Function at 0x4bf7f0
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x553592
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x70e0
call fcn.00539360
mov eax, dword [0x5bd200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x6f7c], eax
mov dword [ebp - 0x6fe4], 0
lea ecx, [ebp - 0x27dc]
mov byte [eax + 0x19c], 0
call fcn.004244e0
mov ecx, dword [ebp - 0x6f7c]
lea ecx, [ecx + 0x11c]
call fcn.00405370
xor ecx, ecx
call fcn.0040fd90
test eax, eax
je 0x4bf87e
push eax
call fcn.00538a53
add esp, 4
mov ecx, dword [ebp - 0x6f7c]
push 0
call fcn.004b11f0
mov eax, dword [ebp - 0x6f7c]
push 1
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0043b930
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x592d04
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00438b50
push 0xc
lea ecx, [ebp - 0x1f8c]
call fcn.00401e00
lea ecx, [ebp - 0x1f8c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2154]
mov dword [ebp - 4], 0
call fcn.00401e00
lea ecx, [ebp - 0x2154]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2114]
mov byte [ebp - 4], 1
call fcn.00401e00
lea ecx, [ebp - 0x2114]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2874]
mov byte [ebp - 4], 2
call fcn.00401e00
lea ecx, [ebp - 0x2874]
call fcn.00404bc0
mov byte [ebp - 4], 3
mov esi, 0xa0
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0x1009
mov eax, dword [eax + 8]
push dword [eax + esi]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00436e10
add esi, 4
cmp esi, 0xb8
jb 0x4bf940
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2114]
call fcn.00405dd0
push eax
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2154]
call fcn.00405dd0
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2874]
mov esi, eax
call fcn.00405dd0
mov edx, esi
mov ecx, eax
call fcn.00442460
mov edi, dword [ebp - 0x6f7c]
push 4
mov byte [ebp - 0x6f81], 1
mov dword [edi + 0x38], eax
mov eax, edi
mov eax, dword [eax + 8]
push dword [eax + 0x28]
mov eax, edi
mov ecx, dword [eax + 4]
call fcn.00439760
mov dword [ebp - 0x6f78], eax
test eax, eax
je 0x4bfa12
mov eax, edi
push 1
lea ecx, [eax + 0x114]
push ecx
lea edx, [eax + 0x10c]
lea ecx, [eax + 0x104]
call fcn.00441bc0
test eax, eax
mov dword [edi + 0x30], eax
setne cl
test eax, eax
jne 0x4bfa92
jmp 0x4bfa18
mov cl, byte [ebp - 0x6f81]
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x38], 0
je 0x4bfa8a
lea ecx, [ebp - 0x2114]
mov dword [eax + 0x30], 1
push ecx
push 1
lea ecx, [eax + 0x104]
call fcn.0051e990
mov ecx, eax
call fcn.00405020
mov ecx, dword [ebp - 0x6f7c]
lea eax, [ebp - 0x2154]
push eax
push 1
lea ecx, [ecx + 0x10c]
call fcn.0051e990
mov ecx, eax
call fcn.00405020
mov ecx, dword [ebp - 0x6f7c]
lea eax, [ebp - 0x2874]
push eax
push 1
lea ecx, [ecx + 0x114]
call fcn.0051e990
mov ecx, eax
call fcn.00405020
jmp 0x4bfa92
test cl, cl
je 0x4bfdf8
push 8
lea ecx, [ebp - 0x288c]
call fcn.00401750
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x288c]
add eax, 0x114
push eax
mov dword [ebp - 0x6fcc], eax
call fcn.0051eaf0
push 8
lea ecx, [ebp - 0x2884]
mov byte [ebp - 4], 4
call fcn.00401750
mov esi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2884]
add esi, 0x10c
push esi
mov dword [ebp - 0x6fb4], esi
call fcn.0051eaf0
push 8
lea ecx, [ebp - 0x287c]
mov byte [ebp - 4], 5
call fcn.00401750
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x287c]
add edi, 0x104
push edi
mov dword [ebp - 0x6f8c], edi
call fcn.0051eaf0
mov eax, dword [ebp - 0x6f7c]
mov ecx, edi
mov byte [ebp - 4], 6
mov eax, dword [eax + 0x30]
add eax, 2
push eax
call fcn.0051e990
mov edi, dword [ebp - 0x6f7c]
mov ecx, esi
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.0051e990
mov eax, dword [edi + 0x30]
mov edi, dword [ebp - 0x6fcc]
add eax, 2
push eax
mov ecx, edi
call fcn.0051e990
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4bfbef
nop dword [eax]
push esi
lea ecx, [ebp - 0x287c]
call fcn.0051ea60
mov ecx, eax
call fcn.004053a0
mov ecx, dword [ebp - 0x6f8c]
push eax
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.004057e0
push esi
lea ecx, [ebp - 0x2884]
call fcn.0051ea60
mov ecx, eax
call fcn.004053a0
mov ecx, dword [ebp - 0x6fb4]
push eax
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.004057e0
push esi
lea ecx, [ebp - 0x288c]
call fcn.0051ea60
mov ecx, eax
call fcn.004053a0
push eax
push esi
mov ecx, edi
call fcn.0051ea60
mov ecx, eax
call fcn.004057e0
mov eax, dword [ebp - 0x6f7c]
inc esi
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jb 0x4bfb70
push 0
push 0x592d30
push 0x104
push ecx
lea ecx, [eax + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405dd0
mov ecx, eax
call fcn.004440a0
mov eax, dword [ebp - 0x6f7c]
push 0x592d30
push dword [eax + 0x30]
lea ecx, [eax + 0x104]
call fcn.0051ea60
mov ecx, eax
call fcn.00405010
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
push 0x592d44
mov eax, dword [edi + 0x30]
lea ecx, [ecx + 0x104]
inc eax
push eax
mov dword [edi + 0x30], eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405010
mov eax, edi
push 0x592d44
push dword [eax + 0x30]
lea ecx, [eax + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405010
lea eax, [ebp - 0x6db8]
mov dword [ebp - 0x6db8], 0x400
push eax
push 0
mov eax, edi
push 0
push 0x400
push dword [eax + 0x30]
lea ecx, [eax + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405dd0
push eax
call dword [0x5566a4]
mov edx, 0x592d44
mov ecx, 0x80000003
call fcn.0040f650
test al, al
jne 0x4bfd5d
push 0xc
lea ecx, [ebp - 0x29dc]
call fcn.00401e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, edi
push 0
push str.NTUSER.DAT
push dword [eax + 0x30]
lea ecx, [eax + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x29dc]
call fcn.00404d30
lea ecx, [ebp - 0x29dc]
mov byte [ebp - 4], 7
call fcn.00405820
push eax
mov eax, edi
push dword [eax + 0x30]
lea ecx, [eax + 0x104]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push 0x80000003
call dword [0x556054]
test eax, eax
jne 0x4bfd50
mov eax, edi
mov eax, dword [eax + 0x30]
inc eax
mov dword [edi + 0x30], eax
lea ecx, [ebp - 0x29dc]
call fcn.00405360
jmp 0x4bfd66
mov eax, edi
mov eax, dword [eax + 0x30]
inc eax
mov dword [edi + 0x30], eax
lea ecx, [ebp - 0x287c]
call fcn.0051ea80
lea ecx, [ebp - 0x2884]
call fcn.0051ea80
lea ecx, [ebp - 0x288c]
mov byte [ebp - 4], 3
call fcn.0051ea80
mov esi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x27dc]
add esi, 0x140
call fcn.004244d0
push edx
push eax
mov ecx, esi
call fcn.004062d0
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x57d494
lea ecx, [ecx + 0x134]
call fcn.00405820
push eax
mov ecx, esi
call fcn.004075e0
mov ecx, esi
call fcn.00405820
or edx, 0xffffffff
mov ecx, eax
call fcn.0041cdd0
test al, al
jne 0x4bfe08
mov eax, dword [ebp - 0x6f7c]
push 1
mov ecx, eax
call fcn.004b11f0
mov esi, eax
jmp 0x4da486
mov ecx, esi
call fcn.00405820
push eax
call dword [0x5563b8]
or eax, 2
mov ecx, esi
push eax
call fcn.00405820
push eax
call dword [0x5563a4]
push 0
call dword [0x55688c]
push 0xc
lea ecx, [ebp - 0x226c]
call fcn.00401e00
lea ecx, [ebp - 0x226c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 8
call fcn.00401e00
lea ecx, [ebp - 0x2160]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2a00]
mov byte [ebp - 4], 9
call fcn.00401e00
lea ecx, [ebp - 0x2a00]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x25bc]
mov byte [ebp - 4], 0xa
call fcn.00401e00
lea ecx, [ebp - 0x25bc]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2978]
mov byte [ebp - 4], 0xb
call fcn.00401e00
lea ecx, [ebp - 0x2978]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x250c]
mov byte [ebp - 4], 0xc
call fcn.00401e00
lea ecx, [ebp - 0x250c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2720]
mov byte [ebp - 4], 0xd
call fcn.00401e00
lea ecx, [ebp - 0x2720]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2900]
mov byte [ebp - 4], 0xe
call fcn.00401e00
lea ecx, [ebp - 0x2900]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2930]
mov byte [ebp - 4], 0xf
call fcn.00401e00
lea ecx, [ebp - 0x2930]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x25b0]
mov byte [ebp - 4], 0x10
call fcn.00401e00
lea ecx, [ebp - 0x25b0]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2818]
mov byte [ebp - 4], 0x11
call fcn.00401e00
lea ecx, [ebp - 0x2818]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x293c]
mov byte [ebp - 4], 0x12
call fcn.00401e00
lea ecx, [ebp - 0x293c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2708]
mov byte [ebp - 4], 0x13
call fcn.00401e00
lea ecx, [ebp - 0x2708]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x26fc]
mov byte [ebp - 4], 0x14
call fcn.00401e00
lea ecx, [ebp - 0x26fc]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x26f0]
mov byte [ebp - 4], 0x15
call fcn.00401e00
lea ecx, [ebp - 0x26f0]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x280c]
mov byte [ebp - 4], 0x16
call fcn.00401e00
lea ecx, [ebp - 0x280c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2948]
mov byte [ebp - 4], 0x17
call fcn.00401e00
lea ecx, [ebp - 0x2948]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2954]
mov byte [ebp - 4], 0x18
call fcn.00401e00
lea ecx, [ebp - 0x2954]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2640]
mov byte [ebp - 4], 0x19
call fcn.00401e00
lea ecx, [ebp - 0x2640]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x264c]
mov byte [ebp - 4], 0x1a
call fcn.00401e00
lea ecx, [ebp - 0x264c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x296c]
mov byte [ebp - 4], 0x1b
call fcn.00401e00
lea ecx, [ebp - 0x296c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x25ec]
mov byte [ebp - 4], 0x1c
call fcn.00401e00
lea ecx, [ebp - 0x25ec]
call fcn.00404bc0
mov byte [ebp - 4], 0x1d
call dword [0x556410]
mov ecx, eax
call fcn.0041c6e0
mov edi, eax
mov ecx, str.HKLM
test edi, edi
mov dword [ebp - 0x6fdc], edi
mov eax, str.HKLM64
setne byte [ebp - 0x6f81]
test edi, edi
push 1
cmove eax, ecx
mov ecx, 0x575cb0
mov dword [ebp - 0x6fc4], eax
mov eax, str.HKLM32
cmove eax, ecx
lea ecx, [ebp - 0x226c]
mov dword [ebp - 0x6fe0], eax
mov eax, dword [ebp - 0x6f7c]
push dword [eax + 0x38]
push 0x1a
call fcn.00405d30
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2160]
push 1
push dword [eax + 0x38]
push 0x1c
call fcn.00405d30
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x25bc]
push 1
push dword [eax + 0x38]
push 2
call fcn.00405d30
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x250c]
push 1
push dword [eax + 0x38]
push 0x10
call fcn.00405d30
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x26f0]
push 1
push dword [eax + 0x38]
push 0x23
call fcn.00405d30
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2900]
push 1
push dword [eax + 0x38]
push 7
call fcn.00405d30
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2930]
push 1
push dword [eax + 0x38]
push 5
call fcn.00405d30
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2720]
call fcn.00405dd0
push eax
mov eax, dword [ebp - 0x6f7c]
push 0x58d860
push dword [eax + 0x38]
call dword [0x5566a8]
push 0x400
lea ecx, [ebp - 0x2720]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2720]
call fcn.00405820
push eax
call dword [0x556414]
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x25b0]
call fcn.00405dd0
push eax
call dword [0x556358]
test edi, edi
je 0x4c025d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x57d2e4
lea ecx, [ebp - 0x25b0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2818]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58d870
lea ecx, [ebp - 0x25b0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x293c]
call fcn.00405430
jmp 0x4c028f
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2818]
call fcn.00405dd0
push eax
call dword [0x5563b0]
lea eax, [ebp - 0x2818]
push eax
lea ecx, [ebp - 0x293c]
call fcn.00405020
push edi
lea edx, [ebp - 0x26fc]
lea ecx, [ebp - 0x2708]
call fcn.0041d790
push 0
push 0
push 0x2b
lea ecx, [ebp - 0x280c]
call fcn.00405d30
push 0
push 0
push 0x17
lea ecx, [ebp - 0x2640]
call fcn.00405d30
push 0
push 0
push 0x19
lea ecx, [ebp - 0x264c]
call fcn.00405d30
push 0
push 0
push 0x18
lea ecx, [ebp - 0x2948]
call fcn.00405d30
push 1
push 0
push 0x28
lea ecx, [ebp - 0x25ec]
call fcn.00405d30
lea ecx, [ebp - 0x25ec]
call fcn.004053c0
push eax
lea ecx, [ebp - 0x226c]
call fcn.00406d30
lea ecx, [ebp - 0x25ec]
call fcn.004053c0
push eax
lea ecx, [ebp - 0x2160]
call fcn.00406d30
push 1
push 0x58d884
lea ecx, [ebp - 0x2a00]
call fcn.004053e0
lea ecx, [ebp - 0x25ec]
call fcn.004053c0
push eax
lea ecx, [ebp - 0x25bc]
call fcn.00406d30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x580e90
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2978]
call fcn.00405430
lea ecx, [ebp - 0x25ec]
call fcn.004053c0
push eax
lea ecx, [ebp - 0x250c]
call fcn.00406d30
lea ecx, [ebp - 0x25ec]
call fcn.004053c0
push eax
lea ecx, [ebp - 0x2720]
call fcn.00406d30
lea ecx, [ebp - 0x25ec]
call fcn.004053c0
push eax
lea ecx, [ebp - 0x2900]
call fcn.00406d30
lea ecx, [ebp - 0x25ec]
call fcn.004053c0
push eax
lea ecx, [ebp - 0x2930]
call fcn.00406d30
push 2
push 1
lea ecx, [ebp - 0x25b0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x296c]
call fcn.00407fb0
push 1
lea ecx, [ebp - 0x280c]
call fcn.00405990
lea eax, [ebp - 0x280c]
push eax
lea ecx, [ebp - 0x2954]
call fcn.00405020
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575ca8
lea ecx, [ebp - 0x2708]
call fcn.00405820
push eax
lea ecx, [ebp - 0x280c]
call fcn.004075e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575ca8
lea ecx, [ebp - 0x26fc]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2954]
call fcn.004075e0
mov eax, dword [ebp - 0x6f7c]
cmp byte [eax + 0x40], 0
je 0x4c0486
xor esi, esi
jmp 0x4da394
mov eax, dword [eax + 8]
push 3
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0043b930
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x592d5c
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00438b50
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x10], 0
jne 0x4c04d6
mov ecx, eax
call fcn.004e2a30
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x10], 1
jne 0x4c0501
mov esi, dword [0x55638c]
mov ecx, eax
call fcn.004eb540
test al, al
jne 0x4c0591
push 0x64
call esi
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x10], 1
je 0x4c04e2
mov eax, dword [eax + 8]
push 6
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0043b930
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x592d8c
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00438b50
mov esi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x27dc]
add esi, 0x33c
call fcn.004244d0
push edx
push eax
mov ecx, esi
call fcn.004062d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x592dbc
mov ecx, esi
call fcn.004075e0
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.004e38a0
test eax, eax
jne 0x4c059b
mov esi, 3
jmp 0x4da394
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.HKLM_
mov ecx, esi
call fcn.004075e0
push 4
lea ecx, [ebp - 0x1f74]
call fcn.004093c0
lea ecx, [ebp - 0x1f74]
call fcn.0040c910
push 4
lea ecx, [ebp - 0x2570]
mov byte [ebp - 4], 0x1e
call fcn.004093c0
push 0
push 0x20019
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2570]
call fcn.0040c920
push 0xc
lea ecx, [ebp - 0x6cec]
mov byte [ebp - 4], 0x1f
call fcn.0040c890
lea ecx, [ebp - 0x6cec]
call fcn.0040c8d0
push 0xc
lea ecx, [ebp - 0x2a18]
mov byte [ebp - 4], 0x20
call fcn.0040c890
lea ecx, [ebp - 0x2a18]
call fcn.0040c8d0
push 0x10
lea ecx, [ebp - 0x2a64]
mov byte [ebp - 4], 0x21
call fcn.00401a90
lea ecx, [ebp - 0x2a64]
call fcn.0040c8b0
push 0xc
lea ecx, [ebp - 0x2780]
mov byte [ebp - 4], 0x22
call fcn.00401e00
lea ecx, [ebp - 0x2780]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2960]
mov byte [ebp - 4], 0x23
call fcn.00401e00
lea ecx, [ebp - 0x2960]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x1f80]
mov byte [ebp - 4], 0x24
call fcn.00401e00
lea ecx, [ebp - 0x1f80]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x25e0]
mov byte [ebp - 4], 0x25
call fcn.00401e00
lea ecx, [ebp - 0x25e0]
call fcn.00404bc0
lea ecx, [ebp - 0x27dc]
mov byte [ebp - 4], 0x26
call fcn.004244d0
mov ecx, edx
mov dword [ebp - 0x7038], eax
push ecx
mov dword [ebp - 0x702c], ecx
lea ecx, [ebp - 0x2960]
push eax
call fcn.004062d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58d8a8
lea ecx, [ebp - 0x2960]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0x592dcc
lea ecx, [ecx + 0x134]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
lea ecx, [ecx + 0x11c]
call fcn.00405430
push 0x20
lea ecx, [ebp - 0x1fc8]
call fcn.00402410
lea ecx, [ebp - 0x1fc8]
call fcn.00419640
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0x22
mov byte [ebp - 4], 0x27
lea ecx, [ecx + 0x11c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.00419790
test eax, eax
je 0x4c0987
push 0
mov esi, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x592de0
push 0
push 1
push 1
push 0
add esi, 0x354
push 0x592e10
mov ecx, esi
call fcn.00406ef0
test eax, eax
mov edx, 0x592e28
mov ecx, 0x592e20
cmove ecx, edx
push ecx
mov ecx, esi
call fcn.00405820
push eax
push 0x58d90c
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0x58d920
push 0x5761c0
push 0x57ac88
push str.2.9.1.0
push 0x58d934
mov ecx, esi
call fcn.00405820
push eax
push 0x5786d4
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x25e0]
push 0
push dword [eax + 0xc]
call fcn.004062d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58de80
lea ecx, [ebp - 0x25e0]
call fcn.00405820
push eax
push 0x592e40
mov ecx, esi
call fcn.00405820
push eax
push 0x5786d4
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push edi
mov ecx, dword [ebp - 0x6f7c]
lea eax, [ebp - 0x1f80]
push eax
call fcn.004dd280
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
cmp dword [ebp - 0x6f78], 0
mov ecx, 0x592e80
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58de80
mov eax, 0x57b750
cmove eax, ecx
lea ecx, [ebp - 0x2874]
push eax
push 0x592e94
push 0x58de80
call fcn.00405820
push eax
push 0x592ecc
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea edx, [ebp - 0x1f80]
lea ecx, [ebp - 0x27dc]
call fcn.00424490
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58d94c
lea ecx, [ebp - 0x1f80]
call fcn.00405820
push eax
push 0x592f00
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0x592f28
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
lea ecx, [ebp - 0x296c]
call fcn.00405820
lea ecx, [ebp - 0x25b0]
mov dword [ebp - 0x6fd8], eax
call fcn.00405820
lea ecx, [ebp - 0x2818]
mov dword [ebp - 0x6fd4], eax
call fcn.00405820
mov dword [ebp - 0x6fd0], eax
mov al, byte [ebp - 0x6f81]
mov byte [ebp - 0x6fcc], al
mov eax, dword [ebp - 0x6f7c]
movups xmm0, xmmword [ebp - 0x6fd8]
lea ecx, [eax + 0x2f8]
movups xmmword [eax + 0x1a8], xmm0
call fcn.004f05d0
mov esi, dword [ebp - 0x6f7c]
add esi, 0x248
mov ecx, esi
call fcn.00452100
mov ecx, dword [ebp - 0x6f7c]
push 0
lea ecx, [ecx + 0x230]
call fcn.00451b60
push 0x58a340
mov ecx, esi
call fcn.00451f40
push 1
mov ecx, esi
call fcn.00454640
mov eax, dword [ebp - 0x6f7c]
xor ecx, ecx
test edi, edi
push 4
setne cl
inc ecx
add ecx, dword [eax + 0x30]
mov dword [ebp - 0x6fac], ecx
lea ecx, [ebp - 0x6d4c]
call fcn.004093c0
push 8
push 0x5931dc
lea ecx, [ebp - 0x6d4c]
call fcn.00401540
push 8
lea ecx, [ebp - 0x6dfc]
mov byte [ebp - 4], 0x28
call fcn.00401750
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x6dfc]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.0051eb20
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2984]
mov edi, dword [ebp - 0x6dfc]
push 0xc
mov dword [ebp - 0x6fa8], edi
call fcn.00401e00
push 1
push 0x575d98
lea ecx, [ebp - 0x2984]
call fcn.00404c90
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov byte [ebp - 4], 0x2a
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4c0b04
add eax, 0x114
mov dword [ebp - 0x6fcc], eax
nop dword [eax]
push esi
mov ecx, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
mov ecx, edi
call fcn.00405010
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6fcc]
cmp esi, ecx
jb 0x4c0ad0
mov edi, dword [ebp - 0x6fa8]
lea eax, [ecx + ecx*2]
push 0x58da98
lea ecx, [edi + eax*4]
call fcn.00405010
cmp dword [ebp - 0x6fdc], 0
je 0x4c0b37
mov eax, dword [ebp - 0x6f7c]
push 0x58da98
mov eax, dword [eax + 0x30]
inc eax
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.00405010
push 4
lea ecx, [ebp - 0x2574]
call fcn.004093c0
lea ecx, [ebp - 0x2574]
call fcn.0040c910
push 0x38
lea ecx, [ebp - 0x21e0]
mov byte [ebp - 4], 0x2b
call fcn.00401e20
lea ecx, [ebp - 0x21e0]
call fcn.00401e30
mov ecx, dword [ebp - 0x6f7c]
mov byte [ebp - 4], 0x2c
call fcn.004eb540
test al, al
jne 0x4c359b
mov eax, dword [ebp - 0x6f7c]
test dword [eax + 0x34], 0x400
jne 0x4c359b
push 0
push 0x59321c
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x59324c
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00438b50
push 8
lea ecx, [ebp - 0x6d54]
call fcn.00401750
push dword [ebp - 0x6fac]
lea ecx, [ebp - 0x6d54]
call fcn.0051eb20
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov byte [ebp - 4], 0x2d
mov edi, dword [ebp - 0x6d54]
mov dword [ebp - 0x6fa0], edi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4c0c60
add eax, 0x104
mov dword [ebp - 0x6fcc], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x593278
push esi
mov ecx, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push str.HKU_
mov ecx, edi
call fcn.00405430
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6fcc]
cmp esi, ecx
jb 0x4c0c10
mov edi, dword [ebp - 0x6fa0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x585c58
push dword [ebp - 0x6fc4]
lea eax, [ecx + ecx*2]
lea ecx, [edi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4c0cc7
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0
mov eax, dword [eax + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x585c58
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.00405430
push 4
lea ecx, [ebp - 0x2230]
call fcn.004093c0
lea ecx, [ebp - 0x2230]
call fcn.0040c910
push 4
lea ecx, [ebp - 0x1fe8]
mov byte [ebp - 4], 0x2e
call fcn.004093c0
lea ecx, [ebp - 0x1fe8]
call fcn.0040c910
push 0xc
lea ecx, [ebp - 0x23d0]
mov byte [ebp - 4], 0x2f
call fcn.00401e00
lea ecx, [ebp - 0x23d0]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 0x30
call fcn.00401e00
lea ecx, [ebp - 0x2120]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x1f98]
mov byte [ebp - 4], 0x31
call fcn.00401e00
lea ecx, [ebp - 0x1f98]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0x32
call fcn.00401e00
lea ecx, [ebp - 0x2068]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x23dc]
mov byte [ebp - 4], 0x33
call fcn.00401e00
lea ecx, [ebp - 0x23dc]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x22dc]
mov byte [ebp - 4], 0x34
call fcn.00401e00
lea ecx, [ebp - 0x22dc]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2148]
mov byte [ebp - 4], 0x35
call fcn.00401e00
lea ecx, [ebp - 0x2148]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2108]
mov byte [ebp - 4], 0x36
call fcn.00401e00
lea ecx, [ebp - 0x2108]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x231c]
mov byte [ebp - 4], 0x37
call fcn.00401e00
lea ecx, [ebp - 0x231c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x28e8]
mov byte [ebp - 4], 0x38
call fcn.00401e00
lea ecx, [ebp - 0x28e8]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x27a4]
mov byte [ebp - 4], 0x39
call fcn.00401e00
lea ecx, [ebp - 0x27a4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x28dc]
mov byte [ebp - 4], 0x3a
call fcn.00401e00
lea ecx, [ebp - 0x28dc]
call fcn.00404bc0
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x3b
lea ecx, [ecx + 0x140]
push 0x58da24
mov dword [ebp - 0x2350], 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x2780]
call fcn.00405430
push 1
lea ecx, [ebp - 0x2780]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402090
push 1
lea ecx, [ebp - 0x21e0]
call fcn.00402080
mov esi, dword [ebp - 0x2364]
xor edi, edi
mov dword [ebp - 0x6f9c], edi
mov dword [ebp - 0x6fa4], esi
cmp dword [ebp - 0x6fac], edi
jbe 0x4c2035
mov eax, dword [ebp - 0x6f7c]
lea ecx, [eax + 0x33c]
mov dword [ebp - 0x6f8c], ecx
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f78], ecx
jmp 0x4c0f06
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.004eb540
test al, al
jne 0x4c2035
movd xmm1, edi
mov eax, edi
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
addsd xmm1, qword [eax*8 + 0x5ab630]
mov eax, dword [ebp - 0x6fac]
mulsd xmm1, qword [0x5ab0d0]
movd xmm0, eax
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x5ab630]
divsd xmm1, xmm0
addsd xmm1, qword [0x5ab090]
cvttsd2si eax, xmm1
push eax
mov eax, dword [ebp - 0x6f7c]
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0043b930
lea eax, [edi + edi*2]
shl eax, 2
mov dword [ebp - 0x6fb4], eax
add eax, dword [ebp - 0x6fa0]
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2230]
call fcn.0040c940
test al, al
je 0x4c2022
mov ecx, dword [ebp - 0x6f7c]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
call fcn.004eb540
test al, al
jne 0x4c2022
nop dword [eax]
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x2230]
call fcn.0040cfc0
test al, al
je 0x4c201c
mov ecx, dword [ebp - 0x6fcc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x23d0]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x23d0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fe8]
call fcn.0040c940
test al, al
je 0x4c2008
lea eax, [ebp - 0x2120]
push eax
push 0x57b0a8
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
test al, al
je 0x4c2008
lea eax, [ebp - 0x6d04]
push eax
push 0x5932e4
lea ecx, [ebp - 0x1fe8]
call fcn.0040cd00
test al, al
je 0x4c108c
cmp dword [ebp - 0x6d04], 1
je 0x4c2008
lea eax, [ebp - 0x23dc]
push eax
push 0x593304
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
test al, al
je 0x4c10ba
lea ecx, [ebp - 0x23dc]
call fcn.004053c0
test eax, eax
jne 0x4c2008
lea eax, [ebp - 0x23dc]
push eax
push 0x593320
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
test al, al
je 0x4c1135
push 0x593338
lea ecx, [ebp - 0x23dc]
call fcn.004050d0
test al, al
jne 0x4c2008
push 0x593348
lea ecx, [ebp - 0x23dc]
call fcn.004050d0
test al, al
jne 0x4c2008
push 0x593358
lea ecx, [ebp - 0x23dc]
call fcn.004050d0
test al, al
jne 0x4c2008
push 0x59336c
lea ecx, [ebp - 0x23dc]
call fcn.004050d0
test al, al
jne 0x4c2008
lea eax, [ebp - 0x1f98]
push eax
push 0x59338c
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
lea eax, [ebp - 0x22dc]
push eax
push 0x585cf0
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
test al, al
jne 0x4c117a
lea ecx, [ebp - 0x1f98]
call fcn.004053c0
test eax, eax
je 0x4c2008
lea eax, [ebp - 0x2148]
push eax
push 0x5933ac
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
test al, al
je 0x4c11a4
lea ecx, [ebp - 0x2148]
call fcn.004053c0
test eax, eax
jne 0x4c11b4
push 0x58da84
lea ecx, [ebp - 0x2148]
call fcn.00405010
lea eax, [ebp - 0x2120]
push eax
lea ecx, [ebp - 0x2108]
call fcn.00405020
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575d60
lea ecx, [ebp - 0x2108]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x5933c0
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
mov byte [ebp - 0x6f81], al
test al, al
jne 0x4c1315
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2108]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x5933c0
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
mov byte [ebp - 0x6f81], al
test al, al
jne 0x4c1315
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x576604
lea ecx, [ebp - 0x2108]
call fcn.00406ef0
cmp eax, 4
jl 0x4c1422
dec eax
lea ecx, [ebp - 0x2108]
push eax
call fcn.00406c90
cmp byte [eax + 8], 0
je 0x4c1415
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2108]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x5933c0
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
mov byte [ebp - 0x6f81], al
test al, al
je 0x4c1281
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575d98
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2984]
call fcn.00407230
cmp byte [ebp - 0x6f81], 0
jne 0x4c13aa
lea eax, [ebp - 0x2350]
push eax
lea eax, [ebp - 0x27a4]
push eax
lea ecx, [ebp - 0x23d0]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.004e45c0
test al, al
je 0x4c2008
push 0
lea ecx, [ebp - 0x23d0]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
lea eax, [ebp - 0x27a4]
push eax
call fcn.004df9c0
test al, al
je 0x4c2008
mov byte [ebp - 0x6f81], 2
push 0
push str.Programs
lea ecx, [ebp - 0x2120]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.004de890
test al, al
jne 0x4c2008
lea ecx, [ebp - 0x1f98]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4c14c4
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405cb0
push 0
push 0
push 0x575cb0
push 0x576600
lea ecx, [ebp - 0x1f98]
call fcn.004078d0
jmp 0x4c1a9d
cmp byte [ebp - 0x6f81], 0
jne 0x4c1315
lea ecx, [ebp - 0x2108]
call fcn.00405370
lea ecx, [ebp - 0x2120]
call fcn.004053c0
push 0
push 1
push 1
push 0
push 0x5933d4
lea ecx, [ebp - 0x2120]
call fcn.00406ef0
test eax, eax
jne 0x4c14a6
push eax
push 1
push 1
push eax
push 0x5933e8
lea ecx, [ebp - 0x2120]
call fcn.00406ef0
test eax, eax
jne 0x4c14a6
push eax
push 1
push 1
push eax
push 0x59340c
lea ecx, [ebp - 0x2120]
call fcn.00406ef0
test eax, eax
jne 0x4c14a6
push eax
push 1
push 1
push eax
push 0x59342c
lea ecx, [ebp - 0x2120]
call fcn.00406ef0
test eax, eax
je 0x4c134e
lea eax, [ebp - 0x2120]
mov byte [ebp - 0x6f81], 2
push eax
lea ecx, [ebp - 0x2108]
call fcn.00405020
jmp 0x4c13aa
cmp dword [ebp - 0x2350], 0
je 0x4c1586
lea eax, [ebp - 0x6d04]
mov dword [ebp - 0x6d04], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
push eax
push 0x59338c
push dword [ebp - 0x6cec]
call dword [0x556878]
push 0
push 1
push 1
push 0
push 0x5766ec
lea ecx, [ebp - 0x1f98]
call fcn.00406ef0
test eax, eax
jne 0x4c1586
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x593454
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23dc]
push 0x593480
push dword [ebp - 0x6fc4]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x23dc]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c1586
lea eax, [ebp - 0x1f98]
push eax
push 0x59338c
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
lea ecx, [ebp - 0x1f98]
call fcn.004053c0
cmp eax, 0xa
jle 0x4c15a3
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405cb0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
call dword [0x5564d0]
test eax, eax
jne 0x4c1a9d
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2708]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c1a9d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x26fc]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c1a9d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x26f0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c1a9d
lea ecx, [ebp - 0x2148]
call fcn.004053c0
cmp eax, 4
jle 0x4c17b3
push 0
push 1
push 1
push 0
push 0x593524
lea ecx, [ebp - 0x2148]
call fcn.00406ef0
cmp eax, 1
je 0x4c17b3
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2148]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x26f0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c1a9d
mov eax, dword [ebp - 0x6f7c]
cmp edi, dword [eax + 0x30]
jae 0x4c1a15
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x226c]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c1a9d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2160]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c1a9d
lea ecx, [ebp - 0x2148]
call fcn.004053c0
cmp eax, 4
jle 0x4c1a15
push 0
push 1
push 1
push 0
push 0x593524
lea ecx, [ebp - 0x2148]
call fcn.00406ef0
cmp eax, 1
je 0x4c1a15
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2148]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x226c]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c1a9d
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2148]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2160]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c1a9d
lea ecx, [ebp - 0x22dc]
call fcn.004053c0
lea ecx, [ebp - 0x1f98]
cmp eax, 0xa
jle 0x4c1a98
lea eax, [ebp - 0x22dc]
push eax
call fcn.00405020
push 0
push 0
push 0x575cb0
push 0x576600
lea ecx, [ebp - 0x1f98]
call fcn.004078d0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405cb0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x5766ec
lea ecx, [ebp - 0x1f98]
call fcn.00406ef0
cmp eax, 2
jle 0x4c1a89
add eax, 0xfffffffe
lea ecx, [ebp - 0x1f98]
push eax
call fcn.00406d30
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405a70
jmp 0x4c1a9d
call fcn.00405370
lea ecx, [ebp - 0x1f98]
call fcn.00405820
mov ecx, eax
call fcn.00415420
test al, al
je 0x4c1abe
lea ecx, [ebp - 0x1f98]
call fcn.00405370
lea eax, [ebp - 0x2068]
mov dword [ebp - 0x6fa4], 0
push eax
push 0x58554c
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
test al, al
je 0x4c1b1b
push 0
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
push 0x104
lea ecx, [ebp - 0x2068]
call fcn.00405dd0
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
call dword [0x5564f0]
mov dword [ebp - 0x6fa4], eax
jmp 0x4c1b71
cmp dword [ebp - 0x2350], 0
je 0x4c1b7e
lea eax, [ebp - 0x6d64]
mov dword [ebp - 0x6d64], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2068]
call fcn.00405dd0
push eax
push 0x59353c
push dword [ebp - 0x6cec]
call dword [0x556878]
push dword [ebp - 0x6d64]
lea ecx, [ebp - 0x2068]
call fcn.00405330
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x2350], 0
jne 0x4c1cc8
lea ecx, [ebp - 0x2068]
call fcn.004053c0
test eax, eax
jne 0x4c1cc8
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00405820
push eax
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.00405dd0
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00405820
push eax
call dword [0x556408]
lea ecx, [ebp - 0x2068]
call fcn.004053c0
test eax, eax
je 0x4c1cc8
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2068]
call fcn.00406ef0
test eax, eax
je 0x4c1c0f
add eax, 3
lea ecx, [ebp - 0x2068]
push eax
call fcn.00406c90
lea ecx, [ebp - 0x2068]
call fcn.00405820
mov edi, dword [0x5564e4]
push eax
call edi
test eax, eax
jne 0x4c1cc8
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5766ec
lea ecx, [ebp - 0x2068]
call fcn.00406ef0
cmp eax, 2
jle 0x4c1c56
add eax, 0xfffffffe
lea ecx, [ebp - 0x2068]
push eax
call fcn.00406d30
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
call edi
test eax, eax
jne 0x4c1cc8
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x576600
lea ecx, [ebp - 0x2068]
call fcn.00406ef0
test eax, eax
je 0x4c1c8f
push eax
lea ecx, [ebp - 0x2068]
call fcn.00406d30
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
call edi
test eax, eax
jne 0x4c1cc8
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x576604
lea ecx, [ebp - 0x2068]
call fcn.00406ef0
test eax, eax
je 0x4c1cc8
push eax
lea ecx, [ebp - 0x2068]
call fcn.00406d30
push 0x5c
lea ecx, [ebp - 0x1f98]
call fcn.00407d60
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2120]
push 0
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
call fcn.00405820
push eax
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0043a3d0
mov edi, eax
cmp edi, 0xffffffff
je 0x4c2002
push 1
lea ecx, [ebp - 0x2148]
call fcn.00405820
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov ecx, dword [eax + 8]
push dword [ecx + 0xa0]
mov ecx, dword [eax + 4]
call fcn.0043b750
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4c1d83
push 0
push 0x10
push dword [ebp - 0x6fa4]
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0043aee0
mov ecx, dword [ebp - 0x6fa8]
add ecx, dword [ebp - 0x6fb4]
push 2
call fcn.00405820
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0043b750
mov eax, dword [ebp - 0x6f7c]
push edi
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0043acb0
lea ecx, [ebp - 0x2108]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
call fcn.004dcef0
test eax, eax
jne 0x4c1e1b
cmp byte [ebp - 0x6f81], 1
mov ecx, 2
movzx eax, byte [ebp - 0x6f81]
cmove eax, ecx
mov byte [ebp - 0x6f81], al
push edi
lea ecx, [ebp - 0x231c]
call fcn.00406470
lea ecx, [ebp - 0x23d0]
call fcn.00405820
push eax
push 0x58ce44
lea ecx, [ebp - 0x231c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x57b708
lea ecx, [ebp - 0x231c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
lea ecx, [ebp - 0x2108]
call fcn.004053c0
test eax, eax
je 0x4c1ecf
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x58da5c
lea ecx, [ebp - 0x231c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
push 0x5779b8
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x593554
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
lea ecx, [ebp - 0x22dc]
call fcn.004053c0
test eax, eax
je 0x4c1f06
lea ecx, [ebp - 0x22dc]
call fcn.00405820
push eax
push 0x58da38
lea ecx, [ebp - 0x231c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
mov ecx, dword [ebp - 0x6fa8]
add ecx, dword [ebp - 0x6fb4]
call fcn.00405820
push eax
push 0x58ce60
lea ecx, [ebp - 0x231c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
cmp dword [ebp - 0x2350], 0
je 0x4c1f5f
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x231c]
push 0x58da6c
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
mov eax, dword [ebp - 0x6f7c]
mov ecx, 0x593594
mov edi, dword [ebp - 0x6f7c]
push 0
push 0
inc dword [eax + 0x24]
xor eax, eax
cmp byte [ebp - 0x6f81], 1
sete al
add dword [edi + 0x28], eax
mov eax, 0x593580
cmp byte [ebp - 0x6f81], 1
cmovne eax, ecx
mov ecx, dword [ebp - 0x6fa8]
add ecx, dword [ebp - 0x6fb4]
push eax
push 0x592c5c
call fcn.00405820
push eax
push 0x5935ac
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x5935d0
lea ecx, [ebp - 0x23d0]
call fcn.00405820
push eax
push 0x5935f4
lea ecx, [ebp - 0x2120]
call fcn.00405820
push eax
push 0x59361c
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov edi, dword [ebp - 0x6f9c]
mov ecx, dword [ebp - 0x6f7c]
inc esi
call fcn.004eb540
test al, al
je 0x4c0fd0
mov dword [ebp - 0x6fa4], esi
inc edi
mov dword [ebp - 0x6f9c], edi
cmp edi, dword [ebp - 0x6fac]
jb 0x4c0f00
mov ecx, dword [ebp - 0x6f7c]
call fcn.004eb540
test al, al
je 0x4c20f6
lea ecx, [ebp - 0x28dc]
call fcn.00405360
lea ecx, [ebp - 0x27a4]
call fcn.00405360
lea ecx, [ebp - 0x28e8]
call fcn.00405360
lea ecx, [ebp - 0x231c]
call fcn.00405360
lea ecx, [ebp - 0x2108]
call fcn.00405360
lea ecx, [ebp - 0x2148]
call fcn.00405360
lea ecx, [ebp - 0x22dc]
call fcn.00405360
lea ecx, [ebp - 0x23dc]
call fcn.00405360
lea ecx, [ebp - 0x2068]
call fcn.00405360
lea ecx, [ebp - 0x1f98]
call fcn.00405360
lea ecx, [ebp - 0x2120]
call fcn.00405360
lea ecx, [ebp - 0x23d0]
call fcn.00405360
lea ecx, [ebp - 0x1fe8]
call fcn.0040c980
lea ecx, [ebp - 0x2230]
call fcn.0040c980
lea ecx, [ebp - 0x6d54]
mov byte [ebp - 4], 0x2c
call fcn.0051ea80
jmp 0x4c35a7
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x230], 0
je 0x4c2124
mov ecx, dword [ebp - 0x6f7c]
add eax, 0x230
push 0
push eax
lea ecx, [ecx + 0x248]
call fcn.00454770
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.004eb540
test al, al
jne 0x4c2048
push 0xc
lea ecx, [ebp - 0x2a0c]
call fcn.00401e00
lea ecx, [ebp - 0x2a0c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2714]
mov byte [ebp - 4], 0x3c
call fcn.00401e00
lea ecx, [ebp - 0x2714]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x26e4]
mov byte [ebp - 4], 0x3d
call fcn.00401e00
lea ecx, [ebp - 0x26e4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x27e8]
mov byte [ebp - 4], 0x3e
call fcn.00401e00
lea ecx, [ebp - 0x27e8]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2798]
mov byte [ebp - 4], 0x3f
call fcn.00401e00
lea ecx, [ebp - 0x2798]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x278c]
mov byte [ebp - 4], 0x40
call fcn.00401e00
lea ecx, [ebp - 0x278c]
call fcn.00404bc0
mov eax, dword [ebp - 0x6f7c]
mov edi, 1
mov byte [ebp - 4], 0x41
lea ecx, [eax + 0x334]
mov dword [ebp - 0x6f8c], edi
mov dword [ebp - 0x6fcc], ecx
cmp dword [ecx], edi
jbe 0x4c2f1a
mov esi, dword [ebp - 0x6fcc]
lea ecx, [eax + 0x33c]
mov dword [ebp - 0x6fb4], ecx
mov ecx, eax
call fcn.004eb540
test al, al
jne 0x4c2f0e
lea eax, [edi + edi*4]
xor edx, edx
add eax, eax
div dword [esi]
add eax, 0x10
movd xmm0, eax
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x5ab630]
cvttsd2si eax, xmm0
push eax
mov eax, dword [ebp - 0x6f7c]
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0043b930
mov ecx, dword [ebp - 0x6f7c]
push edi
call fcn.004e0760
test al, al
je 0x4c2ef9
mov ecx, dword [ebp - 0x6f7c]
push edi
lea ecx, [ecx + 0x310]
call fcn.0051ed70
push eax
lea ecx, [ebp - 0x23d0]
call fcn.00405020
push 0
push 0x20019
lea ecx, [ebp - 0x23d0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fe8]
call fcn.0040c940
test al, al
je 0x4c2ef9
lea eax, [ebp - 0x2120]
push eax
push 0x57b0a8
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
test al, al
je 0x4c2ef9
lea eax, [ebp - 0x1f98]
push eax
push 0x59338c
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
lea eax, [ebp - 0x22dc]
push eax
push 0x585cf0
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
test al, al
jne 0x4c231c
lea ecx, [ebp - 0x1f98]
call fcn.004053c0
test eax, eax
je 0x4c2ef9
lea eax, [ebp - 0x2148]
push eax
push 0x5933ac
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
test al, al
je 0x4c2346
lea ecx, [ebp - 0x2148]
call fcn.004053c0
test eax, eax
jne 0x4c2356
push 0x58da84
lea ecx, [ebp - 0x2148]
call fcn.00405010
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x57db44
lea ecx, [ebp - 0x2120]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2798]
call fcn.00407230
push 0
push 1
push 1
push 0
push str.msiexec
lea ecx, [ebp - 0x22dc]
call fcn.00406ef0
test eax, eax
setne byte [ebp - 0x6f78]
test eax, eax
jne 0x4c23e4
lea eax, [ebp - 0x6d04]
push eax
push 0x593648
lea ecx, [ebp - 0x1fe8]
call fcn.0040cd00
test al, al
je 0x4c23e4
mov eax, dword [ebp - 0x6f78]
mov ecx, 1
cmp dword [ebp - 0x6d04], 1
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f78], eax
lea eax, [ebp - 0x2120]
push eax
lea ecx, [ebp - 0x2108]
call fcn.00405020
lea ecx, [ebp - 0x1f98]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4c2437
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405cb0
push 0
push 0
push 0x575cb0
push 0x576600
lea ecx, [ebp - 0x1f98]
call fcn.004078d0
jmp 0x4c2a63
cmp byte [ebp - 0x6f78], 0
je 0x4c24f9
lea eax, [ebp - 0x6d04]
mov dword [ebp - 0x6d04], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
push eax
push 0x59338c
push dword [ebp - 0x6cec]
call dword [0x556878]
push 0
push 1
push 1
push 0
push 0x5766ec
lea ecx, [ebp - 0x1f98]
call fcn.00406ef0
test eax, eax
jne 0x4c24f9
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x593454
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23dc]
push 0x593480
push dword [ebp - 0x6fc4]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x23dc]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c24f9
lea eax, [ebp - 0x1f98]
push eax
push 0x59338c
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
lea ecx, [ebp - 0x1f98]
call fcn.004053c0
cmp eax, 0xa
jle 0x4c2516
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405cb0
push 0
push 1
push 1
push 0
push 0x5766ec
lea ecx, [ebp - 0x1f98]
call fcn.00406ef0
test eax, eax
jne 0x4c2a63
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2708]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c2a63
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x26fc]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c2a63
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x26f0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c2a63
lea ecx, [ebp - 0x2148]
call fcn.004053c0
cmp eax, 4
jle 0x4c272c
push 0
push 1
push 1
push 0
push 0x593524
lea ecx, [ebp - 0x2148]
call fcn.00406ef0
cmp eax, 1
je 0x4c272c
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2148]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x26f0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c2a63
push 1
push 0x575ca0
push dword [ebp - 0x6d4c]
lea ecx, [ebp - 0x23d0]
push 1
call fcn.00405820
push eax
lea ecx, [ebp - 0x27e8]
call fcn.004053e0
mov ecx, eax
call fcn.004088e0
test eax, eax
je 0x4c29ce
lea ecx, [ebp - 0x27e8]
call fcn.00405820
lea edx, [ebp - 0x2714]
mov ecx, eax
call fcn.00444190
test al, al
je 0x4c29ce
lea ecx, [ebp - 0x27e8]
call fcn.00405820
lea edx, [ebp - 0x26e4]
mov ecx, eax
call fcn.004428f0
test al, al
je 0x4c29ce
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c29de
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2160]
call fcn.00405820
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c29de
lea ecx, [ebp - 0x2148]
call fcn.004053c0
cmp eax, 4
jle 0x4c29de
push 0
push 1
push 1
push 0
push 0x593524
lea ecx, [ebp - 0x2148]
call fcn.00406ef0
cmp eax, 1
je 0x4c29de
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2148]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
test al, al
jne 0x4c29de
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2148]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2160]
call fcn.00405820
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405430
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.00405dd0
mov edx, 0x400
mov ecx, eax
call fcn.0041c970
jmp 0x4c29de
push 0x58da98
lea ecx, [ebp - 0x2714]
call fcn.00405010
lea ecx, [ebp - 0x22dc]
call fcn.004053c0
cmp eax, 0xa
jle 0x4c2a63
lea eax, [ebp - 0x22dc]
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00405020
push 0
push 0
push 0x575cb0
push 0x576600
lea ecx, [ebp - 0x1f98]
call fcn.004078d0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405cb0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x5766ec
lea ecx, [ebp - 0x1f98]
call fcn.00406ef0
cmp eax, 2
jle 0x4c2a56
add eax, 0xfffffffe
lea ecx, [ebp - 0x1f98]
push eax
call fcn.00406d30
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00405a70
lea ecx, [ebp - 0x1f98]
call fcn.00405820
mov ecx, eax
call fcn.00415420
test al, al
je 0x4c2a84
lea ecx, [ebp - 0x1f98]
call fcn.00405370
lea eax, [ebp - 0x2068]
xor edi, edi
push eax
push 0x58554c
lea ecx, [ebp - 0x1fe8]
call fcn.0040cb10
test al, al
je 0x4c2f70
push edi
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
push 0x104
lea ecx, [ebp - 0x2068]
call fcn.00405dd0
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
call dword [0x5564f0]
cmp byte [ebp - 0x6f78], 0
mov edi, eax
jne 0x4c2c33
lea ecx, [ebp - 0x2068]
call fcn.004053c0
test eax, eax
jne 0x4c2c33
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00405820
push eax
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.00405dd0
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00405820
push eax
call dword [0x556408]
lea ecx, [ebp - 0x2068]
call fcn.004053c0
test eax, eax
je 0x4c2c33
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2068]
call fcn.00406ef0
test eax, eax
je 0x4c2b74
add eax, 3
lea ecx, [ebp - 0x2068]
push eax
call fcn.00406c90
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
jne 0x4c2c33
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5766ec
lea ecx, [ebp - 0x2068]
call fcn.00406ef0
cmp eax, 2
jle 0x4c2bb9
add eax, 0xfffffffe
lea ecx, [ebp - 0x2068]
push eax
call fcn.00406d30
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
jne 0x4c2c33
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x576600
lea ecx, [ebp - 0x2068]
call fcn.00406ef0
test eax, eax
je 0x4c2bf6
push eax
lea ecx, [ebp - 0x2068]
call fcn.00406d30
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
jne 0x4c2c33
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x576604
lea ecx, [ebp - 0x2068]
call fcn.00406ef0
test eax, eax
je 0x4c2c33
push eax
lea ecx, [ebp - 0x2068]
call fcn.00406d30
push 0x5c
lea ecx, [ebp - 0x1f98]
call fcn.00407d60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2108]
mov byte [ebp - 0x6f9c], 1
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0x5933c0
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
lea eax, [ebp - 0x6d04]
push eax
push 0x59366c
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4c2cd8
mov eax, dword [ebp - 0x6f9c]
mov ecx, 2
cmp dword [ebp - 0x6d04], 0
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f9c], eax
push edi
lea ecx, [ebp - 0x2068]
call fcn.00405820
push eax
xor eax, eax
lea ecx, [ebp - 0x2714]
cmp byte [ebp - 0x6f9c], 1
push 0
sete al
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2148]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2120]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
mov eax, dword [ebp - 0x6f7c]
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
call fcn.004b0c50
push eax
lea ecx, [ebp - 0x231c]
call fcn.00406470
lea ecx, [ebp - 0x23d0]
call fcn.00405820
push eax
push 0x58ce44
lea ecx, [ebp - 0x231c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x57b708
lea ecx, [ebp - 0x231c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
lea ecx, [ebp - 0x2108]
call fcn.004053c0
test eax, eax
je 0x4c2dea
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x58da5c
lea ecx, [ebp - 0x231c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
push 0x5779b8
lea ecx, [ebp - 0x2108]
call fcn.00405820
push eax
push 0x593554
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
lea ecx, [ebp - 0x22dc]
call fcn.004053c0
test eax, eax
je 0x4c2e21
lea ecx, [ebp - 0x22dc]
call fcn.00405820
push eax
push 0x58da38
lea ecx, [ebp - 0x231c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
lea ecx, [ebp - 0x2714]
call fcn.00405820
push eax
push 0x58ce60
lea ecx, [ebp - 0x231c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
cmp byte [ebp - 0x6f78], 0
je 0x4c2e74
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x231c]
push 0x58da6c
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402c10
cmp byte [ebp - 0x6f9c], 1
mov ecx, 0x593594
push 0
push 0
mov eax, 0x593580
cmovne eax, ecx
lea ecx, [ebp - 0x2714]
push eax
push 0x592c5c
call fcn.00405820
push eax
push 0x5935ac
lea ecx, [ebp - 0x1f98]
call fcn.00405820
push eax
push 0x5935d0
lea ecx, [ebp - 0x23d0]
call fcn.00405820
push eax
push 0x5935f4
lea ecx, [ebp - 0x2120]
call fcn.00405820
push eax
push 0x59361c
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov edi, dword [ebp - 0x6f8c]
mov eax, dword [ebp - 0x6f7c]
inc edi
mov dword [ebp - 0x6f8c], edi
cmp edi, dword [esi]
jb 0x4c2212
mov eax, dword [ebp - 0x6f7c]
mov esi, dword [ebp - 0x6fa4]
mov ecx, eax
call fcn.004eb540
test al, al
je 0x4c2fcf
lea ecx, [ebp - 0x278c]
call fcn.00405360
lea ecx, [ebp - 0x2798]
call fcn.00405360
lea ecx, [ebp - 0x27e8]
call fcn.00405360
lea ecx, [ebp - 0x26e4]
call fcn.00405360
lea ecx, [ebp - 0x2714]
call fcn.00405360
lea ecx, [ebp - 0x2a0c]
call fcn.00405360
jmp 0x4c2048
cmp byte [ebp - 0x6f78], 0
je 0x4c2ae3
lea eax, [ebp - 0x6d68]
mov dword [ebp - 0x6d68], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2068]
call fcn.00405dd0
push eax
push 0x59353c
push dword [ebp - 0x6cec]
call dword [0x556878]
push dword [ebp - 0x6d68]
lea ecx, [ebp - 0x2068]
call fcn.00405330
xor ecx, ecx
mov word [eax], cx
jmp 0x4c2c33
lea ecx, [ebp - 0x2798]
call fcn.004053c0
cmp eax, 6
jle 0x4c308c
push 0x2000
lea eax, [ebp - 0x6dbc]
mov dword [ebp - 0x6dbc], 0x1000
push eax
push 0
push 0
push 0x1000
lea ecx, [ebp - 0x278c]
call fcn.00405dd0
push eax
lea ecx, [ebp - 0x2798]
call fcn.00405820
push eax
call dword [0x5564d4]
test eax, eax
je 0x4c3036
lea eax, [ebp - 0x2798]
push eax
lea ecx, [ebp - 0x278c]
call fcn.00405020
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x593688
lea ecx, [ebp - 0x278c]
call fcn.004075e0
push 0
push 0
push 0x57ac4c
push 0x577e90
push 6
lea ecx, [ebp - 0x278c]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.0044a820
push eax
lea ecx, [ebp - 0x2574]
call fcn.00450590
mov eax, dword [ebp - 0x6f7c]
push 0x1e
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0043b930
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x593708
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00438b50
push 0xc
lea ecx, [ebp - 0x23b8]
call fcn.00401e00
lea ecx, [ebp - 0x23b8]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2500]
mov byte [ebp - 4], 0x42
call fcn.00401e00
lea ecx, [ebp - 0x2500]
call fcn.00404bc0
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x59373c
lea ecx, [ecx + 0x33c]
mov byte [ebp - 4], 0x43
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 4
lea ecx, [ebp - 0x2364]
call fcn.004093c0
lea ecx, [ebp - 0x2364]
call fcn.0040c910
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x44
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c3575
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fb4], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0040cfc0
test al, al
je 0x4c3575
mov eax, dword [ebp - 0x6f7c]
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f8c], ecx
jmp 0x4c31b9
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.004eb540
test al, al
jne 0x4c3575
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575d98
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x2500]
push 0x575d98
call fcn.00405430
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2500]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2984]
call fcn.00406ef0
test eax, eax
jne 0x4c354d
mov ecx, dword [ebp - 0x6f7c]
push eax
push str.Programs
push dword [ebp - 0x6cec]
call fcn.004de890
test al, al
jne 0x4c354d
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x2500]
xor edi, edi
call fcn.00405010
push 0x59374c
lea ecx, [ebp - 0x2500]
call fcn.00405200
test al, al
je 0x4c327d
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push str.__0
lea ecx, [ebp - 0x2500]
call fcn.00407230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2708]
call fcn.00405820
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00405430
lea ecx, [ebp - 0x23b8]
call fcn.0041c7a0
test al, al
je 0x4c32f4
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.004dc570
mov edi, eax
cmp dword [ebp - 0x6fdc], 0
je 0x4c3378
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x26fc]
call fcn.00405820
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00405430
lea ecx, [ebp - 0x23b8]
call fcn.0041c7a0
test al, al
je 0x4c3378
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.004dc570
add edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x26f0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00405430
lea ecx, [ebp - 0x23b8]
call fcn.0041c7a0
test al, al
je 0x4c33ef
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.004dc570
add edi, eax
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
cmp dword [eax + 0x30], esi
jbe 0x4c352e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x226c]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00405430
lea ecx, [ebp - 0x23b8]
call fcn.0041c7a0
test al, al
je 0x4c348f
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.004dc570
add edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00405820
push eax
push 0x575ca8
lea ecx, [ebp - 0x2160]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00405430
lea ecx, [ebp - 0x23b8]
call fcn.0041c7a0
test al, al
je 0x4c3518
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00405820
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.004dc570
add edi, eax
mov eax, dword [ebp - 0x6f7c]
inc esi
cmp esi, dword [eax + 0x30]
jb 0x4c3406
mov dword [ebp - 0x6fa4], esi
test edi, edi
jle 0x4c354d
push 0x5779b8
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x21e0]
push 0x593554
call fcn.00402c10
mov eax, dword [ebp - 0x6fb4]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fb4], eax
call fcn.0040cfc0
test al, al
jne 0x4c31b3
lea ecx, [ebp - 0x2364]
call fcn.0040c980
lea ecx, [ebp - 0x2500]
call fcn.00405360
lea ecx, [ebp - 0x23b8]
call fcn.00405360
jmp 0x4c2f29
mov eax, dword [ebp - 0x2364]
mov dword [ebp - 0x6fa4], eax
push 8
lea ecx, [ebp - 0x6e04]
call fcn.00401750
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x6e04]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.0051eb20
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x213c]
mov esi, dword [ebp - 0x6e04]
push 0xc
mov dword [ebp - 0x6fa0], esi
call fcn.00401e00
lea ecx, [ebp - 0x213c]
call fcn.00404bc0
mov ecx, edi
mov byte [ebp - 4], 0x46
call fcn.004eb540
test al, al
mov eax, edi
jne 0x4c5d6e
test dword [eax + 0x34], 0x400
jne 0x4c5d6e
push 0
push 0x593760
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x593790
push dword [eax + 0x38]
call fcn.00438b50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x23
push dword [eax + 0x34]
call fcn.0043b930
mov eax, edi
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4c36ba
mov edi, dword [ebp - 0x6fa0]
add eax, 0x104
mov dword [ebp - 0x6fcc], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5937c0
push esi
mov ecx, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push str.HKU_
mov ecx, edi
call fcn.00405430
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6fcc]
cmp esi, ecx
jb 0x4c3670
mov esi, dword [ebp - 0x6fa0]
lea eax, [ecx + ecx*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x593820
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
mov edi, dword [ebp - 0x6f7c]
je 0x4c3727
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x593820
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
push 0xc
lea ecx, [ebp - 0x2084]
call fcn.00401e00
lea ecx, [ebp - 0x2084]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2418]
mov byte [ebp - 4], 0x47
call fcn.00401e00
lea ecx, [ebp - 0x2418]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2824]
mov byte [ebp - 4], 0x48
call fcn.00401e00
lea ecx, [ebp - 0x2824]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x219c]
mov byte [ebp - 4], 0x49
call fcn.00401e00
lea ecx, [ebp - 0x219c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x234c]
mov byte [ebp - 4], 0x4a
call fcn.00401e00
lea ecx, [ebp - 0x234c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x258c]
mov byte [ebp - 4], 0x4b
call fcn.00401e00
lea ecx, [ebp - 0x258c]
call fcn.00404bc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x593880
push 0x575ca8
lea ecx, [edi + 0x140]
mov byte [ebp - 4], 0x4c
call fcn.00405820
push eax
lea ecx, [ebp - 0x2780]
call fcn.00405430
push 1
lea ecx, [ebp - 0x2780]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402090
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.0043a810
push 0
push 0x593898
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4c3be8
mov eax, dword [ebp - 0x6f7c]
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6fcc], ecx
mov ecx, dword [ebp - 0x6fa0]
sub ecx, esi
mov dword [ebp - 0x6f80], ecx
jmp 0x4c3896
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.004eb540
test al, al
jne 0x4c3be2
mov eax, dword [ebp - 0x6f7c]
mov edi, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp edi, dword [eax + 0x30]
jae 0x4c38e6
lea ecx, [ebp - 0x2720]
call fcn.00405820
mov ecx, dword [ebp - 0x6fcc]
push eax
push edi
call fcn.0051ea60
mov ecx, eax
jmp 0x4c38f1
push str._temp
lea ecx, [ebp - 0x25b0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2418]
call fcn.00405430
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fb4], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c3bda
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.0040d040
mov edi, dword [ebp - 0x6f7c]
test al, al
je 0x4c3bb0
nop dword [eax + eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c3baa
mov eax, dword [ebp - 0x6cec]
cmp word [eax], 0
je 0x4c3b8e
push 0
push 0x58abf4
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c3b8e
lea eax, [ebp - 0x2084]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4c3b8e
push 3
lea edx, [edi + 0x1a8]
mov dword [ebp - 0x6f9c], 0
lea ecx, [ebp - 0x2084]
call fcn.00411190
test al, al
je 0x4c3a66
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2418]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2084]
call fcn.00406ef0
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
mov dword [ebp - 0x6f9c], eax
push 0x57a658
call fcn.00405820
push eax
lea ecx, [ebp - 0x213c]
call fcn.00405430
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea eax, [ebp - 0x2084]
mov ecx, edi
push eax
call fcn.004df9c0
test al, al
mov ecx, 1
mov eax, dword [ebp - 0x6f9c]
cmovne eax, ecx
mov dword [ebp - 0x6f9c], eax
push 0
lea ecx, [ebp - 0x2084]
call fcn.00405820
push eax
push 0
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2084]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
push dword [ebp - 0x6cec]
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xb
push dword [eax + 0xa4]
call fcn.004b0c50
mov dword [ebp - 0x6fa4], eax
cmp eax, 0xffffffff
je 0x4c3b8e
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2084]
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
call fcn.00405820
push eax
push 0xb
push dword [ebp - 0x6fa4]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
lea eax, [ebp - 0x2084]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
cmp dword [ebp - 0x6f9c], 0
mov ecx, 0x592c44
push 0
push 0
push 0
push 0x575c8c
mov eax, 0x57b750
cmove eax, ecx
lea ecx, [ebp - 0x2084]
push eax
push 0x592c5c
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x5938dc
call fcn.00405820
push eax
push 0x592cbc
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f80]
push 0x5938f8
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040d040
test al, al
jne 0x4c3960
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4c3890
jmp 0x4c3be8
mov edi, dword [ebp - 0x6f7c]
jmp 0x4c3bb6
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c5d22
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4c3c63
mov edi, dword [ebp - 0x6fa0]
add eax, 0x10c
mov dword [ebp - 0x6f80], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2900]
call fcn.00405820
mov ecx, dword [ebp - 0x6f80]
push eax
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
mov ecx, edi
call fcn.00405430
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jb 0x4c3c17
lea eax, [ebp - 0x2948]
push eax
lea eax, [ecx + ecx*2]
mov ecx, dword [ebp - 0x6fa0]
lea ecx, [ecx + eax*4]
call fcn.00405020
push 0
push 0x593910
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
push 0x4c
lea ecx, [ebp - 0x2ba8]
call fcn.0041dbb0
lea ecx, [ebp - 0x2ba8]
call fcn.00410b90
mov eax, dword [ebp - 0x6f7c]
xor edi, edi
mov edx, dword [ebp - 0x6fa8]
mov esi, edx
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x6fb4], edi
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f78], edx
mov dword [ebp - 0x6fcc], ecx
mov ecx, dword [ebp - 0x6fa0]
sub ecx, edx
mov dword [ebp - 0x6f80], ecx
nop
mov ecx, eax
call fcn.004eb540
test al, al
jne 0x4c4160
mov eax, dword [ebp - 0x6f80]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add eax, esi
push 0
push 0x57ea0c
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2084]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x37b0]
call fcn.00411170
push 3
lea ecx, [ebp - 0x2084]
call fcn.00405820
push eax
lea ecx, [ebp - 0x37b0]
call fcn.00401350
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x4e
push 0
push 0
cmp edi, dword [eax + 0x30]
jae 0x4c3d91
lea ecx, [ebp - 0x2720]
call fcn.00405820
mov ecx, dword [ebp - 0x6fcc]
push eax
push edi
call fcn.0051ea60
mov ecx, eax
jmp 0x4c3d9c
push str._temp
lea ecx, [ebp - 0x25b0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2418]
call fcn.00405430
lea ecx, [ebp - 0x37b0]
call fcn.00401490
test al, al
je 0x4c4130
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c412a
push 1
lea ecx, [ebp - 0x37b0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x219c]
call fcn.00405010
push 0x581884
lea ecx, [ebp - 0x219c]
call fcn.004050d0
test al, al
jne 0x4c4117
push 0
push 0x58ac2c
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c4117
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x37b0]
call fcn.004014f0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x258c]
call fcn.00405430
lea eax, [ebp - 0x258c]
push eax
lea ecx, [ebp - 0x234c]
call fcn.00405020
push 0
push 0
lea ecx, [ebp - 0x37b0]
call fcn.00401500
mov edx, 0x592c28
mov ecx, eax
call fcn.00409490
test eax, eax
jne 0x4c3f5f
push eax
lea ecx, [ebp - 0x258c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2ba8]
call fcn.00410d30
test al, al
je 0x4c3f5f
push 0
lea ecx, [ebp - 0x2ba8]
call fcn.00410dd0
push eax
lea ecx, [ebp - 0x234c]
call fcn.00405010
lea ecx, [ebp - 0x2ba8]
call fcn.00410e50
mov ecx, eax
call fcn.004093d0
test eax, eax
je 0x4c3f18
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2ba8]
call fcn.00410e50
push eax
push 0x576604
lea ecx, [ebp - 0x234c]
call fcn.00407230
push 3
push 1
lea ecx, [ebp - 0x234c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2084]
call fcn.004053e0
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.00411190
test al, al
jne 0x4c3f71
push 0
lea ecx, [ebp - 0x2ba8]
call fcn.00410dd0
push eax
lea ecx, [ebp - 0x2084]
call fcn.00405010
jmp 0x4c3f71
lea eax, [ebp - 0x258c]
push eax
lea ecx, [ebp - 0x2084]
call fcn.00405020
push 0
push 0
push 0x575cb0
push 0x576600
lea ecx, [ebp - 0x2084]
call fcn.004078d0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2418]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2084]
call fcn.00406ef0
push 0
lea ecx, [ebp - 0x258c]
mov esi, eax
call fcn.00405820
push eax
lea eax, [ebp - 0x2084]
mov ecx, edi
push eax
call fcn.004df9c0
test al, al
lea ecx, [ebp - 0x2084]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00405820
push eax
push 0
push esi
lea ecx, [ebp - 0x2084]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push dword [eax + 0xa4]
call fcn.004b0c50
mov dword [ebp - 0x6f9c], eax
cmp eax, 0xffffffff
je 0x4c4111
push 0
push 0
push 0
test esi, esi
mov eax, 0x592c44
push 0x575c8c
mov ecx, 0x57b750
cmove ecx, eax
push ecx
push 0x592c5c
lea ecx, [ebp - 0x2084]
call fcn.00405820
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x593948
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
push 0x5938f8
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x37b0]
call fcn.004014f0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x2084]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2084]
call fcn.00405820
push eax
push 0
push 0xc
push dword [ebp - 0x6f9c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
jmp 0x4c4117
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x37b0]
call fcn.00401450
test al, al
jne 0x4c3dc6
mov edi, dword [ebp - 0x6fb4]
lea ecx, [ebp - 0x37b0]
mov byte [ebp - 4], 0x4d
call fcn.004013a0
mov eax, dword [ebp - 0x6f7c]
inc edi
add esi, 0xc
mov dword [ebp - 0x6fb4], edi
mov dword [ebp - 0x6f78], esi
cmp edi, dword [eax + 0x30]
jbe 0x4c3ce0
jmp 0x4c4166
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.004eb540
test al, al
jne 0x4c5d17
push 0
push 0x593960
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
push 0xc
lea ecx, [ebp - 0x2490]
call fcn.00401e00
lea ecx, [ebp - 0x2490]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x21a8]
mov byte [ebp - 4], 0x4f
call fcn.00401e00
lea ecx, [ebp - 0x21a8]
call fcn.00404bc0
push 4
lea ecx, [ebp - 0x6d10]
mov byte [ebp - 4], 0x50
call fcn.004093c0
lea ecx, [ebp - 0x6d10]
call fcn.0040c910
push 4
lea ecx, [ebp - 0x6d0c]
mov byte [ebp - 4], 0x51
call fcn.004093c0
lea ecx, [ebp - 0x6d0c]
call fcn.0040c910
lea eax, [ebp - 0x6d0c]
mov byte [ebp - 4], 0x52
mov esi, dword [0x556888]
push eax
push 0x5703a0
push 1
push 0
push 0x5703b0
call esi
test eax, eax
js 0x4c4e73
lea ecx, [ebp - 0x70a0]
call fcn.004011a0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70d0]
movups xmmword [ebp - 0x6fd8], xmm0
call fcn.004011a0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70c0]
movups xmmword [ebp - 0x6f98], xmm0
call fcn.004011a0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70e0]
movups xmmword [ebp - 0x6fc0], xmm0
call fcn.004011a0
mov edi, eax
mov byte [ebp - 4], 0x56
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fd8]
mov ecx, dword [ebp - 0x6d0c]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f98]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fc0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x70e0]
mov dword [ebp - 0x6f80], eax
call fcn.00401230
lea ecx, [ebp - 0x70c0]
call fcn.00401230
lea ecx, [ebp - 0x70d0]
call fcn.00401230
lea ecx, [ebp - 0x70a0]
mov byte [ebp - 4], 0x52
call fcn.00401230
cmp byte [ebp - 0x6f80], 0
jne 0x4c43c0
push 4
lea ecx, [ebp - 0x6d14]
call fcn.004093c0
lea ecx, [ebp - 0x6d14]
call fcn.0040c910
push 0x575ca8
lea ecx, [ebp - 0x7034]
mov byte [ebp - 4], 0x57
call fcn.00401080
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x6d0c]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6d14]
push ecx
mov ecx, eax
call fcn.00401190
push eax
push dword [ebp - 0x6d0c]
mov eax, dword [esi + 0x1c]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7034]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0x57
call fcn.00401130
cmp byte [ebp - 0x6f80], 0
jne 0x4c43b1
push 4
lea ecx, [ebp - 0x6d30]
call fcn.004093c0
lea ecx, [ebp - 0x6d30]
call fcn.0040c910
mov byte [ebp - 4], 0x59
lea edx, [ebp - 0x6d30]
mov eax, dword [ebp - 0x6d14]
push edx
push 1
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x38]
call eax
test eax, eax
jns 0x4c485c
lea ecx, [ebp - 0x6d30]
call fcn.0051e0b0
lea ecx, [ebp - 0x6d14]
mov byte [ebp - 4], 0x52
call fcn.0051e0b0
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c5ceb
push 0x18
lea ecx, [ebp - 0x28a4]
call fcn.00402420
lea ecx, [ebp - 0x28a4]
call fcn.00408af0
push 0
push 0x593a54
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x62
call fcn.0041a620
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4c446a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x585868
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4c4420
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x593a88
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4c44d1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x593a88
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x4c5386
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c5386
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c5364
lea eax, [ebp - 0x2418]
push eax
push 0x58aca0
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4c5364
lea ecx, [ebp - 0x2418]
call fcn.004053c0
cmp eax, 2
jl 0x4c5364
push 0x18
lea ecx, [ebp - 0x29f4]
call fcn.00402420
push 0
push 0x575c94
lea ecx, [ebp - 0x2418]
call fcn.00405820
push eax
lea ecx, [ebp - 0x29f4]
call fcn.00408bb0
xor esi, esi
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x29f4]
mov dword [ebp - 0x6fa4], esi
call fcn.00408ca0
test eax, eax
je 0x4c534f
nop
push esi
lea ecx, [ebp - 0x29f4]
call fcn.00408c70
push eax
lea ecx, [ebp - 0x219c]
call fcn.00405010
push 0
push 0x593af4
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c5335
push esi
lea ecx, [ebp - 0x29f4]
call fcn.00408c70
push eax
lea ecx, [ebp - 0x2084]
call fcn.00405010
lea ecx, [ebp - 0x2084]
call fcn.00405bb0
test al, al
jne 0x4c5335
push 0
push 1
push 0xffffffffffffffff
push 0
push str..dll
lea ecx, [ebp - 0x2084]
call fcn.00406ef0
lea ecx, [ebp - 0x2084]
mov esi, eax
call fcn.004053c0
sub eax, 3
cmp esi, eax
je 0x4c4677
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x2084]
call fcn.00407230
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x2084]
call fcn.00411190
lea ecx, [ebp - 0x2084]
call fcn.00405820
push eax
push 0
call dword [0x5568a8]
test eax, eax
jne 0x4c532f
push eax
push 1
push 1
push eax
push 0x5939dc
lea ecx, [ebp - 0x2084]
call fcn.00406ef0
mov esi, dword [ebp - 0x6fa4]
xor ecx, ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test eax, eax
push 0
setg cl
push 0
mov dword [ebp - 0x6f9c], ecx
lea ecx, [ebp - 0x29f4]
push esi
call fcn.00408c70
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x593b10
call fcn.00405820
push eax
lea ecx, [ebp - 0x213c]
call fcn.00405430
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea eax, [ebp - 0x2084]
mov ecx, edi
push eax
call fcn.004df9c0
test al, al
mov ecx, 1
mov eax, dword [ebp - 0x6f9c]
cmovne eax, ecx
lea ecx, [ebp - 0x2084]
push 0
mov dword [ebp - 0x6f9c], eax
call fcn.00405820
push eax
push 0
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2084]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xe
push dword [eax + 0xa4]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4c5335
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0x58aca0
call fcn.00405820
push eax
lea ecx, [ebp - 0x2084]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00405820
push eax
push 0xe
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
cmp dword [ebp - 0x6f9c], 0
mov ecx, 0x592c44
push 0
push 0
push 0
push 0x575c8c
mov eax, 0x57b750
cmove eax, ecx
lea ecx, [ebp - 0x2084]
push eax
push 0x592c5c
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x593948
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
push 0x5938f8
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
jmp 0x4c5335
mov eax, dword [ebp - 0x6d30]
lea edx, [ebp - 0x2590]
mov dword [ebp - 0x2590], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x2590]
mov edi, dword [ebp - 0x6f7c]
test eax, eax
je 0x4c4e54
mov esi, 1
mov dword [ebp - 0x6f8c], esi
cmp eax, esi
jl 0x4c4e54
lea eax, [edi + 0x1a8]
mov dword [ebp - 0x6fcc], eax
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c4e54
push 4
lea ecx, [ebp - 0x6cf4]
call fcn.004093c0
lea ecx, [ebp - 0x6cf4]
call fcn.0040c910
push 3
push esi
lea ecx, [ebp - 0x7090]
mov byte [ebp - 4], 0x5a
call fcn.004011b0
mov esi, eax
mov byte [ebp - 4], 0x5b
lea edx, [ebp - 0x6cf4]
mov ecx, dword [ebp - 0x6d30]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7090]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0x5a
call fcn.00401230
cmp byte [ebp - 0x6f80], 0
jne 0x4c4e2c
mov eax, dword [ebp - 0x6cf4]
lea edx, [ebp - 0x6d48]
mov dword [ebp - 0x6d48], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
test eax, eax
js 0x4c4e2c
mov eax, dword [ebp - 0x6d48]
test eax, eax
je 0x4c4e2c
push eax
lea ecx, [ebp - 0x219c]
call fcn.00405010
push dword [ebp - 0x6d48]
call dword [0x55645c]
push 0
push 0x5939bc
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c4e2c
push 4
lea ecx, [ebp - 0x6d00]
call fcn.004093c0
lea ecx, [ebp - 0x6d00]
call fcn.0040c910
mov byte [ebp - 4], 0x5c
lea edx, [ebp - 0x6d00]
mov eax, dword [ebp - 0x6cf4]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x4c]
call eax
test eax, eax
js 0x4c4e21
push 4
lea ecx, [ebp - 0x6d08]
call fcn.004093c0
lea ecx, [ebp - 0x6d08]
call fcn.0040c910
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0x6d08]
mov eax, dword [ebp - 0x6d00]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x44]
call eax
test eax, eax
js 0x4c4e16
mov eax, dword [ebp - 0x6d08]
lea edx, [ebp - 0x2484]
mov dword [ebp - 0x2484], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
cmp dword [ebp - 0x2484], 0
je 0x4c4e16
lea ecx, [ebp - 0x21a8]
call fcn.00405370
mov esi, 1
cmp dword [ebp - 0x2484], esi
jl 0x4c4c31
mov edi, dword [ebp - 0x6fcc]
push 4
lea ecx, [ebp - 0x6cf8]
call fcn.004093c0
lea ecx, [ebp - 0x6cf8]
call fcn.0040c910
mov byte [ebp - 4], 0x5e
lea edx, [ebp - 0x6cf8]
mov eax, dword [ebp - 0x6d08]
push edx
push esi
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x4c4c0f
mov eax, dword [ebp - 0x6cf8]
lea edx, [ebp - 0x28a8]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x24]
call eax
test eax, eax
js 0x4c4c0f
cmp dword [ebp - 0x28a8], 0
jne 0x4c4c0f
push 4
lea ecx, [ebp - 0x6d1c]
call fcn.004093c0
lea ecx, [ebp - 0x6d1c]
call fcn.0040c910
mov byte [ebp - 4], 0x5f
lea edx, [ebp - 0x6d1c]
mov eax, dword [ebp - 0x6cf8]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
mov eax, dword [ecx]
call eax
test eax, eax
js 0x4c4c04
mov eax, dword [ebp - 0x6d1c]
lea edx, [ebp - 0x6d38]
mov dword [ebp - 0x6d38], 0
mov dword [ebp - 0x6d3c], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x28]
call eax
mov eax, dword [ebp - 0x6d38]
test eax, eax
je 0x4c4c04
push eax
lea ecx, [ebp - 0x234c]
call fcn.00405010
mov eax, dword [ebp - 0x6d1c]
lea edx, [ebp - 0x6d3c]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [ebp - 0x6d3c]
call fcn.004093d0
test eax, eax
je 0x4c4bbd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d3c]
lea ecx, [ebp - 0x234c]
push 0x576604
call fcn.00407230
push 3
push 1
lea ecx, [ebp - 0x234c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21a8]
call fcn.004053e0
mov edx, edi
mov ecx, eax
call fcn.00411190
test al, al
jne 0x4c4bce
push dword [ebp - 0x6d38]
lea ecx, [ebp - 0x21a8]
call fcn.00405010
push 0
push 1
push 0x575cb0
push 0x576600
lea ecx, [ebp - 0x21a8]
call fcn.004078d0
push dword [ebp - 0x6d38]
call dword [0x55645c]
mov eax, dword [ebp - 0x6d3c]
test eax, eax
je 0x4c4c04
push eax
call dword [0x55645c]
lea ecx, [ebp - 0x6d1c]
call fcn.0051e0b0
lea ecx, [ebp - 0x6cf8]
mov byte [ebp - 4], 0x5d
call fcn.0051e0b0
inc esi
cmp esi, dword [ebp - 0x2484]
jle 0x4c4a63
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x21a8]
call fcn.00405bb0
test al, al
jne 0x4c4e16
mov eax, dword [ebp - 0x6d14]
lea edx, [ebp - 0x6dc0]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x4c4cdf
movsd xmm0, qword [edi + 0x390]
comisd xmm0, xmmword [0x5ab088]
jbe 0x4c4c7b
mov eax, dword [edi + 0x1b0]
jmp 0x4c4c81
mov eax, dword [edi + 0x1ac]
push eax
lea ecx, [ebp - 0x2490]
call fcn.00405010
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
push 0x575ca8
push dword [ebp - 0x6dc0]
lea ecx, [ebp - 0x2490]
push 0x57b138
call fcn.00407230
push 1
push 0
push 0x575ca8
push 0x575d30
lea ecx, [ebp - 0x2490]
call fcn.004078d0
jmp 0x4c4cea
lea ecx, [ebp - 0x2490]
call fcn.00405370
push 0
push 1
push 1
push 0
push 0x5939dc
lea ecx, [ebp - 0x21a8]
call fcn.00406ef0
push 0
lea ecx, [ebp - 0x2490]
mov esi, eax
call fcn.00405820
push eax
lea eax, [ebp - 0x21a8]
mov ecx, edi
push eax
call fcn.004df9c0
test al, al
lea ecx, [ebp - 0x21a8]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00405820
push eax
push 0
push esi
lea ecx, [ebp - 0x21a8]
call fcn.00405820
push eax
push 0x58da98
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xd
push dword [eax + 0xa4]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c4e16
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58da98
lea ecx, [ebp - 0x21a8]
call fcn.00405820
push eax
push 0
push 0xd
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x592c44
push 0x575c8c
mov eax, 0x57b750
cmove eax, ecx
lea ecx, [ebp - 0x234c]
push eax
push 0x592c5c
call fcn.00405820
push eax
push 0x5938dc
push 0x5939ec
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
push 0x593a24
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x6d08]
call fcn.0051e0b0
lea ecx, [ebp - 0x6d00]
call fcn.0051e0b0
lea ecx, [ebp - 0x6cf4]
mov byte [ebp - 4], 0x59
call fcn.0051e0b0
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, dword [ebp - 0x2590]
jle 0x4c48b0
lea ecx, [ebp - 0x6d30]
call fcn.0051e0b0
lea ecx, [ebp - 0x6d14]
mov byte [ebp - 4], 0x52
call fcn.0051e0b0
jmp 0x4c43c6
lea eax, [ebp - 0x6d10]
push eax
push 0x5aaf54
push 1
push 0
push 0x5aaf44
call esi
test eax, eax
js 0x4c43c0
push 4
lea ecx, [ebp - 0x6d34]
call fcn.004093c0
lea ecx, [ebp - 0x6d34]
call fcn.0040c910
mov byte [ebp - 4], 0x60
lea edx, [ebp - 0x6d34]
mov eax, dword [ebp - 0x6d10]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
jns 0x4c4edb
lea ecx, [ebp - 0x6d34]
mov byte [ebp - 4], 0x52
call fcn.0051e0b0
jmp 0x4c43c0
mov eax, dword [ebp - 0x6d34]
lea edx, [ebp - 0x2494]
push edx
mov dword [ebp - 0x2494], 0
lea edx, [ebp - 0x6d40]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
mov edi, dword [ebp - 0x6f7c]
test eax, eax
js 0x4c531b
mov eax, dword [ebp - 0x2494]
test eax, eax
je 0x4c531b
xor esi, esi
mov dword [ebp - 0x6f8c], esi
test eax, eax
je 0x4c52e9
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c52e9
mov eax, dword [ebp - 0x6d40]
lea ecx, [ebp - 0x219c]
push dword [eax + esi*4]
call fcn.00405010
mov eax, dword [ebp - 0x6d40]
push dword [eax + esi*4]
call dword [0x5568a0]
push 0
push 0x5939bc
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c52ce
push 4
lea ecx, [ebp - 0x6cfc]
call fcn.004093c0
lea ecx, [ebp - 0x6cfc]
call fcn.0040c910
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x219c]
mov eax, dword [ebp - 0x6d10]
mov esi, dword [eax]
lea eax, [ebp - 0x6cfc]
push eax
push 0x5aaf84
call fcn.00405820
push eax
push dword [ebp - 0x6d10]
mov eax, dword [esi + 0x18]
call eax
test eax, eax
js 0x4c52bf
mov eax, dword [ebp - 0x6cfc]
lea edx, [ebp - 0x6d2c]
mov dword [ebp - 0x6d2c], 0
mov dword [ebp - 0x6d44], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x84]
call eax
cmp dword [ebp - 0x6d2c], 0
je 0x4c52bf
mov eax, dword [ebp - 0x6cfc]
lea edx, [ebp - 0x6d44]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x8c]
call eax
push dword [ebp - 0x6d2c]
lea ecx, [ebp - 0x234c]
call fcn.00405010
mov ecx, dword [ebp - 0x6d44]
call fcn.004093d0
test eax, eax
je 0x4c509a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d44]
lea ecx, [ebp - 0x234c]
push 0x576604
call fcn.00407230
push 3
push 1
lea ecx, [ebp - 0x234c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21a8]
call fcn.004053e0
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.00411190
test al, al
jne 0x4c50ab
push dword [ebp - 0x6d2c]
lea ecx, [ebp - 0x21a8]
call fcn.00405010
push 0
push 1
push 0x575cb0
push 0x576600
lea ecx, [ebp - 0x21a8]
call fcn.004078d0
push dword [ebp - 0x6d2c]
mov esi, dword [0x5568a0]
call esi
mov eax, dword [ebp - 0x6d44]
test eax, eax
je 0x4c50df
push eax
call esi
lea ecx, [ebp - 0x21a8]
call fcn.00405bb0
test al, al
jne 0x4c52bf
push 0
push 1
push 1
push 0
push 0x5939dc
lea ecx, [ebp - 0x21a8]
call fcn.00406ef0
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x219c]
setg cl
mov dword [ebp - 0x6f80], ecx
lea ecx, [ebp - 0x2490]
push eax
call fcn.00405020
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x57b148
lea ecx, [ebp - 0x2490]
call fcn.00406ef0
test eax, eax
jne 0x4c5160
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x57b148
lea ecx, [ebp - 0x2490]
call fcn.00407230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x593a44
push dword [edi + 0x1ac]
lea ecx, [ebp - 0x2490]
call fcn.004075e0
push 0
lea ecx, [ebp - 0x2490]
call fcn.00405820
push eax
lea eax, [ebp - 0x21a8]
mov ecx, edi
push eax
call fcn.004df9c0
test al, al
je 0x4c51b1
mov esi, 1
jmp 0x4c51d3
lea ecx, [ebp - 0x21a8]
call fcn.00405820
push eax
push 0
call dword [0x5568a8]
test eax, eax
jne 0x4c52bf
mov esi, dword [ebp - 0x6f80]
push 0
lea ecx, [ebp - 0x21a8]
call fcn.00405820
push eax
push 0
push esi
lea ecx, [ebp - 0x21a8]
call fcn.00405820
push eax
push 0x58da98
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xd
push dword [eax + 0xa4]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c52bf
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58da98
lea ecx, [ebp - 0x21a8]
call fcn.00405820
push eax
push 0
push 0xd
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x592c44
push 0x575c8c
mov eax, 0x57b750
cmove eax, ecx
lea ecx, [ebp - 0x234c]
push eax
push 0x592c5c
call fcn.00405820
push eax
push 0x5938dc
push 0x5939ec
lea ecx, [ebp - 0x219c]
call fcn.00405820
push eax
push 0x593a24
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x6cfc]
mov byte [ebp - 4], 0x60
call fcn.0051e0b0
mov eax, dword [ebp - 0x6f8c]
inc eax
mov esi, eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x2494]
jb 0x4c4f30
push dword [ebp - 0x6d40]
call dword [0x5568a0]
mov eax, dword [ebp - 0x6d34]
lea edx, [ebp - 0x2494]
push edx
lea edx, [ebp - 0x6d40]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
jns 0x4c4f11
lea ecx, [ebp - 0x6d34]
mov byte [ebp - 4], 0x52
call fcn.0051e0b0
jmp 0x4c43c6
mov esi, dword [ebp - 0x6fa4]
inc esi
lea ecx, [ebp - 0x29f4]
mov dword [ebp - 0x6fa4], esi
call fcn.00408ca0
cmp esi, eax
jb 0x4c45c0
lea ecx, [ebp - 0x29f4]
mov byte [ebp - 4], 0x62
call fcn.00408c40
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4c4502
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c5ce0
push 0
push 0x593b38
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
push 4
lea ecx, [ebp - 0x2304]
mov dword [ebp - 0x6fd0], 0x593b70
mov dword [ebp - 0x6fcc], 0x593bf8
call fcn.004093c0
lea ecx, [ebp - 0x2304]
call fcn.0040c910
push 4
lea ecx, [ebp - 0x2434]
mov byte [ebp - 4], 0x64
call fcn.004093c0
lea ecx, [ebp - 0x2434]
call fcn.0040c910
push 0xc
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x65
call fcn.00401e00
lea ecx, [ebp - 0x20cc]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x272c]
mov byte [ebp - 4], 0x66
call fcn.00401e00
lea ecx, [ebp - 0x272c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x27b0]
mov byte [ebp - 4], 0x67
call fcn.00401e00
lea ecx, [ebp - 0x27b0]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x6db4]
mov byte [ebp - 4], 0x68
call fcn.0040c890
lea ecx, [ebp - 0x6db4]
call fcn.0040c8d0
xor ecx, ecx
mov byte [ebp - 4], 0x69
mov dword [ebp - 0x6f9c], ecx
nop dword [eax + eax]
push 0
push 0x20019
push dword [ebp + ecx*4 - 0x6fd0]
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c5c75
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.0040cfc0
test al, al
je 0x4c5c75
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2114]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x575ca8
push dword [ebp + eax*4 - 0x6fd0]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2304]
call fcn.0040c940
test al, al
je 0x4c5c53
lea eax, [ebp - 0x6db4]
mov dword [ebp - 0x6f8c], 0
push eax
push 0
lea ecx, [ebp - 0x2304]
call fcn.0040cfc0
test al, al
je 0x4c5901
mov eax, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x27b0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6db4]
push 0x575ca8
push dword [ebp - 0x6cec]
push 0x575ca8
push dword [ebp + eax*4 - 0x6fd0]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x27b0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2434]
call fcn.0040c940
test al, al
je 0x4c58d3
lea eax, [ebp - 0x20cc]
push eax
push 0x593c80
lea ecx, [ebp - 0x2434]
call fcn.0040cb10
test al, al
je 0x4c58d3
lea ecx, [ebp - 0x20cc]
call fcn.00405bb0
test al, al
jne 0x4c58d3
push 0
push 0x58acbc
lea ecx, [ebp - 0x20cc]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c58d3
push 0
push 1
push 1
push 0
push 0x593c98
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
je 0x4c5633
push 0
push 1
push 1
push 0
push 0x593ca8
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
jne 0x4c58d3
push 0
push 1
push 1
push 0
push 0x593cb8
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
je 0x4c566f
push 0
push 1
push 1
push 0
push 0x593ce4
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
jne 0x4c58d3
push 0
push 1
push 1
push 0
push 0x593d10
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
je 0x4c56ab
push 0
push 1
push 1
push 0
push 0x593d48
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
jne 0x4c58d3
push 0
push 1
push 1
push 0
push 0x593d80
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
je 0x4c56e7
push 0
push 1
push 1
push 0
push 0x593dac
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
jne 0x4c58d3
push 0
push 1
push 1
push 0
push 0x593dd4
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
je 0x4c5723
push 0
push 1
push 1
push 0
push 0x593e0c
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
jne 0x4c58d3
push 0
push 0x593e40
lea ecx, [ebp - 0x20cc]
mov dword [ebp - 0x6f80], 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x28a4]
call fcn.00408cb0
lea ecx, [ebp - 0x28a4]
xor esi, esi
call fcn.00408ca0
test eax, eax
je 0x4c69ea
push 1
push esi
lea ecx, [ebp - 0x28a4]
call fcn.00408c70
push eax
lea ecx, [ebp - 0x272c]
call fcn.004053e0
mov ecx, eax
call fcn.00405bb0
test al, al
jne 0x4c57d1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5933c0
lea ecx, [edi + 0x33c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x272c]
call fcn.004075e0
lea ecx, [ebp - 0x272c]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4c69e0
lea ecx, [ebp - 0x28a4]
inc esi
call fcn.00408ca0
cmp esi, eax
jb 0x4c5760
mov esi, dword [ebp - 0x6f80]
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x27b0]
call fcn.00405820
push eax
push 0x58da98
lea ecx, [ebp - 0x20cc]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xf
push dword [eax + 0xa4]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c58d3
push 0
push 0
push 0
push 0
push 0
push 0x593c80
push 0x58da98
push 0
lea ecx, [ebp - 0x27b0]
call fcn.00405820
push eax
push 0xf
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x575c8c
test esi, esi
mov ecx, 0x592c44
mov eax, 0x57b750
cmove eax, ecx
lea ecx, [ebp - 0x27b0]
push eax
push 0x592c5c
push 0x593e48
call fcn.00405820
push eax
push 0x593e80
push 0x5939ec
lea ecx, [ebp - 0x20cc]
call fcn.00405820
push eax
push 0x5938f8
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x6db4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2304]
mov dword [ebp - 0x6f8c], eax
call fcn.0040cfc0
test al, al
jne 0x4c5541
mov esi, dword [ebp - 0x6fa4]
lea eax, [ebp - 0x20cc]
push eax
push 0x593c80
lea ecx, [ebp - 0x2304]
call fcn.0040cb10
test al, al
je 0x4c5c53
lea ecx, [ebp - 0x20cc]
call fcn.00405bb0
test al, al
jne 0x4c5c53
push 0
push 0x58acbc
lea ecx, [ebp - 0x20cc]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c5c53
push 0
push 1
push 1
push 0
push 0x593c98
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
je 0x4c5991
push 0
push 1
push 1
push 0
push 0x593ca8
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
jne 0x4c5c53
push 0
push 1
push 1
push 0
push 0x593cb8
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
je 0x4c59cd
push 0
push 1
push 1
push 0
push 0x593ce4
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
jne 0x4c5c53
push 0
push 1
push 1
push 0
push 0x593d10
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
je 0x4c5a09
push 0
push 1
push 1
push 0
push 0x593d48
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
jne 0x4c5c53
push 0
push 1
push 1
push 0
push 0x593d80
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
je 0x4c5a45
push 0
push 1
push 1
push 0
push 0x593dac
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
jne 0x4c5c53
push 0
push 1
push 1
push 0
push 0x593dd4
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
je 0x4c5a81
push 0
push 1
push 1
push 0
push 0x593e0c
lea ecx, [ebp - 0x20cc]
call fcn.00406ef0
test eax, eax
jne 0x4c5c53
push 0
push 0x593e40
lea ecx, [ebp - 0x20cc]
mov dword [ebp - 0x6f8c], 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x28a4]
call fcn.00408cb0
lea ecx, [ebp - 0x28a4]
mov dword [ebp - 0x6f78], 0
call fcn.00408ca0
test eax, eax
je 0x4c6a01
mov ecx, dword [ebp - 0x6f78]
nop dword [eax]
push 1
push ecx
lea ecx, [ebp - 0x28a4]
call fcn.00408c70
push eax
lea ecx, [ebp - 0x272c]
call fcn.004053e0
mov ecx, eax
call fcn.00405bb0
test al, al
jne 0x4c5b41
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5933c0
lea ecx, [edi + 0x33c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x272c]
call fcn.004075e0
lea ecx, [ebp - 0x272c]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4c69f1
inc dword [ebp - 0x6f78]
lea ecx, [ebp - 0x28a4]
call fcn.00408ca0
mov ecx, dword [ebp - 0x6f78]
cmp ecx, eax
jb 0x4c5ad0
mov eax, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push eax
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
push 0x58da98
lea ecx, [ebp - 0x20cc]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xf
push dword [eax + 0xa4]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c5c53
push 0
push 0
push 0
push 0
push 0
push 0x593c80
push 0x58da98
push 0
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
push 0xf
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
cmp dword [ebp - 0x6f8c], 0
mov ecx, 0x592c44
push 0
push 0
push 0
push 0x575c8c
mov eax, 0x57b750
cmove eax, ecx
lea ecx, [ebp - 0x2114]
push eax
push 0x592c5c
push 0x593e48
call fcn.00405820
push eax
push 0x593e80
push 0x5939ec
lea ecx, [ebp - 0x20cc]
call fcn.00405820
push eax
push 0x5938f8
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.0040cfc0
test al, al
jne 0x4c54c0
mov ecx, dword [ebp - 0x6f9c]
inc ecx
mov dword [ebp - 0x6f9c], ecx
cmp ecx, 2
jb 0x4c5470
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.0043a810
lea ecx, [ebp - 0x6db4]
call fcn.00405360
lea ecx, [ebp - 0x27b0]
call fcn.00405360
lea ecx, [ebp - 0x272c]
call fcn.00405360
lea ecx, [ebp - 0x20cc]
call fcn.00405360
lea ecx, [ebp - 0x2434]
call fcn.0040c980
lea ecx, [ebp - 0x2304]
call fcn.0040c980
lea ecx, [ebp - 0x28a4]
call fcn.00408c40
lea ecx, [ebp - 0x6d0c]
call fcn.0051e0b0
lea ecx, [ebp - 0x6d10]
call fcn.0051e0b0
lea ecx, [ebp - 0x21a8]
call fcn.00405360
lea ecx, [ebp - 0x2490]
call fcn.00405360
lea ecx, [ebp - 0x2ba8]
call fcn.00410fa0
lea ecx, [ebp - 0x258c]
call fcn.00405360
lea ecx, [ebp - 0x234c]
call fcn.00405360
lea ecx, [ebp - 0x219c]
call fcn.00405360
lea ecx, [ebp - 0x2824]
call fcn.00405360
lea ecx, [ebp - 0x2418]
call fcn.00405360
lea ecx, [ebp - 0x2084]
mov byte [ebp - 4], 0x46
call fcn.00405360
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58e350
push 0x575ca8
lea ecx, [eax + 0x140]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2780]
call fcn.00405430
push 1
lea ecx, [ebp - 0x2780]
call fcn.00405820
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00402090
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c6b2e
test dword [edi + 0x34], 0x1000
jne 0x4c6b2e
movsd xmm0, qword [edi + 0x390]
ucomisd xmm0, qword [0x5ab0d0]
lahf
test ah, 0x44
jp 0x4c6b2e
push 0
push 0x593ea8
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x593ef0
push dword [eax + 0x38]
call fcn.00438b50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.0043b930
push 0xc
lea ecx, [ebp - 0x221c]
call fcn.00401e00
lea ecx, [ebp - 0x221c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x28f4]
mov byte [ebp - 4], 0x6a
call fcn.00401e00
lea ecx, [ebp - 0x28f4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2580]
mov byte [ebp - 4], 0x6b
call fcn.00401e00
lea ecx, [ebp - 0x2580]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x261c]
mov byte [ebp - 4], 0x6c
call fcn.00401e00
lea ecx, [ebp - 0x261c]
call fcn.00404bc0
push 0
push 0x593f28
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x6d
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x4c6130
lea ecx, [edi + 0x104]
nop dword [eax]
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405bb0
test al, al
jne 0x4c611a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x593f68
push 0x594010
push esi
lea ecx, [edi + 0x104]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x221c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c611a
xor esi, esi
nop dword [eax + eax]
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040cfc0
test al, al
je 0x4c610e
push 8
push 0
push 0x575ca0
push 0x5940a8
push 1
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x261c]
call fcn.004053e0
mov ecx, eax
call fcn.00408840
push 0
push 0x5940c4
lea ecx, [ebp - 0x261c]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c6104
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x221c]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x2580]
call fcn.00405430
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2580]
call fcn.00405820
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x261c]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x18
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c6104
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x2580]
call fcn.00405820
push eax
push 0x18
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x5940f8
push dword [ebp - 0x6cec]
lea ecx, [edi + 0x114]
push 0x594134
push dword [ebp - 0x6f78]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x261c]
call fcn.00405820
push eax
push 0x594168
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
inc esi
cmp esi, 2
jb 0x4c5f60
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
inc esi
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x4c5ee0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c6afe
push 0
push 0x594198
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4c645b
lea ecx, [edi + 0x104]
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405bb0
test al, al
jne 0x4c644b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x593f68
push 0x594010
push esi
lea ecx, [edi + 0x104]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x221c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
lea eax, [ebp - 0x6cec]
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0040cfc0
test al, al
je 0x4c62f0
push 0
push 0x594328
push 0x58e5f4
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c644b
push 0
push 0
push 0
push 0
push 0x5941f0
push esi
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58e5f4
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c644b
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x221c]
call fcn.00405820
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x5940f8
push 0x5941f0
push 0x594364
push esi
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push 0x592cbc
push 0x58e5f4
push 0x59437c
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5943a8
push 0x594010
push esi
lea ecx, [edi + 0x104]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00405430
lea ecx, [ebp - 0x221c]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
test al, al
je 0x4c644b
push 0
push 0x594328
push 0x58e7a0
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c644b
push 0
push 0
push 0
push 0
push 0x594298
push esi
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58e7a0
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c644b
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x221c]
call fcn.00405820
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x5940f8
push 0x594298
push 0x594364
push esi
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push 0x592cbc
push 0x58e7a0
push 0x59437c
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
inc esi
lea ecx, [edi + 0x104]
cmp esi, dword [edi + 0x30]
jb 0x4c6162
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c6afe
xor eax, eax
mov dword [ebp - 0x6fb8], 0x587068
mov dword [ebp - 0x6fb4], 0x587090
mov dword [ebp - 0x6fd0], 0x58e8bc
mov dword [ebp - 0x6fcc], 0x58e9d0
mov dword [ebp - 0x6f90], 0x594448
mov dword [ebp - 0x6f8c], 0x5944d0
mov dword [ebp - 0x6f78], eax
cmp dword [edi + 0x30], eax
jbe 0x4c669b
lea edx, [edi + 0x104]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594560
push 0x594608
push 0x5946a0
push eax
mov ecx, edx
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00405430
lea ecx, [ebp - 0x221c]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
test al, al
je 0x4c667f
xor esi, esi
nop dword [eax + eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c6679
lea ecx, [ebp - 0x221c]
call fcn.00405820
mov edx, dword [ebp + esi*4 - 0x6fb8]
mov ecx, eax
call fcn.00410020
test al, al
je 0x4c666f
push 0
push 0x594328
push dword [ebp + esi*4 - 0x6fd0]
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c666f
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f90]
lea ecx, [edi + 0x114]
push dword [ebp - 0x6f78]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push dword [ebp + esi*4 - 0x6fd0]
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c666f
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6fb8]
lea ecx, [edi + 0x114]
push dword [ebp - 0x6f78]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x221c]
call fcn.00405820
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x5940f8
push dword [ebp + esi*4 - 0x6f90]
lea ecx, [edi + 0x114]
push 0x594364
push dword [ebp - 0x6f78]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push 0x592cbc
push dword [ebp + esi*4 - 0x6fd0]
lea ecx, [ebp - 0x1f80]
push 0x59437c
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
inc esi
cmp esi, 2
jb 0x4c6520
mov dword [ebp - 0x6fa4], esi
mov eax, dword [ebp - 0x6f78]
lea edx, [edi + 0x104]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x4c64c0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c6afe
mov dword [ebp - 0x6fb8], 0x5871d0
xor esi, esi
mov dword [ebp - 0x6fb4], 0x5871ec
mov dword [ebp - 0x6fd0], 0x58eafc
mov dword [ebp - 0x6fcc], 0x58eb28
mov dword [ebp - 0x6f90], 0x594740
mov dword [ebp - 0x6f8c], 0x5947c8
nop dword [eax + eax]
push 0
push 0x594328
push dword [ebp + esi*4 - 0x6fd0]
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c681a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6fb8]
lea ecx, [ebp - 0x25b0]
push 0x587168
call fcn.00405820
push eax
lea ecx, [ebp - 0x221c]
call fcn.00405430
lea ecx, [ebp - 0x221c]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4c681a
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f90]
push 0x58da98
push dword [ebp + esi*4 - 0x6fd0]
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c681a
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58da98
lea ecx, [ebp - 0x221c]
call fcn.00405820
push eax
push 0
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5940f8
push dword [ebp + esi*4 - 0x6f90]
lea ecx, [ebp - 0x1f80]
push 0x594364
push 0x5939ec
push dword [ebp + esi*4 - 0x6fd0]
push 0x59437c
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
inc esi
cmp esi, 2
jb 0x4c66f0
push 4
lea ecx, [ebp - 0x2360]
mov dword [ebp - 0x6fa4], esi
call fcn.004093c0
lea ecx, [ebp - 0x2360]
call fcn.0040c910
push 4
lea ecx, [ebp - 0x2444]
mov byte [ebp - 4], 0x6e
call fcn.004093c0
lea ecx, [ebp - 0x2444]
call fcn.0040c910
xor eax, eax
mov byte [ebp - 4], 0x6f
mov dword [ebp - 0x6f78], eax
cmp dword [edi + 0x30], eax
jbe 0x4c6ac4
lea edx, [edi + 0x104]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5948e0
push 0x594968
push 0x5949e0
push eax
mov ecx, edx
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x221c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2360]
call fcn.0040c940
test al, al
je 0x4c6aa8
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x2360]
mov dword [ebp - 0x6fa4], esi
call fcn.0040cfc0
test al, al
je 0x4c6aa8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594a04
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x221c]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x2580]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x2580]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2444]
call fcn.0040c940
test al, al
je 0x4c69b9
lea ecx, [ebp - 0x2444]
call fcn.0040d0e0
cmp eax, 2
jb 0x4c69b9
push 0
push 0
push 0
push 0
push 0x594858
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58ed38
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
jne 0x4c6a08
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x2360]
mov dword [ebp - 0x6fa4], esi
call fcn.0040cfc0
test al, al
jne 0x4c6906
jmp 0x4c6aa8
mov esi, 1
jmp 0x4c57eb
xor esi, esi
jmp 0x4c57eb
mov eax, 1
mov dword [ebp - 0x6f8c], eax
jmp 0x4c5b66
xor eax, eax
jmp 0x4c5b66
mov esi, dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x2580]
call fcn.00405820
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5940f8
push 0x594858
push 0x594364
push esi
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push 0x592cbc
push 0x594a40
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6f78]
lea edx, [edi + 0x104]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x4c6880
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.00404160
lea ecx, [ebp - 0x2444]
call fcn.0040c980
lea ecx, [ebp - 0x2360]
call fcn.0040c980
lea ecx, [ebp - 0x261c]
call fcn.00405360
lea ecx, [ebp - 0x2580]
call fcn.00405360
lea ecx, [ebp - 0x28f4]
call fcn.00405360
lea ecx, [ebp - 0x221c]
mov byte [ebp - 4], 0x46
call fcn.00405360
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c92f2
test dword [edi + 0x34], 0x1000
jne 0x4c92f2
push 0
push 0x594a98
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x593ef0
push dword [eax + 0x38]
call fcn.00438b50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.0043b930
push 0xc
lea ecx, [ebp - 0x20c0]
call fcn.00401e00
lea ecx, [ebp - 0x20c0]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x201c]
mov byte [ebp - 4], 0x70
call fcn.00401e00
lea ecx, [ebp - 0x201c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2400]
mov byte [ebp - 4], 0x71
call fcn.00401e00
lea ecx, [ebp - 0x2400]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x1ff4]
mov byte [ebp - 4], 0x72
call fcn.00401e00
lea ecx, [ebp - 0x1ff4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x22d0]
mov byte [ebp - 4], 0x73
call fcn.00401e00
lea ecx, [ebp - 0x22d0]
call fcn.00404bc0
push 0x24
lea ecx, [ebp - 0x2548]
mov byte [ebp - 4], 0x74
call fcn.004542b0
lea ecx, [ebp - 0x2548]
call fcn.0041df90
mov byte [ebp - 4], 0x75
xor esi, esi
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
mov dword [ebp - 0x6f8c], esi
push dword [eax + 0xa8]
call fcn.0043a810
push esi
push 0x594ad8
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x4c723c
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6fb4], esi
lea ecx, [ebp - 0x22d0]
call fcn.00405bb0
test al, al
je 0x4c6cbc
lea eax, [ebp - 0x22d0]
push eax
push 1
lea ecx, [ebp - 0x2160]
call fcn.00405820
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00465bc0
mov esi, dword [ebp - 0x6fb4]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c7236
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b28
lea ecx, [ebp - 0x2160]
call fcn.00405820
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x4d10]
call fcn.00411170
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x4d10]
call fcn.00401350
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x76
call fcn.00406cd0
lea ecx, [ebp - 0x4d10]
call fcn.00401490
test al, al
je 0x4c7208
nop
push 1
lea ecx, [ebp - 0x4d10]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405010
push 0x594b64
lea ecx, [ebp - 0x201c]
call fcn.00405200
test al, al
je 0x4c6dae
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x201c]
call fcn.00406ef0
cmp eax, 1
jne 0x4c71f5
inc dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x4d10]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405430
push 0x100
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041e000
test al, al
je 0x4c71f5
lea eax, [ebp - 0x1ff4]
push eax
push 0x5789fc
push 0x594bb0
lea ecx, [ebp - 0x2548]
call fcn.0041f180
test eax, eax
je 0x4c6fc7
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c6fc7
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c6fc7
push 0x594c00
lea ecx, [ebp - 0x1ff4]
call fcn.004050d0
test al, al
jne 0x4c6fc7
push 0
push 1
push 1
push 0
push 0x594c18
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c6fc7
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c6fc7
push eax
push 0x594c4c
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c6fc7
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x594c88
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c6fc7
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
push 0x594bb0
push 0x6f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
push 0x594364
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
push 0x594cd0
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x2b04]
mov dword [ebp - 0x6f50], 0
push eax
push 0x5789fc
xorps xmm0, xmm0
lea ecx, [ebp - 0x2548]
push 0x594cf0
movups xmmword [ebp - 0x6f60], xmm0
call fcn.0041ede0
test al, al
je 0x4c71f5
lea eax, [ebp - 0x2b04]
push eax
lea eax, [ebp - 0x6f60]
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041fe10
test al, al
je 0x4c71f5
lea eax, [ebp - 0x1ff4]
push eax
lea eax, [ebp - 0x6f60]
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041fb20
test eax, eax
je 0x4c71d4
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c71f5
push eax
push 1
push 1
push eax
push 0x594d1c
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c71f5
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c71f5
push eax
push 1
push 1
push eax
push 0x594d40
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c71f5
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c71f5
push eax
push 0x594d5c
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c71d4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x594d88
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c71d4
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
push 0x594cf0
push 0x6f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
push 0x594364
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
push 0x594da4
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x2b04]
push eax
lea eax, [ebp - 0x6f60]
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041fe10
test al, al
jne 0x4c7020
lea ecx, [ebp - 0x4d10]
call fcn.00401450
test al, al
jne 0x4c6d60
lea ecx, [ebp - 0x4d10]
mov byte [ebp - 4], 0x75
call fcn.004013a0
mov eax, dword [ebp - 0x6f78]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x4c6c70
mov esi, dword [ebp - 0x6f8c]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c92ac
test esi, esi
jne 0x4c7274
lea ecx, [ebp - 0x22d0]
call fcn.00405bb0
test al, al
je 0x4c7274
push esi
push 0x594dd0
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
jmp 0x4c92ac
push 0
push 0x594e20
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4c75ff
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c75ff
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b28
lea ecx, [ebp - 0x2160]
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x51d0]
call fcn.00411170
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x51d0]
call fcn.00401350
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x77
call fcn.00406cd0
lea ecx, [ebp - 0x51d0]
call fcn.00401490
test al, al
je 0x4c75d1
nop dword [eax]
push 1
lea ecx, [ebp - 0x51d0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405010
push 0x594b64
lea ecx, [ebp - 0x201c]
call fcn.00405200
test al, al
je 0x4c739e
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x201c]
call fcn.00406ef0
cmp eax, 1
jne 0x4c75be
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
lea ecx, [ebp - 0x51d0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405430
push 0x100
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041e000
test al, al
je 0x4c75be
lea eax, [ebp - 0x1ff4]
push eax
push 0x5789fc
push 0x594e60
lea ecx, [ebp - 0x2548]
call fcn.0041f180
test eax, eax
je 0x4c75be
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c75be
push eax
push 1
push 1
push eax
push 0x594d1c
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c75be
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c75be
push eax
push 1
push 1
push eax
push 0x594d40
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c75be
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c75be
push eax
push 0x594ed0
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c75be
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x594f10
push 0
push 0x70
push dword [eax + 0xa8]
call fcn.004b0c50
mov esi, eax
cmp esi, 0xffffffff
je 0x4c75b8
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
push 0x594f40
push 0x70
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x201c]
call fcn.00405820
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x594364
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
push 0x594fa0
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
jmp 0x4c75be
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x51d0]
call fcn.00401450
test al, al
jne 0x4c7350
lea ecx, [ebp - 0x51d0]
mov byte [ebp - 4], 0x75
call fcn.004013a0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x4c72a6
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c92ac
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594fe8
lea ecx, [edi + 0x33c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x595034
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4c7c10
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c7c10
push 0xc
lea ecx, [ebp - 0x2744]
call fcn.00401e00
lea ecx, [ebp - 0x2744]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x27bc]
mov byte [ebp - 4], 0x78
call fcn.00401e00
lea ecx, [ebp - 0x27bc]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2738]
mov byte [ebp - 4], 0x79
call fcn.00401e00
lea ecx, [ebp - 0x2738]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x26d0]
mov byte [ebp - 4], 0x7a
call fcn.00401e00
lea ecx, [ebp - 0x26d0]
call fcn.00404bc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b28
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 0x7b
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x3a10]
call fcn.00411170
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x3a10]
call fcn.00401350
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x7c
call fcn.00406cd0
lea ecx, [ebp - 0x3a10]
call fcn.00401490
test al, al
je 0x4c7bb6
push 1
lea ecx, [ebp - 0x3a10]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405010
push 0x594b64
lea ecx, [ebp - 0x201c]
call fcn.00405200
test al, al
je 0x4c77d1
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x201c]
call fcn.00406ef0
cmp eax, 1
jne 0x4c7ba3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
lea ecx, [ebp - 0x3a10]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405430
push 0x100
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041e000
test al, al
je 0x4c7ba3
lea eax, [ebp - 0x2af0]
mov dword [ebp - 0x6f64], 0
push eax
push 0x5789fc
xorps xmm0, xmm0
lea ecx, [ebp - 0x2548]
push 0x595068
movups xmmword [ebp - 0x6f74], xmm0
call fcn.0041ede0
test al, al
je 0x4c7ba3
lea eax, [ebp - 0x2af0]
push eax
lea eax, [ebp - 0x6f74]
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041f760
test al, al
je 0x4c7ba3
nop word [eax + eax]
lea eax, [ebp - 0x2744]
push eax
lea eax, [ebp - 0x6f74]
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041efb0
test al, al
je 0x4c7b82
lea ecx, [ebp - 0x2744]
call fcn.00405820
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4c7b7c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595094
lea ecx, [ebp - 0x2744]
call fcn.00405820
push eax
push 0x5950b8
lea ecx, [ebp - 0x2738]
call fcn.00405430
lea eax, [ebp - 0x27bc]
push eax
push 0x5789fc
lea ecx, [ebp - 0x2738]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041f180
test eax, eax
je 0x4c7b7c
lea ecx, [ebp - 0x27bc]
call fcn.00405820
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4c7b7c
push 0
push 0x5940c4
lea ecx, [ebp - 0x27bc]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c7b7c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5950e8
lea ecx, [ebp - 0x2744]
call fcn.00405820
push eax
push 0x5950b8
lea ecx, [ebp - 0x2738]
call fcn.00405430
lea eax, [ebp - 0x26d0]
push eax
push 0x5789fc
lea ecx, [ebp - 0x2738]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041f180
test eax, eax
je 0x4c7a2c
push 0
push 1
push 1
push 5
push 0x5766ec
lea ecx, [ebp - 0x26d0]
call fcn.00406ef0
test eax, eax
jne 0x4c7a2c
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5950f8
push 1
lea ecx, [ebp - 0x3a10]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x26d0]
call fcn.004075e0
lea ecx, [ebp - 0x26d0]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4c7b7c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2744]
call fcn.00405820
push eax
push 0x5950b8
lea ecx, [ebp - 0x2738]
call fcn.00405430
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x26d0]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x27bc]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x71
push dword [eax + 0xa8]
call fcn.004b0c50
mov esi, eax
cmp esi, 0xffffffff
je 0x4c7b7c
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26d0]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2738]
call fcn.00405820
push eax
push 0x71
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x26d0]
call fcn.00405820
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x593948
call fcn.00405820
push eax
push 0x595114
lea ecx, [ebp - 0x2744]
call fcn.00405820
push eax
push 0x57ac88
lea ecx, [ebp - 0x27bc]
call fcn.00405820
push eax
push 0x595138
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
jmp 0x4c7b82
mov esi, dword [ebp - 0x6f78]
lea eax, [ebp - 0x2af0]
push eax
lea eax, [ebp - 0x6f74]
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041f760
test al, al
jne 0x4c7890
lea ecx, [ebp - 0x3a10]
call fcn.00401450
test al, al
jne 0x4c7783
lea ecx, [ebp - 0x3a10]
call fcn.004013a0
lea ecx, [ebp - 0x26d0]
call fcn.00405360
lea ecx, [ebp - 0x2738]
call fcn.00405360
lea ecx, [ebp - 0x27bc]
call fcn.00405360
lea ecx, [ebp - 0x2744]
mov byte [ebp - 4], 0x75
call fcn.00405360
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x4c7670
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c92ac
push 0
push 0x595168
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
lea ecx, [ebp - 0x6df4]
call fcn.004da4e0
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x6dcc]
mov eax, dword [edi + 8]
push 0x5951b8
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6df4], eax
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6ddc], eax
lea eax, [edi + 0x164]
mov dword [ebp - 0x6dd8], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6df0], 0x72
mov dword [ebp - 0x6dd4], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6dd0], eax
call fcn.00405010
push 0xc
lea ecx, [ebp - 0x2284]
call fcn.00401e00
lea ecx, [ebp - 0x2284]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2248]
mov byte [ebp - 4], 0x7e
call fcn.00401e00
lea ecx, [ebp - 0x2248]
call fcn.00404bc0
mov ecx, edi
mov byte [ebp - 4], 0x7f
call fcn.004eb540
test al, al
jne 0x4c928b
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x4c7e87
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c7e87
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.004053c0
cmp eax, 3
jl 0x4c7e77
lea eax, [ebp - 0x6dec]
push eax
push 1
lea ecx, [ebp - 0x2160]
call fcn.00405820
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00465bc0
mov esi, dword [ebp - 0x6f78]
test al, al
je 0x4c7e77
push esi
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6de0], eax
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2284]
call fcn.00405430
lea ecx, [ebp - 0x2284]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4c7e77
lea ecx, [ebp - 0x2284]
call fcn.00405820
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c7e87
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2284]
call fcn.00405430
lea ecx, [ebp - 0x2284]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4c7e77
push 0
lea ecx, [ebp - 0x2284]
call fcn.00405a70
lea ecx, [ebp - 0x2284]
call fcn.00405820
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.004bd520
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x4c7cf0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c928b
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6de0], 0x58da98
call fcn.00405820
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c928b
lea eax, [ebp - 0x2640]
push eax
lea ecx, [ebp - 0x2284]
call fcn.00405020
push 0
lea ecx, [ebp - 0x2284]
call fcn.00405a70
lea ecx, [ebp - 0x2284]
call fcn.00405820
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c928b
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4c7f7a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5951d8
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4c7f30
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595268
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4c7fe1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x595268
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4c81db
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
nop dword [eax]
push 0
push 0x20019
lea ecx, [esi + eax]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c81b9
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c81db
lea eax, [ebp - 0x2248]
push eax
push 0x575cb0
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4c81b9
push 0
push 1
push 1
push 0
push 0x5952f4
lea ecx, [ebp - 0x2248]
call fcn.00406ef0
lea ecx, [ebp - 0x2248]
mov dword [ebp - 0x6f80], eax
call fcn.004053c0
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x4c81b9
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2248]
call fcn.00406d30
push 3
lea ecx, [ebp - 0x2248]
call fcn.00407bb0
lea ecx, [ebp - 0x2248]
call fcn.00405bb0
test al, al
jne 0x4c81b9
push 0
push 0x592b4c
lea ecx, [ebp - 0x2248]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c81b9
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2248]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f110
push 0
push 0x72
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c81b9
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00405820
push eax
push 0x72
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2248]
call fcn.00405820
push eax
push 0x595310
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6fac]
mov dword [ebp - 0x6f8c], eax
mov eax, dword [ebp - 0x6fb4]
jb 0x4c8010
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c928b
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4c825a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595368
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4c8210
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5953b0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4c82c1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x5953b0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
push 0
push 0x5953f4
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x4c850e
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c8508
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [esi + ecx]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
lea eax, [ebp - 0x1ff4]
push eax
push 0x58f2c4
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4c84ec
lea eax, [ebp - 0x2184]
mov dword [ebp - 0x2184], 0
push eax
push 0x58f364
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4c8381
cmp dword [ebp - 0x2184], 0
jne 0x4c84ec
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c84ec
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c84ec
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c84ec
push eax
push 1
push 1
push eax
push 0x594c18
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c84ec
push eax
push 0x595434
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c84ec
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f2c4
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c84ec
push 0
push 0
push 0
push 0
push 0
push 0x58f2c4
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00405820
push eax
push 0x74
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
push 0x595470
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4c8300
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c928b
push 0xc
lea ecx, [ebp - 0x26c4]
call fcn.00401e00
lea ecx, [ebp - 0x26c4]
call fcn.00404bc0
mov byte [ebp - 4], 0x80
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x4c87d7
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c87d1
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [esi + ecx]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
lea eax, [ebp - 0x1ff4]
push eax
push 0x58f404
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4c87b5
lea eax, [ebp - 0x2184]
mov dword [ebp - 0x2184], 0
push eax
push 0x58f504
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4c85e1
cmp dword [ebp - 0x2184], 0
je 0x4c87b5
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c87b5
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c87b5
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c87b5
push eax
push 1
push 1
push eax
push 0x594c18
lea ecx, [ebp - 0x1ff4]
call fcn.00406ef0
test eax, eax
jne 0x4c87b5
push eax
push 0x595434
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c87b5
lea eax, [ebp - 0x26c4]
push eax
push 0x58f4d0
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4c87b5
lea ecx, [ebp - 0x26c4]
call fcn.00405bb0
test al, al
jne 0x4c87b5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5954c0
lea ecx, [ebp - 0x26c4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2248]
call fcn.00405430
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2248]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c87b5
push 0
push 0
push 0
push 0
push 0
push 0x58f404
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00405820
push eax
push 0x74
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
push 0x5954e8
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4c8560
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c9280
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x4c8a57
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c8a57
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c8a35
lea eax, [ebp - 0x2184]
mov dword [ebp - 0x2184], 0
push eax
push 0x595548
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4c8a35
cmp dword [ebp - 0x2184], 4
jne 0x4c8a35
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x59556c
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c8a35
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.0040d040
test al, al
je 0x4c8a2f
lea eax, [ebp - 0x1ff4]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4c8a0d
lea ecx, [ebp - 0x1ff4]
call fcn.00405bb0
test al, al
jne 0x4c8a0d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f6c0
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4c8a0d
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
call fcn.00405820
push eax
push 0x74
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1ff4]
call fcn.00405820
push eax
push 0x595598
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040d040
test al, al
jne 0x4c8900
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4c8812
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c9280
push 0
push 0x5955e0
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4c8e4b
mov esi, dword [ebp - 0x6fa8]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c8e4b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b28
lea ecx, [ebp - 0x2160]
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x3c70]
call fcn.00411170
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x3c70]
call fcn.00401350
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x81
call fcn.00406cd0
lea ecx, [ebp - 0x3c70]
call fcn.00401490
test al, al
je 0x4c8e23
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x3c70]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405010
push 0x594b64
lea ecx, [ebp - 0x201c]
call fcn.00405200
test al, al
je 0x4c8b8e
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x201c]
call fcn.00406ef0
cmp eax, 1
jne 0x4c8e10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
lea ecx, [ebp - 0x3c70]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405430
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4c8ccf
push 0
push 0x594328
push 0x58f7c4
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c8ccf
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f7c4
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c8e10
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
push 0
push 0x73
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
push 0x594364
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x58f7c4
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0x594328
push 0x58f8c0
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c8e10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595674
push 1
lea ecx, [ebp - 0x3c70]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405430
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4c8e10
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f8c0
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c8e10
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
push 0
push 0x73
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
push 0x594364
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x58f8c0
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x3c70]
call fcn.00401450
test al, al
jne 0x4c8b40
lea ecx, [ebp - 0x3c70]
mov byte [ebp - 4], 0x80
call fcn.004013a0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x4c8a92
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c9280
lea eax, [ebp - 0x22d0]
push eax
lea ecx, [ebp - 0x201c]
call fcn.00405020
push 1
lea ecx, [ebp - 0x201c]
call fcn.00405a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595690
lea ecx, [ebp - 0x201c]
call fcn.00407230
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4c9031
push 0
push 0x594328
push 0x58f990
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c9031
push 0
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2548]
call fcn.0041e000
test al, al
je 0x4c9031
lea eax, [ebp - 0x2a2c]
push eax
push 0x5789fc
push 0x594bb0
lea ecx, [ebp - 0x2548]
call fcn.0041ede0
test al, al
jne 0x4c8f79
lea eax, [ebp - 0x2a2c]
push eax
push 0x5789fc
push 0x594cf0
lea ecx, [ebp - 0x2548]
call fcn.0041ede0
test al, al
jne 0x4c8f79
lea eax, [ebp - 0x2a2c]
push eax
push 0x5789fc
push 0x58ef48
lea ecx, [ebp - 0x2548]
call fcn.0041ede0
test al, al
jne 0x4c8f79
lea eax, [ebp - 0x2a2c]
push eax
push 0x5789fc
push 0x595068
lea ecx, [ebp - 0x2548]
call fcn.0041ede0
test al, al
je 0x4c9031
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58da98
push 0x58f990
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004b0c50
mov esi, eax
cmp esi, 0xffffffff
je 0x4c9031
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58da98
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
push 0
push 0x73
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x201c]
call fcn.00405820
push eax
push 0x594364
push 0x5939ec
push 0x5956b8
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0x594328
push 0x58fa90
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c9280
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4c90b1
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595368
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4c9067
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595368
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4c9118
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x595368
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x4c925c
mov eax, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
mov ecx, esi
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
test al, al
je 0x4c9240
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c925c
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
lea ecx, [ecx + esi]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58fa90
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4c9240
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00405820
push eax
push 0
mov ecx, esi
call fcn.00405820
push eax
push 0x73
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x594364
lea ecx, [ecx + esi]
call fcn.00405820
push eax
push 0x592cbc
push 0x58fa90
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4c9140
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.00404160
lea ecx, [ebp - 0x26c4]
call fcn.00405360
lea ecx, [ebp - 0x2248]
call fcn.00405360
lea ecx, [ebp - 0x2284]
call fcn.00405360
lea ecx, [ebp - 0x6df4]
call fcn.004da520
lea ecx, [ebp - 0x2548]
call fcn.00429a60
lea ecx, [ebp - 0x22d0]
call fcn.00405360
lea ecx, [ebp - 0x1ff4]
call fcn.00405360
lea ecx, [ebp - 0x2400]
call fcn.00405360
lea ecx, [ebp - 0x201c]
call fcn.00405360
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x46
call fcn.00405360
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc65d
test dword [edi + 0x34], 0x1000
jne 0x4cc65d
push 0
push 0x595710
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x595750
push dword [eax + 0x38]
call fcn.00438b50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x28
push dword [eax + 0x34]
call fcn.0043b930
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x7020], 0x59578c
mov dword [ebp - 0x701c], 0x59579c
mov dword [ebp - 0x7018], 0x5957ac
mov dword [ebp - 0x7014], 0x5957c4
mov dword [ebp - 0x7010], 0x5957d8
mov dword [ebp - 0x700c], 0x583468
mov dword [ebp - 0x7008], 0x594c00
mov dword [ebp - 0x7004], 0x594c34
mov dword [ebp - 0x6ffc], 0x58fb5c
mov dword [ebp - 0x6ff8], 0x58fb98
mov dword [ebp - 0x6ff4], 0x58fb80
mov dword [ebp - 0x6ff0], 0x583450
mov dword [ebp - 0x6fec], 0x58fc1c
mov dword [ebp - 0x6fe8], 0x58fc9c
test eax, eax
je 0x4c943a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5833f8
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4c93f0
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5957f0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4c94a1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x5957f0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
push 0xc
lea ecx, [ebp - 0x2004]
call fcn.00401e00
lea ecx, [ebp - 0x2004]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x23f4]
mov byte [ebp - 4], 0x82
call fcn.00401e00
lea ecx, [ebp - 0x23f4]
call fcn.00404bc0
mov byte [ebp - 4], 0x83
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
push 0
push 0x595848
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x4c9733
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c972d
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c970b
xor esi, esi
lea eax, [ebp - 0x2004]
push eax
push dword [ebp + esi*4 - 0x6ffc]
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4c96f5
lea ecx, [ebp - 0x2004]
call fcn.00405bb0
test al, al
jne 0x4c96f5
push 0
push 0x5958a4
lea ecx, [ebp - 0x2004]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c96f5
xor eax, eax
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00406ef0
dec eax
cmp eax, 0x10
jbe 0x4c96f5
mov eax, dword [ebp - 0x6f8c]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, 8
jb 0x4c95d0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
push dword [ebp + esi*4 - 0x6ffc]
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x4c96f5
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push dword [ebp + esi*4 - 0x6ffc]
call fcn.00405820
mov ecx, dword [ebp - 0x6fcc]
push eax
push 0
call fcn.00405820
push eax
push 0x1f
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x5958c8
call fcn.00405820
push eax
push 0x592cbc
push dword [ebp + esi*4 - 0x6ffc]
lea ecx, [ebp - 0x1f80]
push 0x5938f8
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
inc esi
cmp esi, 6
jb 0x4c9571
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4c9530
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc643
push 0x18
lea ecx, [ebp - 0x2694]
call fcn.00402420
lea ecx, [ebp - 0x2694]
call fcn.00408af0
mov byte [ebp - 4], 0x84
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x4c9a26
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
nop word [eax + eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c9a26
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
lea ecx, [ebp - 0x1f74]
call fcn.00408ca0
test eax, eax
je 0x4c9a04
lea eax, [ebp - 0x2004]
push eax
push 0x583514
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4c9a04
push 1
push 0x575c94
lea ecx, [ebp - 0x2004]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2694]
call fcn.00408cb0
xor esi, esi
lea ecx, [ebp - 0x2694]
mov dword [ebp - 0x6fa4], esi
call fcn.00408ca0
test eax, eax
je 0x4c99fe
push esi
lea ecx, [ebp - 0x2694]
call fcn.00408c70
push eax
lea ecx, [ebp - 0x2004]
call fcn.00405010
lea ecx, [ebp - 0x2004]
call fcn.00405bb0
test al, al
jne 0x4c99e4
xor eax, eax
mov dl, 1
mov dword [ebp - 0x6f8c], eax
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
mov byte [ebp - 0x6f81], dl
call fcn.00406ef0
dec eax
lea ecx, [ebp - 0x2004]
cmp eax, 0x10
jbe 0x4c99d0
push 0
push 0x5958a4
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
movzx ecx, byte [ebp - 0x6f81]
xor edx, edx
test al, al
cmove edx, ecx
test dl, dl
je 0x4c99e4
mov eax, dword [ebp - 0x6f8c]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, 7
jb 0x4c9867
test dl, dl
je 0x4c99e4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x583514
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x4c99e4
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0x583514
call fcn.00405820
mov ecx, dword [ebp - 0x6fcc]
push eax
push 0
call fcn.00405820
push eax
push 0x1f
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x5958c8
call fcn.00405820
push eax
push 0x592cbc
push 0x583514
push 0x5938f8
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
jmp 0x4c99e4
call fcn.00405820
push 0
push 0x5958a4
push eax
mov ecx, edi
call fcn.004de890
lea ecx, [ebp - 0x2694]
inc esi
call fcn.00408ca0
cmp esi, eax
jb 0x4c9832
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4c9790
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc638
push 4
lea ecx, [ebp - 0x1fd8]
call fcn.004093c0
lea ecx, [ebp - 0x1fd8]
call fcn.0040c910
push 4
lea ecx, [ebp - 0x2078]
mov byte [ebp - 4], 0x85
call fcn.004093c0
lea ecx, [ebp - 0x2078]
call fcn.0040c910
mov byte [ebp - 4], 0x86
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4c9ad2
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5838a0
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4c9a88
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5958e0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4c9b39
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x5958e0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
push 0xc
lea ecx, [ebp - 0x20fc]
call fcn.00401e00
lea ecx, [ebp - 0x20fc]
call fcn.00404bc0
push 0
push 0x595948
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x87
call fcn.0041a620
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x4c9ea4
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4c9ea4
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4c9e82
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.0040cfc0
test al, al
je 0x4c9e7c
nop word [eax + eax]
mov ecx, dword [ebp - 0x6fcc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd8]
call fcn.0040c940
test al, al
je 0x4c9e5a
lea eax, [ebp - 0x20fc]
push eax
push 0x57b0a8
lea ecx, [ebp - 0x1fd8]
call fcn.0040cb10
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00405330
cmp word [eax], 0x40
jne 0x4c9cc7
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00405820
push eax
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.00405dd0
push 0
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.00405820
push eax
lea ecx, [ebp - 0x20fc]
call fcn.00405820
push eax
call dword [0x5564f4]
lea eax, [ebp - 0x2004]
push eax
push 0x587528
lea ecx, [ebp - 0x1fd8]
call fcn.0040cb10
lea ecx, [ebp - 0x20fc]
call fcn.00405bb0
test al, al
je 0x4c9d00
lea ecx, [ebp - 0x2004]
call fcn.00405bb0
test al, al
jne 0x4c9e5a
push 0
push 0x59599c
lea ecx, [ebp - 0x2004]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4c9e5a
xor eax, eax
mov dword [ebp - 0x6f8c], eax
nop word [eax + eax]
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00406ef0
dec eax
cmp eax, 0x10
jbe 0x4c9e5a
mov eax, dword [ebp - 0x6f8c]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, 7
jb 0x4c9d30
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x20fc]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x20
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x4c9e5a
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
push 0x20
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x5958c8
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x20fc]
call fcn.00405820
push eax
push 0x5938f8
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040cfc0
test al, al
jne 0x4c9c00
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4c9b98
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc617
push 0
push 0x5959c4
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
push 0xc
lea ecx, [ebp - 0x20a8]
call fcn.00401e00
lea ecx, [ebp - 0x20a8]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x23a0]
mov byte [ebp - 4], 0x88
call fcn.00401e00
lea ecx, [ebp - 0x23a0]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x89
call fcn.00401e00
lea ecx, [ebp - 0x20d8]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2210]
mov byte [ebp - 4], 0x8a
call fcn.00401e00
lea ecx, [ebp - 0x2210]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x23ac]
mov byte [ebp - 4], 0x8b
call fcn.00401e00
lea ecx, [ebp - 0x23ac]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x20b4]
mov byte [ebp - 4], 0x8c
call fcn.00401e00
lea ecx, [ebp - 0x20b4]
call fcn.00404bc0
push 0xfc8
lea ecx, [ebp - 0x68b8]
mov byte [ebp - 4], 0x8d
call fcn.00415ef0
lea ecx, [ebp - 0x68b8]
call fcn.00410550
mov byte [ebp - 4], 0x8e
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4c9ff1
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5900a8
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4c9fa7
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x590378
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4ca058
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x590378
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4ca570
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
nop dword [eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4ca570
mov ecx, dword [ebp - 0x6f80]
push 1
lea ecx, [esi + ecx]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.004053e0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4ca54e
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.0040d040
test al, al
je 0x4ca548
mov ecx, dword [ebp - 0x6cec]
call fcn.0040f6a0
test al, al
je 0x4ca526
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [edi + 0x33c]
push 0x595a04
call fcn.00405820
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00405430
lea ecx, [ebp - 0x20b4]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4ca526
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00405820
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00405430
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00406ef0
test eax, eax
jne 0x4ca526
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00407230
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23ac]
call fcn.00405010
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
lea eax, [ebp - 0x20d8]
push eax
lea eax, [ebp - 0x23ac]
push eax
call fcn.004da620
lea ecx, [ebp - 0x20d8]
call fcn.00405bb0
test al, al
je 0x4ca22e
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x20d8]
call fcn.00405010
push 0
push 0x595a1c
lea ecx, [ebp - 0x20d8]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4ca526
push 0
push 1
push 1
push 0
push 0x595a30
lea ecx, [ebp - 0x20d8]
call fcn.00406ef0
cmp eax, 1
je 0x4ca526
push 0
push 1
push 1
push 0
push 0x595a4c
lea ecx, [ebp - 0x20d8]
call fcn.00406ef0
cmp eax, 1
je 0x4ca526
push 0
push 1
push 1
push 0
push 0x575cb0
lea ecx, [ebp - 0x20d8]
call fcn.00406ef0
cmp eax, 1
je 0x4ca526
lea ecx, [ebp - 0x20a8]
call fcn.00405bb0
lea ecx, [ebp - 0x20a8]
test al, al
je 0x4ca2d4
push 0x595a70
call fcn.00405010
jmp 0x4ca2f4
push 0
push 0
push 0x575cb0
push 0x576600
call fcn.004078d0
push 0
lea ecx, [ebp - 0x20a8]
call fcn.00405cb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x57a658
call fcn.00405820
push eax
lea ecx, [ebp - 0x213c]
call fcn.00405430
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
call fcn.004df9c0
lea ecx, [ebp - 0x20a8]
call fcn.00405820
push eax
push 0
call dword [0x5568a8]
test eax, eax
jne 0x4ca526
lea ecx, [ebp - 0x20a8]
call fcn.00405820
push eax
lea ecx, [ebp - 0x68b8]
call fcn.00410900
test al, al
je 0x4ca424
push 0x575cb0
push str.CompanyName
lea ecx, [ebp - 0x68b8]
call fcn.00410660
push eax
lea ecx, [ebp - 0x2210]
call fcn.00405010
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x2210]
call fcn.00406ef0
cmp eax, 1
je 0x4ca526
push 0
push 1
push 1
push 0
push 0x595acc
lea ecx, [ebp - 0x2210]
call fcn.00406ef0
cmp eax, 1
je 0x4ca526
push 0
push 1
push 1
push 0
push 0x595ae8
lea ecx, [ebp - 0x2210]
call fcn.00406ef0
cmp eax, 1
je 0x4ca526
push 0
push 1
push 1
push 0
push 0x5875a0
lea ecx, [ebp - 0x2210]
call fcn.00406ef0
cmp eax, 1
je 0x4ca526
push 0
lea ecx, [ebp - 0x20a8]
call fcn.00405820
push eax
push 0
push 1
lea ecx, [ebp - 0x20a8]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4ca526
mov ecx, dword [ebp - 0x6f78]
push 0
push dword [ebp - 0x6cec]
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x20a8]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
push 0x21
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x20a8]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x595b10
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x20d8]
call fcn.00405820
push eax
push 0x5938f8
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040d040
test al, al
jne 0x4ca104
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4ca090
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc5ca
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4ca5ea
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58dbd0
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4ca5a0
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58dc28
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4ca651
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x58dc28
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6ff8], 0x595b28
mov dword [ebp - 0x6ff4], 0x595b68
mov dword [ebp - 0x6ff0], 0x595b88
mov dword [ebp - 0x6fec], 0x595ba4
mov dword [ebp - 0x6fe8], 0x595bc0
mov dword [ebp - 0x6fb4], 0
jbe 0x4cac53
mov ecx, dword [ebp - 0x6fa8]
mov eax, esi
sub eax, ecx
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cac53
xor esi, esi
mov dword [ebp - 0x6fa4], esi
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cac33
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6ff8]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4cac23
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6f8c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0040cfc0
test al, al
je 0x4cac23
mov esi, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6cec]
call fcn.0040f6a0
test al, al
je 0x4cabf5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [edi + 0x33c]
push 0x595a04
call fcn.00405820
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00405430
lea ecx, [ebp - 0x20b4]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4cabf5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00405430
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00406ef0
test eax, eax
jne 0x4cabf5
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00407230
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23ac]
call fcn.00405010
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
lea eax, [ebp - 0x20d8]
push eax
lea eax, [ebp - 0x23ac]
push eax
call fcn.004da620
lea ecx, [ebp - 0x20d8]
call fcn.00405bb0
lea ecx, [ebp - 0x20d8]
test al, al
je 0x4ca88b
push dword [ebp - 0x6cec]
call fcn.00405010
jmp 0x4ca94b
push 0
push 1
push 1
push 0
push 0x595a30
call fcn.00406ef0
cmp eax, 1
je 0x4cabf5
push 0
push 1
push 1
push 0
push 0x595a4c
lea ecx, [ebp - 0x20d8]
call fcn.00406ef0
cmp eax, 1
je 0x4cabf5
push 0
push 1
push 1
push 0
push 0x595bd4
lea ecx, [ebp - 0x20d8]
call fcn.00406ef0
cmp eax, 1
je 0x4cabf5
push 0
push 1
push 1
push 0
push 0x595bf0
lea ecx, [ebp - 0x20d8]
call fcn.00406ef0
cmp eax, 1
je 0x4cabf5
push 0
push 1
push 1
push 0
push 0x595c18
lea ecx, [ebp - 0x20d8]
call fcn.00406ef0
cmp eax, 1
je 0x4cabf5
push 0
push 1
push 1
push 0
push 0x595c38
lea ecx, [ebp - 0x20d8]
call fcn.00406ef0
cmp eax, 1
je 0x4cabf5
push 0
push 0x595a1c
lea ecx, [ebp - 0x20d8]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cabf5
lea ecx, [ebp - 0x20a8]
call fcn.00405bb0
lea ecx, [ebp - 0x20a8]
test al, al
je 0x4ca98e
push 0x595a70
call fcn.00405010
jmp 0x4ca9ae
push 0
push 0
push 0x575cb0
push 0x576600
call fcn.004078d0
push 0
lea ecx, [ebp - 0x20a8]
call fcn.00405cb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x213c]
call fcn.00405430
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
call fcn.004df9c0
lea ecx, [ebp - 0x20a8]
call fcn.00405820
push eax
push 0
call dword [0x5568a8]
test eax, eax
jne 0x4cabf5
lea ecx, [ebp - 0x20a8]
call fcn.00405820
push eax
lea ecx, [ebp - 0x68b8]
call fcn.00410900
test al, al
je 0x4caaff
push 0x575cb0
push str.CompanyName
lea ecx, [ebp - 0x68b8]
call fcn.00410660
push eax
lea ecx, [ebp - 0x2210]
call fcn.00405010
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x2210]
call fcn.00406ef0
cmp eax, 1
je 0x4cabf5
push 0
push 1
push 1
push 0
push 0x595acc
lea ecx, [ebp - 0x2210]
call fcn.00406ef0
cmp eax, 1
je 0x4cabf5
push 0
push 1
push 1
push 0
push 0x595ae8
lea ecx, [ebp - 0x2210]
call fcn.00406ef0
cmp eax, 1
je 0x4cabf5
push 0
push 1
push 1
push 0
push 0x595c68
lea ecx, [ebp - 0x2210]
call fcn.00406ef0
cmp eax, 1
je 0x4cabf5
push 0
push 1
push 1
push 0
push 0x5875a0
lea ecx, [ebp - 0x2210]
call fcn.00406ef0
cmp eax, 1
je 0x4cabf5
push 0
lea ecx, [ebp - 0x20a8]
call fcn.00405820
push eax
push 0
push 1
lea ecx, [ebp - 0x20a8]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4cabf5
push 0
push dword [ebp - 0x6cec]
mov ecx, esi
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x20a8]
call fcn.00405820
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00405820
push eax
push 0x21
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x20a8]
call fcn.00405820
push eax
push 0x595b10
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x20d8]
call fcn.00405820
push eax
push 0x5938f8
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f8c], eax
call fcn.0040cfc0
test al, al
jne 0x4ca760
mov esi, dword [ebp - 0x6fa4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 5
jb 0x4ca6c7
mov esi, dword [ebp - 0x6fb4]
add dword [ebp - 0x6f78], 0xc
inc esi
mov dword [ebp - 0x6fb4], esi
cmp esi, dword [ebp - 0x6fac]
jb 0x4ca6b0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc5ca
push 0
push 0x595c88
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
lea ecx, [ebp - 0x6e6c]
call fcn.004da4e0
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x6e64]
mov eax, dword [edi + 8]
push 0x5813d4
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e6c], eax
mov dword [ebp - 0x6e68], 0x23
call fcn.00405010
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6e54], eax
lea ecx, [ebp - 0x6e44]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6e50], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6e4c], eax
mov eax, dword [edi + 4]
push 0x581ba4
mov dword [ebp - 0x6e48], eax
call fcn.00405010
push 0xc
lea ecx, [ebp - 0x22c0]
call fcn.00401e00
lea ecx, [ebp - 0x22c0]
call fcn.00404bc0
xor esi, esi
mov byte [ebp - 4], 0x90
cmp dword [edi + 0x30], esi
jbe 0x4cae5c
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cae5c
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.004053c0
cmp eax, 3
jl 0x4cae52
push esi
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6e58], eax
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x22c0]
call fcn.00405430
lea ecx, [ebp - 0x22c0]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4cae52
lea ecx, [ebp - 0x22c0]
call fcn.00405820
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cae5c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x22c0]
call fcn.00405430
lea ecx, [ebp - 0x22c0]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4cae52
push 0
lea ecx, [ebp - 0x22c0]
call fcn.00405a70
lea ecx, [ebp - 0x22c0]
call fcn.00405820
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.004bd520
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4cad10
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc5b4
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6e58], 0x58da98
call fcn.00405820
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
lea ecx, [ebp - 0x22c0]
test al, al
jne 0x4cc5ba
lea eax, [ebp - 0x2640]
push eax
call fcn.00405020
push 0
lea ecx, [ebp - 0x22c0]
call fcn.00405a70
lea ecx, [ebp - 0x22c0]
call fcn.00405820
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc5b4
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4caf4b
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595cd0
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4caf01
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595d58
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4cafb2
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x595d58
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
mov edx, dword [ebp - 0x6fac]
test edx, edx
je 0x4cb190
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
mov dword [ebp - 0x6f8c], edx
nop word [eax + eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4cb17a
lea eax, [ebp - 0x20b4]
push eax
push 0x575cb0
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4cb17a
push 0
push 1
push 1
push 0
push 0x595de0
lea ecx, [ebp - 0x20b4]
call fcn.00406ef0
lea ecx, [ebp - 0x20b4]
mov dword [ebp - 0x6f80], eax
call fcn.004053c0
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xc]
cmp eax, ecx
jle 0x4cb17a
lea eax, [edx + 0xd]
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00406d30
push 3
lea ecx, [ebp - 0x20b4]
call fcn.00407bb0
lea ecx, [ebp - 0x20b4]
call fcn.00405bb0
test al, al
jne 0x4cb17a
push 0
push 0x592c0c
lea ecx, [ebp - 0x20b4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cb17a
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f110
push 1
push 0x23
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4cb17a
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00405820
push eax
push 0x23
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x20b4]
call fcn.00405820
push eax
push 0x595310
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
sub dword [ebp - 0x6f8c], 1
jne 0x4cafe0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc5b4
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4cb20a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595e00
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4cb1c0
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595e60
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4cb271
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x595e60
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
push 0
push 0x595ec0
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6f8c], 0
test esi, esi
je 0x4cb75f
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cb759
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x4cb2db
add eax, 0xfffffffe
cmp dword [ebp - 0x6f8c], eax
je 0x4cb737
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add ecx, esi
push 0x595f14
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4cb737
lea eax, [ebp - 0x26d8]
mov dword [ebp - 0x26d8], 0
push eax
push 0x5833e4
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4cb737
cmp dword [ebp - 0x26d8], 0
je 0x4cb737
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595f30
lea ecx, [esi + ecx]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4cb737
lea eax, [ebp - 0x2004]
push eax
push 0x583450
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4cb52a
lea ecx, [ebp - 0x2004]
call fcn.00405bb0
test al, al
jne 0x4cb52a
push 0
push 0x595f3c
lea ecx, [ebp - 0x2004]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cb52a
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00406ef0
dec eax
cmp eax, 0x10
jbe 0x4cb524
inc esi
cmp esi, 7
jb 0x4cb418
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x583450
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4cb52a
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00405820
push eax
push 0
push 0x583450
mov ecx, esi
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
push 0x25
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2004]
call fcn.00405820
push eax
push 0x5958c8
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x595f60
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
jmp 0x4cb52a
mov esi, dword [ebp - 0x6f78]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cb759
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5834e8
lea ecx, [ebp - 0x1f8c]
call fcn.00407230
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4cb737
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.0040d040
test al, al
je 0x4cb731
nop dword [eax + eax]
mov eax, dword [ebp - 0x6cec]
cmp word [eax], 0
je 0x4cb70f
push eax
lea ecx, [ebp - 0x2004]
call fcn.00405010
push 0
push 0x595f3c
lea ecx, [ebp - 0x2004]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cb72b
xor eax, eax
mov dword [ebp - 0x6f9c], eax
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00406ef0
dec eax
cmp eax, 0x10
jbe 0x4cb70f
mov eax, dword [ebp - 0x6f9c]
inc eax
mov dword [ebp - 0x6f9c], eax
cmp eax, 7
jb 0x4cb5f6
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x590630
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4cb70f
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
push 0x25
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x5958c8
call fcn.00405820
push eax
push 0x592cbc
push 0x595f8c
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040d040
test al, al
jne 0x4cb5b0
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4cb2b5
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc5b4
mov dword [ebp - 0x6f8c], 0
test esi, esi
je 0x4cbba4
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
nop word [eax + eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cbba4
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x4cb7c6
add eax, 0xfffffffe
cmp dword [ebp - 0x6f8c], eax
je 0x4cbb82
mov eax, dword [ebp - 0x6f80]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add eax, esi
push 0
push 0x595fc8
mov ecx, eax
mov dword [ebp - 0x6fb4], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4cbb82
lea eax, [ebp - 0x26d4]
mov dword [ebp - 0x26d4], 0
push eax
push 0x583860
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4cbb82
cmp dword [ebp - 0x26d4], 0
je 0x4cbb82
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595ffc
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4cbb82
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.0040cfc0
test al, al
je 0x4cbb7c
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x596018
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd8]
call fcn.0040c940
test al, al
je 0x4cbb5a
lea eax, [ebp - 0x20fc]
push eax
push 0x57b0a8
lea ecx, [ebp - 0x1fd8]
call fcn.0040cb10
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00405330
cmp word [eax], 0x40
jne 0x4cb99c
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00405820
push eax
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.00405dd0
push 0
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.00405820
push eax
lea ecx, [ebp - 0x20fc]
call fcn.00405820
push eax
call dword [0x5564f4]
lea eax, [ebp - 0x2004]
push eax
push 0x587528
lea ecx, [ebp - 0x1fd8]
call fcn.0040cb10
lea ecx, [ebp - 0x20fc]
call fcn.00405bb0
test al, al
je 0x4cb9d5
lea ecx, [ebp - 0x2004]
call fcn.00405bb0
test al, al
jne 0x4cbb5a
push 0
push 0x595f3c
lea ecx, [ebp - 0x2004]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cbb76
xor eax, eax
mov dword [ebp - 0x6f9c], eax
nop
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00406ef0
dec eax
cmp eax, 0x10
jbe 0x4cbb5a
mov eax, dword [ebp - 0x6f9c]
inc eax
mov dword [ebp - 0x6f9c], eax
cmp eax, 7
jb 0x4cba00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5954c0
lea ecx, [ebp - 0x20fc]
call fcn.00405820
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00405430
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4cbb5a
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
push 0x25
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2004]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x5958c8
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x20fc]
call fcn.00405820
push eax
push 0x596034
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040cfc0
test al, al
jne 0x4cb8d5
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4cb7a0
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4cbc0d
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x59606c
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4cbbc3
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596098
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4cbc74
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x596098
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
push 0xc
lea ecx, [ebp - 0x26b8]
call fcn.00401e00
lea ecx, [ebp - 0x26b8]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x25c8]
mov byte [ebp - 4], 0x91
call fcn.00401e00
lea ecx, [ebp - 0x25c8]
call fcn.00404bc0
push 0
push 0x5961d8
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x92
call fcn.0041a620
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4cc073
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f78], eax
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc073
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x4cbd16
add eax, 0xfffffffe
cmp dword [ebp - 0x6f8c], eax
je 0x4cc051
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596238
lea ecx, [ecx + esi]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4cbe9a
push 0
push 0x59628c
push 0x5906d0
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cbe9a
lea eax, [ebp - 0x26b8]
push eax
push 0x5906e8
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
lea eax, [ebp - 0x28ac]
push eax
push 0x590700
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
lea ecx, [ebp - 0x26b8]
call fcn.00405bb0
test al, al
jne 0x4cbe9a
cmp dword [ebp - 0x28ac], 0
je 0x4cbe9a
push 0
push 0
push 0
push 0
push 0x5960c8
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x5906d0
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4cbe9a
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x5940f8
push 0x5960c8
push 0x594364
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x5906d0
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0x59628c
push 0x5907c0
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cc051
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5962b0
lea ecx, [ecx + esi]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4cc051
lea eax, [ebp - 0x25c8]
push eax
push 0x57e968
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4cc051
lea ecx, [ebp - 0x26b8]
call fcn.00405bb0
test al, al
jne 0x4cc051
push 0
push 0
push 0x575cb0
push 0x5766e8
lea ecx, [ebp - 0x25c8]
call fcn.004078d0
push 0
push 1
push 1
push 0
push 0x57e974
lea ecx, [ebp - 0x25c8]
call fcn.00406ef0
lea ecx, [ebp - 0x25c8]
mov esi, eax
call fcn.004053c0
sub eax, 0xb
cmp esi, eax
mov esi, dword [ebp - 0x6fb4]
je 0x4cc051
push 0
push 0
push 0
push 0
push 0x596148
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x5907c0
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4cc051
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x5940f8
push 0x596148
push 0x594364
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x5907c0
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4cbcf0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc59e
push 0
push 0x59628c
push 0x590860
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cc59e
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4cc10a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5837c8
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4cc0c0
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5837c8
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4cc171
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x5837c8
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x4cc33a
mov eax, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
mov ecx, esi
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
test al, al
je 0x4cc31e
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc33a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5905c0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2114]
call fcn.00405430
lea ecx, [ebp - 0x2114]
call fcn.00405820
mov edx, 0x5833e4
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4cc24c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5870bc
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2114]
call fcn.00405430
lea ecx, [ebp - 0x2114]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
test al, al
je 0x4cc31e
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
add ecx, esi
push 0x5962f8
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x590860
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4cc31e
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00405820
push eax
push 0
mov ecx, esi
call fcn.00405820
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0x5940f8
push 0x5962f8
push 0x594364
lea ecx, [ecx + esi]
call fcn.00405820
push eax
push 0x592cbc
push 0x590860
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4cc196
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cc59e
push 0
push 0x59628c
push 0x590924
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cc59e
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4cc3cd
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5963a0
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4cc383
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5963a0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4cc434
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x5963a0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
mov edx, dword [ebp - 0x6fac]
test edx, edx
je 0x4cc56f
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
mov dword [ebp - 0x6f8c], edx
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd8]
call fcn.0040c940
test al, al
je 0x4cc559
lea ecx, [ebp - 0x1fd8]
call fcn.0040d0e0
cmp eax, 1
jbe 0x4cc559
push 0
push 0
push 0
push 0
push 0x596408
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x590924
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4cc559
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00405820
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5940f8
push 0x596408
push 0x594364
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x596478
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
sub dword [ebp - 0x6f8c], 1
jne 0x4cc460
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
mov ecx, edi
call fcn.004df470
test al, al
je 0x4cc59e
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.00404160
lea ecx, [ebp - 0x25c8]
call fcn.00405360
lea ecx, [ebp - 0x26b8]
call fcn.00405360
lea ecx, [ebp - 0x22c0]
call fcn.00405360
lea ecx, [ebp - 0x6e6c]
call fcn.004da520
lea ecx, [ebp - 0x68b8]
call fcn.00415eb0
lea ecx, [ebp - 0x20b4]
call fcn.00405360
lea ecx, [ebp - 0x23ac]
call fcn.00405360
lea ecx, [ebp - 0x2210]
call fcn.00405360
lea ecx, [ebp - 0x20d8]
call fcn.00405360
lea ecx, [ebp - 0x23a0]
call fcn.00405360
lea ecx, [ebp - 0x20a8]
call fcn.00405360
lea ecx, [ebp - 0x20fc]
call fcn.00405360
lea ecx, [ebp - 0x2078]
call fcn.0040c980
lea ecx, [ebp - 0x1fd8]
call fcn.0040c980
lea ecx, [ebp - 0x2694]
call fcn.00408c40
lea ecx, [ebp - 0x23f4]
call fcn.00405360
lea ecx, [ebp - 0x2004]
mov byte [ebp - 4], 0x46
call fcn.00405360
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4ceea8
test dword [edi + 0x34], 0x1000
jne 0x4ceea8
push 0
push 0x5964cc
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x596504
push dword [eax + 0x38]
call fcn.00438b50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2d
push dword [eax + 0x34]
call fcn.0043b930
push 0xc
lea ecx, [ebp - 0x20e4]
call fcn.00401e00
lea ecx, [ebp - 0x20e4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2028]
mov byte [ebp - 4], 0x93
call fcn.00401e00
lea ecx, [ebp - 0x2028]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x23e8]
mov byte [ebp - 4], 0x94
call fcn.00401e00
lea ecx, [ebp - 0x23e8]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x1fe4]
mov byte [ebp - 4], 0x95
call fcn.00401e00
lea ecx, [ebp - 0x1fe4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x22e8]
mov byte [ebp - 4], 0x96
call fcn.00401e00
lea ecx, [ebp - 0x22e8]
call fcn.00404bc0
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x256c]
xor esi, esi
push 0x24
mov dword [ebp - 0x6f8c], esi
call fcn.004542b0
lea ecx, [ebp - 0x256c]
call fcn.0041df90
mov byte [ebp - 4], 0x98
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
push esi
push 0x596538
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x4ccdac
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6fb4], esi
nop
lea ecx, [ebp - 0x22e8]
call fcn.00405bb0
test al, al
je 0x4cc7ec
lea eax, [ebp - 0x22e8]
push eax
push 0
lea ecx, [ebp - 0x2160]
call fcn.00405820
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00465bc0
mov esi, dword [ebp - 0x6fb4]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4ccda6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596584
lea ecx, [ebp - 0x2160]
call fcn.00405820
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x5430]
call fcn.00411170
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x5430]
call fcn.00401350
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x99
call fcn.00406cd0
lea ecx, [ebp - 0x5430]
call fcn.00401490
test al, al
je 0x4ccd78
nop
push 1
lea ecx, [ebp - 0x5430]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405010
push 0x594b64
lea ecx, [ebp - 0x2028]
call fcn.00405200
test al, al
je 0x4cc8de
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x2028]
call fcn.00406ef0
cmp eax, 1
jne 0x4ccd65
inc dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x5430]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405430
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041e000
test al, al
je 0x4ccd65
lea eax, [ebp - 0x1fe4]
push eax
push 0x5789fc
push 0x594bb0
lea ecx, [ebp - 0x256c]
call fcn.0041f180
test eax, eax
je 0x4ccb19
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ccb19
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ccb19
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ccb19
push 0x594c00
lea ecx, [ebp - 0x1fe4]
call fcn.004050d0
test al, al
jne 0x4ccb19
push 0
push 1
push 1
push 0
push 0x594c18
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ccb19
push eax
push 0x5965c0
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4ccb19
push 0
push 0x5965ec
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4ccb19
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x594c88
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ccb19
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
push 0x594bb0
push 0x2a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
push 0x594364
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
push 0x594cd0
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x2adc]
mov dword [ebp - 0x6f14], 0
push eax
push 0x5789fc
xorps xmm0, xmm0
lea ecx, [ebp - 0x256c]
push 0x594cf0
movups xmmword [ebp - 0x6f24], xmm0
call fcn.0041ede0
test al, al
je 0x4ccd65
lea eax, [ebp - 0x2adc]
push eax
lea eax, [ebp - 0x6f24]
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041fe10
test al, al
je 0x4ccd65
lea eax, [ebp - 0x1fe4]
push eax
lea eax, [ebp - 0x6f24]
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041fb20
test eax, eax
je 0x4ccd44
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ccd44
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ccd44
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ccd44
push 0x594c00
lea ecx, [ebp - 0x1fe4]
call fcn.004050d0
test al, al
jne 0x4ccd44
push 0
push 1
push 1
push 0
push 0x594c18
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ccd44
push eax
push 0x5965c0
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4ccd44
push 0
push 0x5965ec
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4ccd44
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x594d88
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ccd44
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
push 0x594cf0
push 0x2a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
push 0x594364
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
push 0x594da4
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x2adc]
push eax
lea eax, [ebp - 0x6f24]
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041fe10
test al, al
jne 0x4ccb72
lea ecx, [ebp - 0x5430]
call fcn.00401450
test al, al
jne 0x4cc890
lea ecx, [ebp - 0x5430]
mov byte [ebp - 4], 0x98
call fcn.004013a0
mov eax, dword [ebp - 0x6f78]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x4cc7a0
mov esi, dword [ebp - 0x6f8c]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee62
test esi, esi
jne 0x4ccde4
lea ecx, [ebp - 0x22e8]
call fcn.00405bb0
test al, al
je 0x4ccde4
push esi
push 0x596618
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
jmp 0x4cee62
push 0
push 0x596670
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4cd191
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cd191
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596584
lea ecx, [ebp - 0x2160]
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x4f70]
call fcn.00411170
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x4f70]
call fcn.00401350
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x9a
call fcn.00406cd0
lea ecx, [ebp - 0x4f70]
call fcn.00401490
test al, al
je 0x4cd163
nop dword [eax]
push 1
lea ecx, [ebp - 0x4f70]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405010
push 0x594b64
lea ecx, [ebp - 0x2028]
call fcn.00405200
test al, al
je 0x4ccf0e
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x2028]
call fcn.00406ef0
cmp eax, 1
jne 0x4cd150
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
lea ecx, [ebp - 0x4f70]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405430
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041e000
test al, al
je 0x4cd150
lea eax, [ebp - 0x1fe4]
push eax
push 0x5789fc
push 0x594e60
lea ecx, [ebp - 0x256c]
call fcn.0041f180
test eax, eax
je 0x4cd150
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4cd150
push eax
push 1
push 1
push eax
push 0x594d1c
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4cd150
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4cd150
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4cd150
push eax
push 1
push 1
push eax
push 0x594d40
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4cd150
push eax
push 0x5966b0
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cd150
push 0
push 0x5966e0
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cd150
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x594f10
push 2
push 0x2b
push dword [eax + 0xa8]
call fcn.004b0c50
mov esi, eax
cmp esi, 0xffffffff
je 0x4cd14a
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
push 0x594f40
push 0x2b
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2028]
call fcn.00405820
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x594364
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
push 0x594fa0
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
jmp 0x4cd150
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x4f70]
call fcn.00401450
test al, al
jne 0x4ccec0
lea ecx, [ebp - 0x4f70]
mov byte [ebp - 4], 0x98
call fcn.004013a0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x4cce16
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee62
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596710
lea ecx, [edi + 0x33c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x59674c
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4cd7b0
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cd7b0
push 0xc
lea ecx, [ebp - 0x275c]
call fcn.00401e00
lea ecx, [ebp - 0x275c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x27c8]
mov byte [ebp - 4], 0x9b
call fcn.00401e00
lea ecx, [ebp - 0x27c8]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2750]
mov byte [ebp - 4], 0x9c
call fcn.00401e00
lea ecx, [ebp - 0x2750]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x26ac]
mov byte [ebp - 4], 0x9d
call fcn.00401e00
lea ecx, [ebp - 0x26ac]
call fcn.00404bc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596584
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 0x9e
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x4ab0]
call fcn.00411170
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x4ab0]
call fcn.00401350
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x9f
call fcn.00406cd0
lea ecx, [ebp - 0x4ab0]
call fcn.00401490
test al, al
je 0x4cd756
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x4ab0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405010
push 0x594b64
lea ecx, [ebp - 0x2028]
call fcn.00405200
test al, al
je 0x4cd36e
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x2028]
call fcn.00406ef0
cmp eax, 1
jne 0x4cd743
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
lea ecx, [ebp - 0x4ab0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405430
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041e000
test al, al
je 0x4cd743
lea eax, [ebp - 0x2ac8]
mov dword [ebp - 0x6f28], 0
push eax
push 0x5789fc
xorps xmm0, xmm0
lea ecx, [ebp - 0x256c]
push 0x595068
movups xmmword [ebp - 0x6f38], xmm0
call fcn.0041ede0
test al, al
je 0x4cd743
lea eax, [ebp - 0x2ac8]
push eax
lea eax, [ebp - 0x6f38]
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041f760
test al, al
je 0x4cd743
nop word [eax + eax]
lea eax, [ebp - 0x275c]
push eax
lea eax, [ebp - 0x6f38]
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041efb0
test al, al
je 0x4cd722
lea ecx, [ebp - 0x275c]
call fcn.00405820
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4cd71c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595094
lea ecx, [ebp - 0x275c]
call fcn.00405820
push eax
push 0x5950b8
lea ecx, [ebp - 0x2750]
call fcn.00405430
lea eax, [ebp - 0x27c8]
push eax
push 0x5789fc
lea ecx, [ebp - 0x2750]
call fcn.00405820
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041f180
test eax, eax
je 0x4cd71c
lea ecx, [ebp - 0x27c8]
call fcn.00405820
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4cd71c
push 0
push 0x59677c
lea ecx, [ebp - 0x27c8]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cd71c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5950e8
lea ecx, [ebp - 0x275c]
call fcn.00405820
push eax
push 0x5950b8
lea ecx, [ebp - 0x2750]
call fcn.00405430
lea eax, [ebp - 0x26ac]
push eax
push 0x5789fc
lea ecx, [ebp - 0x2750]
call fcn.00405820
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041f180
test eax, eax
je 0x4cd5cc
push 0
push 1
push 1
push 5
push 0x5766ec
lea ecx, [ebp - 0x26ac]
call fcn.00406ef0
test eax, eax
jne 0x4cd5cc
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5950f8
push 1
lea ecx, [ebp - 0x4ab0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x26ac]
call fcn.004075e0
lea ecx, [ebp - 0x26ac]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4cd71c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x275c]
call fcn.00405820
push eax
push 0x5950b8
lea ecx, [ebp - 0x2750]
call fcn.00405430
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x26ac]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x27c8]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2c
push dword [eax + 0xa8]
call fcn.004b0c50
mov esi, eax
cmp esi, 0xffffffff
je 0x4cd71c
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26ac]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2750]
call fcn.00405820
push eax
push 0x2c
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x26ac]
call fcn.00405820
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x593948
call fcn.00405820
push eax
push 0x595114
lea ecx, [ebp - 0x275c]
call fcn.00405820
push eax
push 0x57ac88
lea ecx, [ebp - 0x27c8]
call fcn.00405820
push eax
push 0x595138
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
jmp 0x4cd722
mov esi, dword [ebp - 0x6f78]
lea eax, [ebp - 0x2ac8]
push eax
lea eax, [ebp - 0x6f38]
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041f760
test al, al
jne 0x4cd430
lea ecx, [ebp - 0x4ab0]
call fcn.00401450
test al, al
jne 0x4cd320
lea ecx, [ebp - 0x4ab0]
call fcn.004013a0
lea ecx, [ebp - 0x26ac]
call fcn.00405360
lea ecx, [ebp - 0x2750]
call fcn.00405360
lea ecx, [ebp - 0x27c8]
call fcn.00405360
lea ecx, [ebp - 0x275c]
mov byte [ebp - 4], 0x98
call fcn.00405360
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x4cd202
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee62
push 0
push 0x5967a0
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
lea ecx, [ebp - 0x6da8]
call fcn.004da4e0
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x6da0]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6da8], eax
mov dword [ebp - 0x6da4], 0x2d
call fcn.00405370
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6d90], eax
lea ecx, [ebp - 0x6d80]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6d8c], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6d88], eax
mov eax, dword [edi + 4]
push 0x57e918
mov dword [ebp - 0x6d84], eax
call fcn.00405010
push 0xc
lea ecx, [ebp - 0x2278]
call fcn.00401e00
lea ecx, [ebp - 0x2278]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2260]
mov byte [ebp - 4], 0xa1
call fcn.00401e00
lea ecx, [ebp - 0x2260]
call fcn.00404bc0
mov ecx, edi
mov byte [ebp - 4], 0xa2
call fcn.004eb540
test al, al
jne 0x4cee41
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x4cda37
nop dword [eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cda37
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.004053c0
cmp eax, 3
jl 0x4cda27
lea eax, [ebp - 0x6da0]
push eax
push 0
lea ecx, [ebp - 0x2160]
call fcn.00405820
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00465bc0
mov esi, dword [ebp - 0x6f78]
test al, al
je 0x4cda27
push esi
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6d94], eax
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2278]
call fcn.00405430
lea ecx, [ebp - 0x2278]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4cda27
lea ecx, [ebp - 0x2278]
call fcn.00405820
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cda37
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2278]
call fcn.00405430
lea ecx, [ebp - 0x2278]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4cda27
push 0
lea ecx, [ebp - 0x2278]
call fcn.00405a70
lea ecx, [ebp - 0x2278]
call fcn.00405820
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.004bd520
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x4cd8a0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee41
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6d94], 0x58da98
call fcn.00405820
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee41
lea eax, [ebp - 0x2640]
push eax
lea ecx, [ebp - 0x2278]
call fcn.00405020
push 0
lea ecx, [ebp - 0x2278]
call fcn.00405a70
lea ecx, [ebp - 0x2278]
call fcn.00405820
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee41
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4cdb2a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5967f0
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4cdae0
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596880
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4cdb91
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x596880
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4cdd8b
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
nop dword [eax]
push 0
push 0x20019
lea ecx, [eax + esi]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4cdd69
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cdd8b
lea eax, [ebp - 0x2260]
push eax
push 0x575cb0
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4cdd69
push 0
push 1
push 1
push 0
push 0x59690c
lea ecx, [ebp - 0x2260]
call fcn.00406ef0
lea ecx, [ebp - 0x2260]
mov dword [ebp - 0x6f80], eax
call fcn.004053c0
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x4cdd69
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2260]
call fcn.00406d30
push 3
lea ecx, [ebp - 0x2260]
call fcn.00407bb0
lea ecx, [ebp - 0x2260]
call fcn.00405bb0
test al, al
jne 0x4cdd69
push 0
push 0x592b04
lea ecx, [ebp - 0x2260]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cdd69
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2260]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f110
push 2
push 0x2d
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4cdd69
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00405820
push eax
push 0x2d
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2260]
call fcn.00405820
push eax
push 0x595310
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6fac]
mov dword [ebp - 0x6f8c], eax
mov eax, dword [ebp - 0x6fb4]
jb 0x4cdbc0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee41
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4cde0a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596928
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4cddc0
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596970
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4cde71
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x596970
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
push 0
push 0x5969b4
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x4ce0be
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4ce0b8
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
lea eax, [ebp - 0x1fe4]
push eax
push 0x58f2c4
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4ce09c
lea eax, [ebp - 0x2180]
mov dword [ebp - 0x2180], 0
push eax
push 0x58f364
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4cdf31
cmp dword [ebp - 0x2180], 0
jne 0x4ce09c
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ce09c
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ce09c
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ce09c
push eax
push 1
push 1
push eax
push 0x594c18
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ce09c
push eax
push 0x5969f0
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4ce09c
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f2c4
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ce09c
push 0
push 0
push 0
push 0
push 0
push 0x58f2c4
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00405820
push eax
push 0x2f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
push 0x596a20
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4cdeb0
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee41
push 0xc
lea ecx, [ebp - 0x26a0]
call fcn.00401e00
lea ecx, [ebp - 0x26a0]
call fcn.00404bc0
mov byte [ebp - 4], 0xa3
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x4ce387
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4ce381
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
lea eax, [ebp - 0x1fe4]
push eax
push 0x58f404
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4ce365
lea eax, [ebp - 0x2180]
mov dword [ebp - 0x2180], 0
push eax
push 0x58f504
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4ce191
cmp dword [ebp - 0x2180], 0
je 0x4ce365
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ce365
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ce365
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ce365
push eax
push 1
push 1
push eax
push 0x594c18
lea ecx, [ebp - 0x1fe4]
call fcn.00406ef0
test eax, eax
jne 0x4ce365
push eax
push 0x5969f0
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4ce365
lea eax, [ebp - 0x26a0]
push eax
push 0x58f4d0
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4ce365
lea ecx, [ebp - 0x26a0]
call fcn.00405bb0
test al, al
jne 0x4ce365
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5954c0
lea ecx, [ebp - 0x26a0]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2260]
call fcn.00405430
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2260]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ce365
push 0
push 0
push 0
push 0
push 0
push 0x58f404
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00405820
push eax
push 0x2f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
push 0x596a70
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4ce110
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee36
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x4ce607
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4ce607
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4ce5e5
lea eax, [ebp - 0x2180]
mov dword [ebp - 0x2180], 0
push eax
push 0x595548
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4ce5e5
cmp dword [ebp - 0x2180], 4
jne 0x4ce5e5
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x59556c
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4ce5e5
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.0040d040
test al, al
je 0x4ce5df
lea eax, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4ce5bd
lea ecx, [ebp - 0x1fe4]
call fcn.00405bb0
test al, al
jne 0x4ce5bd
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f6c0
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4ce5bd
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
call fcn.00405820
push eax
push 0x2f
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x1fe4]
call fcn.00405820
push eax
push 0x596ad0
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040d040
test al, al
jne 0x4ce4b0
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4ce3c2
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee36
push 0
push 0x596b18
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4ce9fb
mov esi, dword [ebp - 0x6fa8]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4ce9fb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596584
lea ecx, [ebp - 0x2160]
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x4850]
call fcn.00411170
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x4850]
call fcn.00401350
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0xa4
call fcn.00406cd0
lea ecx, [ebp - 0x4850]
call fcn.00401490
test al, al
je 0x4ce9d3
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x4850]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405010
push 0x594b64
lea ecx, [ebp - 0x2028]
call fcn.00405200
test al, al
je 0x4ce73e
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x2028]
call fcn.00406ef0
cmp eax, 1
jne 0x4ce9c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
lea ecx, [ebp - 0x4850]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405430
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4ce87f
push 0
push 0x596b50
push 0x58f7c4
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4ce87f
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f7c4
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ce9c0
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
push 0
push 0x2e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
push 0x594364
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x58f7c4
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0x596b50
push 0x58f8c0
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4ce9c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595674
push 1
lea ecx, [ebp - 0x4850]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405430
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4ce9c0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f8c0
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ce9c0
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
push 0
push 0x2e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
push 0x594364
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x58f8c0
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x4850]
call fcn.00401450
test al, al
jne 0x4ce6f0
lea ecx, [ebp - 0x4850]
mov byte [ebp - 4], 0xa3
call fcn.004013a0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x4ce642
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee36
lea eax, [ebp - 0x22e8]
push eax
lea ecx, [ebp - 0x2028]
call fcn.00405020
push 1
lea ecx, [ebp - 0x2028]
call fcn.00405a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595690
lea ecx, [ebp - 0x2028]
call fcn.00407230
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4cebe5
push 0
push 0x596b50
push 0x58f990
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cebe5
push 0
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041e000
test al, al
je 0x4cebe5
lea eax, [ebp - 0x2a40]
push eax
push 0x5789fc
push 0x594bb0
lea ecx, [ebp - 0x256c]
call fcn.0041ede0
test al, al
jne 0x4ceb2d
lea eax, [ebp - 0x2a40]
push eax
push 0x5789fc
push 0x594cf0
lea ecx, [ebp - 0x256c]
call fcn.0041ede0
test al, al
jne 0x4ceb2d
lea eax, [ebp - 0x2a40]
push eax
push 0x5789fc
push 0x58ef48
lea ecx, [ebp - 0x256c]
call fcn.0041ede0
test al, al
jne 0x4ceb2d
lea eax, [ebp - 0x2a40]
push eax
push 0x5789fc
push 0x595068
lea ecx, [ebp - 0x256c]
call fcn.0041ede0
test al, al
je 0x4cebe5
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58da98
push 0x58f990
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004b0c50
mov esi, eax
cmp esi, 0xffffffff
je 0x4cebe5
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58da98
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
push 0
push 0x2e
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2028]
call fcn.00405820
push eax
push 0x594364
push 0x5939ec
push 0x5956b8
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0x596b50
push 0x591268
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cee36
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4cec6a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596928
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4cec20
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596928
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4cecd1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x596928
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x4cee12
mov eax, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
mov ecx, esi
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.00410020
test al, al
je 0x4cedf6
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cee12
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
lea ecx, [ecx + esi]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x591268
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4cedf6
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00405820
push eax
push 0
mov ecx, esi
call fcn.00405820
push eax
push 0x2e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
mov ecx, esi
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x594364
lea ecx, [ecx + esi]
call fcn.00405820
push eax
push 0x592cbc
push 0x591268
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4cecf6
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.00404160
lea ecx, [ebp - 0x26a0]
call fcn.00405360
lea ecx, [ebp - 0x2260]
call fcn.00405360
lea ecx, [ebp - 0x2278]
call fcn.00405360
lea ecx, [ebp - 0x6da8]
call fcn.004da520
lea ecx, [ebp - 0x256c]
call fcn.00429a60
lea ecx, [ebp - 0x22e8]
call fcn.00405360
lea ecx, [ebp - 0x1fe4]
call fcn.00405360
lea ecx, [ebp - 0x23e8]
call fcn.00405360
lea ecx, [ebp - 0x2028]
call fcn.00405360
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x46
call fcn.00405360
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d105c
test dword [edi + 0x34], 0x1000
jne 0x4d105c
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x596b7c
push dword [eax + 0x38]
call fcn.00438b50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2f
push dword [eax + 0x34]
call fcn.0043b930
push 0xc
lea ecx, [ebp - 0x216c]
call fcn.00401e00
lea ecx, [ebp - 0x216c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xa5
call fcn.00401e00
lea ecx, [ebp - 0x2040]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x24b8]
mov byte [ebp - 4], 0xa6
call fcn.00401e00
lea ecx, [ebp - 0x24b8]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2178]
mov byte [ebp - 4], 0xa7
call fcn.00401e00
lea ecx, [ebp - 0x2178]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2394]
mov byte [ebp - 4], 0xa8
call fcn.00401e00
lea ecx, [ebp - 0x2394]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x229c]
mov byte [ebp - 4], 0xa9
call fcn.00401e00
lea ecx, [ebp - 0x229c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2340]
mov byte [ebp - 4], 0xaa
call fcn.00401e00
lea ecx, [ebp - 0x2340]
call fcn.00404bc0
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0x28cc]
xor esi, esi
push 0x20
mov dword [ebp - 0x6fb4], esi
call fcn.00402410
lea ecx, [ebp - 0x28cc]
call fcn.00419640
mov byte [ebp - 4], 0xac
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
push esi
push 0x596ba8
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov dword [ebp - 0x6f9c], esi
cmp dword [edi + 0x30], esi
jbe 0x4cf3e9
mov eax, dword [ebp - 0x6fa8]
lea esi, [edi + 0x10c]
mov dword [ebp - 0x6f78], eax
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cf3e3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584184
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
push dword [ebp - 0x6f9c]
mov ecx, esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2394]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5841a8
lea ecx, [ebp - 0x2394]
call fcn.00405820
push eax
lea ecx, [ebp - 0x229c]
call fcn.00405430
lea ecx, [ebp - 0x229c]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4cf3c6
lea ecx, [ebp - 0x2340]
call fcn.00405bb0
test al, al
je 0x4cf0f6
lea eax, [ebp - 0x2340]
push eax
lea ecx, [ebp - 0x226c]
call fcn.00405820
push dword [ebp - 0x6f9c]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.004661c0
lea eax, [ebp - 0x216c]
xor esi, esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.004667c0
test al, al
je 0x4cf3c0
lea ecx, [ebp - 0x216c]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4cf396
inc dword [ebp - 0x6fb4]
lea ecx, [ebp - 0x2480]
push 0xc
call fcn.00401e00
lea ecx, [ebp - 0x2480]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x267c]
mov byte [ebp - 4], 0xad
call fcn.00401e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584170
lea ecx, [ebp - 0x216c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x267c]
call fcn.00404d30
lea eax, [ebp - 0x2480]
mov byte [ebp - 4], 0xae
push eax
lea ecx, [ebp - 0x267c]
call fcn.00405820
mov edx, 0x591354
mov ecx, eax
call fcn.00466d00
test al, al
je 0x4cf37c
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x2480]
call fcn.00406ef0
test eax, eax
jne 0x4cf37c
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x2480]
call fcn.00406ef0
test eax, eax
jne 0x4cf37c
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x2480]
call fcn.00406ef0
test eax, eax
jne 0x4cf37c
push eax
push 1
push 1
push eax
push 0x594c18
lea ecx, [ebp - 0x2480]
call fcn.00406ef0
test eax, eax
jne 0x4cf37c
push eax
push 0x596c1c
lea ecx, [ebp - 0x2480]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cf37c
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2480]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x591330
push 3
push 0x33
push dword [eax + 0xa8]
call fcn.004b0c50
mov esi, eax
cmp esi, 0xffffffff
jne 0x4cf2c4
lea ecx, [ebp - 0x267c]
call fcn.00405360
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xac
call fcn.00405360
mov esi, dword [ebp - 0x6f8c]
jmp 0x4cf396
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x267c]
call fcn.00405820
push eax
push 0
push 0x33
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x267c]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x593948
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2480]
call fcn.00405820
push eax
push 0x596c48
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x267c]
call fcn.00405360
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xac
call fcn.00405360
mov esi, dword [ebp - 0x6f8c]
jmp 0x4cf396
lea ecx, [ebp - 0x267c]
call fcn.00405360
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xac
call fcn.00405360
lea eax, [ebp - 0x216c]
inc esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.004667c0
test al, al
jne 0x4cf121
lea esi, [edi + 0x10c]
mov eax, dword [ebp - 0x6f9c]
add dword [ebp - 0x6f78], 0xc
inc eax
mov dword [ebp - 0x6f9c], eax
cmp eax, dword [edi + 0x30]
jb 0x4cf016
mov esi, dword [ebp - 0x6fb4]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d1000
test esi, esi
jne 0x4cf421
lea ecx, [ebp - 0x2340]
call fcn.00405bb0
test al, al
je 0x4cf421
push esi
push 0x596c78
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
jmp 0x4d1000
push fcn.00405360
push fcn.00404bc0
push 2
push 0xc
lea eax, [ebp - 0x2c]
push eax
call fcn.00539094
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596cd0
lea ecx, [ebp - 0x2708]
mov byte [ebp - 4], 0xaf
call fcn.00405820
push eax
lea ecx, [ebp - 0x2c]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596cd0
lea ecx, [ebp - 0x26fc]
call fcn.00405820
push eax
lea ecx, [ebp - 0x20]
call fcn.00405430
push 0xc
lea ecx, [ebp - 0x24e8]
call fcn.00401e00
push 1
push 0x596d20
lea ecx, [ebp - 0x24e8]
call fcn.00404c90
push 0
push 0x596de8
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xb0
call fcn.0041a620
xor esi, esi
mov dword [ebp - 0x6fb4], esi
cmp dword [edi + 0x30], esi
jbe 0x4cf84d
mov eax, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], eax
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cf84d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584184
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2394]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5841a8
lea ecx, [ebp - 0x2394]
call fcn.00405820
push eax
lea ecx, [ebp - 0x229c]
call fcn.00405430
lea ecx, [ebp - 0x229c]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4cf836
lea eax, [ebp - 0x216c]
xor esi, esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.004667c0
test al, al
je 0x4cf830
nop
lea ecx, [ebp - 0x216c]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4cf806
push 0xc
lea ecx, [ebp - 0x2474]
call fcn.00401e00
lea ecx, [ebp - 0x2474]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2634]
mov byte [ebp - 4], 0xb1
call fcn.00401e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584170
lea ecx, [ebp - 0x216c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2634]
call fcn.00404d30
lea eax, [ebp - 0x2474]
mov byte [ebp - 4], 0xb2
push eax
lea ecx, [ebp - 0x2634]
call fcn.00405820
mov edx, 0x591470
mov ecx, eax
call fcn.00466d00
test al, al
je 0x4cf7ec
push 0x5875a0
lea ecx, [ebp - 0x2474]
call fcn.004050d0
test al, al
jne 0x4cf7ec
push 0x587504
lea ecx, [ebp - 0x2474]
call fcn.004050d0
test al, al
jne 0x4cf7ec
push 0x58796c
lea ecx, [ebp - 0x2474]
call fcn.004050d0
test al, al
jne 0x4cf7ec
push 0x596e24
lea ecx, [ebp - 0x2474]
call fcn.004050d0
test al, al
jne 0x4cf7ec
push 0
push 0x596e3c
lea ecx, [ebp - 0x2474]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cf7ec
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2474]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x591430
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.004b0c50
mov esi, eax
cmp esi, 0xffffffff
jne 0x4cf734
lea ecx, [ebp - 0x2634]
call fcn.00405360
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0xb0
call fcn.00405360
mov esi, dword [ebp - 0x6f8c]
jmp 0x4cf806
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x2634]
call fcn.00405820
push eax
push 0
push 0x34
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2634]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x593948
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2474]
call fcn.00405820
push eax
push 0x596e70
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x2634]
call fcn.00405360
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0xb0
call fcn.00405360
mov esi, dword [ebp - 0x6f8c]
jmp 0x4cf806
lea ecx, [ebp - 0x2634]
call fcn.00405360
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0xb0
call fcn.00405360
lea eax, [ebp - 0x216c]
inc esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.004667c0
test al, al
jne 0x4cf5b0
mov esi, dword [ebp - 0x6fb4]
add dword [ebp - 0x6f78], 0xc
inc esi
mov dword [ebp - 0x6fb4], esi
cmp esi, dword [edi + 0x30]
jb 0x4cf4e8
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0fdf
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x6fb4], 0
mov dword [ebp - 0x6f8c], esi
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4cfbab
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596e9c
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x45f0]
call fcn.00411170
push 1
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
lea ecx, [ebp - 0x45f0]
call fcn.00401350
push 1
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xb3
call fcn.00405820
push eax
lea ecx, [ebp - 0x45f0]
call fcn.004014a0
test al, al
je 0x4cfb7d
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575d98
push 1
lea ecx, [ebp - 0x45f0]
call fcn.004014f0
push eax
push 0x575d98
lea ecx, [ebp - 0x2178]
call fcn.00405430
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2178]
call fcn.00405820
push eax
lea ecx, [ebp - 0x24e8]
call fcn.00406ef0
test eax, eax
jne 0x4cfb64
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x45f0]
call fcn.004014f0
push eax
push 0x575ca8
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405430
lea ecx, [ebp - 0x2178]
call fcn.00405370
push 0
push 0x80
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
lea ecx, [ebp - 0x28cc]
call fcn.00419790
test eax, eax
je 0x4cfa32
push 0
lea eax, [ebp - 0x2178]
push eax
lea ecx, [ebp - 0x28cc]
call fcn.00419cc0
test eax, eax
je 0x4cfa32
push 0
push 1
push 1
push 0
push 0x596eac
lea ecx, [ebp - 0x2178]
call fcn.00406ef0
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x596ec4
lea ecx, [ebp - 0x2178]
call fcn.00406ef0
test esi, esi
je 0x4cfa27
test eax, eax
je 0x4cfa27
sub eax, esi
lea ecx, [ebp - 0x2178]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.00406db0
jmp 0x4cfa32
lea ecx, [ebp - 0x2178]
call fcn.00405370
lea ecx, [ebp - 0x2178]
call fcn.00405bb0
test al, al
je 0x4cfa69
push 1
lea ecx, [ebp - 0x45f0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00405010
push 0
lea ecx, [ebp - 0x2178]
call fcn.00405990
jmp 0x4cfa76
push 3
lea ecx, [ebp - 0x2178]
call fcn.00407bb0
push 0
push 0x596e3c
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4cfb64
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0x58da98
lea ecx, [ebp - 0x2178]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.004b0c50
mov esi, eax
cmp esi, 0xffffffff
je 0x4cfb64
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58da98
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0
push 0x34
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0x593948
push 0x58da98
push 0x592cbc
lea ecx, [ebp - 0x2178]
call fcn.00405820
push eax
push 0x596ee0
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x45f0]
call fcn.00401450
mov esi, dword [ebp - 0x6f8c]
test al, al
jne 0x4cf900
lea ecx, [ebp - 0x45f0]
mov byte [ebp - 4], 0xb0
call fcn.004013a0
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, 2
jb 0x4cf870
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0fdf
push 0x24
lea ecx, [ebp - 0x2868]
call fcn.004542b0
lea ecx, [ebp - 0x2868]
call fcn.0041df90
push 0xc
lea ecx, [ebp - 0x2290]
mov byte [ebp - 4], 0xb4
call fcn.00401e00
lea ecx, [ebp - 0x2290]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x245c]
mov byte [ebp - 4], 0xb5
call fcn.00401e00
lea ecx, [ebp - 0x245c]
call fcn.00404bc0
push 0
push 0x596f04
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xb6
call fcn.0041a620
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596f38
lea ecx, [edi + 0x33c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x4d00a0
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f9c], esi
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d00a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596f74
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
push dword [ebp - 0x6fb4]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x216c]
call fcn.00405430
lea eax, [ebp - 0x2040]
xor edx, edx
push eax
lea ecx, [ebp - 0x216c]
mov dword [ebp - 0x6f8c], edx
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.004667c0
test al, al
je 0x4d0081
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5919f0
lea ecx, [ebp - 0x2040]
call fcn.00407230
push 0x100
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2868]
call fcn.0041e000
test al, al
je 0x4d0054
push 0
lea eax, [ebp - 0x2a78]
mov dword [ebp - 0x6eec], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x2868]
push 0x591688
movups xmmword [ebp - 0x6efc], xmm0
call fcn.0041e680
test al, al
je 0x4d0054
lea eax, [ebp - 0x2a78]
push eax
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.0041fe10
test al, al
je 0x4d0054
lea eax, [ebp - 0x2290]
push eax
push 0x5916bc
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.0041f470
test eax, eax
je 0x4d0033
push 0
push 1
push 1
push 0
push 0x596fb0
lea ecx, [ebp - 0x2290]
call fcn.00406ef0
lea ecx, [ebp - 0x2290]
mov esi, eax
call fcn.004053c0
sub eax, 0x12
cmp esi, eax
je 0x4d002d
push 0
push 1
push 1
push 0
push 0x596fd8
lea ecx, [ebp - 0x2290]
call fcn.00406ef0
lea ecx, [ebp - 0x2290]
mov esi, eax
call fcn.004053c0
sub eax, 0xb
cmp esi, eax
je 0x4d002d
push 0
push 1
push 1
push 0
push 0x596ff4
lea ecx, [ebp - 0x2290]
call fcn.00406ef0
lea ecx, [ebp - 0x2290]
mov esi, eax
call fcn.004053c0
sub eax, 0xb
cmp esi, eax
je 0x4d002d
lea eax, [ebp - 0x6efc]
push eax
lea eax, [ebp - 0x2bbc]
push eax
push 0x597010
lea ecx, [ebp - 0x2868]
call fcn.0041e680
test al, al
je 0x4d002d
lea eax, [ebp - 0x2290]
push eax
push 0x59702c
lea eax, [ebp - 0x2bbc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.0041f470
test eax, eax
je 0x4d002d
push 0x594b64
lea ecx, [ebp - 0x2290]
call fcn.004050d0
test al, al
jne 0x4d002d
lea eax, [ebp - 0x245c]
push eax
push 0x591698
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.0041f470
test eax, eax
jne 0x4cfef3
lea eax, [ebp - 0x245c]
push eax
push 0x5916b0
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.0041f470
test eax, eax
je 0x4d002d
lea ecx, [ebp - 0x2290]
call fcn.00405820
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4d002d
push 0
push 0x597038
lea ecx, [ebp - 0x2290]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d002d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x245c]
call fcn.00405820
mov ecx, dword [ebp - 0x6f9c]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2290]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x35
push dword [eax + 0xa8]
call fcn.004b0c50
mov esi, eax
cmp esi, 0xffffffff
je 0x4d002d
lea ecx, [ebp - 0x2040]
call fcn.00405820
mov ecx, dword [ebp - 0x6f9c]
push eax
push 0
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x245c]
call fcn.00405820
push eax
push 0
push 0x35
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x245c]
call fcn.00405820
mov esi, dword [ebp - 0x6f9c]
mov ecx, esi
push eax
push 0x593948
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2290]
call fcn.00405820
push eax
push 0x594168
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
jmp 0x4d0033
mov esi, dword [ebp - 0x6f9c]
lea eax, [ebp - 0x2a78]
push eax
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.0041fe10
test al, al
jne 0x4cfd91
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x2040]
push eax
lea ecx, [ebp - 0x216c]
call fcn.00405820
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.004667c0
test al, al
jne 0x4cfcf1
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f9c], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [edi + 0x30]
jb 0x4cfc70
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0fbe
push 0
push 0x597060
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
lea ecx, [ebp - 0x6ea0]
call fcn.004da4e0
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x6e98]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6ea0], eax
mov dword [ebp - 0x6e9c], 0x37
call fcn.00405370
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6e88], eax
lea ecx, [ebp - 0x6e78]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6e84], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6e80], eax
mov eax, dword [edi + 4]
push 0x57e934
mov dword [ebp - 0x6e7c], eax
call fcn.00405010
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0fb3
push 0xc
lea ecx, [ebp - 0x23c4]
call fcn.00401e00
lea ecx, [ebp - 0x23c4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2430]
mov byte [ebp - 4], 0xb8
call fcn.00401e00
lea ecx, [ebp - 0x2430]
call fcn.00404bc0
xor esi, esi
mov byte [ebp - 4], 0xb9
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x4d0325
nop dword [eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0325
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.004053c0
cmp eax, 3
jl 0x4d0315
lea eax, [ebp - 0x6e98]
push eax
lea ecx, [ebp - 0x226c]
call fcn.00405820
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.004661c0
mov esi, dword [ebp - 0x6f78]
test al, al
je 0x4d0315
push esi
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6e8c], eax
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x23c4]
call fcn.00405430
lea ecx, [ebp - 0x23c4]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4d0315
lea ecx, [ebp - 0x23c4]
call fcn.00405820
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0325
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x23c4]
call fcn.00405430
lea ecx, [ebp - 0x23c4]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4d0315
push 0
lea ecx, [ebp - 0x23c4]
call fcn.00405a70
lea ecx, [ebp - 0x23c4]
call fcn.00405820
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.004bd520
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x4d0190
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0f9d
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6e8c], 0x58da98
call fcn.00405820
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0f9d
push 0
push 1
lea ecx, [ebp - 0x2640]
call fcn.00405820
push eax
lea ecx, [ebp - 0x23c4]
call fcn.004053e0
mov ecx, eax
call fcn.00405a70
lea ecx, [ebp - 0x23c4]
call fcn.00405820
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0f9d
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4d041b
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597090
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4d03d1
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5970d8
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4d0482
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x5970d8
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
push 4
lea ecx, [ebp - 0x22c4]
call fcn.004093c0
lea ecx, [ebp - 0x22c4]
call fcn.0040c910
cmp dword [ebp - 0x6fac], 0
mov byte [ebp - 4], 0xba
mov dword [ebp - 0x6fb4], 0
jbe 0x4d07b7
mov eax, dword [ebp - 0x6fa8]
mov ecx, esi
sub ecx, eax
mov dword [ebp - 0x6f78], eax
mov dword [ebp - 0x6fcc], ecx
nop dword [eax + eax]
add eax, ecx
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x22c4]
call fcn.0040c940
test al, al
je 0x4d0789
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d07b7
xor esi, esi
mov ecx, edi
mov dword [ebp - 0x6fa4], esi
call fcn.004eb540
test al, al
jne 0x4d0789
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x22c4]
call fcn.0040cfc0
test al, al
je 0x4d0783
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597120
push dword [ebp - 0x6cec]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
mov ecx, dword [ebp - 0x6f8c]
push 0
call fcn.004053c0
push eax
push 1
push 0
push 0x597148
lea ecx, [ebp - 0x1f8c]
call fcn.00406ef0
test eax, eax
je 0x4d0773
lea eax, [ebp - 0x2430]
push eax
push 0x575cb0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040cd90
test al, al
je 0x4d0773
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2340]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2430]
call fcn.00406ef0
mov dword [ebp - 0x6f80], eax
test eax, eax
je 0x4d0773
lea ecx, [ebp - 0x2340]
call fcn.004053c0
add eax, dword [ebp - 0x6f80]
lea ecx, [ebp - 0x2430]
push eax
call fcn.00406d30
push 3
push 0
push 0
push 0x575cb0
push 0x576600
lea ecx, [ebp - 0x2430]
call fcn.004078d0
mov ecx, eax
call fcn.00407bb0
lea ecx, [ebp - 0x2430]
call fcn.004053c0
cmp eax, 3
jl 0x4d0773
push 0
push 0x592b28
lea ecx, [ebp - 0x2430]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d0773
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2430]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f110
push 3
push 0x37
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d0773
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
push 0x37
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2430]
call fcn.00405820
push eax
push 0x595310
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov ecx, edi
inc esi
call fcn.004eb540
test al, al
je 0x4d0520
mov dword [ebp - 0x6fa4], esi
mov ecx, dword [ebp - 0x6fb4]
mov eax, dword [ebp - 0x6f78]
inc ecx
add eax, 0xc
mov dword [ebp - 0x6fb4], ecx
cmp ecx, dword [ebp - 0x6fac]
mov ecx, dword [ebp - 0x6fcc]
mov dword [ebp - 0x6f78], eax
jb 0x4d04d0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0f92
push 0
push 0x59715c
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
push 0xc
lea ecx, [ebp - 0x24f4]
call fcn.00401e00
lea ecx, [ebp - 0x24f4]
call fcn.00404bc0
mov byte [ebp - 4], 0xbb
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x4d0f58
mov esi, dword [ebp - 0x6fa8]
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0f58
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596f74
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
push dword [ebp - 0x6fb4]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x216c]
call fcn.00405430
lea eax, [ebp - 0x24f4]
xor edx, edx
push eax
lea ecx, [ebp - 0x216c]
mov dword [ebp - 0x6f8c], edx
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.004667c0
test al, al
je 0x4d0f3f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584120
lea ecx, [ebp - 0x24f4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405430
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d09c6
push 0
push 0x597194
push 0x591950
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d09c6
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x591950
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d09c6
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0x593948
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x591950
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58413c
lea ecx, [ebp - 0x24f4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405430
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
jne 0x4d0a32
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5919f0
lea ecx, [ebp - 0x24f4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405430
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d0b37
push 0
push 0x597194
push 0x5919b0
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d0b37
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x5919b0
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d0b37
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0x593948
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x5919b0
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584154
lea ecx, [ebp - 0x24f4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405430
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
jne 0x4d0ba3
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x591930
lea ecx, [ebp - 0x24f4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405430
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d0ca8
push 0
push 0x597194
push 0x5918e8
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d0ca8
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x5918e8
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d0ca8
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0x593948
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x5918e8
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584170
lea ecx, [ebp - 0x24f4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405430
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d0ddd
push 0
push 0x597194
push 0x591a14
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d0ddd
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x591a14
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d0ddd
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0x593948
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x591a14
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5971c0
lea ecx, [ebp - 0x24f4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405430
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d0f12
push 0
push 0x597194
push 0x5971d4
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d0f12
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x5971d4
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d0f12
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2040]
call fcn.00405820
push eax
push 0x593948
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
push 0x5971d4
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x24f4]
push eax
lea ecx, [ebp - 0x216c]
call fcn.00405820
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.004667c0
test al, al
jne 0x4d0891
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [edi + 0x30]
jb 0x4d0810
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d0f87
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.00404160
lea ecx, [ebp - 0x24f4]
call fcn.00405360
lea ecx, [ebp - 0x22c4]
call fcn.0040c980
lea ecx, [ebp - 0x2430]
call fcn.00405360
lea ecx, [ebp - 0x23c4]
call fcn.00405360
lea ecx, [ebp - 0x6ea0]
call fcn.004da520
lea ecx, [ebp - 0x245c]
call fcn.00405360
lea ecx, [ebp - 0x2290]
call fcn.00405360
lea ecx, [ebp - 0x2868]
call fcn.00429a60
lea ecx, [ebp - 0x24e8]
call fcn.00405360
push fcn.00405360
push 2
push 0xc
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xac
push eax
call fcn.00538ceb
lea ecx, [ebp - 0x28cc]
call fcn.004023d0
lea ecx, [ebp - 0x2340]
call fcn.00405360
lea ecx, [ebp - 0x229c]
call fcn.00405360
lea ecx, [ebp - 0x2394]
call fcn.00405360
lea ecx, [ebp - 0x2178]
call fcn.00405360
lea ecx, [ebp - 0x24b8]
call fcn.00405360
lea ecx, [ebp - 0x2040]
call fcn.00405360
lea ecx, [ebp - 0x216c]
mov byte [ebp - 4], 0x46
call fcn.00405360
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d4a4b
test dword [edi + 0x34], 0x1000
jne 0x4d4a4b
push 0
push 0x597218
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x597264
push dword [eax + 0x38]
call fcn.00438b50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x32
push dword [eax + 0x34]
call fcn.0043b930
push 0xc
lea ecx, [ebp - 0x205c]
call fcn.00401e00
lea ecx, [ebp - 0x205c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xbc
call fcn.00401e00
lea ecx, [ebp - 0x1fd4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2524]
mov byte [ebp - 4], 0xbd
call fcn.00401e00
lea ecx, [ebp - 0x2524]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2010]
mov byte [ebp - 4], 0xbe
call fcn.00401e00
lea ecx, [ebp - 0x2010]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2090]
mov byte [ebp - 4], 0xbf
call fcn.00401e00
lea ecx, [ebp - 0x2090]
call fcn.00404bc0
push 0x24
lea ecx, [ebp - 0x2610]
mov byte [ebp - 4], 0xc0
call fcn.004542b0
lea ecx, [ebp - 0x2610]
call fcn.0041df90
push 0x260
lea ecx, [ebp - 0x2e30]
mov byte [ebp - 4], 0xc1
call fcn.00411170
lea ecx, [ebp - 0x2e30]
call fcn.00401320
push 0x260
lea ecx, [ebp - 0x32f0]
mov byte [ebp - 4], 0xc2
call fcn.00411170
lea ecx, [ebp - 0x32f0]
call fcn.00401320
push 0xc
lea ecx, [ebp - 0x21f8]
mov byte [ebp - 4], 0xc3
call fcn.0040c890
lea ecx, [ebp - 0x21f8]
call fcn.0051e970
push 0xc
lea ecx, [ebp - 0x235c]
mov byte [ebp - 4], 0xc4
call fcn.0040c890
push 0xc
push 0
lea ecx, [ebp - 0x235c]
call fcn.0051ee00
push 0xc
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xc5
call fcn.0040c890
push 0xc
push 0
lea ecx, [ebp - 0x204c]
call fcn.0051ee00
push 0xc
lea ecx, [ebp - 0x2228]
mov byte [ebp - 4], 0xc6
call fcn.0040c890
lea ecx, [ebp - 0x2228]
call fcn.0051e970
push 0xc
lea ecx, [ebp - 0x2254]
mov byte [ebp - 4], 0xc7
call fcn.0040c890
push 0xc
push 0
lea ecx, [ebp - 0x2254]
call fcn.0051e4f0
xor esi, esi
mov byte [ebp - 4], 0xc8
push 0x20
lea ecx, [ebp - 0x2844]
mov dword [ebp - 0x6f9c], esi
call fcn.00402410
lea ecx, [ebp - 0x2844]
call fcn.00419640
mov byte [ebp - 4], 0xc9
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0x6f8c], esi
test ecx, ecx
je 0x4d1915
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6fb4], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575dac
lea ecx, [ebp - 0x2160]
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405430
push 5
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2e30]
call fcn.004014a0
test al, al
je 0x4d18fd
mov edi, dword [ebp - 0x6f8c]
nop
push 1
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x2090]
call fcn.004053e0
push 0x5875a0
lea ecx, [ebp - 0x2090]
call fcn.004050d0
test al, al
jne 0x4d18de
push str.Microsoft
lea ecx, [ebp - 0x2090]
call fcn.004050d0
test al, al
jne 0x4d18de
push 0x59729c
lea ecx, [ebp - 0x2090]
call fcn.004050d0
test al, al
jne 0x4d18de
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5972b0
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004014f0
push eax
push 0x575ca8
lea ecx, [ebp - 0x2160]
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
call dword [0x5564e4]
test al, al
jne 0x4d1736
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5972e8
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004014f0
push eax
push 0x575ca8
lea ecx, [ebp - 0x2160]
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
call dword [0x5564e4]
test al, al
jne 0x4d1736
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575dac
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004014f0
push eax
push 0x575ca8
lea ecx, [ebp - 0x2160]
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405430
push 5
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x32f0]
call fcn.004014a0
test al, al
je 0x4d18de
push 2
lea ecx, [ebp - 0x1fd4]
call fcn.00406cd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5972b0
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004014f0
push eax
push 0x575ca8
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
jne 0x4d1542
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5972e8
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004014f0
push eax
push 0x575ca8
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d171e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x59732c
lea eax, [esi + 1]
push 1
lea ecx, [ebp - 0x32f0]
mov dword [ebp - 0x6f78], eax
call fcn.004014f0
push eax
push 0x575ca8
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x21f8]
call fcn.0051ec00
mov ecx, eax
call fcn.0051ed70
mov ecx, eax
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004014f0
push eax
push 0x575ca8
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004014f0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x235c]
call fcn.0051ec00
mov ecx, eax
call fcn.0051ed70
mov ecx, eax
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004014f0
push eax
push 0x576604
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004014f0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.0051ec00
mov ecx, eax
call fcn.0051ed70
mov ecx, eax
call fcn.00405430
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.0051e400
mov ecx, eax
call fcn.0051e4d0
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
mov dword [eax], edi
call fcn.0051ec00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597344
push esi
lea ecx, [ebp - 0x21f8]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
lea ecx, [ebp - 0x205c]
call fcn.00405820
mov dl, 1
mov ecx, eax
call fcn.0041a920
push 0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2844]
call fcn.00419790
test eax, eax
je 0x4d1718
push 0
push esi
lea ecx, [ebp - 0x2228]
call fcn.0051ed70
push eax
lea ecx, [ebp - 0x2844]
call fcn.00419cc0
test eax, eax
je 0x4d1718
push 3
push esi
lea ecx, [ebp - 0x2228]
call fcn.0051ed70
mov ecx, eax
call fcn.00407bb0
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x32f0]
call fcn.00401450
test al, al
jne 0x4d1498
jmp 0x4d18de
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x59732c
lea eax, [esi + 1]
push 1
lea ecx, [ebp - 0x2e30]
mov dword [ebp - 0x6f78], eax
call fcn.004014f0
push eax
push 0x575ca8
lea ecx, [ebp - 0x2160]
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x21f8]
call fcn.0051ec00
mov ecx, eax
call fcn.0051ed70
mov ecx, eax
call fcn.00405430
push 1
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004014f0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x235c]
call fcn.0051ec00
mov ecx, eax
call fcn.0051ed70
mov ecx, eax
call fcn.004053e0
push 1
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004014f0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.0051ec00
mov ecx, eax
call fcn.0051ed70
mov ecx, eax
call fcn.004053e0
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.0051e400
mov ecx, eax
call fcn.0051e4d0
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
mov dword [eax], edi
call fcn.0051ec00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597344
push esi
lea ecx, [ebp - 0x21f8]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
lea ecx, [ebp - 0x205c]
call fcn.00405820
mov dl, 1
mov ecx, eax
call fcn.0041a920
push 0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2844]
call fcn.00419790
test eax, eax
je 0x4d18d8
push 0
push esi
lea ecx, [ebp - 0x2228]
call fcn.0051ed70
push eax
lea ecx, [ebp - 0x2844]
call fcn.00419cc0
test eax, eax
je 0x4d18d8
push 3
push esi
lea ecx, [ebp - 0x2228]
call fcn.0051ed70
mov ecx, eax
call fcn.00407bb0
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2e30]
call fcn.00401450
test al, al
jne 0x4d12e0
mov edi, dword [ebp - 0x6f7c]
mov dword [ebp - 0x6f9c], esi
mov eax, dword [ebp - 0x6f8c]
mov ecx, dword [edi + 0x30]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, ecx
jb 0x4d1270
mov dword [ebp - 0x6f78], 0
test ecx, ecx
je 0x4d1b2f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597360
lea ecx, [ebp - 0x226c]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push ecx
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
jne 0x4d19e1
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5973b8
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d1b19
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597420
lea ecx, [ebp - 0x226c]
inc esi
call fcn.00405820
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x21f8]
push 2
push esi
call fcn.0051ec00
mov ecx, eax
call fcn.0051ed70
mov ecx, eax
call fcn.00405430
push 1
push 0x597440
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x235c]
push 2
push esi
call fcn.0051ec00
mov ecx, eax
call fcn.0051ed70
mov ecx, eax
call fcn.004053e0
push 1
push 0x597478
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x204c]
push 2
push esi
call fcn.0051ec00
mov ecx, eax
call fcn.0051ed70
mov ecx, eax
call fcn.004053e0
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2254]
push 2
push esi
call fcn.0051e400
mov ecx, eax
call fcn.0051e4d0
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [eax], ecx
lea ecx, [ebp - 0x2160]
push 0x597494
call fcn.00405820
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push dword [ebp - 0x6f9c]
push 2
push esi
lea ecx, [ebp - 0x2228]
call fcn.0051ec00
mov ecx, eax
call fcn.0051ed70
mov ecx, eax
call fcn.00405430
mov dword [ebp - 0x6f9c], esi
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x4d1927
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d49ad
lea ecx, [ebp - 0x1fc8]
push 0
test esi, esi
jne 0x4d1b59
push 0x5974d0
call fcn.0041a620
jmp 0x4d49ad
push 0x597550
call fcn.0041a620
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x4d224b
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d224b
push 0x597478
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.004050d0
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4d1bcc
push 0x5975bc
jmp 0x4d1bd1
push 0x5975c8
push dword [ebp - 0x6f78]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.0051e4d0
push 0x260
lea ecx, [ebp - 0x5690]
mov eax, dword [eax]
mov dword [ebp - 0x6fb4], eax
call fcn.00411170
push 1
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x5690]
call fcn.00401350
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xca
call fcn.00406cd0
lea ecx, [ebp - 0x5690]
call fcn.00401490
test al, al
je 0x4d2227
mov esi, dword [ebp - 0x6f78]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x5690]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405010
cmp byte [ebp - 0x6f81], 0
jne 0x4d1cb7
push 0x594b64
lea ecx, [ebp - 0x1fd4]
call fcn.00405200
test al, al
je 0x4d1cb7
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x1fd4]
call fcn.00406ef0
cmp eax, 1
jne 0x4d220e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
lea ecx, [ebp - 0x5690]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405430
push 0x100
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041e000
test al, al
je 0x4d220e
lea eax, [ebp - 0x2010]
push eax
push 0x5789fc
push 0x594bb0
lea ecx, [ebp - 0x2610]
call fcn.0041f180
test eax, eax
je 0x4d1f57
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d1f57
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d1f57
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d1f57
push 0x594c00
lea ecx, [ebp - 0x2010]
call fcn.004050d0
test al, al
jne 0x4d1f57
push 0
push 1
push 1
push 0
push 0x594c18
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d1f57
push eax
push 0x5975d8
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d1f57
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575d84
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x597624
lea ecx, [ebp - 0x25e0]
call fcn.00405430
mov eax, dword [ebp - 0x6fb4]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2010]
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x25e0]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d1f57
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0x594bb0
push 0x3e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0x594364
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x592ca0
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
push 0x594cd0
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x2ab4]
mov dword [ebp - 0x6f3c], 0
push eax
push 0x5789fc
xorps xmm0, xmm0
lea ecx, [ebp - 0x2610]
push 0x594cf0
movups xmmword [ebp - 0x6f4c], xmm0
call fcn.0041ede0
test al, al
je 0x4d220e
lea eax, [ebp - 0x2ab4]
push eax
lea eax, [ebp - 0x6f4c]
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041fe10
test al, al
je 0x4d220e
lea eax, [ebp - 0x2010]
push eax
lea eax, [ebp - 0x6f4c]
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041fb20
test eax, eax
je 0x4d21ed
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d21ed
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d21ed
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d21ed
push 0x594c00
lea ecx, [ebp - 0x2010]
call fcn.004050d0
test al, al
jne 0x4d21ed
push 0
push 1
push 1
push 0
push 0x594c18
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d21ed
push eax
push 0x5975d8
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d21ed
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575d84
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x59763c
lea ecx, [ebp - 0x25e0]
call fcn.00405430
mov eax, dword [ebp - 0x6fb4]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2010]
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x25e0]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d21ed
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0x594cf0
push 0x3e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0x594364
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x592ca0
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
push 0x59765c
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x2ab4]
push eax
lea eax, [ebp - 0x6f4c]
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041fe10
test al, al
jne 0x4d1fb0
lea ecx, [ebp - 0x5690]
call fcn.00401450
test al, al
jne 0x4d1c60
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x5690]
mov byte [ebp - 4], 0xc9
call fcn.004013a0
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x4d1b75
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d49ad
push 0
push 0x597688
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x4d26a8
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d26a8
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.0051e4d0
push 0x597478
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
call fcn.0051ed70
mov ecx, eax
call fcn.004050d0
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4d22f0
push 0x5975bc
jmp 0x4d22f5
push 0x5975c8
push dword [ebp - 0x6f78]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x58f0]
call fcn.00411170
push 1
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x58f0]
call fcn.00401350
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xcb
call fcn.00406cd0
lea ecx, [ebp - 0x58f0]
call fcn.00401490
test al, al
je 0x4d2684
mov esi, dword [ebp - 0x6f78]
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x58f0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405010
cmp byte [ebp - 0x6f81], 0
jne 0x4d23c7
push 0x594b64
lea ecx, [ebp - 0x1fd4]
call fcn.00405200
test al, al
je 0x4d23c7
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x1fd4]
call fcn.00406ef0
cmp eax, 1
jne 0x4d266b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
lea ecx, [ebp - 0x58f0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405430
push 0x100
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041e000
test al, al
je 0x4d266b
lea eax, [ebp - 0x2010]
push eax
push 0x5789fc
push 0x594e60
lea ecx, [ebp - 0x2610]
call fcn.0041f180
test eax, eax
je 0x4d266b
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d266b
push eax
push 1
push 1
push eax
push 0x594d1c
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d266b
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d266b
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d266b
push eax
push 1
push 1
push eax
push 0x594d40
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d266b
push eax
push 0x5976e8
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d266b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575d84
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x59773c
lea ecx, [ebp - 0x25e0]
call fcn.00405430
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2010]
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x25e0]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3f
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4d266b
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0x594f40
push 0x3f
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0x594364
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x592ca0
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
push 0x597770
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x58f0]
call fcn.00401450
test al, al
jne 0x4d2370
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x58f0]
mov byte [ebp - 4], 0xc9
call fcn.004013a0
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x4d2280
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d49ad
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5977b8
lea ecx, [edi + 0x33c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x5977f0
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x4d2d0b
nop dword [eax + eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d2d0b
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.0051e4d0
push 0xc
lea ecx, [ebp - 0x2774]
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
call fcn.00401e00
lea ecx, [ebp - 0x2774]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2768]
mov byte [ebp - 4], 0xcc
call fcn.00401e00
lea ecx, [ebp - 0x2768]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2670]
mov byte [ebp - 4], 0xcd
call fcn.00401e00
lea ecx, [ebp - 0x2670]
call fcn.00404bc0
push 0x597478
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xce
call fcn.0051ed70
mov ecx, eax
call fcn.004050d0
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4d27d4
push 0x5975bc
jmp 0x4d27d9
push 0x5975c8
push dword [ebp - 0x6f78]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x4390]
call fcn.00411170
push 1
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x4390]
call fcn.00401350
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xcf
call fcn.00406cd0
lea ecx, [ebp - 0x4390]
call fcn.00401490
test al, al
je 0x4d2cc6
nop dword [eax]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4390]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405010
cmp byte [ebp - 0x6f81], 0
jne 0x4d28a7
push 0x594b64
lea ecx, [ebp - 0x1fd4]
call fcn.00405200
test al, al
je 0x4d28a7
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x1fd4]
call fcn.00406ef0
cmp eax, 1
jne 0x4d2cad
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
lea ecx, [ebp - 0x4390]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405430
push 0x100
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041e000
test al, al
je 0x4d2cad
lea eax, [ebp - 0x2aa0]
mov dword [ebp - 0x6f00], 0
push eax
push 0x5789fc
xorps xmm0, xmm0
lea ecx, [ebp - 0x2610]
push 0x595068
movups xmmword [ebp - 0x6f10], xmm0
call fcn.0041ede0
test al, al
je 0x4d2cad
lea eax, [ebp - 0x2aa0]
push eax
lea eax, [ebp - 0x6f10]
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041f760
test al, al
je 0x4d2cad
lea eax, [ebp - 0x2774]
push eax
lea eax, [ebp - 0x6f10]
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041efb0
test al, al
je 0x4d2c8c
lea ecx, [ebp - 0x2774]
call fcn.00405820
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4d2c8c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595094
lea ecx, [ebp - 0x2774]
call fcn.00405820
push eax
push 0x5950b8
lea ecx, [ebp - 0x2768]
call fcn.00405430
lea eax, [ebp - 0x2090]
push eax
push 0x5789fc
lea ecx, [ebp - 0x2768]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041f180
test eax, eax
je 0x4d2c8c
lea ecx, [ebp - 0x2090]
call fcn.00405820
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4d2c8c
push 0
push 0x597848
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d2c8c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5950e8
lea ecx, [ebp - 0x2774]
call fcn.00405820
push eax
push 0x5950b8
lea ecx, [ebp - 0x2768]
call fcn.00405430
lea eax, [ebp - 0x2670]
push eax
push 0x5789fc
lea ecx, [ebp - 0x2768]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041f180
test eax, eax
je 0x4d2b00
push 0
push 1
push 1
push 5
push 0x5766ec
lea ecx, [ebp - 0x2670]
call fcn.00406ef0
test eax, eax
jne 0x4d2b00
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5950f8
push 1
lea ecx, [ebp - 0x4390]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2670]
call fcn.004075e0
lea ecx, [ebp - 0x2670]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d2c8c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2774]
call fcn.00405820
push eax
push 0x5950b8
lea ecx, [ebp - 0x2768]
call fcn.00405430
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2670]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x40
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4d2c8c
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0
push 0
lea ecx, [ebp - 0x2670]
call fcn.00405820
push eax
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2768]
call fcn.00405820
push eax
push 0x40
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2670]
call fcn.00405820
push eax
push 0x593948
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x592ca0
mov ecx, esi
call fcn.00405820
push eax
push 0x595114
lea ecx, [ebp - 0x2774]
call fcn.00405820
push eax
push 0x57ac88
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
push 0x597890
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x2aa0]
push eax
lea eax, [ebp - 0x6f10]
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041f760
test al, al
jne 0x4d2960
lea ecx, [ebp - 0x4390]
call fcn.00401450
test al, al
jne 0x4d2850
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x4390]
call fcn.004013a0
lea ecx, [ebp - 0x2670]
call fcn.00405360
lea ecx, [ebp - 0x2768]
call fcn.00405360
lea ecx, [ebp - 0x2774]
mov byte [ebp - 4], 0xc9
call fcn.00405360
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x4d2710
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d49ad
push 0
push 0x5978c0
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
lea ecx, [ebp - 0x6e38]
call fcn.004da4e0
mov byte [ebp - 4], 0xd0
lea ecx, [ebp - 0x6e30]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e38], eax
mov dword [ebp - 0x6e34], 0x41
call fcn.00405370
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6e20], eax
lea ecx, [ebp - 0x6e10]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6e1c], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6e18], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6e14], eax
call fcn.00405370
push 0xc
lea ecx, [ebp - 0x237c]
call fcn.00401e00
lea ecx, [ebp - 0x237c]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2310]
mov byte [ebp - 4], 0xd1
call fcn.00401e00
lea ecx, [ebp - 0x2310]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2388]
mov byte [ebp - 4], 0xd2
call fcn.00401e00
lea ecx, [ebp - 0x2388]
call fcn.00404bc0
mov ecx, edi
mov byte [ebp - 4], 0xd3
call fcn.004eb540
test al, al
jne 0x4d4981
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x4d30a0
nop dword [eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d30a0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
call fcn.0051ed70
mov ecx, eax
call fcn.004053c0
cmp eax, 5
jl 0x4d3083
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
push esi
call fcn.0051ed70
push eax
lea ecx, [ebp - 0x6e30]
call fcn.00405020
push esi
lea ecx, [ebp - 0x2254]
call fcn.0051e4d0
mov ecx, dword [ebp - 0x6fa8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00405820
push esi
lea ecx, [ebp - 0x204c]
mov dword [ebp - 0x6e24], eax
call fcn.0051ed70
push eax
lea ecx, [ebp - 0x6e10]
call fcn.00405020
push esi
lea ecx, [ebp - 0x2254]
call fcn.0051e4d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov esi, eax
call fcn.00405820
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x237c]
call fcn.00405430
lea ecx, [ebp - 0x237c]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4d307d
lea ecx, [ebp - 0x237c]
call fcn.00405820
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d309a
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.0051e4d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
mov esi, eax
call fcn.00405820
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x237c]
call fcn.00405430
lea ecx, [ebp - 0x237c]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4d307d
push 0
lea ecx, [ebp - 0x237c]
call fcn.00405a70
lea ecx, [ebp - 0x237c]
call fcn.00405820
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.004bd520
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x6e30]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2388]
call fcn.00406ef0
test eax, eax
jne 0x4d307d
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x575d98
lea ecx, [ebp - 0x6e30]
call fcn.00405820
push eax
push 0x575d98
lea ecx, [ebp - 0x2388]
call fcn.00407230
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6e24], 0x58da98
call fcn.00405820
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d309a
lea eax, [ebp - 0x2640]
push eax
lea ecx, [ebp - 0x237c]
call fcn.00405020
push 0
lea ecx, [ebp - 0x237c]
call fcn.00405a70
lea ecx, [ebp - 0x237c]
call fcn.00405820
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.004bd520
mov esi, dword [ebp - 0x6f9c]
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x4d2e10
jmp 0x4d30a0
mov esi, dword [ebp - 0x6f9c]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d4981
push 4
lea ecx, [ebp - 0x2130]
call fcn.004093c0
lea ecx, [ebp - 0x2130]
call fcn.0040c910
xor eax, eax
mov byte [ebp - 4], 0xd4
mov dword [ebp - 0x6fb4], eax
test esi, esi
je 0x4d34e0
nop dword [eax + eax]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop dword [eax + eax]
push eax
lea ecx, [ebp - 0x2254]
call fcn.0051e4d0
mov eax, dword [eax]
mov dword [ebp - 0x6f78], eax
test esi, esi
jne 0x4d3160
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x597090
push eax
lea ecx, [edi + 0x104]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push str.HKU_
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00405820
mov dword [ebp - 0x6f8c], eax
jmp 0x4d31bf
cmp esi, 1
jne 0x4d3186
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597090
push dword [ebp - 0x6fc4]
jmp 0x4d31aa
cmp esi, 2
jne 0x4d31b5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597090
push dword [ebp - 0x6fe0]
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
mov dword [ebp - 0x6f8c], 0x58da98
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2130]
call fcn.0040c940
test al, al
je 0x4d34b7
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x2130]
call fcn.0040cfc0
test al, al
je 0x4d34b7
mov esi, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597120
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4d3489
lea eax, [ebp - 0x2310]
push eax
push 0x575cb0
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4d3489
lea ecx, [ebp - 0x2310]
call fcn.00405bb0
test al, al
jne 0x4d3489
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2310]
call fcn.00405cb0
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x2228]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2310]
call fcn.00406ef0
test eax, eax
je 0x4d3489
push esi
lea ecx, [ebp - 0x2228]
call fcn.0051ed70
mov ecx, eax
call fcn.004053c0
inc eax
lea ecx, [ebp - 0x2310]
push eax
call fcn.00406d30
push 0
push 0
push 0x575cb0
push 0x576600
push 3
lea ecx, [ebp - 0x2310]
call fcn.00407bb0
mov ecx, eax
call fcn.004078d0
lea ecx, [ebp - 0x2310]
call fcn.00405bb0
test al, al
jne 0x4d3489
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405430
push 0
push 0x592b80
lea ecx, [ebp - 0x2310]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d3489
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2310]
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f110
push 5
push 0x41
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d3489
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x1fd4]
push 0
call fcn.00405820
push eax
push 0x41
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x592ca0
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x2310]
push 0x592cbc
call fcn.00405820
push eax
push 0x595310
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6fcc]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2130]
mov dword [ebp - 0x6fcc], eax
call fcn.0040cfc0
test al, al
jne 0x4d3211
mov esi, dword [ebp - 0x6fa4]
mov eax, dword [ebp - 0x6fb4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 3
jb 0x4d30f0
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6f9c]
jb 0x4d30e0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d4976
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4d355a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x59792c
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4d3510
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597954
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4d35c1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x597954
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
push 0
push 0x597980
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
lea ecx, [ebp - 0x2388]
call fcn.00405370
cmp dword [ebp - 0x6fac], 0
jbe 0x4d3d9f
mov ecx, dword [ebp - 0x6fa8]
mov eax, esi
mov edx, dword [ebp - 0x6fac]
sub eax, ecx
mov dword [ebp - 0x6f80], eax
mov eax, dword [ebp - 0x6f9c]
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f8c], edx
xor esi, esi
mov dword [ebp - 0x6fa4], esi
test eax, eax
je 0x4d3d87
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d3d6f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x235c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6f78]
push eax
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x2114]
call fcn.00405430
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2388]
call fcn.00406ef0
test eax, eax
jne 0x4d3d5e
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x575d98
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2388]
call fcn.00407230
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4d38d9
lea eax, [ebp - 0x2010]
push eax
push 0x58f2c4
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4d38d9
lea eax, [ebp - 0x217c]
mov dword [ebp - 0x217c], 0
push eax
push 0x58f364
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4d373e
cmp dword [ebp - 0x217c], 0
jne 0x4d38d9
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d38d9
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d38d9
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d38d9
push eax
push 1
push 1
push eax
push 0x594c18
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d38d9
push eax
push 0x5979e0
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d38d9
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f2c4
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4d38d9
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push 0x58f2c4
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
push 0x43
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x592ca0
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
push 0x597a30
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x2010]
push eax
push 0x58f404
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4d3b2e
lea eax, [ebp - 0x217c]
mov dword [ebp - 0x217c], 0
push eax
push 0x58f504
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4d392a
cmp dword [ebp - 0x217c], 0
je 0x4d3b2e
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d3b2e
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d3b2e
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d3b2e
push eax
push 1
push 1
push eax
push 0x594c18
lea ecx, [ebp - 0x2010]
call fcn.00406ef0
test eax, eax
jne 0x4d3b2e
push eax
push 0x5979e0
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d3b2e
lea eax, [ebp - 0x2090]
push eax
push 0x58f4d0
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4d3b2e
lea ecx, [ebp - 0x2090]
call fcn.00405bb0
test al, al
jne 0x4d3b2e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5954c0
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2310]
call fcn.00405430
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2310]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4d3b2e
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push 0x58f404
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
push 0x43
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x592ca0
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
push 0x597a70
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x217c]
mov dword [ebp - 0x217c], 0
push eax
push 0x595548
lea ecx, [ebp - 0x1f74]
call fcn.0040cd00
test al, al
je 0x4d3d5e
cmp dword [ebp - 0x217c], 4
jne 0x4d3d5e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x59556c
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2130]
call fcn.0040c940
test al, al
je 0x4d3d5e
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0040d040
test al, al
je 0x4d3d5e
lea eax, [ebp - 0x2010]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4d3d36
lea ecx, [ebp - 0x2010]
call fcn.00405bb0
test al, al
jne 0x4d3d36
push 0
push 0x5979e0
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d3d36
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f6c0
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fb4], eax
cmp eax, 0xffffffff
je 0x4d3d36
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
push 0x43
push dword [ebp - 0x6fb4]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x592ca0
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2010]
call fcn.00405820
push eax
push 0x597abc
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6fcc]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fcc], eax
call fcn.0040d040
test al, al
jne 0x4d3be0
mov eax, dword [ebp - 0x6f9c]
inc esi
cmp esi, eax
jb 0x4d3623
jmp 0x4d3d75
mov eax, dword [ebp - 0x6f9c]
mov ecx, dword [ebp - 0x6f78]
mov edx, dword [ebp - 0x6f8c]
mov dword [ebp - 0x6fa4], esi
add ecx, 0xc
sub edx, 1
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f8c], edx
jne 0x4d3613
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d4976
push 0
push 0x597af0
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov esi, dword [ebp - 0x6f9c]
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x4d4347
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d4347
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.0051e4d0
push 0x597478
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
mov eax, dword [eax]
mov dword [ebp - 0x6fcc], eax
call fcn.0051ed70
mov ecx, eax
call fcn.004050d0
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4d3e48
push 0x5975bc
jmp 0x4d3e4d
push 0x5975c8
push dword [ebp - 0x6f78]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x3ed0]
call fcn.00411170
push 1
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x3ed0]
call fcn.00401350
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xd5
call fcn.00406cd0
lea ecx, [ebp - 0x3ed0]
call fcn.00401490
test al, al
je 0x4d4323
mov esi, dword [ebp - 0x6f78]
nop
push 1
lea ecx, [ebp - 0x3ed0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405010
cmp byte [ebp - 0x6f81], 0
jne 0x4d3f17
push 0x594b64
lea ecx, [ebp - 0x1fd4]
call fcn.00405200
test al, al
je 0x4d3f17
push 0
push 1
push 1
push 0
push 0x594b74
lea ecx, [ebp - 0x1fd4]
call fcn.00406ef0
cmp eax, 1
jne 0x4d430a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594b88
push 1
lea ecx, [ebp - 0x3ed0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597b48
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x597b70
lea ecx, [ebp - 0x2090]
call fcn.00405430
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d412e
push 0
push 0x597b80
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d412e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597b48
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x597b70
lea ecx, [ebp - 0x2090]
call fcn.00405430
mov eax, dword [ebp - 0x6fcc]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fd4]
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d430a
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0x594364
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x592ca0
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597bcc
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x597b70
lea ecx, [ebp - 0x2090]
call fcn.00405430
push 0
push 0x597b80
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d430a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595674
push 1
lea ecx, [ebp - 0x3ed0]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405430
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d430a
mov eax, dword [ebp - 0x6fcc]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fd4]
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d430a
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0x594364
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x592ca0
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x3ed0]
call fcn.00401450
test al, al
jne 0x4d3ec0
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x3ed0]
mov byte [ebp - 4], 0xd4
call fcn.004013a0
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x4d3dd8
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d4976
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x4d4659
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d4659
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
call fcn.0051ed70
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00405020
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2388]
call fcn.00406ef0
test eax, eax
jne 0x4d4644
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x575d98
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0x575d98
lea ecx, [ebp - 0x2388]
call fcn.00407230
push 1
lea ecx, [ebp - 0x1fd4]
call fcn.00405a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x595690
lea ecx, [ebp - 0x1fd4]
call fcn.00407230
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d4644
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597be8
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x597b70
lea ecx, [ebp - 0x2090]
call fcn.00405430
push 0
push 0x597b80
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d4644
push 0
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2610]
call fcn.0041e000
test al, al
je 0x4d4644
lea eax, [ebp - 0x2a54]
push eax
push 0x5789fc
push 0x594bb0
lea ecx, [ebp - 0x2610]
call fcn.0041ede0
test al, al
jne 0x4d4541
lea eax, [ebp - 0x2a54]
push eax
push 0x5789fc
push 0x594cf0
lea ecx, [ebp - 0x2610]
call fcn.0041ede0
test al, al
jne 0x4d4541
lea eax, [ebp - 0x2a54]
push eax
push 0x5789fc
push 0x58ef48
lea ecx, [ebp - 0x2610]
call fcn.0041ede0
test al, al
jne 0x4d4541
lea eax, [ebp - 0x2a54]
push eax
push 0x5789fc
push 0x595068
lea ecx, [ebp - 0x2610]
call fcn.0041ede0
test al, al
je 0x4d4644
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0x58da98
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d4644
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0
push 0
push 0
push 0
push 0x58da98
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x1fd4]
call fcn.00405820
push eax
push 0x594364
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x592ca0
push 0x5939ec
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x4d4368
lea ecx, [ebp - 0x2388]
call fcn.00405370
mov esi, dword [ebp - 0x6fac]
test esi, esi
je 0x4d4952
mov ecx, dword [ebp - 0x6fa8]
mov edx, esi
mov eax, dword [ebp - 0x6fa0]
sub eax, ecx
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f80], eax
mov eax, dword [ebp - 0x6f9c]
mov dword [ebp - 0x6fcc], edx
nop word [eax + eax]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
test eax, eax
je 0x4d493a
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d4922
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2388]
call fcn.00406ef0
test eax, eax
jne 0x4d4911
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x575d98
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x575d98
lea ecx, [ebp - 0x2388]
call fcn.00407230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x235c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6f78]
push eax
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x2114]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4d4911
xor dl, dl
lea ecx, [ebp - 0x1f74]
call fcn.0040f780
test al, al
jne 0x4d4911
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597c14
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x597b70
lea ecx, [ebp - 0x2090]
call fcn.00405430
push 0
push 0x597b80
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d4911
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x4d4911
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
push 0x42
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
push 0x594364
push esi
lea ecx, [ebp - 0x204c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x592ca0
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2090]
call fcn.00405820
push eax
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6f9c]
inc esi
cmp esi, eax
jb 0x4d46b0
jmp 0x4d4928
mov eax, dword [ebp - 0x6f9c]
mov ecx, dword [ebp - 0x6f78]
mov edx, dword [ebp - 0x6fcc]
mov dword [ebp - 0x6fa4], esi
add ecx, 0xc
sub edx, 1
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6fcc], edx
jne 0x4d46a0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.00404160
lea ecx, [ebp - 0x2130]
call fcn.0040c980
lea ecx, [ebp - 0x2388]
call fcn.00405360
lea ecx, [ebp - 0x2310]
call fcn.00405360
lea ecx, [ebp - 0x237c]
call fcn.00405360
lea ecx, [ebp - 0x6e38]
call fcn.004da520
lea ecx, [ebp - 0x2844]
call fcn.004023d0
lea ecx, [ebp - 0x2254]
call fcn.00504120
lea ecx, [ebp - 0x2228]
call fcn.0051ed90
lea ecx, [ebp - 0x204c]
call fcn.0051ed90
lea ecx, [ebp - 0x235c]
call fcn.0051ed90
lea ecx, [ebp - 0x21f8]
call fcn.0051ed90
lea ecx, [ebp - 0x32f0]
call fcn.004013a0
lea ecx, [ebp - 0x2e30]
call fcn.004013a0
lea ecx, [ebp - 0x2610]
call fcn.00429a60
lea ecx, [ebp - 0x2090]
call fcn.00405360
lea ecx, [ebp - 0x2010]
call fcn.00405360
lea ecx, [ebp - 0x2524]
call fcn.00405360
lea ecx, [ebp - 0x1fd4]
call fcn.00405360
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0x46
call fcn.00405360
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d75b1
test dword [edi + 0x34], 0x1000
jne 0x4d75b1
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x597c28
push dword [eax + 0x38]
call fcn.00438b50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x34
push dword [eax + 0x34]
call fcn.0043b930
push 0xc
lea ecx, [ebp - 0x2300]
call fcn.0040c890
push 0xa
push 0
lea ecx, [ebp - 0x2300]
call fcn.0051ee00
push 0xc
lea ecx, [ebp - 0x223c]
mov byte [ebp - 4], 0xd6
call fcn.0040c890
push 0xa
push 0
lea ecx, [ebp - 0x223c]
call fcn.0051ee00
push 0xc
lea ecx, [ebp - 0x2370]
mov byte [ebp - 4], 0xd7
call fcn.0040c890
push 0xa
push 0
lea ecx, [ebp - 0x2370]
call fcn.0051ee00
push 0xc
lea ecx, [ebp - 0x209c]
mov byte [ebp - 4], 0xd8
call fcn.0040c890
lea ecx, [ebp - 0x209c]
call fcn.0051e970
push 0xc
lea ecx, [ebp - 0x22a8]
mov byte [ebp - 4], 0xd9
call fcn.0040c890
push 0xa
push 0
lea ecx, [ebp - 0x22a8]
call fcn.0051e4f0
push 0x260
lea ecx, [ebp - 0x3090]
mov byte [ebp - 4], 0xda
call fcn.00411170
lea ecx, [ebp - 0x3090]
call fcn.00401320
push 0x260
lea ecx, [ebp - 0x3550]
mov byte [ebp - 4], 0xdb
call fcn.00411170
lea ecx, [ebp - 0x3550]
call fcn.00401320
push 0xc
lea ecx, [ebp - 0x2074]
mov byte [ebp - 4], 0xdc
call fcn.00401e00
lea ecx, [ebp - 0x2074]
call fcn.00404bc0
xor esi, esi
mov byte [ebp - 4], 0xdd
cmp dword [edi + 0x30], esi
jbe 0x4d4f62
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f80], eax
nop dword [eax]
push 1
push 1
lea ecx, [ebp - 0x3090]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x2074]
call fcn.004053e0
push 0x5875a0
lea ecx, [ebp - 0x2074]
call fcn.004050d0
test al, al
jne 0x4d4f58
push str.Microsoft
lea ecx, [ebp - 0x2074]
call fcn.004050d0
test al, al
jne 0x4d4f58
push 0x59729c
lea ecx, [ebp - 0x2074]
call fcn.004050d0
test al, al
jne 0x4d4f58
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575dac
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2154]
call fcn.00405430
push 5
lea ecx, [ebp - 0x2154]
call fcn.00405820
push eax
lea ecx, [ebp - 0x3090]
call fcn.004014a0
test al, al
je 0x4d4ec1
mov edi, dword [ebp - 0x6f80]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597c5c
push 1
lea ecx, [ebp - 0x3090]
call fcn.004014f0
push eax
push 0x575ca8
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
push esi
mov ecx, edi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2154]
call fcn.00405430
lea ecx, [ebp - 0x2154]
call fcn.00405820
push eax
call dword [0x5564d0]
test eax, eax
je 0x4d4ea8
push 1
lea ecx, [ebp - 0x3090]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405010
push eax
lea eax, [ebp - 0x209c]
push eax
push esi
lea eax, [ebp - 0x22a8]
push eax
lea eax, [ebp - 0x2370]
push eax
lea eax, [ebp - 0x223c]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.00405a70
lea edx, [ebp - 0x2300]
mov ecx, eax
call fcn.004679e0
test al, al
jne 0x4d4ea8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575dac
lea ecx, [ebp - 0x2154]
call fcn.00407230
push 5
lea ecx, [ebp - 0x2154]
call fcn.00405820
push eax
lea ecx, [ebp - 0x3550]
call fcn.004014a0
test al, al
je 0x4d4ea8
nop word [eax + eax]
push 0
push 1
lea ecx, [ebp - 0x3550]
call fcn.004014f0
mov edx, 0x597c70
mov ecx, eax
call fcn.00409490
test eax, eax
je 0x4d4e95
push 0
push 0
push 0
push 0
push 0
push 0x597c5c
push 1
lea ecx, [ebp - 0x3550]
call fcn.004014f0
push eax
push 0x575ca8
push 1
lea ecx, [ebp - 0x3090]
call fcn.004014f0
push eax
push 0x575ca8
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
push esi
mov ecx, edi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2154]
call fcn.00405430
lea ecx, [ebp - 0x2154]
call fcn.00405820
push eax
call dword [0x5564d0]
test eax, eax
je 0x4d4e95
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3550]
call fcn.004014f0
push eax
push 0x576604
push 1
lea ecx, [ebp - 0x3090]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405430
lea eax, [ebp - 0x2074]
push eax
lea eax, [ebp - 0x209c]
push eax
push esi
lea eax, [ebp - 0x22a8]
push eax
lea eax, [ebp - 0x2370]
push eax
lea eax, [ebp - 0x223c]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.00405a70
lea edx, [ebp - 0x2300]
mov ecx, eax
call fcn.004679e0
lea ecx, [ebp - 0x3550]
call fcn.00401450
test al, al
jne 0x4d4d80
lea ecx, [ebp - 0x3090]
call fcn.00401450
test al, al
jne 0x4d4c70
mov edi, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597c80
lea ecx, [ebp - 0x250c]
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2154]
call fcn.00405430
lea ecx, [ebp - 0x2154]
call fcn.00405820
push eax
call dword [0x5564d0]
test eax, eax
je 0x4d4f58
push 0x597cdc
lea ecx, [ebp - 0x2074]
call fcn.00405010
push eax
lea eax, [ebp - 0x209c]
push eax
push esi
lea eax, [ebp - 0x22a8]
push eax
lea eax, [ebp - 0x2370]
push eax
lea eax, [ebp - 0x223c]
push eax
lea edx, [ebp - 0x2300]
lea ecx, [ebp - 0x2154]
call fcn.004679e0
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4d4ba0
lea ecx, [ebp - 0x2300]
call fcn.00408ca0
mov esi, eax
mov ecx, edi
mov dword [ebp - 0x6f9c], esi
call fcn.004eb540
test al, al
jne 0x4d7555
test esi, esi
jne 0x4d4f9e
push esi
push 0x597cf8
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
jmp 0x4d7555
push 0xc
lea ecx, [ebp - 0x2204]
call fcn.00401e00
lea ecx, [ebp - 0x2204]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2034]
mov byte [ebp - 4], 0xde
call fcn.00401e00
lea ecx, [ebp - 0x2034]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x25a4]
mov byte [ebp - 4], 0xdf
call fcn.00401e00
lea ecx, [ebp - 0x25a4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x21ec]
mov byte [ebp - 4], 0xe0
call fcn.00401e00
lea ecx, [ebp - 0x21ec]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2440]
mov byte [ebp - 4], 0xe1
call fcn.00401e00
lea ecx, [ebp - 0x2440]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2334]
mov byte [ebp - 4], 0xe2
call fcn.00401e00
lea ecx, [ebp - 0x2334]
call fcn.00404bc0
push 0x20
lea ecx, [ebp - 0x29b0]
mov byte [ebp - 4], 0xe3
call fcn.00402410
lea ecx, [ebp - 0x29b0]
call fcn.00419640
mov byte [ebp - 4], 0xe4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
push 0
push 0x597d78
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x4d548f
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.0051e4d0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x2300]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575ca8
push esi
mov dword [ebp - 0x6f80], eax
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2440]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5841a8
lea ecx, [ebp - 0x2440]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2334]
call fcn.00405430
lea ecx, [ebp - 0x2334]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d547c
lea eax, [ebp - 0x2204]
xor edx, edx
push eax
lea ecx, [ebp - 0x2334]
mov dword [ebp - 0x6f8c], edx
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.004667c0
test al, al
je 0x4d547c
lea ecx, [ebp - 0x2204]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4d544f
push 0xc
lea ecx, [ebp - 0x2450]
call fcn.00401e00
lea ecx, [ebp - 0x2450]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2628]
mov byte [ebp - 4], 0xe5
call fcn.00401e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584170
lea ecx, [ebp - 0x2204]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2628]
call fcn.00404d30
lea eax, [ebp - 0x2450]
mov byte [ebp - 4], 0xe6
push eax
lea ecx, [ebp - 0x2628]
call fcn.00405820
mov edx, 0x591354
mov ecx, eax
call fcn.00466d00
test al, al
je 0x4d5435
push 0
push 1
push 1
push 0
push 0x594bc4
lea ecx, [ebp - 0x2450]
call fcn.00406ef0
test eax, eax
jne 0x4d5435
push eax
push 1
push 1
push eax
push 0x594be4
lea ecx, [ebp - 0x2450]
call fcn.00406ef0
test eax, eax
jne 0x4d5435
push eax
push 1
push 1
push eax
push 0x594c34
lea ecx, [ebp - 0x2450]
call fcn.00406ef0
test eax, eax
jne 0x4d5435
push eax
push 1
push 1
push eax
push 0x594c18
lea ecx, [ebp - 0x2450]
call fcn.00406ef0
test eax, eax
jne 0x4d5435
push eax
push 0x597de8
lea ecx, [ebp - 0x2450]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d5435
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597e34
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405430
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2450]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x47
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
jne 0x4d534f
lea ecx, [ebp - 0x2628]
call fcn.00405360
lea ecx, [ebp - 0x2450]
mov byte [ebp - 4], 0xe4
call fcn.00405360
mov esi, dword [ebp - 0x6f78]
jmp 0x4d544f
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2628]
call fcn.00405820
push eax
push 0
push 0x47
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2628]
call fcn.00405820
push eax
push 0x593948
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x592ca0
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2450]
call fcn.00405820
push eax
push 0x596c48
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x2628]
call fcn.00405360
lea ecx, [ebp - 0x2450]
mov byte [ebp - 4], 0xe4
call fcn.00405360
mov esi, dword [ebp - 0x6f78]
jmp 0x4d544f
lea ecx, [ebp - 0x2628]
call fcn.00405360
lea ecx, [ebp - 0x2450]
mov byte [ebp - 4], 0xe4
call fcn.00405360
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x2204]
push eax
lea ecx, [ebp - 0x2334]
call fcn.00405820
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.004667c0
test al, al
jne 0x4d5161
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x4d50a0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d7508
push 0xc
lea ecx, [ebp - 0x25d4]
call fcn.00401e00
push 1
push 0x596d20
lea ecx, [ebp - 0x25d4]
call fcn.00404c90
push 0
push 0x597e58
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xe7
call fcn.0041a620
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x4d58c6
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.0051e4d0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x2300]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575ca8
push esi
mov dword [ebp - 0x6f80], eax
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2440]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5841a8
lea ecx, [ebp - 0x2440]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2334]
call fcn.00405430
lea ecx, [ebp - 0x2334]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d58b3
lea eax, [ebp - 0x2204]
xor edx, edx
push eax
lea ecx, [ebp - 0x2334]
mov dword [ebp - 0x6f8c], edx
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.004667c0
test al, al
je 0x4d58b3
lea ecx, [ebp - 0x2204]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4d5886
push 0xc
lea ecx, [ebp - 0x24a0]
call fcn.00401e00
lea ecx, [ebp - 0x24a0]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2664]
mov byte [ebp - 4], 0xe8
call fcn.00401e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584170
lea ecx, [ebp - 0x2204]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2664]
call fcn.00404d30
lea eax, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe9
push eax
lea ecx, [ebp - 0x2664]
call fcn.00405820
mov edx, 0x591470
mov ecx, eax
call fcn.00466d00
test al, al
je 0x4d586c
push 0x5875a0
lea ecx, [ebp - 0x24a0]
call fcn.004050d0
test al, al
jne 0x4d586c
push 0x587504
lea ecx, [ebp - 0x24a0]
call fcn.004050d0
test al, al
jne 0x4d586c
push 0x58796c
lea ecx, [ebp - 0x24a0]
call fcn.004050d0
test al, al
jne 0x4d586c
push 0x596e24
lea ecx, [ebp - 0x24a0]
call fcn.004050d0
test al, al
jne 0x4d586c
push 0
push 0x597eb8
lea ecx, [ebp - 0x24a0]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d586c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597f08
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405430
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x24a0]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
jne 0x4d5786
lea ecx, [ebp - 0x2664]
call fcn.00405360
lea ecx, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe7
call fcn.00405360
mov esi, dword [ebp - 0x6f78]
jmp 0x4d5886
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x2664]
call fcn.00405820
push eax
push 0
push 0x48
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2664]
call fcn.00405820
push eax
push 0x593948
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x592ca0
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x24a0]
call fcn.00405820
push eax
push 0x596e70
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x2664]
call fcn.00405360
lea ecx, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe7
call fcn.00405360
mov esi, dword [ebp - 0x6f78]
jmp 0x4d5886
lea ecx, [ebp - 0x2664]
call fcn.00405360
lea ecx, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe7
call fcn.00405360
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x2204]
push eax
lea ecx, [ebp - 0x2334]
call fcn.00405820
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.004667c0
test al, al
jne 0x4d55b1
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x4d54f0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d74fd
push 0xc
lea ecx, [ebp - 0x2468]
call fcn.00401e00
lea ecx, [ebp - 0x2468]
call fcn.00404bc0
xor esi, esi
mov byte [ebp - 4], 0xea
mov dword [ebp - 0x6f8c], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x4d5cdf
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x223c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2468]
call fcn.00406ef0
test eax, eax
jne 0x4d5ccc
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x575c94
push esi
lea ecx, [ebp - 0x223c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2468]
call fcn.00407230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x596e9c
push esi
lea ecx, [ebp - 0x223c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405430
push 0x260
lea ecx, [ebp - 0x4130]
call fcn.00411170
push 1
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
lea ecx, [ebp - 0x4130]
call fcn.00401350
push 1
lea ecx, [ebp - 0x2034]
mov byte [ebp - 4], 0xeb
call fcn.00405820
push eax
lea ecx, [ebp - 0x4130]
call fcn.004014a0
test al, al
je 0x4d5cbd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x575d98
push 1
lea ecx, [ebp - 0x4130]
call fcn.004014f0
push eax
push 0x575d98
lea ecx, [ebp - 0x21ec]
call fcn.00405430
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x21ec]
call fcn.00405820
push eax
lea ecx, [ebp - 0x25d4]
call fcn.00406ef0
test eax, eax
jne 0x4d5caa
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x4130]
call fcn.004014f0
push eax
push 0x575ca8
push esi
lea ecx, [ebp - 0x223c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405430
lea ecx, [ebp - 0x21ec]
call fcn.00405370
push 0
push 0x80
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
lea ecx, [ebp - 0x29b0]
call fcn.00419790
test eax, eax
je 0x4d5b30
push 0
lea eax, [ebp - 0x21ec]
push eax
lea ecx, [ebp - 0x29b0]
call fcn.00419cc0
test eax, eax
je 0x4d5b30
push 0
push 1
push 1
push 0
push 0x596eac
lea ecx, [ebp - 0x21ec]
call fcn.00406ef0
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x596ec4
lea ecx, [ebp - 0x21ec]
call fcn.00406ef0
test esi, esi
je 0x4d5b1f
test eax, eax
je 0x4d5b1f
sub eax, esi
lea ecx, [ebp - 0x21ec]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.00406db0
jmp 0x4d5b2a
lea ecx, [ebp - 0x21ec]
call fcn.00405370
mov esi, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x21ec]
call fcn.00405bb0
test al, al
je 0x4d5b67
push 1
lea ecx, [ebp - 0x4130]
call fcn.004014f0
push eax
lea ecx, [ebp - 0x21ec]
call fcn.00405010
push 0
lea ecx, [ebp - 0x21ec]
call fcn.00405990
jmp 0x4d5b74
push 3
lea ecx, [ebp - 0x21ec]
call fcn.00407bb0
push 0x597f3c
lea ecx, [ebp - 0x21ec]
call fcn.004050d0
test al, al
jne 0x4d5caa
push 0
push 0x597eb8
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d5caa
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
push 0x58da98
lea ecx, [ebp - 0x21ec]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d5caa
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0
push 0
push 0
push 0
push 0x58da98
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
push 0
push 0x48
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
push 0x593948
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x592ca0
push 0x58da98
push 0x592cbc
lea ecx, [ebp - 0x21ec]
call fcn.00405820
push eax
push 0x596ee0
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea ecx, [ebp - 0x4130]
call fcn.00401450
test al, al
jne 0x4d59e8
lea ecx, [ebp - 0x4130]
mov byte [ebp - 4], 0xea
call fcn.004013a0
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x4d5905
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d74f2
push 0x24
lea ecx, [ebp - 0x2924]
call fcn.004542b0
lea ecx, [ebp - 0x2924]
call fcn.0041df90
push 0xc
lea ecx, [ebp - 0x22b4]
mov byte [ebp - 4], 0xec
call fcn.00401e00
lea ecx, [ebp - 0x22b4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x24c4]
mov byte [ebp - 4], 0xed
call fcn.00401e00
lea ecx, [ebp - 0x24c4]
call fcn.00404bc0
push 0
push 0x597f80
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xee
call fcn.0041a620
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597fd0
lea ecx, [edi + 0x33c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
xor esi, esi
mov dword [ebp - 0x6f8c], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x4d6242
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.0051e4d0
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
call fcn.004eb540
test al, al
jne 0x4d6242
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x598004
push esi
lea ecx, [ebp - 0x2300]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2204]
call fcn.00405430
lea eax, [ebp - 0x2034]
mov dword [ebp - 0x6fb4], 0
push eax
lea ecx, [ebp - 0x2204]
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.004667c0
test al, al
je 0x4d622f
mov esi, dword [ebp - 0x6fb4]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5919f0
lea ecx, [ebp - 0x2034]
call fcn.00407230
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2924]
call fcn.0041e000
test al, al
je 0x4d61ff
push 0
lea eax, [ebp - 0x2a8c]
mov dword [ebp - 0x6ed8], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x2924]
push 0x591688
movups xmmword [ebp - 0x6ee8], xmm0
call fcn.0041e680
test al, al
je 0x4d61ff
lea eax, [ebp - 0x2a8c]
push eax
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.0041fe10
test al, al
je 0x4d61ff
lea eax, [ebp - 0x22b4]
push eax
push 0x5916bc
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.0041f470
test eax, eax
je 0x4d61d8
push 0
push 1
push 1
push 0
push 0x596fb0
lea ecx, [ebp - 0x22b4]
call fcn.00406ef0
lea ecx, [ebp - 0x22b4]
mov esi, eax
call fcn.004053c0
sub eax, 0x12
cmp esi, eax
je 0x4d61d8
push 0
push 1
push 1
push 0
push 0x596fd8
lea ecx, [ebp - 0x22b4]
call fcn.00406ef0
lea ecx, [ebp - 0x22b4]
mov esi, eax
call fcn.004053c0
sub eax, 0xb
cmp esi, eax
je 0x4d61d8
push 0
push 1
push 1
push 0
push 0x596ff4
lea ecx, [ebp - 0x22b4]
call fcn.00406ef0
lea ecx, [ebp - 0x22b4]
mov esi, eax
call fcn.004053c0
sub eax, 0xb
cmp esi, eax
je 0x4d61d8
lea eax, [ebp - 0x6ee8]
push eax
lea eax, [ebp - 0x2bd0]
push eax
push 0x597010
lea ecx, [ebp - 0x2924]
call fcn.0041e680
test al, al
je 0x4d61d8
lea eax, [ebp - 0x22b4]
push eax
push 0x59702c
lea eax, [ebp - 0x2bd0]
push eax
lea ecx, [ebp - 0x2924]
call fcn.0041f470
test eax, eax
je 0x4d61d8
push 0x594b64
lea ecx, [ebp - 0x22b4]
call fcn.004050d0
test al, al
jne 0x4d61d8
push 0x598020
lea ecx, [ebp - 0x22b4]
call fcn.004050d0
test al, al
jne 0x4d61d8
lea eax, [ebp - 0x24c4]
push eax
push 0x591698
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.0041f470
test eax, eax
jne 0x4d604a
lea eax, [ebp - 0x24c4]
push eax
push 0x5916b0
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.0041f470
test eax, eax
je 0x4d61d8
push str.null
lea ecx, [ebp - 0x24c4]
call fcn.004050d0
test al, al
jne 0x4d61d8
lea ecx, [ebp - 0x22b4]
call fcn.00405820
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00410020
test al, al
jne 0x4d61d8
push 0
push 0x598050
lea ecx, [ebp - 0x22b4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d61d8
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x24c4]
call fcn.00405820
push eax
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x22b4]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x49
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4d61d8
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x24c4]
call fcn.00405820
push eax
push 0
push 0x49
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x24c4]
call fcn.00405820
push eax
push 0x593948
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x592ca0
mov ecx, esi
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x22b4]
call fcn.00405820
push eax
push 0x594168
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
lea eax, [ebp - 0x2a8c]
push eax
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.0041fe10
test al, al
jne 0x4d5ed0
mov esi, dword [ebp - 0x6fb4]
lea eax, [ebp - 0x2034]
inc esi
push eax
lea ecx, [ebp - 0x2204]
mov dword [ebp - 0x6fb4], esi
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.004667c0
test al, al
jne 0x4d5e30
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x4d5da0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d74d1
push 0
push 0x598098
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
lea ecx, [ebp - 0x6ed4]
call fcn.004da4e0
mov byte [ebp - 4], 0xef
lea ecx, [ebp - 0x6ecc]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6ed4], eax
mov dword [ebp - 0x6ed0], 0x4b
call fcn.00405370
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6ebc], eax
lea ecx, [ebp - 0x6eac]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6eb8], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6eb4], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6eb0], eax
call fcn.00405370
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d74c6
push 0xc
lea ecx, [ebp - 0x24ac]
call fcn.00401e00
lea ecx, [ebp - 0x24ac]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2424]
mov byte [ebp - 4], 0xf0
call fcn.00401e00
lea ecx, [ebp - 0x2424]
call fcn.00404bc0
lea ecx, [ebp - 0x2468]
mov byte [ebp - 4], 0xf1
call fcn.00405370
xor esi, esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x4d65c3
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d65c3
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x223c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2468]
call fcn.00406ef0
test eax, eax
jne 0x4d65b6
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x575c94
push esi
lea ecx, [ebp - 0x223c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2468]
call fcn.00407230
push esi
lea ecx, [ebp - 0x22a8]
call fcn.0051e4d0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x2370]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
mov dword [ebp - 0x6f8c], eax
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x575ca8
push esi
lea ecx, [ebp - 0x223c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x6ecc]
call fcn.00405430
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x114]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push esi
lea ecx, [ebp - 0x209c]
mov dword [ebp - 0x6ec0], eax
call fcn.0051ed70
push eax
lea ecx, [ebp - 0x6eac]
call fcn.00405020
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x24ac]
call fcn.00405430
lea ecx, [ebp - 0x24ac]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4d65b6
lea ecx, [ebp - 0x24ac]
call fcn.00405820
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d65c3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x24ac]
call fcn.00405430
lea ecx, [ebp - 0x24ac]
call fcn.00405820
mov ecx, eax
call fcn.0041cdb0
test al, al
je 0x4d65b6
push 0
lea ecx, [ebp - 0x24ac]
call fcn.00405a70
lea ecx, [ebp - 0x24ac]
call fcn.00405820
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.004bd520
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6ec0], 0x58da98
call fcn.00405820
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d65c3
push 0
push 1
lea ecx, [ebp - 0x2640]
call fcn.00405820
push eax
lea ecx, [ebp - 0x24ac]
call fcn.004053e0
mov ecx, eax
call fcn.00405a70
lea ecx, [ebp - 0x24ac]
call fcn.00405820
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.004bd520
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d65c3
inc esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x4d6330
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d74b0
lea ecx, [ebp - 0x2468]
call fcn.00405370
push 4
lea ecx, [ebp - 0x222c]
call fcn.004093c0
lea ecx, [ebp - 0x222c]
call fcn.0040c910
xor eax, eax
mov byte [ebp - 4], 0xf2
mov dword [ebp - 0x6f8c], eax
cmp dword [ebp - 0x6f9c], eax
jbe 0x4d6a3b
nop dword [eax]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop dword [eax + eax]
push eax
lea ecx, [ebp - 0x22a8]
call fcn.0051e4d0
mov eax, dword [eax]
mov dword [ebp - 0x6fcc], eax
test esi, esi
jne 0x4d6661
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x597090
push eax
lea ecx, [edi + 0x104]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push str.HKU_
jmp 0x4d66ab
cmp esi, 1
jne 0x4d6687
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597090
push dword [ebp - 0x6fc4]
jmp 0x4d66ab
cmp esi, 2
jne 0x4d66b6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597090
push dword [ebp - 0x6fe0]
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x222c]
call fcn.0040c940
test al, al
je 0x4d6a12
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6f78], 0
push eax
push 0
lea ecx, [ebp - 0x222c]
call fcn.0040cfc0
test al, al
je 0x4d6a12
mov esi, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x597120
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4d69e4
lea eax, [ebp - 0x2424]
push eax
push 0x575cb0
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4d69e4
lea ecx, [ebp - 0x2424]
call fcn.00405bb0
test al, al
jne 0x4d69e4
push dword [ebp - 0x6fcc]
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2424]
call fcn.00405cb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2370]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x575ca8
push esi
lea ecx, [ebp - 0x223c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405430
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2424]
call fcn.00406ef0
test eax, eax
je 0x4d69e4
lea ecx, [ebp - 0x2074]
call fcn.004053c0
inc eax
lea ecx, [ebp - 0x2424]
push eax
call fcn.00406d30
push 0
push 0
push 0x575cb0
push 0x576600
push 3
lea ecx, [ebp - 0x2424]
call fcn.00407bb0
mov ecx, eax
call fcn.004078d0
lea ecx, [ebp - 0x2424]
call fcn.00405bb0
test al, al
jne 0x4d69e4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405430
push 0
push 0x592bc8
lea ecx, [ebp - 0x2424]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d69e4
mov eax, dword [ebp - 0x6fcc]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2424]
mov dword [ebp - 0x6fb4], eax
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x58f110
push 5
push 0x4b
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d69e4
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
push 0
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
push 0x4b
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0x592ca0
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2424]
call fcn.00405820
push eax
push 0x595310
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov eax, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x222c]
mov dword [ebp - 0x6f78], eax
call fcn.0040cfc0
test al, al
jne 0x4d6708
mov esi, dword [ebp - 0x6fa4]
mov eax, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 3
jb 0x4d6620
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f9c]
jb 0x4d6610
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d74a5
push 0
push 0x5980e8
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
push 0xc
lea ecx, [ebp - 0x2518]
call fcn.00401e00
lea ecx, [ebp - 0x2518]
call fcn.00404bc0
xor esi, esi
mov byte [ebp - 4], 0xf3
cmp dword [ebp - 0x6f9c], esi
jbe 0x4d746f
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.0051e4d0
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f78], eax
call fcn.004eb540
test al, al
jne 0x4d746f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x598004
push esi
lea ecx, [ebp - 0x2300]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2204]
call fcn.00405430
lea eax, [ebp - 0x2518]
xor edx, edx
push eax
lea ecx, [ebp - 0x2204]
mov dword [ebp - 0x6fb4], edx
call fcn.00405820
xor edx, edx
mov ecx, eax
call fcn.004667c0
test al, al
je 0x4d7462
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x598140
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x597b70
lea ecx, [ebp - 0x2074]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584120
lea ecx, [ebp - 0x2518]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405430
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d6cd1
push 0
push 0x598150
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d6cd1
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d6cd1
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2034]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x593948
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x59819c
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x597b70
lea ecx, [ebp - 0x2074]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58413c
lea ecx, [ebp - 0x2518]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405430
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
jne 0x4d6d78
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5919f0
lea ecx, [ebp - 0x2518]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405430
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d6ec8
push 0
push 0x598150
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d6ec8
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d6ec8
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2034]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x593948
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5981b4
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x597b70
lea ecx, [ebp - 0x2074]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584154
lea ecx, [ebp - 0x2518]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405430
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
jne 0x4d6f6f
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x591930
lea ecx, [ebp - 0x2518]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405430
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d70bf
push 0
push 0x598150
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d70bf
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d70bf
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2034]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x593948
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5981e4
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x597b70
lea ecx, [ebp - 0x2074]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x584170
lea ecx, [ebp - 0x2518]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405430
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d727a
push 0
push 0x598150
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d727a
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d727a
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2034]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x593948
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5981f8
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
push 0x597b70
lea ecx, [ebp - 0x2074]
call fcn.00405430
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5971c0
lea ecx, [ebp - 0x2518]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405430
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
call dword [0x5564e4]
test eax, eax
je 0x4d7435
push 0
push 0x598150
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004de890
test al, al
jne 0x4d7435
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004b0c50
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4d7435
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00405820
push eax
lea ecx, [ebp - 0x2034]
call fcn.00405820
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004b0dd0
push 0
push 0
push 0
push 0
push 0
push 0x595618
lea ecx, [ebp - 0x2034]
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x593948
call fcn.00405820
push eax
push 0x592cbc
lea ecx, [ebp - 0x2074]
call fcn.00405820
push eax
push 0x595650
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
inc dword [ebp - 0x6fb4]
lea eax, [ebp - 0x2518]
push eax
lea ecx, [ebp - 0x2204]
call fcn.00405820
mov edx, dword [ebp - 0x6fb4]
mov ecx, eax
call fcn.004667c0
test al, al
jne 0x4d6b16
inc esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x4d6a90
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0043a810
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.00404160
mov ecx, edi
call fcn.004eb540
lea ecx, [ebp - 0x2518]
call fcn.00405360
lea ecx, [ebp - 0x222c]
call fcn.0040c980
lea ecx, [ebp - 0x2424]
call fcn.00405360
lea ecx, [ebp - 0x24ac]
call fcn.00405360
lea ecx, [ebp - 0x6ed4]
call fcn.004da520
lea ecx, [ebp - 0x24c4]
call fcn.00405360
lea ecx, [ebp - 0x22b4]
call fcn.00405360
lea ecx, [ebp - 0x2924]
call fcn.00429a60
lea ecx, [ebp - 0x2468]
call fcn.00405360
lea ecx, [ebp - 0x25d4]
call fcn.00405360
lea ecx, [ebp - 0x29b0]
call fcn.004023d0
lea ecx, [ebp - 0x2334]
call fcn.00405360
lea ecx, [ebp - 0x2440]
call fcn.00405360
lea ecx, [ebp - 0x21ec]
call fcn.00405360
lea ecx, [ebp - 0x25a4]
call fcn.00405360
lea ecx, [ebp - 0x2034]
call fcn.00405360
lea ecx, [ebp - 0x2204]
call fcn.00405360
lea ecx, [ebp - 0x2074]
call fcn.00405360
lea ecx, [ebp - 0x3550]
call fcn.004013a0
lea ecx, [ebp - 0x3090]
call fcn.004013a0
lea ecx, [ebp - 0x22a8]
call fcn.00504120
lea ecx, [ebp - 0x209c]
call fcn.0051ed90
lea ecx, [ebp - 0x2370]
call fcn.0051ed90
lea ecx, [ebp - 0x223c]
call fcn.0051ed90
lea ecx, [ebp - 0x2300]
mov byte [ebp - 4], 0x46
call fcn.0051ed90
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d989b
test dword [edi + 0x34], 0x40
jne 0x4d989b
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x59821c
push dword [eax + 0x38]
call fcn.00438b50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x37
push dword [eax + 0x34]
call fcn.0043b930
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4d765b
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58dbd0
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4d7611
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58dc28
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4d76c2
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x58dc28
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
push 0xc
lea ecx, [ebp - 0x1fa4]
mov dword [ebp - 0x6ffc], 0x58dc80
mov dword [ebp - 0x6ff8], 0x58dc90
mov dword [ebp - 0x6ff4], 0x598248
mov dword [ebp - 0x6ff0], 0x598268
mov dword [ebp - 0x6fec], 0x598280
mov dword [ebp - 0x6fe8], 0x598294
call fcn.00401e00
lea ecx, [ebp - 0x1fa4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0xf4
call fcn.00401e00
lea ecx, [ebp - 0x22f4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2190]
mov byte [ebp - 4], 0xf5
call fcn.00401e00
lea ecx, [ebp - 0x2190]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2328]
mov byte [ebp - 4], 0xf6
call fcn.00401e00
lea ecx, [ebp - 0x2328]
call fcn.00404bc0
cmp dword [ebp - 0x6fac], 0
mov byte [ebp - 4], 0xf7
mov dword [ebp - 0x6fcc], 0
jbe 0x4d792f
mov dword [ebp - 0x6f8c], esi
nop dword [eax + eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d792f
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop word [eax + eax]
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6ffc]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4d78ff
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6f80], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0040d040
test al, al
je 0x4d78ff
mov esi, dword [ebp - 0x6f80]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d78f9
lea eax, [ebp - 0x1fa4]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4d78dd
lea ecx, [ebp - 0x1fa4]
call fcn.00405bb0
test al, al
jne 0x4d78dd
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00411190
test al, al
je 0x4d78dd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x57a658
call fcn.00405820
push eax
lea ecx, [ebp - 0x213c]
call fcn.00405430
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.004df9c0
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040d040
test al, al
jne 0x4d7834
mov esi, dword [ebp - 0x6fa4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 6
jb 0x4d77b0
mov esi, dword [ebp - 0x6fcc]
add dword [ebp - 0x6f8c], 0xc
inc esi
mov dword [ebp - 0x6fcc], esi
cmp esi, dword [ebp - 0x6fac]
jb 0x4d7790
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x39
push dword [eax + 0x34]
call fcn.0043b930
push 4
lea ecx, [ebp - 0x6cf0]
call fcn.004093c0
lea ecx, [ebp - 0x6cf0]
call fcn.0040c910
lea eax, [ebp - 0x6cf0]
mov byte [ebp - 4], 0xf8
push eax
push 0x5703a0
push 1
push 0
push 0x5703b0
call dword [0x556888]
test eax, eax
js 0x4d7c36
lea ecx, [ebp - 0x70f0]
call fcn.004011a0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7060]
movups xmmword [ebp - 0x6fd8], xmm0
call fcn.004011a0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7070]
movups xmmword [ebp - 0x6f98], xmm0
call fcn.004011a0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7080]
movups xmmword [ebp - 0x6fc0], xmm0
call fcn.004011a0
mov edi, eax
mov byte [ebp - 4], 0xfc
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fd8]
mov ecx, dword [ebp - 0x6cf0]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f98]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fc0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7080]
mov dword [ebp - 0x6f80], eax
call fcn.00401230
lea ecx, [ebp - 0x7070]
call fcn.00401230
lea ecx, [ebp - 0x7060]
call fcn.00401230
lea ecx, [ebp - 0x70f0]
mov byte [ebp - 4], 0xf8
call fcn.00401230
cmp byte [ebp - 0x6f80], 0
jne 0x4d7c30
push 4
lea ecx, [ebp - 0x6d18]
call fcn.004093c0
lea ecx, [ebp - 0x6d18]
call fcn.0040c910
push 0x575ca8
lea ecx, [ebp - 0x7030]
mov byte [ebp - 4], 0xfd
call fcn.00401080
mov byte [ebp - 4], 0xfe
mov ecx, dword [ebp - 0x6cf0]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6d18]
push ecx
mov ecx, eax
call fcn.00401190
push eax
push dword [ebp - 0x6cf0]
mov eax, dword [esi + 0x1c]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7030]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0xfd
call fcn.00401130
cmp byte [ebp - 0x6f80], 0
jne 0x4d7c21
push 4
lea ecx, [ebp - 0x6d24]
call fcn.004093c0
lea ecx, [ebp - 0x6d24]
call fcn.0040c910
mov byte [ebp - 4], 0xff
lea edx, [ebp - 0x6d24]
mov eax, dword [ebp - 0x6d18]
push edx
push 0
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x4d7c16
mov eax, dword [ebp - 0x6d24]
lea edx, [ebp - 0x2594]
mov dword [ebp - 0x2594], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x2594]
test eax, eax
je 0x4d7c16
mov esi, 1
mov dword [ebp - 0x6fcc], esi
cmp eax, esi
jl 0x4d7c16
mov edi, dword [ebp - 0x6f7c]
push 4
lea ecx, [ebp - 0x6d28]
call fcn.004093c0
lea ecx, [ebp - 0x6d28]
call fcn.0040c910
push 3
push esi
lea ecx, [ebp - 0x70b0]
mov dword [ebp - 4], 0x100
call fcn.004011b0
mov esi, eax
mov byte [ebp - 4], 1
lea edx, [ebp - 0x6d28]
mov ecx, dword [ebp - 0x6d24]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x70b0]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0
call fcn.00401230
cmp byte [ebp - 0x6f80], 0
jne 0x4d7bd7
push dword [ebp - 0x6d28]
mov ecx, edi
call fcn.004e5380
test al, al
je 0x4d7c04
lea ecx, [ebp - 0x6d28]
mov dword [ebp - 4], 0xff
call fcn.0051e0b0
mov esi, dword [ebp - 0x6fcc]
inc esi
mov dword [ebp - 0x6fcc], esi
cmp esi, dword [ebp - 0x2594]
jle 0x4d7b52
jmp 0x4d7c16
lea ecx, [ebp - 0x6d28]
mov dword [ebp - 4], 0xff
call fcn.0051e0b0
lea ecx, [ebp - 0x6d24]
call fcn.0051e0b0
lea ecx, [ebp - 0x6d18]
mov byte [ebp - 4], 0xf8
call fcn.0051e0b0
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d9860
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3c
push dword [eax + 0x34]
call fcn.0043b930
push 0x18
lea ecx, [ebp - 0x24dc]
call fcn.00402420
lea ecx, [ebp - 0x24dc]
call fcn.00408af0
mov dword [ebp - 4], 0x102
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4d7cdd
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5982c0
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4d7c93
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x580e10
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4d7d44
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x580e10
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x7000], 0x57e968
mov dword [ebp - 0x6ffc], 0x57e954
mov dword [ebp - 0x6ff8], 0x57b054
mov dword [ebp - 0x6ff4], 0x580e80
mov dword [ebp - 0x6ff0], 0x580e08
mov dword [ebp - 0x6fec], 0x57e990
mov dword [ebp - 0x6fe8], 0x58aca0
mov dword [ebp - 0x6fcc], 0
jbe 0x4d7f48
mov dword [ebp - 0x6f8c], esi
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d7f48
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d7f28
mov eax, dword [ebp + esi*4 - 0x7000]
lea ecx, [ebp - 0x1fa4]
push ecx
mov ecx, dword [ebp - 0x6f8c]
push eax
mov dword [ebp - 0x6fb4], eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040cd90
test al, al
je 0x4d7f28
push 0
push 0x576ea8
lea ecx, [ebp - 0x1fa4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x24dc]
call fcn.00408cb0
lea ecx, [ebp - 0x24dc]
mov dword [ebp - 0x6f80], 0
call fcn.00408ca0
test eax, eax
je 0x4d7f18
mov esi, dword [ebp - 0x6f80]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d7f12
push 3
push 1
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00408c70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.004053e0
mov ecx, eax
call fcn.00407bb0
mov ecx, eax
call fcn.004053c0
test eax, eax
je 0x4d7efe
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00411190
test al, al
je 0x4d7efe
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00408c70
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x57a658
push dword [ebp - 0x6fb4]
push 0x57a658
call fcn.00405820
push eax
lea ecx, [ebp - 0x213c]
call fcn.00405430
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.004df9c0
lea ecx, [ebp - 0x24dc]
inc esi
call fcn.00408ca0
cmp esi, eax
jb 0x4d7e44
mov esi, dword [ebp - 0x6fa4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 7
jb 0x4d7dc0
mov esi, dword [ebp - 0x6fcc]
add dword [ebp - 0x6f8c], 0xc
inc esi
mov dword [ebp - 0x6fcc], esi
cmp esi, dword [ebp - 0x6fac]
jb 0x4d7da7
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d984e
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3e
push dword [eax + 0x34]
call fcn.0043b930
push 0xc
lea ecx, [ebp - 0x20f0]
call fcn.00401e00
lea ecx, [ebp - 0x20f0]
call fcn.00404bc0
mov esi, dword [ebp - 0x6fa4]
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x6fcc], eax
test eax, eax
jne 0x4d7f9c
push 0x583dd0
jmp 0x4d7fb3
cmp esi, 1
jne 0x4d7fbe
cmp byte [edi + 0x1b4], 0
je 0x4d80ec
push 0x598330
lea ecx, [ebp - 0x1f8c]
call fcn.00405010
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4d80d6
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040cfc0
test al, al
je 0x4d80d6
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d80d6
lea eax, [ebp - 0x1fa4]
push eax
lea eax, [ebp - 0x2190]
push eax
push 1
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x20f0]
call fcn.004053e0
push eax
mov ecx, edi
call fcn.004da620
test al, al
je 0x4d80ba
push 0
lea ecx, [ebp - 0x20f0]
call fcn.00405820
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.004df9c0
test al, al
je 0x4d80ba
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x213c]
call fcn.00405430
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00405370
push eax
mov ecx, edi
call fcn.004df9c0
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040cfc0
test al, al
jne 0x4d8001
mov eax, dword [ebp - 0x6fcc]
inc eax
mov dword [ebp - 0x6fcc], eax
cmp eax, 2
jb 0x4d7f91
mov ecx, edi
call fcn.004df470
test al, al
je 0x4d9843
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x41
push dword [eax + 0x34]
call fcn.0043b930
push 4
lea ecx, [ebp - 0x1fa8]
call fcn.004093c0
lea ecx, [ebp - 0x1fa8]
call fcn.0040c910
push 4
lea ecx, [ebp - 0x2050]
mov byte [ebp - 4], 4
call fcn.004093c0
lea ecx, [ebp - 0x2050]
call fcn.0040c910
push 4
lea ecx, [ebp - 0x1ff8]
mov byte [ebp - 4], 5
call fcn.004093c0
lea ecx, [ebp - 0x1ff8]
call fcn.0040c910
mov byte [ebp - 4], 6
lea esi, [ebp - 0x7028]
mov dword [ebp - 0x7028], 0x5983dc
mov dword [ebp - 0x7024], 0x5983f8
mov dword [ebp - 0x7020], 0x598440
mov dword [ebp - 0x701c], 0x598480
mov dword [ebp - 0x7018], 0x5984ec
mov dword [ebp - 0x7014], 0x598510
mov dword [ebp - 0x7010], 0x598560
mov dword [ebp - 0x700c], 0x598590
mov dword [ebp - 0x7008], 0x5985e8
mov dword [ebp - 0x7004], 0x598628
mov dword [ebp - 0x6f8c], 0
mov dword [ebp - 0x6f78], esi
nop dword [eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d84ba
push 0
push 0x20019
push dword [esi]
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4d849b
mov ecx, edi
xor esi, esi
call fcn.004eb540
test al, al
jne 0x4d8495
nop dword [eax]
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040cfc0
test al, al
je 0x4d8495
lea ecx, [ebp - 0x1fa4]
call fcn.00405370
lea ecx, [ebp - 0x213c]
call fcn.00405370
lea ecx, [ebp - 0x20f0]
call fcn.00405370
test dword [ebp - 0x6f8c], 1
jne 0x4d8346
mov eax, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x1f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Command
push dword [ebp - 0x6cec]
push 0x575ca8
push dword [eax]
call fcn.00405430
lea eax, [ebp - 0x1fa4]
push eax
push 0x575cb0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.0040cd90
test al, al
je 0x4d82fb
lea ecx, [ebp - 0x1fa4]
call fcn.004053c0
test eax, eax
je 0x4d82fb
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00411190
test al, al
jne 0x4d840c
lea ecx, [ebp - 0x1fa4]
jmp 0x4d8407
lea eax, [ebp - 0x20f0]
push eax
push str.DelegateExecute
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.0040cd90
test al, al
je 0x4d8335
lea ecx, [ebp - 0x20f0]
call fcn.004053c0
test eax, eax
jne 0x4d83e1
lea eax, [ebp - 0x20f0]
push eax
push 0x598694
jmp 0x4d83b7
mov ecx, dword [ebp - 0x6cec]
call fcn.0040f6a0
test al, al
je 0x4d837b
lea eax, [ebp - 0x1fa4]
push eax
lea eax, [ebp - 0x2190]
push eax
push 1
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x20f0]
call fcn.004053e0
jmp 0x4d83f5
mov eax, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x1f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x575ca8
push dword [eax]
call fcn.00405430
lea eax, [ebp - 0x20f0]
push eax
push 0x575cb0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.0040cd90
test al, al
je 0x4d840c
lea ecx, [ebp - 0x20f0]
call fcn.004053c0
test eax, eax
je 0x4d840c
lea eax, [ebp - 0x1fa4]
push eax
lea eax, [ebp - 0x2190]
push eax
lea eax, [ebp - 0x20f0]
push eax
mov ecx, edi
call fcn.004da620
test al, al
jne 0x4d840c
lea ecx, [ebp - 0x20f0]
call fcn.00405370
push 0
lea ecx, [ebp - 0x20f0]
call fcn.00405820
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.004df9c0
test al, al
je 0x4d8485
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x575ca8
call fcn.00405820
push eax
lea ecx, [ebp - 0x213c]
call fcn.00405430
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00405370
push eax
mov ecx, edi
call fcn.004df9c0
mov ecx, edi
inc esi
call fcn.004eb540
test al, al
je 0x4d8220
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 4
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xa
jb 0x4d81e0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d9822
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x46
push dword [eax + 0x34]
call fcn.0043b930
xor esi, esi
mov dword [ebp - 0x7028], 0x582d90
mov dword [ebp - 0x7024], 0x582e30
mov dword [ebp - 0x6f8c], esi
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d8606
push 0
push 0x20019
push dword [ebp + esi*4 - 0x7028]
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4d85f6
mov ecx, edi
xor esi, esi
call fcn.004eb540
test al, al
jne 0x4d85f0
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0040cfc0
test al, al
je 0x4d85f0
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x213c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x575ca8
push dword [ebp + eax*4 - 0x7028]
call fcn.00405430
lea eax, [ebp - 0x1fa4]
push eax
push str.Debugger
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.0040cd90
test al, al
je 0x4d85e0
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00411190
test al, al
je 0x4d85e0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.004df9c0
mov ecx, edi
inc esi
call fcn.004eb540
test al, al
je 0x4d8536
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, 2
jb 0x4d84f5
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d9822
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x48
push dword [eax + 0x34]
call fcn.0043b930
push 0x582d00
lea ecx, [ebp - 0x2114]
mov dword [ebp - 0x7028], 0x5986ac
mov dword [ebp - 0x7024], 0x5986d0
mov dword [ebp - 0x7020], 0x598700
mov dword [ebp - 0x701c], 0x59872c
call fcn.00405010
push 0xc
lea ecx, [ebp - 0x240c]
call fcn.00401e00
push 1
push 0x5766e8
lea ecx, [ebp - 0x240c]
call fcn.00404c90
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
mov byte [ebp - 4], 7
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4d88cd
xor esi, esi
mov dword [ebp - 0x6f8c], esi
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d88cd
cmp esi, 1
jne 0x4d870a
push 0x598750
lea ecx, [ebp - 0x2114]
call fcn.00405010
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4d88cd
push 0x575c94
lea ecx, [ebp - 0x240c]
call fcn.00405010
lea eax, [ebp - 0x1fa4]
push eax
push dword [ebp + esi*4 - 0x7028]
lea ecx, [ebp - 0x1f74]
call fcn.0040cb10
test al, al
je 0x4d88bd
lea ecx, [ebp - 0x1fa4]
call fcn.00405bb0
test al, al
jne 0x4d88bd
push 0x576e7c
lea ecx, [ebp - 0x1fa4]
call fcn.004050d0
test al, al
jne 0x4d88bd
push 1
lea ecx, [ebp - 0x240c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x24dc]
call fcn.00408cb0
lea ecx, [ebp - 0x24dc]
xor esi, esi
call fcn.00408ca0
test eax, eax
je 0x4d88b7
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d88b7
push 3
push 1
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00408c70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.004053e0
mov ecx, eax
call fcn.00407bb0
mov ecx, eax
call fcn.00405bb0
test al, al
jne 0x4d88a3
lea ecx, [ebp - 0x1fa4]
call fcn.004053c0
cmp eax, 5
jl 0x4d87fd
push 0
push 1
push 1
push 0
push 0x575cac
lea ecx, [ebp - 0x1fa4]
call fcn.00406ef0
test eax, eax
jne 0x4d8823
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x1fa4]
call fcn.00407230
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00411190
test al, al
je 0x4d88a3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00408c70
push eax
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x2114]
push 0x57a658
push dword [ebp + eax*4 - 0x7028]
push 0x57a658
call fcn.00405820
push eax
lea ecx, [ebp - 0x213c]
call fcn.00405430
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.004df9c0
lea ecx, [ebp - 0x24dc]
inc esi
call fcn.00408ca0
cmp esi, eax
jb 0x4d8790
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, 4
jb 0x4d86b0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d9817
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x4b
push dword [eax + 0x34]
call fcn.0043b930
movsd xmm0, qword [0x5ab090]
mov eax, 0x598810
comisd xmm0, xmmword [edi + 0x390]
mov ecx, 0x5987a8
cmovbe ecx, eax
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6fb4], ecx
test eax, eax
je 0x4d897e
mov eax, dword [ebp - 0x6fa0]
lea edx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push esi
mov ecx, edx
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00405430
add dword [ebp - 0x6f8c], 0xc
lea edx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
mov ecx, dword [ebp - 0x6fb4]
cmp esi, eax
jb 0x4d8930
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fdc], 0
je 0x4d89e2
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6fb4]
inc eax
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00405430
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x4d8bcb
mov dword [ebp - 0x6f8c], esi
nop
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d8bcb
push 0
push 0x20019
mov ecx, esi
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040c940
test al, al
je 0x4d8ba9
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0040d040
test al, al
je 0x4d8ba9
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d8ba3
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1fa4]
call fcn.00405010
lea ecx, [ebp - 0x1fa4]
call fcn.004053c0
mov esi, eax
cmp esi, 3
jl 0x4d8b7b
push 1
lea ecx, [ebp - 0x1fa4]
call fcn.00405330
cmp word [eax], 0x3a
jne 0x4d8b7b
push 2
lea ecx, [ebp - 0x1fa4]
call fcn.00405330
cmp word [eax], 0x5c
jne 0x4d8b7b
movsd xmm0, qword [edi + 0x390]
comisd xmm0, xmmword [0x5ab098]
jbe 0x4d8b2b
cmp esi, 0x14
jle 0x4d8b2b
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x5988a8
lea ecx, [ebp - 0x1fa4]
call fcn.00406ef0
mov edx, eax
lea ecx, [esi - 0xf]
cmp edx, ecx
jge 0x4d8b15
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x5988cc
lea ecx, [ebp - 0x1fa4]
call fcn.00406ef0
mov edx, eax
lea eax, [esi - 0x13]
cmp edx, eax
jle 0x4d8b2b
lea eax, [edx - 1]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00406c90
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x57a658
call fcn.00405820
push eax
lea ecx, [ebp - 0x213c]
call fcn.00405430
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.004df9c0
mov esi, dword [ebp - 0x6fcc]
lea eax, [ebp - 0x6cec]
inc esi
lea ecx, [ebp - 0x1f74]
push eax
push esi
mov dword [ebp - 0x6fcc], esi
call fcn.0040d040
test al, al
jne 0x4d8a57
mov esi, dword [ebp - 0x6f8c]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4d8a00
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d9817
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x50
push dword [eax + 0x34]
call fcn.0043b930
push 0xc
lea ecx, [ebp - 0x212c]
call fcn.0040c890
push 0xbb8
push 0
lea ecx, [ebp - 0x212c]
call fcn.0051ee00
mov byte [ebp - 4], 8
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4d8c78
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x10c]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x104]
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov edx, 0x57d4fc
mov ecx, eax
call fcn.00442c20
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x10c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4d8c30
mov ecx, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0x16
lea ecx, [ecx + eax*4]
call fcn.00405d30
mov eax, dword [ebp - 0x6fa0]
xor esi, esi
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d8cd8
mov ecx, dword [ebp - 0x6f8c]
lea eax, [ebp - 0x212c]
push 1
push eax
call fcn.00405820
push eax
mov ecx, edi
call fcn.004e61c0
test al, al
je 0x4d8cd8
add dword [ebp - 0x6f8c], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x4d8ca0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d980c
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x51
push dword [eax + 0x34]
call fcn.0043b930
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4d8d8e
lea eax, [edi + 0x10c]
push esi
mov ecx, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405bb0
test al, al
jne 0x4d8d7e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2978]
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00405430
push 1
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004e61c0
test al, al
je 0x4d8d8e
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x4d8d08
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d980c
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x52
push dword [eax + 0x34]
call fcn.0043b930
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4d8e49
lea eax, [edi + 0x10c]
nop
push esi
mov ecx, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405bb0
test al, al
jne 0x4d8e39
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5988f4
lea ecx, [ebp - 0x226c]
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00405430
push 1
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004e61c0
test al, al
je 0x4d8e49
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x4d8dc0
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d980c
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x53
push dword [eax + 0x34]
call fcn.0043b930
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4d8f06
lea eax, [edi + 0x10c]
nop dword [eax]
push esi
mov ecx, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405bb0
test al, al
jne 0x4d8ef6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
call fcn.00405820
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00405430
push 0
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00405820
push eax
mov ecx, edi
call fcn.004e61c0
test al, al
je 0x4d8f06
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x4d8e80
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d980c
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4d8f7a
mov ecx, dword [ebp - 0x6fa0]
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f8c], ecx
push esi
mov ecx, eax
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x104]
push esi
call fcn.0051ea60
mov ecx, eax
call fcn.00405820
mov edx, str.374DE290_123F_4565_9164_39C4925E467B
mov ecx, eax
call fcn.00442c20
add dword [ebp - 0x6f8c], 0xc
lea eax, [edi + 0x10c]
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4d8f32
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x54
push dword [eax + 0x34]
call fcn.0043b930
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp - 0x6fa0]
push 0
push 0
lea eax, [eax + eax*2]
push 0x19
lea ecx, [ecx + eax*4]
call fcn.00405d30
xor esi, esi
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d8fde
mov ecx, dword [ebp - 0x6fa0]
lea eax, [ebp - 0x212c]
push 0
push eax
call fcn.00405820
push eax
mov ecx, edi
call fcn.004e61c0
test al, al
je 0x4d8fde
add dword [ebp - 0x6fa0], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x4d8fa6
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d980c
push 0xc
lea ecx, [ebp - 0x27d4]
call fcn.00401e00
lea ecx, [ebp - 0x27d4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2658]
mov byte [ebp - 4], 9
call fcn.00401e00
lea ecx, [ebp - 0x2658]
call fcn.00404bc0
push 0x4c
lea ecx, [ebp - 0x2b58]
mov byte [ebp - 4], 0xa
call fcn.0041dbb0
lea ecx, [ebp - 0x2b58]
call fcn.00410b90
lea ecx, [ebp - 0x212c]
mov byte [ebp - 4], 0xb
call fcn.00408ca0
xor esi, esi
mov dword [ebp - 0x6f80], eax
test eax, eax
je 0x4d91e1
nop dword [eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d91e1
push 0x580ee4
push 1
push 1
push esi
lea ecx, [ebp - 0x212c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405850
push eax
lea ecx, [ebp - 0x27d4]
call fcn.004053e0
mov ecx, eax
call fcn.004050d0
test al, al
je 0x4d91a7
push 0
push esi
lea ecx, [ebp - 0x212c]
call fcn.0051ed70
mov ecx, eax
call fcn.00405820
push eax
lea ecx, [ebp - 0x2b58]
call fcn.00410d30
test al, al
je 0x4d91a7
push esi
lea ecx, [ebp - 0x212c]
call fcn.0051ed70
push eax
lea ecx, [ebp - 0x2658]
call fcn.00405020
push 1
push 0
lea ecx, [ebp - 0x2b58]
call fcn.00410dd0
push eax
push esi
lea ecx, [ebp - 0x212c]
call fcn.0051ed70
mov ecx, eax
call fcn.004053e0
mov ecx, eax
call fcn.00405bb0
test al, al
jne 0x4d91d4
lea ecx, [ebp - 0x2b58]
call fcn.00410e50
mov ecx, eax
call fcn.004093d0
push 0
push 0
test eax, eax
je 0x4d9188
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b58]
call fcn.00410e50
push eax
push 0x576604
push esi
lea ecx, [ebp - 0x212c]
call fcn.0051ed70
mov ecx, eax
call fcn.00407230
push 3
push esi
lea ecx, [ebp - 0x212c]
call fcn.0051ed70
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.00411190
test al, al
je 0x4d91d4
jmp 0x4d91b2
push 0x575cb0
push 0x576600
push esi
lea ecx, [ebp - 0x212c]
call fcn.0051ed70
mov ecx, eax
call fcn.004078d0
jmp 0x4d91b2
lea ecx, [ebp - 0x2658]
call fcn.00405370
push 0
lea ecx, [ebp - 0x2658]
call fcn.00405820
push eax
push esi
lea ecx, [ebp - 0x212c]
call fcn.0051ed70
push eax
mov ecx, edi
call fcn.004df9c0
inc esi
cmp esi, dword [ebp - 0x6f80]
jb 0x4d9060
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d97eb
mov ecx, edi
call fcn.004df470
test al, al
je 0x4d97eb
push 0
push 0
lea ecx, [ebp - 0x212c]
call fcn.0051ec50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x55
push dword [eax + 0x34]
call fcn.0043b930
push 0xc
lea ecx, [ebp - 0x6d60]
call fcn.0040c890
lea ecx, [ebp - 0x6d60]
call fcn.0040c8d0
push 0xc
lea ecx, [ebp - 0x6d74]
mov byte [ebp - 4], 0xc
call fcn.0040c890
lea ecx, [ebp - 0x6d74]
call fcn.0040c8d0
push 0
push 0x20019
push 0x585af0
lea ecx, [ebp - 0x1fa8]
mov byte [ebp - 4], 0xd
call fcn.0040c940
test al, al
je 0x4d95fa
lea eax, [ebp - 0x6d60]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x1fa8]
call fcn.0040cfc0
test al, al
je 0x4d95fa
nop dword [eax + eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d95fa
push dword [ebp - 0x6d60]
lea ecx, [ebp - 0x2190]
call fcn.00405010
push 0x598928
lea ecx, [ebp - 0x2190]
call fcn.00405200
test al, al
je 0x4d92f4
push 0xa
push 1
push 1
push 0
push 0x59894c
lea ecx, [ebp - 0x2190]
call fcn.00406ef0
test eax, eax
je 0x4d95d2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x598964
push dword [ebp - 0x6d60]
lea ecx, [ebp - 0x1f8c]
push 0x598978
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2050]
call fcn.0040c940
test al, al
je 0x4d95d2
mov ecx, edi
xor esi, esi
call fcn.004eb540
test al, al
jne 0x4d95d2
lea eax, [ebp - 0x6d74]
push eax
push esi
lea ecx, [ebp - 0x2050]
call fcn.0040cfc0
test al, al
je 0x4d95d2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d74]
lea ecx, [ebp - 0x1f8c]
push 0x598994
push dword [ebp - 0x6d60]
push 0x598978
call fcn.00405430
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1ff8]
call fcn.0040c940
test al, al
je 0x4d95c2
lea eax, [ebp - 0x28d0]
push eax
push 0x57b03c
lea ecx, [ebp - 0x1ff8]
call fcn.0040cd00
test al, al
je 0x4d95c2
cmp dword [ebp - 0x28d0], 0xb
jne 0x4d9441
lea eax, [ebp - 0x1fa4]
push eax
push 0x57b094
lea ecx, [ebp - 0x1ff8]
call fcn.0040cb10
test al, al
je 0x4d95c2
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00405820
push eax
push 0x1000
lea ecx, [ebp - 0x1fa4]
call fcn.00405dd0
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.00414ad0
jmp 0x4d94fb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5857a0
lea ecx, [ebp - 0x1f8c]
call fcn.00405820
push eax
lea ecx, [ebp - 0x22f4]
call fcn.00405430
lea eax, [ebp - 0x1fa4]
push eax
push 0x585808
lea ecx, [ebp - 0x22f4]
call fcn.00405820
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0040cd90
test al, al
je 0x4d94a7
lea ecx, [ebp - 0x1fa4]
call fcn.00405bb0
test al, al
je 0x4d94e8
lea eax, [ebp - 0x1fa4]
push eax
push 0x585808
lea ecx, [ebp - 0x1ff8]
call fcn.0040cb10
test al, al
je 0x4d94d1
lea ecx, [ebp - 0x1fa4]
call fcn.00405bb0
test al, al
je 0x4d94e8
lea eax, [ebp - 0x1fa4]
push eax
push 0x57b094
lea ecx, [ebp - 0x1ff8]
call fcn.0040cb10
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00411190
test al, al
je 0x4d95c2
lea ecx, [ebp - 0x1fa4]
call fcn.00405820
push eax
push 0
call dword [0x5568a8]
test eax, eax
je 0x4d9537
push 1
push 0
lea ecx, [ebp - 0x7050]
call fcn.00404c90
mov byte [ebp - 4], 0xe
or dword [ebp - 0x6fe4], 1
jmp 0x4d9557
lea eax, [ebp - 0x1f8c]
push eax
lea ecx, [ebp - 0x7044]
call fcn.00404be0
mov dword [ebp - 4], 0x10f
or dword [ebp - 0x6fe4], 2
push eax
lea ecx, [ebp - 0x213c]
call fcn.00405020
mov eax, dword [ebp - 0x6fe4]
test al, 2
je 0x4d9587
and eax, 0xfffffffd
lea ecx, [ebp - 0x7044]
mov dword [ebp - 0x6fe4], eax
call fcn.00405360
mov eax, dword [ebp - 0x6fe4]
mov dword [ebp - 4], 0x10d
test al, 1
je 0x4d95a6
and eax, 0xfffffffe
lea ecx, [ebp - 0x7050]
mov dword [ebp - 0x6fe4], eax
call fcn.00405360
push 0
lea ecx, [ebp - 0x213c]
call fcn.00405820
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.004df9c0
mov ecx, edi
inc esi
call fcn.004eb540
test al, al
je 0x4d9358
mov eax, dword [ebp - 0x6fcc]
lea ecx, [ebp - 0x6d60]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1fa8]
mov dword [ebp - 0x6fcc], eax
call fcn.0040cfc0
test al, al
jne 0x4d92a0
mov ecx, edi
call fcn.004df470
test al, al
je 0x4d97d5
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x58
push dword [eax + 0x34]
call fcn.0043b930
push 4
lea ecx, [ebp - 0x6d20]
call fcn.004093c0
lea ecx, [ebp - 0x6d20]
call fcn.00401240
lea eax, [ebp - 0x2598]
mov byte [ebp - 4], 0x10
push eax
push 0x1f40
lea eax, [ebp - 0x1f70]
mov dword [ebp - 0x6ce0], 0x428
push eax
mov dword [ebp - 0x2598], 0
call dword [0x5562d0]
test eax, eax
je 0x4d972c
xor esi, esi
test dword [ebp - 0x2598], 0xfffffffc
jbe 0x4d972c
nop dword [eax]
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d972c
push dword [ebp + esi*4 - 0x1f70]
push 0x18
call dword [0x5563a0]
push eax
lea ecx, [ebp - 0x6d20]
call fcn.00401290
lea ecx, [ebp - 0x6d20]
call fcn.004012c0
test al, al
jne 0x4d971a
lea eax, [ebp - 0x6ce0]
push eax
push dword [ebp - 0x6d20]
call dword [0x5562d8]
test eax, eax
je 0x4d970f
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d970f
lea eax, [ebp - 0x6ac0]
mov ecx, edi
push eax
lea eax, [ebp - 0x212c]
push eax
call fcn.004e6830
test al, al
je 0x4d970f
lea eax, [ebp - 0x6ce0]
push eax
push dword [ebp - 0x6d20]
call dword [0x556254]
test eax, eax
jne 0x4d96d4
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d972c
mov eax, dword [ebp - 0x2598]
inc esi
shr eax, 2
cmp esi, eax
jb 0x4d9680
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d97ca
lea ecx, [ebp - 0x212c]
call fcn.00408ca0
mov ecx, dword [edi + 8]
push 0x5a
mov dword [ebp - 0x6fb4], eax
push dword [ecx + 0x34]
mov ecx, dword [edi + 4]
call fcn.0043b930
xor esi, esi
cmp dword [ebp - 0x6fb4], esi
jbe 0x4d97c3
mov dword [ebp - 0x6f8c], esi
mov ecx, edi
call fcn.004eb540
test al, al
jne 0x4d97c3
mov eax, dword [ebp - 0x6f8c]
xor edx, edx
div dword [ebp - 0x6fb4]
mov ecx, dword [edi + 4]
add eax, 0x5a
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.0043b930
push 0
push 0
push esi
lea ecx, [ebp - 0x212c]
call fcn.0051ed70
push eax
mov ecx, edi
call fcn.004df9c0
add dword [ebp - 0x6f8c], 0xa
inc esi
cmp esi, dword [ebp - 0x6fb4]
jb 0x4d9770
mov ecx, edi
call fcn.004df470
lea ecx, [ebp - 0x6d20]
call fcn.00401270
lea ecx, [ebp - 0x6d74]
call fcn.00405360
lea ecx, [ebp - 0x6d60]
call fcn.00405360
lea ecx, [ebp - 0x2b58]
call fcn.00410fa0
lea ecx, [ebp - 0x2658]
call fcn.00405360
lea ecx, [ebp - 0x27d4]
call fcn.00405360
lea ecx, [ebp - 0x212c]
call fcn.0051ed90
lea ecx, [ebp - 0x240c]
call fcn.00405360
lea ecx, [ebp - 0x1ff8]
call fcn.0040c980
lea ecx, [ebp - 0x2050]
call fcn.0040c980
lea ecx, [ebp - 0x1fa8]
call fcn.0040c980
lea ecx, [ebp - 0x20f0]
call fcn.00405360
lea ecx, [ebp - 0x24dc]
mov dword [ebp - 4], 0xf8
call fcn.00408c40
lea ecx, [ebp - 0x6cf0]
call fcn.0051e0b0
lea ecx, [ebp - 0x2328]
call fcn.00405360
lea ecx, [ebp - 0x2190]
call fcn.00405360
lea ecx, [ebp - 0x22f4]
call fcn.00405360
lea ecx, [ebp - 0x1fa4]
mov byte [ebp - 4], 0x46
call fcn.00405360
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0
push 0x1004
push dword [eax + 0xb8]
call fcn.00436e10
push 0xc
lea ecx, [ebp - 0x2800]
mov dword [ebp - 0x6f8c], eax
call fcn.00401e00
lea ecx, [ebp - 0x2800]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x27f4]
mov dword [ebp - 4], 0x111
call fcn.00401e00
lea ecx, [ebp - 0x27f4]
call fcn.00404bc0
push 0xc
lea ecx, [ebp - 0x2990]
mov byte [ebp - 4], 0x12
call fcn.00401e00
lea ecx, [ebp - 0x2990]
call fcn.00404bc0
push 0
push 0x5989b0
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x13
call fcn.0041a620
xor esi, esi
cmp dword [ebp - 0x6f8c], esi
jbe 0x4d9a46
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.0043aa90
cmp eax, 0x51
jne 0x4d9a39
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.0043abb0
push eax
lea ecx, [ebp - 0x2154]
call fcn.004057e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.0043abb0
push eax
lea ecx, [ebp - 0x2800]
call fcn.004057e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.0043abb0
push eax
lea ecx, [ebp - 0x27f4]
call fcn.004057e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 3
push esi
push dword [eax + 0xb8]
call fcn.0043abb0
push eax
lea ecx, [ebp - 0x2990]
call fcn.004057e0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x2990]
call fcn.00405820
push eax
push 0x598a1c
lea ecx, [ebp - 0x27f4]
call fcn.00405820
push eax
push 0x598a40
lea ecx, [ebp - 0x2800]
call fcn.00405820
push eax
push 0x598a68
lea ecx, [ebp - 0x2154]
call fcn.00405820
push eax
push 0x593948
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
inc esi
cmp esi, dword [ebp - 0x6f8c]
jb 0x4d9932
push 0
push 0x598a90
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
push 0x18
lea ecx, [ebp - 0x29c8]
call fcn.00402420
lea ecx, [ebp - 0x29c8]
call fcn.00408af0
xor esi, esi
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x6f8c], esi
jbe 0x4d9c30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.0043aa90
cmp eax, 0x52
jne 0x4d9c23
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.0043abb0
push eax
lea ecx, [ebp - 0x2154]
call fcn.004057e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.0043abb0
push eax
lea ecx, [ebp - 0x2800]
call fcn.004057e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.0043abb0
push eax
lea ecx, [ebp - 0x27f4]
call fcn.004057e0
push 1
push 0x57a658
lea ecx, [ebp - 0x2154]
call fcn.00405820
push eax
lea ecx, [ebp - 0x29c8]
call fcn.00408cb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x29c8]
call fcn.00408c70
push eax
push 0x598acc
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea ecx, [ebp - 0x29c8]
call fcn.00408ca0
cmp eax, 1
jbe 0x4d9b8f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x29c8]
call fcn.00408c70
push eax
push 0x598ae0
lea ecx, [ebp - 0x1f80]
call fcn.00407230
lea ecx, [ebp - 0x29c8]
call fcn.00408ca0
cmp eax, 2
jbe 0x4d9bd1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 2
lea ecx, [ebp - 0x29c8]
call fcn.00408c70
push eax
push 0x598af8
lea ecx, [ebp - 0x1f80]
call fcn.00407230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x594c9c
lea ecx, [ebp - 0x27f4]
call fcn.00405820
push eax
push 0x598a40
lea ecx, [ebp - 0x2800]
call fcn.00405820
push eax
push 0x598a68
lea ecx, [ebp - 0x1f80]
call fcn.00407230
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
inc esi
cmp esi, dword [ebp - 0x6f8c]
jb 0x4d9a82
push 0
push 0x598b10
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x592550
call fcn.0043a3d0
push 0
push 0x598b60
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x592580
call fcn.0043a3d0
push 0
push 0x598be8
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
movsd xmm0, qword [edi + 0x390]
comisd xmm0, xmmword [0x5ab098]
jbe 0x4d9cd8
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x5925a0
call fcn.0043a3d0
push 0
push 0x598c60
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x5925d4
call fcn.0043a3d0
push 0
push 0x598cf0
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x592604
call fcn.0043a3d0
push 0
push 0x598d78
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x592630
call fcn.0043a3d0
push 0
push 0x598e00
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x592668
call fcn.0043a3d0
push 0
push 0x598e90
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x5926b0
call fcn.0043a3d0
push 0
push 0x598f30
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
mov ecx, dword [edi + 4]
push 0x5926f8
call fcn.0043a3d0
push 0
push 0x598fd0
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x592740
call fcn.0043a3d0
push 0
push 0x599070
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x592778
call fcn.0043a3d0
push 0
push 0x599100
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x5927c0
call fcn.0043a3d0
push 0
push 0x5991a0
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x592820
call fcn.0043a3d0
push 0
push 0x599228
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x592864
call fcn.0043a3d0
push 0
push 0x5992c8
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
mov ecx, dword [edi + 4]
push 0x53
push 0xffffffffffffffff
push 0
push 0x5928a0
call fcn.0043a3d0
push 0
push 0x599360
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x5993f8
call fcn.0043a3d0
push 0
push 0x599448
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x5928e0
call fcn.0043a3d0
push 0
push 0x5994f0
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
movsd xmm0, qword [edi + 0x390]
lea ecx, [ebp - 0x1fc8]
xor eax, eax
comisd xmm0, xmmword [0x5ab098]
seta al
add eax, 8
add dword [edi + 0x24], eax
call fcn.00419780
test eax, eax
je 0x4da153
lea ecx, [ebp - 0x29d0]
call fcn.004244e0
lea ecx, [ebp - 0x29d0]
call fcn.004244d0
mov edi, eax
lea ecx, [ebp - 0x29d0]
sub edi, dword [ebp - 0x7038]
mov esi, edx
lea edx, [ebp - 0x1f80]
sbb esi, dword [ebp - 0x702c]
call fcn.00424490
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58de80
lea ecx, [ebp - 0x1f80]
call fcn.00405820
push eax
push 0x599580
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push esi
push edi
xor edx, edx
lea ecx, [ebp - 0x1f80]
call fcn.00425120
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x58d94c
call fcn.004eb540
test al, al
mov edx, 0x599620
mov ecx, 0x5995d8
cmove ecx, edx
push ecx
push 0x599660
lea ecx, [ebp - 0x1f80]
call fcn.00405820
push eax
push 0x599670
lea ecx, [ebp - 0x1f80]
call fcn.00405430
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
push 0
push 0x599698
lea ecx, [ebp - 0x1fc8]
call fcn.0041a620
lea ecx, [ebp - 0x1fc8]
call fcn.00419710
mov edi, eax
lea ecx, [ebp - 0x1f80]
add edi, 0x26
mov esi, edx
adc esi, 0
push esi
push edi
call fcn.004061c0
lea ecx, [ebp - 0x1f80]
call fcn.004053c0
add eax, eax
add edi, eax
adc esi, 0
push esi
push edi
lea ecx, [ebp - 0x1f80]
call fcn.004061c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5996d4
lea ecx, [ebp - 0x1f80]
call fcn.00407230
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0041a5c0
mov edi, dword [ebp - 0x6f7c]
jmp 0x4da15e
lea ecx, [edi + 0x11c]
call fcn.00405370
lea ecx, [ebp - 0x1f74]
call fcn.0040e9c0
lea ecx, [ebp - 0x2570]
call fcn.0040e9c0
push 5
lea ecx, [edi + 0x33c]
call fcn.00406d30
lea ecx, [edi + 0x33c]
call fcn.00405820
push eax
push 0x80000002
call dword [0x556050]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x64
push dword [eax + 0x34]
call fcn.0043b930
push 0
mov ecx, edi
call fcn.004eb540
test al, al
mov edx, 0x599718
mov eax, dword [edi + 8]
mov ecx, 0x5996fc
cmove ecx, edx
push ecx
mov ecx, dword [edi + 4]
push dword [eax + 0x38]
call fcn.00438b50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x599738
lea ecx, [edi + 0x134]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2154]
call fcn.00405430
lea ecx, [ebp - 0x2154]
call fcn.00405820
mov esi, 2
mov ecx, eax
mov edx, esi
call fcn.00418a30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x599748
lea ecx, [edi + 0x134]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2154]
call fcn.00405430
lea ecx, [ebp - 0x2154]
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00418a30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x599758
lea ecx, [edi + 0x134]
call fcn.00405820
push eax
lea ecx, [ebp - 0x2154]
call fcn.00405430
lea ecx, [ebp - 0x2154]
call fcn.00405820
mov edx, esi
mov ecx, eax
call fcn.00418a30
lea ecx, [edi + 0x248]
call fcn.00452100
lea ecx, [ebp - 0x29c8]
xor esi, esi
call fcn.00408c40
lea ecx, [ebp - 0x2990]
call fcn.00405360
lea ecx, [ebp - 0x27f4]
call fcn.00405360
lea ecx, [ebp - 0x2800]
call fcn.00405360
lea ecx, [ebp - 0x213c]
call fcn.00405360
lea ecx, [ebp - 0x6e04]
call fcn.0051ea80
lea ecx, [ebp - 0x21e0]
call fcn.00401fb0
lea ecx, [ebp - 0x2574]
call fcn.004504f0
lea ecx, [ebp - 0x2984]
call fcn.00405360
lea ecx, [ebp - 0x6dfc]
call fcn.0051ea80
lea ecx, [ebp - 0x6d4c]
call fcn.00401590
lea ecx, [ebp - 0x1fc8]
call fcn.004023d0
lea ecx, [ebp - 0x25e0]
call fcn.00405360
lea ecx, [ebp - 0x1f80]
call fcn.00405360
lea ecx, [ebp - 0x2960]
call fcn.00405360
lea ecx, [ebp - 0x2780]
call fcn.00405360
lea ecx, [ebp - 0x2a64]
call fcn.00405360
lea ecx, [ebp - 0x2a18]
call fcn.00405360
lea ecx, [ebp - 0x6cec]
call fcn.00405360
lea ecx, [ebp - 0x2570]
call fcn.0040c980
lea ecx, [ebp - 0x1f74]
call fcn.0040c980
lea ecx, [ebp - 0x25ec]
call fcn.00405360
lea ecx, [ebp - 0x296c]
call fcn.00405360
lea ecx, [ebp - 0x264c]
call fcn.00405360
lea ecx, [ebp - 0x2640]
call fcn.00405360
lea ecx, [ebp - 0x2954]
call fcn.00405360
lea ecx, [ebp - 0x2948]
call fcn.00405360
lea ecx, [ebp - 0x280c]
call fcn.00405360
lea ecx, [ebp - 0x26f0]
call fcn.00405360
lea ecx, [ebp - 0x26fc]
call fcn.00405360
lea ecx, [ebp - 0x2708]
call fcn.00405360
lea ecx, [ebp - 0x293c]
call fcn.00405360
lea ecx, [ebp - 0x2818]
call fcn.00405360
lea ecx, [ebp - 0x25b0]
call fcn.00405360
lea ecx, [ebp - 0x2930]
call fcn.00405360
lea ecx, [ebp - 0x2900]
call fcn.00405360
lea ecx, [ebp - 0x2720]
call fcn.00405360
lea ecx, [ebp - 0x250c]
call fcn.00405360
lea ecx, [ebp - 0x2978]
call fcn.00405360
lea ecx, [ebp - 0x25bc]
call fcn.00405360
lea ecx, [ebp - 0x2a00]
call fcn.00405360
lea ecx, [ebp - 0x2160]
call fcn.00405360
lea ecx, [ebp - 0x226c]
call fcn.00405360
lea ecx, [ebp - 0x2874]
call fcn.00405360
lea ecx, [ebp - 0x2114]
call fcn.00405360
lea ecx, [ebp - 0x2154]
call fcn.00405360
lea ecx, [ebp - 0x1f8c]
call fcn.00405360
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00538a45
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret