Function at 0x4940a0
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5bfb4f
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x7028
call fcn.0041ef10
mov eax, dword [0x6c21e4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x6ebc], eax
mov dword [ebp - 0x6f20], 0
lea ecx, [ebp - 0x27a4]
mov byte [eax + 0xa8], 0
call fcn.0050b1b0
mov eax, dword [ebp - 0x6ebc]
add eax, 0x54
mov ecx, eax
mov dword [ebp - 0x6ec4], eax
call fcn.00516d20
xor ecx, ecx
call fcn.0050e640
test eax, eax
je 0x494133
push eax
call fcn.0041e876
add esp, 4
mov ecx, dword [ebp - 0x6ebc]
push 0
call fcn.004bacd0
mov eax, dword [ebp - 0x6ebc]
push 1
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [eax + 4]
call fcn.004ea4c0
mov eax, dword [ebp - 0x6ebc]
push 0
push 0x6042f0
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [eax + 4]
call fcn.004ed600
push 0xc
lea ecx, [ebp - 0x1f98]
call fcn.00401d00
lea ecx, [ebp - 0x1f98]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2154]
mov dword [ebp - 4], 0
call fcn.00401d00
lea ecx, [ebp - 0x2154]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 1
call fcn.00401d00
lea ecx, [ebp - 0x2120]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x28b8]
mov byte [ebp - 4], 2
call fcn.00401d00
lea ecx, [ebp - 0x28b8]
call fcn.00516ef0
mov byte [ebp - 4], 3
mov esi, 0xa0
mov eax, dword [ebp - 0x6ebc]
push 0
push 0
push 0x1009
mov eax, dword [eax + 8]
push dword [esi + eax]
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [eax + 4]
call fcn.004ef7c0
add esi, 4
cmp esi, 0xb8
jb 0x4941f5
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2120]
call fcn.005162e0
push eax
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2154]
call fcn.005162e0
push 0
push 0
push 0x80
lea ecx, [ebp - 0x28b8]
mov esi, eax
call fcn.005162e0
mov edx, esi
mov ecx, eax
call fcn.004cec00
mov edi, dword [ebp - 0x6ebc]
push 4
mov byte [ebp - 0x6eb1], 1
mov dword [edi + 0x38], eax
mov eax, edi
mov eax, dword [eax + 8]
push dword [eax + 0x28]
mov eax, edi
mov ecx, dword [eax + 4]
call fcn.004ecdd0
test eax, eax
setne byte [ebp - 0x6ec5]
test eax, eax
mov eax, edi
lea ecx, [eax + 0x44]
lea esi, [eax + 0x3c]
mov dword [ebp - 0x6f1c], ecx
mov dword [ebp - 0x6ea8], esi
je 0x4942d1
lea edx, [eax + 0x4c]
push 1
mov dword [ebp - 0x6eac], edx
push edx
mov edx, ecx
mov ecx, esi
call fcn.004cf060
test eax, eax
mov dword [edi + 0x30], eax
mov eax, edi
setne cl
jmp 0x4942e0
lea ecx, [eax + 0x4c]
mov dword [ebp - 0x6eac], ecx
mov cl, byte [ebp - 0x6eb1]
cmp byte [ebp - 0x6ec5], 0
lea edi, [eax + 0x44]
je 0x4942f3
lea edi, [eax + 0x44]
test cl, cl
jne 0x49434d
cmp dword [eax + 0x38], 0
je 0x4945e5
mov dword [eax + 0x30], 1
mov ecx, esi
lea eax, [ebp - 0x2120]
push eax
push 1
call fcn.00403550
mov ecx, eax
call fcn.00516e00
lea eax, [ebp - 0x2154]
mov ecx, edi
push eax
push 1
call fcn.00403550
mov ecx, eax
call fcn.00516e00
mov ecx, dword [ebp - 0x6eac]
lea eax, [ebp - 0x28b8]
push eax
push 1
call fcn.00403550
mov ecx, eax
call fcn.00516e00
push 8
lea ecx, [ebp - 0x2874]
call fcn.00401d40
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2874]
call fcn.004036c0
push 8
lea ecx, [ebp - 0x286c]
mov byte [ebp - 4], 4
call fcn.00401d40
push dword [ebp - 0x6f1c]
lea ecx, [ebp - 0x286c]
call fcn.004036c0
push 8
lea ecx, [ebp - 0x2844]
mov byte [ebp - 4], 5
call fcn.00401d40
push esi
lea ecx, [ebp - 0x2844]
call fcn.004036c0
mov eax, dword [ebp - 0x6ebc]
mov ecx, esi
mov byte [ebp - 4], 6
mov eax, dword [eax + 0x30]
add eax, 2
push eax
call fcn.00403550
mov edi, dword [ebp - 0x6ebc]
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x44]
add eax, 2
push eax
call fcn.00403550
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x4c]
add eax, 2
push eax
call fcn.00403550
mov eax, edi
xor esi, esi
mov eax, dword [eax + 0x30]
test eax, eax
je 0x49447f
mov edi, dword [ebp - 0x6ea8]
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x2844]
call fcn.00403630
mov ecx, eax
call fcn.00516d00
push eax
push esi
mov ecx, edi
call fcn.00403630
mov ecx, eax
call fcn.00516ae0
push esi
lea ecx, [ebp - 0x286c]
call fcn.00403630
mov ecx, eax
call fcn.00516d00
mov ecx, dword [ebp - 0x6f1c]
push eax
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ae0
push esi
lea ecx, [ebp - 0x2874]
call fcn.00403630
mov ecx, eax
call fcn.00516d00
mov ecx, dword [ebp - 0x6eac]
push eax
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ae0
mov eax, dword [ebp - 0x6ebc]
inc esi
mov eax, dword [eax + 0x30]
cmp esi, eax
jb 0x494400
mov ecx, dword [ebp - 0x6eac]
push 0
push 0x60431c
push 0x104
push eax
call fcn.00403630
mov ecx, eax
call fcn.005162e0
mov ecx, eax
call fcn.004ce260
mov eax, dword [ebp - 0x6ebc]
push 0x60431c
push dword [eax + 0x30]
lea esi, [eax + 0x3c]
mov ecx, esi
call fcn.00403630
mov ecx, eax
call fcn.00516e30
mov edi, dword [ebp - 0x6ebc]
mov ecx, esi
push 0x604330
mov eax, dword [edi + 0x30]
inc eax
push eax
mov dword [edi + 0x30], eax
call fcn.00403630
mov ecx, eax
call fcn.00516e30
mov ecx, dword [ebp - 0x6eac]
mov eax, edi
push 0x604330
push dword [eax + 0x30]
call fcn.00403630
mov ecx, eax
call fcn.00516e30
lea eax, [ebp - 0x6d2c]
mov dword [ebp - 0x6d2c], 0x400
push eax
push 0
mov eax, edi
push 0
push 0x400
push dword [eax + 0x30]
lea edi, [eax + 0x44]
mov ecx, edi
call fcn.00403630
mov ecx, eax
call fcn.005162e0
push eax
call dword [0x5cd814]
mov edx, 0x604330
mov ecx, 0x80000003
call fcn.0050f360
test al, al
jne 0x4945fd
push 0xc
lea ecx, [ebp - 0x29a4]
call fcn.00401d00
mov eax, dword [ebp - 0x6ebc]
mov ecx, edi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5f933c
push dword [eax + 0x30]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x29a4]
call fcn.00516e40
lea ecx, [ebp - 0x29a4]
mov byte [ebp - 4], 7
call fcn.00516ab0
push eax
mov eax, dword [ebp - 0x6ebc]
mov ecx, esi
push dword [eax + 0x30]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push 0x80000003
call dword [0x5cd07c]
test eax, eax
jne 0x4945d8
mov eax, dword [ebp - 0x6ebc]
inc dword [eax + 0x30]
lea ecx, [ebp - 0x29a4]
call fcn.00516d50
jmp 0x494606
test cl, cl
jne 0x49434d
push 1
mov ecx, eax
call fcn.004bacd0
mov esi, eax
jmp 0x4ae9f0
mov eax, dword [ebp - 0x6ebc]
inc dword [eax + 0x30]
lea ecx, [ebp - 0x2844]
call fcn.00403650
lea ecx, [ebp - 0x286c]
call fcn.00403650
lea ecx, [ebp - 0x2874]
mov byte [ebp - 4], 3
call fcn.00403650
mov esi, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x27a4]
add esi, 0x78
mov dword [ebp - 0x6eb8], esi
call fcn.0050b210
push edx
push eax
mov ecx, esi
call fcn.00515e20
mov edi, dword [ebp - 0x6ebc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x604348
lea ecx, [edi + 0x6c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.005150b0
mov ecx, esi
call fcn.00516ab0
or edx, 0xffffffff
mov ecx, eax
call fcn.00502230
test al, al
jne 0x4946a2
push 1
mov ecx, edi
call fcn.004bacd0
mov esi, eax
jmp 0x4ae9f0
mov ecx, esi
call fcn.00516ab0
push eax
call dword [0x5cd474]
or eax, 2
mov ecx, esi
push eax
call fcn.00516ab0
push eax
call dword [0x5cd454]
push 0
call dword [0x5cda6c]
push 0xc
lea ecx, [ebp - 0x2238]
call fcn.00401d00
lea ecx, [ebp - 0x2238]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 8
call fcn.00401d00
lea ecx, [ebp - 0x2184]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x29bc]
mov byte [ebp - 4], 9
call fcn.00401d00
lea ecx, [ebp - 0x29bc]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x25e4]
mov byte [ebp - 4], 0xa
call fcn.00401d00
lea ecx, [ebp - 0x25e4]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2910]
mov byte [ebp - 4], 0xb
call fcn.00401d00
lea ecx, [ebp - 0x2910]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x24ec]
mov byte [ebp - 4], 0xc
call fcn.00401d00
lea ecx, [ebp - 0x24ec]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x26b0]
mov byte [ebp - 4], 0xd
call fcn.00401d00
lea ecx, [ebp - 0x26b0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x28a8]
mov byte [ebp - 4], 0xe
call fcn.00401d00
lea ecx, [ebp - 0x28a8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2904]
mov byte [ebp - 4], 0xf
call fcn.00401d00
lea ecx, [ebp - 0x2904]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2568]
mov byte [ebp - 4], 0x10
call fcn.00401d00
lea ecx, [ebp - 0x2568]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x27e0]
mov byte [ebp - 4], 0x11
call fcn.00401d00
lea ecx, [ebp - 0x27e0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2890]
mov byte [ebp - 4], 0x12
call fcn.00401d00
lea ecx, [ebp - 0x2890]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x26bc]
mov byte [ebp - 4], 0x13
call fcn.00401d00
lea ecx, [ebp - 0x26bc]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x26e0]
mov byte [ebp - 4], 0x14
call fcn.00401d00
lea ecx, [ebp - 0x26e0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x26c8]
mov byte [ebp - 4], 0x15
call fcn.00401d00
lea ecx, [ebp - 0x26c8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x27d4]
mov byte [ebp - 4], 0x16
call fcn.00401d00
lea ecx, [ebp - 0x27d4]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x291c]
mov byte [ebp - 4], 0x17
call fcn.00401d00
lea ecx, [ebp - 0x291c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2958]
mov byte [ebp - 4], 0x18
call fcn.00401d00
lea ecx, [ebp - 0x2958]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2668]
mov byte [ebp - 4], 0x19
call fcn.00401d00
lea ecx, [ebp - 0x2668]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2644]
mov byte [ebp - 4], 0x1a
call fcn.00401d00
lea ecx, [ebp - 0x2644]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x294c]
mov byte [ebp - 4], 0x1b
call fcn.00401d00
lea ecx, [ebp - 0x294c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x25d8]
mov byte [ebp - 4], 0x1c
call fcn.00401d00
lea ecx, [ebp - 0x25d8]
call fcn.00516ef0
mov byte [ebp - 4], 0x1d
call dword [0x5cd4d8]
mov ecx, eax
call fcn.00502a90
test eax, eax
mov dword [ebp - 0x6eb0], eax
mov edx, str.HKLM
mov eax, str.HKLM64
setne cl
test cl, cl
mov byte [ebp - 0x6eb1], cl
push 1
cmove eax, edx
lea ecx, [ebp - 0x2238]
mov dword [ebp - 0x6ed8], eax
mov edx, 0x5ed51c
mov eax, str.HKLM32
cmove eax, edx
mov dword [ebp - 0x6edc], eax
mov eax, dword [ebp - 0x6ebc]
push dword [eax + 0x38]
push 0x1a
call fcn.005164d0
mov eax, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x2184]
push 1
push dword [eax + 0x38]
push 0x1c
call fcn.005164d0
mov eax, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x25e4]
push 1
push dword [eax + 0x38]
push 2
call fcn.005164d0
mov eax, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x24ec]
push 1
push dword [eax + 0x38]
push 0x10
call fcn.005164d0
mov eax, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x26c8]
push 1
push dword [eax + 0x38]
push 0x23
call fcn.005164d0
mov eax, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x28a8]
push 1
push dword [eax + 0x38]
push 7
call fcn.005164d0
mov eax, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x2904]
push 1
push dword [eax + 0x38]
push 5
call fcn.005164d0
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x26b0]
call fcn.005162e0
push eax
mov eax, dword [ebp - 0x6ebc]
push 0x5fe7e0
push dword [eax + 0x38]
call dword [0x5cd818]
push 0x400
lea ecx, [ebp - 0x26b0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x26b0]
call fcn.00516ab0
push eax
call dword [0x5cd4dc]
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2568]
call fcn.005162e0
push eax
call dword [0x5cd404]
cmp dword [ebp - 0x6eb0], 0
je 0x494ae5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe7f0
lea ecx, [ebp - 0x2568]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x27e0]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe808
jmp 0x494b27
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x27e0]
call fcn.005162e0
push eax
call dword [0x5cd464]
cmp byte [ebp - 0x6eb1], 0
je 0x494b40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe81c
lea ecx, [ebp - 0x2568]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2890]
call fcn.00516b20
jmp 0x494b52
lea eax, [ebp - 0x27e0]
push eax
lea ecx, [ebp - 0x2890]
call fcn.00516e00
mov al, byte [ebp - 0x6eb0]
lea edx, [ebp - 0x26e0]
push eax
lea ecx, [ebp - 0x26bc]
mov dword [ebp - 0x6ea8], eax
call fcn.004ff0e0
push 0
push 0
push 0x2b
lea ecx, [ebp - 0x27d4]
call fcn.005164d0
push 0
push 0
push 0x17
lea ecx, [ebp - 0x2668]
call fcn.005164d0
push 0
push 0
push 0x19
lea ecx, [ebp - 0x2644]
call fcn.005164d0
push 0
push 0
push 0x18
lea ecx, [ebp - 0x291c]
call fcn.005164d0
push 1
push 0
push 0x28
lea ecx, [ebp - 0x25d8]
call fcn.005164d0
lea ecx, [ebp - 0x25d8]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x2238]
call fcn.00515800
lea ecx, [ebp - 0x25d8]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x2184]
call fcn.00515800
push 1
push 0x5fe830
lea ecx, [ebp - 0x29bc]
call fcn.00516b80
lea ecx, [ebp - 0x25d8]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x25e4]
call fcn.00515800
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe858
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2910]
call fcn.00516b20
lea ecx, [ebp - 0x25d8]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x24ec]
call fcn.00515800
lea ecx, [ebp - 0x25d8]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x26b0]
call fcn.00515800
lea ecx, [ebp - 0x25d8]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x28a8]
call fcn.00515800
lea ecx, [ebp - 0x25d8]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x2904]
call fcn.00515800
push 2
push 1
lea ecx, [ebp - 0x2568]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x294c]
call fcn.005148d0
push 1
lea ecx, [ebp - 0x27d4]
call fcn.00516840
lea eax, [ebp - 0x27d4]
push eax
lea ecx, [ebp - 0x2958]
call fcn.00516e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed514
lea ecx, [ebp - 0x26bc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x27d4]
call fcn.005150b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed514
lea ecx, [ebp - 0x26e0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2958]
call fcn.005150b0
mov eax, dword [ebp - 0x6ebc]
cmp byte [eax + 0x14], 0
je 0x494d55
xor esi, esi
jmp 0x4ae8fe
mov eax, dword [eax + 8]
push 3
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [eax + 4]
call fcn.004ea4c0
mov eax, dword [ebp - 0x6ebc]
push 0
push 0x604354
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [eax + 4]
call fcn.004ed600
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [eax + 0x10]
test ecx, ecx
jne 0x494da9
mov ecx, eax
call fcn.004914a0
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [eax + 0x10]
cmp ecx, 1
jne 0x494dd0
mov esi, dword [0x5cd438]
cmp byte [eax + 0x14], 0
jne 0x494e6c
push 0x64
call esi
mov eax, dword [ebp - 0x6ebc]
cmp dword [eax + 0x10], 1
je 0x494db4
jmp 0x494dd6
mov eax, dword [ebp - 0x6ebc]
mov eax, dword [eax + 8]
push 6
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [eax + 4]
call fcn.004ea4c0
mov eax, dword [ebp - 0x6ebc]
push 0
push 0x604384
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [eax + 4]
call fcn.004ed600
mov esi, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x27a4]
add esi, 0x24c
mov dword [ebp - 0x6f5c], esi
call fcn.0050b210
push edx
push eax
mov ecx, esi
call fcn.00515e20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6043b4
mov ecx, esi
call fcn.005150b0
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ebc]
push eax
call fcn.004912a0
test eax, eax
jne 0x494e76
mov esi, 3
jmp 0x4ae8fe
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5f97fc
mov ecx, esi
call fcn.005150b0
push 4
lea ecx, [ebp - 0x1f74]
call fcn.00401d20
lea ecx, [ebp - 0x1f74]
call fcn.00511760
push 4
lea ecx, [ebp - 0x2544]
mov byte [ebp - 4], 0x1e
call fcn.00401d20
push 0
push 0x20019
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2544]
call fcn.00511740
push 0xc
lea ecx, [ebp - 0x6c1c]
mov byte [ebp - 4], 0x1f
call fcn.00401d00
lea ecx, [ebp - 0x6c1c]
call fcn.00511780
push 0xc
lea ecx, [ebp - 0x29e0]
mov byte [ebp - 4], 0x20
call fcn.00401d00
lea ecx, [ebp - 0x29e0]
call fcn.00511780
push 0x10
lea ecx, [ebp - 0x2a2c]
mov byte [ebp - 4], 0x21
call fcn.00401d50
lea ecx, [ebp - 0x2a2c]
call fcn.005117d0
push 0xc
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x22
call fcn.00401d00
lea ecx, [ebp - 0x1f8c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2940]
mov byte [ebp - 4], 0x23
call fcn.00401d00
lea ecx, [ebp - 0x2940]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x1f80]
mov byte [ebp - 4], 0x24
call fcn.00401d00
lea ecx, [ebp - 0x1f80]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x25cc]
mov byte [ebp - 4], 0x25
call fcn.00401d00
lea ecx, [ebp - 0x25cc]
call fcn.00516ef0
lea ecx, [ebp - 0x27a4]
mov byte [ebp - 4], 0x26
call fcn.0050b210
mov ecx, edx
mov dword [ebp - 0x6f74], eax
push ecx
mov dword [ebp - 0x6f78], ecx
lea ecx, [ebp - 0x2940]
push eax
call fcn.00515e20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe8ac
lea ecx, [ebp - 0x2940]
call fcn.00516ab0
push eax
push 0x6043c4
lea ecx, [edi + 0x6c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ec4]
push eax
call fcn.00516b20
push 0x20
lea ecx, [ebp - 0x1ff0]
call fcn.00401e10
lea ecx, [ebp - 0x1ff0]
call fcn.00505a80
mov ecx, dword [ebp - 0x6ec4]
push 0
push 0x22
mov byte [ebp - 4], 0x27
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.005053b0
test eax, eax
je 0x49526a
push 0
mov esi, dword [ebp - 0x6ebc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6043d8
push 0
push 1
push 1
push 0
add esi, 0x264
push 0x604408
mov ecx, esi
call fcn.00515510
test eax, eax
mov edx, 0x604420
mov ecx, 0x604418
cmove ecx, edx
push ecx
mov ecx, esi
call fcn.00516ab0
push eax
push 0x5fe90c
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
cmp dword [ebp - 0x6eb0], 0
jne 0x4950c8
cmp byte [ebp - 0x6eb1], 0
mov eax, 0x5ef468
jne 0x4950cd
mov eax, 0x5ef470
push 0
push 0
push 0
push 0
push 0
push 0x5fe920
push eax
push 0x5f83bc
push 0x5fe934
push 0x5fe948
mov ecx, esi
call fcn.00516ab0
push eax
push 0x5fe960
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x25cc]
push 0
push dword [eax + 0xc]
call fcn.00515e20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x25cc]
call fcn.00516ab0
push eax
push 0x604438
mov ecx, esi
call fcn.00516ab0
push eax
push 0x5fe960
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push dword [ebp - 0x6ea8]
mov ecx, dword [ebp - 0x6ebc]
lea eax, [ebp - 0x1f80]
push eax
call fcn.00492db0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
cmp byte [ebp - 0x6ec5], 0
mov ecx, 0x604478
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
mov eax, 0x5fb204
cmove eax, ecx
lea ecx, [ebp - 0x28b8]
push eax
push 0x60448c
push 0x5feec8
call fcn.00516ab0
push eax
push 0x6044c4
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea edx, [ebp - 0x1f80]
lea ecx, [ebp - 0x27a4]
call fcn.0050b220
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe964
lea ecx, [ebp - 0x1f80]
call fcn.00516ab0
push eax
push 0x6044f8
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0x604520
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
lea ecx, [ebp - 0x294c]
call fcn.00516ab0
lea ecx, [ebp - 0x2568]
mov dword [ebp - 0x6f14], eax
call fcn.00516ab0
lea ecx, [ebp - 0x27e0]
mov dword [ebp - 0x6f10], eax
call fcn.00516ab0
mov dword [ebp - 0x6f0c], eax
mov al, byte [ebp - 0x6eb1]
mov byte [ebp - 0x6f08], al
mov eax, dword [ebp - 0x6ebc]
movups xmm0, xmmword [ebp - 0x6f14]
lea ecx, [eax + 0xb4]
mov dword [ebp - 0x6ee8], ecx
movups xmmword [ecx], xmm0
lea ecx, [eax + 0x208]
call fcn.0048b230
mov esi, dword [ebp - 0x6ebc]
add esi, 0x158
mov ecx, esi
mov dword [ebp - 0x6f08], esi
call fcn.004debc0
mov eax, dword [ebp - 0x6ebc]
add eax, 0x140
push 0
mov ecx, eax
mov dword [ebp - 0x6f24], eax
call fcn.004dfbb0
push 0x6047d8
mov ecx, esi
call fcn.004df810
push 1
mov ecx, esi
call fcn.004ddec0
mov eax, dword [ebp - 0x6ebc]
movzx ecx, byte [ebp - 0x6eb1]
inc ecx
push 4
mov eax, dword [eax + 0x30]
add eax, ecx
lea ecx, [ebp - 0x6c78]
mov dword [ebp - 0x6ed4], eax
call fcn.00401d20
push 8
push 0x60485c
lea ecx, [ebp - 0x6c78]
call fcn.00401a10
push 8
lea ecx, [ebp - 0x6d1c]
mov byte [ebp - 4], 0x28
call fcn.00401d40
mov edi, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x6d1c]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.004036f0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2934]
mov edi, dword [ebp - 0x6d1c]
push 0xc
mov dword [ebp - 0x6ed0], edi
call fcn.00401d00
push 1
push 0x5ed650
lea ecx, [ebp - 0x2934]
call fcn.00516e80
mov eax, dword [ebp - 0x6ebc]
xor esi, esi
mov byte [ebp - 4], 0x2a
mov eax, dword [eax + 0x30]
test eax, eax
je 0x4953f2
nop dword [eax + eax]
mov ecx, dword [ebp - 0x6eac]
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00516e30
mov eax, dword [ebp - 0x6ebc]
inc esi
add edi, 0xc
mov eax, dword [eax + 0x30]
cmp esi, eax
jb 0x4953c0
mov edi, dword [ebp - 0x6ed0]
lea eax, [eax + eax*2]
push 0x5feab0
lea ecx, [edi + eax*4]
call fcn.00516e30
cmp byte [ebp - 0x6eb1], 0
je 0x495425
mov eax, dword [ebp - 0x6ebc]
push 0x5feab0
mov eax, dword [eax + 0x30]
inc eax
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.00516e30
push 4
lea ecx, [ebp - 0x2578]
call fcn.00401d20
lea ecx, [ebp - 0x2578]
call fcn.004e1e80
mov eax, dword [ebp - 0x6ebc]
mov byte [ebp - 4], 0x2b
cmp byte [eax + 0x14], 0
jne 0x497e86
test dword [eax + 0x34], 0x400
jne 0x497e86
push 0
push 0x6048a0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [ebp - 0x6ebc]
push 0
push 0x6048d0
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [eax + 4]
call fcn.004ed600
push 8
lea ecx, [ebp - 0x6c84]
call fcn.00401d40
push dword [ebp - 0x6ed4]
lea ecx, [ebp - 0x6c84]
call fcn.004036f0
mov eax, dword [ebp - 0x6ebc]
xor esi, esi
mov byte [ebp - 4], 0x2c
mov edi, dword [ebp - 0x6c84]
mov dword [ebp - 0x6ea8], edi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x495527
add eax, 0x3c
mov dword [ebp - 0x6ec4], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x604900
push esi
mov ecx, eax
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push str.HKU_
mov ecx, edi
call fcn.00516b20
mov eax, dword [ebp - 0x6ebc]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6ec4]
cmp esi, ecx
jb 0x4954d7
mov edi, dword [ebp - 0x6ea8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x604970
push dword [ebp - 0x6ed8]
lea eax, [ecx + ecx*2]
lea ecx, [edi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x49558e
mov eax, dword [ebp - 0x6ebc]
push 0
push 0
push 0
mov eax, dword [eax + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x604970
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.00516b20
push 4
lea ecx, [ebp - 0x2240]
call fcn.00401d20
lea ecx, [ebp - 0x2240]
call fcn.00511760
push 4
lea ecx, [ebp - 0x1ff4]
mov byte [ebp - 4], 0x2d
call fcn.00401d20
lea ecx, [ebp - 0x1ff4]
call fcn.00511760
push 0xc
lea ecx, [ebp - 0x23b0]
mov byte [ebp - 4], 0x2e
call fcn.00401d00
lea ecx, [ebp - 0x23b0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x213c]
mov byte [ebp - 4], 0x2f
call fcn.00401d00
lea ecx, [ebp - 0x213c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x1fa4]
mov byte [ebp - 4], 0x30
call fcn.00401d00
lea ecx, [ebp - 0x1fa4]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2074]
mov byte [ebp - 4], 0x31
call fcn.00401d00
lea ecx, [ebp - 0x2074]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x23a4]
mov byte [ebp - 4], 0x32
call fcn.00401d00
lea ecx, [ebp - 0x23a4]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x22c8]
mov byte [ebp - 4], 0x33
call fcn.00401d00
lea ecx, [ebp - 0x22c8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 0x34
call fcn.00401d00
lea ecx, [ebp - 0x2160]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2114]
mov byte [ebp - 4], 0x35
call fcn.00401d00
lea ecx, [ebp - 0x2114]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x22e4]
mov byte [ebp - 4], 0x36
call fcn.00401d00
lea ecx, [ebp - 0x22e4]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x289c]
mov byte [ebp - 4], 0x37
call fcn.00401d00
lea ecx, [ebp - 0x289c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x276c]
mov byte [ebp - 4], 0x38
call fcn.00401d00
lea ecx, [ebp - 0x276c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x283c]
mov byte [ebp - 4], 0x39
call fcn.00401d00
lea ecx, [ebp - 0x283c]
call fcn.00516ef0
mov ecx, dword [ebp - 0x6eb8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x3a
push 0x5fea3c
mov dword [ebp - 0x2378], 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00516b20
mov ecx, dword [ebp - 0x6ed4]
xor esi, esi
mov eax, dword [ebp - 0x237c]
mov dword [ebp - 0x6eb0], esi
mov dword [ebp - 0x6ec0], eax
test ecx, ecx
je 0x496894
nop dword [eax]
nop word [eax + eax]
mov eax, dword [ebp - 0x6ebc]
cmp byte [eax + 0x14], 0
jne 0x4968a4
movd xmm1, esi
mov eax, esi
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
mov edi, dword [ebp - 0x6ebc]
movd xmm0, ecx
addsd xmm1, qword [eax*8 + 0x6a4490]
cvtdq2pd xmm0, xmm0
mov eax, ecx
mov ecx, dword [edi + 4]
shr eax, 0x1f
mulsd xmm1, qword [0x6a40f0]
addsd xmm0, qword [eax*8 + 0x6a4490]
divsd xmm1, xmm0
addsd xmm1, qword [0x6a40a0]
cvttsd2si eax, xmm1
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.004ea4c0
mov edi, dword [ebp - 0x6ea8]
lea eax, [esi + esi*2]
shl eax, 2
add edi, eax
mov dword [ebp - 0x6ecc], eax
push 0
push 0x20019
mov ecx, edi
mov dword [ebp - 0x6eac], edi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2240]
call fcn.005116f0
test al, al
je 0x49687f
mov eax, dword [ebp - 0x6ebc]
xor ecx, ecx
mov dword [ebp - 0x6ec0], ecx
cmp byte [eax + 0x14], cl
jne 0x49687f
nop dword [eax]
lea eax, [ebp - 0x6c1c]
push eax
push ecx
lea ecx, [ebp - 0x2240]
call fcn.005110a0
test al, al
je 0x49687f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
mov ecx, edi
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x23b0]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x23b0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1ff4]
call fcn.005116f0
test al, al
je 0x496862
lea eax, [ebp - 0x213c]
push eax
push 0x5fa734
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
test al, al
je 0x496862
lea eax, [ebp - 0x6c38]
push eax
push 0x6049dc
lea ecx, [ebp - 0x1ff4]
call fcn.00511380
test al, al
je 0x4958f8
cmp dword [ebp - 0x6c38], 1
je 0x496862
lea eax, [ebp - 0x23a4]
push eax
push 0x6049fc
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
test al, al
je 0x495926
lea ecx, [ebp - 0x23a4]
call fcn.00516cc0
test eax, eax
jne 0x496862
lea eax, [ebp - 0x23a4]
push eax
push 0x604a18
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
test al, al
je 0x4959a1
push 0x604a30
lea ecx, [ebp - 0x23a4]
call fcn.00516de0
test al, al
jne 0x496862
push 0x604a40
lea ecx, [ebp - 0x23a4]
call fcn.00516de0
test al, al
jne 0x496862
push 0x604a50
lea ecx, [ebp - 0x23a4]
call fcn.00516de0
test al, al
jne 0x496862
push 0x604a64
lea ecx, [ebp - 0x23a4]
call fcn.00516de0
test al, al
jne 0x496862
lea eax, [ebp - 0x1fa4]
push eax
push 0x604a84
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
lea eax, [ebp - 0x22c8]
push eax
push 0x604aa4
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
test al, al
jne 0x4959e6
lea ecx, [ebp - 0x1fa4]
call fcn.00516cc0
test eax, eax
je 0x496862
lea eax, [ebp - 0x2160]
push eax
push 0x604ac4
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
test al, al
je 0x495a10
lea ecx, [ebp - 0x2160]
call fcn.00516cc0
test eax, eax
jne 0x495a20
push 0x5fea9c
lea ecx, [ebp - 0x2160]
call fcn.00516e30
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x2114]
call fcn.00516e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed600
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
mov edi, dword [ebp - 0x6f5c]
mov ecx, edi
push eax
push 0x604ad8
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
mov byte [ebp - 0x6ec5], al
test al, al
jne 0x495b80
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x604ad8
mov ecx, edi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
mov byte [ebp - 0x6ec5], al
test al, al
jne 0x495b80
nop dword [eax + eax]
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x5eff2c
lea ecx, [ebp - 0x2114]
call fcn.00515510
cmp eax, 4
jl 0x495c1c
dec eax
lea ecx, [ebp - 0x2114]
push eax
call fcn.005158b0
cmp byte [eax + 8], 0
je 0x495c1c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x604ad8
mov ecx, edi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
mov byte [ebp - 0x6ec5], al
test al, al
je 0x495af0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed650
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2934]
call fcn.00515270
cmp byte [ebp - 0x6ec5], 0
jne 0x495cc6
lea eax, [ebp - 0x2378]
push eax
lea eax, [ebp - 0x276c]
push eax
lea ecx, [ebp - 0x23b0]
call fcn.00516ab0
mov edi, dword [ebp - 0x6ebc]
mov ecx, edi
push eax
call fcn.00490c40
test al, al
je 0x49685c
push 0
lea ecx, [ebp - 0x23b0]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x276c]
mov ecx, edi
push eax
call fcn.00492520
test al, al
je 0x49685c
mov byte [ebp - 0x6ec5], 2
jmp 0x495ccc
cmp byte [ebp - 0x6ec5], 0
jne 0x495b80
lea ecx, [ebp - 0x2114]
call fcn.00516d20
lea ecx, [ebp - 0x213c]
call fcn.00516cc0
push 0
push 1
push 1
push 0
push 0x604aec
lea ecx, [ebp - 0x213c]
call fcn.00515510
test eax, eax
jne 0x495cad
push eax
push 1
push 1
push eax
push 0x604b00
lea ecx, [ebp - 0x213c]
call fcn.00515510
test eax, eax
jne 0x495cad
push eax
push 1
push 1
push eax
push 0x604b24
lea ecx, [ebp - 0x213c]
call fcn.00515510
test eax, eax
jne 0x495cad
push eax
push 1
push 1
push eax
push 0x604b44
lea ecx, [ebp - 0x213c]
call fcn.00515510
test eax, eax
je 0x495bbd
lea eax, [ebp - 0x213c]
mov byte [ebp - 0x6ec5], 2
push eax
lea ecx, [ebp - 0x2114]
call fcn.00516e00
mov edi, dword [ebp - 0x6ebc]
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x5fbe34
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49685c
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x495d3b
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516530
push 0
push 0
push 0x5ed51c
push 0x5f0068
lea ecx, [ebp - 0x1fa4]
call fcn.00514e30
jmp 0x49630c
cmp dword [ebp - 0x2378], 0
je 0x495dfd
lea eax, [ebp - 0x6c38]
mov dword [ebp - 0x6c38], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
push eax
push 0x604a84
push dword [ebp - 0x6c1c]
call dword [0x5cda60]
push 0
push 1
push 1
push 0
push 0x5f0150
lea ecx, [ebp - 0x1fa4]
call fcn.00515510
test eax, eax
jne 0x495dfd
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x604b6c
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x23a4]
push 0x604b98
push dword [ebp - 0x6ed8]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x23a4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x495dfd
lea eax, [ebp - 0x1fa4]
push eax
push 0x604a84
lea ecx, [ebp - 0x1f74]
call fcn.00511410
lea ecx, [ebp - 0x1fa4]
call fcn.00516cc0
cmp eax, 0xa
jle 0x495e1a
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516530
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
call dword [0x5cd63c]
test eax, eax
jne 0x49630c
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5ed66c
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x26bc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x49630c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x26e0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x49630c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x26c8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x49630c
lea ecx, [ebp - 0x2160]
call fcn.00516cc0
cmp eax, 4
jle 0x496026
push 0
push 1
push 1
push 0
push 0x604c3c
lea ecx, [ebp - 0x2160]
call fcn.00515510
cmp eax, 1
je 0x496026
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2160]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x26c8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x49630c
mov eax, dword [ebp - 0x6ebc]
cmp esi, dword [eax + 0x30]
jae 0x49627e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
mov edi, dword [ebp - 0x6f1c]
mov ecx, edi
push eax
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x496306
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push eax
push esi
mov ecx, edi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x496306
lea ecx, [ebp - 0x2160]
call fcn.00516cc0
cmp eax, 4
jle 0x49627e
push 0
push 1
push 1
push 0
push 0x604c3c
lea ecx, [ebp - 0x2160]
call fcn.00515510
cmp eax, 1
je 0x49627e
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2160]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
push esi
mov ecx, edi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x496306
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2160]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push eax
push esi
mov ecx, edi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x496306
lea ecx, [ebp - 0x22c8]
call fcn.00516cc0
lea ecx, [ebp - 0x1fa4]
cmp eax, 0xa
jle 0x496301
lea eax, [ebp - 0x22c8]
push eax
call fcn.00516e00
push 0
push 0
push 0x5ed51c
push 0x5f0068
lea ecx, [ebp - 0x1fa4]
call fcn.00514e30
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516530
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x5f0150
lea ecx, [ebp - 0x1fa4]
call fcn.00515510
cmp eax, 2
jle 0x4962f2
add eax, 0xfffffffe
lea ecx, [ebp - 0x1fa4]
push eax
call fcn.00515800
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005167d0
jmp 0x496306
call fcn.00516d20
mov edi, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
mov ecx, eax
call fcn.005080d0
test al, al
je 0x49632d
lea ecx, [ebp - 0x1fa4]
call fcn.00516d20
lea eax, [ebp - 0x2074]
mov dword [ebp - 0x6eb8], 0
push eax
push 0x604c54
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
test al, al
je 0x49638a
push 0
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
push 0x104
lea ecx, [ebp - 0x2074]
call fcn.005162e0
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
call dword [0x5cd634]
mov dword [ebp - 0x6eb8], eax
jmp 0x4963e0
cmp dword [ebp - 0x2378], 0
je 0x4963ed
lea eax, [ebp - 0x6c94]
mov dword [ebp - 0x6c94], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2074]
call fcn.005162e0
push eax
push 0x604c6c
push dword [ebp - 0x6c1c]
call dword [0x5cda60]
push dword [ebp - 0x6c94]
lea ecx, [ebp - 0x2074]
call fcn.00516d60
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x2378], 0
jne 0x496537
lea ecx, [ebp - 0x2074]
call fcn.00516cc0
test eax, eax
jne 0x496537
push eax
lea ecx, [ebp - 0x22c8]
call fcn.00516ab0
push eax
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.005162e0
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x22c8]
call fcn.00516ab0
push eax
call dword [0x5cd4d0]
lea ecx, [ebp - 0x2074]
call fcn.00516cc0
test eax, eax
je 0x496537
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2074]
call fcn.00515510
test eax, eax
je 0x49647e
add eax, 3
lea ecx, [ebp - 0x2074]
push eax
call fcn.005158b0
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
mov esi, dword [0x5cd624]
push eax
call esi
test eax, eax
jne 0x496537
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5f0150
lea ecx, [ebp - 0x2074]
call fcn.00515510
cmp eax, 2
jle 0x4964c5
add eax, 0xfffffffe
lea ecx, [ebp - 0x2074]
push eax
call fcn.00515800
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
call esi
test eax, eax
jne 0x496537
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5f0068
lea ecx, [ebp - 0x2074]
call fcn.00515510
test eax, eax
je 0x4964fe
push eax
lea ecx, [ebp - 0x2074]
call fcn.00515800
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
call esi
test eax, eax
jne 0x496537
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5eff2c
lea ecx, [ebp - 0x2074]
call fcn.00515510
test eax, eax
je 0x496537
push eax
lea ecx, [ebp - 0x2074]
call fcn.00515800
push 0x5c
lea ecx, [ebp - 0x1fa4]
call fcn.00514c50
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x213c]
push dword [eax + 0xa0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
call fcn.00516ab0
mov ecx, dword [edi + 4]
push eax
call fcn.004ec540
mov esi, eax
cmp esi, 0xffffffff
je 0x496856
push 1
lea ecx, [ebp - 0x2160]
call fcn.00516ab0
push eax
mov eax, dword [ebp - 0x6ebc]
push esi
mov ecx, dword [eax + 8]
push dword [ecx + 0xa0]
mov ecx, dword [eax + 4]
call fcn.004eb080
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4965e0
push 0
push 0x10
push dword [ebp - 0x6eb8]
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
mov edi, dword [ebp - 0x6ebc]
push eax
push esi
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xa0]
call fcn.004eba30
jmp 0x4965e6
mov edi, dword [ebp - 0x6ebc]
mov ecx, dword [ebp - 0x6ed0]
add ecx, dword [ebp - 0x6ecc]
push 2
call fcn.00516ab0
mov ecx, dword [edi + 4]
push eax
mov eax, dword [edi + 8]
push esi
push dword [eax + 0xa0]
call fcn.004eb080
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push esi
push dword [eax + 0xa0]
call fcn.004ebc00
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push esi
push dword [eax + 0xa0]
call fcn.004933b0
test eax, eax
jne 0x49665c
cmp byte [ebp - 0x6ec5], 1
mov ecx, 2
movzx eax, byte [ebp - 0x6ec5]
cmove eax, ecx
mov byte [ebp - 0x6ec5], al
push esi
lea ecx, [ebp - 0x22e4]
call fcn.00515d60
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x23b0]
call fcn.00516ab0
push eax
push 0x5fdde4
lea ecx, [ebp - 0x22e4]
call fcn.00516ab0
mov edi, dword [0x5cd4e8]
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x5fb1b0
lea ecx, [ebp - 0x22e4]
call fcn.00516ab0
push eax
call edi
lea ecx, [ebp - 0x2114]
call fcn.00516cc0
test eax, eax
je 0x496722
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x5fea74
lea ecx, [ebp - 0x22e4]
call fcn.00516ab0
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
push 0x5f4c18
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x604c84
call edi
lea ecx, [ebp - 0x22c8]
call fcn.00516cc0
test eax, eax
je 0x49675c
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x22c8]
call fcn.00516ab0
push eax
push 0x5fea50
lea ecx, [ebp - 0x22e4]
call fcn.00516ab0
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
mov esi, dword [ebp - 0x6ed0]
add esi, dword [ebp - 0x6ecc]
push eax
mov ecx, esi
call fcn.00516ab0
push eax
push 0x5fde00
lea ecx, [ebp - 0x22e4]
call fcn.00516ab0
push eax
call edi
cmp dword [ebp - 0x2378], 0
je 0x4967bd
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x22e4]
push 0x5fea84
call fcn.00516ab0
push eax
call edi
mov eax, dword [ebp - 0x6ebc]
mov ecx, 0x604cc4
mov edi, dword [ebp - 0x6ebc]
push 0
push 0
inc dword [eax + 0x24]
xor eax, eax
cmp byte [ebp - 0x6ec5], 1
sete al
add dword [edi + 0x28], eax
mov eax, 0x604cb0
cmp byte [ebp - 0x6ec5], 1
cmovne eax, ecx
mov ecx, esi
push eax
push 0x604248
call fcn.00516ab0
push eax
push 0x604cdc
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x604d00
lea ecx, [ebp - 0x23b0]
call fcn.00516ab0
push eax
push 0x604d24
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
push 0x604d4c
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov esi, dword [ebp - 0x6eb0]
mov edi, dword [ebp - 0x6eac]
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [ebp - 0x6ec0]
inc ecx
mov dword [ebp - 0x6ec0], ecx
cmp byte [eax + 0x14], 0
je 0x495840
mov ecx, dword [ebp - 0x6ed4]
inc esi
mov dword [ebp - 0x6eb0], esi
cmp esi, ecx
jb 0x495780
mov eax, dword [ebp - 0x6ebc]
cmp byte [eax + 0x14], 0
je 0x496952
lea ecx, [ebp - 0x283c]
call fcn.00516d50
lea ecx, [ebp - 0x276c]
call fcn.00516d50
lea ecx, [ebp - 0x289c]
call fcn.00516d50
lea ecx, [ebp - 0x22e4]
call fcn.00516d50
lea ecx, [ebp - 0x2114]
call fcn.00516d50
lea ecx, [ebp - 0x2160]
call fcn.00516d50
lea ecx, [ebp - 0x22c8]
call fcn.00516d50
lea ecx, [ebp - 0x23a4]
call fcn.00516d50
lea ecx, [ebp - 0x2074]
call fcn.00516d50
lea ecx, [ebp - 0x1fa4]
call fcn.00516d50
lea ecx, [ebp - 0x213c]
call fcn.00516d50
lea ecx, [ebp - 0x23b0]
call fcn.00516d50
lea ecx, [ebp - 0x1ff4]
call fcn.005116a0
lea ecx, [ebp - 0x2240]
call fcn.005116a0
lea ecx, [ebp - 0x6c84]
mov byte [ebp - 4], 0x2b
call fcn.00403650
jmp 0x497e92
mov eax, dword [ebp - 0x6f24]
cmp dword [eax], 0
je 0x496a2b
mov ecx, dword [ebp - 0x6f08]
push eax
call fcn.004dd560
mov edi, dword [ebp - 0x6ebc]
cmp byte [edi + 0x14], 0
je 0x496a2b
lea ecx, [ebp - 0x283c]
call fcn.00516d50
lea ecx, [ebp - 0x276c]
call fcn.00516d50
lea ecx, [ebp - 0x289c]
call fcn.00516d50
lea ecx, [ebp - 0x22e4]
call fcn.00516d50
lea ecx, [ebp - 0x2114]
call fcn.00516d50
lea ecx, [ebp - 0x2160]
call fcn.00516d50
lea ecx, [ebp - 0x22c8]
call fcn.00516d50
lea ecx, [ebp - 0x23a4]
call fcn.00516d50
lea ecx, [ebp - 0x2074]
call fcn.00516d50
lea ecx, [ebp - 0x1fa4]
call fcn.00516d50
lea ecx, [ebp - 0x213c]
call fcn.00516d50
lea ecx, [ebp - 0x23b0]
call fcn.00516d50
lea ecx, [ebp - 0x1ff4]
call fcn.005116a0
lea ecx, [ebp - 0x2240]
call fcn.005116a0
lea ecx, [ebp - 0x6c84]
mov byte [ebp - 4], 0x2b
call fcn.00403650
jmp 0x497e98
push 0xc
lea ecx, [ebp - 0x29b0]
call fcn.00401d00
lea ecx, [ebp - 0x29b0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x273c]
mov byte [ebp - 4], 0x3b
call fcn.00401d00
lea ecx, [ebp - 0x273c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2748]
mov byte [ebp - 4], 0x3c
call fcn.00401d00
lea ecx, [ebp - 0x2748]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x27ec]
mov byte [ebp - 4], 0x3d
call fcn.00401d00
lea ecx, [ebp - 0x27ec]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2754]
mov byte [ebp - 4], 0x3e
call fcn.00401d00
lea ecx, [ebp - 0x2754]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2760]
mov byte [ebp - 4], 0x3f
call fcn.00401d00
lea ecx, [ebp - 0x2760]
call fcn.00516ef0
mov eax, dword [ebp - 0x6ebc]
mov esi, 1
mov byte [ebp - 4], 0x40
mov dword [ebp - 0x6ea8], esi
mov ecx, dword [eax + 0x244]
cmp ecx, esi
jbe 0x497838
cmp byte [eax + 0x14], 0
jne 0x49783e
lea eax, [esi + esi*4]
mov edi, dword [ebp - 0x6ebc]
add eax, eax
xor edx, edx
div ecx
mov ecx, dword [edi + 4]
add eax, 0x10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x6a4490]
cvttsd2si eax, xmm0
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.004ea4c0
push esi
mov ecx, edi
call fcn.00492300
test al, al
je 0x497821
push esi
lea ecx, [edi + 0x220]
call fcn.00404020
push eax
lea ecx, [ebp - 0x23b0]
call fcn.00516e00
push 0
push 0x20019
lea ecx, [ebp - 0x23b0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1ff4]
call fcn.005116f0
test al, al
je 0x497821
lea eax, [ebp - 0x213c]
push eax
push 0x5fa734
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
test al, al
je 0x497821
lea eax, [ebp - 0x1fa4]
push eax
push 0x604a84
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
lea eax, [ebp - 0x22c8]
push eax
push 0x604aa4
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
test al, al
jne 0x496be7
lea ecx, [ebp - 0x1fa4]
call fcn.00516cc0
test eax, eax
je 0x497821
lea eax, [ebp - 0x2160]
push eax
push 0x604ac4
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
test al, al
je 0x496c11
lea ecx, [ebp - 0x2160]
call fcn.00516cc0
test eax, eax
jne 0x496c21
push 0x5fea9c
lea ecx, [ebp - 0x2160]
call fcn.00516e30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x604d78
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2754]
call fcn.00515270
push 0
push 1
push 1
push 0
push str.msiexec
lea ecx, [ebp - 0x22c8]
call fcn.00515510
test eax, eax
setne byte [ebp - 0x6eac]
test eax, eax
jne 0x496caf
lea eax, [ebp - 0x6c38]
push eax
push 0x604d80
lea ecx, [ebp - 0x1ff4]
call fcn.00511380
test al, al
je 0x496caf
mov eax, dword [ebp - 0x6eac]
mov ecx, 1
cmp dword [ebp - 0x6c38], 1
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6eac], eax
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x2114]
call fcn.00516e00
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x496d02
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516530
push 0
push 0
push 0x5ed51c
push 0x5f0068
lea ecx, [ebp - 0x1fa4]
call fcn.00514e30
jmp 0x497326
cmp byte [ebp - 0x6eac], 0
je 0x496dc4
lea eax, [ebp - 0x6c38]
mov dword [ebp - 0x6c38], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
push eax
push 0x604a84
push dword [ebp - 0x6c1c]
call dword [0x5cda60]
push 0
push 1
push 1
push 0
push 0x5f0150
lea ecx, [ebp - 0x1fa4]
call fcn.00515510
test eax, eax
jne 0x496dc4
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x604b6c
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x23a4]
push 0x604b98
push dword [ebp - 0x6ed8]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x23a4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x496dc4
lea eax, [ebp - 0x1fa4]
push eax
push 0x604a84
lea ecx, [ebp - 0x1f74]
call fcn.00511410
lea ecx, [ebp - 0x1fa4]
call fcn.00516cc0
cmp eax, 0xa
jle 0x496de1
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516530
push 0
push 1
push 1
push 0
push 0x5f0150
lea ecx, [ebp - 0x1fa4]
call fcn.00515510
test eax, eax
jne 0x497326
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5ed66c
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x26bc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x497326
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x26e0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x497326
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x26c8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x497326
lea ecx, [ebp - 0x2160]
call fcn.00516cc0
cmp eax, 4
jle 0x496ff3
push 0
push 1
push 1
push 0
push 0x604c3c
lea ecx, [ebp - 0x2160]
call fcn.00515510
cmp eax, 1
je 0x496ff3
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2160]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x26c8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x497326
push 1
push 0x604da4
push dword [ebp - 0x6c78]
lea ecx, [ebp - 0x23b0]
push 1
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x27ec]
call fcn.00516b80
mov ecx, eax
call fcn.005140d0
test eax, eax
je 0x497295
lea ecx, [ebp - 0x27ec]
call fcn.00516ab0
lea edx, [ebp - 0x273c]
mov ecx, eax
call fcn.004ce1a0
test al, al
je 0x497295
lea ecx, [ebp - 0x27ec]
call fcn.00516ab0
lea edx, [ebp - 0x2748]
mov ecx, eax
call fcn.004ce9a0
test al, al
je 0x497295
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2748]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x4972a5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2748]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x4972a5
lea ecx, [ebp - 0x2160]
call fcn.00516cc0
cmp eax, 4
jle 0x4972a5
push 0
push 1
push 1
push 0
push 0x604c3c
lea ecx, [ebp - 0x2160]
call fcn.00515510
cmp eax, 1
je 0x4972a5
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2160]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2748]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
test al, al
jne 0x4972a5
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2160]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2748]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.005162e0
mov edx, 0x400
mov ecx, eax
call fcn.00502700
jmp 0x4972a5
push 0x5feab0
lea ecx, [ebp - 0x273c]
call fcn.00516e30
lea ecx, [ebp - 0x22c8]
call fcn.00516cc0
cmp eax, 0xa
jle 0x497326
lea eax, [ebp - 0x22c8]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516e00
push 0
push 0
push 0x5ed51c
push 0x5f0068
lea ecx, [ebp - 0x1fa4]
call fcn.00514e30
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00516530
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x5f0150
lea ecx, [ebp - 0x1fa4]
call fcn.00515510
cmp eax, 2
jle 0x497319
add eax, 0xfffffffe
lea ecx, [ebp - 0x1fa4]
push eax
call fcn.00515800
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005167d0
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
mov ecx, eax
call fcn.005080d0
test al, al
je 0x497347
lea ecx, [ebp - 0x1fa4]
call fcn.00516d20
lea eax, [ebp - 0x2074]
xor esi, esi
push eax
push 0x604c54
lea ecx, [ebp - 0x1ff4]
call fcn.00511410
test al, al
je 0x497397
push esi
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
push 0x104
lea ecx, [ebp - 0x2074]
call fcn.005162e0
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
call dword [0x5cd634]
mov esi, eax
jmp 0x4973ed
cmp byte [ebp - 0x6eac], 0
je 0x4973fa
lea eax, [ebp - 0x6c98]
mov dword [ebp - 0x6c98], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2074]
call fcn.005162e0
push eax
push 0x604c6c
push dword [ebp - 0x6c1c]
call dword [0x5cda60]
push dword [ebp - 0x6c98]
lea ecx, [ebp - 0x2074]
call fcn.00516d60
xor ecx, ecx
mov word [eax], cx
cmp byte [ebp - 0x6eac], 0
jne 0x49754a
lea ecx, [ebp - 0x2074]
call fcn.00516cc0
test eax, eax
jne 0x49754a
push eax
lea ecx, [ebp - 0x22c8]
call fcn.00516ab0
push eax
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.005162e0
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x22c8]
call fcn.00516ab0
push eax
call dword [0x5cd4d0]
lea ecx, [ebp - 0x2074]
call fcn.00516cc0
test eax, eax
je 0x49754a
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2074]
call fcn.00515510
test eax, eax
je 0x49748b
add eax, 3
lea ecx, [ebp - 0x2074]
push eax
call fcn.005158b0
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x49754a
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5f0150
lea ecx, [ebp - 0x2074]
call fcn.00515510
cmp eax, 2
jle 0x4974d0
add eax, 0xfffffffe
lea ecx, [ebp - 0x2074]
push eax
call fcn.00515800
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x49754a
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5f0068
lea ecx, [ebp - 0x2074]
call fcn.00515510
test eax, eax
je 0x49750d
push eax
lea ecx, [ebp - 0x2074]
call fcn.00515800
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x49754a
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5eff2c
lea ecx, [ebp - 0x2074]
call fcn.00515510
test eax, eax
je 0x49754a
push eax
lea ecx, [ebp - 0x2074]
call fcn.00515800
push 0x5c
lea ecx, [ebp - 0x1fa4]
call fcn.00514c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
mov byte [ebp - 0x6eb8], 1
call fcn.00516ab0
push eax
push 0x604ad8
lea ecx, [edi + 0x24c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
lea eax, [ebp - 0x6c38]
push eax
push 0x604dac
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x4975ef
mov eax, dword [ebp - 0x6eb8]
mov ecx, 2
cmp dword [ebp - 0x6c38], 0
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6eb8], eax
push esi
lea ecx, [ebp - 0x2074]
call fcn.00516ab0
push eax
xor eax, eax
lea ecx, [ebp - 0x273c]
cmp byte [ebp - 0x6eb8], 1
push 0
sete al
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2160]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [eax + 0xa0]
call fcn.004bb120
push eax
lea ecx, [ebp - 0x22e4]
call fcn.00515d60
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x23b0]
call fcn.00516ab0
push eax
push 0x5fdde4
lea ecx, [ebp - 0x22e4]
call fcn.00516ab0
mov esi, dword [0x5cd4e8]
push eax
call esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x5fb1b0
lea ecx, [ebp - 0x22e4]
call fcn.00516ab0
push eax
call esi
lea ecx, [ebp - 0x2114]
call fcn.00516cc0
test eax, eax
je 0x497709
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x5fea74
lea ecx, [ebp - 0x22e4]
call fcn.00516ab0
push eax
call esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
push 0x5f4c18
lea ecx, [ebp - 0x2114]
call fcn.00516ab0
push eax
push 0x604c84
call esi
lea ecx, [ebp - 0x22c8]
call fcn.00516cc0
test eax, eax
je 0x497743
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x22c8]
call fcn.00516ab0
push eax
push 0x5fea50
lea ecx, [ebp - 0x22e4]
call fcn.00516ab0
push eax
call esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x273c]
call fcn.00516ab0
push eax
push 0x5fde00
lea ecx, [ebp - 0x22e4]
call fcn.00516ab0
push eax
call esi
cmp byte [ebp - 0x6eac], 0
je 0x49779c
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x22e4]
push 0x5fea84
call fcn.00516ab0
push eax
call esi
cmp byte [ebp - 0x6eb8], 1
mov ecx, 0x604cc4
push 0
push 0
mov eax, 0x604cb0
cmovne eax, ecx
lea ecx, [ebp - 0x273c]
push eax
push 0x604248
call fcn.00516ab0
push eax
push 0x604cdc
lea ecx, [ebp - 0x1fa4]
call fcn.00516ab0
push eax
push 0x604d00
lea ecx, [ebp - 0x23b0]
call fcn.00516ab0
push eax
push 0x604d24
lea ecx, [ebp - 0x213c]
call fcn.00516ab0
push eax
push 0x604d4c
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov esi, dword [ebp - 0x6ea8]
mov ecx, dword [edi + 0x244]
inc esi
mov dword [ebp - 0x6ea8], esi
mov eax, edi
cmp esi, ecx
jb 0x496af2
cmp byte [eax + 0x14], 0
je 0x497885
lea ecx, [ebp - 0x2760]
call fcn.00516d50
lea ecx, [ebp - 0x2754]
call fcn.00516d50
lea ecx, [ebp - 0x27ec]
call fcn.00516d50
lea ecx, [ebp - 0x2748]
call fcn.00516d50
lea ecx, [ebp - 0x273c]
call fcn.00516d50
lea ecx, [ebp - 0x29b0]
call fcn.00516d50
jmp 0x4968a4
lea ecx, [ebp - 0x2754]
call fcn.00516cc0
cmp eax, 6
jle 0x497942
push 0x2000
lea eax, [ebp - 0x6d30]
mov dword [ebp - 0x6d30], 0x1000
push eax
push 0
push 0
push 0x1000
lea ecx, [ebp - 0x2760]
call fcn.005162e0
push eax
lea ecx, [ebp - 0x2754]
call fcn.00516ab0
push eax
call dword [0x5cd638]
test eax, eax
je 0x4978ec
lea eax, [ebp - 0x2754]
push eax
lea ecx, [ebp - 0x2760]
call fcn.00516e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x604dc8
lea ecx, [ebp - 0x2760]
call fcn.005150b0
push 0
push 0
push 0x5f3df4
push 0x5f3ea8
push 6
lea ecx, [ebp - 0x2760]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004e4eb0
push eax
lea ecx, [ebp - 0x2578]
call fcn.004e1e30
mov edi, dword [ebp - 0x6ebc]
push 0x1e
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0x34]
call fcn.004ea4c0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x604e48
push dword [eax + 0x38]
call fcn.004ed600
push 0xc
lea ecx, [ebp - 0x232c]
call fcn.00401d00
lea ecx, [ebp - 0x232c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x24c8]
mov byte [ebp - 4], 0x41
call fcn.00401d00
lea ecx, [ebp - 0x24c8]
call fcn.00516ef0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x604e7c
lea ecx, [edi + 0x24c]
mov byte [ebp - 4], 0x42
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 4
lea ecx, [ebp - 0x237c]
call fcn.00401d20
lea ecx, [ebp - 0x237c]
call fcn.00511760
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
mov byte [ebp - 4], 0x43
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x497e1e
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ea8], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005110a0
test al, al
je 0x497e1e
nop dword [eax]
mov eax, dword [ebp - 0x6ebc]
cmp byte [eax + 0x14], 0
jne 0x497e18
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed650
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x24c8]
push 0x5ed650
call fcn.00516b20
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x24c8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2934]
call fcn.00515510
test eax, eax
jne 0x497df0
mov edi, dword [ebp - 0x6ebc]
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x5fbe34
push dword [ebp - 0x6c1c]
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x497df0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x24c8]
xor esi, esi
call fcn.00516e30
push 0x604e8c
lea ecx, [ebp - 0x24c8]
call fcn.00516da0
test al, al
je 0x497b13
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x5ed66c
lea ecx, [ebp - 0x24c8]
call fcn.00515270
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x26bc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x232c]
call fcn.00516b20
lea ecx, [ebp - 0x232c]
call fcn.00502820
test al, al
je 0x497b86
push dword [ebp - 0x6ec0]
lea eax, [ebp - 0x1ff0]
push 0
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x232c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004934b0
mov esi, eax
cmp byte [ebp - 0x6eb1], 0
je 0x497c02
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x26e0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x232c]
call fcn.00516b20
lea ecx, [ebp - 0x232c]
call fcn.00502820
test al, al
je 0x497c02
push dword [ebp - 0x6ec0]
lea eax, [ebp - 0x1ff0]
push 0
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x232c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004934b0
add esi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x26c8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x232c]
call fcn.00516b20
lea ecx, [ebp - 0x232c]
call fcn.00502820
test al, al
je 0x497c75
push dword [ebp - 0x6ec0]
lea eax, [ebp - 0x1ff0]
push 0
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x232c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004934b0
add esi, eax
mov eax, edi
mov dword [ebp - 0x6ec0], 0
cmp dword [eax + 0x30], 0
jbe 0x497dca
lea edi, [eax + 0x44]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
push dword [ebp - 0x6ec0]
mov ecx, edi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x232c]
call fcn.00516b20
lea ecx, [ebp - 0x232c]
call fcn.00502820
test al, al
je 0x497d1e
push dword [ebp - 0x6ec0]
lea eax, [ebp - 0x1ff0]
push 0
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x232c]
call fcn.00516ab0
mov edi, dword [ebp - 0x6ebc]
mov ecx, edi
push eax
call fcn.004934b0
add esi, eax
jmp 0x497d24
mov edi, dword [ebp - 0x6ebc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push eax
push dword [ebp - 0x6ec0]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x232c]
call fcn.00516b20
lea ecx, [ebp - 0x232c]
call fcn.00502820
test al, al
je 0x497dab
push dword [ebp - 0x6ec0]
lea eax, [ebp - 0x1ff0]
push 0
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x232c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004934b0
add esi, eax
mov eax, dword [ebp - 0x6ebc]
mov ecx, dword [ebp - 0x6ec0]
inc ecx
mov dword [ebp - 0x6ec0], ecx
lea edi, [eax + 0x44]
cmp ecx, dword [eax + 0x30]
jb 0x497c90
test esi, esi
jle 0x497df0
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
push 0x5f4c18
push dword [ebp - 0x6c1c]
push 0x604c84
call dword [0x5cd4e8]
mov eax, dword [ebp - 0x6ea8]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6ea8], eax
call fcn.005110a0
test al, al
jne 0x497a40
mov edi, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x237c]
call fcn.005116a0
lea ecx, [ebp - 0x24c8]
call fcn.00516d50
lea ecx, [ebp - 0x232c]
call fcn.00516d50
lea ecx, [ebp - 0x2760]
call fcn.00516d50
lea ecx, [ebp - 0x2754]
call fcn.00516d50
lea ecx, [ebp - 0x27ec]
call fcn.00516d50
lea ecx, [ebp - 0x2748]
call fcn.00516d50
lea ecx, [ebp - 0x273c]
call fcn.00516d50
lea ecx, [ebp - 0x29b0]
call fcn.00516d50
jmp 0x49697d
mov eax, dword [ebp - 0x237c]
mov dword [ebp - 0x6ec0], eax
mov edi, dword [ebp - 0x6ebc]
push 8
lea ecx, [ebp - 0x6d14]
call fcn.00401d40
mov eax, dword [edi + 0x30]
lea ecx, [ebp - 0x6d14]
add eax, 2
push eax
call fcn.004036f0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x2148]
mov esi, dword [ebp - 0x6d14]
push 0xc
mov dword [ebp - 0x6ecc], esi
call fcn.00401d00
lea ecx, [ebp - 0x2148]
call fcn.00516ef0
mov byte [ebp - 4], 0x45
cmp byte [edi + 0x14], 0
jne 0x49a5ab
test dword [edi + 0x34], 0x400
jne 0x49a5ab
push 0
push 0x604ea0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x604ed0
push dword [eax + 0x38]
call fcn.004ed600
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x23
push dword [eax + 0x34]
call fcn.004ea4c0
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x497f97
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6eb0], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x604f00
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb0]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6eb0], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x497f50
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x604f60
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x497ffe
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x604f60
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
push 0xc
lea ecx, [ebp - 0x2090]
call fcn.00401d00
lea ecx, [ebp - 0x2090]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2404]
mov byte [ebp - 4], 0x46
call fcn.00401d00
lea ecx, [ebp - 0x2404]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x27b0]
mov byte [ebp - 4], 0x47
call fcn.00401d00
lea ecx, [ebp - 0x27b0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x219c]
mov byte [ebp - 4], 0x48
call fcn.00401d00
lea ecx, [ebp - 0x219c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2314]
mov byte [ebp - 4], 0x49
call fcn.00401d00
lea ecx, [ebp - 0x2314]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x255c]
mov byte [ebp - 4], 0x4a
call fcn.00401d00
lea ecx, [ebp - 0x255c]
call fcn.00516ef0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x604fc0
push 0x5ed514
lea ecx, [edi + 0x78]
mov byte [ebp - 4], 0x4b
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00516b20
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.004ec300
push 0
push 0x604fe0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
xor eax, eax
mov dword [ebp - 0x6eb0], eax
cmp dword [ebp - 0x6ed4], eax
jbe 0x49844e
mov esi, dword [ebp - 0x6ed0]
mov ecx, dword [ebp - 0x6ecc]
sub ecx, esi
mov dword [ebp - 0x6eac], esi
mov dword [ebp - 0x6f08], ecx
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x49a565
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp eax, dword [edi + 0x30]
jae 0x498171
lea ecx, [ebp - 0x26b0]
call fcn.00516ab0
push eax
push dword [ebp - 0x6eb0]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
jmp 0x49817c
push 0x5f948c
lea ecx, [ebp - 0x2568]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2404]
call fcn.00516b20
mov eax, dword [ebp - 0x6f08]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49842c
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec0], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00511000
test al, al
je 0x49842c
cmp byte [edi + 0x14], 0
jne 0x49842c
mov eax, dword [ebp - 0x6c1c]
cmp word [eax], 0
je 0x498404
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x5fbf08
push dword [ebp - 0x6c1c]
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x498404
lea eax, [ebp - 0x2090]
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x498404
push 3
lea edx, [edi + 0xb4]
xor esi, esi
lea ecx, [ebp - 0x2090]
call fcn.005097e0
test al, al
je 0x4982d7
push esi
push 1
push 1
push esi
lea ecx, [ebp - 0x2404]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00515510
mov ecx, dword [ebp - 0x6ea8]
mov esi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
push 0x5f6828
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x2090]
mov ecx, edi
push eax
call fcn.00492520
test al, al
mov eax, 1
cmovne esi, eax
push 0
lea ecx, [ebp - 0x2090]
call fcn.00516ab0
push eax
push 0
push esi
lea ecx, [ebp - 0x2090]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
push dword [ebp - 0x6c1c]
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xb
push dword [eax + 0xa4]
call fcn.004bb120
mov dword [ebp - 0x6f24], eax
cmp eax, 0xffffffff
je 0x4983fe
mov ecx, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
call fcn.00516ab0
push eax
push 0xb
push dword [ebp - 0x6f24]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
lea eax, [ebp - 0x2090]
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f74]
call fcn.00511410
push 0
push 0
push 0
test esi, esi
mov ecx, 0x604230
push 0x5f36f4
mov eax, 0x5fb204
cmove eax, ecx
lea ecx, [ebp - 0x2090]
push eax
push 0x604248
call fcn.00516ab0
mov esi, dword [ebp - 0x6eac]
mov ecx, esi
push eax
push 0x605024
call fcn.00516ab0
push eax
push 0x6042a8
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f80]
push 0x605040
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x498404
mov esi, dword [ebp - 0x6eac]
mov eax, dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6ec0], eax
call fcn.00511000
test al, al
jne 0x4981e3
mov eax, dword [ebp - 0x6eb0]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eac], esi
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [ebp - 0x6ed4]
jb 0x498130
cmp byte [edi + 0x14], 0
jne 0x49a565
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4984bb
mov eax, dword [ebp - 0x6ecc]
mov dword [ebp - 0x6eb0], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x28a8]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb0]
push eax
call fcn.00516b20
add dword [ebp - 0x6eb0], 0xc
inc esi
mov eax, dword [edi + 0x30]
cmp esi, eax
jb 0x498470
lea ecx, [ebp - 0x291c]
push ecx
mov ecx, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00516e00
push 0
push 0x605060
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
push 0x4c
lea ecx, [ebp - 0x2b70]
call fcn.00401e20
lea ecx, [ebp - 0x2b70]
call fcn.0050a400
mov eax, dword [ebp - 0x6ed0]
mov esi, eax
mov ecx, dword [ebp - 0x6ecc]
sub ecx, eax
mov byte [ebp - 4], 0x4c
mov dword [ebp - 0x6eac], 0
mov dword [ebp - 0x6eb8], esi
mov dword [ebp - 0x6ec4], ecx
nop word [eax + eax]
mov al, byte [edi + 0x14]
test al, al
jne 0x49a55a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [esi + ecx]
push 0
push 0x605098
mov ecx, eax
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x3750]
call fcn.00401d60
push 3
lea ecx, [ebp - 0x2090]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3750]
call fcn.00401660
mov eax, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x4d
push 0
push 0
cmp eax, dword [edi + 0x30]
jae 0x4985da
lea ecx, [ebp - 0x26b0]
call fcn.00516ab0
push eax
push dword [ebp - 0x6eac]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
jmp 0x4985e5
push 0x5f948c
lea ecx, [ebp - 0x2568]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2404]
call fcn.00516b20
lea ecx, [ebp - 0x3750]
call fcn.004017a0
test al, al
je 0x49897c
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x49897c
push 1
lea ecx, [ebp - 0x3750]
call fcn.00401810
push eax
lea ecx, [ebp - 0x219c]
call fcn.00516e30
push 0x6050b0
lea ecx, [ebp - 0x219c]
call fcn.00516de0
test al, al
jne 0x498969
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x5fbf40
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x498969
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3750]
call fcn.00401810
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x255c]
call fcn.00516b20
lea eax, [ebp - 0x255c]
push eax
lea ecx, [ebp - 0x2314]
call fcn.00516e00
push 0
push 0
lea ecx, [ebp - 0x3750]
call fcn.00401820
mov edx, 0x604214
mov ecx, eax
call fcn.00513700
test eax, eax
jne 0x4987ac
push eax
lea ecx, [ebp - 0x255c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2b70]
call fcn.0050a2c0
test al, al
je 0x4987ac
lea ecx, [ebp - 0x2b70]
call fcn.0050a240
push eax
lea ecx, [ebp - 0x2314]
call fcn.00516e30
lea ecx, [ebp - 0x2b70]
call fcn.0050a1e0
mov ecx, eax
call fcn.00513870
test eax, eax
je 0x498767
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b70]
call fcn.0050a1e0
push eax
push 0x5eff2c
lea ecx, [ebp - 0x2314]
call fcn.00515270
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00516b80
lea edx, [edi + 0xb4]
mov ecx, eax
call fcn.005097e0
test al, al
jne 0x4987be
lea ecx, [ebp - 0x2b70]
call fcn.0050a240
push eax
lea ecx, [ebp - 0x2090]
call fcn.00516e30
jmp 0x4987be
lea eax, [ebp - 0x255c]
push eax
lea ecx, [ebp - 0x2090]
call fcn.00516e00
push 0
push 0
push 0x5ed51c
push 0x5f0068
lea ecx, [ebp - 0x2090]
call fcn.00514e30
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2404]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00515510
push 0
lea ecx, [ebp - 0x255c]
mov esi, eax
call fcn.00516ab0
push eax
lea eax, [ebp - 0x2090]
mov ecx, edi
push eax
call fcn.00492520
test al, al
lea ecx, [ebp - 0x2090]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00516ab0
push eax
push 0
push esi
lea ecx, [ebp - 0x2090]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push dword [eax + 0xa4]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
je 0x498963
push 0
push 0
push 0
test esi, esi
mov eax, 0x604230
push 0x5f36f4
mov ecx, 0x5fb204
cmove ecx, eax
push ecx
push 0x604248
lea ecx, [ebp - 0x2090]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eb8]
mov ecx, esi
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
push 0x605040
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3750]
call fcn.00401810
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00516ab0
push eax
push 0
push 0xc
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
jmp 0x498969
mov esi, dword [ebp - 0x6eb8]
lea ecx, [ebp - 0x3750]
call fcn.00401760
test al, al
jne 0x498610
lea ecx, [ebp - 0x3750]
mov byte [ebp - 4], 0x4c
call fcn.004016b0
mov ecx, dword [ebp - 0x6eac]
add esi, 0xc
inc ecx
mov dword [ebp - 0x6eb8], esi
cmp ecx, dword [edi + 0x30]
mov dword [ebp - 0x6eac], ecx
mov ecx, dword [ebp - 0x6ec4]
jbe 0x498530
mov al, byte [edi + 0x14]
test al, al
jne 0x49a55a
push 0
push 0x6050e0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
push 0xc
lea ecx, [ebp - 0x2450]
call fcn.00401d00
lea ecx, [ebp - 0x2450]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2190]
mov byte [ebp - 4], 0x4e
call fcn.00401d00
lea ecx, [ebp - 0x2190]
call fcn.00516ef0
push 4
lea ecx, [ebp - 0x6c3c]
mov byte [ebp - 4], 0x4f
call fcn.00401d20
lea ecx, [ebp - 0x6c3c]
call fcn.004015e0
push 4
lea ecx, [ebp - 0x6c40]
mov byte [ebp - 4], 0x50
call fcn.00401d20
lea ecx, [ebp - 0x6c40]
call fcn.004015e0
lea eax, [ebp - 0x6c40]
mov byte [ebp - 4], 0x51
mov esi, dword [0x5cda74]
push eax
push 0x5e78ec
push 1
push 0
push 0x5e7afc
call esi
test eax, eax
js 0x499685
lea ecx, [ebp - 0x7038]
call fcn.00401c60
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7028]
movups xmmword [ebp - 0x6f18], xmm0
call fcn.00401c60
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x6fb8]
movups xmmword [ebp - 0x6f30], xmm0
call fcn.00401c60
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x6fc8]
movups xmmword [ebp - 0x6f68], xmm0
call fcn.00401c60
mov edi, eax
mov byte [ebp - 4], 0x55
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6f18]
mov ecx, dword [ebp - 0x6c40]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f30]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6f68]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
lea ecx, [ebp - 0x6fc8]
mov esi, eax
call fcn.00401cf0
lea ecx, [ebp - 0x6fb8]
call fcn.00401cf0
lea ecx, [ebp - 0x7028]
call fcn.00401cf0
lea ecx, [ebp - 0x7038]
mov byte [ebp - 4], 0x51
call fcn.00401cf0
test esi, esi
js 0x498bee
push 4
lea ecx, [ebp - 0x6c50]
call fcn.00401d20
lea ecx, [ebp - 0x6c50]
call fcn.004015e0
push 0x5ed514
lea ecx, [ebp - 0x6f80]
mov byte [ebp - 4], 0x56
call fcn.00401ae0
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x6c40]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6c50]
push ecx
mov ecx, eax
call fcn.00401ba0
push eax
push dword [ebp - 0x6c40]
mov eax, dword [esi + 0x1c]
call eax
lea ecx, [ebp - 0x6f80]
mov byte [ebp - 4], 0x56
mov esi, eax
call fcn.00401b90
test esi, esi
js 0x498bdf
push 4
lea ecx, [ebp - 0x6c64]
call fcn.00401d20
lea ecx, [ebp - 0x6c64]
call fcn.004015e0
mov byte [ebp - 4], 0x58
lea edx, [ebp - 0x6c64]
mov eax, dword [ebp - 0x6c50]
push edx
push 1
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x38]
call eax
test eax, eax
jns 0x499078
lea ecx, [ebp - 0x6c64]
call fcn.00402ef0
lea ecx, [ebp - 0x6c50]
mov byte [ebp - 4], 0x51
call fcn.00402ef0
mov edi, dword [ebp - 0x6ebc]
cmp byte [edi + 0x14], 0
jne 0x49a52e
push 0x18
lea ecx, [ebp - 0x28d4]
call fcn.00401d30
lea ecx, [ebp - 0x28d4]
call fcn.00513f30
push 0
push 0x6051e0
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x61
call fcn.00504a30
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x498c8b
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6eb0], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x605210
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb0]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6eb0], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x498c44
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x605280
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x498cf2
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x605280
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp dword [ebp - 0x6ed4], 0
mov dword [ebp - 0x6eb0], 0
jbe 0x499bd1
mov esi, dword [ebp - 0x6ed0]
mov dword [ebp - 0x6eac], esi
cmp byte [edi + 0x14], 0
jne 0x49a523
mov eax, dword [ebp - 0x6ec4]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x499baf
lea eax, [ebp - 0x2404]
push eax
push 0x5fbfb8
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x499baf
lea ecx, [ebp - 0x2404]
call fcn.00516cc0
cmp eax, 2
jl 0x499baf
push 0x18
lea ecx, [ebp - 0x29d4]
call fcn.00401d30
push 0
push 0x5f3998
lea ecx, [ebp - 0x2404]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x29d4]
call fcn.00513eb0
lea ecx, [ebp - 0x29d4]
mov byte [ebp - 4], 0x62
mov dword [ebp - 0x6ec0], 0
call fcn.00513e20
test eax, eax
je 0x499ba0
nop
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x29d4]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x219c]
call fcn.00516e30
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6052ec
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x499b83
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x29d4]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x2090]
call fcn.00516e30
lea ecx, [ebp - 0x2090]
call fcn.005167b0
test al, al
jne 0x499b83
push 0
push 1
push 0xffffffffffffffff
push 0
push str..dll
lea ecx, [ebp - 0x2090]
call fcn.00515510
lea ecx, [ebp - 0x2090]
mov esi, eax
call fcn.00516cc0
sub eax, 3
cmp esi, eax
je 0x498e9d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x2090]
call fcn.00515270
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x2090]
call fcn.005097e0
lea ecx, [ebp - 0x2090]
call fcn.00516ab0
push eax
push 0
call dword [0x5cdaa8]
test eax, eax
jne 0x499b7d
push eax
push 1
push 1
push eax
push 0x60515c
lea ecx, [ebp - 0x2090]
call fcn.00515510
push 0
push 0
push 0
push 0
push 0
push 0
xor ecx, ecx
test eax, eax
push 0
push 0
setg cl
push 0
push dword [ebp - 0x6ec0]
mov dword [ebp - 0x6ee8], ecx
lea ecx, [ebp - 0x29d4]
call fcn.00513e30
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x605308
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x2090]
mov ecx, edi
push eax
call fcn.00492520
mov esi, dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x2090]
test al, al
mov eax, 1
push 0
cmovne esi, eax
call fcn.00516ab0
push eax
push 0
push esi
lea ecx, [ebp - 0x2090]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xe
push dword [eax + 0xa4]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x499b7d
mov ecx, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push 0x5fbfb8
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
call fcn.00516ab0
push eax
push 0xe
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
test esi, esi
mov ecx, 0x604230
push 0x5f36f4
mov eax, 0x5fb204
cmove eax, ecx
lea ecx, [ebp - 0x2090]
push eax
push 0x604248
call fcn.00516ab0
mov esi, dword [ebp - 0x6eac]
mov ecx, esi
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
push 0x605040
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x499b83
mov eax, dword [ebp - 0x6c64]
lea edx, [ebp - 0x2550]
mov dword [ebp - 0x2550], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x2550]
mov edi, dword [ebp - 0x6ebc]
test eax, eax
je 0x499666
mov esi, 1
mov dword [ebp - 0x6ea8], esi
cmp eax, esi
jl 0x499666
nop
cmp byte [edi + 0x14], 0
jne 0x499666
push 4
lea ecx, [ebp - 0x6c24]
call fcn.00401d20
lea ecx, [ebp - 0x6c24]
call fcn.004015e0
push 3
push esi
lea ecx, [ebp - 0x6fa8]
mov byte [ebp - 4], 0x59
call fcn.00401c70
mov esi, eax
mov byte [ebp - 4], 0x5a
lea edx, [ebp - 0x6c24]
mov ecx, dword [ebp - 0x6c64]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
lea ecx, [ebp - 0x6fa8]
mov byte [ebp - 4], 0x59
mov esi, eax
call fcn.00401cf0
test esi, esi
js 0x49963e
mov eax, dword [ebp - 0x6c24]
lea edx, [ebp - 0x6c7c]
mov dword [ebp - 0x6c7c], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
test eax, eax
js 0x49963e
mov eax, dword [ebp - 0x6c7c]
test eax, eax
je 0x49963e
push eax
lea ecx, [ebp - 0x219c]
call fcn.00516e30
push dword [ebp - 0x6c7c]
call dword [0x5cd550]
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x60513c
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49963e
push 4
lea ecx, [ebp - 0x6c30]
call fcn.00401d20
lea ecx, [ebp - 0x6c30]
call fcn.004015e0
mov byte [ebp - 4], 0x5b
lea edx, [ebp - 0x6c30]
mov eax, dword [ebp - 0x6c24]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x4c]
call eax
test eax, eax
js 0x499633
push 4
lea ecx, [ebp - 0x6c34]
call fcn.00401d20
lea ecx, [ebp - 0x6c34]
call fcn.004015e0
mov byte [ebp - 4], 0x5c
lea edx, [ebp - 0x6c34]
mov eax, dword [ebp - 0x6c30]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x44]
call eax
test eax, eax
js 0x499628
mov eax, dword [ebp - 0x6c34]
lea edx, [ebp - 0x2454]
mov dword [ebp - 0x2454], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
cmp dword [ebp - 0x2454], 0
je 0x499628
lea ecx, [ebp - 0x2190]
call fcn.00516d20
mov esi, 1
cmp dword [ebp - 0x2454], esi
jl 0x49943e
mov edi, dword [ebp - 0x6ee8]
nop
push 4
lea ecx, [ebp - 0x6c28]
call fcn.00401d20
lea ecx, [ebp - 0x6c28]
call fcn.004015e0
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0x6c28]
mov eax, dword [ebp - 0x6c34]
push edx
push esi
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x49941c
mov eax, dword [ebp - 0x6c28]
lea edx, [ebp - 0x28ac]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x24]
call eax
test eax, eax
js 0x49941c
cmp dword [ebp - 0x28ac], 0
jne 0x49941c
push 4
lea ecx, [ebp - 0x6c54]
call fcn.00401d20
lea ecx, [ebp - 0x6c54]
call fcn.004015e0
mov byte [ebp - 4], 0x5e
lea edx, [ebp - 0x6c54]
mov eax, dword [ebp - 0x6c28]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
mov eax, dword [ecx]
call eax
test eax, eax
js 0x499411
mov eax, dword [ebp - 0x6c54]
lea edx, [ebp - 0x6c68]
mov dword [ebp - 0x6c68], 0
mov dword [ebp - 0x6c6c], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x28]
call eax
mov eax, dword [ebp - 0x6c68]
test eax, eax
je 0x499411
push eax
lea ecx, [ebp - 0x2314]
call fcn.00516e30
mov eax, dword [ebp - 0x6c54]
lea edx, [ebp - 0x6c6c]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [ebp - 0x6c6c]
call fcn.00513870
test eax, eax
je 0x4993ca
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c6c]
lea ecx, [ebp - 0x2314]
push 0x5eff2c
call fcn.00515270
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2190]
call fcn.00516b80
mov edx, edi
mov ecx, eax
call fcn.005097e0
test al, al
jne 0x4993db
push dword [ebp - 0x6c68]
lea ecx, [ebp - 0x2190]
call fcn.00516e30
push 0
push 1
push 0x5ed51c
push 0x5f0068
lea ecx, [ebp - 0x2190]
call fcn.00514e30
push dword [ebp - 0x6c68]
call dword [0x5cd550]
mov eax, dword [ebp - 0x6c6c]
test eax, eax
je 0x499411
push eax
call dword [0x5cd550]
lea ecx, [ebp - 0x6c54]
call fcn.00402ef0
lea ecx, [ebp - 0x6c28]
mov byte [ebp - 4], 0x5c
call fcn.00402ef0
inc esi
cmp esi, dword [ebp - 0x2454]
jle 0x499270
mov edi, dword [ebp - 0x6ebc]
lea ecx, [ebp - 0x2190]
call fcn.005167b0
test al, al
jne 0x499628
mov eax, dword [ebp - 0x6c50]
lea edx, [ebp - 0x6d34]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x4994ec
movsd xmm0, qword [edi + 0x298]
comisd xmm0, xmmword [0x6a4098]
jbe 0x499488
mov eax, dword [edi + 0xbc]
jmp 0x49948e
mov eax, dword [edi + 0xb8]
push eax
lea ecx, [ebp - 0x2450]
call fcn.00516e30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
push 0x5ed514
push dword [ebp - 0x6d34]
lea ecx, [ebp - 0x2450]
push 0x5fa864
call fcn.00515270
push 1
push 0
push 0x5ed514
push 0x5ed59c
lea ecx, [ebp - 0x2450]
call fcn.00514e30
jmp 0x4994f7
lea ecx, [ebp - 0x2450]
call fcn.00516d20
push 0
push 1
push 1
push 0
push 0x60515c
lea ecx, [ebp - 0x2190]
call fcn.00515510
push 0
lea ecx, [ebp - 0x2450]
mov esi, eax
call fcn.00516ab0
push eax
lea eax, [ebp - 0x2190]
mov ecx, edi
push eax
call fcn.00492520
test al, al
lea ecx, [ebp - 0x2190]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00516ab0
push eax
push 0
push esi
lea ecx, [ebp - 0x2190]
call fcn.00516ab0
push eax
push 0x5feab0
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xd
push dword [eax + 0xa4]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
je 0x499628
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feab0
lea ecx, [ebp - 0x2190]
call fcn.00516ab0
push eax
push 0
push 0xd
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x604230
push 0x5f36f4
mov eax, 0x5fb204
cmove eax, ecx
lea ecx, [ebp - 0x2314]
push eax
push 0x604248
call fcn.00516ab0
push eax
push 0x605024
push 0x60516c
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
push 0x6051a4
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x6c34]
call fcn.00402ef0
lea ecx, [ebp - 0x6c30]
call fcn.00402ef0
lea ecx, [ebp - 0x6c24]
mov byte [ebp - 4], 0x58
call fcn.00402ef0
mov esi, dword [ebp - 0x6ea8]
inc esi
mov dword [ebp - 0x6ea8], esi
cmp esi, dword [ebp - 0x2550]
jle 0x4990c0
lea ecx, [ebp - 0x6c64]
call fcn.00402ef0
lea ecx, [ebp - 0x6c50]
mov byte [ebp - 4], 0x51
call fcn.00402ef0
jmp 0x498bf4
lea eax, [ebp - 0x6c3c]
push eax
push 0x5f38c4
push 1
push 0
push 0x5f21fc
call esi
test eax, eax
js 0x498bf4
push 4
lea ecx, [ebp - 0x6c58]
call fcn.00401d20
lea ecx, [ebp - 0x6c58]
call fcn.004015e0
mov byte [ebp - 4], 0x5f
lea edx, [ebp - 0x6c58]
mov eax, dword [ebp - 0x6c3c]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
jns 0x4996ed
lea ecx, [ebp - 0x6c58]
mov byte [ebp - 4], 0x51
call fcn.00402ef0
jmp 0x498bf4
mov eax, dword [ebp - 0x6c58]
lea edx, [ebp - 0x2464]
push edx
mov dword [ebp - 0x2464], 0
lea edx, [ebp - 0x6c74]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
js 0x499b69
mov esi, dword [0x5cda78]
nop dword [eax]
nop word [eax + eax]
mov eax, dword [ebp - 0x2464]
test eax, eax
je 0x499b69
xor ecx, ecx
mov dword [ebp - 0x6eb0], ecx
test eax, eax
je 0x499b3b
nop
cmp byte [edi + 0x14], 0
jne 0x499b3b
mov eax, dword [ebp - 0x6c74]
push dword [eax + ecx*4]
lea ecx, [ebp - 0x219c]
call fcn.00516e30
mov eax, dword [ebp - 0x6c74]
mov ecx, dword [ebp - 0x6eb0]
push dword [eax + ecx*4]
call esi
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x60513c
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x499b22
push 4
lea ecx, [ebp - 0x6c2c]
call fcn.00401d20
lea ecx, [ebp - 0x6c2c]
call fcn.004015e0
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x219c]
mov eax, dword [ebp - 0x6c3c]
mov esi, dword [eax]
lea eax, [ebp - 0x6c2c]
push eax
push 0x5fa2f0
call fcn.00516ab0
push eax
push dword [ebp - 0x6c3c]
mov eax, dword [esi + 0x18]
call eax
test eax, eax
js 0x499b0d
mov eax, dword [ebp - 0x6c2c]
lea edx, [ebp - 0x6c60]
mov dword [ebp - 0x6c60], 0
mov dword [ebp - 0x6c70], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x84]
call eax
cmp dword [ebp - 0x6c60], 0
je 0x499b0d
mov eax, dword [ebp - 0x6c2c]
lea edx, [ebp - 0x6c70]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x8c]
call eax
push dword [ebp - 0x6c60]
lea ecx, [ebp - 0x2314]
call fcn.00516e30
mov ecx, dword [ebp - 0x6c70]
call fcn.00513870
test eax, eax
je 0x4998c3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c70]
lea ecx, [ebp - 0x2314]
push 0x5eff2c
call fcn.00515270
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2190]
call fcn.00516b80
lea edx, [edi + 0xb4]
mov ecx, eax
call fcn.005097e0
test al, al
jne 0x4998d4
push dword [ebp - 0x6c60]
lea ecx, [ebp - 0x2190]
call fcn.00516e30
push 0
push 1
push 0x5ed51c
push 0x5f0068
lea ecx, [ebp - 0x2190]
call fcn.00514e30
push dword [ebp - 0x6c60]
mov esi, dword [0x5cda78]
call esi
mov eax, dword [ebp - 0x6c70]
test eax, eax
je 0x499908
push eax
call esi
lea ecx, [ebp - 0x2190]
call fcn.005167b0
test al, al
je 0x49992b
lea ecx, [ebp - 0x6c2c]
mov byte [ebp - 4], 0x5f
call fcn.00402ef0
jmp 0x499b22
push 0
push 1
push 1
push 0
push 0x60515c
lea ecx, [ebp - 0x2190]
call fcn.00515510
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x219c]
setg cl
mov dword [ebp - 0x6ee8], ecx
lea ecx, [ebp - 0x2450]
push eax
call fcn.00516e00
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x5fa874
lea ecx, [ebp - 0x2450]
call fcn.00515510
test eax, eax
jne 0x499999
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5fa874
lea ecx, [ebp - 0x2450]
call fcn.00515270
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6051c4
push dword [edi + 0xb8]
lea ecx, [ebp - 0x2450]
call fcn.005150b0
push 0
lea ecx, [ebp - 0x2450]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x2190]
mov ecx, edi
push eax
call fcn.00492520
test al, al
je 0x4999ea
mov esi, 1
jmp 0x499a1c
lea ecx, [ebp - 0x2190]
call fcn.00516ab0
push eax
push 0
call dword [0x5cdaa8]
test eax, eax
je 0x499a16
lea ecx, [ebp - 0x6c2c]
mov byte [ebp - 4], 0x5f
call fcn.00402ef0
jmp 0x499b22
mov esi, dword [ebp - 0x6ee8]
push 0
lea ecx, [ebp - 0x2190]
call fcn.00516ab0
push eax
push 0
push esi
lea ecx, [ebp - 0x2190]
call fcn.00516ab0
push eax
push 0x5feab0
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xd
push dword [eax + 0xa4]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x499b0d
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feab0
lea ecx, [ebp - 0x2190]
call fcn.00516ab0
push eax
push 0
push 0xd
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x604230
push 0x5f36f4
mov eax, 0x5fb204
cmove eax, ecx
lea ecx, [ebp - 0x2314]
push eax
push 0x604248
call fcn.00516ab0
push eax
push 0x605024
push 0x60516c
lea ecx, [ebp - 0x219c]
call fcn.00516ab0
push eax
push 0x6051a4
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x6c2c]
mov byte [ebp - 4], 0x5f
call fcn.00402ef0
mov esi, dword [0x5cda78]
mov ecx, dword [ebp - 0x6eb0]
inc ecx
mov dword [ebp - 0x6eb0], ecx
cmp ecx, dword [ebp - 0x2464]
jb 0x499750
push dword [ebp - 0x6c74]
call esi
mov eax, dword [ebp - 0x6c58]
lea edx, [ebp - 0x2464]
push edx
lea edx, [ebp - 0x6c74]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
jns 0x499730
lea ecx, [ebp - 0x6c58]
mov byte [ebp - 4], 0x51
call fcn.00402ef0
jmp 0x498bf4
mov esi, dword [ebp - 0x6eac]
inc dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x29d4]
call fcn.00513e20
cmp dword [ebp - 0x6ec0], eax
jb 0x498dd0
lea ecx, [ebp - 0x29d4]
mov byte [ebp - 4], 0x61
call fcn.00513e90
mov eax, dword [ebp - 0x6eb0]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eac], esi
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [ebp - 0x6ed4]
jb 0x498d15
cmp byte [edi + 0x14], 0
jne 0x49a523
push 0
push 0x605330
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
push 4
lea ecx, [ebp - 0x22bc]
mov dword [ebp - 0x6eec], 0x605368
mov dword [ebp - 0x6ee8], 0x6053f0
call fcn.00401d20
lea ecx, [ebp - 0x22bc]
call fcn.00511760
push 4
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0x63
call fcn.00401d20
lea ecx, [ebp - 0x2474]
call fcn.00511760
push 0xc
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x64
call fcn.00401d00
lea ecx, [ebp - 0x20d8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2730]
mov byte [ebp - 4], 0x65
call fcn.00401d00
lea ecx, [ebp - 0x2730]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x279c]
mov byte [ebp - 4], 0x66
call fcn.00401d00
lea ecx, [ebp - 0x279c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x6d28]
mov byte [ebp - 4], 0x67
call fcn.00401d00
lea ecx, [ebp - 0x6d28]
call fcn.00511780
lea eax, [ebp - 0x6eec]
mov byte [ebp - 4], 0x68
mov dword [ebp - 0x6ea8], eax
mov dword [ebp - 0x6eb8], 2
nop
mov esi, dword [eax]
lea ecx, [ebp - 0x1f74]
push 0
push 0x20019
push esi
mov dword [ebp - 0x6eac], esi
call fcn.005116f0
test al, al
je 0x49a4b2
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec0], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005110a0
test al, al
je 0x49a4b2
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x2120]
push 0x5ed514
push esi
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x22bc]
call fcn.005116f0
test al, al
je 0x49a484
lea eax, [ebp - 0x6d28]
mov dword [ebp - 0x6ec4], 0
push eax
push 0
lea ecx, [ebp - 0x22bc]
call fcn.005110a0
test al, al
je 0x49a146
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d28]
lea ecx, [ebp - 0x279c]
push 0x5ed514
push dword [ebp - 0x6c1c]
push 0x5ed514
push esi
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x279c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2474]
call fcn.005116f0
test al, al
je 0x49a11e
lea eax, [ebp - 0x20d8]
push eax
push 0x605478
lea ecx, [ebp - 0x2474]
call fcn.00511410
test al, al
je 0x49a11e
lea ecx, [ebp - 0x20d8]
call fcn.005167b0
test al, al
jne 0x49a11e
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x5fbfd4
lea ecx, [ebp - 0x20d8]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49a11e
push 0
push 1
push 1
push 0
push 0x605490
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
je 0x499e77
push 0
push 1
push 1
push 0
push 0x6054a0
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
jne 0x49a11e
push 0
push 1
push 1
push 0
push 0x6054b0
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
je 0x499eb3
push 0
push 1
push 1
push 0
push 0x6054dc
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
jne 0x49a11e
push 0
push 1
push 1
push 0
push 0x605508
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
je 0x499eef
push 0
push 1
push 1
push 0
push 0x605540
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
jne 0x49a11e
push 0
push 1
push 1
push 0
push 0x605578
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
je 0x499f2b
push 0
push 1
push 1
push 0
push 0x6055a4
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
jne 0x49a11e
push 0
push 1
push 1
push 0
push 0x6055cc
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
je 0x499f67
push 0
push 1
push 1
push 0
push 0x605604
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
jne 0x49a11e
push 0
push 0x605638
lea ecx, [ebp - 0x20d8]
mov dword [ebp - 0x6eb0], 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x28d4]
call fcn.00513c80
lea ecx, [ebp - 0x28d4]
xor esi, esi
call fcn.00513e20
test eax, eax
je 0x49b208
push 1
push esi
lea ecx, [ebp - 0x28d4]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x2730]
call fcn.00516b80
mov ecx, eax
call fcn.005167b0
test al, al
jne 0x49a015
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x604ad8
lea ecx, [edi + 0x24c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2730]
call fcn.005150b0
lea ecx, [ebp - 0x2730]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x49b1f8
lea ecx, [ebp - 0x28d4]
inc esi
call fcn.00513e20
cmp esi, eax
jb 0x499fa4
mov eax, dword [ebp - 0x6eb0]
push 0
push 0
push 0
push eax
lea ecx, [ebp - 0x279c]
call fcn.00516ab0
push eax
push 0x5feab0
lea ecx, [ebp - 0x20d8]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xf
push dword [eax + 0xa4]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x49a118
push 0
push 0
push 0
push 0
push 0
push 0x605478
push 0x5feab0
push 0
lea ecx, [ebp - 0x279c]
call fcn.00516ab0
push eax
push 0xf
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
cmp dword [ebp - 0x6eb0], 0
mov ecx, 0x604230
push 0
push 0
push 0
push 0x5f36f4
mov eax, 0x5fb204
cmove eax, ecx
lea ecx, [ebp - 0x279c]
push eax
push 0x604248
push 0x605640
call fcn.00516ab0
push eax
push 0x605678
push 0x60516c
lea ecx, [ebp - 0x20d8]
call fcn.00516ab0
push eax
push 0x605040
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov esi, dword [ebp - 0x6eac]
mov eax, dword [ebp - 0x6ec4]
lea ecx, [ebp - 0x6d28]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x22bc]
mov dword [ebp - 0x6ec4], eax
call fcn.005110a0
test al, al
jne 0x499d85
lea eax, [ebp - 0x20d8]
push eax
push 0x605478
lea ecx, [ebp - 0x22bc]
call fcn.00511410
test al, al
je 0x49a484
lea ecx, [ebp - 0x20d8]
call fcn.005167b0
test al, al
jne 0x49a484
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x5fbfd4
lea ecx, [ebp - 0x20d8]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49a484
push 0
push 1
push 1
push 0
push 0x605490
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
je 0x49a1e2
push 0
push 1
push 1
push 0
push 0x6054a0
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
jne 0x49a484
push 0
push 1
push 1
push 0
push 0x6054b0
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
je 0x49a21e
push 0
push 1
push 1
push 0
push 0x6054dc
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
jne 0x49a484
push 0
push 1
push 1
push 0
push 0x605508
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
je 0x49a25a
push 0
push 1
push 1
push 0
push 0x605540
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
jne 0x49a484
push 0
push 1
push 1
push 0
push 0x605578
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
je 0x49a296
push 0
push 1
push 1
push 0
push 0x6055a4
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
jne 0x49a484
push 0
push 1
push 1
push 0
push 0x6055cc
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
je 0x49a2d2
push 0
push 1
push 1
push 0
push 0x605604
lea ecx, [ebp - 0x20d8]
call fcn.00515510
test eax, eax
jne 0x49a484
push 0
push 0x605638
lea ecx, [ebp - 0x20d8]
mov dword [ebp - 0x6eb0], 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x28d4]
call fcn.00513c80
lea ecx, [ebp - 0x28d4]
xor esi, esi
call fcn.00513e20
test eax, eax
je 0x49b21f
nop
push 1
push esi
lea ecx, [ebp - 0x28d4]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x2730]
call fcn.00516b80
mov ecx, eax
call fcn.005167b0
test al, al
jne 0x49a381
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x604ad8
lea ecx, [edi + 0x24c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2730]
call fcn.005150b0
lea ecx, [ebp - 0x2730]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x49b20f
lea ecx, [ebp - 0x28d4]
inc esi
call fcn.00513e20
cmp esi, eax
jb 0x49a310
mov eax, dword [ebp - 0x6eb0]
push 0
push 0
push 0
push eax
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
push 0x5feab0
lea ecx, [ebp - 0x20d8]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xf
push dword [eax + 0xa4]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x49a484
push 0
push 0
push 0
push 0
push 0
push 0x605478
push 0x5feab0
push 0
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
push 0xf
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
cmp dword [ebp - 0x6eb0], 0
mov ecx, 0x604230
push 0
push 0
push 0
push 0x5f36f4
mov eax, 0x5fb204
cmove eax, ecx
lea ecx, [ebp - 0x2120]
push eax
push 0x604248
push 0x605640
call fcn.00516ab0
push eax
push 0x605678
push 0x60516c
lea ecx, [ebp - 0x20d8]
call fcn.00516ab0
push eax
push 0x605040
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6ec0], eax
call fcn.005110a0
mov esi, dword [ebp - 0x6eac]
test al, al
jne 0x499d10
mov eax, dword [ebp - 0x6ea8]
add eax, 4
sub dword [ebp - 0x6eb8], 1
mov dword [ebp - 0x6ea8], eax
jne 0x499cc0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.004ec300
lea ecx, [ebp - 0x6d28]
call fcn.00511770
lea ecx, [ebp - 0x279c]
call fcn.00516d50
lea ecx, [ebp - 0x2730]
call fcn.00516d50
lea ecx, [ebp - 0x20d8]
call fcn.00516d50
lea ecx, [ebp - 0x2474]
call fcn.005116a0
lea ecx, [ebp - 0x22bc]
call fcn.005116a0
lea ecx, [ebp - 0x28d4]
call fcn.00513e90
lea ecx, [ebp - 0x6c40]
call fcn.00402ef0
lea ecx, [ebp - 0x6c3c]
call fcn.00402ef0
lea ecx, [ebp - 0x2190]
call fcn.00516d50
lea ecx, [ebp - 0x2450]
call fcn.00516d50
lea ecx, [ebp - 0x2b70]
call fcn.00509f30
lea ecx, [ebp - 0x255c]
call fcn.00516d50
lea ecx, [ebp - 0x2314]
call fcn.00516d50
lea ecx, [ebp - 0x219c]
call fcn.00516d50
lea ecx, [ebp - 0x27b0]
call fcn.00516d50
lea ecx, [ebp - 0x2404]
call fcn.00516d50
lea ecx, [ebp - 0x2090]
mov byte [ebp - 4], 0x45
call fcn.00516d50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ff3a0
push 0x5ed514
lea ecx, [edi + 0x78]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00516b20
cmp byte [edi + 0x14], 0
jne 0x4adfea
test dword [edi + 0x34], 0x1000
jne 0x49b322
movsd xmm0, qword [edi + 0x298]
ucomisd xmm0, qword [0x6a40f0]
lahf
test ah, 0x44
jp 0x49b322
push 0
push 0x6056a0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x6056e8
push dword [eax + 0x38]
call fcn.004ed600
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.004ea4c0
push 0xc
lea ecx, [ebp - 0x21d8]
call fcn.00401d00
lea ecx, [ebp - 0x21d8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2884]
mov byte [ebp - 4], 0x69
call fcn.00401d00
lea ecx, [ebp - 0x2884]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2574]
mov byte [ebp - 4], 0x6a
call fcn.00401d00
lea ecx, [ebp - 0x2574]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x26a4]
mov byte [ebp - 4], 0x6b
call fcn.00401d00
lea ecx, [ebp - 0x26a4]
call fcn.00516ef0
push 0
push 0x605720
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x6c
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x49a926
lea eax, [edi + 0x3c]
push esi
mov ecx, eax
call fcn.00403630
mov ecx, eax
call fcn.005167b0
test al, al
jne 0x49a919
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x605760
push 0x605808
push esi
lea ecx, [edi + 0x3c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x21d8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49a919
xor eax, eax
mov dword [ebp - 0x6ec0], eax
lea ecx, [ebp - 0x6c1c]
push ecx
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005110a0
test al, al
je 0x49a919
push 8
push 0
push 0x604da4
push 0x6058a0
push 1
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x26a4]
call fcn.00516b80
mov ecx, eax
call fcn.00514230
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6058bc
lea ecx, [ebp - 0x26a4]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49a903
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x21d8]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2574]
call fcn.00516b20
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2574]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x26a4]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x18
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49a903
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x2574]
call fcn.00516ab0
push eax
push 0x18
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x6058f0
push dword [ebp - 0x6c1c]
lea ecx, [edi + 0x4c]
push 0x60592c
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x26a4]
call fcn.00516ab0
push eax
push 0x605960
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec0]
inc eax
mov dword [ebp - 0x6ec0], eax
cmp eax, 2
jb 0x49a766
inc esi
lea eax, [edi + 0x3c]
cmp esi, dword [edi + 0x30]
jb 0x49a6e6
cmp byte [edi + 0x14], 0
jne 0x49b2f2
push 0
push 0x605990
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x3c]
xor esi, esi
test eax, eax
je 0x49ac57
push esi
call fcn.00403630
mov ecx, eax
call fcn.005167b0
test al, al
jne 0x49ac45
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x605760
push 0x605808
push esi
lea ecx, [edi + 0x3c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x21d8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
lea eax, [ebp - 0x6c1c]
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005110a0
test al, al
je 0x49aae5
lea ecx, [edi + 0x84]
push 0
call fcn.00516ab0
push eax
push 0x605b20
push 0x5ff684
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49ac45
push 0
push 0
push 0
push 0
push 0x6059e8
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x5ff684
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49ac45
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x21d8]
call fcn.00516ab0
push eax
push 0x1a
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x6058f0
push 0x6059e8
push 0x605b5c
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push 0x6042a8
push 0x5ff684
push 0x605b74
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x605ba0
push 0x605808
push esi
lea ecx, [edi + 0x3c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.00516b20
lea ecx, [ebp - 0x21d8]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
je 0x49ac45
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x605b20
push 0x5ff830
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49ac45
push 0
push 0
push 0
push 0
push 0x605a90
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x5ff830
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49ac45
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x21d8]
call fcn.00516ab0
push eax
push 0x1a
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x6058f0
push 0x605a90
push 0x605b5c
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push 0x6042a8
push 0x5ff830
push 0x605b74
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x3c]
inc esi
cmp esi, eax
jb 0x49a952
lea ecx, [edi + 0x3c]
cmp byte [edi + 0x14], 0
jne 0x49b2f2
xor esi, esi
mov dword [ebp - 0x6f28], 0x605c3c
mov dword [ebp - 0x6f24], 0x605c64
mov dword [ebp - 0x6f60], 0x5ff9ec
mov dword [ebp - 0x6f5c], 0x5ffb00
mov dword [ebp - 0x6f0c], 0x605c90
mov dword [ebp - 0x6f08], 0x605d18
mov dword [ebp - 0x6eac], esi
test eax, eax
je 0x49aea4
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x605da8
push 0x605e50
push 0x605ee8
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.00516b20
lea ecx, [ebp - 0x21d8]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
je 0x49ae87
xor esi, esi
mov dword [ebp - 0x6ec0], esi
nop
cmp byte [edi + 0x14], 0
jne 0x49ae81
lea ecx, [ebp - 0x21d8]
call fcn.00516ab0
mov edx, dword [ebp + esi*4 - 0x6f28]
mov ecx, eax
call fcn.0050e4c0
test al, al
je 0x49ae69
mov esi, dword [ebp + esi*4 - 0x6f60]
lea ecx, [edi + 0x84]
push 0
call fcn.00516ab0
push eax
push 0x605b20
push esi
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49ae69
mov eax, dword [ebp - 0x6ec0]
lea ecx, [edi + 0x4c]
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6f0c]
push dword [ebp - 0x6eac]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push esi
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49ae69
mov eax, dword [ebp - 0x6ec0]
lea ecx, [edi + 0x4c]
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6f28]
push dword [ebp - 0x6eac]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x21d8]
call fcn.00516ab0
push eax
push 0x1a
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
mov eax, dword [ebp - 0x6ec0]
lea ecx, [edi + 0x4c]
push 0
push 0
push 0
push 0
push 0
push 0x6058f0
push dword [ebp + eax*4 - 0x6f0c]
push 0x605b5c
push dword [ebp - 0x6eac]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push 0x6042a8
push esi
push 0x605b74
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec0]
inc eax
mov dword [ebp - 0x6ec0], eax
mov esi, eax
cmp eax, 2
jb 0x49ad10
mov esi, dword [ebp - 0x6eac]
inc esi
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6eac], esi
cmp esi, dword [edi + 0x30]
jb 0x49acb0
cmp byte [edi + 0x14], 0
jne 0x49b2f2
xor ecx, ecx
mov dword [ebp - 0x6f28], 0x605f84
mov dword [ebp - 0x6f24], 0x605fa0
lea eax, [edi + 0x84]
mov dword [ebp - 0x6f60], 0x5ffc2c
mov dword [ebp - 0x6f5c], 0x5ffc58
mov dword [ebp - 0x6f0c], 0x605fc8
mov dword [ebp - 0x6f08], 0x606050
mov dword [ebp - 0x6ec0], ecx
nop
mov esi, dword [ebp + ecx*4 - 0x6f60]
mov ecx, eax
push 0
call fcn.00516ab0
push eax
push 0x605b20
push esi
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49b02e
mov eax, dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2568]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6f28]
push 0x6060e0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x21d8]
call fcn.00516b20
lea ecx, [ebp - 0x21d8]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x49b02e
mov eax, dword [ebp - 0x6ec0]
mov ecx, edi
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6f0c]
mov eax, dword [edi + 8]
push 0x5feab0
push esi
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49b02e
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feab0
lea ecx, [ebp - 0x21d8]
call fcn.00516ab0
push eax
push 0
push 0x1a
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
mov eax, dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x1f80]
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6058f0
push dword [ebp + eax*4 - 0x6f0c]
push 0x605b5c
push 0x60516c
push esi
push 0x605b74
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov ecx, dword [ebp - 0x6ec0]
lea eax, [edi + 0x84]
inc ecx
mov dword [ebp - 0x6ec0], ecx
cmp ecx, 2
jb 0x49aef0
push 4
lea ecx, [ebp - 0x2380]
call fcn.00401d20
lea ecx, [ebp - 0x2380]
call fcn.00511760
push 4
lea ecx, [ebp - 0x2438]
mov byte [ebp - 4], 0x6d
call fcn.00401d20
lea ecx, [ebp - 0x2438]
call fcn.00511760
xor esi, esi
mov byte [ebp - 4], 0x6e
cmp dword [edi + 0x30], esi
jbe 0x49b2c9
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6061d0
push 0x606258
push 0x6062d0
push esi
lea ecx, [edi + 0x3c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x21d8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2380]
call fcn.005116f0
test al, al
je 0x49b2bf
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec0], 0
push eax
push 0
lea ecx, [ebp - 0x2380]
call fcn.005110a0
test al, al
je 0x49b2bf
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6062f4
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x21d8]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2574]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x2574]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2438]
call fcn.005116f0
test al, al
je 0x49b1cb
lea ecx, [ebp - 0x2438]
call fcn.00510fa0
cmp eax, 2
jb 0x49b1cb
push 0
push 0
push 0
push 0
push 0x606148
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x5ffe78
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
jne 0x49b226
mov eax, dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2380]
mov dword [ebp - 0x6ec0], eax
call fcn.005110a0
test al, al
jne 0x49b120
jmp 0x49b2bf
mov eax, 1
mov dword [ebp - 0x6eb0], eax
jmp 0x49a02f
xor eax, eax
jmp 0x49a02f
mov eax, 1
mov dword [ebp - 0x6eb0], eax
jmp 0x49a39b
xor eax, eax
jmp 0x49a39b
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x2574]
call fcn.00516ab0
push eax
push 0x1a
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6058f0
push 0x606148
push 0x605b5c
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push 0x6042a8
push 0x606330
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
inc esi
cmp esi, dword [edi + 0x30]
jb 0x49b090
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
lea ecx, [ebp - 0x2438]
call fcn.005116a0
lea ecx, [ebp - 0x2380]
call fcn.005116a0
lea ecx, [ebp - 0x26a4]
call fcn.00516d50
lea ecx, [ebp - 0x2574]
call fcn.00516d50
lea ecx, [ebp - 0x2884]
call fcn.00516d50
lea ecx, [ebp - 0x21d8]
mov byte [ebp - 4], 0x45
call fcn.00516d50
cmp byte [edi + 0x14], 0
jne 0x4adfea
test dword [edi + 0x34], 0x1000
jne 0x49db44
push 0
push 0x606390
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x6056e8
push dword [eax + 0x38]
call fcn.004ed600
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.004ea4c0
push 0xc
lea ecx, [ebp - 0x20e4]
call fcn.00401d00
lea ecx, [ebp - 0x20e4]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2028]
mov byte [ebp - 4], 0x6f
call fcn.00401d00
lea ecx, [ebp - 0x2028]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x23bc]
mov byte [ebp - 4], 0x70
call fcn.00401d00
lea ecx, [ebp - 0x23bc]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2000]
mov byte [ebp - 4], 0x71
call fcn.00401d00
lea ecx, [ebp - 0x2000]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x22d4]
mov byte [ebp - 4], 0x72
call fcn.00401d00
lea ecx, [ebp - 0x22d4]
call fcn.00516ef0
push 0x24
lea ecx, [ebp - 0x2540]
mov byte [ebp - 4], 0x73
call fcn.00402030
lea ecx, [ebp - 0x2540]
call fcn.004e6cd0
mov byte [ebp - 4], 0x74
xor esi, esi
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
mov dword [ebp - 0x6ea8], esi
push dword [eax + 0xa8]
call fcn.004ec300
push esi
push 0x6063d0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov dword [ebp - 0x6eb8], esi
cmp dword [edi + 0x30], esi
jbe 0x49ba76
mov esi, dword [ebp - 0x6ed0]
lea eax, [edi + 0x44]
mov dword [ebp - 0x6eac], esi
lea ecx, [ebp - 0x22d4]
mov dword [ebp - 0x6eb0], eax
call fcn.005167b0
test al, al
je 0x49b4ba
lea eax, [ebp - 0x22d4]
push eax
push 1
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push dword [ebp - 0x6eb8]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.004c1e30
mov esi, dword [ebp - 0x6eac]
lea eax, [edi + 0x44]
mov dword [ebp - 0x6eb0], eax
cmp byte [edi + 0x14], 0
jne 0x49ba70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606420
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb0]
push eax
push dword [ebp - 0x6eb8]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x4c68]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x4c68]
call fcn.00401660
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x75
call fcn.00515870
lea ecx, [ebp - 0x4c68]
call fcn.004017a0
test al, al
je 0x49ba3c
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4c68]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516e30
push 0x60645c
lea ecx, [ebp - 0x2028]
call fcn.00516da0
test al, al
je 0x49b5ae
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x2028]
call fcn.00515510
cmp eax, 1
jne 0x49ba20
inc dword [ebp - 0x6ea8]
lea ecx, [ebp - 0x4c68]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
call fcn.00401810
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516b20
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e6ab0
test al, al
je 0x49ba20
lea eax, [ebp - 0x2000]
push eax
push 0x5f4ad4
push 0x6064a8
lea ecx, [ebp - 0x2540]
call fcn.004e62a0
test eax, eax
je 0x49b7d8
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49b7d8
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49b7d8
push 0x6064f8
lea ecx, [ebp - 0x2000]
call fcn.00516de0
test al, al
jne 0x49b7d8
push 0
push 1
push 1
push 0
push 0x606510
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49b7d8
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49b7d8
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x606544
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49b7d8
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x606580
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49b7d8
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
push 0x6064a8
push 0x6f
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
push 0x605b5c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
push 0x6065c8
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea eax, [ebp - 0x2a68]
mov dword [ebp - 0x6e58], 0
push eax
push 0x5f4ad4
xorps xmm0, xmm0
lea ecx, [ebp - 0x2540]
push 0x6065e8
movups xmmword [ebp - 0x6e68], xmm0
call fcn.004e63a0
test al, al
je 0x49ba20
lea eax, [ebp - 0x2a68]
push eax
lea eax, [ebp - 0x6e68]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e59f0
test al, al
je 0x49ba20
lea eax, [ebp - 0x2000]
push eax
lea eax, [ebp - 0x6e68]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e5d00
test eax, eax
je 0x49b9ff
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49ba20
push eax
push 1
push 1
push eax
push 0x606614
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49ba20
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49ba20
push eax
push 1
push 1
push eax
push 0x606638
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49ba20
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49ba20
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x606654
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49b9ff
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x606680
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x49b9f9
mov ecx, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
push 0x6065e8
push 0x6f
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eac]
mov ecx, esi
push eax
push 0x605b5c
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
push 0x60669c
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x49b9ff
mov esi, dword [ebp - 0x6eac]
lea eax, [ebp - 0x2a68]
push eax
lea eax, [ebp - 0x6e68]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e59f0
test al, al
jne 0x49b831
lea ecx, [ebp - 0x4c68]
call fcn.00401760
test al, al
jne 0x49b560
lea eax, [edi + 0x44]
mov dword [ebp - 0x6eb0], eax
lea ecx, [ebp - 0x4c68]
mov byte [ebp - 4], 0x74
call fcn.004016b0
mov eax, dword [ebp - 0x6eb8]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eac], esi
cmp eax, dword [edi + 0x30]
mov dword [ebp - 0x6eb8], eax
mov eax, dword [ebp - 0x6eb0]
jb 0x49b462
mov esi, dword [ebp - 0x6ea8]
cmp byte [edi + 0x14], 0
jne 0x49dafe
test esi, esi
jne 0x49baa9
lea ecx, [ebp - 0x22d4]
call fcn.005167b0
test al, al
je 0x49baa9
push esi
push 0x6066d0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
jmp 0x49dafe
push 0
push 0x606720
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6ea8], 0
jbe 0x49be40
mov esi, dword [ebp - 0x6ed0]
mov dword [ebp - 0x6eb0], esi
nop dword [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x49dafe
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606420
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push eax
push dword [ebp - 0x6ea8]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x4ec0]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x4ec0]
call fcn.00401660
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x76
call fcn.00515870
lea ecx, [ebp - 0x4ec0]
call fcn.004017a0
test al, al
je 0x49be12
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4ec0]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516e30
push 0x60645c
lea ecx, [ebp - 0x2028]
call fcn.00516da0
test al, al
je 0x49bbce
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x2028]
call fcn.00515510
cmp eax, 1
jne 0x49bdff
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
lea ecx, [ebp - 0x4ec0]
call fcn.00401810
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516b20
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e6ab0
test al, al
je 0x49bdff
lea eax, [ebp - 0x2000]
push eax
push 0x5f4ad4
push 0x606760
lea ecx, [ebp - 0x2540]
call fcn.004e62a0
test eax, eax
je 0x49bdff
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49bdff
push eax
push 1
push 1
push eax
push 0x606614
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49bdff
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49bdff
push eax
push 1
push 1
push eax
push 0x606638
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49bdff
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49bdff
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6067d0
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49bdff
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x606810
push 0
push 0x70
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x49bdf9
mov ecx, dword [ebp - 0x6eb0]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
push 0x606840
push 0x70
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eb0]
mov ecx, esi
push eax
push 0x605b5c
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
push 0x6068a0
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x49bdff
mov esi, dword [ebp - 0x6eb0]
lea ecx, [ebp - 0x4ec0]
call fcn.00401760
test al, al
jne 0x49bb80
lea ecx, [ebp - 0x4ec0]
mov byte [ebp - 4], 0x74
call fcn.004016b0
mov eax, dword [ebp - 0x6ea8]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eb0], esi
mov dword [ebp - 0x6ea8], eax
cmp eax, dword [edi + 0x30]
jb 0x49bae0
cmp byte [edi + 0x14], 0
jne 0x49dafe
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6068e8
lea ecx, [edi + 0x24c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x606940
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6ea8], 0
jbe 0x49c461
mov esi, dword [ebp - 0x6ed0]
mov dword [ebp - 0x6eb8], esi
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x49dafe
push 0xc
lea ecx, [ebp - 0x270c]
call fcn.00401d00
lea ecx, [ebp - 0x270c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2790]
mov byte [ebp - 4], 0x77
call fcn.00401d00
lea ecx, [ebp - 0x2790]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2724]
mov byte [ebp - 4], 0x78
call fcn.00401d00
lea ecx, [ebp - 0x2724]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2674]
mov byte [ebp - 4], 0x79
call fcn.00401d00
lea ecx, [ebp - 0x2674]
call fcn.00516ef0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606420
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 0x7a
call fcn.00516ab0
push eax
push dword [ebp - 0x6ea8]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x40b0]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40b0]
call fcn.00401660
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x7b
call fcn.00515870
lea ecx, [ebp - 0x40b0]
call fcn.004017a0
test al, al
je 0x49c407
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x40b0]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516e30
push 0x60645c
lea ecx, [ebp - 0x2028]
call fcn.00516da0
test al, al
je 0x49c00e
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x2028]
call fcn.00515510
cmp eax, 1
jne 0x49c3f4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
lea ecx, [ebp - 0x40b0]
call fcn.00401810
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516b20
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e6ab0
test al, al
je 0x49c3f4
lea eax, [ebp - 0x2a90]
mov dword [ebp - 0x6e6c], 0
push eax
push 0x5f4ad4
xorps xmm0, xmm0
lea ecx, [ebp - 0x2540]
push 0x606974
movups xmmword [ebp - 0x6e7c], xmm0
call fcn.004e63a0
test al, al
je 0x49c3f4
lea eax, [ebp - 0x2a90]
push eax
lea eax, [ebp - 0x6e7c]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e5dc0
test al, al
je 0x49c3f4
nop word [eax + eax]
lea eax, [ebp - 0x270c]
push eax
lea eax, [ebp - 0x6e7c]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e6360
test al, al
je 0x49c3d3
lea ecx, [ebp - 0x270c]
call fcn.00516ab0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x49c3cd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6069a0
lea ecx, [ebp - 0x270c]
call fcn.00516ab0
push eax
push 0x6069c4
lea ecx, [ebp - 0x2724]
call fcn.00516b20
lea eax, [ebp - 0x2790]
push eax
push 0x5f4ad4
lea ecx, [ebp - 0x2724]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e62a0
test eax, eax
je 0x49c3cd
lea ecx, [ebp - 0x2790]
call fcn.00516ab0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x49c3cd
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6058bc
lea ecx, [ebp - 0x2790]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49c3cd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6069f4
lea ecx, [ebp - 0x270c]
call fcn.00516ab0
push eax
push 0x6069c4
lea ecx, [ebp - 0x2724]
call fcn.00516b20
lea eax, [ebp - 0x2674]
push eax
push 0x5f4ad4
lea ecx, [ebp - 0x2724]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e62a0
test eax, eax
je 0x49c278
push 0
push 1
push 1
push 5
push 0x5f0150
lea ecx, [ebp - 0x2674]
call fcn.00515510
test eax, eax
jne 0x49c278
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x606a04
push 1
lea ecx, [ebp - 0x40b0]
call fcn.00401810
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2674]
call fcn.005150b0
lea ecx, [ebp - 0x2674]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x49c3cd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x270c]
call fcn.00516ab0
push eax
push 0x6069c4
lea ecx, [ebp - 0x2724]
call fcn.00516b20
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2674]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2790]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x71
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x49c3cd
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2674]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb8]
push eax
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2724]
call fcn.00516ab0
push eax
push 0x71
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2674]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eb8]
mov ecx, esi
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x606a20
lea ecx, [ebp - 0x270c]
call fcn.00516ab0
push eax
push 0x5f83bc
lea ecx, [ebp - 0x2790]
call fcn.00516ab0
push eax
push 0x606a44
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x49c3d3
mov esi, dword [ebp - 0x6eb8]
lea eax, [ebp - 0x2a90]
push eax
lea eax, [ebp - 0x6e7c]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e5dc0
test al, al
jne 0x49c0d0
lea ecx, [ebp - 0x40b0]
call fcn.00401760
test al, al
jne 0x49bfc0
lea ecx, [ebp - 0x40b0]
call fcn.004016b0
lea ecx, [ebp - 0x2674]
call fcn.00516d50
lea ecx, [ebp - 0x2724]
call fcn.00516d50
lea ecx, [ebp - 0x2790]
call fcn.00516d50
lea ecx, [ebp - 0x270c]
mov byte [ebp - 4], 0x74
call fcn.00516d50
mov eax, dword [ebp - 0x6ea8]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eb8], esi
mov dword [ebp - 0x6ea8], eax
cmp eax, dword [edi + 0x30]
jb 0x49beb0
cmp byte [edi + 0x14], 0
jne 0x49dafe
push 0
push 0x606a70
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6cd0]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6cd8], eax
mov dword [ebp - 0x6cd4], 0x72
call fcn.00516e80
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x7c
call fcn.00516ab0
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6cc4], eax
mov dword [ebp - 0x6cc0], 0
call fcn.00516ab0
mov dword [ebp - 0x6cbc], eax
lea ecx, [ebp - 0x6cb0]
lea eax, [ebp - 0x1ff0]
push 1
mov dword [ebp - 0x6cb8], eax
mov eax, dword [edi + 4]
push 0x606ac0
mov dword [ebp - 0x6cb4], eax
call fcn.00516e80
push 0xc
lea ecx, [ebp - 0x224c]
mov byte [ebp - 4], 0x7d
call fcn.00401d00
lea ecx, [ebp - 0x224c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2214]
mov byte [ebp - 4], 0x7e
call fcn.00401d00
lea ecx, [ebp - 0x2214]
call fcn.00516ef0
mov byte [ebp - 4], 0x7f
cmp byte [edi + 0x14], 0
jne 0x49dadd
xor eax, eax
mov dword [ebp - 0x6eb0], eax
cmp dword [edi + 0x30], eax
jbe 0x49c6d7
cmp byte [edi + 0x14], 0
jne 0x49dadd
push eax
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516cc0
cmp eax, 3
jl 0x49c6c1
lea eax, [ebp - 0x6cd0]
push eax
push 1
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push dword [ebp - 0x6eb0]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.004c1e30
test al, al
je 0x49c6c1
mov esi, dword [ebp - 0x6eb0]
lea ecx, [edi + 0x4c]
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6cc0], eax
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x224c]
call fcn.00516b20
lea ecx, [ebp - 0x224c]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x49c6c1
lea ecx, [ebp - 0x224c]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6cd8]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x49dadd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x224c]
call fcn.00516b20
lea ecx, [ebp - 0x224c]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x49c6c1
push 0
lea ecx, [ebp - 0x224c]
call fcn.005167d0
lea ecx, [ebp - 0x224c]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6cd8]
mov ecx, edi
push eax
call fcn.004aed70
mov eax, dword [ebp - 0x6eb0]
inc eax
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [edi + 0x30]
jb 0x49c553
cmp byte [edi + 0x14], 0
jne 0x49dadd
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6cc0], 0x5feab0
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6cd8]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x49dadd
lea eax, [ebp - 0x2668]
push eax
lea ecx, [ebp - 0x224c]
call fcn.00516e00
push 0
lea ecx, [ebp - 0x224c]
call fcn.005167d0
lea ecx, [ebp - 0x224c]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6cd8]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x49dadd
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x49c7b7
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606ae0
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x49c770
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606b70
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x49c81e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x606b70
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp dword [ebp - 0x6ed4], 0
mov dword [ebp - 0x6ec4], 0
jbe 0x49ca27
mov eax, dword [ebp - 0x6ecc]
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49ca05
cmp byte [edi + 0x14], 0
jne 0x49dadd
lea eax, [ebp - 0x2214]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x49ca05
push 0
push 1
push 1
push 0
push 0x606bfc
lea ecx, [ebp - 0x2214]
call fcn.00515510
lea ecx, [ebp - 0x2214]
mov dword [ebp - 0x6ee8], eax
call fcn.00516cc0
mov edx, dword [ebp - 0x6ee8]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x49ca05
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2214]
call fcn.00515800
push 3
lea ecx, [ebp - 0x2214]
call fcn.00514ca0
lea ecx, [ebp - 0x2214]
call fcn.005167b0
test al, al
jne 0x49ca05
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x604150
lea ecx, [ebp - 0x2214]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49ca05
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2214]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600250
push 0
push 0x72
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49ca05
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0x72
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2214]
call fcn.00516ab0
push eax
push 0x606c18
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6ea8]
jb 0x49c850
cmp byte [edi + 0x14], 0
jne 0x49dadd
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x49ca97
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606c70
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x49ca50
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606cb8
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x49cafe
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x606cb8
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
push 0
push 0x606d00
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov esi, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], 0
test esi, esi
je 0x49cd5a
mov eax, dword [ebp - 0x6ecc]
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x49cd54
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
lea eax, [ebp - 0x2000]
push eax
push 0x600404
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x49cd32
lea eax, [ebp - 0x21b4]
mov dword [ebp - 0x21b4], 0
push eax
push 0x6004a4
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x49cbb6
cmp dword [ebp - 0x21b4], 0
jne 0x49cd32
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49cd32
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49cd32
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49cd32
push eax
push 1
push 1
push eax
push 0x606510
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49cd32
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x606d40
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49cd32
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600404
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49cd32
push 0
push 0
push 0
push 0
push 0
push 0x600404
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0x74
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
push 0x606d80
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6ea8]
jb 0x49cb40
mov esi, dword [ebp - 0x6ed4]
cmp byte [edi + 0x14], 0
jne 0x49dadd
push 0xc
lea ecx, [ebp - 0x2680]
call fcn.00401d00
lea ecx, [ebp - 0x2680]
call fcn.00516ef0
mov byte [ebp - 4], 0x80
mov dword [ebp - 0x6ec4], 0
test esi, esi
je 0x49d029
mov eax, dword [ebp - 0x6ecc]
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
cmp byte [edi + 0x14], 0
jne 0x49d023
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
lea eax, [ebp - 0x2000]
push eax
push 0x600544
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x49d001
lea eax, [ebp - 0x21b4]
mov dword [ebp - 0x21b4], 0
push eax
push 0x600644
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x49ce1c
cmp dword [ebp - 0x21b4], 0
je 0x49d001
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49d001
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49d001
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49d001
push eax
push 1
push 1
push eax
push 0x606510
lea ecx, [ebp - 0x2000]
call fcn.00515510
test eax, eax
jne 0x49d001
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x606d40
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49d001
lea eax, [ebp - 0x2680]
push eax
push 0x600610
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x49d001
lea ecx, [ebp - 0x2680]
call fcn.005167b0
test al, al
jne 0x49d001
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606dd0
lea ecx, [ebp - 0x2680]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2214]
call fcn.00516b20
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2214]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49d001
push 0
push 0
push 0
push 0
push 0
push 0x600544
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0x74
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
push 0x606df8
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6ea8]
jb 0x49cda6
mov esi, dword [ebp - 0x6ed4]
cmp byte [edi + 0x14], 0
jne 0x49dad2
mov dword [ebp - 0x6ec4], 0
test esi, esi
je 0x49d295
mov eax, dword [ebp - 0x6ecc]
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x49dad2
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49d273
lea eax, [ebp - 0x21b4]
mov dword [ebp - 0x21b4], 0
push eax
push 0x606e58
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x49d273
cmp dword [ebp - 0x21b4], 4
jne 0x49d273
mov ecx, dword [ebp - 0x6ea8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606e7c
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49d273
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec0], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00511000
test al, al
je 0x49d273
lea eax, [ebp - 0x2000]
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x49d24b
lea ecx, [ebp - 0x2000]
call fcn.005167b0
test al, al
jne 0x49d24b
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600800
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49d24b
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0x74
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2000]
call fcn.00516ab0
push eax
push 0x606ea8
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6ec0], eax
call fcn.00511000
test al, al
jne 0x49d142
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6ea8]
jb 0x49d060
cmp byte [edi + 0x14], 0
jne 0x49dad2
push 0
push 0x606ef0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6ea8], 0
jbe 0x49d69d
mov esi, dword [ebp - 0x6ed0]
nop dword [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x49dad2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606420
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push eax
push dword [ebp - 0x6ea8]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x4308]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x4308]
call fcn.00401660
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x81
call fcn.00515870
lea ecx, [ebp - 0x4308]
call fcn.004017a0
test al, al
je 0x49d675
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4308]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516e30
push 0x60645c
lea ecx, [ebp - 0x2028]
call fcn.00516da0
test al, al
je 0x49d3be
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x2028]
call fcn.00515510
cmp eax, 1
jne 0x49d662
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
lea ecx, [ebp - 0x4308]
call fcn.00401810
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516b20
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x49d510
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x605b20
push 0x600904
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49d510
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600904
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49d662
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
push 0
push 0x73
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
push 0x605b5c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x600904
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x605b20
push 0x600a00
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49d662
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606f84
push 1
lea ecx, [ebp - 0x4308]
call fcn.00401810
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516b20
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x49d662
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600a00
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49d662
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
push 0
push 0x73
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
push 0x605b5c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x600a00
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x4308]
call fcn.00401760
test al, al
jne 0x49d370
lea ecx, [ebp - 0x4308]
mov byte [ebp - 4], 0x80
call fcn.004016b0
mov eax, dword [ebp - 0x6ea8]
add esi, 0xc
inc eax
mov dword [ebp - 0x6ea8], eax
cmp eax, dword [edi + 0x30]
jb 0x49d2d0
cmp byte [edi + 0x14], 0
jne 0x49dad2
lea eax, [ebp - 0x22d4]
push eax
lea ecx, [ebp - 0x2028]
call fcn.00516e00
push 1
lea ecx, [ebp - 0x2028]
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606fa0
lea ecx, [ebp - 0x2028]
call fcn.00515270
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x49d88f
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x605b20
push 0x600ad0
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49d88f
push 0
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2540]
call fcn.004e6ab0
test al, al
je 0x49d88f
lea eax, [ebp - 0x29f4]
push eax
push 0x5f4ad4
push 0x6064a8
lea ecx, [ebp - 0x2540]
call fcn.004e63a0
test al, al
jne 0x49d7d2
lea eax, [ebp - 0x29f4]
push eax
push 0x5f4ad4
push 0x6065e8
lea ecx, [ebp - 0x2540]
call fcn.004e63a0
test al, al
jne 0x49d7d2
lea eax, [ebp - 0x29f4]
push eax
push 0x5f4ad4
push 0x600088
lea ecx, [ebp - 0x2540]
call fcn.004e63a0
test al, al
jne 0x49d7d2
lea eax, [ebp - 0x29f4]
push eax
push 0x5f4ad4
push 0x606974
lea ecx, [ebp - 0x2540]
call fcn.004e63a0
test al, al
je 0x49d88f
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x5feab0
push 0x600ad0
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x49d88f
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feab0
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
push 0
push 0x73
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2028]
call fcn.00516ab0
push eax
push 0x605b5c
push 0x60516c
push 0x606fc8
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x605b20
push 0x600bd0
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49dad2
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x49d917
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606c70
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x49d8d0
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606c70
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x49d97e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x606c70
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp dword [ebp - 0x6ed4], 0
mov dword [ebp - 0x6ec4], 0
jbe 0x49dabf
mov eax, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
mov ecx, esi
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
je 0x49daa3
cmp byte [edi + 0x14], 0
jne 0x49dabf
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600bd0
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49daa3
mov ecx, dword [ebp - 0x6ea8]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0
mov ecx, esi
call fcn.00516ab0
push eax
push 0x73
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x605b5c
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0x6042a8
push 0x600bd0
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6ec4], eax
cmp eax, dword [ebp - 0x6ed4]
jb 0x49d9a3
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
lea ecx, [ebp - 0x2680]
call fcn.00516d50
lea ecx, [ebp - 0x2214]
call fcn.00516d50
lea ecx, [ebp - 0x224c]
call fcn.00516d50
lea ecx, [ebp - 0x6cd8]
call fcn.00402930
lea ecx, [ebp - 0x2540]
call fcn.00401e30
lea ecx, [ebp - 0x22d4]
call fcn.00516d50
lea ecx, [ebp - 0x2000]
call fcn.00516d50
lea ecx, [ebp - 0x23bc]
call fcn.00516d50
lea ecx, [ebp - 0x2028]
call fcn.00516d50
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x45
call fcn.00516d50
cmp byte [edi + 0x14], 0
jne 0x4adfea
test dword [edi + 0x34], 0x1000
jne 0x4a0e43
push 0
push 0x607020
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x607070
push dword [eax + 0x38]
call fcn.004ed600
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x28
push dword [eax + 0x34]
call fcn.004ea4c0
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6f50], 0x6070ac
mov dword [ebp - 0x6f4c], 0x6070bc
mov dword [ebp - 0x6f48], 0x6070cc
mov dword [ebp - 0x6f44], 0x6070e4
mov dword [ebp - 0x6f40], 0x6070f8
mov dword [ebp - 0x6f3c], 0x60710c
mov dword [ebp - 0x6f38], 0x6064f8
mov dword [ebp - 0x6f34], 0x60652c
mov dword [ebp - 0x6f70], 0x600cb4
mov dword [ebp - 0x6f6c], 0x600cf0
mov dword [ebp - 0x6f68], 0x600cd8
mov dword [ebp - 0x6f64], 0x600c9c
mov dword [ebp - 0x6f60], 0x600d74
mov dword [ebp - 0x6f5c], 0x600df4
test eax, eax
je 0x49dc7d
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607128
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x49dc36
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607180
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x49dce4
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x607180
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
push 0xc
lea ecx, [ebp - 0x2010]
call fcn.00401d00
lea ecx, [ebp - 0x2010]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x23c8]
mov byte [ebp - 4], 0x82
call fcn.00401d00
lea ecx, [ebp - 0x23c8]
call fcn.00516ef0
mov byte [ebp - 4], 0x83
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
push 0
push 0x6071e0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov esi, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], 0
test esi, esi
je 0x49df77
mov esi, dword [ebp - 0x6ed0]
mov eax, dword [ebp - 0x6ecc]
sub eax, esi
mov dword [ebp - 0x6eac], esi
mov dword [ebp - 0x6f24], eax
cmp byte [edi + 0x14], 0
jne 0x49df71
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6ee8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49df49
xor eax, eax
mov dword [ebp - 0x6ec0], eax
nop
lea ecx, [ebp - 0x2010]
push ecx
push dword [ebp + eax*4 - 0x6f70]
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x49df2d
lea ecx, [ebp - 0x2010]
call fcn.005167b0
test al, al
jne 0x49df2d
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x60723c
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49df2d
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6f50]
lea ecx, [ebp - 0x2010]
call fcn.00515510
dec eax
cmp eax, 0x10
jbe 0x49df2d
inc esi
cmp esi, 8
jb 0x49de14
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
mov eax, dword [ebp - 0x6ec0]
mov ecx, edi
mov esi, dword [ebp + eax*4 - 0x6f70]
mov eax, dword [edi + 8]
push esi
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
je 0x49df2d
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
push 0
push esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ee8]
push eax
push 0
call fcn.00516ab0
push eax
push 0x1f
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
push 0x607260
call fcn.00516ab0
push eax
push 0x6042a8
push esi
push 0x605040
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec0]
inc eax
mov dword [ebp - 0x6ec0], eax
cmp eax, 6
jb 0x49ddb0
mov esi, dword [ebp - 0x6eac]
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eac], esi
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6f24]
jb 0x49dd73
mov esi, dword [ebp - 0x6ed4]
cmp byte [edi + 0x14], 0
jne 0x4a0e29
push 0x18
lea ecx, [ebp - 0x265c]
call fcn.00401d30
lea ecx, [ebp - 0x265c]
call fcn.00513f30
mov byte [ebp - 4], 0x84
mov dword [ebp - 0x6ec4], 0
test esi, esi
je 0x49e258
mov esi, dword [ebp - 0x6ed0]
mov eax, dword [ebp - 0x6ecc]
sub eax, esi
mov dword [ebp - 0x6eac], esi
mov dword [ebp - 0x6f08], eax
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a0e1e
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6ee8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
lea ecx, [ebp - 0x1f74]
call fcn.005116c0
test eax, eax
je 0x49e230
lea eax, [ebp - 0x2010]
push eax
push 0x600e2c
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x49e230
push 1
push 0x5f3998
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x265c]
call fcn.00513c80
lea ecx, [ebp - 0x265c]
mov dword [ebp - 0x6ec0], 0
call fcn.00513e20
test eax, eax
je 0x49e230
nop dword [eax]
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x265c]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x2010]
call fcn.00516e30
lea ecx, [ebp - 0x2010]
call fcn.005167b0
test al, al
jne 0x49e213
mov byte [ebp - 0x6ec5], 1
xor esi, esi
nop dword [eax]
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6f50]
lea ecx, [ebp - 0x2010]
call fcn.00515510
dec eax
mov ecx, 0x10
cmp ecx, eax
lea ecx, [edi + 0x84]
push 0
sbb al, al
and byte [ebp - 0x6ec5], al
call fcn.00516ab0
push eax
push 0x60723c
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49e20d
cmp byte [ebp - 0x6ec5], al
je 0x49e20d
inc esi
cmp esi, 7
jb 0x49e0b0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600e2c
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x49e20d
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
push 0
push 0x600e2c
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ee8]
push eax
push 0
call fcn.00516ab0
push eax
push 0x1f
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eac]
mov ecx, esi
push eax
push 0x607260
call fcn.00516ab0
push eax
push 0x6042a8
push 0x600e2c
push 0x605040
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x49e213
mov esi, dword [ebp - 0x6eac]
inc dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x265c]
call fcn.00513e20
cmp dword [ebp - 0x6ec0], eax
jb 0x49e070
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eac], esi
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6f08]
jb 0x49dfd0
cmp byte [edi + 0x14], 0
jne 0x4a0e1e
push 4
lea ecx, [ebp - 0x1fc4]
call fcn.00401d20
lea ecx, [ebp - 0x1fc4]
call fcn.00511760
push 4
lea ecx, [ebp - 0x2084]
mov byte [ebp - 4], 0x85
call fcn.00401d20
lea ecx, [ebp - 0x2084]
call fcn.00511760
mov byte [ebp - 4], 0x86
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x49e2f9
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607278
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x49e2b2
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6072e0
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x49e360
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6072e0
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
push 0xc
lea ecx, [ebp - 0x2108]
call fcn.00401d00
lea ecx, [ebp - 0x2108]
call fcn.00516ef0
push 0
push 0x607350
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x87
call fcn.00504a30
cmp dword [ebp - 0x6ed4], 0
mov dword [ebp - 0x6ec4], 0
jbe 0x49e6ba
mov esi, dword [ebp - 0x6ed0]
mov eax, dword [ebp - 0x6ecc]
sub eax, esi
mov dword [ebp - 0x6eac], esi
mov dword [ebp - 0x6ea8], eax
nop
cmp byte [edi + 0x14], 0
jne 0x4a0dfd
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49e692
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec0], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005110a0
test al, al
je 0x49e692
mov ecx, dword [ebp - 0x6ea8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [ecx + esi]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc4]
call fcn.005116f0
test al, al
je 0x49e66a
lea eax, [ebp - 0x2108]
push eax
push 0x5fa734
lea ecx, [ebp - 0x1fc4]
call fcn.00511410
push 0
lea ecx, [ebp - 0x2108]
call fcn.00516d60
cmp word [eax], 0x40
jne 0x49e4dd
push 0
lea ecx, [ebp - 0x2108]
call fcn.00516ab0
push eax
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.005162e0
push 0
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2108]
call fcn.00516ab0
push eax
call dword [0x5cd620]
lea eax, [ebp - 0x2010]
push eax
push 0x5fde4c
lea ecx, [ebp - 0x1fc4]
call fcn.00511410
lea ecx, [ebp - 0x2108]
call fcn.005167b0
test al, al
je 0x49e516
lea ecx, [ebp - 0x2010]
call fcn.005167b0
test al, al
jne 0x49e66a
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6073a4
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49e66a
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6f50]
lea ecx, [ebp - 0x2010]
call fcn.00515510
dec eax
cmp eax, 0x10
jbe 0x49e664
inc esi
cmp esi, 7
jb 0x49e546
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2108]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x20
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x49e664
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
push 0
push 0
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
push 0x20
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eac]
mov ecx, esi
push eax
push 0x607260
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2108]
call fcn.00516ab0
push eax
push 0x605040
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x49e66a
mov esi, dword [ebp - 0x6eac]
mov eax, dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6ec0], eax
call fcn.005110a0
test al, al
jne 0x49e413
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eac], esi
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6ea8]
jb 0x49e3c0
cmp byte [edi + 0x14], 0
jne 0x4a0dfd
push 0
push 0x6073d0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
push 0xc
lea ecx, [ebp - 0x20b4]
call fcn.00401d00
lea ecx, [ebp - 0x20b4]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2344]
mov byte [ebp - 4], 0x88
call fcn.00401d00
lea ecx, [ebp - 0x2344]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x20fc]
mov byte [ebp - 4], 0x89
call fcn.00401d00
lea ecx, [ebp - 0x20fc]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x21e4]
mov byte [ebp - 4], 0x8a
call fcn.00401d00
lea ecx, [ebp - 0x21e4]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2338]
mov byte [ebp - 4], 0x8b
call fcn.00401d00
lea ecx, [ebp - 0x2338]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x8c
call fcn.00401d00
lea ecx, [ebp - 0x20c0]
call fcn.00516ef0
push 0xfc8
lea ecx, [ebp - 0x67e8]
mov byte [ebp - 4], 0x8d
call fcn.00401db0
lea ecx, [ebp - 0x67e8]
call fcn.0050a6d0
mov byte [ebp - 4], 0x8e
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x49e7fc
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6016f8
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x49e7b5
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6019c8
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x49e863
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6019c8
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp dword [ebp - 0x6ed4], 0
mov dword [ebp - 0x6ec4], 0
jbe 0x49ed6d
mov eax, dword [ebp - 0x6ecc]
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6f08], eax
nop
cmp byte [edi + 0x14], 0
jne 0x4a0db0
push 1
lea ecx, [eax + esi]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b80
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49ed4b
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec0], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00511000
test al, al
je 0x49ed4b
nop dword [eax]
mov ecx, dword [ebp - 0x6c1c]
call fcn.0050f2e0
test al, al
je 0x49ed23
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [edi + 0x24c]
push 0x607410
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00516b20
lea ecx, [ebp - 0x20c0]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x49ed23
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00516b20
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20c0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2344]
call fcn.00515510
test eax, eax
jne 0x49ed23
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2344]
call fcn.00515270
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x2338]
call fcn.00516e30
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
lea eax, [ebp - 0x20fc]
push eax
lea eax, [ebp - 0x2338]
push eax
call fcn.00493c40
lea ecx, [ebp - 0x20fc]
call fcn.005167b0
test al, al
je 0x49ea26
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x20fc]
call fcn.00516e30
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x607428
lea ecx, [ebp - 0x20fc]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49ed23
push 0
push 1
push 1
push 0
push 0x60743c
lea ecx, [ebp - 0x20fc]
call fcn.00515510
cmp eax, 1
je 0x49ed23
push 0
push 1
push 1
push 0
push 0x607458
lea ecx, [ebp - 0x20fc]
call fcn.00515510
cmp eax, 1
je 0x49ed23
push 0
push 1
push 1
push 0
push 0x5ed51c
lea ecx, [ebp - 0x20fc]
call fcn.00515510
cmp eax, 1
je 0x49ed23
lea ecx, [ebp - 0x20b4]
call fcn.005167b0
lea ecx, [ebp - 0x20b4]
test al, al
je 0x49ead8
push 0x607480
call fcn.00516e30
jmp 0x49eaf8
push 0
push 0
push 0x5ed51c
push 0x5f0068
call fcn.00514e30
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00516530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f98]
push 0x5f6828
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
call fcn.00492520
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
push eax
push 0
call dword [0x5cdaa8]
test eax, eax
jne 0x49ed23
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x67e8]
call fcn.0050a530
test al, al
je 0x49ec28
push 0x5ed51c
push str.CompanyName
lea ecx, [ebp - 0x67e8]
call fcn.0050a550
push eax
lea ecx, [ebp - 0x21e4]
call fcn.00516e30
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x21e4]
call fcn.00515510
cmp eax, 1
je 0x49ed23
push 0
push 1
push 1
push 0
push 0x6074dc
lea ecx, [ebp - 0x21e4]
call fcn.00515510
cmp eax, 1
je 0x49ed23
push 0
push 1
push 1
push 0
push 0x6074f8
lea ecx, [ebp - 0x21e4]
call fcn.00515510
cmp eax, 1
je 0x49ed23
push 0
push 1
push 1
push 0
push 0x601010
lea ecx, [ebp - 0x21e4]
call fcn.00515510
cmp eax, 1
je 0x49ed23
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
push eax
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20fc]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49ed23
push 0
push dword [ebp - 0x6c1c]
mov ecx, esi
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
push 0x21
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
push eax
push 0x607520
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x20fc]
call fcn.00516ab0
push eax
push 0x605040
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6ec0], eax
call fcn.00511000
test al, al
jne 0x49e900
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6f08]
jb 0x49e890
cmp byte [edi + 0x14], 0
jne 0x4a0db0
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x49edd7
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fec18
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x49ed90
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fec70
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x49ee3e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x5fec70
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp dword [ebp - 0x6ed4], 0
mov dword [ebp - 0x6f18], 0x607538
mov dword [ebp - 0x6f14], 0x607578
mov dword [ebp - 0x6f10], 0x607598
mov dword [ebp - 0x6f0c], 0x6075b4
mov dword [ebp - 0x6f08], 0x6075d0
mov dword [ebp - 0x6ea8], 0
jbe 0x49f455
mov esi, dword [ebp - 0x6ed0]
mov eax, dword [ebp - 0x6ecc]
sub eax, esi
mov dword [ebp - 0x6eb0], esi
mov dword [ebp - 0x6ee8], eax
cmp byte [edi + 0x14], 0
jne 0x4a0db0
xor ecx, ecx
mov dword [ebp - 0x6ec0], ecx
cmp byte [edi + 0x14], 0
jne 0x49f433
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + ecx*4 - 0x6f18]
lea ecx, [eax + esi]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49f417
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec4], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005110a0
test al, al
je 0x49f417
nop dword [eax + eax]
mov ecx, dword [ebp - 0x6c1c]
call fcn.0050f2e0
test al, al
je 0x49f3ef
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [edi + 0x24c]
push 0x607410
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00516b20
lea ecx, [ebp - 0x20c0]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x49f3ef
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00516b20
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20c0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2344]
call fcn.00515510
test eax, eax
jne 0x49f3ef
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2344]
call fcn.00515270
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x2338]
call fcn.00516e30
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
lea eax, [ebp - 0x20fc]
push eax
lea eax, [ebp - 0x2338]
push eax
call fcn.00493c40
lea ecx, [ebp - 0x20fc]
call fcn.005167b0
lea ecx, [ebp - 0x20fc]
test al, al
je 0x49f06b
push dword [ebp - 0x6c1c]
call fcn.00516e30
jmp 0x49f12b
push 0
push 1
push 1
push 0
push 0x60743c
call fcn.00515510
cmp eax, 1
je 0x49f3ef
push 0
push 1
push 1
push 0
push 0x607458
lea ecx, [ebp - 0x20fc]
call fcn.00515510
cmp eax, 1
je 0x49f3ef
push 0
push 1
push 1
push 0
push 0x6075e4
lea ecx, [ebp - 0x20fc]
call fcn.00515510
cmp eax, 1
je 0x49f3ef
push 0
push 1
push 1
push 0
push 0x607600
lea ecx, [ebp - 0x20fc]
call fcn.00515510
cmp eax, 1
je 0x49f3ef
push 0
push 1
push 1
push 0
push 0x607628
lea ecx, [ebp - 0x20fc]
call fcn.00515510
cmp eax, 1
je 0x49f3ef
push 0
push 1
push 1
push 0
push 0x607648
lea ecx, [ebp - 0x20fc]
call fcn.00515510
cmp eax, 1
je 0x49f3ef
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x607428
lea ecx, [ebp - 0x20fc]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49f3ef
lea ecx, [ebp - 0x20b4]
call fcn.005167b0
lea ecx, [ebp - 0x20b4]
test al, al
je 0x49f17a
push 0x607480
call fcn.00516e30
jmp 0x49f19a
push 0
push 0
push 0x5ed51c
push 0x5f0068
call fcn.00514e30
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00516530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f98]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
call fcn.00492520
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
push eax
push 0
call dword [0x5cdaa8]
test eax, eax
jne 0x49f3ef
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x67e8]
call fcn.0050a530
test al, al
je 0x49f2eb
push 0x5ed51c
push str.CompanyName
lea ecx, [ebp - 0x67e8]
call fcn.0050a550
push eax
lea ecx, [ebp - 0x21e4]
call fcn.00516e30
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x21e4]
call fcn.00515510
cmp eax, 1
je 0x49f3ef
push 0
push 1
push 1
push 0
push 0x6074dc
lea ecx, [ebp - 0x21e4]
call fcn.00515510
cmp eax, 1
je 0x49f3ef
push 0
push 1
push 1
push 0
push 0x6074f8
lea ecx, [ebp - 0x21e4]
call fcn.00515510
cmp eax, 1
je 0x49f3ef
push 0
push 1
push 1
push 0
push 0x607678
lea ecx, [ebp - 0x21e4]
call fcn.00515510
cmp eax, 1
je 0x49f3ef
push 0
push 1
push 1
push 0
push 0x601010
lea ecx, [ebp - 0x21e4]
call fcn.00515510
cmp eax, 1
je 0x49f3ef
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
push eax
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20fc]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x49f3e9
mov ecx, dword [ebp - 0x6eb0]
push 0
push dword [ebp - 0x6c1c]
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00516ab0
push eax
push 0x21
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x20b4]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eb0]
mov ecx, esi
push eax
push 0x607520
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x20fc]
call fcn.00516ab0
push eax
push 0x605040
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x49f3ef
mov esi, dword [ebp - 0x6eb0]
mov eax, dword [ebp - 0x6ec4]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6ec4], eax
call fcn.005110a0
test al, al
jne 0x49ef40
mov ecx, dword [ebp - 0x6ec0]
mov eax, dword [ebp - 0x6ee8]
inc ecx
mov dword [ebp - 0x6ec0], ecx
cmp ecx, 5
jb 0x49eeb3
mov ecx, dword [ebp - 0x6ea8]
add esi, 0xc
inc ecx
mov dword [ebp - 0x6eb0], esi
mov dword [ebp - 0x6ea8], ecx
cmp ecx, dword [ebp - 0x6ed4]
jb 0x49eea1
cmp byte [edi + 0x14], 0
jne 0x4a0db0
push 0
push 0x6076a0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6d60]
push 1
push 0x5ff3e8
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6d68], eax
mov dword [ebp - 0x6d64], 0x23
call fcn.00516e80
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x8f
call fcn.00516ab0
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6d54], eax
mov dword [ebp - 0x6d50], 0
call fcn.00516ab0
mov dword [ebp - 0x6d4c], eax
lea ecx, [ebp - 0x6d40]
lea eax, [ebp - 0x1ff0]
push 1
mov dword [ebp - 0x6d48], eax
mov eax, dword [edi + 4]
push 0x6076e4
mov dword [ebp - 0x6d44], eax
call fcn.00516e80
push 0xc
lea ecx, [ebp - 0x227c]
mov byte [ebp - 4], 0x90
call fcn.00401d00
lea ecx, [ebp - 0x227c]
call fcn.00516ef0
xor esi, esi
mov byte [ebp - 4], 0x91
cmp dword [edi + 0x30], esi
jbe 0x49f656
nop
cmp byte [edi + 0x14], 0
jne 0x4a0d9a
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516cc0
cmp eax, 3
jl 0x49f64c
push esi
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6d50], eax
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x227c]
call fcn.00516b20
lea ecx, [ebp - 0x227c]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x49f64c
lea ecx, [ebp - 0x227c]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d68]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4a0d9a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x227c]
call fcn.00516b20
lea ecx, [ebp - 0x227c]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x49f64c
push 0
lea ecx, [ebp - 0x227c]
call fcn.005167d0
lea ecx, [ebp - 0x227c]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d68]
mov ecx, edi
push eax
call fcn.004aed70
inc esi
cmp esi, dword [edi + 0x30]
jb 0x49f520
cmp byte [edi + 0x14], 0
jne 0x4a0d9a
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6d50], 0x5feab0
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d68]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
lea ecx, [ebp - 0x227c]
jne 0x4a0da0
lea eax, [ebp - 0x2668]
push eax
call fcn.00516e00
push 0
lea ecx, [ebp - 0x227c]
call fcn.005167d0
lea ecx, [ebp - 0x227c]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d68]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4a0d9a
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x49f737
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607708
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x49f6f0
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607790
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x49f79e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x607790
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
mov edx, dword [ebp - 0x6ed4]
test edx, edx
je 0x49f987
mov eax, dword [ebp - 0x6ecc]
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
mov dword [ebp - 0x6ec4], edx
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49f971
lea eax, [ebp - 0x20c0]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x49f971
push 0
push 1
push 1
push 0
push 0x607828
lea ecx, [ebp - 0x20c0]
call fcn.00515510
lea ecx, [ebp - 0x20c0]
mov dword [ebp - 0x6ee8], eax
call fcn.00516cc0
mov edx, dword [ebp - 0x6ee8]
lea ecx, [edx + 0xc]
cmp eax, ecx
jle 0x49f971
lea eax, [edx + 0xd]
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00515800
push 3
lea ecx, [ebp - 0x20c0]
call fcn.00514ca0
lea ecx, [ebp - 0x20c0]
call fcn.005167b0
test al, al
jne 0x49f971
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6040ec
lea ecx, [ebp - 0x20c0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49f971
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600250
push 1
push 0x23
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49f971
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0x23
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x20c0]
call fcn.00516ab0
push eax
push 0x606c18
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ea8]
add esi, 0xc
sub dword [ebp - 0x6ec4], 1
jne 0x49f7c6
cmp byte [edi + 0x14], 0
jne 0x4a0d9a
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x49f9f7
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607848
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x49f9b0
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6078a8
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x49fa5e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6078a8
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
push 0
push 0x607910
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [ebp - 0x6ed4]
xor ecx, ecx
mov dword [ebp - 0x6ea8], ecx
test eax, eax
je 0x49ff5b
mov esi, dword [ebp - 0x6ed0]
mov edx, dword [ebp - 0x6ecc]
sub edx, esi
mov dword [ebp - 0x6eac], esi
mov dword [ebp - 0x6eb8], edx
cmp byte [edi + 0x14], 0
jne 0x49ff55
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x49fabd
add eax, 0xfffffffe
cmp ecx, eax
je 0x49ff31
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edx + esi]
push 0x607964
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49ff2b
lea eax, [ebp - 0x2700]
mov dword [ebp - 0x2700], 0
push eax
push 0x601c5c
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x49ff2b
cmp dword [ebp - 0x2700], 0
je 0x49ff2b
mov ecx, dword [ebp - 0x6eb8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607980
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49ff2b
lea eax, [ebp - 0x2010]
push eax
push 0x600c9c
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x49fd18
lea ecx, [ebp - 0x2010]
call fcn.005167b0
test al, al
jne 0x49fd18
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x60798c
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49fd18
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6f50]
lea ecx, [ebp - 0x2010]
call fcn.00515510
dec eax
cmp eax, 0x10
jbe 0x49fd12
inc esi
cmp esi, 7
jb 0x49fc01
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eac]
mov ecx, esi
push eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600c9c
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x49fd18
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
push eax
push 0
push 0x600c9c
mov ecx, esi
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
push 0x25
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
push eax
push 0x607260
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x6079b0
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x49fd18
mov esi, dword [ebp - 0x6eac]
cmp byte [edi + 0x14], 0
jne 0x49ff55
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x601c10
lea ecx, [ebp - 0x1f98]
call fcn.00515270
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x49ff2b
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec0], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00511000
test al, al
je 0x49ff2b
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x6c1c]
cmp word [eax], 0
je 0x49ff03
push eax
lea ecx, [ebp - 0x2010]
call fcn.00516e30
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x60798c
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x49ff2b
xor esi, esi
nop dword [eax]
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6f50]
lea ecx, [ebp - 0x2010]
call fcn.00515510
dec eax
cmp eax, 0x10
jbe 0x49fefd
inc esi
cmp esi, 7
jb 0x49fdf0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x601cd0
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x49fefd
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
push 0x25
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eac]
mov ecx, esi
push eax
push 0x607260
call fcn.00516ab0
push eax
push 0x6042a8
push 0x6079dc
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x49ff03
mov esi, dword [ebp - 0x6eac]
mov eax, dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6ec0], eax
call fcn.00511000
test al, al
jne 0x49fda0
mov edx, dword [ebp - 0x6eb8]
mov eax, dword [ebp - 0x6ea8]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eac], esi
mov ecx, eax
mov dword [ebp - 0x6ea8], eax
cmp eax, dword [ebp - 0x6ed4]
jb 0x49faa0
mov eax, dword [ebp - 0x6ed4]
cmp byte [edi + 0x14], 0
jne 0x4a0d9a
xor ecx, ecx
mov dword [ebp - 0x6ea8], ecx
test eax, eax
je 0x4a038e
mov esi, dword [ebp - 0x6ed0]
mov edx, dword [ebp - 0x6ecc]
sub edx, esi
mov dword [ebp - 0x6eb8], esi
mov dword [ebp - 0x6eac], edx
nop
cmp byte [edi + 0x14], 0
jne 0x4a038e
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x49ffad
add eax, 0xfffffffe
cmp ecx, eax
je 0x4a036a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edx + esi]
push 0x607a28
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4a0364
lea eax, [ebp - 0x26fc]
mov dword [ebp - 0x26fc], 0
push eax
push 0x601d70
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x4a0364
cmp dword [ebp - 0x26fc], 0
je 0x4a0364
mov ecx, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607a5c
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4a0364
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec0], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005110a0
test al, al
je 0x4a0364
mov ecx, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [ecx + esi]
push 0x607a78
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc4]
call fcn.005116f0
test al, al
je 0x4a033c
lea eax, [ebp - 0x2108]
push eax
push 0x5fa734
lea ecx, [ebp - 0x1fc4]
call fcn.00511410
push 0
lea ecx, [ebp - 0x2108]
call fcn.00516d60
cmp word [eax], 0x40
jne 0x4a017f
push 0
lea ecx, [ebp - 0x2108]
call fcn.00516ab0
push eax
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.005162e0
push 0
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2108]
call fcn.00516ab0
push eax
call dword [0x5cd620]
lea eax, [ebp - 0x2010]
push eax
push 0x5fde4c
lea ecx, [ebp - 0x1fc4]
call fcn.00511410
lea ecx, [ebp - 0x2108]
call fcn.005167b0
test al, al
je 0x4a01b8
lea ecx, [ebp - 0x2010]
call fcn.005167b0
test al, al
jne 0x4a033c
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x60798c
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a0364
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6f50]
lea ecx, [ebp - 0x2010]
call fcn.00515510
dec eax
cmp eax, 0x10
jbe 0x4a0336
inc esi
cmp esi, 7
jb 0x4a01e8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606dd0
lea ecx, [ebp - 0x2108]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00516b20
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x4a0336
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb8]
push eax
push 0
push 0
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
push 0x25
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2010]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eb8]
mov ecx, esi
push eax
push 0x607260
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2108]
call fcn.00516ab0
push eax
push 0x607a94
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x4a033c
mov esi, dword [ebp - 0x6eb8]
mov eax, dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6ec0], eax
call fcn.005110a0
test al, al
jne 0x4a00b5
mov edx, dword [ebp - 0x6eac]
mov eax, dword [ebp - 0x6ea8]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eb8], esi
mov ecx, eax
mov dword [ebp - 0x6ea8], eax
cmp eax, dword [ebp - 0x6ed4]
jb 0x49ff90
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a03ed
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607acc
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a03a6
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607af8
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x4a0454
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x607af8
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
push 0xc
lea ecx, [ebp - 0x268c]
call fcn.00401d00
lea ecx, [ebp - 0x268c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x25a8]
mov byte [ebp - 4], 0x92
call fcn.00401d00
lea ecx, [ebp - 0x25a8]
call fcn.00516ef0
push 0
push 0x607c40
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x93
call fcn.00504a30
xor ecx, ecx
mov dword [ebp - 0x6eb0], ecx
cmp dword [ebp - 0x6ed4], ecx
jbe 0x4a086e
mov esi, dword [ebp - 0x6ed0]
mov edx, dword [ebp - 0x6ecc]
sub edx, esi
mov dword [ebp - 0x6ea8], esi
mov dword [ebp - 0x6eac], edx
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a0d84
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x4a04ed
add eax, 0xfffffffe
cmp ecx, eax
je 0x4a084a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edx + esi]
push 0x607ca0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4a067c
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x607cf4
push 0x601de4
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a067c
lea eax, [ebp - 0x268c]
push eax
push 0x601dfc
lea ecx, [ebp - 0x1f74]
call fcn.00511410
lea eax, [ebp - 0x28bc]
push eax
push 0x601e14
lea ecx, [ebp - 0x1f74]
call fcn.00511380
lea ecx, [ebp - 0x268c]
call fcn.005167b0
test al, al
jne 0x4a067c
cmp dword [ebp - 0x28bc], 0
je 0x4a067c
push 0
push 0
push 0
push 0
push 0x607b28
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x601de4
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a067c
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
push 0x24
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x6058f0
push 0x607b28
push 0x605b5c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x601de4
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x607cf4
push 0x601ed0
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a0844
mov ecx, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607d18
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4a0844
lea eax, [ebp - 0x25a8]
push eax
push 0x601f04
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4a0844
lea ecx, [ebp - 0x268c]
call fcn.005167b0
test al, al
jne 0x4a0844
push 0
push 0
push 0x5ed51c
push 0x5f014c
lea ecx, [ebp - 0x25a8]
call fcn.00514e30
push 0
push 1
push 1
push 0
push 0x601ee8
lea ecx, [ebp - 0x25a8]
call fcn.00515510
lea ecx, [ebp - 0x25a8]
mov esi, eax
call fcn.00516cc0
sub eax, 0xb
cmp esi, eax
mov esi, dword [ebp - 0x6ea8]
je 0x4a0844
push 0
push 0
push 0
push 0
push 0x607ba8
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x601ed0
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a0844
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
push 0x24
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x6058f0
push 0x607ba8
push 0x605b5c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x601ed0
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov edx, dword [ebp - 0x6eac]
mov eax, dword [ebp - 0x6eb0]
add esi, 0xc
inc eax
mov dword [ebp - 0x6ea8], esi
mov ecx, eax
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [ebp - 0x6ed4]
jb 0x4a04d0
cmp byte [edi + 0x14], 0
jne 0x4a0d84
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x607cf4
push 0x601f98
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a0d84
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a08fe
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607d60
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a08b7
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607d60
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x4a0965
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x607d60
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp dword [ebp - 0x6ed4], 0
mov dword [ebp - 0x6ec4], 0
jbe 0x4a0b34
mov eax, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
nop word [eax + eax]
mov ecx, esi
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
je 0x4a0b18
cmp byte [edi + 0x14], 0
jne 0x4a0d84
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x601c3c
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2120]
call fcn.00516b20
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
mov edx, 0x601c5c
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4a0a41
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x601fdc
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2120]
call fcn.00516b20
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
je 0x4a0b18
mov ecx, dword [ebp - 0x6ea8]
push 0
push 0
push 0
push 0
add ecx, esi
push 0x607dc0
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x601f98
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a0b18
mov ecx, dword [ebp - 0x6ea8]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esi + ecx]
call fcn.00516ab0
push eax
push 0
mov ecx, esi
call fcn.00516ab0
push eax
push 0x24
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
mov ecx, dword [ebp - 0x6ea8]
push 0
push 0
push 0
push 0
push 0
push 0x6058f0
push 0x607dc0
push 0x605b5c
lea ecx, [esi + ecx]
call fcn.00516ab0
push eax
push 0x6042a8
push 0x601f98
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6ec4], eax
cmp eax, dword [ebp - 0x6ed4]
jb 0x4a0990
cmp byte [edi + 0x14], 0
jne 0x4a0d84
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x607cf4
push 0x602064
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a0d84
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a0bc7
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607e68
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a0b80
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x607e68
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x4a0c2e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x607e68
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
mov edx, dword [ebp - 0x6ed4]
test edx, edx
je 0x4a0d6a
mov eax, dword [ebp - 0x6ecc]
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
mov dword [ebp - 0x6ec4], edx
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc4]
call fcn.005116f0
test al, al
je 0x4a0d54
lea ecx, [ebp - 0x1fc4]
call fcn.00510fa0
cmp eax, 1
jbe 0x4a0d54
push 0
push 0
push 0
push 0
push 0x607ed0
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x602064
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a0d54
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0x24
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6058f0
push 0x607ed0
push 0x605b5c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x607f40
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ea8]
add esi, 0xc
sub dword [ebp - 0x6ec4], 1
jne 0x4a0c56
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
mov ecx, edi
call fcn.00492c20
lea ecx, [ebp - 0x25a8]
call fcn.00516d50
lea ecx, [ebp - 0x268c]
call fcn.00516d50
lea ecx, [ebp - 0x227c]
call fcn.00516d50
lea ecx, [ebp - 0x6d68]
call fcn.00402930
lea ecx, [ebp - 0x67e8]
call fcn.00401d80
lea ecx, [ebp - 0x20c0]
call fcn.00516d50
lea ecx, [ebp - 0x2338]
call fcn.00516d50
lea ecx, [ebp - 0x21e4]
call fcn.00516d50
lea ecx, [ebp - 0x20fc]
call fcn.00516d50
lea ecx, [ebp - 0x2344]
call fcn.00516d50
lea ecx, [ebp - 0x20b4]
call fcn.00516d50
lea ecx, [ebp - 0x2108]
call fcn.00516d50
lea ecx, [ebp - 0x2084]
call fcn.005116a0
lea ecx, [ebp - 0x1fc4]
call fcn.005116a0
lea ecx, [ebp - 0x265c]
call fcn.00513e90
lea ecx, [ebp - 0x23c8]
call fcn.00516d50
lea ecx, [ebp - 0x2010]
mov byte [ebp - 4], 0x45
call fcn.00516d50
cmp byte [edi + 0x14], 0
jne 0x4adfea
test dword [edi + 0x34], 0x1000
jne 0x4a36f4
push 0
push 0x607fa0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x607fd8
push dword [eax + 0x38]
call fcn.004ed600
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2d
push dword [eax + 0x34]
call fcn.004ea4c0
push 0xc
lea ecx, [ebp - 0x20cc]
call fcn.00401d00
lea ecx, [ebp - 0x20cc]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2034]
mov byte [ebp - 4], 0x94
call fcn.00401d00
lea ecx, [ebp - 0x2034]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x23d4]
mov byte [ebp - 4], 0x95
call fcn.00401d00
lea ecx, [ebp - 0x23d4]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x1fd0]
mov byte [ebp - 4], 0x96
call fcn.00401d00
lea ecx, [ebp - 0x1fd0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x22b8]
mov byte [ebp - 4], 0x97
call fcn.00401d00
lea ecx, [ebp - 0x22b8]
call fcn.00516ef0
xor esi, esi
mov byte [ebp - 4], 0x98
push 0x24
lea ecx, [ebp - 0x251c]
mov dword [ebp - 0x6ea8], esi
call fcn.00402030
lea ecx, [ebp - 0x251c]
call fcn.004e6cd0
mov byte [ebp - 4], 0x99
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
push esi
push 0x608010
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov dword [ebp - 0x6eb0], esi
cmp dword [edi + 0x30], esi
jbe 0x4a15f3
mov esi, dword [ebp - 0x6ed0]
lea eax, [edi + 0x44]
mov dword [ebp - 0x6eac], esi
lea ecx, [ebp - 0x22b8]
mov dword [ebp - 0x6eb8], eax
call fcn.005167b0
test al, al
je 0x4a0fdb
lea eax, [ebp - 0x22b8]
push eax
push 0
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push dword [ebp - 0x6eb0]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.004c1e30
mov esi, dword [ebp - 0x6eac]
lea eax, [edi + 0x44]
mov dword [ebp - 0x6eb8], eax
cmp byte [edi + 0x14], 0
jne 0x4a15ed
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60805c
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb8]
push eax
push dword [ebp - 0x6eb0]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20cc]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x5118]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x20cc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x5118]
call fcn.00401660
push 3
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x9a
call fcn.00515870
lea ecx, [ebp - 0x5118]
call fcn.004017a0
test al, al
je 0x4a15b9
nop dword [eax]
push 1
lea ecx, [ebp - 0x5118]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516e30
push 0x60645c
lea ecx, [ebp - 0x2034]
call fcn.00516da0
test al, al
je 0x4a10ce
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x2034]
call fcn.00515510
cmp eax, 1
jne 0x4a159d
inc dword [ebp - 0x6ea8]
lea ecx, [ebp - 0x5118]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
call fcn.00401810
push eax
lea ecx, [ebp - 0x20cc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516b20
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e6ab0
test al, al
je 0x4a159d
lea eax, [ebp - 0x1fd0]
push eax
push 0x5f4ad4
push 0x6064a8
lea ecx, [ebp - 0x251c]
call fcn.004e62a0
test eax, eax
je 0x4a1326
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a1326
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a1326
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a1326
push 0x6064f8
lea ecx, [ebp - 0x1fd0]
call fcn.00516de0
test al, al
jne 0x4a1326
push 0
push 1
push 1
push 0
push 0x606510
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a1326
lea ecx, [edi + 0x84]
push eax
call fcn.00516ab0
push eax
push 0x608098
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a1326
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6080c4
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a1326
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x606580
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a1326
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
push 0x6064a8
push 0x2a
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
push 0x605b5c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
push 0x6065c8
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea eax, [ebp - 0x2aa4]
mov dword [ebp - 0x6e80], 0
push eax
push 0x5f4ad4
xorps xmm0, xmm0
lea ecx, [ebp - 0x251c]
push 0x6065e8
movups xmmword [ebp - 0x6e90], xmm0
call fcn.004e63a0
test al, al
je 0x4a159d
lea eax, [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x6e90]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e59f0
test al, al
je 0x4a159d
nop
lea eax, [ebp - 0x1fd0]
push eax
lea eax, [ebp - 0x6e90]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e5d00
test eax, eax
je 0x4a157c
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a157c
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a157c
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a157c
push 0x6064f8
lea ecx, [ebp - 0x1fd0]
call fcn.00516de0
test al, al
jne 0x4a157c
push 0
push 1
push 1
push 0
push 0x606510
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a157c
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608098
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a1576
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6080c4
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a1576
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x606680
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x4a1576
mov ecx, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
push 0x6065e8
push 0x2a
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eac]
mov ecx, esi
push eax
push 0x605b5c
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
push 0x60669c
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x4a157c
mov esi, dword [ebp - 0x6eac]
lea eax, [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x6e90]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e59f0
test al, al
jne 0x4a1380
lea ecx, [ebp - 0x5118]
call fcn.00401760
test al, al
jne 0x4a1080
lea eax, [edi + 0x44]
mov dword [ebp - 0x6eb8], eax
lea ecx, [ebp - 0x5118]
mov byte [ebp - 4], 0x99
call fcn.004016b0
mov eax, dword [ebp - 0x6eb0]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eac], esi
cmp eax, dword [edi + 0x30]
mov dword [ebp - 0x6eb0], eax
mov eax, dword [ebp - 0x6eb8]
jb 0x4a0f83
mov esi, dword [ebp - 0x6ea8]
cmp byte [edi + 0x14], 0
jne 0x4a36ae
test esi, esi
jne 0x4a1626
lea ecx, [ebp - 0x22b8]
call fcn.005167b0
test al, al
je 0x4a1626
push esi
push 0x6080f0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
jmp 0x4a36ae
push 0
push 0x608150
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6ea8], 0
jbe 0x4a19f2
mov esi, dword [ebp - 0x6ed0]
mov dword [ebp - 0x6eac], esi
nop dword [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4a36ae
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60805c
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push eax
push dword [ebp - 0x6ea8]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20cc]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x5370]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x20cc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x5370]
call fcn.00401660
push 3
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x9b
call fcn.00515870
lea ecx, [ebp - 0x5370]
call fcn.004017a0
test al, al
je 0x4a19c4
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x5370]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516e30
push 0x60645c
lea ecx, [ebp - 0x2034]
call fcn.00516da0
test al, al
je 0x4a174e
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x2034]
call fcn.00515510
cmp eax, 1
jne 0x4a19b1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
lea ecx, [ebp - 0x5370]
call fcn.00401810
push eax
lea ecx, [ebp - 0x20cc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516b20
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e6ab0
test al, al
je 0x4a19b1
lea eax, [ebp - 0x1fd0]
push eax
push 0x5f4ad4
push 0x606760
lea ecx, [ebp - 0x251c]
call fcn.004e62a0
test eax, eax
je 0x4a19b1
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a19b1
push eax
push 1
push 1
push eax
push 0x606614
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a19b1
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a19b1
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a19b1
push eax
push 1
push 1
push eax
push 0x606638
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a19b1
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608190
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a19ab
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6081c0
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a19ab
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x606810
push 2
push 0x2b
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x4a19ab
mov ecx, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
push 0x606840
push 0x2b
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eac]
mov ecx, esi
push eax
push 0x605b5c
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
push 0x6068a0
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x4a19b1
mov esi, dword [ebp - 0x6eac]
lea ecx, [ebp - 0x5370]
call fcn.00401760
test al, al
jne 0x4a1700
lea ecx, [ebp - 0x5370]
mov byte [ebp - 4], 0x99
call fcn.004016b0
mov eax, dword [ebp - 0x6ea8]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eac], esi
mov dword [ebp - 0x6ea8], eax
cmp eax, dword [edi + 0x30]
jb 0x4a1660
cmp byte [edi + 0x14], 0
jne 0x4a36ae
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6081f0
lea ecx, [edi + 0x24c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x608230
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6ea8], 0
jbe 0x4a2011
mov esi, dword [ebp - 0x6ed0]
mov dword [ebp - 0x6eb8], esi
nop
cmp byte [edi + 0x14], 0
jne 0x4a36ae
push 0xc
lea ecx, [ebp - 0x26f8]
call fcn.00401d00
lea ecx, [ebp - 0x26f8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2784]
mov byte [ebp - 4], 0x9c
call fcn.00401d00
lea ecx, [ebp - 0x2784]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2718]
mov byte [ebp - 4], 0x9d
call fcn.00401d00
lea ecx, [ebp - 0x2718]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2698]
mov byte [ebp - 4], 0x9e
call fcn.00401d00
lea ecx, [ebp - 0x2698]
call fcn.00516ef0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60805c
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 0x9f
call fcn.00516ab0
push eax
push dword [ebp - 0x6ea8]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20cc]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x4560]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x20cc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x4560]
call fcn.00401660
push 3
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0xa0
call fcn.00515870
lea ecx, [ebp - 0x4560]
call fcn.004017a0
test al, al
je 0x4a1fb7
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4560]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516e30
push 0x60645c
lea ecx, [ebp - 0x2034]
call fcn.00516da0
test al, al
je 0x4a1bbe
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x2034]
call fcn.00515510
cmp eax, 1
jne 0x4a1fa4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
lea ecx, [ebp - 0x4560]
call fcn.00401810
push eax
lea ecx, [ebp - 0x20cc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516b20
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e6ab0
test al, al
je 0x4a1fa4
lea eax, [ebp - 0x2acc]
mov dword [ebp - 0x6e94], 0
push eax
push 0x5f4ad4
xorps xmm0, xmm0
lea ecx, [ebp - 0x251c]
push 0x606974
movups xmmword [ebp - 0x6ea4], xmm0
call fcn.004e63a0
test al, al
je 0x4a1fa4
lea eax, [ebp - 0x2acc]
push eax
lea eax, [ebp - 0x6ea4]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e5dc0
test al, al
je 0x4a1fa4
nop word [eax + eax]
lea eax, [ebp - 0x26f8]
push eax
lea eax, [ebp - 0x6ea4]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e6360
test al, al
je 0x4a1f83
lea ecx, [ebp - 0x26f8]
call fcn.00516ab0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4a1f7d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6069a0
lea ecx, [ebp - 0x26f8]
call fcn.00516ab0
push eax
push 0x6069c4
lea ecx, [ebp - 0x2718]
call fcn.00516b20
lea eax, [ebp - 0x2784]
push eax
push 0x5f4ad4
lea ecx, [ebp - 0x2718]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e62a0
test eax, eax
je 0x4a1f7d
lea ecx, [ebp - 0x2784]
call fcn.00516ab0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4a1f7d
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608260
lea ecx, [ebp - 0x2784]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a1f7d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6069f4
lea ecx, [ebp - 0x26f8]
call fcn.00516ab0
push eax
push 0x6069c4
lea ecx, [ebp - 0x2718]
call fcn.00516b20
lea eax, [ebp - 0x2698]
push eax
push 0x5f4ad4
lea ecx, [ebp - 0x2718]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e62a0
test eax, eax
je 0x4a1e28
push 0
push 1
push 1
push 5
push 0x5f0150
lea ecx, [ebp - 0x2698]
call fcn.00515510
test eax, eax
jne 0x4a1e28
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x606a04
push 1
lea ecx, [ebp - 0x4560]
call fcn.00401810
push eax
lea ecx, [ebp - 0x20cc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2698]
call fcn.005150b0
lea ecx, [ebp - 0x2698]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a1f7d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26f8]
call fcn.00516ab0
push eax
push 0x6069c4
lea ecx, [ebp - 0x2718]
call fcn.00516b20
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2698]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2784]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2c
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x4a1f7d
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2698]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb8]
push eax
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2718]
call fcn.00516ab0
push eax
push 0x2c
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2698]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eb8]
mov ecx, esi
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x606a20
lea ecx, [ebp - 0x26f8]
call fcn.00516ab0
push eax
push 0x5f83bc
lea ecx, [ebp - 0x2784]
call fcn.00516ab0
push eax
push 0x606a44
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x4a1f83
mov esi, dword [ebp - 0x6eb8]
lea eax, [ebp - 0x2acc]
push eax
lea eax, [ebp - 0x6ea4]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e5dc0
test al, al
jne 0x4a1c80
lea ecx, [ebp - 0x4560]
call fcn.00401760
test al, al
jne 0x4a1b70
lea ecx, [ebp - 0x4560]
call fcn.004016b0
lea ecx, [ebp - 0x2698]
call fcn.00516d50
lea ecx, [ebp - 0x2718]
call fcn.00516d50
lea ecx, [ebp - 0x2784]
call fcn.00516d50
lea ecx, [ebp - 0x26f8]
mov byte [ebp - 4], 0x99
call fcn.00516d50
mov eax, dword [ebp - 0x6ea8]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eb8], esi
mov dword [ebp - 0x6ea8], eax
cmp eax, dword [edi + 0x30]
jb 0x4a1a60
cmp byte [edi + 0x14], 0
jne 0x4a36ae
push 0
push 0x608290
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6d04]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6d0c], eax
mov dword [ebp - 0x6d08], 0x2d
call fcn.00516e80
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xa1
call fcn.00516ab0
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6cf8], eax
mov dword [ebp - 0x6cf4], 0
call fcn.00516ab0
mov dword [ebp - 0x6cf0], eax
lea ecx, [ebp - 0x6ce4]
lea eax, [ebp - 0x1ff0]
push 1
mov dword [ebp - 0x6cec], eax
mov eax, dword [edi + 4]
push 0x6082dc
mov dword [ebp - 0x6ce8], eax
call fcn.00516e80
push 0xc
lea ecx, [ebp - 0x2258]
mov byte [ebp - 4], 0xa2
call fcn.00401d00
lea ecx, [ebp - 0x2258]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2220]
mov byte [ebp - 4], 0xa3
call fcn.00401d00
lea ecx, [ebp - 0x2220]
call fcn.00516ef0
mov byte [ebp - 4], 0xa4
cmp byte [edi + 0x14], 0
jne 0x4a368d
xor eax, eax
mov dword [ebp - 0x6eb0], eax
cmp dword [edi + 0x30], eax
jbe 0x4a2287
cmp byte [edi + 0x14], 0
jne 0x4a368d
push eax
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516cc0
cmp eax, 3
jl 0x4a2271
lea eax, [ebp - 0x6d04]
push eax
push 0
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push dword [ebp - 0x6eb0]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.004c1e30
test al, al
je 0x4a2271
mov esi, dword [ebp - 0x6eb0]
lea ecx, [edi + 0x4c]
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6cf4], eax
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2258]
call fcn.00516b20
lea ecx, [ebp - 0x2258]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4a2271
lea ecx, [ebp - 0x2258]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d0c]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4a368d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2258]
call fcn.00516b20
lea ecx, [ebp - 0x2258]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4a2271
push 0
lea ecx, [ebp - 0x2258]
call fcn.005167d0
lea ecx, [ebp - 0x2258]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d0c]
mov ecx, edi
push eax
call fcn.004aed70
mov eax, dword [ebp - 0x6eb0]
inc eax
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [edi + 0x30]
jb 0x4a2103
cmp byte [edi + 0x14], 0
jne 0x4a368d
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6cf4], 0x5feab0
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d0c]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4a368d
lea eax, [ebp - 0x2668]
push eax
lea ecx, [ebp - 0x2258]
call fcn.00516e00
push 0
lea ecx, [ebp - 0x2258]
call fcn.005167d0
lea ecx, [ebp - 0x2258]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d0c]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4a368d
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a2367
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6082f8
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a2320
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608388
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x4a23ce
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x608388
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp dword [ebp - 0x6ed4], 0
mov dword [ebp - 0x6ec4], 0
jbe 0x4a25d7
mov eax, dword [ebp - 0x6ecc]
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4a25b5
cmp byte [edi + 0x14], 0
jne 0x4a368d
lea eax, [ebp - 0x2220]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4a25b5
push 0
push 1
push 1
push 0
push 0x608414
lea ecx, [ebp - 0x2220]
call fcn.00515510
lea ecx, [ebp - 0x2220]
mov dword [ebp - 0x6ee8], eax
call fcn.00516cc0
mov edx, dword [ebp - 0x6ee8]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x4a25b5
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2220]
call fcn.00515800
push 3
lea ecx, [ebp - 0x2220]
call fcn.00514ca0
lea ecx, [ebp - 0x2220]
call fcn.005167b0
test al, al
jne 0x4a25b5
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x604108
lea ecx, [ebp - 0x2220]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a25b5
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2220]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600250
push 2
push 0x2d
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a25b5
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0x2d
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2220]
call fcn.00516ab0
push eax
push 0x606c18
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6ea8]
jb 0x4a2400
cmp byte [edi + 0x14], 0
jne 0x4a368d
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a2647
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608430
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a2600
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608478
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x4a26ae
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x608478
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
push 0
push 0x6084c0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov esi, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], 0
test esi, esi
je 0x4a290a
mov eax, dword [ebp - 0x6ecc]
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a2904
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
lea eax, [ebp - 0x1fd0]
push eax
push 0x600404
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4a28e2
lea eax, [ebp - 0x21b0]
mov dword [ebp - 0x21b0], 0
push eax
push 0x6004a4
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x4a2766
cmp dword [ebp - 0x21b0], 0
jne 0x4a28e2
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a28e2
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a28e2
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a28e2
push eax
push 1
push 1
push eax
push 0x606510
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a28e2
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6084fc
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a28e2
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600404
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a28e2
push 0
push 0
push 0
push 0
push 0
push 0x600404
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0x2f
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
push 0x608528
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6ea8]
jb 0x4a26f0
mov esi, dword [ebp - 0x6ed4]
cmp byte [edi + 0x14], 0
jne 0x4a368d
push 0xc
lea ecx, [ebp - 0x25f0]
call fcn.00401d00
lea ecx, [ebp - 0x25f0]
call fcn.00516ef0
mov byte [ebp - 4], 0xa5
mov dword [ebp - 0x6ec4], 0
test esi, esi
je 0x4a2bd9
mov eax, dword [ebp - 0x6ecc]
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
cmp byte [edi + 0x14], 0
jne 0x4a2bd3
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
lea eax, [ebp - 0x1fd0]
push eax
push 0x600544
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4a2bb1
lea eax, [ebp - 0x21b0]
mov dword [ebp - 0x21b0], 0
push eax
push 0x600644
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x4a29cc
cmp dword [ebp - 0x21b0], 0
je 0x4a2bb1
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a2bb1
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a2bb1
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a2bb1
push eax
push 1
push 1
push eax
push 0x606510
lea ecx, [ebp - 0x1fd0]
call fcn.00515510
test eax, eax
jne 0x4a2bb1
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6084fc
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a2bb1
lea eax, [ebp - 0x25f0]
push eax
push 0x600610
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4a2bb1
lea ecx, [ebp - 0x25f0]
call fcn.005167b0
test al, al
jne 0x4a2bb1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606dd0
lea ecx, [ebp - 0x25f0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2220]
call fcn.00516b20
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2220]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a2bb1
push 0
push 0
push 0
push 0
push 0
push 0x600544
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0x2f
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
push 0x608578
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6ea8]
jb 0x4a2956
mov esi, dword [ebp - 0x6ed4]
cmp byte [edi + 0x14], 0
jne 0x4a3682
mov dword [ebp - 0x6ec4], 0
test esi, esi
je 0x4a2e45
mov eax, dword [ebp - 0x6ecc]
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a3682
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4a2e23
lea eax, [ebp - 0x21b0]
mov dword [ebp - 0x21b0], 0
push eax
push 0x606e58
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x4a2e23
cmp dword [ebp - 0x21b0], 4
jne 0x4a2e23
mov ecx, dword [ebp - 0x6ea8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606e7c
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4a2e23
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec0], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00511000
test al, al
je 0x4a2e23
lea eax, [ebp - 0x1fd0]
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4a2dfb
lea ecx, [ebp - 0x1fd0]
call fcn.005167b0
test al, al
jne 0x4a2dfb
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600800
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a2dfb
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00516ab0
push eax
push 0x2f
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x1fd0]
call fcn.00516ab0
push eax
push 0x6085d8
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6ec0], eax
call fcn.00511000
test al, al
jne 0x4a2cf2
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6ea8]
jb 0x4a2c10
cmp byte [edi + 0x14], 0
jne 0x4a3682
push 0
push 0x608620
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6ea8], 0
jbe 0x4a324d
mov esi, dword [ebp - 0x6ed0]
nop dword [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4a3682
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60805c
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push eax
push dword [ebp - 0x6ea8]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20cc]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x47b8]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x20cc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x47b8]
call fcn.00401660
push 3
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0xa6
call fcn.00515870
lea ecx, [ebp - 0x47b8]
call fcn.004017a0
test al, al
je 0x4a3225
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x47b8]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516e30
push 0x60645c
lea ecx, [ebp - 0x2034]
call fcn.00516da0
test al, al
je 0x4a2f6e
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x2034]
call fcn.00515510
cmp eax, 1
jne 0x4a3212
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
lea ecx, [ebp - 0x47b8]
call fcn.00401810
push eax
lea ecx, [ebp - 0x20cc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516b20
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a30c0
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608658
push 0x600904
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a30c0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600904
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a3212
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
push 0
push 0x2e
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
push 0x605b5c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x600904
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608658
push 0x600a00
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a3212
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606f84
push 1
lea ecx, [ebp - 0x47b8]
call fcn.00401810
push eax
lea ecx, [ebp - 0x20cc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516b20
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a3212
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600a00
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a3212
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
push 0
push 0x2e
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
push 0x605b5c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x600a00
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x47b8]
call fcn.00401760
test al, al
jne 0x4a2f20
lea ecx, [ebp - 0x47b8]
mov byte [ebp - 4], 0xa5
call fcn.004016b0
mov eax, dword [ebp - 0x6ea8]
add esi, 0xc
inc eax
mov dword [ebp - 0x6ea8], eax
cmp eax, dword [edi + 0x30]
jb 0x4a2e80
cmp byte [edi + 0x14], 0
jne 0x4a3682
lea eax, [ebp - 0x22b8]
push eax
lea ecx, [ebp - 0x2034]
call fcn.00516e00
push 1
lea ecx, [ebp - 0x2034]
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606fa0
lea ecx, [ebp - 0x2034]
call fcn.00515270
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a343f
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608658
push 0x600ad0
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a343f
push 0
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x251c]
call fcn.004e6ab0
test al, al
je 0x4a343f
lea eax, [ebp - 0x2a08]
push eax
push 0x5f4ad4
push 0x6064a8
lea ecx, [ebp - 0x251c]
call fcn.004e63a0
test al, al
jne 0x4a3382
lea eax, [ebp - 0x2a08]
push eax
push 0x5f4ad4
push 0x6065e8
lea ecx, [ebp - 0x251c]
call fcn.004e63a0
test al, al
jne 0x4a3382
lea eax, [ebp - 0x2a08]
push eax
push 0x5f4ad4
push 0x600088
lea ecx, [ebp - 0x251c]
call fcn.004e63a0
test al, al
jne 0x4a3382
lea eax, [ebp - 0x2a08]
push eax
push 0x5f4ad4
push 0x606974
lea ecx, [ebp - 0x251c]
call fcn.004e63a0
test al, al
je 0x4a343f
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x5feab0
push 0x600ad0
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x4a343f
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feab0
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
push 0
push 0x2e
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2034]
call fcn.00516ab0
push eax
push 0x605b5c
push 0x60516c
push 0x606fc8
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608658
push 0x6029a8
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a3682
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a34c7
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608430
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a3480
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608430
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x4a352e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x608430
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp dword [ebp - 0x6ed4], 0
mov dword [ebp - 0x6ec4], 0
jbe 0x4a366f
mov eax, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ea8], eax
mov ecx, esi
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
je 0x4a3653
cmp byte [edi + 0x14], 0
jne 0x4a366f
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
lea ecx, [esi + ecx]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6029a8
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a3653
mov ecx, dword [ebp - 0x6ea8]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esi + ecx]
call fcn.00516ab0
push eax
push 0
mov ecx, esi
call fcn.00516ab0
push eax
push 0x2e
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
mov ecx, esi
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x605b5c
lea ecx, [esi + ecx]
call fcn.00516ab0
push eax
push 0x6042a8
push 0x6029a8
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6ec4], eax
cmp eax, dword [ebp - 0x6ed4]
jb 0x4a3553
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
lea ecx, [ebp - 0x25f0]
call fcn.00516d50
lea ecx, [ebp - 0x2220]
call fcn.00516d50
lea ecx, [ebp - 0x2258]
call fcn.00516d50
lea ecx, [ebp - 0x6d0c]
call fcn.00402930
lea ecx, [ebp - 0x251c]
call fcn.00401e30
lea ecx, [ebp - 0x22b8]
call fcn.00516d50
lea ecx, [ebp - 0x1fd0]
call fcn.00516d50
lea ecx, [ebp - 0x23d4]
call fcn.00516d50
lea ecx, [ebp - 0x2034]
call fcn.00516d50
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x45
call fcn.00516d50
cmp byte [edi + 0x14], 0
jne 0x4adfea
test dword [edi + 0x34], 0x1000
jne 0x4a5904
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x608684
push dword [eax + 0x38]
call fcn.004ed600
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2f
push dword [eax + 0x34]
call fcn.004ea4c0
push 0xc
lea ecx, [ebp - 0x2178]
call fcn.00401d00
lea ecx, [ebp - 0x2178]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xa7
call fcn.00401d00
lea ecx, [ebp - 0x204c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x248c]
mov byte [ebp - 4], 0xa8
call fcn.00401d00
lea ecx, [ebp - 0x248c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x216c]
mov byte [ebp - 4], 0xa9
call fcn.00401d00
lea ecx, [ebp - 0x216c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x238c]
mov byte [ebp - 4], 0xaa
call fcn.00401d00
lea ecx, [ebp - 0x238c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2288]
mov byte [ebp - 4], 0xab
call fcn.00401d00
lea ecx, [ebp - 0x2288]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2308]
mov byte [ebp - 4], 0xac
call fcn.00401d00
lea ecx, [ebp - 0x2308]
call fcn.00516ef0
xor esi, esi
mov byte [ebp - 4], 0xad
push 0x20
lea ecx, [ebp - 0x2864]
mov dword [ebp - 0x6eb8], esi
call fcn.00401e10
lea ecx, [ebp - 0x2864]
call fcn.00505a80
mov byte [ebp - 4], 0xae
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
push esi
push 0x6086b0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov dword [ebp - 0x6eb0], esi
cmp dword [edi + 0x30], esi
jbe 0x4a3c37
mov eax, dword [ebp - 0x6ed0]
mov dword [ebp - 0x6eac], eax
nop word [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4a3c31
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608724
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
push dword [ebp - 0x6eb0]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x238c]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608748
lea ecx, [ebp - 0x238c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2288]
call fcn.00516b20
lea ecx, [ebp - 0x2288]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a3c14
lea ecx, [ebp - 0x2308]
call fcn.005167b0
test al, al
je 0x4a3939
lea eax, [ebp - 0x2308]
push eax
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push dword [ebp - 0x6eb0]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.004c1c30
lea eax, [ebp - 0x2178]
xor esi, esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6ea8], esi
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004c1a70
test al, al
je 0x4a3c14
lea ecx, [ebp - 0x2178]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4a3bea
inc dword [ebp - 0x6eb8]
lea ecx, [ebp - 0x2444]
push 0xc
call fcn.00401d00
lea ecx, [ebp - 0x2444]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x25fc]
mov byte [ebp - 4], 0xaf
call fcn.00401d00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608764
lea ecx, [ebp - 0x2178]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x25fc]
call fcn.00516e40
lea eax, [ebp - 0x2444]
mov byte [ebp - 4], 0xb0
push eax
lea ecx, [ebp - 0x25fc]
call fcn.00516ab0
mov edx, 0x602a94
mov ecx, eax
call fcn.004c17e0
test al, al
je 0x4a3bd0
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x2444]
call fcn.00515510
test eax, eax
jne 0x4a3bd0
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x2444]
call fcn.00515510
test eax, eax
jne 0x4a3bd0
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x2444]
call fcn.00515510
test eax, eax
jne 0x4a3bd0
push eax
push 1
push 1
push eax
push 0x606510
lea ecx, [ebp - 0x2444]
call fcn.00515510
test eax, eax
jne 0x4a3bd0
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608778
lea ecx, [ebp - 0x2444]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a3bd0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2444]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x602a70
push 3
push 0x33
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
jne 0x4a3b13
lea ecx, [ebp - 0x25fc]
call fcn.00516d50
lea ecx, [ebp - 0x2444]
mov byte [ebp - 4], 0xae
call fcn.00516d50
mov esi, dword [ebp - 0x6ea8]
jmp 0x4a3bea
mov ecx, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x25fc]
call fcn.00516ab0
push eax
push 0
push 0x33
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x25fc]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2444]
call fcn.00516ab0
push eax
push 0x6087a4
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x25fc]
call fcn.00516d50
lea ecx, [ebp - 0x2444]
mov byte [ebp - 4], 0xae
call fcn.00516d50
mov esi, dword [ebp - 0x6ea8]
jmp 0x4a3bea
lea ecx, [ebp - 0x25fc]
call fcn.00516d50
lea ecx, [ebp - 0x2444]
mov byte [ebp - 4], 0xae
call fcn.00516d50
lea eax, [ebp - 0x2178]
inc esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6ea8], esi
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.004c1a70
test al, al
jne 0x4a3964
mov eax, dword [ebp - 0x6eb0]
add dword [ebp - 0x6eac], 0xc
inc eax
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [edi + 0x30]
jb 0x4a3860
mov esi, dword [ebp - 0x6eb8]
cmp byte [edi + 0x14], 0
jne 0x4a58a8
test esi, esi
jne 0x4a3c6a
lea ecx, [ebp - 0x2308]
call fcn.005167b0
test al, al
je 0x4a3c6a
push esi
push 0x6087e0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
jmp 0x4a58a8
push fcn.00516d50
push fcn.00516ef0
push 2
push 0xc
lea eax, [ebp - 0x2c]
push eax
call fcn.0041ec45
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608838
lea ecx, [ebp - 0x26bc]
mov byte [ebp - 4], 0xb1
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608838
lea ecx, [ebp - 0x26e0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00516b20
push 0xc
lea ecx, [ebp - 0x24bc]
call fcn.00401d00
push 1
push 0x608888
lea ecx, [ebp - 0x24bc]
call fcn.00516e80
push 0
push 0x608950
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0xb2
call fcn.00504a30
xor esi, esi
mov dword [ebp - 0x6eb0], esi
cmp dword [edi + 0x30], esi
jbe 0x4a40a0
mov eax, dword [ebp - 0x6ed0]
mov dword [ebp - 0x6eac], eax
cmp byte [edi + 0x14], 0
jne 0x4a5887
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608724
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x238c]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608748
lea ecx, [ebp - 0x238c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2288]
call fcn.00516b20
lea ecx, [ebp - 0x2288]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a4081
lea eax, [ebp - 0x2178]
xor esi, esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6ea8], esi
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004c1a70
test al, al
je 0x4a4081
nop
lea ecx, [ebp - 0x2178]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4a4057
push 0xc
lea ecx, [ebp - 0x2428]
call fcn.00401d00
lea ecx, [ebp - 0x2428]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2608]
mov byte [ebp - 4], 0xb3
call fcn.00401d00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608764
lea ecx, [ebp - 0x2178]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2608]
call fcn.00516e40
lea eax, [ebp - 0x2428]
mov byte [ebp - 4], 0xb4
push eax
lea ecx, [ebp - 0x2608]
call fcn.00516ab0
mov edx, 0x602bb0
mov ecx, eax
call fcn.004c17e0
test al, al
je 0x4a403d
push 0x601010
lea ecx, [ebp - 0x2428]
call fcn.00516de0
test al, al
jne 0x4a403d
push 0x60898c
lea ecx, [ebp - 0x2428]
call fcn.00516de0
test al, al
jne 0x4a403d
push 0x608998
lea ecx, [ebp - 0x2428]
call fcn.00516de0
test al, al
jne 0x4a403d
push 0x6089a4
lea ecx, [ebp - 0x2428]
call fcn.00516de0
test al, al
jne 0x4a403d
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6089bc
lea ecx, [ebp - 0x2428]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a403d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2428]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x602b70
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
jne 0x4a3f80
lea ecx, [ebp - 0x2608]
call fcn.00516d50
lea ecx, [ebp - 0x2428]
mov byte [ebp - 4], 0xb2
call fcn.00516d50
mov esi, dword [ebp - 0x6ea8]
jmp 0x4a4057
mov ecx, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2608]
call fcn.00516ab0
push eax
push 0
push 0x34
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2608]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2428]
call fcn.00516ab0
push eax
push 0x6089f0
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x2608]
call fcn.00516d50
lea ecx, [ebp - 0x2428]
mov byte [ebp - 4], 0xb2
call fcn.00516d50
mov esi, dword [ebp - 0x6ea8]
jmp 0x4a4057
lea ecx, [ebp - 0x2608]
call fcn.00516d50
lea ecx, [ebp - 0x2428]
mov byte [ebp - 4], 0xb2
call fcn.00516d50
lea eax, [ebp - 0x2178]
inc esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6ea8], esi
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.004c1a70
test al, al
jne 0x4a3df0
mov eax, dword [ebp - 0x6eb0]
add dword [ebp - 0x6eac], 0xc
inc eax
mov esi, eax
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [edi + 0x30]
jb 0x4a3d31
cmp byte [edi + 0x14], 0
jne 0x4a5887
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x6ec4], 0
mov dword [ebp - 0x6ea8], esi
nop dword [eax]
mov al, byte [edi + 0x14]
test al, al
jne 0x4a5887
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608a1c
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x39a8]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x39a8]
call fcn.00401660
push 1
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xb5
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x39a8]
call fcn.004017b0
test al, al
je 0x4a43cf
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed650
push 1
lea ecx, [ebp - 0x39a8]
call fcn.00401810
push eax
push 0x5ed650
lea ecx, [ebp - 0x216c]
call fcn.00516b20
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x216c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x24bc]
call fcn.00515510
test eax, eax
jne 0x4a43b6
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x39a8]
call fcn.00401810
push eax
push 0x5ed514
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516b20
lea ecx, [ebp - 0x216c]
call fcn.00516d20
push 0
push 0x80
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2864]
call fcn.005053b0
test eax, eax
je 0x4a4273
push 0
lea eax, [ebp - 0x216c]
push eax
lea ecx, [ebp - 0x2864]
call fcn.005051d0
test eax, eax
je 0x4a4273
push 0
push 1
push 1
push 0
push 0x608a2c
lea ecx, [ebp - 0x216c]
call fcn.00515510
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x608a44
lea ecx, [ebp - 0x216c]
call fcn.00515510
test esi, esi
je 0x4a4268
test eax, eax
je 0x4a4268
sub eax, esi
lea ecx, [ebp - 0x216c]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.005157c0
jmp 0x4a4273
lea ecx, [ebp - 0x216c]
call fcn.00516d20
lea ecx, [ebp - 0x216c]
call fcn.005167b0
test al, al
je 0x4a42aa
push 1
lea ecx, [ebp - 0x39a8]
call fcn.00401810
push eax
lea ecx, [ebp - 0x216c]
call fcn.00516e30
push 0
lea ecx, [ebp - 0x216c]
call fcn.00516840
jmp 0x4a42b7
push 3
lea ecx, [ebp - 0x216c]
call fcn.00514ca0
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6089bc
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a43b6
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0x5feab0
lea ecx, [ebp - 0x216c]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x4a43b6
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feab0
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0
push 0x34
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0x6050c8
push 0x5feab0
push 0x6042a8
lea ecx, [ebp - 0x216c]
call fcn.00516ab0
push eax
push 0x608a60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x39a8]
call fcn.00401760
mov esi, dword [ebp - 0x6ea8]
test al, al
jne 0x4a4145
lea ecx, [ebp - 0x39a8]
mov byte [ebp - 4], 0xb2
call fcn.004016b0
mov ecx, dword [ebp - 0x6ec4]
add esi, 0xc
inc ecx
mov dword [ebp - 0x6ea8], esi
mov dword [ebp - 0x6ec4], ecx
cmp ecx, 2
jb 0x4a40c0
mov al, byte [edi + 0x14]
test al, al
jne 0x4a5887
push 0x24
lea ecx, [ebp - 0x2830]
call fcn.00402030
lea ecx, [ebp - 0x2830]
call fcn.004e6cd0
push 0xc
lea ecx, [ebp - 0x2264]
mov byte [ebp - 4], 0xb6
call fcn.00401d00
lea ecx, [ebp - 0x2264]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2410]
mov byte [ebp - 4], 0xb7
call fcn.00401d00
lea ecx, [ebp - 0x2410]
call fcn.00516ef0
push 0
push 0x608a90
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0xb8
call fcn.00504a30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608ac4
lea ecx, [edi + 0x24c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6eb0], 0
jbe 0x4a4900
mov esi, dword [ebp - 0x6ed0]
mov dword [ebp - 0x6eb8], esi
nop
cmp byte [edi + 0x14], 0
jne 0x4a5866
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608b00
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
push dword [ebp - 0x6eb0]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00516b20
lea eax, [ebp - 0x204c]
xor edx, edx
push eax
lea ecx, [ebp - 0x2178]
mov dword [ebp - 0x6ea8], edx
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004c1a70
test al, al
je 0x4a48e1
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6031b0
lea ecx, [ebp - 0x204c]
call fcn.00515270
push 0x100
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2830]
call fcn.004e6ab0
test al, al
je 0x4a48b4
push 0
lea eax, [ebp - 0x2a54]
mov dword [ebp - 0x6e08], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x2830]
push 0x602dc8
movups xmmword [ebp - 0x6e18], xmm0
call fcn.004e64d0
test al, al
je 0x4a48b4
lea eax, [ebp - 0x2a54]
push eax
lea eax, [ebp - 0x6e18]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004e59f0
test al, al
je 0x4a48b4
lea eax, [ebp - 0x2264]
push eax
push 0x602dfc
lea eax, [ebp - 0x6e18]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004e6250
test eax, eax
je 0x4a4893
push 0
push 1
push 1
push 0
push 0x608b3c
lea ecx, [ebp - 0x2264]
call fcn.00515510
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00516cc0
sub eax, 0x12
cmp esi, eax
je 0x4a488d
push 0
push 1
push 1
push 0
push 0x608b64
lea ecx, [ebp - 0x2264]
call fcn.00515510
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00516cc0
sub eax, 0xb
cmp esi, eax
je 0x4a488d
push 0
push 1
push 1
push 0
push 0x608b80
lea ecx, [ebp - 0x2264]
call fcn.00515510
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00516cc0
sub eax, 0xb
cmp esi, eax
je 0x4a488d
lea eax, [ebp - 0x6e18]
push eax
lea eax, [ebp - 0x2b84]
push eax
push 0x608b9c
lea ecx, [ebp - 0x2830]
call fcn.004e64d0
test al, al
je 0x4a488d
lea eax, [ebp - 0x2264]
push eax
push 0x608bb8
lea eax, [ebp - 0x2b84]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004e6250
test eax, eax
je 0x4a488d
push 0x60645c
lea ecx, [ebp - 0x2264]
call fcn.00516de0
test al, al
jne 0x4a488d
lea eax, [ebp - 0x2410]
push eax
push 0x602dd8
lea eax, [ebp - 0x6e18]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004e6250
test eax, eax
jne 0x4a4742
lea eax, [ebp - 0x2410]
push eax
push 0x602df0
lea eax, [ebp - 0x6e18]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004e6250
test eax, eax
je 0x4a488d
lea ecx, [ebp - 0x2264]
call fcn.00516ab0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4a488d
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608bc4
lea ecx, [ebp - 0x2264]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a488d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2410]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2264]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x35
push dword [eax + 0xa8]
call fcn.004bb120
mov esi, eax
cmp esi, 0xffffffff
je 0x4a488d
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eb8]
push eax
push 0
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2410]
call fcn.00516ab0
push eax
push 0
push 0x35
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2410]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eb8]
mov ecx, esi
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2264]
call fcn.00516ab0
push eax
push 0x605960
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
jmp 0x4a4893
mov esi, dword [ebp - 0x6eb8]
lea eax, [ebp - 0x2a54]
push eax
lea eax, [ebp - 0x6e18]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004e59f0
test al, al
jne 0x4a45e0
inc dword [ebp - 0x6ea8]
lea eax, [ebp - 0x204c]
push eax
lea ecx, [ebp - 0x2178]
call fcn.00516ab0
mov edx, dword [ebp - 0x6ea8]
mov ecx, eax
call fcn.004c1a70
test al, al
jne 0x4a4540
mov eax, dword [ebp - 0x6eb0]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eb8], esi
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [edi + 0x30]
jb 0x4a44c0
cmp byte [edi + 0x14], 0
jne 0x4a5866
push 0
push 0x608bf0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6dc8]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6dd0], eax
mov dword [ebp - 0x6dcc], 0x37
call fcn.00516e80
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xb9
call fcn.00516ab0
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6dbc], eax
mov dword [ebp - 0x6db8], 0
call fcn.00516ab0
mov dword [ebp - 0x6db4], eax
lea ecx, [ebp - 0x6da8]
lea eax, [ebp - 0x1ff0]
push 1
mov dword [ebp - 0x6db0], eax
mov eax, dword [edi + 4]
push 0x608c20
mov dword [ebp - 0x6dac], eax
call fcn.00516e80
mov byte [ebp - 4], 0xba
cmp byte [edi + 0x14], 0
jne 0x4a585b
push 0xc
lea ecx, [ebp - 0x2398]
call fcn.00401d00
lea ecx, [ebp - 0x2398]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0xbb
call fcn.00401d00
lea ecx, [ebp - 0x23f8]
call fcn.00516ef0
xor eax, eax
mov byte [ebp - 4], 0xbc
mov dword [ebp - 0x6eb0], eax
cmp dword [edi + 0x30], eax
jbe 0x4a4b74
cmp byte [edi + 0x14], 0
jne 0x4a5845
push eax
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516cc0
cmp eax, 3
jl 0x4a4b5e
lea eax, [ebp - 0x6dc8]
push eax
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push dword [ebp - 0x6eb0]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.004c1c30
test al, al
je 0x4a4b5e
mov esi, dword [ebp - 0x6eb0]
lea ecx, [edi + 0x4c]
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6db8], eax
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2398]
call fcn.00516b20
lea ecx, [ebp - 0x2398]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4a4b5e
lea ecx, [ebp - 0x2398]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6dd0]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4a5845
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2398]
call fcn.00516b20
lea ecx, [ebp - 0x2398]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4a4b5e
push 0
lea ecx, [ebp - 0x2398]
call fcn.005167d0
lea ecx, [ebp - 0x2398]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6dd0]
mov ecx, edi
push eax
call fcn.004aed70
mov eax, dword [ebp - 0x6eb0]
inc eax
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [edi + 0x30]
jb 0x4a49f2
cmp byte [edi + 0x14], 0
jne 0x4a5845
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6db8], 0x5feab0
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6dd0]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4a5845
push 0
push 1
lea ecx, [ebp - 0x2668]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2398]
call fcn.00516b80
mov ecx, eax
call fcn.005167d0
lea ecx, [ebp - 0x2398]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6dd0]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4a5845
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a4c57
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608c40
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a4c10
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608c88
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x4a4cbe
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x608c88
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
push 4
lea ecx, [ebp - 0x22d8]
call fcn.00401d20
lea ecx, [ebp - 0x22d8]
call fcn.00511760
cmp dword [ebp - 0x6ed4], 0
mov byte [ebp - 4], 0xbd
mov dword [ebp - 0x6ec4], 0
jbe 0x4a5032
mov esi, dword [ebp - 0x6ed0]
mov eax, dword [ebp - 0x6ecc]
sub eax, esi
mov dword [ebp - 0x6eb0], 0
mov dword [ebp - 0x6eb8], esi
mov dword [ebp - 0x6f08], eax
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x22d8]
call fcn.005116f0
test al, al
je 0x4a5003
cmp byte [edi + 0x14], 0
jne 0x4a583a
mov esi, dword [ebp - 0x6ecc]
xor edx, edx
add esi, dword [ebp - 0x6eb0]
mov dword [ebp - 0x6ec0], edx
nop dword [eax]
lea eax, [ebp - 0x6c1c]
push eax
push edx
lea ecx, [ebp - 0x22d8]
call fcn.005110a0
test al, al
je 0x4a4ffd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608cd0
push dword [ebp - 0x6c1c]
mov ecx, esi
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
mov ecx, esi
mov dword [ebp - 0x6eac], esi
call fcn.00516cc0
push eax
push 1
push 0
push 0x608cf8
lea ecx, [ebp - 0x1f98]
call fcn.00515510
test eax, eax
je 0x4a4fde
lea eax, [ebp - 0x23f8]
mov dword [ebp - 0x6eac], esi
push eax
push 0x5ed51c
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005112a0
test al, al
je 0x4a4fde
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2308]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x23f8]
call fcn.00515510
mov dword [ebp - 0x6ee8], eax
mov ecx, esi
test eax, eax
je 0x4a4fe4
lea ecx, [ebp - 0x2308]
call fcn.00516cc0
add eax, dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x23f8]
push eax
call fcn.00515800
push 3
push 0
push 0
push 0x5ed51c
push 0x5f0068
lea ecx, [ebp - 0x23f8]
call fcn.00514e30
mov ecx, eax
call fcn.00514ca0
lea ecx, [ebp - 0x23f8]
mov dword [ebp - 0x6eac], esi
call fcn.00516cc0
cmp eax, 3
jl 0x4a4fde
push 0
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6eac], esi
call fcn.00516ab0
push eax
push 0x60412c
lea ecx, [ebp - 0x23f8]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a4fde
mov ecx, dword [ebp - 0x6ea8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x23f8]
call fcn.00516ab0
mov esi, dword [ebp - 0x6eb8]
mov ecx, esi
push eax
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600250
push 3
push 0x37
push dword [eax + 0xa8]
call fcn.004bb120
mov ecx, dword [ebp - 0x6ea8]
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a4fe4
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
push 0x37
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x23f8]
call fcn.00516ab0
push eax
push 0x606c18
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov ecx, dword [ebp - 0x6ea8]
jmp 0x4a4fe4
mov ecx, dword [ebp - 0x6eac]
mov edx, dword [ebp - 0x6ec0]
mov esi, ecx
inc edx
cmp byte [edi + 0x14], 0
mov dword [ebp - 0x6ec0], edx
je 0x4a4d60
mov esi, dword [ebp - 0x6eb8]
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
add dword [ebp - 0x6eb0], 0xc
inc eax
cmp eax, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], eax
mov eax, dword [ebp - 0x6f08]
mov dword [ebp - 0x6eb8], esi
jb 0x4a4d15
cmp byte [edi + 0x14], 0
jne 0x4a583a
push 0
push 0x608d10
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
push 0xc
lea ecx, [ebp - 0x24d4]
call fcn.00401d00
lea ecx, [ebp - 0x24d4]
call fcn.00516ef0
mov byte [ebp - 4], 0xbe
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6eb0], 0
jbe 0x4a581c
mov esi, dword [ebp - 0x6ed0]
cmp byte [edi + 0x14], 0
jne 0x4a581c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608b00
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
push dword [ebp - 0x6eb0]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00516b20
lea eax, [ebp - 0x24d4]
xor edx, edx
push eax
lea ecx, [ebp - 0x2178]
mov dword [ebp - 0x6ea8], edx
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004c1a70
test al, al
je 0x4a5803
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x602e04
lea ecx, [ebp - 0x24d4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516b20
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a5246
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608d48
push 0x6030c4
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a5246
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6030c4
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a5246
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0
push 0x38
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0x6050c8
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x6030c4
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60318c
lea ecx, [ebp - 0x24d4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516b20
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x4a52b2
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x6031b0
lea ecx, [ebp - 0x24d4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516b20
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a53c8
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608d48
push 0x603158
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a53c8
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x603158
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a53c8
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0
push 0x38
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0x6050c8
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x603158
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x603088
lea ecx, [ebp - 0x24d4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516b20
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x4a5434
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x6030a4
lea ecx, [ebp - 0x24d4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516b20
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a554a
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608d48
push 0x603040
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a554a
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x603040
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a554a
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0
push 0x38
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0x6050c8
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x603040
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608764
lea ecx, [ebp - 0x24d4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516b20
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a5690
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608d48
push 0x6031d4
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a5690
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6031d4
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a5690
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0
push 0x38
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0x6050c8
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x6031d4
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608d74
lea ecx, [ebp - 0x24d4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516b20
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a57d6
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x608d48
push 0x608d88
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a57d6
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x608d88
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a57d6
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0
push 0x38
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x204c]
call fcn.00516ab0
push eax
push 0x6050c8
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
push 0x608d88
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
inc dword [ebp - 0x6ea8]
lea eax, [ebp - 0x24d4]
push eax
lea ecx, [ebp - 0x2178]
call fcn.00516ab0
mov edx, dword [ebp - 0x6ea8]
mov ecx, eax
call fcn.004c1a70
test al, al
jne 0x4a5100
mov eax, dword [ebp - 0x6eb0]
add esi, 0xc
inc eax
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [edi + 0x30]
jb 0x4a5084
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
lea ecx, [ebp - 0x24d4]
call fcn.00516d50
lea ecx, [ebp - 0x22d8]
call fcn.005116a0
lea ecx, [ebp - 0x23f8]
call fcn.00516d50
lea ecx, [ebp - 0x2398]
call fcn.00516d50
lea ecx, [ebp - 0x6dd0]
call fcn.00402930
lea ecx, [ebp - 0x2410]
call fcn.00516d50
lea ecx, [ebp - 0x2264]
call fcn.00516d50
lea ecx, [ebp - 0x2830]
call fcn.00401e30
lea ecx, [ebp - 0x24bc]
call fcn.00516d50
push fcn.00516d50
push 2
push 0xc
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xae
push eax
call fcn.0041eb04
lea ecx, [ebp - 0x2864]
call fcn.00401df0
lea ecx, [ebp - 0x2308]
call fcn.00516d50
lea ecx, [ebp - 0x2288]
call fcn.00516d50
lea ecx, [ebp - 0x238c]
call fcn.00516d50
lea ecx, [ebp - 0x216c]
call fcn.00516d50
lea ecx, [ebp - 0x248c]
call fcn.00516d50
lea ecx, [ebp - 0x204c]
call fcn.00516d50
lea ecx, [ebp - 0x2178]
mov byte [ebp - 4], 0x45
call fcn.00516d50
cmp byte [edi + 0x14], 0
jne 0x4adfea
test dword [edi + 0x34], 0x1000
jne 0x4a9279
push 0
push 0x608dd0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x608e1c
push dword [eax + 0x38]
call fcn.004ed600
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x32
push dword [eax + 0x34]
call fcn.004ea4c0
push 0xc
lea ecx, [ebp - 0x2068]
call fcn.00401d00
lea ecx, [ebp - 0x2068]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x1fc0]
mov byte [ebp - 4], 0xbf
call fcn.00401d00
lea ecx, [ebp - 0x1fc0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x24e0]
mov byte [ebp - 4], 0xc0
call fcn.00401d00
lea ecx, [ebp - 0x24e0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x201c]
mov byte [ebp - 4], 0xc1
call fcn.00401d00
lea ecx, [ebp - 0x201c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x209c]
mov byte [ebp - 4], 0xc2
call fcn.00401d00
lea ecx, [ebp - 0x209c]
call fcn.00516ef0
push 0x24
lea ecx, [ebp - 0x259c]
mov byte [ebp - 4], 0xc3
call fcn.00402030
lea ecx, [ebp - 0x259c]
call fcn.004e6cd0
push 0x258
lea ecx, [ebp - 0x2df0]
mov byte [ebp - 4], 0xc4
call fcn.00401d60
lea ecx, [ebp - 0x2df0]
call fcn.00401630
push 0x258
lea ecx, [ebp - 0x32a0]
mov byte [ebp - 4], 0xc5
call fcn.00401d60
lea ecx, [ebp - 0x32a0]
call fcn.00401630
push 0xc
lea ecx, [ebp - 0x21c0]
mov byte [ebp - 4], 0xc6
call fcn.00401d00
lea ecx, [ebp - 0x21c0]
call fcn.00403d20
push 0xc
lea ecx, [ebp - 0x2368]
mov byte [ebp - 4], 0xc7
call fcn.00401d00
push 0xc
push 0
lea ecx, [ebp - 0x2368]
call fcn.004040b0
push 0xc
lea ecx, [ebp - 0x2058]
mov byte [ebp - 4], 0xc8
call fcn.00401d00
push 0xc
push 0
lea ecx, [ebp - 0x2058]
call fcn.004040b0
push 0xc
lea ecx, [ebp - 0x21f0]
mov byte [ebp - 4], 0xc9
call fcn.00401d00
lea ecx, [ebp - 0x21f0]
call fcn.00403d20
push 0xc
lea ecx, [ebp - 0x2208]
mov byte [ebp - 4], 0xca
call fcn.00401d00
push 0xc
push 0
lea ecx, [ebp - 0x2208]
call fcn.00403280
xor esi, esi
mov byte [ebp - 4], 0xcb
push 0x20
lea ecx, [ebp - 0x280c]
mov dword [ebp - 0x6eb8], esi
call fcn.00401e10
lea ecx, [ebp - 0x280c]
call fcn.00505a80
mov byte [ebp - 4], 0xcc
mov eax, dword [edi + 0x30]
mov dword [ebp - 0x6ea8], esi
test eax, eax
je 0x4a6190
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed664
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516b20
push 5
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2df0]
call fcn.004017b0
test al, al
je 0x4a6178
mov edi, dword [ebp - 0x6eb8]
nop dword [eax + eax]
push 1
push 1
lea ecx, [ebp - 0x2df0]
call fcn.00401810
push eax
lea ecx, [ebp - 0x209c]
call fcn.00516b80
push 0x601010
lea ecx, [ebp - 0x209c]
call fcn.00516de0
test al, al
jne 0x4a6159
push str.Microsoft
lea ecx, [ebp - 0x209c]
call fcn.00516de0
test al, al
jne 0x4a6159
push 0x608e54
lea ecx, [ebp - 0x209c]
call fcn.00516de0
test al, al
jne 0x4a6159
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608e68
push 1
lea ecx, [ebp - 0x2df0]
call fcn.00401810
push eax
push 0x5ed514
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6f1c]
push eax
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test al, al
jne 0x4a5fb1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608ea0
push 1
lea ecx, [ebp - 0x2df0]
call fcn.00401810
push eax
push 0x5ed514
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6f1c]
push eax
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test al, al
jne 0x4a5fb1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed664
push 1
lea ecx, [ebp - 0x2df0]
call fcn.00401810
push eax
push 0x5ed514
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6f1c]
push eax
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516b20
push 5
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x32a0]
call fcn.004017b0
test al, al
je 0x4a6159
push 2
lea ecx, [ebp - 0x1fc0]
call fcn.00515870
mov esi, dword [0x5cd624]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608e68
push 1
lea ecx, [ebp - 0x32a0]
call fcn.00401810
push eax
push 0x5ed514
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
call esi
test eax, eax
jne 0x4a5dce
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x608ea0
push 1
lea ecx, [ebp - 0x32a0]
call fcn.00401810
push eax
push 0x5ed514
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
call esi
test eax, eax
je 0x4a5f93
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608ef0
push 1
lea ecx, [ebp - 0x32a0]
lea esi, [edi + 1]
call fcn.00401810
push eax
push 0x5ed514
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push edi
push 2
push esi
lea ecx, [ebp - 0x21c0]
call fcn.00403ea0
mov ecx, eax
call fcn.00404020
mov ecx, eax
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32a0]
call fcn.00401810
push eax
push 0x5ed514
push 1
lea ecx, [ebp - 0x2df0]
call fcn.00401810
push eax
push edi
push 2
push esi
lea ecx, [ebp - 0x2368]
call fcn.00403ea0
mov ecx, eax
call fcn.00404020
mov ecx, eax
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32a0]
call fcn.00401810
push eax
push 0x5eff2c
push 1
lea ecx, [ebp - 0x2df0]
call fcn.00401810
push eax
push edi
push 2
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403ea0
mov ecx, eax
call fcn.00404020
mov ecx, eax
call fcn.00516b20
push edi
push 2
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403190
mov ecx, eax
call fcn.00403260
mov ecx, dword [ebp - 0x6ea8]
push 2
push esi
mov dword [eax], ecx
lea ecx, [ebp - 0x21f0]
call fcn.00403ea0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608f08
push edi
lea ecx, [ebp - 0x21c0]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
mov dl, 1
mov ecx, eax
call fcn.00504780
push 0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x280c]
call fcn.005053b0
test eax, eax
je 0x4a5f8b
push 0
push edi
lea ecx, [ebp - 0x21f0]
call fcn.00404020
push eax
lea ecx, [ebp - 0x280c]
call fcn.005051d0
test eax, eax
je 0x4a5f8b
push 3
push edi
lea ecx, [ebp - 0x21f0]
call fcn.00404020
mov ecx, eax
call fcn.00514ca0
mov edi, esi
mov esi, dword [0x5cd624]
lea ecx, [ebp - 0x32a0]
call fcn.00401760
test al, al
jne 0x4a5d30
mov esi, dword [ebp - 0x6ea8]
jmp 0x4a6159
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608ef0
lea eax, [edi + 1]
push 1
lea ecx, [ebp - 0x2df0]
mov dword [ebp - 0x6eac], eax
call fcn.00401810
push eax
push 0x5ed514
lea ecx, [ebp - 0x2184]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6f1c]
push eax
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push edi
push 2
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x21c0]
call fcn.00403ea0
mov ecx, eax
call fcn.00404020
mov ecx, eax
call fcn.00516b20
push 1
push 1
lea ecx, [ebp - 0x2df0]
call fcn.00401810
push eax
push edi
push 2
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2368]
call fcn.00403ea0
mov ecx, eax
call fcn.00404020
mov ecx, eax
call fcn.00516b80
push 1
push 1
lea ecx, [ebp - 0x2df0]
call fcn.00401810
push eax
push edi
push 2
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2058]
call fcn.00403ea0
mov ecx, eax
call fcn.00404020
mov ecx, eax
call fcn.00516b80
push edi
push 2
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2208]
call fcn.00403190
mov ecx, eax
call fcn.00403260
push 2
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x21f0]
mov dword [eax], esi
call fcn.00403ea0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608f08
push edi
lea ecx, [ebp - 0x21c0]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
mov dl, 1
mov ecx, eax
call fcn.00504780
push 0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x280c]
call fcn.005053b0
test eax, eax
je 0x4a6153
push 0
push edi
lea ecx, [ebp - 0x21f0]
call fcn.00404020
push eax
lea ecx, [ebp - 0x280c]
call fcn.005051d0
test eax, eax
je 0x4a6153
push 3
push edi
lea ecx, [ebp - 0x21f0]
call fcn.00404020
mov ecx, eax
call fcn.00514ca0
mov edi, dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2df0]
call fcn.00401760
test al, al
jne 0x4a5b70
mov dword [ebp - 0x6eb8], edi
mov edi, dword [ebp - 0x6ebc]
mov eax, dword [edi + 0x30]
inc esi
mov dword [ebp - 0x6ea8], esi
cmp esi, eax
jb 0x4a5b05
mov esi, dword [ebp - 0x6eb8]
mov dword [ebp - 0x6eac], 0
test eax, eax
je 0x4a639a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608f28
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
push ecx
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x4a6252
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x608f90
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
push dword [ebp - 0x6eac]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a6384
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608ff8
lea ecx, [ebp - 0x2238]
inc esi
call fcn.00516ab0
push eax
push dword [ebp - 0x6eac]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push dword [ebp - 0x6eb8]
lea ecx, [ebp - 0x21c0]
push 2
push esi
call fcn.00403ea0
mov ecx, eax
call fcn.00404020
mov ecx, eax
call fcn.00516b20
push 1
push 0x609018
push dword [ebp - 0x6eb8]
lea ecx, [ebp - 0x2368]
push 2
push esi
call fcn.00403ea0
mov ecx, eax
call fcn.00404020
mov ecx, eax
call fcn.00516b80
push 1
push 0x609050
push dword [ebp - 0x6eb8]
lea ecx, [ebp - 0x2058]
push 2
push esi
call fcn.00403ea0
mov ecx, eax
call fcn.00404020
mov ecx, eax
call fcn.00516b80
push dword [ebp - 0x6eb8]
lea ecx, [ebp - 0x2208]
push 2
push esi
call fcn.00403190
mov ecx, eax
call fcn.00403260
mov ecx, dword [ebp - 0x6eac]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [eax], ecx
lea ecx, [ebp - 0x2184]
push 0x60906c
call fcn.00516ab0
push eax
push dword [ebp - 0x6eac]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push dword [ebp - 0x6eb8]
push 2
push esi
lea ecx, [ebp - 0x21f0]
call fcn.00403ea0
mov ecx, eax
call fcn.00404020
mov ecx, eax
call fcn.00516b20
mov dword [ebp - 0x6eb8], esi
mov eax, dword [ebp - 0x6eac]
inc eax
mov dword [ebp - 0x6eac], eax
cmp eax, dword [edi + 0x30]
jb 0x4a61a2
cmp byte [edi + 0x14], 0
jne 0x4a91db
lea ecx, [ebp - 0x1ff0]
push 0
test esi, esi
jne 0x4a63bf
push 0x6090b0
call fcn.00504a30
jmp 0x4a91db
push 0x609140
call fcn.00504a30
xor esi, esi
mov dword [ebp - 0x6eac], esi
cmp dword [ebp - 0x6eb8], esi
jbe 0x4a6ab3
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a91db
push 0x609050
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516de0
mov byte [ebp - 0x6ec5], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4a642d
push 0x6091ac
jmp 0x4a6432
push 0x6091b8
push esi
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403260
push 0x258
lea ecx, [ebp - 0x55c8]
mov eax, dword [eax]
mov dword [ebp - 0x6ec4], eax
call fcn.00401d60
push 1
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x55c8]
call fcn.00401660
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xcd
call fcn.00515870
lea ecx, [ebp - 0x55c8]
call fcn.004017a0
test al, al
je 0x4a6a91
nop dword [eax]
push 1
lea ecx, [ebp - 0x55c8]
call fcn.00401810
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516e30
cmp byte [ebp - 0x6ec5], 0
jne 0x4a6507
push 0x60645c
lea ecx, [ebp - 0x1fc0]
call fcn.00516da0
test al, al
je 0x4a6507
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x1fc0]
call fcn.00515510
cmp eax, 1
jne 0x4a6a7e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
lea ecx, [ebp - 0x55c8]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516b20
push 0x100
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e6ab0
test al, al
je 0x4a6a7e
lea eax, [ebp - 0x201c]
push eax
push 0x5f4ad4
push 0x6064a8
lea ecx, [ebp - 0x259c]
call fcn.004e62a0
test eax, eax
je 0x4a67b8
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a67b8
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a67b8
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a67b8
push 0x6064f8
lea ecx, [ebp - 0x201c]
call fcn.00516de0
test al, al
jne 0x4a67b8
push 0
push 1
push 1
push 0
push 0x606510
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a67b8
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6091c8
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a67b8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed62c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609214
lea ecx, [ebp - 0x25cc]
call fcn.00516b20
mov eax, dword [ebp - 0x6ec4]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x201c]
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a67b8
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0x6064a8
push 0x3e
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0x605b5c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x60428c
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
push 0x6065c8
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea eax, [ebp - 0x2ab8]
mov dword [ebp - 0x6e44], 0
push eax
push 0x5f4ad4
xorps xmm0, xmm0
lea ecx, [ebp - 0x259c]
push 0x6065e8
movups xmmword [ebp - 0x6e54], xmm0
call fcn.004e63a0
test al, al
je 0x4a6a7e
lea eax, [ebp - 0x2ab8]
push eax
lea eax, [ebp - 0x6e54]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e59f0
test al, al
je 0x4a6a7e
lea eax, [ebp - 0x201c]
push eax
lea eax, [ebp - 0x6e54]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e5d00
test eax, eax
je 0x4a6a5d
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a6a5d
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a6a5d
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a6a5d
push 0x6064f8
lea ecx, [ebp - 0x201c]
call fcn.00516de0
test al, al
jne 0x4a6a5d
push 0
push 1
push 1
push 0
push 0x606510
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a6a5d
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6091c8
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a6a5d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed62c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60922c
lea ecx, [ebp - 0x25cc]
call fcn.00516b20
mov eax, dword [ebp - 0x6ec4]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a6a57
push 0
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0x6065e8
push 0x3e
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0x605b5c
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
push 0x60924c
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov esi, dword [ebp - 0x6eac]
lea eax, [ebp - 0x2ab8]
push eax
lea eax, [ebp - 0x6e54]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e59f0
test al, al
jne 0x4a6811
lea ecx, [ebp - 0x55c8]
call fcn.00401760
test al, al
jne 0x4a64b0
lea ecx, [ebp - 0x55c8]
mov byte [ebp - 4], 0xcc
call fcn.004016b0
inc esi
mov dword [ebp - 0x6eac], esi
cmp esi, dword [ebp - 0x6eb8]
jb 0x4a63e0
cmp byte [edi + 0x14], 0
jne 0x4a91db
push 0
push 0x609280
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov esi, dword [ebp - 0x6eb8]
xor eax, eax
mov dword [ebp - 0x6eac], eax
test esi, esi
je 0x4a6f0a
cmp byte [edi + 0x14], 0
jne 0x4a91db
push eax
lea ecx, [ebp - 0x2208]
call fcn.00403260
push 0x609050
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2058]
mov eax, dword [eax]
mov dword [ebp - 0x6ee8], eax
call fcn.00404020
mov ecx, eax
call fcn.00516de0
mov byte [ebp - 0x6ec5], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4a6b4b
push 0x6091ac
jmp 0x4a6b50
push 0x6091b8
push dword [ebp - 0x6eac]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x5820]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x5820]
call fcn.00401660
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xce
call fcn.00515870
lea ecx, [ebp - 0x5820]
call fcn.004017a0
test al, al
je 0x4a6ee6
mov esi, dword [ebp - 0x6eac]
push 1
lea ecx, [ebp - 0x5820]
call fcn.00401810
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516e30
cmp byte [ebp - 0x6ec5], 0
jne 0x4a6c18
push 0x60645c
lea ecx, [ebp - 0x1fc0]
call fcn.00516da0
test al, al
je 0x4a6c18
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x1fc0]
call fcn.00515510
cmp eax, 1
jne 0x4a6ecd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
lea ecx, [ebp - 0x5820]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516b20
push 0x100
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e6ab0
test al, al
je 0x4a6ecd
lea eax, [ebp - 0x201c]
push eax
push 0x5f4ad4
push 0x606760
lea ecx, [ebp - 0x259c]
call fcn.004e62a0
test eax, eax
je 0x4a6ecd
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a6ecd
push eax
push 1
push 1
push eax
push 0x606614
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a6ecd
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a6ecd
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a6ecd
push eax
push 1
push 1
push eax
push 0x606638
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a6ecd
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6092e0
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a6ecd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed62c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609334
lea ecx, [ebp - 0x25cc]
call fcn.00516b20
mov eax, dword [ebp - 0x6ee8]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x201c]
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3f
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
je 0x4a6ecd
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0x606840
push 0x3f
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0x605b5c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x60428c
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
push 0x609368
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x5820]
call fcn.00401760
test al, al
jne 0x4a6bc1
mov esi, dword [ebp - 0x6eb8]
lea ecx, [ebp - 0x5820]
mov byte [ebp - 4], 0xcc
call fcn.004016b0
mov eax, dword [ebp - 0x6eac]
inc eax
mov dword [ebp - 0x6eac], eax
cmp eax, esi
jb 0x4a6ae5
cmp byte [edi + 0x14], 0
jne 0x4a91db
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6093b0
lea ecx, [edi + 0x24c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x6093f0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
xor eax, eax
mov dword [ebp - 0x6eac], eax
test esi, esi
je 0x4a7558
cmp byte [edi + 0x14], 0
jne 0x4a91db
push eax
lea ecx, [ebp - 0x2208]
call fcn.00403260
push 0xc
lea ecx, [ebp - 0x26d4]
mov eax, dword [eax]
mov dword [ebp - 0x6ee8], eax
call fcn.00401d00
lea ecx, [ebp - 0x26d4]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x26ec]
mov byte [ebp - 4], 0xcf
call fcn.00401d00
lea ecx, [ebp - 0x26ec]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2614]
mov byte [ebp - 4], 0xd0
call fcn.00401d00
lea ecx, [ebp - 0x2614]
call fcn.00516ef0
push 0x609050
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2058]
mov byte [ebp - 4], 0xd1
call fcn.00404020
mov ecx, eax
call fcn.00516de0
mov byte [ebp - 0x6ec5], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4a7020
push 0x6091ac
jmp 0x4a7025
push 0x6091b8
push dword [ebp - 0x6eac]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x4a10]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x4a10]
call fcn.00401660
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xd2
call fcn.00515870
lea ecx, [ebp - 0x4a10]
call fcn.004017a0
test al, al
je 0x4a7513
push 1
lea ecx, [ebp - 0x4a10]
call fcn.00401810
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516e30
cmp byte [ebp - 0x6ec5], 0
jne 0x4a70e7
push 0x60645c
lea ecx, [ebp - 0x1fc0]
call fcn.00516da0
test al, al
je 0x4a70e7
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x1fc0]
call fcn.00515510
cmp eax, 1
jne 0x4a74fa
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
lea ecx, [ebp - 0x4a10]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516b20
push 0x100
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e6ab0
test al, al
je 0x4a74fa
lea eax, [ebp - 0x2a40]
mov dword [ebp - 0x6e30], 0
push eax
push 0x5f4ad4
xorps xmm0, xmm0
lea ecx, [ebp - 0x259c]
push 0x606974
movups xmmword [ebp - 0x6e40], xmm0
call fcn.004e63a0
test al, al
je 0x4a74fa
lea eax, [ebp - 0x2a40]
push eax
lea eax, [ebp - 0x6e40]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e5dc0
test al, al
je 0x4a74fa
lea eax, [ebp - 0x26d4]
push eax
lea eax, [ebp - 0x6e40]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e6360
test al, al
je 0x4a74d9
lea ecx, [ebp - 0x26d4]
call fcn.00516ab0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4a74d9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6069a0
lea ecx, [ebp - 0x26d4]
call fcn.00516ab0
push eax
push 0x6069c4
lea ecx, [ebp - 0x26ec]
call fcn.00516b20
lea eax, [ebp - 0x209c]
push eax
push 0x5f4ad4
lea ecx, [ebp - 0x26ec]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e62a0
test eax, eax
je 0x4a74d9
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4a74d9
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609448
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a74d9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6069f4
lea ecx, [ebp - 0x26d4]
call fcn.00516ab0
push eax
push 0x6069c4
lea ecx, [ebp - 0x26ec]
call fcn.00516b20
lea eax, [ebp - 0x2614]
push eax
push 0x5f4ad4
lea ecx, [ebp - 0x26ec]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e62a0
test eax, eax
je 0x4a7348
push 0
push 1
push 1
push 5
push 0x5f0150
lea ecx, [ebp - 0x2614]
call fcn.00515510
test eax, eax
jne 0x4a7348
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x606a04
push 1
lea ecx, [ebp - 0x4a10]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2614]
call fcn.005150b0
lea ecx, [ebp - 0x2614]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a74d9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26d4]
call fcn.00516ab0
push eax
push 0x6069c4
lea ecx, [ebp - 0x26ec]
call fcn.00516b20
mov eax, dword [ebp - 0x6ee8]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2614]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x40
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
je 0x4a74d9
push 0
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
lea ecx, [ebp - 0x2614]
call fcn.00516ab0
push eax
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x26ec]
call fcn.00516ab0
push eax
push 0x40
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0x606594
lea ecx, [ebp - 0x2614]
call fcn.00516ab0
push eax
push 0x6050c8
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x606a20
lea ecx, [ebp - 0x26d4]
call fcn.00516ab0
push eax
push 0x5f83bc
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
push 0x609490
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea eax, [ebp - 0x2a40]
push eax
lea eax, [ebp - 0x6e40]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e5dc0
test al, al
jne 0x4a71a0
lea ecx, [ebp - 0x4a10]
call fcn.00401760
test al, al
jne 0x4a7090
mov esi, dword [ebp - 0x6eb8]
lea ecx, [ebp - 0x4a10]
call fcn.004016b0
lea ecx, [ebp - 0x2614]
call fcn.00516d50
lea ecx, [ebp - 0x26ec]
call fcn.00516d50
lea ecx, [ebp - 0x26d4]
mov byte [ebp - 4], 0xcc
call fcn.00516d50
mov eax, dword [ebp - 0x6eac]
inc eax
mov dword [ebp - 0x6eac], eax
cmp eax, esi
jb 0x4a6f66
cmp byte [edi + 0x14], 0
jne 0x4a91db
push 0
push 0x6094c0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6d94]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6d9c], eax
mov dword [ebp - 0x6d98], 0x41
call fcn.00516e80
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xd3
call fcn.00516ab0
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6d88], eax
mov dword [ebp - 0x6d84], 0
call fcn.00516ab0
mov dword [ebp - 0x6d80], eax
lea ecx, [ebp - 0x6d74]
lea eax, [ebp - 0x1ff0]
mov dword [ebp - 0x6d7c], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6d78], eax
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x235c]
mov byte [ebp - 4], 0xd4
call fcn.00401d00
lea ecx, [ebp - 0x235c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x22f0]
mov byte [ebp - 4], 0xd5
call fcn.00401d00
lea ecx, [ebp - 0x22f0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2350]
mov byte [ebp - 4], 0xd6
call fcn.00401d00
lea ecx, [ebp - 0x2350]
call fcn.00516ef0
mov byte [ebp - 4], 0xd7
cmp byte [edi + 0x14], 0
jne 0x4a91af
xor eax, eax
mov dword [ebp - 0x6eb0], eax
test esi, esi
je 0x4a78cc
nop
cmp byte [edi + 0x14], 0
jne 0x4a91af
push eax
lea ecx, [ebp - 0x21f0]
call fcn.00404020
mov ecx, eax
call fcn.00516cc0
cmp eax, 5
jl 0x4a78b3
mov esi, dword [ebp - 0x6eb0]
lea ecx, [ebp - 0x21f0]
push esi
call fcn.00404020
push eax
lea ecx, [ebp - 0x6d94]
call fcn.00516e00
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403260
mov ecx, dword [ebp - 0x6ed0]
mov eax, dword [eax]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00516ab0
push esi
lea ecx, [ebp - 0x2058]
mov dword [ebp - 0x6d84], eax
call fcn.00404020
push eax
lea ecx, [ebp - 0x6d74]
call fcn.00516e00
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov esi, eax
call fcn.00516ab0
push eax
push dword [esi]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x235c]
call fcn.00516b20
lea ecx, [ebp - 0x235c]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4a78b3
lea ecx, [ebp - 0x235c]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d9c]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4a91af
push dword [ebp - 0x6eb0]
lea ecx, [ebp - 0x2208]
call fcn.00403260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
mov esi, eax
call fcn.00516ab0
push eax
push dword [esi]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x235c]
call fcn.00516b20
lea ecx, [ebp - 0x235c]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4a78b3
push 0
lea ecx, [ebp - 0x235c]
call fcn.005167d0
lea ecx, [ebp - 0x235c]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d9c]
mov ecx, edi
push eax
call fcn.004aed70
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x6d94]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2350]
call fcn.00515510
test eax, eax
jne 0x4a78b3
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5ed650
lea ecx, [ebp - 0x6d94]
call fcn.00516ab0
push eax
push 0x5ed650
lea ecx, [ebp - 0x2350]
call fcn.00515270
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6d84], 0x5feab0
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d9c]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4a91af
lea eax, [ebp - 0x2668]
push eax
lea ecx, [ebp - 0x235c]
call fcn.00516e00
push 0
lea ecx, [ebp - 0x235c]
call fcn.005167d0
lea ecx, [ebp - 0x235c]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6d9c]
mov ecx, edi
push eax
call fcn.004aed70
mov eax, dword [ebp - 0x6eb0]
inc eax
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [ebp - 0x6eb8]
jb 0x4a7660
cmp byte [edi + 0x14], 0
jne 0x4a91af
push 4
lea ecx, [ebp - 0x2130]
call fcn.00401d20
lea ecx, [ebp - 0x2130]
call fcn.00511760
xor esi, esi
mov byte [ebp - 4], 0xd8
cmp dword [ebp - 0x6eb8], esi
jbe 0x4a7cf8
mov dword [ebp - 0x6ec0], 0
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403260
mov ecx, dword [ebp - 0x6ec0]
mov eax, dword [eax]
mov dword [ebp - 0x6ec4], eax
test ecx, ecx
jne 0x4a797c
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push 0x608c40
push eax
lea ecx, [edi + 0x3c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
mov eax, dword [ebp - 0x6ec4]
mov ecx, dword [ebp - 0x6ed0]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00516ab0
mov dword [ebp - 0x6eb0], eax
jmp 0x4a79db
cmp ecx, 1
jne 0x4a79a2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608c40
push dword [ebp - 0x6ed8]
jmp 0x4a79c6
cmp ecx, 2
jne 0x4a79d1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608c40
push dword [ebp - 0x6edc]
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
mov dword [ebp - 0x6eb0], 0x5feab0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2130]
call fcn.005116f0
test al, al
je 0x4a7cd5
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ea8], 0
push eax
push 0
lea ecx, [ebp - 0x2130]
call fcn.005110a0
test al, al
je 0x4a7cd5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608cd0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f98]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4a7cad
lea eax, [ebp - 0x22f0]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4a7cad
lea ecx, [ebp - 0x22f0]
call fcn.005167b0
test al, al
jne 0x4a7cad
push dword [ebp - 0x6ec4]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x22f0]
call fcn.00516530
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x21f0]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x22f0]
call fcn.00515510
test eax, eax
je 0x4a7cad
push esi
lea ecx, [ebp - 0x21f0]
call fcn.00404020
mov ecx, eax
call fcn.00516cc0
inc eax
lea ecx, [ebp - 0x22f0]
push eax
call fcn.00515800
push 0
push 0
push 0x5ed51c
push 0x5f0068
push 3
lea ecx, [ebp - 0x22f0]
call fcn.00514ca0
mov ecx, eax
call fcn.00514e30
lea ecx, [ebp - 0x22f0]
call fcn.005167b0
test al, al
jne 0x4a7cad
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f98]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516b20
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x604188
lea ecx, [ebp - 0x22f0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a7cad
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x22f0]
call fcn.00516ab0
push eax
push dword [ebp - 0x6eb0]
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600250
push 5
push 0x41
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a7cad
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
push 0
push 0
push dword [ebp - 0x6eb0]
lea ecx, [ebp - 0x1fc0]
push 0
call fcn.00516ab0
push eax
push 0x41
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
push dword [ebp - 0x6eb0]
lea ecx, [ebp - 0x22f0]
push 0x6042a8
call fcn.00516ab0
push eax
push 0x606c18
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ea8]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2130]
mov dword [ebp - 0x6ea8], eax
call fcn.005110a0
test al, al
jne 0x4a7a27
mov eax, dword [ebp - 0x6ec0]
inc eax
mov dword [ebp - 0x6ec0], eax
cmp eax, 3
jb 0x4a7910
inc esi
cmp esi, dword [ebp - 0x6eb8]
jb 0x4a7900
cmp byte [edi + 0x14], 0
jne 0x4a91a4
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a7d67
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60952c
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a7d20
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609554
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x4a7dce
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x609554
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
push 0
push 0x609580
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
lea ecx, [ebp - 0x2350]
call fcn.00516d20
mov edx, dword [ebp - 0x6ed4]
test edx, edx
je 0x4a85c3
mov eax, dword [ebp - 0x6ecc]
mov ecx, edx
mov esi, dword [ebp - 0x6ed0]
sub eax, esi
mov dword [ebp - 0x6ee8], eax
mov eax, dword [ebp - 0x6eb8]
mov dword [ebp - 0x6ea8], ecx
nop dword [eax + eax]
xor edx, edx
mov dword [ebp - 0x6ec0], edx
test eax, eax
je 0x4a85b1
cmp byte [edi + 0x14], 0
jne 0x4a85ab
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push edx
lea ecx, [ebp - 0x2368]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ee8]
push eax
push 0x5ed514
lea ecx, [esi + ecx]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2120]
call fcn.00516b20
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2350]
call fcn.00515510
test eax, eax
jne 0x4a8590
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5ed650
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2350]
call fcn.00515270
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4a80ed
lea eax, [ebp - 0x201c]
push eax
push 0x600404
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4a80ed
lea eax, [ebp - 0x21ac]
mov dword [ebp - 0x21ac], 0
push eax
push 0x6004a4
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x4a7f43
cmp dword [ebp - 0x21ac], 0
jne 0x4a80ed
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a80ed
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a80ed
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a80ed
push eax
push 1
push 1
push eax
push 0x606510
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a80ed
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6095e0
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a80ed
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600404
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
je 0x4a80ed
push 0
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
push 0
push 0x600404
mov ecx, esi
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
push 0x43
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
push 0x609630
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea eax, [ebp - 0x201c]
push eax
push 0x600544
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4a8351
lea eax, [ebp - 0x21ac]
mov dword [ebp - 0x21ac], 0
push eax
push 0x600644
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x4a813e
cmp dword [ebp - 0x21ac], 0
je 0x4a8351
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a8351
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a8351
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a8351
push eax
push 1
push 1
push eax
push 0x606510
lea ecx, [ebp - 0x201c]
call fcn.00515510
test eax, eax
jne 0x4a8351
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6095e0
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a8351
lea eax, [ebp - 0x209c]
push eax
push 0x600610
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4a8351
lea ecx, [ebp - 0x209c]
call fcn.005167b0
test al, al
jne 0x4a8351
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606dd0
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x22f0]
call fcn.00516b20
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x22f0]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
je 0x4a8351
push 0
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
push 0
push 0x600544
mov ecx, esi
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
push 0x43
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
push 0x609670
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea eax, [ebp - 0x21ac]
mov dword [ebp - 0x21ac], 0
push eax
push 0x606e58
lea ecx, [ebp - 0x1f74]
call fcn.00511380
test al, al
je 0x4a8590
cmp dword [ebp - 0x21ac], 4
jne 0x4a8590
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606e7c
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2130]
call fcn.005116f0
test al, al
je 0x4a8590
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec4], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00511000
test al, al
je 0x4a8590
lea eax, [ebp - 0x201c]
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4a8568
lea ecx, [ebp - 0x201c]
call fcn.005167b0
test al, al
jne 0x4a8568
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6095e0
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a8568
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600800
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
je 0x4a8568
push 0
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
mov ecx, esi
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
push 0x43
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x201c]
call fcn.00516ab0
push eax
push 0x6096bc
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6ec4]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6ec4], eax
call fcn.00511000
test al, al
jne 0x4a8403
mov edx, dword [ebp - 0x6ec0]
mov eax, dword [ebp - 0x6eb8]
inc edx
mov dword [ebp - 0x6ec0], edx
cmp edx, eax
jb 0x4a7e30
mov ecx, dword [ebp - 0x6ea8]
add esi, 0xc
sub ecx, 1
mov dword [ebp - 0x6ea8], ecx
jne 0x4a7e20
cmp byte [edi + 0x14], 0
jne 0x4a91a4
push 0
push 0x6096f0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov esi, dword [ebp - 0x6eb8]
xor eax, eax
mov dword [ebp - 0x6eac], eax
test esi, esi
je 0x4a8b7a
cmp byte [edi + 0x14], 0
jne 0x4a91a4
push eax
lea ecx, [ebp - 0x2208]
call fcn.00403260
push 0x609050
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2058]
mov eax, dword [eax]
mov dword [ebp - 0x6ec4], eax
call fcn.00404020
mov ecx, eax
call fcn.00516de0
mov byte [ebp - 0x6ec5], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4a865b
push 0x6091ac
jmp 0x4a8660
push 0x6091b8
push dword [ebp - 0x6eac]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x3c00]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3c00]
call fcn.00401660
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xd9
call fcn.00515870
lea ecx, [ebp - 0x3c00]
call fcn.004017a0
test al, al
je 0x4a8b56
mov esi, dword [ebp - 0x6eac]
push 1
lea ecx, [ebp - 0x3c00]
call fcn.00401810
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516e30
cmp byte [ebp - 0x6ec5], 0
jne 0x4a8728
push 0x60645c
lea ecx, [ebp - 0x1fc0]
call fcn.00516da0
test al, al
je 0x4a8728
push 0
push 1
push 1
push 0
push 0x60646c
lea ecx, [ebp - 0x1fc0]
call fcn.00515510
cmp eax, 1
jne 0x4a8b3d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606480
push 1
lea ecx, [ebp - 0x3c00]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609748
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609770
lea ecx, [ebp - 0x209c]
call fcn.00516b20
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a8950
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609780
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a8950
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609748
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609770
lea ecx, [ebp - 0x209c]
call fcn.00516b20
mov eax, dword [ebp - 0x6ec4]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fc0]
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a8b3d
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0
push 0x42
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0x605b5c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x60428c
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6097cc
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609770
lea ecx, [ebp - 0x209c]
call fcn.00516b20
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609780
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a8b3d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606f84
push 1
lea ecx, [ebp - 0x3c00]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2068]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516b20
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a8b3d
mov eax, dword [ebp - 0x6ec4]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fc0]
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a8b3d
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0
push 0x42
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0x605b5c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x60428c
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x3c00]
call fcn.00401760
test al, al
jne 0x4a86d1
mov esi, dword [ebp - 0x6eb8]
lea ecx, [ebp - 0x3c00]
mov byte [ebp - 4], 0xd8
call fcn.004016b0
mov eax, dword [ebp - 0x6eac]
inc eax
mov dword [ebp - 0x6eac], eax
cmp eax, esi
jb 0x4a85f5
cmp byte [edi + 0x14], 0
jne 0x4a91a4
xor eax, eax
mov dword [ebp - 0x6eac], eax
test esi, esi
je 0x4a8e84
cmp byte [edi + 0x14], 0
jne 0x4a8e84
push eax
lea ecx, [ebp - 0x21f0]
call fcn.00404020
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.00516e00
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2350]
call fcn.00515510
test eax, eax
jne 0x4a8e6f
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5ed650
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0x5ed650
lea ecx, [ebp - 0x2350]
call fcn.00515270
push 1
lea ecx, [ebp - 0x1fc0]
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606fa0
lea ecx, [ebp - 0x1fc0]
call fcn.00515270
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a8e6f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6097e8
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609770
lea ecx, [ebp - 0x209c]
call fcn.00516b20
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609780
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a8e6f
push 0
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x259c]
call fcn.004e6ab0
test al, al
je 0x4a8e6f
lea eax, [ebp - 0x2a1c]
push eax
push 0x5f4ad4
push 0x6064a8
lea ecx, [ebp - 0x259c]
call fcn.004e63a0
test al, al
jne 0x4a8d67
lea eax, [ebp - 0x2a1c]
push eax
push 0x5f4ad4
push 0x6065e8
lea ecx, [ebp - 0x259c]
call fcn.004e63a0
test al, al
jne 0x4a8d67
lea eax, [ebp - 0x2a1c]
push eax
push 0x5f4ad4
push 0x600088
lea ecx, [ebp - 0x259c]
call fcn.004e63a0
test al, al
jne 0x4a8d67
lea eax, [ebp - 0x2a1c]
push eax
push 0x5f4ad4
push 0x606974
lea ecx, [ebp - 0x259c]
call fcn.004e63a0
test al, al
je 0x4a8e6f
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0x5feab0
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4a8e6f
push 0
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
push 0
push 0
push 0x5feab0
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0
push 0x42
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x1fc0]
call fcn.00516ab0
push eax
push 0x605b5c
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
push 0x60516c
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov eax, dword [ebp - 0x6eac]
inc eax
mov dword [ebp - 0x6eac], eax
cmp eax, esi
jb 0x4a8b94
lea ecx, [ebp - 0x2350]
call fcn.00516d20
cmp dword [ebp - 0x6ed4], 0
jbe 0x4a9191
mov eax, dword [ebp - 0x6ed0]
mov ecx, dword [ebp - 0x6ecc]
sub ecx, eax
mov dword [ebp - 0x6eac], eax
mov dword [ebp - 0x6ee8], ecx
mov ecx, dword [ebp - 0x6ed4]
mov dword [ebp - 0x6ec4], ecx
xor edx, edx
mov dword [ebp - 0x6ec0], edx
test esi, esi
je 0x4a9179
cmp byte [edi + 0x14], 0
jne 0x4a916d
push 0
push 1
push 1
push 0
push edx
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2350]
call fcn.00515510
test eax, eax
jne 0x4a9158
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5ed650
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x5ed650
lea ecx, [ebp - 0x2350]
call fcn.00515270
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2368]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ee8]
add ecx, dword [ebp - 0x6eac]
push eax
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2120]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4a9158
xor dl, dl
lea ecx, [ebp - 0x1f74]
call fcn.0050ed40
test al, al
jne 0x4a9158
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609814
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609770
lea ecx, [ebp - 0x209c]
call fcn.00516b20
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609780
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a9158
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
je 0x4a9158
push 0
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
push 0x42
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
push 0x605b5c
push dword [ebp - 0x6ec0]
lea ecx, [ebp - 0x2058]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6eac]
push eax
push 0x60428c
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x209c]
call fcn.00516ab0
push eax
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov edx, dword [ebp - 0x6ec0]
inc edx
mov dword [ebp - 0x6ec0], edx
cmp edx, esi
jb 0x4a8ed2
mov eax, dword [ebp - 0x6eac]
mov ecx, dword [ebp - 0x6ec4]
add eax, 0xc
sub ecx, 1
mov dword [ebp - 0x6eac], eax
mov dword [ebp - 0x6ec4], ecx
jne 0x4a8ec2
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
lea ecx, [ebp - 0x2130]
call fcn.005116a0
lea ecx, [ebp - 0x2350]
call fcn.00516d50
lea ecx, [ebp - 0x22f0]
call fcn.00516d50
lea ecx, [ebp - 0x235c]
call fcn.00516d50
lea ecx, [ebp - 0x6d9c]
call fcn.00402930
lea ecx, [ebp - 0x280c]
call fcn.00401df0
lea ecx, [ebp - 0x2208]
call fcn.00403130
lea ecx, [ebp - 0x21f0]
call fcn.00404040
lea ecx, [ebp - 0x2058]
call fcn.00404040
lea ecx, [ebp - 0x2368]
call fcn.00404040
lea ecx, [ebp - 0x21c0]
call fcn.00404040
lea ecx, [ebp - 0x32a0]
call fcn.004016b0
lea ecx, [ebp - 0x2df0]
call fcn.004016b0
lea ecx, [ebp - 0x259c]
call fcn.00401e30
lea ecx, [ebp - 0x209c]
call fcn.00516d50
lea ecx, [ebp - 0x201c]
call fcn.00516d50
lea ecx, [ebp - 0x24e0]
call fcn.00516d50
lea ecx, [ebp - 0x1fc0]
call fcn.00516d50
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0x45
call fcn.00516d50
cmp byte [edi + 0x14], 0
jne 0x4adfea
test dword [edi + 0x34], 0x1000
jne 0x4abde9
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x609828
push dword [eax + 0x38]
call fcn.004ed600
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x34
push dword [eax + 0x34]
call fcn.004ea4c0
push 0xc
lea ecx, [ebp - 0x22a0]
call fcn.00401d00
push 0xa
push 0
lea ecx, [ebp - 0x22a0]
call fcn.004040b0
push 0xc
lea ecx, [ebp - 0x222c]
mov byte [ebp - 4], 0xda
call fcn.00401d00
push 0xa
push 0
lea ecx, [ebp - 0x222c]
call fcn.004040b0
push 0xc
lea ecx, [ebp - 0x2374]
mov byte [ebp - 4], 0xdb
call fcn.00401d00
push 0xa
push 0
lea ecx, [ebp - 0x2374]
call fcn.004040b0
push 0xc
lea ecx, [ebp - 0x20a8]
mov byte [ebp - 4], 0xdc
call fcn.00401d00
lea ecx, [ebp - 0x20a8]
call fcn.00403d20
push 0xc
lea ecx, [ebp - 0x2270]
mov byte [ebp - 4], 0xdd
call fcn.00401d00
push 0xa
push 0
lea ecx, [ebp - 0x2270]
call fcn.00403280
push 0x258
lea ecx, [ebp - 0x3048]
mov byte [ebp - 4], 0xde
call fcn.00401d60
lea ecx, [ebp - 0x3048]
call fcn.00401630
push 0x258
lea ecx, [ebp - 0x34f8]
mov byte [ebp - 4], 0xdf
call fcn.00401d60
lea ecx, [ebp - 0x34f8]
call fcn.00401630
push 0xc
lea ecx, [ebp - 0x2080]
mov byte [ebp - 4], 0xe0
call fcn.00401d00
lea ecx, [ebp - 0x2080]
call fcn.00516ef0
xor esi, esi
mov byte [ebp - 4], 0xe1
cmp dword [edi + 0x30], esi
jbe 0x4a976f
push 1
push 1
lea ecx, [ebp - 0x3048]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516b80
push 0x601010
lea ecx, [ebp - 0x2080]
call fcn.00516de0
test al, al
jne 0x4a9765
push str.Microsoft
lea ecx, [ebp - 0x2080]
call fcn.00516de0
test al, al
jne 0x4a9765
push 0x608e54
lea ecx, [ebp - 0x2080]
call fcn.00516de0
test al, al
jne 0x4a9765
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed664
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00516b20
push 5
lea ecx, [ebp - 0x2154]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3048]
call fcn.004017b0
test al, al
je 0x4a96d1
mov edi, dword [ebp - 0x6f1c]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609868
push 1
lea ecx, [ebp - 0x3048]
call fcn.00401810
push eax
push 0x5ed514
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
push esi
mov ecx, edi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00516b20
lea ecx, [ebp - 0x2154]
call fcn.00516ab0
push eax
call dword [0x5cd63c]
test eax, eax
je 0x4a96b8
push 1
lea ecx, [ebp - 0x3048]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516e30
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2270]
push eax
lea eax, [ebp - 0x2374]
push eax
lea eax, [ebp - 0x222c]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.005167d0
lea edx, [ebp - 0x22a0]
mov ecx, eax
call fcn.004c1180
test al, al
jne 0x4a96b8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed664
lea ecx, [ebp - 0x2154]
call fcn.00515270
push 5
lea ecx, [ebp - 0x2154]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x34f8]
call fcn.004017b0
test al, al
je 0x4a96b8
nop word [eax + eax]
push 0
push 1
lea ecx, [ebp - 0x34f8]
call fcn.00401810
mov edx, 0x60987c
mov ecx, eax
call fcn.00513700
test eax, eax
je 0x4a96a5
push 0
push 0
push 0
push 0
push 0
push 0x609868
push 1
lea ecx, [ebp - 0x34f8]
call fcn.00401810
push eax
push 0x5ed514
push 1
lea ecx, [ebp - 0x3048]
call fcn.00401810
push eax
push 0x5ed514
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
push esi
mov ecx, edi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00516b20
lea ecx, [ebp - 0x2154]
call fcn.00516ab0
push eax
call dword [0x5cd63c]
test eax, eax
je 0x4a96a5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x34f8]
call fcn.00401810
push eax
push 0x5eff2c
push 1
lea ecx, [ebp - 0x3048]
call fcn.00401810
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516b20
lea eax, [ebp - 0x2080]
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2270]
push eax
lea eax, [ebp - 0x2374]
push eax
lea eax, [ebp - 0x222c]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.005167d0
lea edx, [ebp - 0x22a0]
mov ecx, eax
call fcn.004c1180
lea ecx, [ebp - 0x34f8]
call fcn.00401760
test al, al
jne 0x4a9590
lea ecx, [ebp - 0x3048]
call fcn.00401760
test al, al
jne 0x4a9480
mov edi, dword [ebp - 0x6ebc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609890
lea ecx, [ebp - 0x24ec]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00516b20
lea ecx, [ebp - 0x2154]
call fcn.00516ab0
push eax
call dword [0x5cd63c]
test eax, eax
je 0x4a9765
push 0x6098ec
lea ecx, [ebp - 0x2080]
call fcn.00516e30
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2270]
push eax
lea eax, [ebp - 0x2374]
push eax
lea eax, [ebp - 0x222c]
push eax
lea edx, [ebp - 0x22a0]
lea ecx, [ebp - 0x2154]
call fcn.004c1180
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4a93b6
lea ecx, [ebp - 0x22a0]
call fcn.00403df0
cmp byte [edi + 0x14], 0
mov dword [ebp - 0x6eb8], eax
jne 0x4abd8d
test eax, eax
jne 0x4a97a4
push eax
push 0x609910
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
jmp 0x4abd8d
push 0xc
lea ecx, [ebp - 0x21fc]
call fcn.00401d00
lea ecx, [ebp - 0x21fc]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xe2
call fcn.00401d00
lea ecx, [ebp - 0x2040]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x25c0]
mov byte [ebp - 4], 0xe3
call fcn.00401d00
lea ecx, [ebp - 0x25c0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x21cc]
mov byte [ebp - 4], 0xe4
call fcn.00401d00
lea ecx, [ebp - 0x21cc]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2434]
mov byte [ebp - 4], 0xe5
call fcn.00401d00
lea ecx, [ebp - 0x2434]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2320]
mov byte [ebp - 4], 0xe6
call fcn.00401d00
lea ecx, [ebp - 0x2320]
call fcn.00516ef0
push 0x20
lea ecx, [ebp - 0x2978]
mov byte [ebp - 4], 0xe7
call fcn.00401e10
lea ecx, [ebp - 0x2978]
call fcn.00505a80
mov byte [ebp - 4], 0xe8
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
push 0
push 0x609990
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
xor esi, esi
mov dword [ebp - 0x6eac], esi
cmp dword [ebp - 0x6eb8], esi
jbe 0x4a9ca1
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403260
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x22a0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed514
push esi
mov dword [ebp - 0x6ee8], eax
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2434]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608748
lea ecx, [ebp - 0x2434]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2320]
call fcn.00516b20
lea ecx, [ebp - 0x2320]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4a9c8e
lea eax, [ebp - 0x21fc]
xor edx, edx
push eax
lea ecx, [ebp - 0x2320]
mov dword [ebp - 0x6ea8], edx
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004c1a70
test al, al
je 0x4a9c8e
lea ecx, [ebp - 0x21fc]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4a9c61
push 0xc
lea ecx, [ebp - 0x2480]
call fcn.00401d00
lea ecx, [ebp - 0x2480]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2620]
mov byte [ebp - 4], 0xe9
call fcn.00401d00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608764
lea ecx, [ebp - 0x21fc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2620]
call fcn.00516e40
lea eax, [ebp - 0x2480]
mov byte [ebp - 4], 0xea
push eax
lea ecx, [ebp - 0x2620]
call fcn.00516ab0
mov edx, 0x602a94
mov ecx, eax
call fcn.004c17e0
test al, al
je 0x4a9c47
push 0
push 1
push 1
push 0
push 0x6064bc
lea ecx, [ebp - 0x2480]
call fcn.00515510
test eax, eax
jne 0x4a9c47
push eax
push 1
push 1
push eax
push 0x6064dc
lea ecx, [ebp - 0x2480]
call fcn.00515510
test eax, eax
jne 0x4a9c47
push eax
push 1
push 1
push eax
push 0x60652c
lea ecx, [ebp - 0x2480]
call fcn.00515510
test eax, eax
jne 0x4a9c47
push eax
push 1
push 1
push eax
push 0x606510
lea ecx, [ebp - 0x2480]
call fcn.00515510
test eax, eax
jne 0x4a9c47
push eax
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609a00
lea ecx, [ebp - 0x2480]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4a9c47
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609a5c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516b20
mov eax, dword [ebp - 0x6ee8]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2480]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x47
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
jne 0x4a9b5c
lea ecx, [ebp - 0x2620]
call fcn.00516d50
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xe8
call fcn.00516d50
mov esi, dword [ebp - 0x6eac]
jmp 0x4a9c61
push 0
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2620]
call fcn.00516ab0
push eax
push 0
push 0x47
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2620]
call fcn.00516ab0
push eax
push 0x6050c8
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2480]
call fcn.00516ab0
push eax
push 0x6087a4
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x2620]
call fcn.00516d50
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xe8
call fcn.00516d50
mov esi, dword [ebp - 0x6eac]
jmp 0x4a9c61
lea ecx, [ebp - 0x2620]
call fcn.00516d50
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xe8
call fcn.00516d50
inc dword [ebp - 0x6ea8]
lea eax, [ebp - 0x21fc]
push eax
lea ecx, [ebp - 0x2320]
call fcn.00516ab0
mov edx, dword [ebp - 0x6ea8]
mov ecx, eax
call fcn.004c1a70
test al, al
jne 0x4a9962
inc esi
mov dword [ebp - 0x6eac], esi
cmp esi, dword [ebp - 0x6eb8]
jb 0x4a98a1
cmp byte [edi + 0x14], 0
jne 0x4abd40
push 0xc
lea ecx, [ebp - 0x25b4]
call fcn.00401d00
push 1
push 0x608888
lea ecx, [ebp - 0x25b4]
call fcn.00516e80
push 0
push 0x609a80
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0xeb
call fcn.00504a30
xor esi, esi
mov dword [ebp - 0x6eac], esi
cmp dword [ebp - 0x6eb8], esi
jbe 0x4aa0db
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403260
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x22a0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed514
push esi
mov dword [ebp - 0x6ee8], eax
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2434]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608748
lea ecx, [ebp - 0x2434]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2320]
call fcn.00516b20
lea ecx, [ebp - 0x2320]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4aa0c8
lea eax, [ebp - 0x21fc]
xor edx, edx
push eax
lea ecx, [ebp - 0x2320]
mov dword [ebp - 0x6ea8], edx
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004c1a70
test al, al
je 0x4aa0c8
lea ecx, [ebp - 0x21fc]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4aa09b
push 0xc
lea ecx, [ebp - 0x2470]
call fcn.00401d00
lea ecx, [ebp - 0x2470]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x262c]
mov byte [ebp - 4], 0xec
call fcn.00401d00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608764
lea ecx, [ebp - 0x21fc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x262c]
call fcn.00516e40
lea eax, [ebp - 0x2470]
mov byte [ebp - 4], 0xed
push eax
lea ecx, [ebp - 0x262c]
call fcn.00516ab0
mov edx, 0x602bb0
mov ecx, eax
call fcn.004c17e0
test al, al
je 0x4aa081
push 0x601010
lea ecx, [ebp - 0x2470]
call fcn.00516de0
test al, al
jne 0x4aa081
push 0x60898c
lea ecx, [ebp - 0x2470]
call fcn.00516de0
test al, al
jne 0x4aa081
push 0x608998
lea ecx, [ebp - 0x2470]
call fcn.00516de0
test al, al
jne 0x4aa081
push 0x6089a4
lea ecx, [ebp - 0x2470]
call fcn.00516de0
test al, al
jne 0x4aa081
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609ae0
lea ecx, [ebp - 0x2470]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4aa081
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609b30
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516b20
mov eax, dword [ebp - 0x6ee8]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2470]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
jne 0x4a9f96
lea ecx, [ebp - 0x262c]
call fcn.00516d50
lea ecx, [ebp - 0x2470]
mov byte [ebp - 4], 0xeb
call fcn.00516d50
mov esi, dword [ebp - 0x6eac]
jmp 0x4aa09b
push 0
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x262c]
call fcn.00516ab0
push eax
push 0
push 0x48
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x262c]
call fcn.00516ab0
push eax
push 0x6050c8
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2470]
call fcn.00516ab0
push eax
push 0x6089f0
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x262c]
call fcn.00516d50
lea ecx, [ebp - 0x2470]
mov byte [ebp - 4], 0xeb
call fcn.00516d50
mov esi, dword [ebp - 0x6eac]
jmp 0x4aa09b
lea ecx, [ebp - 0x262c]
call fcn.00516d50
lea ecx, [ebp - 0x2470]
mov byte [ebp - 4], 0xeb
call fcn.00516d50
inc dword [ebp - 0x6ea8]
lea eax, [ebp - 0x21fc]
push eax
lea ecx, [ebp - 0x2320]
call fcn.00516ab0
mov edx, dword [ebp - 0x6ea8]
mov ecx, eax
call fcn.004c1a70
test al, al
jne 0x4a9db5
inc esi
mov dword [ebp - 0x6eac], esi
cmp esi, dword [ebp - 0x6eb8]
jb 0x4a9cf4
cmp byte [edi + 0x14], 0
jne 0x4abd35
push 0xc
lea ecx, [ebp - 0x241c]
call fcn.00401d00
lea ecx, [ebp - 0x241c]
call fcn.00516ef0
xor esi, esi
mov byte [ebp - 4], 0xee
mov dword [ebp - 0x6ea8], esi
cmp dword [ebp - 0x6eb8], esi
jbe 0x4aa500
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x222c]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x241c]
call fcn.00515510
test eax, eax
jne 0x4aa4ed
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5f3998
push esi
lea ecx, [ebp - 0x222c]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x241c]
call fcn.00515270
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608a1c
push esi
lea ecx, [ebp - 0x222c]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516b20
push 0x258
lea ecx, [ebp - 0x3e58]
call fcn.00401d60
push 1
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3e58]
call fcn.00401660
push 1
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xef
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3e58]
call fcn.004017b0
test al, al
je 0x4aa4de
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed650
push 1
lea ecx, [ebp - 0x3e58]
call fcn.00401810
push eax
push 0x5ed650
lea ecx, [ebp - 0x21cc]
call fcn.00516b20
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x21cc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x25b4]
call fcn.00515510
test eax, eax
jne 0x4aa4cb
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x3e58]
call fcn.00401810
push eax
push 0x5ed514
push esi
lea ecx, [ebp - 0x222c]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516b20
lea ecx, [ebp - 0x21cc]
call fcn.00516d20
push 0
push 0x80
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2978]
call fcn.005053b0
test eax, eax
je 0x4aa340
push 0
lea eax, [ebp - 0x21cc]
push eax
lea ecx, [ebp - 0x2978]
call fcn.005051d0
test eax, eax
je 0x4aa340
push 0
push 1
push 1
push 0
push 0x608a2c
lea ecx, [ebp - 0x21cc]
call fcn.00515510
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x608a44
lea ecx, [ebp - 0x21cc]
call fcn.00515510
test esi, esi
je 0x4aa32f
test eax, eax
je 0x4aa32f
sub eax, esi
lea ecx, [ebp - 0x21cc]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.005157c0
jmp 0x4aa33a
lea ecx, [ebp - 0x21cc]
call fcn.00516d20
mov esi, dword [ebp - 0x6ea8]
lea ecx, [ebp - 0x21cc]
call fcn.005167b0
test al, al
je 0x4aa377
push 1
lea ecx, [ebp - 0x3e58]
call fcn.00401810
push eax
lea ecx, [ebp - 0x21cc]
call fcn.00516e30
push 0
lea ecx, [ebp - 0x21cc]
call fcn.00516840
jmp 0x4aa384
push 3
lea ecx, [ebp - 0x21cc]
call fcn.00514ca0
push 0x609b64
lea ecx, [ebp - 0x21cc]
call fcn.00516de0
test al, al
jne 0x4aa4cb
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609ae0
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4aa4cb
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
push 0x5feab0
lea ecx, [ebp - 0x21cc]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4aa4cb
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
push 0
push 0
push 0x5feab0
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
push 0
push 0x48
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
push 0x6050c8
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
push 0x5feab0
push 0x6042a8
lea ecx, [ebp - 0x21cc]
call fcn.00516ab0
push eax
push 0x608a60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea ecx, [ebp - 0x3e58]
call fcn.00401760
test al, al
jne 0x4aa1f8
lea ecx, [ebp - 0x3e58]
mov byte [ebp - 4], 0xee
call fcn.004016b0
inc esi
mov dword [ebp - 0x6ea8], esi
cmp esi, dword [ebp - 0x6eb8]
jb 0x4aa115
cmp byte [edi + 0x14], 0
jne 0x4abd2a
push 0x24
lea ecx, [ebp - 0x28f8]
call fcn.00402030
lea ecx, [ebp - 0x28f8]
call fcn.004e6cd0
push 0xc
lea ecx, [ebp - 0x2294]
mov byte [ebp - 4], 0xf0
call fcn.00401d00
lea ecx, [ebp - 0x2294]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2498]
mov byte [ebp - 4], 0xf1
call fcn.00401d00
lea ecx, [ebp - 0x2498]
call fcn.00516ef0
push 0
push 0x609bb0
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0xf2
call fcn.00504a30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609c00
lea ecx, [edi + 0x24c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
xor esi, esi
mov dword [ebp - 0x6eb0], esi
cmp dword [ebp - 0x6eb8], esi
jbe 0x4aaa63
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403260
cmp byte [edi + 0x14], 0
mov eax, dword [eax]
mov dword [ebp - 0x6ee8], eax
jne 0x4abd09
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609c34
push esi
lea ecx, [ebp - 0x22a0]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x21fc]
call fcn.00516b20
lea eax, [ebp - 0x2040]
mov dword [ebp - 0x6ea8], 0
push eax
lea ecx, [ebp - 0x21fc]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004c1a70
test al, al
je 0x4aaa50
mov esi, dword [ebp - 0x6ea8]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6031b0
lea ecx, [ebp - 0x2040]
call fcn.00515270
push 0x100
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004e6ab0
test al, al
je 0x4aaa20
push 0
lea eax, [ebp - 0x2a7c]
mov dword [ebp - 0x6e1c], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x28f8]
push 0x602dc8
movups xmmword [ebp - 0x6e2c], xmm0
call fcn.004e64d0
test al, al
je 0x4aaa20
lea eax, [ebp - 0x2a7c]
push eax
lea eax, [ebp - 0x6e2c]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004e59f0
test al, al
je 0x4aaa20
lea eax, [ebp - 0x2294]
push eax
push 0x602dfc
lea eax, [ebp - 0x6e2c]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004e6250
test eax, eax
je 0x4aa9f9
push 0
push 1
push 1
push 0
push 0x608b3c
lea ecx, [ebp - 0x2294]
call fcn.00515510
lea ecx, [ebp - 0x2294]
mov esi, eax
call fcn.00516cc0
sub eax, 0x12
cmp esi, eax
je 0x4aa9f9
push 0
push 1
push 1
push 0
push 0x608b64
lea ecx, [ebp - 0x2294]
call fcn.00515510
lea ecx, [ebp - 0x2294]
mov esi, eax
call fcn.00516cc0
sub eax, 0xb
cmp esi, eax
je 0x4aa9f9
push 0
push 1
push 1
push 0
push 0x608b80
lea ecx, [ebp - 0x2294]
call fcn.00515510
lea ecx, [ebp - 0x2294]
mov esi, eax
call fcn.00516cc0
sub eax, 0xb
cmp esi, eax
je 0x4aa9f9
lea eax, [ebp - 0x6e2c]
push eax
lea eax, [ebp - 0x2b98]
push eax
push 0x608b9c
lea ecx, [ebp - 0x28f8]
call fcn.004e64d0
test al, al
je 0x4aa9f9
lea eax, [ebp - 0x2294]
push eax
push 0x608bb8
lea eax, [ebp - 0x2b98]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004e6250
test eax, eax
je 0x4aa9f9
push 0x60645c
lea ecx, [ebp - 0x2294]
call fcn.00516de0
test al, al
jne 0x4aa9f9
push 0x609c50
lea ecx, [ebp - 0x2294]
call fcn.00516de0
test al, al
jne 0x4aa9f9
lea eax, [ebp - 0x2498]
push eax
push 0x602dd8
lea eax, [ebp - 0x6e2c]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004e6250
test eax, eax
jne 0x4aa85a
lea eax, [ebp - 0x2498]
push eax
push 0x602df0
lea eax, [ebp - 0x6e2c]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004e6250
test eax, eax
je 0x4aa9f9
push str.null
lea ecx, [ebp - 0x2498]
call fcn.00516de0
test al, al
jne 0x4aa9f9
lea ecx, [ebp - 0x2294]
call fcn.00516ab0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4aa9f9
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609c80
lea ecx, [ebp - 0x2294]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4aa9f9
mov eax, dword [ebp - 0x6ee8]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2498]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2294]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x49
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6f08], eax
cmp eax, 0xffffffff
je 0x4aa9f9
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
push dword [ebp - 0x6eb0]
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2498]
call fcn.00516ab0
push eax
push 0
push 0x49
push dword [ebp - 0x6f08]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2498]
call fcn.00516ab0
push eax
push 0x6050c8
push dword [ebp - 0x6eb0]
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2294]
call fcn.00516ab0
push eax
push 0x605960
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
lea eax, [ebp - 0x2a7c]
push eax
lea eax, [ebp - 0x6e2c]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004e59f0
test al, al
jne 0x4aa6e0
mov esi, dword [ebp - 0x6ea8]
lea eax, [ebp - 0x2040]
inc esi
push eax
lea ecx, [ebp - 0x21fc]
mov dword [ebp - 0x6ea8], esi
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.004c1a70
test al, al
jne 0x4aa640
mov esi, dword [ebp - 0x6eb0]
inc esi
mov dword [ebp - 0x6eb0], esi
cmp esi, dword [ebp - 0x6eb8]
jb 0x4aa5b4
cmp byte [edi + 0x14], 0
jne 0x4abd09
push 0
push 0x609cd0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6dfc]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e04], eax
mov dword [ebp - 0x6e00], 0x4b
call fcn.00516e80
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xf3
call fcn.00516ab0
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6df0], eax
mov dword [ebp - 0x6dec], 0
call fcn.00516ab0
mov dword [ebp - 0x6de8], eax
lea ecx, [ebp - 0x6ddc]
lea eax, [ebp - 0x1ff0]
mov dword [ebp - 0x6de4], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6de0], eax
call fcn.00516ef0
mov byte [ebp - 4], 0xf4
cmp byte [edi + 0x14], 0
jne 0x4abcfe
push 0xc
lea ecx, [ebp - 0x2460]
call fcn.00401d00
lea ecx, [ebp - 0x2460]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x23ec]
mov byte [ebp - 4], 0xf5
call fcn.00401d00
lea ecx, [ebp - 0x23ec]
call fcn.00516ef0
lea ecx, [ebp - 0x241c]
mov byte [ebp - 4], 0xf6
call fcn.00516d20
xor esi, esi
cmp dword [ebp - 0x6eb8], esi
jbe 0x4aadd0
cmp byte [edi + 0x14], 0
jne 0x4abce8
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x222c]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x241c]
call fcn.00515510
test eax, eax
jne 0x4aadc3
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5f3998
push esi
lea ecx, [ebp - 0x222c]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x241c]
call fcn.00515270
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403260
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x2374]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
mov dword [ebp - 0x6ea8], eax
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x5ed514
push esi
lea ecx, [ebp - 0x222c]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x6dfc]
call fcn.00516b20
push dword [ebp - 0x6ea8]
lea ecx, [edi + 0x4c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push esi
lea ecx, [ebp - 0x20a8]
mov dword [ebp - 0x6dec], eax
call fcn.00404020
push eax
lea ecx, [ebp - 0x6ddc]
call fcn.00516e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
call fcn.00516ab0
push eax
push dword [ebp - 0x6ea8]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2460]
call fcn.00516b20
lea ecx, [ebp - 0x2460]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4aadc3
lea ecx, [ebp - 0x2460]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6e04]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4abce8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.00516ab0
push eax
push dword [ebp - 0x6ea8]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2460]
call fcn.00516b20
lea ecx, [ebp - 0x2460]
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
test al, al
je 0x4aadc3
push 0
lea ecx, [ebp - 0x2460]
call fcn.005167d0
lea ecx, [ebp - 0x2460]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6e04]
mov ecx, edi
push eax
call fcn.004aed70
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6dec], 0x5feab0
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6e04]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4abce8
push 0
push 1
lea ecx, [ebp - 0x2668]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2460]
call fcn.00516b80
mov ecx, eax
call fcn.005167d0
lea ecx, [ebp - 0x2460]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x6e04]
mov ecx, edi
push eax
call fcn.004aed70
cmp byte [edi + 0x14], 0
jne 0x4abce8
inc esi
cmp esi, dword [ebp - 0x6eb8]
jb 0x4aab56
cmp byte [edi + 0x14], 0
jne 0x4abce8
lea ecx, [ebp - 0x241c]
call fcn.00516d20
push 4
lea ecx, [ebp - 0x223c]
call fcn.00401d20
lea ecx, [ebp - 0x223c]
call fcn.00511760
xor esi, esi
mov byte [ebp - 4], 0xf7
mov dword [ebp - 0x6eac], esi
cmp dword [ebp - 0x6eb8], esi
jbe 0x4ab241
mov dword [ebp - 0x6ec0], 0
nop
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403260
mov ecx, dword [ebp - 0x6ec0]
mov eax, dword [eax]
mov dword [ebp - 0x6ec4], eax
test ecx, ecx
jne 0x4aae67
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push 0x608c40
push eax
lea ecx, [edi + 0x3c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push str.HKU_
jmp 0x4aaeb1
cmp ecx, 1
jne 0x4aae8d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608c40
push dword [ebp - 0x6ed8]
jmp 0x4aaeb1
cmp ecx, 2
jne 0x4aaebc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608c40
push dword [ebp - 0x6edc]
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x223c]
call fcn.005116f0
test al, al
je 0x4ab218
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ea8], 0
push eax
push 0
lea ecx, [ebp - 0x223c]
call fcn.005110a0
test al, al
je 0x4ab218
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608cd0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f98]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4ab1f0
lea eax, [ebp - 0x23ec]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4ab1f0
lea ecx, [ebp - 0x23ec]
call fcn.005167b0
test al, al
jne 0x4ab1f0
push dword [ebp - 0x6ec4]
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x23ec]
call fcn.00516530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2374]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x5ed514
push esi
lea ecx, [ebp - 0x222c]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516b20
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x23ec]
call fcn.00515510
test eax, eax
je 0x4ab1f0
lea ecx, [ebp - 0x2080]
call fcn.00516cc0
inc eax
lea ecx, [ebp - 0x23ec]
push eax
call fcn.00515800
push 0
push 0
push 0x5ed51c
push 0x5f0068
push 3
lea ecx, [ebp - 0x23ec]
call fcn.00514ca0
mov ecx, eax
call fcn.00514e30
lea ecx, [ebp - 0x23ec]
call fcn.005167b0
test al, al
jne 0x4ab1f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f98]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516b20
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x6041d0
lea ecx, [ebp - 0x23ec]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4ab1f0
mov eax, dword [ebp - 0x6ec4]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x23ec]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x600250
push 5
push 0x4b
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4ab1ea
push 0
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00516ab0
push eax
push 0
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
push 0x4b
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606594
push dword [ebp - 0x6eac]
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x60428c
mov ecx, esi
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x23ec]
call fcn.00516ab0
push eax
push 0x606c18
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov esi, dword [ebp - 0x6eac]
mov eax, dword [ebp - 0x6ea8]
lea ecx, [ebp - 0x6c1c]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x223c]
mov dword [ebp - 0x6ea8], eax
call fcn.005110a0
test al, al
jne 0x4aaf08
mov eax, dword [ebp - 0x6ec0]
inc eax
mov dword [ebp - 0x6ec0], eax
cmp eax, 3
jb 0x4aae20
inc esi
mov dword [ebp - 0x6eac], esi
cmp esi, dword [ebp - 0x6eb8]
jb 0x4aae15
cmp byte [edi + 0x14], 0
jne 0x4abcdd
push 0
push 0x609d20
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
push 0xc
lea ecx, [ebp - 0x24f8]
call fcn.00401d00
lea ecx, [ebp - 0x24f8]
call fcn.00516ef0
xor esi, esi
mov byte [ebp - 4], 0xf8
cmp dword [ebp - 0x6eb8], esi
jbe 0x4abcbf
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403260
cmp byte [edi + 0x14], 0
mov eax, dword [eax]
mov dword [ebp - 0x6eac], eax
jne 0x4abcbf
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609c34
push esi
lea ecx, [ebp - 0x22a0]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x21fc]
call fcn.00516b20
lea eax, [ebp - 0x24f8]
xor edx, edx
push eax
lea ecx, [ebp - 0x21fc]
mov dword [ebp - 0x6eb0], edx
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004c1a70
test al, al
je 0x4abcb2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609d78
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609770
lea ecx, [ebp - 0x2080]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x602e04
lea ecx, [ebp - 0x24f8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516b20
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4ab4dd
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609d88
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4ab4dd
mov eax, dword [ebp - 0x6eac]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4ab4dd
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
push 0
push 0x4c
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609dd4
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609770
lea ecx, [ebp - 0x2080]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60318c
lea ecx, [ebp - 0x24f8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516b20
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x4ab584
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x6031b0
lea ecx, [ebp - 0x24f8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516b20
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4ab6e5
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609d88
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4ab6e5
mov eax, dword [ebp - 0x6eac]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4ab6e5
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
push 0
push 0x4c
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609dec
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609770
lea ecx, [ebp - 0x2080]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x603088
lea ecx, [ebp - 0x24f8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516b20
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
jne 0x4ab78c
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x6030a4
lea ecx, [ebp - 0x24f8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516b20
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4ab8ed
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609d88
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4ab8ed
mov eax, dword [ebp - 0x6eac]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4ab8ed
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
push 0
push 0x4c
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609e1c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609770
lea ecx, [ebp - 0x2080]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608764
lea ecx, [ebp - 0x24f8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516b20
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4abab9
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609d88
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4abab9
mov eax, dword [ebp - 0x6eac]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4abab9
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
push 0
push 0x4c
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609e30
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
push 0x609770
lea ecx, [ebp - 0x2080]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x608d74
lea ecx, [ebp - 0x24f8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516b20
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4abc85
push 0
lea ecx, [edi + 0x84]
call fcn.00516ab0
push eax
push 0x609d88
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.00492cc0
test al, al
jne 0x4abc85
mov eax, dword [ebp - 0x6eac]
mov ecx, dword [ebp - 0x6ed0]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6ea8], eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004bb120
mov dword [ebp - 0x6ee8], eax
cmp eax, 0xffffffff
je 0x4abc85
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0
push 0
push 0
push 0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
push eax
push 0
push 0x4c
push dword [ebp - 0x6ee8]
lea ecx, [ebp - 0x1f8c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004baf30
push 0
push 0
push 0
push 0
push 0
push 0x606f28
lea ecx, [ebp - 0x2040]
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push 0x6050c8
call fcn.00516ab0
push eax
push 0x6042a8
lea ecx, [ebp - 0x2080]
call fcn.00516ab0
push eax
push 0x606f60
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
inc dword [ebp - 0x6eb0]
lea eax, [ebp - 0x24f8]
push eax
lea ecx, [ebp - 0x21fc]
call fcn.00516ab0
mov edx, dword [ebp - 0x6eb0]
mov ecx, eax
call fcn.004c1a70
test al, al
jne 0x4ab311
inc esi
cmp esi, dword [ebp - 0x6eb8]
jb 0x4ab290
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004ec300
lea ecx, [ebp - 0x24f8]
call fcn.00516d50
lea ecx, [ebp - 0x223c]
call fcn.005116a0
lea ecx, [ebp - 0x23ec]
call fcn.00516d50
lea ecx, [ebp - 0x2460]
call fcn.00516d50
lea ecx, [ebp - 0x6e04]
call fcn.00402930
lea ecx, [ebp - 0x2498]
call fcn.00516d50
lea ecx, [ebp - 0x2294]
call fcn.00516d50
lea ecx, [ebp - 0x28f8]
call fcn.00401e30
lea ecx, [ebp - 0x241c]
call fcn.00516d50
lea ecx, [ebp - 0x25b4]
call fcn.00516d50
lea ecx, [ebp - 0x2978]
call fcn.00401df0
lea ecx, [ebp - 0x2320]
call fcn.00516d50
lea ecx, [ebp - 0x2434]
call fcn.00516d50
lea ecx, [ebp - 0x21cc]
call fcn.00516d50
lea ecx, [ebp - 0x25c0]
call fcn.00516d50
lea ecx, [ebp - 0x2040]
call fcn.00516d50
lea ecx, [ebp - 0x21fc]
call fcn.00516d50
lea ecx, [ebp - 0x2080]
call fcn.00516d50
lea ecx, [ebp - 0x34f8]
call fcn.004016b0
lea ecx, [ebp - 0x3048]
call fcn.004016b0
lea ecx, [ebp - 0x2270]
call fcn.00403130
lea ecx, [ebp - 0x20a8]
call fcn.00404040
lea ecx, [ebp - 0x2374]
call fcn.00404040
lea ecx, [ebp - 0x222c]
call fcn.00404040
lea ecx, [ebp - 0x22a0]
mov byte [ebp - 4], 0x45
call fcn.00404040
cmp byte [edi + 0x14], 0
jne 0x4adfea
test dword [edi + 0x34], 0x40
jne 0x4adfea
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x609e54
push dword [eax + 0x38]
call fcn.004ed600
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x37
push dword [eax + 0x34]
call fcn.004ea4c0
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4abe88
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fec18
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4abe41
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fec70
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x4abeef
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x5fec70
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
push 0xc
lea ecx, [ebp - 0x1fb0]
mov dword [ebp - 0x6efc], 0x5fecd0
mov dword [ebp - 0x6ef8], 0x5fece0
mov dword [ebp - 0x6ef4], 0x609e80
mov dword [ebp - 0x6ef0], 0x609ea0
mov dword [ebp - 0x6eec], 0x609eb8
mov dword [ebp - 0x6ee8], 0x609edc
call fcn.00401d00
lea ecx, [ebp - 0x1fb0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x22ac]
mov byte [ebp - 4], 0xf9
call fcn.00401d00
lea ecx, [ebp - 0x22ac]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x21a8]
mov byte [ebp - 4], 0xfa
call fcn.00401d00
lea ecx, [ebp - 0x21a8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x22fc]
mov byte [ebp - 4], 0xfb
call fcn.00401d00
lea ecx, [ebp - 0x22fc]
call fcn.00516ef0
cmp dword [ebp - 0x6ed4], 0
mov byte [ebp - 4], 0xfc
mov dword [ebp - 0x6ec4], 0
jbe 0x4ac145
mov dword [ebp - 0x6ea8], esi
nop dword [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4ac145
xor eax, eax
mov dword [ebp - 0x6ec0], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6efc]
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4ac10d
lea eax, [ebp - 0x6c1c]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00511000
test al, al
je 0x4ac107
cmp byte [edi + 0x14], 0
jne 0x4ac107
lea eax, [ebp - 0x1fb0]
push eax
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4ac0eb
lea ecx, [ebp - 0x1fb0]
call fcn.005167b0
test al, al
jne 0x4ac0eb
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005097e0
test al, al
je 0x4ac0eb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f98]
push 0x5f6828
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00492520
lea eax, [ebp - 0x6c1c]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00511000
test al, al
jne 0x4ac043
mov esi, dword [ebp - 0x6ea8]
mov eax, dword [ebp - 0x6ec0]
inc eax
mov dword [ebp - 0x6ec0], eax
cmp eax, 6
jb 0x4abfd2
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6ea8], esi
mov dword [ebp - 0x6ec4], eax
cmp eax, dword [ebp - 0x6ed4]
jb 0x4abfc0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x39
push dword [eax + 0x34]
call fcn.004ea4c0
push 4
lea ecx, [ebp - 0x6c20]
call fcn.00401d20
lea ecx, [ebp - 0x6c20]
call fcn.004015e0
lea eax, [ebp - 0x6c20]
mov byte [ebp - 4], 0xfd
push eax
push 0x5e78ec
push 1
push 0
push 0x5e7afc
call dword [0x5cda74]
test eax, eax
js 0x4ac42f
lea ecx, [ebp - 0x7008]
call fcn.00401c60
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x6ff8]
movups xmmword [ebp - 0x6ef8], xmm0
call fcn.00401c60
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x6fe8]
movups xmmword [ebp - 0x6f18], xmm0
call fcn.00401c60
mov dword [ebp - 4], 0x100
lea ecx, [ebp - 0x6fd8]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6f30], xmm0
call fcn.00401c60
mov edi, eax
mov byte [ebp - 4], 1
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6ef8]
mov ecx, dword [ebp - 0x6c20]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f18]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6f30]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
lea ecx, [ebp - 0x6fd8]
mov esi, eax
call fcn.00401cf0
lea ecx, [ebp - 0x6fe8]
mov dword [ebp - 4], 0xff
call fcn.00401cf0
lea ecx, [ebp - 0x6ff8]
call fcn.00401cf0
lea ecx, [ebp - 0x7008]
mov byte [ebp - 4], 0xfd
call fcn.00401cf0
test esi, esi
js 0x4ac429
push 4
lea ecx, [ebp - 0x6c48]
call fcn.00401d20
lea ecx, [ebp - 0x6c48]
call fcn.004015e0
push 0x5ed514
lea ecx, [ebp - 0x6f7c]
mov dword [ebp - 4], 0x102
call fcn.00401ae0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x6c20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6c48]
push ecx
mov ecx, eax
call fcn.00401ba0
push eax
push dword [ebp - 0x6c20]
mov eax, dword [esi + 0x1c]
call eax
lea ecx, [ebp - 0x6f7c]
mov byte [ebp - 4], 2
mov esi, eax
call fcn.00401b90
test esi, esi
js 0x4ac417
push 4
lea ecx, [ebp - 0x6c4c]
call fcn.00401d20
lea ecx, [ebp - 0x6c4c]
call fcn.004015e0
mov byte [ebp - 4], 4
lea edx, [ebp - 0x6c4c]
mov eax, dword [ebp - 0x6c48]
push edx
push 0
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x4ac40c
mov eax, dword [ebp - 0x6c4c]
lea edx, [ebp - 0x254c]
mov dword [ebp - 0x254c], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x254c]
test eax, eax
je 0x4ac40c
mov esi, 1
mov dword [ebp - 0x6ec4], esi
cmp eax, esi
jl 0x4ac40c
mov edi, dword [ebp - 0x6ebc]
push 4
lea ecx, [ebp - 0x6c5c]
call fcn.00401d20
lea ecx, [ebp - 0x6c5c]
call fcn.004015e0
push 3
push esi
lea ecx, [ebp - 0x7018]
mov byte [ebp - 4], 5
call fcn.00401c70
mov esi, eax
mov byte [ebp - 4], 6
lea edx, [ebp - 0x6c5c]
mov ecx, dword [ebp - 0x6c4c]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
lea ecx, [ebp - 0x7018]
mov byte [ebp - 4], 5
mov esi, eax
call fcn.00401cf0
test esi, esi
js 0x4ac3d7
push dword [ebp - 0x6c5c]
mov ecx, edi
call fcn.004901a0
test al, al
je 0x4ac401
lea ecx, [ebp - 0x6c5c]
mov byte [ebp - 4], 4
call fcn.00402ef0
mov esi, dword [ebp - 0x6ec4]
inc esi
mov dword [ebp - 0x6ec4], esi
cmp esi, dword [ebp - 0x254c]
jle 0x4ac361
jmp 0x4ac40c
lea ecx, [ebp - 0x6c5c]
call fcn.00402ef0
lea ecx, [ebp - 0x6c4c]
call fcn.00402ef0
lea ecx, [ebp - 0x6c48]
mov dword [ebp - 4], 0xfd
call fcn.00402ef0
mov edi, dword [ebp - 0x6ebc]
cmp byte [edi + 0x14], 0
jne 0x4adfaf
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3c
push dword [eax + 0x34]
call fcn.004ea4c0
push 0x18
lea ecx, [ebp - 0x24b0]
call fcn.00401d30
lea ecx, [ebp - 0x24b0]
call fcn.00513f30
mov dword [ebp - 4], 0x107
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4ac4cb
mov eax, dword [ebp - 0x6ecc]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609f08
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4ac484
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x609f78
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x4ac532
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x609f78
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp dword [ebp - 0x6ed4], 0
mov dword [ebp - 0x6f00], 0x601f04
mov dword [ebp - 0x6efc], 0x609fe8
mov dword [ebp - 0x6ef8], 0x5fa11c
mov dword [ebp - 0x6ef4], 0x60a008
mov dword [ebp - 0x6ef0], 0x5fecc8
mov dword [ebp - 0x6eec], 0x60a014
mov dword [ebp - 0x6ee8], 0x5fbfb8
mov dword [ebp - 0x6ec4], 0
jbe 0x4ac724
mov dword [ebp - 0x6ea8], esi
cmp byte [edi + 0x14], 0
jne 0x4adf9d
xor eax, eax
mov dword [ebp - 0x6ec0], eax
nop word [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4ac702
lea ecx, [ebp - 0x1fb0]
push ecx
push dword [ebp + eax*4 - 0x6f00]
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005112a0
test al, al
je 0x4ac702
push 0
push 0x5eff8c
lea ecx, [ebp - 0x1fb0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x24b0]
call fcn.00513c80
lea ecx, [ebp - 0x24b0]
xor esi, esi
call fcn.00513e20
test eax, eax
je 0x4ac6e6
cmp byte [edi + 0x14], 0
jne 0x4ac6e6
push 3
push 1
push esi
lea ecx, [ebp - 0x24b0]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00516b80
mov ecx, eax
call fcn.00514ca0
mov ecx, eax
call fcn.00516cc0
test eax, eax
je 0x4ac6d2
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005097e0
test al, al
je 0x4ac6d2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x24b0]
call fcn.00513e30
mov ecx, dword [ebp - 0x6ea8]
push eax
mov eax, dword [ebp - 0x6ec0]
push 0x5f6828
push dword [ebp + eax*4 - 0x6f00]
push 0x5f6828
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00492520
lea ecx, [ebp - 0x24b0]
inc esi
call fcn.00513e20
cmp esi, eax
jb 0x4ac616
mov eax, dword [ebp - 0x6ec0]
mov esi, dword [ebp - 0x6ea8]
inc eax
mov dword [ebp - 0x6ec0], eax
cmp eax, 7
jb 0x4ac5b0
mov eax, dword [ebp - 0x6ec4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6ea8], esi
mov dword [ebp - 0x6ec4], eax
cmp eax, dword [ebp - 0x6ed4]
jb 0x4ac595
cmp byte [edi + 0x14], 0
jne 0x4adf9d
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3e
push dword [eax + 0x34]
call fcn.004ea4c0
push 0xc
lea ecx, [ebp - 0x20f0]
call fcn.00401d00
lea ecx, [ebp - 0x20f0]
call fcn.00516ef0
xor esi, esi
mov byte [ebp - 4], 8
mov dword [ebp - 0x6ec4], esi
test esi, esi
jne 0x4ac76d
push 0x60a028
jmp 0x4ac788
cmp dword [ebp - 0x6ec0], 1
jne 0x4ac793
cmp byte [edi + 0xc0], 0
je 0x4ac8d1
push 0x60a0c0
lea ecx, [ebp - 0x1f98]
call fcn.00516e30
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4ac8c1
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec0], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005110a0
test al, al
je 0x4ac8c1
mov esi, dword [ebp - 0x6ec0]
cmp byte [edi + 0x14], 0
jne 0x4ac8b5
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a8]
push eax
push 1
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x20f0]
call fcn.00516b80
push eax
mov ecx, edi
call fcn.00493c40
test al, al
je 0x4ac899
push 0
lea ecx, [ebp - 0x20f0]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00492520
test al, al
je 0x4ac899
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f98]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00516d20
push eax
mov ecx, edi
call fcn.00492520
lea eax, [ebp - 0x6c1c]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.005110a0
test al, al
jne 0x4ac7e5
mov dword [ebp - 0x6ec0], esi
mov esi, dword [ebp - 0x6ec4]
inc esi
mov dword [ebp - 0x6ec4], esi
cmp esi, 2
jb 0x4ac762
mov ecx, edi
call fcn.00492c20
test al, al
je 0x4adf92
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x41
push dword [eax + 0x34]
call fcn.004ea4c0
push 4
lea ecx, [ebp - 0x1fb4]
call fcn.00401d20
lea ecx, [ebp - 0x1fb4]
call fcn.00511760
push 4
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 9
call fcn.00401d20
lea ecx, [ebp - 0x205c]
call fcn.00511760
push 4
lea ecx, [ebp - 0x2004]
mov byte [ebp - 4], 0xa
call fcn.00401d20
lea ecx, [ebp - 0x2004]
call fcn.00511760
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x6f58]
mov dword [ebp - 0x6f58], 0x60a16c
mov dword [ebp - 0x6f54], 0x60a188
mov dword [ebp - 0x6f50], 0x60a1d0
mov dword [ebp - 0x6f4c], 0x60a210
mov dword [ebp - 0x6f48], 0x60a27c
mov dword [ebp - 0x6f44], 0x60a2a0
mov dword [ebp - 0x6f40], 0x60a2f0
mov dword [ebp - 0x6f3c], 0x60a320
mov dword [ebp - 0x6f38], 0x60a378
mov dword [ebp - 0x6f34], 0x60a3b8
mov dword [ebp - 0x6ea8], 0
mov dword [ebp - 0x6eb0], edx
nop
mov al, byte [edi + 0x14]
test al, al
jne 0x4adf71
push 0
push 0x20019
push dword [edx]
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4acc63
xor esi, esi
cmp byte [edi + 0x14], 0
jne 0x4acc63
lea eax, [ebp - 0x6c1c]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.005110a0
test al, al
je 0x4acc63
lea ecx, [ebp - 0x1fb0]
call fcn.00516d20
lea ecx, [ebp - 0x2148]
call fcn.00516d20
lea ecx, [ebp - 0x20f0]
call fcn.00516d20
test dword [ebp - 0x6ea8], 1
jne 0x4acb19
mov eax, dword [ebp - 0x6eb0]
lea ecx, [ebp - 0x1f98]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Command
push dword [ebp - 0x6c1c]
push 0x5ed514
push dword [eax]
call fcn.00516b20
lea eax, [ebp - 0x1fb0]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.005112a0
test al, al
je 0x4acace
lea ecx, [ebp - 0x1fb0]
call fcn.00516cc0
test eax, eax
je 0x4acace
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005097e0
test al, al
jne 0x4acbdf
lea ecx, [ebp - 0x1fb0]
jmp 0x4acbda
lea eax, [ebp - 0x20f0]
push eax
push str.DelegateExecute
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.005112a0
test al, al
je 0x4acb08
lea ecx, [ebp - 0x20f0]
call fcn.00516cc0
test eax, eax
jne 0x4acbb4
lea eax, [ebp - 0x20f0]
push eax
push 0x60a424
jmp 0x4acb8a
mov ecx, dword [ebp - 0x6c1c]
call fcn.0050f2e0
test al, al
je 0x4acb4e
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a8]
push eax
push 1
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x20f0]
call fcn.00516b80
jmp 0x4acbc8
mov eax, dword [ebp - 0x6eb0]
lea ecx, [ebp - 0x1f98]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
push 0x5ed514
push dword [eax]
call fcn.00516b20
lea eax, [ebp - 0x20f0]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.005112a0
test al, al
je 0x4acbdf
lea ecx, [ebp - 0x20f0]
call fcn.00516cc0
test eax, eax
je 0x4acbdf
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a8]
push eax
lea eax, [ebp - 0x20f0]
push eax
mov ecx, edi
call fcn.00493c40
test al, al
jne 0x4acbdf
lea ecx, [ebp - 0x20f0]
call fcn.00516d20
push 0
lea ecx, [ebp - 0x20f0]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00492520
test al, al
je 0x4acc58
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1f98]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00516d20
push eax
mov ecx, edi
call fcn.00492520
inc esi
cmp byte [edi + 0x14], 0
je 0x4ac9f3
mov ecx, dword [ebp - 0x6ea8]
mov edx, dword [ebp - 0x6eb0]
inc ecx
add edx, 4
mov dword [ebp - 0x6ea8], ecx
mov dword [ebp - 0x6eb0], edx
cmp ecx, 0xa
jb 0x4ac9c0
mov al, byte [edi + 0x14]
test al, al
jne 0x4adf71
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x46
push dword [eax + 0x34]
call fcn.004ea4c0
xor eax, eax
mov dword [ebp - 0x6f58], 0x60a440
mov dword [ebp - 0x6f54], 0x60a4e0
mov dword [ebp - 0x6ea8], eax
nop
mov cl, byte [edi + 0x14]
test cl, cl
jne 0x4adf71
push 0
push 0x20019
push dword [ebp + eax*4 - 0x6f58]
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4acdad
xor esi, esi
cmp byte [edi + 0x14], 0
jne 0x4acdad
lea eax, [ebp - 0x6c1c]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.005110a0
test al, al
je 0x4acdad
mov eax, dword [ebp - 0x6ea8]
lea ecx, [ebp - 0x2148]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
push 0x5ed514
push dword [ebp + eax*4 - 0x6f58]
call fcn.00516b20
lea eax, [ebp - 0x1fb0]
push eax
push str.Debugger
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.005112a0
test al, al
je 0x4acda2
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005097e0
test al, al
je 0x4acda2
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00492520
inc esi
cmp byte [edi + 0x14], 0
je 0x4accf8
mov eax, dword [ebp - 0x6ea8]
inc eax
mov dword [ebp - 0x6ea8], eax
cmp eax, 2
jb 0x4accc0
mov cl, byte [edi + 0x14]
test cl, cl
jne 0x4adf71
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x48
push dword [eax + 0x34]
call fcn.004ea4c0
push 0x60a640
lea ecx, [ebp - 0x2120]
mov dword [ebp - 0x6f58], 0x60a598
mov dword [ebp - 0x6f54], 0x60a5bc
mov dword [ebp - 0x6f50], 0x60a5ec
mov dword [ebp - 0x6f4c], 0x60a618
call fcn.00516e30
push 0xc
lea ecx, [ebp - 0x23e0]
call fcn.00401d00
push 1
push 0x5f014c
lea ecx, [ebp - 0x23e0]
call fcn.00516e80
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 0xc
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4ad08d
xor eax, eax
mov dword [ebp - 0x6eb0], eax
nop word [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4adf66
cmp eax, 1
jne 0x4acecf
push 0x60a6b0
lea ecx, [ebp - 0x2120]
call fcn.00516e30
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4ad08d
push 0x5f3998
lea ecx, [ebp - 0x23e0]
call fcn.00516e30
mov eax, dword [ebp - 0x6eb0]
lea ecx, [ebp - 0x1fb0]
push ecx
push dword [ebp + eax*4 - 0x6f58]
lea ecx, [ebp - 0x1f74]
call fcn.00511410
test al, al
je 0x4ad077
lea ecx, [ebp - 0x1fb0]
call fcn.005167b0
test al, al
jne 0x4ad077
push 0x60a704
lea ecx, [ebp - 0x1fb0]
call fcn.00516de0
test al, al
jne 0x4ad077
push 1
lea ecx, [ebp - 0x23e0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x24b0]
call fcn.00513c80
lea ecx, [ebp - 0x24b0]
xor esi, esi
call fcn.00513e20
test eax, eax
je 0x4ad077
cmp byte [edi + 0x14], 0
jne 0x4ad077
push 3
push 1
push esi
lea ecx, [ebp - 0x24b0]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00516b80
mov ecx, eax
call fcn.00514ca0
mov ecx, eax
call fcn.005167b0
test al, al
jne 0x4ad063
lea ecx, [ebp - 0x1fb0]
call fcn.00516cc0
cmp eax, 5
jl 0x4acfbd
push 0
push 1
push 1
push 0
push 0x5ed518
lea ecx, [ebp - 0x1fb0]
call fcn.00515510
test eax, eax
jne 0x4acfe3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x1fb0]
call fcn.00515270
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005097e0
test al, al
je 0x4ad063
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x24b0]
call fcn.00513e30
push eax
mov eax, dword [ebp - 0x6eb0]
lea ecx, [ebp - 0x2120]
push 0x5f6828
push dword [ebp + eax*4 - 0x6f58]
push 0x5f6828
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00492520
lea ecx, [ebp - 0x24b0]
inc esi
call fcn.00513e20
cmp esi, eax
jb 0x4acf55
mov eax, dword [ebp - 0x6eb0]
inc eax
mov dword [ebp - 0x6eb0], eax
cmp eax, 4
jb 0x4ace70
cmp byte [edi + 0x14], 0
jne 0x4adf66
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x4b
push dword [eax + 0x34]
call fcn.004ea4c0
movsd xmm0, qword [0x6a40a0]
mov eax, 0x60a778
comisd xmm0, xmmword [edi + 0x298]
mov ecx, 0x60a710
cmovbe ecx, eax
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6eb0], ecx
test eax, eax
je 0x4ad131
mov eax, dword [ebp - 0x6ecc]
lea edx, [edi + 0x3c]
mov dword [ebp - 0x6ea8], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push esi
mov ecx, edx
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x6ea8]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x6ea8], 0xc
lea edx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
mov ecx, dword [ebp - 0x6eb0]
cmp esi, eax
jb 0x4ad0e6
mov esi, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push dword [ebp - 0x6ed8]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x6eb1], 0
je 0x4ad195
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6eb0]
inc eax
push dword [ebp - 0x6edc]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp dword [ebp - 0x6ed4], 0
mov dword [ebp - 0x6eb0], 0
jbe 0x4ad373
mov dword [ebp - 0x6ea8], esi
cmp byte [edi + 0x14], 0
jne 0x4adf66
push 0
push 0x20019
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005116f0
test al, al
je 0x4ad351
lea eax, [ebp - 0x6c1c]
mov dword [ebp - 0x6ec4], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00511000
test al, al
je 0x4ad351
cmp byte [edi + 0x14], 0
jne 0x4ad34b
push dword [ebp - 0x6c1c]
lea ecx, [ebp - 0x1fb0]
call fcn.00516e30
lea ecx, [ebp - 0x1fb0]
call fcn.00516cc0
mov esi, eax
cmp esi, 3
jl 0x4ad323
push 1
lea ecx, [ebp - 0x1fb0]
call fcn.00516d60
cmp word [eax], 0x3a
jne 0x4ad323
push 2
lea ecx, [ebp - 0x1fb0]
call fcn.00516d60
cmp word [eax], 0x5c
jne 0x4ad323
movsd xmm0, qword [edi + 0x298]
comisd xmm0, xmmword [0x6a40a8]
jbe 0x4ad2d3
cmp esi, 0x14
jle 0x4ad2d3
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x60a810
lea ecx, [ebp - 0x1fb0]
call fcn.00515510
mov edx, eax
lea ecx, [esi - 0xf]
cmp edx, ecx
jge 0x4ad2bd
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x60a834
lea ecx, [ebp - 0x1fb0]
call fcn.00515510
mov edx, eax
lea eax, [esi - 0x13]
cmp edx, eax
jle 0x4ad2d3
lea eax, [edx - 1]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.005158b0
mov ecx, dword [ebp - 0x6ea8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6c1c]
push 0x5f6828
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00492520
mov esi, dword [ebp - 0x6ec4]
lea eax, [ebp - 0x6c1c]
inc esi
lea ecx, [ebp - 0x1f74]
push eax
push esi
mov dword [ebp - 0x6ec4], esi
call fcn.00511000
test al, al
jne 0x4ad204
mov esi, dword [ebp - 0x6ea8]
mov eax, dword [ebp - 0x6eb0]
add esi, 0xc
inc eax
mov dword [ebp - 0x6ea8], esi
mov dword [ebp - 0x6eb0], eax
cmp eax, dword [ebp - 0x6ed4]
jb 0x4ad1b2
cmp byte [edi + 0x14], 0
jne 0x4adf66
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x50
push dword [eax + 0x34]
call fcn.004ea4c0
push 0xc
lea ecx, [ebp - 0x212c]
call fcn.00401d00
push 0xbb8
push 0
lea ecx, [ebp - 0x212c]
call fcn.004040b0
mov byte [ebp - 4], 0xd
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4ad412
mov eax, dword [ebp - 0x6ecc]
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push dword [ebp - 0x6ea8]
lea ecx, [edi + 0x3c]
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov edx, 0x60a85c
mov ecx, eax
call fcn.004ce6c0
add dword [ebp - 0x6ea8], 0xc
inc esi
mov eax, dword [edi + 0x30]
cmp esi, eax
jb 0x4ad3d0
mov ecx, dword [ebp - 0x6ecc]
lea eax, [eax + eax*2]
push 0
push 0
push 0x16
lea ecx, [ecx + eax*4]
call fcn.005164d0
mov eax, dword [ebp - 0x6ecc]
xor esi, esi
mov dword [ebp - 0x6ec4], eax
nop word [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4adf5b
push 1
lea ecx, [ebp - 0x212c]
push ecx
mov ecx, eax
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0048ff00
test al, al
je 0x4ad47b
mov eax, dword [ebp - 0x6ec4]
inc esi
add eax, 0xc
mov dword [ebp - 0x6ec4], eax
cmp esi, dword [edi + 0x30]
jbe 0x4ad440
cmp byte [edi + 0x14], 0
jne 0x4adf5b
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x51
push dword [eax + 0x34]
call fcn.004ea4c0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4ad51a
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.005167b0
test al, al
jne 0x4ad514
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2910]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00516b20
push 1
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0048ff00
test al, al
je 0x4ad51a
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4ad4a0
cmp byte [edi + 0x14], 0
jne 0x4adf5b
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x52
push dword [eax + 0x34]
call fcn.004ea4c0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4ad5bd
nop
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.005167b0
test al, al
jne 0x4ad5b7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60a874
lea ecx, [ebp - 0x2238]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00516b20
push 1
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0048ff00
test al, al
je 0x4ad5bd
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4ad540
cmp byte [edi + 0x14], 0
jne 0x4adf5b
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x53
push dword [eax + 0x34]
call fcn.004ea4c0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4ad65c
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.005167b0
test al, al
jne 0x4ad656
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00516b20
push 0
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0048ff00
test al, al
je 0x4ad65c
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4ad5e2
cmp byte [edi + 0x14], 0
jne 0x4adf5b
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4ad6c0
mov eax, dword [ebp - 0x6ecc]
mov dword [ebp - 0x6ea8], eax
nop dword [eax]
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push dword [ebp - 0x6ea8]
lea ecx, [edi + 0x3c]
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov edx, 0x5f95e0
mov ecx, eax
call fcn.004ce6c0
add dword [ebp - 0x6ea8], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4ad680
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x54
push dword [eax + 0x34]
call fcn.004ea4c0
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp - 0x6ecc]
push 0
push 0
lea eax, [eax + eax*2]
push 0x19
lea ecx, [ecx + eax*4]
call fcn.005164d0
mov eax, dword [ebp - 0x6ecc]
xor esi, esi
cmp byte [edi + 0x14], 0
jne 0x4adf5b
push 0
lea ecx, [ebp - 0x212c]
push ecx
mov ecx, eax
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0048ff00
test al, al
je 0x4ad72d
mov eax, dword [ebp - 0x6ecc]
inc esi
add eax, 0xc
mov dword [ebp - 0x6ecc], eax
cmp esi, dword [edi + 0x30]
jbe 0x4ad6f2
cmp byte [edi + 0x14], 0
jne 0x4adf5b
push 0xc
lea ecx, [ebp - 0x2778]
call fcn.00401d00
lea ecx, [ebp - 0x2778]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2638]
mov byte [ebp - 4], 0xe
call fcn.00401d00
lea ecx, [ebp - 0x2638]
call fcn.00516ef0
push 0x4c
lea ecx, [ebp - 0x2b20]
mov byte [ebp - 4], 0xf
call fcn.00401e20
lea ecx, [ebp - 0x2b20]
call fcn.0050a400
lea ecx, [ebp - 0x212c]
mov byte [ebp - 4], 0x10
call fcn.00403df0
xor esi, esi
mov dword [ebp - 0x6ee8], eax
test eax, eax
je 0x4ad928
cmp byte [edi + 0x14], 0
jne 0x4adf3a
push 0x5fb240
push 1
push 1
push esi
lea ecx, [ebp - 0x212c]
call fcn.00404020
mov ecx, eax
call fcn.005169d0
push eax
lea ecx, [ebp - 0x2778]
call fcn.00516b80
mov ecx, eax
call fcn.00516de0
test al, al
je 0x4ad8ee
push 0
push esi
lea ecx, [ebp - 0x212c]
call fcn.00404020
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2b20]
call fcn.0050a2c0
test al, al
je 0x4ad8ee
push esi
lea ecx, [ebp - 0x212c]
call fcn.00404020
push eax
lea ecx, [ebp - 0x2638]
call fcn.00516e00
push 1
lea ecx, [ebp - 0x2b20]
call fcn.0050a240
push eax
push esi
lea ecx, [ebp - 0x212c]
call fcn.00404020
mov ecx, eax
call fcn.00516b80
mov ecx, eax
call fcn.005167b0
test al, al
jne 0x4ad91b
lea ecx, [ebp - 0x2b20]
call fcn.0050a1e0
mov ecx, eax
call fcn.00513870
push 0
push 0
test eax, eax
je 0x4ad8cf
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b20]
call fcn.0050a1e0
push eax
push 0x5eff2c
push esi
lea ecx, [ebp - 0x212c]
call fcn.00404020
mov ecx, eax
call fcn.00515270
push 3
push esi
lea ecx, [ebp - 0x212c]
call fcn.00404020
lea edx, [edi + 0xb4]
mov ecx, eax
call fcn.005097e0
test al, al
je 0x4ad91b
jmp 0x4ad8f9
push 0x5ed51c
push 0x5f0068
push esi
lea ecx, [ebp - 0x212c]
call fcn.00404020
mov ecx, eax
call fcn.00514e30
jmp 0x4ad8f9
lea ecx, [ebp - 0x2638]
call fcn.00516d20
push 0
lea ecx, [ebp - 0x2638]
call fcn.00516ab0
push eax
push esi
lea ecx, [ebp - 0x212c]
call fcn.00404020
push eax
mov ecx, edi
call fcn.00492520
inc esi
cmp esi, dword [ebp - 0x6ee8]
jb 0x4ad7a6
cmp byte [edi + 0x14], 0
jne 0x4adf3a
mov ecx, edi
call fcn.00492c20
test al, al
je 0x4adf3a
push 0
push 0
lea ecx, [ebp - 0x212c]
call fcn.00403ef0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x55
push dword [eax + 0x34]
call fcn.004ea4c0
push 0xc
lea ecx, [ebp - 0x6c90]
call fcn.00401d00
lea ecx, [ebp - 0x6c90]
call fcn.00511780
push 0xc
lea ecx, [ebp - 0x6ca4]
mov byte [ebp - 4], 0x11
call fcn.00401d00
lea ecx, [ebp - 0x6ca4]
call fcn.00511780
push 0
push 0x20019
push 0x60a8a8
lea ecx, [ebp - 0x1fb4]
mov byte [ebp - 4], 0x12
call fcn.005116f0
test al, al
je 0x4add35
lea eax, [ebp - 0x6c90]
mov dword [ebp - 0x6ec4], 0
push eax
push 0
lea ecx, [ebp - 0x1fb4]
call fcn.005110a0
test al, al
je 0x4add35
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4add35
push dword [ebp - 0x6c90]
lea ecx, [ebp - 0x21a8]
call fcn.00516e30
push 0x60a8c0
lea ecx, [ebp - 0x21a8]
call fcn.00516da0
test al, al
je 0x4ada2f
push 0xa
push 1
push 1
push 0
push 0x60a8e4
lea ecx, [ebp - 0x21a8]
call fcn.00515510
test eax, eax
je 0x4add0d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60a8fc
push dword [ebp - 0x6c90]
lea ecx, [ebp - 0x1f98]
push 0x60a910
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x205c]
call fcn.005116f0
test al, al
je 0x4add0d
xor esi, esi
cmp byte [edi + 0x14], 0
jne 0x4add0d
nop
lea eax, [ebp - 0x6ca4]
push eax
push esi
lea ecx, [ebp - 0x205c]
call fcn.005110a0
test al, al
je 0x4add0d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6ca4]
lea ecx, [ebp - 0x1f98]
push 0x60a92c
push dword [ebp - 0x6c90]
push 0x60a910
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2004]
call fcn.005116f0
test al, al
je 0x4add02
lea eax, [ebp - 0x2878]
push eax
push 0x5fa104
lea ecx, [ebp - 0x2004]
call fcn.00511380
test al, al
je 0x4add02
cmp dword [ebp - 0x2878], 0xb
jne 0x4adb7d
lea eax, [ebp - 0x1fb0]
push eax
push 0x5fa704
lea ecx, [ebp - 0x2004]
call fcn.00511410
test al, al
je 0x4add02
push 0
lea ecx, [ebp - 0x1fb0]
call fcn.00516ab0
push eax
push 0x1000
lea ecx, [ebp - 0x1fb0]
call fcn.005162e0
lea edx, [edi + 0xb4]
mov ecx, eax
call fcn.00508460
jmp 0x4adc3b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5febe8
lea ecx, [ebp - 0x1f98]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x22ac]
call fcn.00516b20
lea eax, [ebp - 0x1fb0]
push eax
push 0x5fec00
lea ecx, [ebp - 0x22ac]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005112a0
test al, al
je 0x4adbe7
lea ecx, [ebp - 0x1fb0]
call fcn.005167b0
test al, al
je 0x4adc28
lea eax, [ebp - 0x1fb0]
push eax
push 0x5fec00
lea ecx, [ebp - 0x2004]
call fcn.00511410
test al, al
je 0x4adc11
lea ecx, [ebp - 0x1fb0]
call fcn.005167b0
test al, al
je 0x4adc28
lea eax, [ebp - 0x1fb0]
push eax
push 0x5fa704
lea ecx, [ebp - 0x2004]
call fcn.00511410
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005097e0
test al, al
je 0x4add02
lea ecx, [ebp - 0x1fb0]
call fcn.00516ab0
push eax
push 0
call dword [0x5cdaa8]
test eax, eax
je 0x4adc77
push 1
push 0
lea ecx, [ebp - 0x6f8c]
call fcn.00516e80
mov byte [ebp - 4], 0x13
or dword [ebp - 0x6f20], 1
jmp 0x4adc97
lea eax, [ebp - 0x1f98]
push eax
lea ecx, [ebp - 0x6f98]
call fcn.00516ec0
mov dword [ebp - 4], 0x114
or dword [ebp - 0x6f20], 2
push eax
lea ecx, [ebp - 0x2148]
call fcn.00516e00
mov eax, dword [ebp - 0x6f20]
test al, 2
je 0x4adcc7
and eax, 0xfffffffd
lea ecx, [ebp - 0x6f98]
mov dword [ebp - 0x6f20], eax
call fcn.00516d50
mov eax, dword [ebp - 0x6f20]
mov dword [ebp - 4], 0x112
test al, 1
je 0x4adce6
and eax, 0xfffffffe
lea ecx, [ebp - 0x6f8c]
mov dword [ebp - 0x6f20], eax
call fcn.00516d50
push 0
lea ecx, [ebp - 0x2148]
call fcn.00516ab0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00492520
inc esi
cmp byte [edi + 0x14], 0
je 0x4ada90
mov eax, dword [ebp - 0x6ec4]
lea ecx, [ebp - 0x6c90]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1fb4]
mov dword [ebp - 0x6ec4], eax
call fcn.005110a0
test al, al
jne 0x4ad9e0
mov ecx, edi
call fcn.00492c20
test al, al
je 0x4adf24
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x58
push dword [eax + 0x34]
call fcn.004ea4c0
push 4
lea ecx, [ebp - 0x6c44]
call fcn.00401d20
lea ecx, [ebp - 0x6c44]
call fcn.00401510
lea eax, [ebp - 0x2548]
mov byte [ebp - 4], 0x15
push eax
push 0x1f40
lea eax, [ebp - 0x1f70]
mov dword [ebp - 0x6c10], 0x428
push eax
mov dword [ebp - 0x2548], 0
call dword [0x5cd580]
test eax, eax
je 0x4ade74
xor ecx, ecx
test dword [ebp - 0x2548], 0xfffffffc
mov dword [ebp - 0x6ec4], ecx
jbe 0x4ade74
mov esi, dword [0x5cd330]
cmp byte [edi + 0x14], 0
jne 0x4adf19
push dword [ebp + ecx*4 - 0x1f70]
push 0x18
call dword [0x5cd450]
push eax
lea ecx, [ebp - 0x6c44]
call fcn.00401560
lea ecx, [ebp - 0x6c44]
call fcn.00401590
test al, al
jne 0x4ade56
lea eax, [ebp - 0x6c10]
push eax
push dword [ebp - 0x6c44]
call dword [0x5cd370]
test eax, eax
je 0x4ade4c
cmp byte [edi + 0x14], 0
jne 0x4adf19
lea eax, [ebp - 0x69f0]
mov ecx, edi
push eax
lea eax, [ebp - 0x212c]
push eax
call fcn.0048fe80
test al, al
je 0x4ade4c
lea eax, [ebp - 0x6c10]
push eax
push dword [ebp - 0x6c44]
call esi
test eax, eax
jne 0x4ade16
cmp byte [edi + 0x14], 0
jne 0x4adf19
mov ecx, dword [ebp - 0x6ec4]
mov eax, dword [ebp - 0x2548]
inc ecx
shr eax, 2
mov dword [ebp - 0x6ec4], ecx
cmp ecx, eax
jb 0x4addc3
cmp byte [edi + 0x14], 0
jne 0x4adf19
lea ecx, [ebp - 0x212c]
call fcn.00403df0
mov ecx, dword [edi + 8]
push 0x5a
mov dword [ebp - 0x6ea8], eax
push dword [ecx + 0x34]
mov ecx, dword [edi + 4]
call fcn.004ea4c0
mov ecx, dword [ebp - 0x6ea8]
xor esi, esi
test ecx, ecx
je 0x4adf12
xor eax, eax
mov dword [ebp - 0x6ec4], eax
nop word [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4adf12
xor edx, edx
div ecx
mov ecx, dword [edi + 4]
add eax, 0x5a
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.004ea4c0
push 0
push 0
push esi
lea ecx, [ebp - 0x212c]
call fcn.00404020
push eax
mov ecx, edi
call fcn.00492520
mov eax, dword [ebp - 0x6ec4]
inc esi
mov ecx, dword [ebp - 0x6ea8]
add eax, 0xa
mov dword [ebp - 0x6ec4], eax
cmp esi, ecx
jb 0x4adec0
mov ecx, edi
call fcn.00492c20
lea ecx, [ebp - 0x6c44]
call fcn.00401540
lea ecx, [ebp - 0x6ca4]
call fcn.00511770
lea ecx, [ebp - 0x6c90]
call fcn.00511770
lea ecx, [ebp - 0x2b20]
call fcn.00509f30
lea ecx, [ebp - 0x2638]
call fcn.00516d50
lea ecx, [ebp - 0x2778]
call fcn.00516d50
lea ecx, [ebp - 0x212c]
call fcn.00404040
lea ecx, [ebp - 0x23e0]
call fcn.00516d50
lea ecx, [ebp - 0x2004]
call fcn.005116a0
lea ecx, [ebp - 0x205c]
call fcn.005116a0
lea ecx, [ebp - 0x1fb4]
call fcn.005116a0
lea ecx, [ebp - 0x20f0]
call fcn.00516d50
lea ecx, [ebp - 0x24b0]
mov dword [ebp - 4], 0xfd
call fcn.00513e90
lea ecx, [ebp - 0x6c20]
call fcn.00402ef0
lea ecx, [ebp - 0x22fc]
call fcn.00516d50
lea ecx, [ebp - 0x21a8]
call fcn.00516d50
lea ecx, [ebp - 0x22ac]
call fcn.00516d50
lea ecx, [ebp - 0x1fb0]
mov byte [ebp - 4], 0x45
call fcn.00516d50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0
push 0x1004
push dword [eax + 0xb8]
call fcn.004ef7c0
push 0xc
lea ecx, [ebp - 0x27c8]
mov dword [ebp - 0x6eb0], eax
call fcn.00401d00
lea ecx, [ebp - 0x27c8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x27bc]
mov dword [ebp - 4], 0x116
call fcn.00401d00
lea ecx, [ebp - 0x27bc]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2928]
mov byte [ebp - 4], 0x17
call fcn.00401d00
lea ecx, [ebp - 0x2928]
call fcn.00516ef0
push 0
push 0x60a950
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x18
call fcn.00504a30
xor esi, esi
cmp dword [ebp - 0x6eb0], esi
jbe 0x4ae195
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.004ebfb0
cmp eax, 0x51
jne 0x4ae188
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x2154]
call fcn.00516ae0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x27c8]
call fcn.00516ae0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x27bc]
call fcn.00516ae0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 3
push esi
push dword [eax + 0xb8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x2928]
call fcn.00516ae0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x2928]
call fcn.00516ab0
push eax
push 0x60a9bc
lea ecx, [ebp - 0x27bc]
call fcn.00516ab0
push eax
push 0x60a9f0
lea ecx, [ebp - 0x27c8]
call fcn.00516ab0
push eax
push 0x60aa18
lea ecx, [ebp - 0x2154]
call fcn.00516ab0
push eax
push 0x6050c8
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
inc esi
cmp esi, dword [ebp - 0x6eb0]
jb 0x4ae081
push 0
push 0x60aa40
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
push 0x18
lea ecx, [ebp - 0x2998]
call fcn.00401d30
lea ecx, [ebp - 0x2998]
call fcn.00513f30
xor esi, esi
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x6eb0], esi
jbe 0x4ae387
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.004ebfb0
cmp eax, 0x52
jne 0x4ae37a
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x2154]
call fcn.00516ae0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x27c8]
call fcn.00516ae0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x27bc]
call fcn.00516ae0
push 1
push 0x5f6828
lea ecx, [ebp - 0x2154]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2998]
call fcn.00513c80
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2998]
call fcn.00513e30
push eax
push 0x60aa7c
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea ecx, [ebp - 0x2998]
call fcn.00513e20
cmp eax, 1
jbe 0x4ae2e2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2998]
call fcn.00513e30
push eax
push 0x60aa90
lea ecx, [ebp - 0x1f80]
call fcn.00515270
lea ecx, [ebp - 0x2998]
call fcn.00513e20
cmp eax, 2
jbe 0x4ae328
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 2
lea ecx, [ebp - 0x2998]
call fcn.00513e30
push eax
push 0x60aaa8
lea ecx, [ebp - 0x1f80]
call fcn.00515270
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x606594
lea ecx, [ebp - 0x27bc]
call fcn.00516ab0
push eax
push 0x60a9f0
lea ecx, [ebp - 0x27c8]
call fcn.00516ab0
push eax
push 0x60aa18
lea ecx, [ebp - 0x1f80]
call fcn.00515270
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
inc esi
cmp esi, dword [ebp - 0x6eb0]
jb 0x4ae1d1
push 0
push 0x60aac0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x603d50
call fcn.004ec540
push 0
push 0x60ab10
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x603d80
call fcn.004ec540
push 0
push 0x60aba0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
movsd xmm0, qword [edi + 0x298]
comisd xmm0, xmmword [0x6a40a8]
jbe 0x4ae429
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x603da0
call fcn.004ec540
push 0
push 0x60ac20
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x603dd4
call fcn.004ec540
push 0
push 0x60acb0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x603e04
call fcn.004ec540
push 0
push 0x60ad40
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x603e30
call fcn.004ec540
push 0
push 0x60add0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x603e68
call fcn.004ec540
push 0
push 0x60ae60
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x603eb0
call fcn.004ec540
push 0
push 0x60af00
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
movsd xmm0, qword [edi + 0x298]
lea ecx, [ebp - 0x1ff0]
xor eax, eax
comisd xmm0, xmmword [0x6a40a8]
seta al
add eax, 7
add dword [edi + 0x24], eax
call fcn.00505900
test eax, eax
je 0x4ae6d5
lea ecx, [ebp - 0x2980]
call fcn.0050b1b0
lea ecx, [ebp - 0x2980]
call fcn.0050b210
mov edi, eax
lea ecx, [ebp - 0x2980]
sub edi, dword [ebp - 0x6f74]
mov esi, edx
lea edx, [ebp - 0x1f80]
sbb esi, dword [ebp - 0x6f78]
call fcn.0050b220
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x1f80]
call fcn.00516ab0
push eax
push 0x60afa0
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push esi
push edi
xor edx, edx
lea ecx, [ebp - 0x1f80]
call fcn.0050ab60
mov edi, dword [ebp - 0x6ebc]
mov ecx, 0x60b040
push 0
push 0
push 0
cmp byte [edi + 0x14], 0
mov eax, 0x60aff8
push 0
push 0
push 0
push 0
push 0x5fe964
cmove eax, ecx
lea ecx, [ebp - 0x1f80]
push eax
push 0x60b080
call fcn.00516ab0
push eax
push 0x60b090
lea ecx, [ebp - 0x1f80]
call fcn.00516b20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
push 0
push 0x60b0c0
lea ecx, [ebp - 0x1ff0]
call fcn.00504a30
lea ecx, [ebp - 0x1ff0]
call fcn.00505920
mov edi, eax
lea ecx, [ebp - 0x1f80]
add edi, 0x26
mov esi, edx
adc esi, 0
push esi
push edi
call fcn.00515ed0
lea ecx, [ebp - 0x1f80]
call fcn.00516cc0
add eax, eax
add edi, eax
adc esi, 0
push esi
push edi
lea ecx, [ebp - 0x1f80]
call fcn.00515ed0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60b0fc
lea ecx, [ebp - 0x1f80]
call fcn.00515270
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00504c50
mov edi, dword [ebp - 0x6ebc]
jmp 0x4ae6dd
lea ecx, [edi + 0x54]
call fcn.00516d20
lea ecx, [ebp - 0x1f74]
call fcn.00510170
lea ecx, [ebp - 0x2544]
call fcn.00510170
push 5
lea ecx, [edi + 0x24c]
call fcn.00515800
lea ecx, [edi + 0x24c]
call fcn.00516ab0
push eax
push 0x80000002
call dword [0x5cd078]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x64
push dword [eax + 0x34]
call fcn.004ea4c0
cmp byte [edi + 0x14], 0
mov ecx, 0x60b140
push 0
mov eax, 0x60b124
cmove eax, ecx
mov ecx, dword [edi + 4]
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x38]
call fcn.004ed600
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60b160
lea ecx, [edi + 0x6c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00516b20
lea ecx, [ebp - 0x2154]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60b170
lea ecx, [edi + 0x6c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00516b20
lea ecx, [ebp - 0x2154]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60b180
lea ecx, [edi + 0x6c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00516b20
lea ecx, [ebp - 0x2154]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
lea ecx, [edi + 0x158]
call fcn.004debc0
lea ecx, [ebp - 0x2998]
xor esi, esi
call fcn.00513e90
lea ecx, [ebp - 0x2928]
call fcn.00516d50
lea ecx, [ebp - 0x27bc]
call fcn.00516d50
lea ecx, [ebp - 0x27c8]
call fcn.00516d50
lea ecx, [ebp - 0x2148]
call fcn.00516d50
lea ecx, [ebp - 0x6d14]
call fcn.00403650
lea ecx, [ebp - 0x2578]
call fcn.004e1e60
lea ecx, [ebp - 0x2934]
call fcn.00516d50
lea ecx, [ebp - 0x6d1c]
call fcn.00403650
lea ecx, [ebp - 0x6c78]
call fcn.00401ac0
lea ecx, [ebp - 0x1ff0]
call fcn.00401df0
lea ecx, [ebp - 0x25cc]
call fcn.00516d50
lea ecx, [ebp - 0x1f80]
call fcn.00516d50
lea ecx, [ebp - 0x2940]
call fcn.00516d50
lea ecx, [ebp - 0x1f8c]
call fcn.00516d50
lea ecx, [ebp - 0x2a2c]
call fcn.005117c0
lea ecx, [ebp - 0x29e0]
call fcn.00511770
lea ecx, [ebp - 0x6c1c]
call fcn.00511770
lea ecx, [ebp - 0x2544]
call fcn.005116a0
lea ecx, [ebp - 0x1f74]
call fcn.005116a0
lea ecx, [ebp - 0x25d8]
call fcn.00516d50
lea ecx, [ebp - 0x294c]
call fcn.00516d50
lea ecx, [ebp - 0x2644]
call fcn.00516d50
lea ecx, [ebp - 0x2668]
call fcn.00516d50
lea ecx, [ebp - 0x2958]
call fcn.00516d50
lea ecx, [ebp - 0x291c]
call fcn.00516d50
lea ecx, [ebp - 0x27d4]
call fcn.00516d50
lea ecx, [ebp - 0x26c8]
call fcn.00516d50
lea ecx, [ebp - 0x26e0]
call fcn.00516d50
lea ecx, [ebp - 0x26bc]
call fcn.00516d50
lea ecx, [ebp - 0x2890]
call fcn.00516d50
lea ecx, [ebp - 0x27e0]
call fcn.00516d50
lea ecx, [ebp - 0x2568]
call fcn.00516d50
lea ecx, [ebp - 0x2904]
call fcn.00516d50
lea ecx, [ebp - 0x28a8]
call fcn.00516d50
lea ecx, [ebp - 0x26b0]
call fcn.00516d50
lea ecx, [ebp - 0x24ec]
call fcn.00516d50
lea ecx, [ebp - 0x2910]
call fcn.00516d50
lea ecx, [ebp - 0x25e4]
call fcn.00516d50
lea ecx, [ebp - 0x29bc]
call fcn.00516d50
lea ecx, [ebp - 0x2184]
call fcn.00516d50
lea ecx, [ebp - 0x2238]
call fcn.00516d50
lea ecx, [ebp - 0x28b8]
call fcn.00516d50
lea ecx, [ebp - 0x2120]
call fcn.00516d50
lea ecx, [ebp - 0x2154]
call fcn.00516d50
lea ecx, [ebp - 0x1f98]
call fcn.00516d50
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e865
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret