c]
push ecx
mov eax, dword [eax + 4]
movsx eax, word [eax + esi*2]
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x3c]
push edi
call fcn.004eb060
mov eax, dword [ebp + 0x14]
inc esi
add esp, 0x14
cmp esi, ebx
jl 0x516b21
mov ebx, dword [ebp + 8]
cmp dword [ebp - 0x48], 0
mov esi, dword [ebp - 4]
je 0x516b6e
push esi
push eax
push 0
push dword [ebp - 0x14]
push 0x1e
push edi
call fcn.00507740
add esp, 0x18
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x48], 0
jl 0x516bea
mov ecx, dword [edi + 0x6c]
mov edx, dword [ebp + 0x14]
cmp dword [edi + 0x70], ecx
jg 0x516b8b
push dword [ebp - 0x38]
push esi
push edx
push 0x5b
push edi
call fcn.004cf440
add esp, 0x14
jmp 0x516bb5
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0x38]
mov dword [eax + ecx*4], 0x5b
mov dword [eax + ecx*4 + 8], esi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push esi
push dword [ebp + 0x14]
push dword [ebp - 0x38]
push dword [ebp - 0x14]
push 0x83
push edi
call fcn.00507740
add esp, 0x18
cmp dword [ebp - 0x48], 0
je 0x516bea
mov eax, dword [edi + 0x6c]
test eax, eax
jle 0x516bea
lea ecx, [eax + eax*4]
mov edx, 0x10
mov eax, dword [edi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
cmp esi, 1
jne 0x516c0f
mov ecx, dword [ebp + 0x14]
test ecx, ecx
je 0x516c1d
mov al, byte [ebx + 0x13]
mov esi, dword [ebp - 0x10]
cmp al, 8
jae 0x516c20
movzx eax, al
mov dword [ebx + eax*4 + 0x94], ecx
inc byte [ebx + 0x13]
jmp 0x516c20
cmp esi, dword [ebx + 0x1c]
jle 0x516c1d
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], eax
mov esi, dword [ebp - 0x10]
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x516c3d
push 0
push dword [ebp - 0xc]
push dword [ebp - 0x18]
push 0xc
push edi
call fcn.004cf440
add esp, 0x14
jmp 0x516c6e
mov edx, dword [ebp - 0x18]
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [ebp - 0xc]
mov dword [eax + ecx*4], 0xc
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
test esi, esi
je 0x516c98
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x516c84
mov eax, 0x5b8cd4
jmp 0x516c95
test esi, esi
lea eax, [edx - 1]
cmovns eax, esi
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov edx, dword [ebp - 0x70]
mov ecx, 1
mov eax, dword [ebp - 0x34]
test byte [edx + 0x30], 2
cmovne eax, ecx
mov ecx, dword [edx + 0x338]
mov dword [ebp - 0x34], eax
test dword [ecx + 0x24], 0x200
je 0x516ce7
cmp dword [ebp - 0x4c], 0
je 0x516cca
mov eax, dword [ebp - 0x50]
cmp dword [ecx + 0x20], eax
jne 0x516ce7
mov eax, dword [ebp - 0x3c]
test byte [eax + 0x24], 0x80
je 0x516cdf
mov eax, dword [ecx + 0x20]
mov eax, dword [eax + 0x38]
and al, 3
cmp al, 2
je 0x516ce7
mov esi, dword [ecx + 0x20]
mov dword [ebp - 0x50], esi
jmp 0x516cee
mov dword [ebp - 0x50], 0
push edx
call fcn.005172a0
mov ecx, dword [ebx + 0xd4]
add esp, 4
test ecx, ecx
jne 0x516d05
xor eax, eax
jmp 0x516d2b
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x516d10
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x516d1f
mov eax, 0x5b8cd4
jmp 0x516d28
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov dword [ebx + 0xd4], eax
mov edx, dword [ebp - 0x1c]
mov esi, 0x400
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp eax, dword [ecx + 0xc]
jl 0x516a30
mov ecx, dword [ebx + 0xd4]
test ecx, ecx
jne 0x516d5a
xor eax, eax
jmp 0x516d80
mov edx, dword [ebx + 8]
test ecx, ecx
jns 0x516d65
mov ecx, dword [edx + 0x6c]
dec ecx
mov eax, dword [edx]
cmp byte [eax + 0x51], 0
je 0x516d74
mov eax, 0x5b8cd4
jmp 0x516d7d
mov eax, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov eax, dword [eax + 8]
mov esi, dword [ebp + 0x18]
mov dword [ebx + 0xd4], eax
mov eax, dword [ebp - 0x50]
mov dword [esi + 0x40], eax
test eax, eax
je 0x516d99
mov eax, dword [ebp - 0x2c]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x5c]
test eax, eax
je 0x516db4
push eax
push ebx
mov dword [eax + 0xc], 0
call fcn.004ed570
add esp, 8
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x516dc6
mov eax, 0x5b8cd4
jmp 0x516dda
mov ecx, dword [ebp - 0x28]
lea eax, [edx - 1]
test ecx, ecx
cmovns eax, ecx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x6c]
mov edx, dword [esi + 0xc]
cmp dword [edi + 0x70], ecx
jg 0x516dfa
push 0
push edx
push 0
push 0xb
push edi
call fcn.004cf440
add esp, 0x14
jmp 0x516e29
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0xb
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [edi + 0xc]
mov edx, dword [ebp - 0xc]
not edx
mov eax, dword [ecx + 0x3c]
add eax, dword [ecx + 0x38]
jns 0x516e46
push edx
push edi
push ecx
call fcn.004db6e0
add esp, 0xc
jmp 0x516e4f
mov ecx, dword [ecx + 0x40]
mov eax, dword [edi + 0x6c]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp + 0x10]
cmp byte [eax + 0x2c], 1
jbe 0x516eb9
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x516eb9
test ebx, ebx
je 0x516eb0
cmp dword [ebx + 0x1f8], 0
je 0x516e78
push ecx
push ebx
call fcn.004d21e0
add esp, 8
jmp 0x516eb9
cmp ecx, dword [ebx + 0x14c]
jae 0x516eb0
cmp ecx, dword [ebx + 0x144]
jb 0x516e98
mov eax, dword [ebx + 0x140]
mov dword [ecx], eax
mov dword [ebx + 0x140], ecx
jmp 0x516eb9
cmp ecx, dword [ebx + 0x148]
jb 0x516eb0
mov eax, dword [ebx + 0x138]
mov dword [ecx], eax
mov dword [ebx + 0x138], ecx
jmp 0x516eb9
push ecx
call fcn.004adc10
add esp, 4
cmp dword [ebp - 0x34], 0
jne 0x516f0b
push dword [ebp - 0x30]
push esi
call fcn.004c7180
add esp, 8
jmp 0x516f0b
mov eax, dword [ebp - 0x64]
test byte [eax + 0x28], 0x20
je 0x516edc
mov byte [esi + 0x35], 0xad
jmp 0x516f0b
mov ecx, dword [ebp - 0x2c]
push dword [ebp - 0x50]
mov al, byte [ecx + 0x5825d8]
mov byte [esi + 0x35], al
mov eax, dword [ebp - 0x1c]
push eax
mov dword [esi + 0x38], eax
movzx eax, byte [ecx + 0x5825dc]
push eax
push edi
call fcn.00507610
add esp, 0x10
mov byte [esi + 0x37], 1
inc eax
mov dword [esi + 0x3c], eax
xor eax, eax
mov edx, dword [ebp - 0x60]
mov ecx, eax
neg ecx
sbb ecx, ecx
add ecx, 2
mov dword [ebp - 0x18], ecx
nop dword [eax]
mov ebx, dword [edx + 0xc]
xor eax, eax
mov esi, dword [edx + 0x14]
mov dword [ebp + 0x14], eax
mov dword [ebp - 4], ebx
test ebx, ebx
jle 0x5170ed
movzx edx, word [esi + 0xa]
xor ebx, ebx
test dl, 6
jne 0x5170d2
mov eax, dword [ebp + 0x18]
mov edi, dword [ebp + 0x18]
mov ecx, dword [esi + 0x28]
and ecx, dword [eax + 0x50]
mov eax, dword [esi + 0x2c]
and eax, dword [edi + 0x54]
or ecx, eax
mov edi, dword [ebp + 0xc]
je 0x516f6a
mov eax, dword [ebp + 0x10]
or dword [eax + 0x30], 2
jmp 0x5170cf
mov eax, dword [ebp - 0x64]
mov ecx, dword [esi]
mov dword [ebp - 0x40], ecx
test byte [eax + 0x24], 8
je 0x516f82
test byte [ecx + 4], 1
je 0x5170cf
mov eax, dword [ebp - 0x18]
cmp eax, 1
jne 0x516fe6
mov eax, dword [ebp + 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x90], ebx
movlpd qword [ebp - 0x88], xmm0
movlpd qword [ebp - 0x80], xmm0
mov eax, dword [eax + 4]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x8c], 0x4c9d20
mov dword [ebp - 0x78], eax
test ecx, ecx
je 0x516fd3
push ecx
lea eax, [ebp - 0x90]
push eax
call fcn.005239c0
add esp, 8
cmp word [ebp - 0x7c], bx
je 0x516feb
mov eax, 2
mov dword [ebp + 0x14], eax
jmp 0x5170d2
cmp eax, 3
jge 0x51700f
movzx edx, word [esi + 0xa]
test edx, 0x1000
je 0x51700f
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x5170d2
mov eax, 3
mov dword [ebp + 0x14], eax
jmp 0x5170d2
test edx, 0x200
je 0x51708d
mov eax, dword [ebp + 0x18]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x51708d
mov ebx, dword [edi + 0x6c]
mov edx, eax
and eax, 1
shr edx, 1
mov dword [ebp - 0x6c], edx
lea eax, [eax*2 + 0x12]
mov dword [ebp - 0x70], eax
cmp dword [edi + 0x70], ebx
jg 0x517050
push 0
push 0
push edx
push eax
push edi
call fcn.004cf440
add esp, 0x14
mov ebx, eax
jmp 0x51708d
mov edx, dword [ebp - 0x70]
lea eax, [ebx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [edi + 0x68]
mov byte [eax + ecx*4], dl
xor edx, edx
mov word [eax + ecx*4 + 2], dx
mov edx, dword [ebp - 0x6c]
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [eax + ecx*4 + 1], 0
push 0x10
push dword [ebp - 0x68]
push dword [ebp - 0x40]
push dword [ebp + 8]
call fcn.004ed880
add esp, 0x10
test ebx, ebx
je 0x5170ca
mov eax, dword [edi]
mov edx, dword [edi + 0x6c]
cmp byte [eax + 0x51], 0
je 0x5170b6
mov eax, 0x5b8cd4
jmp 0x5170c7
test ebx, ebx
lea eax, [edx - 1]
cmovns eax, ebx
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
or word [esi + 0xa], 4
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp - 4]
add esi, 0x30
dec edx
mov dword [ebp - 4], edx
test edx, edx
jg 0x516f36
mov edx, dword [ebp - 0x60]
mov esi, dword [edx + 0x14]
mov ebx, dword [edx + 0xc]
mov dword [ebp - 0x18], eax
test eax, eax
jg 0x516f20
test ebx, ebx
jle 0x5171eb
add esi, 0xc
test byte [esi - 2], 6
jne 0x5171d9
movzx eax, word [esi]
mov edi, 0xb
test al, 0x82
setne cl
bt ax, di
mov edi, dword [ebp + 8]
setb al
test al, cl
je 0x5171d9
mov ecx, dword [ebp - 0x1c]
cmp dword [esi + 8], ecx
jne 0x5171d9
mov eax, dword [ebp - 0x64]
test byte [eax + 0x24], 8
jne 0x5171d9
mov eax, dword [esi - 0xc]
push 0
push 0x83
push dword [ebp + 0x20]
mov dword [ebp + 0x10], eax
push dword [ebp + 0x1c]
push dword [esi + 0x10]
push ecx
push edx
call fcn.00518200
mov ecx, eax
add esp, 0x1c
test ecx, ecx
je 0x5171d9
test byte [ecx + 0xa], 4
jne 0x5171d9
test byte [ecx + 0xc], 1
je 0x51718d
mov eax, dword [ecx]
test dword [eax + 4], 0x800
je 0x51718d
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jg 0x5171d9
mov eax, dword [ecx]
push 0x10
push dword [ebp - 0x68]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe0], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0xd0], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ebp - 0xc0], xmm0
mov eax, dword [eax + 0x30]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xe0]
push eax
push edi
call fcn.004ed880
add esp, 0x10
mov edx, dword [ebp - 0x60]
dec ebx
add esi, 0x30
test ebx, ebx
jg 0x517103
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x18]
mov edx, dword [ebx]
test edx, edx
je 0x51728d
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0x1c], eax
mov ecx, dword [edi + 0x6c]
cmp dword [edi + 0x70], ecx
jg 0x517218
push 0
push edx
push 1
push 0x45
push edi
call fcn.004cf440
add esp, 0x14
jmp 0x517247
lea eax, [ecx + 1]
mov dword [edi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [edi + 0x68]
mov dword [eax + ecx*4], 0x45
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov edx, dword [ebp - 0x60]
xor edi, edi
mov esi, dword [edx + 0x14]
cmp dword [edx + 0xc], edi
jle 0x51728d
test byte [esi + 0xa], 6
jne 0x517284
mov ecx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
and ecx, dword [ebx + 0x50]
and eax, dword [ebx + 0x54]
or ecx, eax
jne 0x517284
push 0x10
push dword [ebp - 0x68]
push dword [esi]
push dword [ebp + 8]
call fcn.004ed880
mov edx, dword [ebp - 0x60]
add esp, 0x10
or word [esi + 0xa], 4
inc edi
add esi, 0x30
cmp edi, dword [edx + 0xc]
jl 0x517254
mov eax, dword [ebx + 0x50]
mov edx, dword [ebx + 0x54]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret